last executing test programs: 3m11.742905568s ago: executing program 2 (id=50): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="140000000900", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="c3", 0x1, 0x40811, &(0x7f0000000040)={0xa, 0x4e23, 0x1ff, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) 3m8.870201615s ago: executing program 2 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) write(0xffffffffffffffff, &(0x7f0000000280)='external:t', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='65536', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='1:1', 0x3) write(0xffffffffffffffff, &(0x7f0000000840)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram1/ppl_size\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='active', 0x6) write(0xffffffffffffffff, &(0x7f0000000500)='ppl', 0x3) 3m6.354927607s ago: executing program 2 (id=72): mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) request_key(&(0x7f0000000780)='cifs.idmap\x00', &(0x7f00000007c0)={'syz', 0x2}, 0x0, 0x0) 3m6.086428004s ago: executing program 2 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3m4.164581193s ago: executing program 2 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@generic={0x61, 0x8, 0x1, 0x20}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m57.077538603s ago: executing program 2 (id=98): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf) 2m42.000288588s ago: executing program 32 (id=98): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf) 2m36.796491967s ago: executing program 5 (id=168): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, 0x0, 0x6) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x5, 0x0, 0x0, r1}) 2m34.464719037s ago: executing program 5 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2m32.619691647s ago: executing program 5 (id=178): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x800000000, 0x0, 0xffffffffffffffff}, {0x1ff, 0x7fff, 0x28e9}, {0x3, 0x0, 0x4}], 0x3, 0xbff, 0x1e, 0x0, 0x2c, 0x6e}) 2m32.268469384s ago: executing program 5 (id=182): keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffa) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[], 0x0, 0x24c, &(0x7f0000000980)="$eJzs3bFu01AUBuDjNm1DGeiMGCyxMFXAG0QoSAhLSEEZYMJSYWkRkrsYpjwGz8Aj8RiduhlRW6S4haFy4zT+PinyUX45OWfJzXBv8uHR5+OjL6efqp/fYzxOYxSxiPOIg9iK7aglzXXrot6NyxYBANw1s1k+6bsHOpRcfaooJvlOROxdSeY/VtMUAAAAAAAAAAAAXbP/HwCGx/7/zVcUk3y/+f72N/v/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP6cV9WD6j+PvvsDALpn/QeA4bH+A8DwWP8BYHjevnv/epJl01majiPOFuW8nNfXOn/5Kps+TS8cLO86K8v5TlNn02d1nrbz/eb+59fmu/HkcZ3/zl68yVr5Xhzd9vAAAAAAAAAAAAAAAAAAAACwJg7TP1rn+7fr/PBfeV1d+n2A1vn9UTwcrWwMAAAAAAAAAAAAAAAAAAAAuNNOv347zk9OPhZDL5KIWIM2Vl/cvya6Fzd4wXGswziKjoq+P5kAAAAAAAAAAAAAAAAAAGB4lod+++4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPqz/P//2yva75lE0s+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEb7FQAA//9oCI+b") r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_pidfd_open(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='bbr', 0x3) waitid$P_PIDFD(0x3, r2, 0x0, 0x2, 0x0) ptrace$cont(0x7, r0, 0x5, 0x0) fsopen(0x0, 0x1) 2m31.002251636s ago: executing program 5 (id=189): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f00000017c0)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x500, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 2m27.278616237s ago: executing program 5 (id=202): setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 2m26.95969032s ago: executing program 33 (id=202): setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 8.317871287s ago: executing program 7 (id=868): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.110505279s ago: executing program 7 (id=869): openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r8, 0xb) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) 8.040772411s ago: executing program 7 (id=870): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc4) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 7.874069657s ago: executing program 7 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) 7.724601748s ago: executing program 7 (id=875): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3c8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) 7.526527831s ago: executing program 7 (id=877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20000020) r2 = socket$inet(0x2, 0x802, 0x1) connect$inet(r2, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) 4.679577567s ago: executing program 6 (id=908): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 4.368757266s ago: executing program 6 (id=910): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd4) fcntl$notify(r0, 0x402, 0x8000003d) close_range(r0, 0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000002) syz_usb_connect(0x0, 0xb6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) 4.103784443s ago: executing program 0 (id=913): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.182498711s ago: executing program 1 (id=920): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f00000001c0)={[{@uid={'uid', 0x3d, 0xee01}}]}) 2.966182362s ago: executing program 3 (id=921): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x24, 0x0, &(0x7f0000cab000)) setns(0xc9, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') writev(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 2.797554221s ago: executing program 1 (id=923): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0xd8, 0x4, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x92, 0xc, "5cd0cf3d583946447130be3a7517a0ad4e2861b1be89cb4d28eadb80588e20cba08eb9a8364ae91b50efc012e0dbe4334f7517933f13a9b1b5a73f045dee6fbc148bfb6e6ea78500d1ed1966e72d63fb8c6466af8b8fd3f7d6a919c2c80d1443ce5505f455bdd9ac09c915e757c6023dae6b766d7e48cb96e31da8681e3ca3e8888f454236b3618a78ec6e5ae3af"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x4050) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/mem_sleep', 0x200000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}}, 0x20000000) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000000)={0x0, 0x3, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = syz_open_procfs(0x0, 0x0) writev(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x1000007ffffffa) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 2.796646177s ago: executing program 4 (id=924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xc0, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7a4f499b}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x480}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1f, 0x11}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44}, 0x800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe61, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x11, 0x34, @random="234d2de809cf76d30e185d2c0e"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2}], @chandef_params]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc78e146b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x20000090) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x10) 2.598373701s ago: executing program 0 (id=925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setns(0xc9, 0x0) r4 = gettid() openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 2.588757327s ago: executing program 3 (id=926): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0010000", @ANYRES16, @ANYBLOB="010000000021000000009d00000008000300", @ANYRES32=r1, @ANYBLOB="0a000600ffffffffffff0000060066008e880000be0133"], 0x1f0}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) 2.408843524s ago: executing program 3 (id=927): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x515}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)='f', 0x1}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000b00)=[{r7, 0x4009}], 0x1, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c5, 0xd9, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000000)={0xfffffffd, 0x2, 0x1, 'queue0\x00', 0x7}) 2.063066093s ago: executing program 4 (id=928): socket(0x2b, 0x1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e24, 0x3, 'sh\x00', 0x30, 0x660f5380, 0x3}, 0x2c) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.057622556s ago: executing program 1 (id=929): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_UIE_ON(r0, 0x40187014) 2.049881169s ago: executing program 0 (id=930): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040003000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.744754714s ago: executing program 1 (id=931): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.743080104s ago: executing program 4 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c000580080001"], 0x90}}, 0x0) 1.5191951s ago: executing program 6 (id=933): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x42) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r0, 0x800c6f40, &(0x7f0000000080)={""/4, 0x4}) 1.518640405s ago: executing program 0 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000340)={0xe, 0x17, 0x1, {0x5, './mnt'}}, 0xe) 1.465553074s ago: executing program 1 (id=935): creat(&(0x7f0000000100)='./file0\x00', 0x7a) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) faccessat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2, 0x1000) 1.307626917s ago: executing program 3 (id=936): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x8043, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'aio_iiro_16\x00', [0x0, 0x0, 0xa17, 0x4, 0x6, 0x800afa3, 0x0, 0x4, 0x5855, 0x2, 0x7, 0x9, 0x1, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0x100000, 0x8, 0xcaa2, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]}) 1.186259321s ago: executing program 4 (id=937): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) socket(0x2a, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 1.185674372s ago: executing program 6 (id=938): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 1.115338026s ago: executing program 0 (id=939): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0010000", @ANYRES16, @ANYBLOB="010000000021000000009d00000008000300", @ANYRES32=r1, @ANYBLOB="0a000600ffffffffffff0000060066008e880000be0133"], 0x1f0}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) 1.114944029s ago: executing program 1 (id=940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 866.891225ms ago: executing program 3 (id=941): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000100)={0x1, @broadcast}) 791.139803ms ago: executing program 6 (id=942): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x40400000, 0x10001, @value=0x7fffffffffffffff}) 746.994373ms ago: executing program 0 (id=943): socket$inet(0x2, 0xa, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x80000001) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)="35007270ecd1c2b558776333aa44ebee336c2599e52f28de65966ac109c11c92bbd426cdb517ba743d4954beceb31b1ccd62c2048a28dc22b6fc12c199c5adc07b11f7cd585b1fc4e87af8f8718e5dccb0d157e6", 0x54) 534.442368ms ago: executing program 3 (id=944): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdir(&(0x7f00000000c0)='./file0\x00', 0x80) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 534.002966ms ago: executing program 4 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 2.442615ms ago: executing program 6 (id=946): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 0s ago: executing program 4 (id=947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): w high-speed USB device number 3 using dummy_hcd [ 158.935826][ T6722] md: recover of RAID array md0 [ 158.935866][ T6722] md: md0: recover done. [ 159.037074][ T6727] md: recover of RAID array md0 [ 159.037111][ T6727] md: md0: recover done. [ 159.055340][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 159.056932][ T25] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 159.061033][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.104000][ T25] usb 5-1: config 0 descriptor?? [ 159.140003][ T25] usb 5-1: probing VID:PID(0424:012C) [ 159.153208][ T6730] md: recover of RAID array md0 [ 159.153233][ T6730] md: md0: recover done. [ 159.177767][ T25] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 159.191384][ T25] vub300 5-1:0.0: probe with driver vub300 failed with error -22 [ 159.248711][ T6732] md: recover of RAID array md0 [ 159.248808][ T6732] md: md0: recover done. [ 159.343327][ T6734] md: recover of RAID array md0 [ 159.343402][ T6734] md: md0: recover done. [ 159.392739][ T25] usb 5-1: USB disconnect, device number 3 [ 159.425236][ T6737] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 159.425440][ T6737] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 159.458261][ T1402] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.532100][ T6740] md: recover of RAID array md0 [ 159.532141][ T6740] md: md0: recover done. [ 159.636794][ T6741] futex_wake_op: syz.1.239 tries to shift op by 144; fix this program [ 159.636857][ T6347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 159.668504][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.676145][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 159.679366][ T6744] md: recover of RAID array md0 [ 159.679405][ T6744] md: md0: recover done. [ 159.706081][ T6347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 159.715523][ T5612] Bluetooth: hci2: command tx timeout [ 159.727190][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.731403][ T6347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 159.759155][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.781124][ T6746] md: recover of RAID array md0 [ 159.781170][ T6746] md: md0: recover done. [ 159.828611][ T1402] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.876072][ T6749] md: recover of RAID array md0 [ 159.876100][ T6749] md: md0: recover done. [ 160.140080][ T6753] MTD: Couldn't look up './dev/mtdblock0': -2 [ 160.267737][ T6347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 160.866738][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.978088][ T6758] md: recover of RAID array md0 [ 160.978125][ T6758] md: md0: recover done. [ 161.049944][ T1402] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.075943][ T6761] md: recover of RAID array md0 [ 161.076008][ T6761] md: md0: recover done. [ 161.785212][ T5612] Bluetooth: hci2: command tx timeout [ 162.252577][ T6773] md: recover of RAID array md0 [ 162.252675][ T6773] md: md0: recover done. [ 162.334521][ T1402] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.346707][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.361050][ T6777] md: recover of RAID array md0 [ 162.361085][ T6777] md: md0: recover done. [ 162.521972][ T6785] md: recover of RAID array md0 [ 162.522019][ T6785] md: md0: recover done. [ 162.630487][ T6790] md: recover of RAID array md0 [ 162.630564][ T6790] md: md0: recover done. [ 162.752983][ T6796] md: recover of RAID array md0 [ 162.753058][ T6796] md: md0: recover done. [ 162.867321][ T6799] md: recover of RAID array md0 [ 162.867365][ T6799] md: md0: recover done. [ 162.979623][ T6805] md: recover of RAID array md0 [ 162.979650][ T6805] md: md0: recover done. [ 163.001265][ T6802] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.183603][ T6809] md: recover of RAID array md0 [ 163.183649][ T6809] md: md0: recover done. [ 163.243880][ T1402] bridge_slave_1: left allmulticast mode [ 163.243912][ T1402] bridge_slave_1: left promiscuous mode [ 163.244128][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.272258][ T1402] bridge_slave_0: left allmulticast mode [ 163.272297][ T1402] bridge_slave_0: left promiscuous mode [ 163.282998][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.310205][ T6814] md: recover of RAID array md0 [ 163.310247][ T6814] md: md0: recover done. [ 163.742278][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.252'. [ 163.742479][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 164.368313][ T6820] md: recover of RAID array md0 [ 164.368367][ T6820] md: md0: recover done. [ 166.403121][ T6830] md: recover of RAID array md0 [ 166.403189][ T6830] md: md0: recover done. [ 166.548695][ T6834] md: recover of RAID array md0 [ 166.548744][ T6834] md: md0: recover done. [ 166.656438][ T6835] md: recover of RAID array md0 [ 166.656469][ T6835] md: md0: recover done. [ 166.782965][ T1402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.798945][ T6836] md: recover of RAID array md0 [ 166.798976][ T6836] md: md0: recover done. [ 166.818846][ T1402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.835411][ T1402] bond0 (unregistering): Released all slaves [ 166.921206][ T6811] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 166.926949][ T6838] md: recover of RAID array md0 [ 166.927018][ T6838] md: md0: recover done. [ 167.006875][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 167.047576][ T1402] ´: left promiscuous mode [ 167.156721][ T6841] md: recover of RAID array md0 [ 167.156761][ T6841] md: md0: recover done. [ 167.175435][ T6840] loop0: detected capacity change from 0 to 164 [ 167.211339][ T6840] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 167.270739][ T6842] md: recover of RAID array md0 [ 167.270782][ T6842] md: md0: recover done. [ 167.351692][ T6845] md: recover of RAID array md0 [ 167.351733][ T6845] md: md0: recover done. [ 167.487854][ T6848] md: recover of RAID array md0 [ 167.487930][ T6848] md: md0: recover done. [ 167.677928][ T6850] md: recover of RAID array md0 [ 167.677978][ T6850] md: md0: recover done. [ 167.798403][ T6854] md: recover of RAID array md0 [ 167.798500][ T6854] md: md0: recover done. [ 167.889886][ T6859] md: recover of RAID array md0 [ 167.889972][ T6859] md: md0: recover done. [ 168.034112][ T6864] md: recover of RAID array md0 [ 168.034158][ T6864] md: md0: recover done. [ 168.128099][ T6866] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 168.128294][ T6866] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 168.134534][ T6867] md: recover of RAID array md0 [ 168.134572][ T6867] md: md0: recover done. [ 168.258728][ T31] audit: type=1326 audit(1789743456.971:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.0.254" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc759e159 code=0x7fc00000 [ 168.300800][ T6870] md: recover of RAID array md0 [ 168.300918][ T6870] md: md0: recover done. [ 168.348687][ T6347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.380464][ T1402] hsr_slave_0: left promiscuous mode [ 168.388286][ T6871] md: recover of RAID array md0 [ 168.388357][ T6871] md: md0: recover done. [ 168.400553][ T1402] hsr_slave_1: left promiscuous mode [ 168.404185][ T1402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.404210][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.416858][ T1402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.416884][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.523621][ T1402] veth1_macvtap: left promiscuous mode [ 168.523692][ T1402] veth0_macvtap: left promiscuous mode [ 168.523812][ T1402] veth1_vlan: left promiscuous mode [ 168.523885][ T1402] veth0_vlan: left promiscuous mode [ 168.559547][ T6873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.638314][ T6876] md: recover of RAID array md0 [ 168.638390][ T6876] md: md0: recover done. [ 168.880814][ T6884] md: recover of RAID array md0 [ 168.880863][ T6884] md: md0: recover done. [ 169.044401][ T6889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 169.097308][ T6894] md: recover of RAID array md0 [ 169.097347][ T6894] md: md0: recover done. [ 169.290036][ T6901] md: recover of RAID array md0 [ 169.290103][ T6901] md: md0: recover done. [ 170.349406][ T6909] md: recover of RAID array md0 [ 170.349434][ T6909] md: md0: recover done. [ 170.498445][ T6910] md: recover of RAID array md0 [ 170.498485][ T6910] md: md0: recover done. [ 170.620711][ T6913] md: recover of RAID array md0 [ 170.620751][ T6913] md: md0: recover done. [ 171.305272][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.313664][ T6919] md: recover of RAID array md0 [ 172.313719][ T6919] md: md0: recover done. [ 172.407183][ T6921] md: recover of RAID array md0 [ 172.407228][ T6921] md: md0: recover done. [ 172.465820][ T6922] md: recover of RAID array md0 [ 172.465899][ T6922] md: md0: recover done. [ 172.626759][ T1402] team0 (unregistering): Port device team_slave_1 removed [ 172.628530][ T6924] md: recover of RAID array md0 [ 172.628607][ T6924] md: md0: recover done. [ 172.669191][ T1402] team0 (unregistering): Port device team_slave_0 removed [ 172.730214][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 172.744865][ T6929] md: recover of RAID array md0 [ 172.744914][ T6929] md: md0: recover done. [ 172.810533][ T6932] md: recover of RAID array md0 [ 172.810608][ T6932] md: md0: recover done. [ 172.877368][ T6935] md: recover of RAID array md0 [ 172.877410][ T6935] md: md0: recover done. [ 172.939778][ T6937] md: recover of RAID array md0 [ 172.939816][ T6937] md: md0: recover done. [ 173.056359][ T6942] md: recover of RAID array md0 [ 173.056398][ T6942] md: md0: recover done. [ 173.081533][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.081686][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.082005][ T6608] bridge_slave_0: entered allmulticast mode [ 173.096907][ T6608] bridge_slave_0: entered promiscuous mode [ 173.190122][ T6945] md: recover of RAID array md0 [ 173.190159][ T6945] md: md0: recover done. [ 173.207210][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 173.233391][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.234857][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.248115][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.249480][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.250721][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.252002][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.279120][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.288468][ T6946] md: recover of RAID array md0 [ 173.288511][ T6946] md: md0: recover done. [ 173.291182][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.293011][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.294370][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.299545][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.301135][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.302381][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.303696][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.307843][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.309483][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.310777][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.312152][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.313398][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.314774][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.319393][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.320709][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.322043][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.323546][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.324905][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.326827][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.329803][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.331224][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.332545][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.333922][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.338317][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.340155][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.341636][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.343148][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.344759][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.347556][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.348353][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.348538][ T6608] bridge_slave_1: entered allmulticast mode [ 173.351910][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.353354][ T6608] bridge_slave_1: entered promiscuous mode [ 173.362238][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.372947][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.396867][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.433784][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.438694][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.442177][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.445463][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.448606][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.453502][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.454884][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.460101][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.464693][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.473533][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.479969][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.489955][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.497481][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.504361][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.505992][ T6948] md: recover of RAID array md0 [ 173.506460][ T6948] md: md0: recover done. [ 173.514501][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.527447][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.530060][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.544380][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.553324][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.568031][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.584450][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.592218][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.600710][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.612886][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.622141][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.638745][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.644635][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.667885][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.669262][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.671732][ T6949] md: recover of RAID array md0 [ 173.671767][ T6949] md: md0: recover done. [ 173.690753][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.732459][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.736431][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.742382][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.749769][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.770106][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.781812][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.790241][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.791565][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.829752][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.850000][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.851376][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.852550][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.853776][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.854929][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.889450][ T6952] md: recover of RAID array md0 [ 173.889496][ T6952] md: md0: recover done. [ 173.923036][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.938060][ T6951] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 173.940639][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.949327][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.950722][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.958008][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.964250][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.969546][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.977200][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.991836][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.998257][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 173.999520][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.003669][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.022201][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.033742][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.050356][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.051649][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.052944][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.054189][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.072591][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.087026][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.089901][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.091137][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.092462][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.093799][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.112754][ T6956] md: recover of RAID array md0 [ 174.112813][ T6956] md: md0: recover done. [ 174.128418][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.148921][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.164111][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.203377][ T6944] 9pnet_fd: p9_fd_create_tcp (6944): problem connecting socket to 127.0.0.1 [ 174.348343][ T6957] md: recover of RAID array md0 [ 174.348421][ T6957] md: md0: recover done. [ 174.504127][ T6961] loop3: detected capacity change from 0 to 512 [ 174.510683][ T6963] md: recover of RAID array md0 [ 174.510717][ T6963] md: md0: recover done. [ 174.539816][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 174.656515][ T6967] md: recover of RAID array md0 [ 174.656665][ T6967] md: md0: recover done. [ 174.740389][ T6970] md: recover of RAID array md0 [ 174.740464][ T6970] md: md0: recover done. [ 174.837166][ T6972] md: recover of RAID array md0 [ 174.837206][ T6972] md: md0: recover done. [ 174.946871][ T6973] md: recover of RAID array md0 [ 174.946943][ T6973] md: md0: recover done. [ 175.051165][ T6975] md: recover of RAID array md0 [ 175.051204][ T6975] md: md0: recover done. [ 175.110816][ T6976] md: recover of RAID array md0 [ 175.110854][ T6976] md: md0: recover done. [ 175.218069][ T6977] md: recover of RAID array md0 [ 175.218111][ T6977] md: md0: recover done. [ 175.326377][ T6978] md: recover of RAID array md0 [ 175.326452][ T6978] md: md0: recover done. [ 175.440901][ T6979] md: recover of RAID array md0 [ 175.440976][ T6979] md: md0: recover done. [ 175.516475][ T6980] md: recover of RAID array md0 [ 175.516512][ T6980] md: md0: recover done. [ 175.576143][ T6983] md: recover of RAID array md0 [ 175.576181][ T6983] md: md0: recover done. [ 175.872132][ T6990] md: recover of RAID array md0 [ 175.872202][ T6990] md: md0: recover done. [ 175.939242][ T6994] md: recover of RAID array md0 [ 175.939314][ T6994] md: md0: recover done. [ 175.996343][ T6997] md: recover of RAID array md0 [ 175.996491][ T6997] md: md0: recover done. [ 176.053227][ T6998] md: recover of RAID array md0 [ 176.053270][ T6998] md: md0: recover done. [ 177.135159][ T7001] md: recover of RAID array md0 [ 177.135196][ T7001] md: md0: recover done. [ 177.199013][ T7003] md: recover of RAID array md0 [ 177.199089][ T7003] md: md0: recover done. [ 177.357703][ T7004] md: recover of RAID array md0 [ 177.357782][ T7004] md: md0: recover done. [ 177.455999][ T7005] md: recover of RAID array md0 [ 177.456039][ T7005] md: md0: recover done. [ 177.580706][ T7006] md: recover of RAID array md0 [ 177.580757][ T7006] md: md0: recover done. [ 177.736051][ T7007] md: recover of RAID array md0 [ 177.736090][ T7007] md: md0: recover done. [ 177.856267][ T7010] md: recover of RAID array md0 [ 177.856317][ T7010] md: md0: recover done. [ 177.981388][ T7011] md: recover of RAID array md0 [ 177.981437][ T7011] md: md0: recover done. [ 178.099903][ T7012] md: recover of RAID array md0 [ 178.099944][ T7012] md: md0: recover done. [ 178.259785][ T7015] md: recover of RAID array md0 [ 178.259825][ T7015] md: md0: recover done. [ 178.360403][ T7018] md: recover of RAID array md0 [ 178.360450][ T7018] md: md0: recover done. [ 178.469686][ T7021] md: recover of RAID array md0 [ 178.469725][ T7021] md: md0: recover done. [ 178.528034][ T7026] md: recover of RAID array md0 [ 178.528105][ T7026] md: md0: recover done. [ 178.610236][ T7029] md: recover of RAID array md0 [ 178.610274][ T7029] md: md0: recover done. [ 178.698540][ T7032] md: recover of RAID array md0 [ 178.698631][ T7032] md: md0: recover done. [ 178.780248][ T7035] md: recover of RAID array md0 [ 178.780325][ T7035] md: md0: recover done. [ 178.892404][ T7036] md: recover of RAID array md0 [ 178.892483][ T7036] md: md0: recover done. [ 178.968098][ T7037] md: recover of RAID array md0 [ 178.968139][ T7037] md: md0: recover done. [ 179.073451][ T7040] md: recover of RAID array md0 [ 179.073527][ T7040] md: md0: recover done. [ 179.648620][ T7043] md: recover of RAID array md0 [ 179.648662][ T7043] md: md0: recover done. [ 179.739507][ T7047] md: recover of RAID array md0 [ 179.739550][ T7047] md: md0: recover done. [ 179.771743][ T6608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.827409][ T6608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.891591][ T7048] md: recover of RAID array md0 [ 179.891635][ T7048] md: md0: recover done. [ 180.089062][ T6608] team0: Port device team_slave_0 added [ 180.102593][ T6347] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.116942][ T6608] team0: Port device team_slave_1 added [ 180.210885][ T7060] md: recover of RAID array md0 [ 180.210929][ T7060] md: md0: recover done. [ 180.302198][ T7061] jffs2: notice: (7061) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.459827][ T1387] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.459932][ T1387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.474674][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.474692][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.474721][ T6608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.506003][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.506026][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.506057][ T6608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.545388][ T7067] md: recover of RAID array md0 [ 180.545434][ T7067] md: md0: recover done. [ 180.623885][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.623975][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.738376][ T7071] md: recover of RAID array md0 [ 180.738425][ T7071] md: md0: recover done. [ 180.792774][ T7073] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.808996][ T31] audit: type=1326 audit(1789743468.520:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf39e159 code=0x7fc00000 [ 180.966896][ T7080] md: recover of RAID array md0 [ 180.966934][ T7080] md: md0: recover done. [ 181.012479][ T6608] hsr_slave_0: entered promiscuous mode [ 181.021347][ T6608] hsr_slave_1: entered promiscuous mode [ 181.150364][ T7085] md: recover of RAID array md0 [ 181.150407][ T7085] md: md0: recover done. [ 181.280307][ T7092] md: recover of RAID array md0 [ 181.280348][ T7092] md: md0: recover done. [ 181.401699][ T7095] md: recover of RAID array md0 [ 181.401726][ T7095] md: md0: recover done. [ 181.425276][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 181.510093][ T7097] md: recover of RAID array md0 [ 181.510140][ T7097] md: md0: recover done. [ 181.579265][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 181.581546][ T25] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 181.589471][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.607301][ T7100] md: recover of RAID array md0 [ 181.607327][ T7100] md: md0: recover done. [ 181.617266][ T25] usb 5-1: config 0 descriptor?? [ 181.662105][ T25] usb 5-1: probing VID:PID(0424:012C) [ 181.691362][ T25] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 181.823328][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 181.823443][ T7084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.823458][ T7084] IPv6: NLM_F_CREATE should be set when creating new route [ 181.966622][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 181.966725][ T7084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.044425][ T25] vub300 5-1:0.0: probe with driver vub300 failed with error -22 [ 182.062801][ T7107] capability: warning: `syz.0.312' uses 32-bit capabilities (legacy support in use) [ 182.067878][ T7112] md: recover of RAID array md0 [ 182.067912][ T7112] md: md0: recover done. [ 182.095140][ T5758] usb 5-1: USB disconnect, device number 4 [ 183.475803][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 183.739470][ T5736] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 183.885155][ T5736] usb 4-1: Using ep0 maxpacket: 8 [ 183.894355][ T5736] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.912664][ T5736] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 183.912698][ T5736] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.912744][ T5736] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.912791][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.001020][ T5736] usbtmc 4-1:16.0: bulk endpoints not found [ 184.221003][ T7130] md: recover of RAID array md0 [ 184.221046][ T7130] md: md0: recover done. [ 184.447930][ T6608] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 184.632143][ T7142] md: recover of RAID array md0 [ 184.632183][ T7142] md: md0: recover done. [ 184.632252][ T6608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.633164][ T6608] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 185.249716][ T6608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.274466][ T6608] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 185.356236][ T7147] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 185.403575][ T6608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.429985][ T6608] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 185.462222][ T6608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.478562][ T7152] md: recover of RAID array md0 [ 185.478602][ T7152] md: md0: recover done. [ 186.654344][ T937] usb 4-1: USB disconnect, device number 6 [ 186.803104][ T7170] md: recover of RAID array md0 [ 186.803154][ T7170] md: md0: recover done. [ 186.966118][ T7171] md: recover of RAID array md0 [ 186.966167][ T7171] md: md0: recover done. [ 187.006388][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.108217][ T6608] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.144099][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.144213][ T6104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.201937][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.202049][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.248279][ T7186] md: recover of RAID array md0 [ 187.248320][ T7186] md: md0: recover done. [ 187.403631][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.323'. [ 187.403659][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 187.509970][ T7192] md: recover of RAID array md0 [ 187.510015][ T7192] md: md0: recover done. [ 187.623855][ T7178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.945416][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.007915][ T7197] md: recover of RAID array md0 [ 188.008191][ T7197] md: md0: recover done. [ 188.714361][ T7200] FAULT_INJECTION: forcing a failure. [ 188.714361][ T7200] name failslab, interval 1, probability 0, space 0, times 0 [ 188.714401][ T7200] CPU: 0 UID: 0 PID: 7200 Comm: syz.0.327 Not tainted syzkaller #0 PREEMPT(full) [ 188.714429][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 188.714444][ T7200] Call Trace: [ 188.714453][ T7200] [ 188.714464][ T7200] dump_stack_lvl+0xe8/0x150 [ 188.714506][ T7200] should_fail_ex+0x410/0x560 [ 188.714541][ T7200] should_failslab+0xa8/0x100 [ 188.714576][ T7200] __kmalloc_noprof+0xfe/0x720 [ 188.714601][ T7200] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.714631][ T7200] ? lock_acquire+0x115/0x350 [ 188.714655][ T7200] ? tomoyo_encode+0x2ad/0x570 [ 188.714688][ T7200] ? tomoyo_encode+0x2ad/0x570 [ 188.714729][ T7200] tomoyo_encode+0x2ad/0x570 [ 188.714774][ T7200] tomoyo_mount_permission+0x3a4/0x9e0 [ 188.714807][ T7200] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 188.714842][ T7200] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 188.714871][ T7200] ? kasan_save_track+0x4f/0x80 [ 188.714953][ T7200] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.714988][ T7200] security_sb_mount+0xe4/0x320 [ 188.715025][ T7200] path_mount+0xbc/0x1050 [ 188.715064][ T7200] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.715092][ T7200] ? user_path_at+0xd4/0x160 [ 188.715133][ T7200] __se_sys_mount+0x31d/0x420 [ 188.715175][ T7200] ? __pfx___se_sys_mount+0x10/0x10 [ 188.715217][ T7200] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.715244][ T7200] ? __x64_sys_mount+0x20/0xc0 [ 188.715280][ T7200] do_syscall_64+0x166/0x520 [ 188.715322][ T7200] ? trace_irq_disable+0x3b/0x140 [ 188.715347][ T7200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.715378][ T7200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.715403][ T7200] RIP: 0033:0x7f1fc759e159 [ 188.715424][ T7200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.715442][ T7200] RSP: 002b:00007f1fc83a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.715467][ T7200] RAX: ffffffffffffffda RBX: 00007f1fc7825fa0 RCX: 00007f1fc759e159 [ 188.715485][ T7200] RDX: 0000200000000380 RSI: 00002000000001c0 RDI: 0000000000000000 [ 188.715502][ T7200] RBP: 00007f1fc763506b R08: 0000000000000000 R09: 0000000000000000 [ 188.715517][ T7200] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 188.715533][ T7200] R13: 00007f1fc7826038 R14: 00007f1fc7825fa0 R15: 00007ffd2587b328 [ 188.715572][ T7200] [ 189.106770][ T7204] md: recover of RAID array md0 [ 189.106859][ T7204] md: md0: recover done. [ 189.180481][ T6347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.197078][ T7212] md: recover of RAID array md0 [ 189.199122][ T7212] md: md0: recover done. [ 189.410672][ T7222] md: recover of RAID array md0 [ 189.410716][ T7222] md: md0: recover done. [ 189.518088][ T7227] md: recover of RAID array md0 [ 189.518128][ T7227] md: md0: recover done. [ 189.637534][ T7230] md: recover of RAID array md0 [ 189.637619][ T7230] md: md0: recover done. [ 189.788895][ T7234] md: recover of RAID array md0 [ 189.788941][ T7234] md: md0: recover done. [ 189.828810][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 189.928803][ T7244] md: recover of RAID array md0 [ 189.928847][ T7244] md: md0: recover done. [ 190.147522][ T7249] md: recover of RAID array md0 [ 190.147563][ T7249] md: md0: recover done. [ 190.713757][ T7262] jffs2: notice: (7262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 192.761663][ T7270] md: recover of RAID array md0 [ 192.761750][ T7270] md: md0: recover done. [ 192.879530][ T6347] veth0_vlan: entered promiscuous mode [ 192.919067][ T7275] md: recover of RAID array md0 [ 192.919136][ T7275] md: md0: recover done. [ 192.929296][ T6347] veth1_vlan: entered promiscuous mode [ 193.186313][ T6347] veth0_macvtap: entered promiscuous mode [ 193.328544][ T6347] veth1_macvtap: entered promiscuous mode [ 193.386980][ T7288] md: recover of RAID array md0 [ 193.387181][ T7288] md: md0: recover done. [ 193.711359][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.711435][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.178227][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.208868][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.388477][ T7295] md: recover of RAID array md0 [ 194.388518][ T7295] md: md0: recover done. [ 194.388735][ T6103] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.547792][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.549591][ T1402] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.549627][ T1402] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.690089][ T7302] md: recover of RAID array md0 [ 194.690175][ T7302] md: md0: recover done. [ 194.741597][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.741622][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.832310][ T7305] md: recover of RAID array md0 [ 194.832351][ T7305] md: md0: recover done. [ 195.046381][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.046407][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.086635][ T7312] md: recover of RAID array md0 [ 195.086721][ T7312] md: md0: recover done. [ 195.112736][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.340024][ T7315] md: recover of RAID array md0 [ 195.340068][ T7315] md: md0: recover done. [ 195.678758][ T7321] md: recover of RAID array md0 [ 195.679113][ T7321] md: md0: recover done. [ 195.744323][ T7322] overlayfs: failed to clone upperpath [ 195.848208][ T7323] fuse: Bad value for 'fd' [ 196.579494][ T7325] md: recover of RAID array md0 [ 196.579571][ T7325] md: md0: recover done. [ 196.708246][ T7331] md: recover of RAID array md0 [ 196.708287][ T7331] md: md0: recover done. [ 196.972045][ T7337] md: recover of RAID array md0 [ 196.972089][ T7337] md: md0: recover done. [ 196.983133][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 199.069081][ T7354] md: recover of RAID array md0 [ 199.069164][ T7354] md: md0: recover done. [ 199.326488][ T7359] md: recover of RAID array md0 [ 199.326566][ T7359] md: md0: recover done. [ 199.491696][ T7361] md: recover of RAID array md0 [ 199.491722][ T7361] md: md0: recover done. [ 199.549244][ T6608] veth0_vlan: entered promiscuous mode [ 199.586778][ T6608] veth1_vlan: entered promiscuous mode [ 199.646515][ T7367] md: recover of RAID array md0 [ 199.646874][ T7367] md: md0: recover done. [ 200.643307][ T6608] veth0_macvtap: entered promiscuous mode [ 200.689715][ T6608] veth1_macvtap: entered promiscuous mode [ 200.781627][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.816311][ T7379] md: recover of RAID array md0 [ 200.816350][ T7379] md: md0: recover done. [ 200.832386][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.910471][ T1096] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.911725][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.911772][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.911822][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.016012][ T7382] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.078808][ T7383] md: recover of RAID array md0 [ 201.078838][ T7383] md: md0: recover done. [ 201.314468][ T6105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.314497][ T6105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.324104][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.324129][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.453580][ T7397] md: recover of RAID array md0 [ 201.453628][ T7397] md: md0: recover done. [ 201.622515][ T7398] fuse: Invalid rootmode [ 202.298933][ T7399] md: recover of RAID array md0 [ 202.298978][ T7399] md: md0: recover done. [ 202.430687][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.364'. [ 202.508749][ T7407] md: recover of RAID array md0 [ 202.508794][ T7407] md: md0: recover done. [ 202.596044][ T7405] loop4: detected capacity change from 0 to 512 [ 202.671650][ T7415] md: recover of RAID array md0 [ 202.671724][ T7415] md: md0: recover done. [ 204.029649][ T7426] jffs2: notice: (7426) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 204.249755][ T7424] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 204.628537][ T7429] md: recover of RAID array md0 [ 204.628766][ T7429] md: md0: recover done. [ 205.160719][ T7435] md: recover of RAID array md0 [ 205.160749][ T7435] md: md0: recover done. [ 205.446893][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 205.819456][ T7449] md: recover of RAID array md0 [ 205.819497][ T7449] md: md0: recover done. [ 205.963167][ T7452] md: recover of RAID array md0 [ 205.963201][ T7452] md: md0: recover done. [ 206.029804][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 206.029859][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 206.029859][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 206.116381][ T7457] md: recover of RAID array md0 [ 206.116424][ T7457] md: md0: recover done. [ 207.559328][ T7468] md: recover of RAID array md0 [ 207.559363][ T7468] md: md0: recover done. [ 207.739591][ T7471] md: recover of RAID array md0 [ 207.739633][ T7471] md: md0: recover done. [ 207.786580][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 207.892879][ T7477] bond1: option mode: unable to set because the bond device has slaves [ 208.428401][ T7480] md: recover of RAID array md0 [ 208.428552][ T7480] md: md0: recover done. [ 208.895049][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 208.902093][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 208.907066][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 208.907087][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 208.921299][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.036510][ T10] usb 7-1: config 0 descriptor?? [ 209.885193][ T10] usb 7-1: probing VID:PID(0424:012C) [ 209.966466][ T7482] jffs2: notice: (7482) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 209.982662][ T10] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 210.073439][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.381'. [ 210.073592][ T7467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.073605][ T7467] IPv6: NLM_F_CREATE should be set when creating new route [ 210.124586][ T10] vub300 7-1:0.0: probe with driver vub300 failed with error -22 [ 210.199829][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.381'. [ 210.199939][ T7467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.201889][ T5758] usb 7-1: USB disconnect, device number 2 [ 210.230160][ T7489] md: recover of RAID array md0 [ 210.230186][ T7489] md: md0: recover done. [ 210.427223][ T7496] md: recover of RAID array md0 [ 210.427306][ T7496] md: md0: recover done. [ 210.566055][ T7501] md: recover of RAID array md0 [ 210.566097][ T7501] md: md0: recover done. [ 210.668790][ T7508] md: recover of RAID array md0 [ 210.670297][ T7508] md: md0: recover done. [ 211.145226][ T4927] Bluetooth: hci5: command 0x0406 tx timeout [ 211.823763][ T7514] md: recover of RAID array md0 [ 211.823834][ T7514] md: md0: recover done. [ 211.907622][ T7516] loop0: detected capacity change from 0 to 164 [ 211.923243][ T7516] isofs_fill_super: root inode is not a directory. Corrupted media? [ 211.947008][ T7517] md: recover of RAID array md0 [ 211.947045][ T7517] md: md0: recover done. [ 212.036691][ T7521] futex_wake_op: syz.0.398 tries to shift op by 144; fix this program [ 212.420054][ T7534] md: recover of RAID array md0 [ 212.420098][ T7534] md: md0: recover done. [ 213.340245][ T7537] md: recover of RAID array md0 [ 213.340327][ T7537] md: md0: recover done. [ 213.544052][ T7544] md: recover of RAID array md0 [ 213.544094][ T7544] md: md0: recover done. [ 213.670847][ T7551] md: recover of RAID array md0 [ 213.670891][ T7551] md: md0: recover done. [ 213.716607][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.402'. [ 213.716636][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.402'. [ 213.935030][ T7559] md: recover of RAID array md0 [ 213.935067][ T7559] md: md0: recover done. [ 214.150457][ T31] audit: type=1326 audit(1789743501.860:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.7.405" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ec7d9e159 code=0x0 [ 214.196649][ T7560] jffs2: notice: (7560) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 214.237190][ T7567] md: recover of RAID array md0 [ 214.237659][ T7567] md: md0: recover done. [ 214.443190][ T7573] md: recover of RAID array md0 [ 214.443224][ T7573] md: md0: recover done. [ 214.556713][ T5758] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.671607][ T7582] md: recover of RAID array md0 [ 214.671677][ T7582] md: md0: recover done. [ 214.707507][ T5758] usb 5-1: Using ep0 maxpacket: 8 [ 214.708940][ T5758] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 214.714623][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.746250][ T5758] usb 5-1: config 0 descriptor?? [ 214.783918][ T5758] usb 5-1: probing VID:PID(0424:012C) [ 214.795412][ T5758] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 214.811603][ T5758] vub300 5-1:0.0: probe with driver vub300 failed with error -22 [ 214.899235][ T7589] md: recover of RAID array md0 [ 214.899277][ T7589] md: md0: recover done. [ 215.197192][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 215.197290][ T7571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.198049][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 215.198134][ T7571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.201319][ T5736] usb 5-1: USB disconnect, device number 5 [ 215.208166][ T7596] md: recover of RAID array md0 [ 215.208237][ T7596] md: md0: recover done. [ 216.274379][ T7606] md: recover of RAID array md0 [ 216.274420][ T7606] md: md0: recover done. [ 218.320481][ T7626] FAULT_INJECTION: forcing a failure. [ 218.320481][ T7626] name fail_futex, interval 1, probability 0, space 0, times 0 [ 218.320521][ T7626] CPU: 1 UID: 0 PID: 7626 Comm: syz.3.424 Not tainted syzkaller #0 PREEMPT(full) [ 218.320550][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 218.320566][ T7626] Call Trace: [ 218.320576][ T7626] [ 218.320587][ T7626] dump_stack_lvl+0xe8/0x150 [ 218.320630][ T7626] should_fail_ex+0x410/0x560 [ 218.320667][ T7626] get_futex_key+0x1b4/0x1580 [ 218.320696][ T7626] ? stack_depot_save_flags+0x33/0x7f0 [ 218.320735][ T7626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.320767][ T7626] ? kasan_save_stack+0x3e/0x60 [ 218.320794][ T7626] ? kasan_record_aux_stack+0xbd/0xd0 [ 218.320844][ T7626] ? __pfx_get_futex_key+0x10/0x10 [ 218.320974][ T7626] futex_wake+0x119/0x5f0 [ 218.321071][ T7626] ? __pfx_futex_wake+0x10/0x10 [ 218.321166][ T7626] do_futex+0x458/0x4e0 [ 218.321231][ T7626] ? __pfx_do_futex+0x10/0x10 [ 218.321289][ T7626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.321334][ T7626] ? blkcg_maybe_throttle_current+0x1b0/0xb90 [ 218.321400][ T7626] __se_sys_futex+0x3a8/0x450 [ 218.321461][ T7626] ? __pfx_task_work_run+0x10/0x10 [ 218.321508][ T7626] ? __pfx___se_sys_futex+0x10/0x10 [ 218.321562][ T7626] ? rcu_is_watching+0x16/0xb0 [ 218.321623][ T7626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.321670][ T7626] ? __x64_sys_futex+0x21/0xf0 [ 218.321730][ T7626] do_syscall_64+0x166/0x520 [ 218.321780][ T7626] ? trace_irq_disable+0x3b/0x140 [ 218.321840][ T7626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.321892][ T7626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.321933][ T7626] RIP: 0033:0x7f286199e159 [ 218.321969][ T7626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.322006][ T7626] RSP: 002b:00007f286290b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 218.322049][ T7626] RAX: ffffffffffffffda RBX: 00007f2861c25fa8 RCX: 00007f286199e159 [ 218.322080][ T7626] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2861c25fac [ 218.322108][ T7626] RBP: 00007f2861c25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 218.322137][ T7626] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 218.322165][ T7626] R13: 00007f2861c26038 R14: 00007ffeb97ffc80 R15: 00007ffeb97ffd68 [ 218.322231][ T7626] [ 218.425208][ T7623] netlink: 324 bytes leftover after parsing attributes in process `syz.0.419'. [ 218.926544][ T7637] md: recover of RAID array md0 [ 218.926615][ T7637] md: md0: recover done. [ 219.371724][ T7640] md: recover of RAID array md0 [ 219.371767][ T7640] md: md0: recover done. [ 219.416879][ T31] audit: type=1326 audit(1789743507.130:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.7.425" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ec7d9e159 code=0x0 [ 220.585410][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.856678][ T7655] md: recover of RAID array md0 [ 221.856792][ T7655] md: md0: recover done. [ 222.530234][ T7646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.255283][ T7663] md: recover of RAID array md0 [ 223.255330][ T7663] md: md0: recover done. [ 223.382175][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 223.382220][ T7668] netlink: 48 bytes leftover after parsing attributes in process `syz.0.435'. [ 223.423549][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 223.459493][ T7673] md: recover of RAID array md0 [ 223.459772][ T7673] md: md0: recover done. [ 223.555196][ T7675] netlink: 324 bytes leftover after parsing attributes in process `syz.3.438'. [ 223.712186][ T7682] md: recover of RAID array md0 [ 223.712229][ T7682] md: md0: recover done. [ 223.855615][ T7685] md: recover of RAID array md0 [ 223.855658][ T7685] md: md0: recover done. [ 223.986329][ T7694] md: recover of RAID array md0 [ 223.986368][ T7694] md: md0: recover done. [ 224.216644][ T7698] md: recover of RAID array md0 [ 224.216685][ T7698] md: md0: recover done. [ 224.367909][ T7703] md: recover of RAID array md0 [ 224.367948][ T7703] md: md0: recover done. [ 224.490249][ T7711] md: recover of RAID array md0 [ 224.490288][ T7711] md: md0: recover done. [ 224.585706][ T7717] md: recover of RAID array md0 [ 224.585770][ T7717] md: md0: recover done. [ 224.644788][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 224.644844][ T7720] netlink: 48 bytes leftover after parsing attributes in process `syz.3.452'. [ 224.656445][ T7718] netlink: 324 bytes leftover after parsing attributes in process `syz.1.451'. [ 224.677555][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 224.691447][ T7722] md: recover of RAID array md0 [ 224.691489][ T7722] md: md0: recover done. [ 224.696575][ T7713] FAULT_INJECTION: forcing a failure. [ 224.696575][ T7713] name failslab, interval 1, probability 0, space 0, times 0 [ 224.696608][ T7713] CPU: 0 UID: 0 PID: 7713 Comm: syz.7.448 Not tainted syzkaller #0 PREEMPT(full) [ 224.696635][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 224.696650][ T7713] Call Trace: [ 224.696660][ T7713] [ 224.696671][ T7713] dump_stack_lvl+0xe8/0x150 [ 224.696716][ T7713] should_fail_ex+0x410/0x560 [ 224.696753][ T7713] should_failslab+0xa8/0x100 [ 224.696791][ T7713] __kmalloc_cache_noprof+0xa3/0x600 [ 224.696819][ T7713] ? __hw_addr_create+0x62/0x240 [ 224.696852][ T7713] ? __hw_addr_create+0x62/0x240 [ 224.696895][ T7713] __hw_addr_create+0x62/0x240 [ 224.696934][ T7713] __hw_addr_add_ex+0x1ce/0x520 [ 224.696978][ T7713] dev_mc_add+0xa1/0x120 [ 224.697019][ T7713] igmp_group_added+0x1df/0x910 [ 224.697059][ T7713] ? __pfx_igmp_group_added+0x10/0x10 [ 224.697096][ T7713] ? __local_bh_enable_ip+0xd6/0x140 [ 224.697130][ T7713] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.697166][ T7713] ____ip_mc_inc_group+0xb46/0xdb0 [ 224.697207][ T7713] __ip_mc_join_group+0x430/0x500 [ 224.697240][ T7713] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.697277][ T7713] do_ip_setsockopt+0x2013/0x2e30 [ 224.697315][ T7713] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 224.697350][ T7713] ? do_futex+0x3e7/0x4e0 [ 224.697383][ T7713] ? __asan_memcpy+0x40/0x70 [ 224.697411][ T7713] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.697441][ T7713] ? lock_acquire+0x115/0x350 [ 224.697479][ T7713] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.697509][ T7713] ? aa_sock_opt_perm+0xe8/0x1e0 [ 224.697548][ T7713] ip_setsockopt+0x66/0x110 [ 224.697576][ T7713] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 224.697608][ T7713] do_sock_setsockopt+0x17c/0x1b0 [ 224.697648][ T7713] __x64_sys_setsockopt+0x13d/0x1b0 [ 224.697689][ T7713] do_syscall_64+0x166/0x520 [ 224.697720][ T7713] ? trace_irq_disable+0x3b/0x140 [ 224.697746][ T7713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.697779][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.697805][ T7713] RIP: 0033:0x7f7ec7d9e159 [ 224.697828][ T7713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.697849][ T7713] RSP: 002b:00007f7ec8d2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 224.697876][ T7713] RAX: ffffffffffffffda RBX: 00007f7ec8025fa0 RCX: 00007f7ec7d9e159 [ 224.697895][ T7713] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000005 [ 224.697911][ T7713] RBP: 00007f7ec7e3506b R08: 000000000000000c R09: 0000000000000000 [ 224.697928][ T7713] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 224.697945][ T7713] R13: 00007f7ec8026038 R14: 00007f7ec8025fa0 R15: 00007ffd86882dc8 [ 224.697985][ T7713] [ 225.089835][ T7730] md: recover of RAID array md0 [ 225.091536][ T7730] md: md0: recover done. [ 225.295751][ T7740] md: recover of RAID array md0 [ 225.295791][ T7740] md: md0: recover done. [ 225.839159][ T7759] md: recover of RAID array md0 [ 225.839200][ T7759] md: md0: recover done. [ 225.926928][ T7754] MTD: Couldn't look up './dev/mtdblock0': -2 [ 225.990308][ T7762] md: recover of RAID array md0 [ 225.990354][ T7762] md: md0: recover done. [ 226.145568][ T7764] md: recover of RAID array md0 [ 226.145608][ T7764] md: md0: recover done. [ 226.255624][ T7768] md: recover of RAID array md0 [ 226.255665][ T7768] md: md0: recover done. [ 226.392146][ T7772] binder: 7770:7772 ioctl c00c6211 0 returned -14 [ 226.469358][ T7774] overlayfs: missing 'lowerdir' [ 226.489694][ T7779] md: recover of RAID array md0 [ 226.489733][ T7779] md: md0: recover done. [ 226.490473][ T7778] netlink: 324 bytes leftover after parsing attributes in process `syz.3.471'. [ 226.913456][ T7784] md: recover of RAID array md0 [ 226.913491][ T7784] md: md0: recover done. [ 227.067329][ T7789] md: recover of RAID array md0 [ 227.067373][ T7789] md: md0: recover done. [ 227.272585][ T7794] overlayfs: failed to clone upperpath [ 227.301293][ T7797] md: recover of RAID array md0 [ 227.301383][ T7797] md: md0: recover done. [ 227.478637][ T7795] loop0: detected capacity change from 0 to 164 [ 227.698199][ T7803] md: recover of RAID array md0 [ 227.698227][ T7803] md: md0: recover done. [ 227.904605][ T7808] md: recover of RAID array md0 [ 227.904647][ T7808] md: md0: recover done. [ 228.249653][ T7818] md: recover of RAID array md0 [ 228.249698][ T7818] md: md0: recover done. [ 229.381480][ T7832] binder: 7829:7832 ioctl c00c6211 0 returned -14 [ 229.453821][ T7835] md: recover of RAID array md0 [ 229.453872][ T7835] md: md0: recover done. [ 229.483542][ T7837] netlink: 324 bytes leftover after parsing attributes in process `syz.6.485'. [ 229.628862][ T7839] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.628924][ T7839] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.708180][ T7841] md: recover of RAID array md0 [ 229.708217][ T7841] md: md0: recover done. [ 229.937419][ T7854] md: recover of RAID array md0 [ 229.937460][ T7854] md: md0: recover done. [ 229.990197][ T7849] loop0: detected capacity change from 0 to 164 [ 230.113846][ T7857] md: recover of RAID array md0 [ 230.113931][ T7857] md: md0: recover done. [ 230.350759][ T7861] md: recover of RAID array md0 [ 230.350803][ T7861] md: md0: recover done. [ 230.487517][ T7866] md: recover of RAID array md0 [ 230.487558][ T7866] md: md0: recover done. [ 230.496108][ T7865] loop6: detected capacity change from 0 to 128 [ 230.545146][ T7865] FAT-fs (loop6): bogus number of reserved sectors [ 230.545170][ T7865] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 230.545189][ T7865] FAT-fs (loop6): Can't find a valid FAT filesystem [ 230.809699][ T7870] md: recover of RAID array md0 [ 230.809740][ T7870] md: md0: recover done. [ 230.965690][ T7876] md: recover of RAID array md0 [ 230.965763][ T7876] md: md0: recover done. [ 232.022030][ T7888] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 232.022090][ T7888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 232.059405][ T7891] md: recover of RAID array md0 [ 232.061255][ T7891] md: md0: recover done. [ 232.072032][ T7893] netlink: 324 bytes leftover after parsing attributes in process `syz.3.503'. [ 232.268635][ T7900] md: recover of RAID array md0 [ 232.268677][ T7900] md: md0: recover done. [ 232.453120][ T7901] loop6: detected capacity change from 0 to 164 [ 232.526448][ T7902] md: recover of RAID array md0 [ 232.526517][ T7902] md: md0: recover done. [ 232.640593][ T7906] md: recover of RAID array md0 [ 232.640636][ T7906] md: md0: recover done. [ 232.749239][ T7908] 9pnet_virtio: no channels available for device syz [ 232.914618][ T7916] md: recover of RAID array md0 [ 232.914661][ T7916] md: md0: recover done. [ 233.189027][ T7927] md: recover of RAID array md0 [ 233.189068][ T7927] md: md0: recover done. [ 233.816959][ T7938] md: recover of RAID array md0 [ 233.817078][ T7938] md: md0: recover done. [ 234.304176][ T7940] netlink: 324 bytes leftover after parsing attributes in process `syz.7.520'. [ 234.439761][ T7944] md: recover of RAID array md0 [ 234.439800][ T7944] md: md0: recover done. [ 234.716217][ T7950] md: recover of RAID array md0 [ 234.716246][ T7950] md: md0: recover done. [ 235.515145][ T7960] md: recover of RAID array md0 [ 235.515187][ T7960] md: md0: recover done. [ 235.717351][ T7969] md: recover of RAID array md0 [ 235.717427][ T7969] md: md0: recover done. [ 235.813154][ T7971] 9pnet_virtio: no channels available for device syz [ 236.011366][ T7979] md: recover of RAID array md0 [ 236.011410][ T7979] md: md0: recover done. [ 236.034780][ T7973] binder: 7972:7973 ioctl c00c6211 0 returned -14 [ 236.156069][ T7981] FAULT_INJECTION: forcing a failure. [ 236.156069][ T7981] name fail_futex, interval 1, probability 0, space 0, times 0 [ 236.156115][ T7981] CPU: 0 UID: 0 PID: 7981 Comm: syz.7.532 Not tainted syzkaller #0 PREEMPT(full) [ 236.156149][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 236.156168][ T7981] Call Trace: [ 236.156181][ T7981] [ 236.156194][ T7981] dump_stack_lvl+0xe8/0x150 [ 236.156249][ T7981] should_fail_ex+0x410/0x560 [ 236.156296][ T7981] get_futex_key+0x1b4/0x1580 [ 236.156333][ T7981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.156399][ T7981] ? __pfx_get_futex_key+0x10/0x10 [ 236.156439][ T7981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.156475][ T7981] ? lock_mm_and_find_vma+0x117/0x340 [ 236.156538][ T7981] futex_wake+0x119/0x5f0 [ 236.156589][ T7981] ? irqentry_exit+0x218/0x910 [ 236.156628][ T7981] ? __pfx_futex_wake+0x10/0x10 [ 236.156672][ T7981] ? irqentry_exit+0x218/0x910 [ 236.156734][ T7981] do_futex+0x458/0x4e0 [ 236.156784][ T7981] ? __pfx_do_futex+0x10/0x10 [ 236.156823][ T7981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.156857][ T7981] ? __sys_getsockname+0x2a1/0x2d0 [ 236.156904][ T7981] __se_sys_futex+0x3a8/0x450 [ 236.156956][ T7981] ? __pfx___se_sys_futex+0x10/0x10 [ 236.156995][ T7981] ? rcu_is_watching+0x16/0xb0 [ 236.157041][ T7981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.157077][ T7981] ? __x64_sys_futex+0x21/0xf0 [ 236.157119][ T7981] do_syscall_64+0x166/0x520 [ 236.157154][ T7981] ? trace_irq_disable+0x3b/0x140 [ 236.157184][ T7981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.157224][ T7981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.157256][ T7981] RIP: 0033:0x7f7ec7d9e159 [ 236.157283][ T7981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.157313][ T7981] RSP: 002b:00007f7ec8d2f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.157344][ T7981] RAX: ffffffffffffffda RBX: 00007f7ec8025fa8 RCX: 00007f7ec7d9e159 [ 236.157376][ T7981] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7ec8025fac [ 236.157396][ T7981] RBP: 00007f7ec8025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 236.157418][ T7981] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 236.157439][ T7981] R13: 00007f7ec8026038 R14: 00007ffd86882ce0 R15: 00007ffd86882dc8 [ 236.157491][ T7981] [ 237.421192][ T7994] md: recover of RAID array md0 [ 237.421242][ T7994] md: md0: recover done. [ 237.592706][ T8000] netlink: 324 bytes leftover after parsing attributes in process `syz.0.537'. [ 237.595240][ T7998] loop3: detected capacity change from 0 to 128 [ 237.631105][ T7998] FAT-fs (loop3): bogus number of reserved sectors [ 237.631128][ T7998] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 237.631146][ T7998] FAT-fs (loop3): Can't find a valid FAT filesystem [ 237.658669][ T8001] md: recover of RAID array md0 [ 237.658689][ T8001] md: md0: recover done. [ 237.898071][ T8010] md: recover of RAID array md0 [ 237.898136][ T8010] md: md0: recover done. [ 237.949310][ T8009] loop7: detected capacity change from 0 to 128 [ 237.952628][ T7984] syzkaller0: entered promiscuous mode [ 237.969887][ T7984] syzkaller0: entered allmulticast mode [ 237.972913][ T8009] FAT-fs (loop7): bogus number of reserved sectors [ 237.972933][ T8009] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 237.972952][ T8009] FAT-fs (loop7): Can't find a valid FAT filesystem [ 238.147229][ T8015] loop4: detected capacity change from 0 to 256 [ 238.193305][ T8016] md: recover of RAID array md0 [ 238.193355][ T8016] md: md0: recover done. [ 238.366594][ T8015] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 238.366740][ T8015] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 238.366774][ T8015] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 238.367503][ T31] audit: type=1800 audit(1789743526.080:20): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.541" name="file1" dev="loop4" ino=1048624 res=0 errno=0 [ 238.416484][ T8025] md: recover of RAID array md0 [ 238.416559][ T8025] md: md0: recover done. [ 238.611489][ T8029] 9pnet_virtio: no channels available for device syz [ 238.661015][ T8032] md: recover of RAID array md0 [ 238.661055][ T8032] md: md0: recover done. [ 238.756515][ T8038] md: recover of RAID array md0 [ 238.756552][ T8038] md: md0: recover done. [ 238.791985][ T8034] loop3: detected capacity change from 0 to 164 [ 238.905036][ T8040] md: recover of RAID array md0 [ 238.905075][ T8040] md: md0: recover done. [ 239.036216][ T8043] md: recover of RAID array md0 [ 239.036257][ T8043] md: md0: recover done. [ 239.172022][ T8045] loop3: detected capacity change from 0 to 128 [ 239.239492][ T8046] md: recover of RAID array md0 [ 239.239535][ T8046] md: md0: recover done. [ 239.433658][ T8048] md: recover of RAID array md0 [ 239.433697][ T8048] md: md0: recover done. [ 239.499406][ T8045] loop3: detected capacity change from 0 to 128 [ 239.603006][ T8053] md: recover of RAID array md0 [ 239.603156][ T8053] md: md0: recover done. [ 239.611985][ T8045] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 239.770740][ T8054] MTD: Couldn't look up './dev/mtdblock0': -2 [ 239.801018][ T8055] md: recover of RAID array md0 [ 239.801054][ T8055] md: md0: recover done. [ 240.009384][ T8058] md: recover of RAID array md0 [ 240.009744][ T8058] md: md0: recover done. [ 240.168862][ T8063] md: recover of RAID array md0 [ 240.168896][ T8063] md: md0: recover done. [ 240.344343][ T8067] md: recover of RAID array md0 [ 240.344394][ T8067] md: md0: recover done. [ 240.474372][ T8066] loop0: detected capacity change from 0 to 164 [ 240.539362][ T8070] md: recover of RAID array md0 [ 240.539399][ T8070] md: md0: recover done. [ 240.714543][ T8073] 9pnet_virtio: no channels available for device syz [ 240.766287][ T8075] md: recover of RAID array md0 [ 240.766323][ T8075] md: md0: recover done. [ 240.887571][ T8081] xt_hashlimit: size too large, truncated to 1048576 [ 240.909677][ T8083] md: recover of RAID array md0 [ 240.909746][ T8083] md: md0: recover done. [ 241.007542][ T8089] md: recover of RAID array md0 [ 241.007617][ T8089] md: md0: recover done. [ 241.046631][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 241.118255][ T8095] md: recover of RAID array md0 [ 241.118295][ T8095] md: md0: recover done. [ 241.202992][ T8097] md: recover of RAID array md0 [ 241.203033][ T8097] md: md0: recover done. [ 241.278791][ T8098] md: recover of RAID array md0 [ 241.278860][ T8098] md: md0: recover done. [ 241.619898][ T8102] md: recover of RAID array md0 [ 241.619970][ T8102] md: md0: recover done. [ 242.624085][ T8104] md: recover of RAID array md0 [ 242.624132][ T8104] md: md0: recover done. [ 242.867541][ T8109] md: recover of RAID array md0 [ 242.867610][ T8109] md: md0: recover done. [ 242.919423][ T8108] futex_wake_op: syz.1.569 tries to shift op by 144; fix this program [ 243.034251][ T8110] md: recover of RAID array md0 [ 243.034292][ T8110] md: md0: recover done. [ 243.226441][ T8116] md: recover of RAID array md0 [ 243.226479][ T8116] md: md0: recover done. [ 243.472961][ T8118] md: recover of RAID array md0 [ 243.473002][ T8118] md: md0: recover done. [ 243.653911][ T8119] FAULT_INJECTION: forcing a failure. [ 243.653911][ T8119] name failslab, interval 1, probability 0, space 0, times 0 [ 243.653970][ T8119] CPU: 1 UID: 0 PID: 8119 Comm: syz.0.572 Not tainted syzkaller #0 PREEMPT(full) [ 243.654016][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 243.654038][ T8119] Call Trace: [ 243.654053][ T8119] [ 243.654070][ T8119] dump_stack_lvl+0xe8/0x150 [ 243.654157][ T8119] should_fail_ex+0x410/0x560 [ 243.654213][ T8119] ? __alloc_skb+0x1db/0x7a0 [ 243.654269][ T8119] should_failslab+0xa8/0x100 [ 243.654325][ T8119] ? __alloc_skb+0x1db/0x7a0 [ 243.654372][ T8119] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 243.654441][ T8119] ? __alloc_skb+0x18d/0x7a0 [ 243.654493][ T8119] ? __alloc_skb+0x1db/0x7a0 [ 243.654561][ T8119] __alloc_skb+0x1db/0x7a0 [ 243.654622][ T8119] inet_ifmcaddr_notify+0x7e/0x150 [ 243.654688][ T8119] ____ip_mc_inc_group+0xb6b/0xdb0 [ 243.654751][ T8119] __ip_mc_join_group+0x430/0x500 [ 243.654800][ T8119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.654870][ T8119] do_ip_setsockopt+0x2013/0x2e30 [ 243.654924][ T8119] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 243.654963][ T8119] ? do_futex+0x3e7/0x4e0 [ 243.655009][ T8119] ? __asan_memcpy+0x40/0x70 [ 243.655049][ T8119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.655092][ T8119] ? lock_acquire+0x115/0x350 [ 243.655143][ T8119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.655186][ T8119] ? aa_sock_opt_perm+0xe8/0x1e0 [ 243.655241][ T8119] ip_setsockopt+0x66/0x110 [ 243.655283][ T8119] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 243.655328][ T8119] do_sock_setsockopt+0x17c/0x1b0 [ 243.655382][ T8119] __x64_sys_setsockopt+0x13d/0x1b0 [ 243.655442][ T8119] do_syscall_64+0x166/0x520 [ 243.655486][ T8119] ? trace_irq_disable+0x3b/0x140 [ 243.655522][ T8119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.655570][ T8119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.655606][ T8119] RIP: 0033:0x7f1fc759e159 [ 243.655636][ T8119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.655667][ T8119] RSP: 002b:00007f1fc83a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 243.655704][ T8119] RAX: ffffffffffffffda RBX: 00007f1fc7825fa0 RCX: 00007f1fc759e159 [ 243.655728][ T8119] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 243.655748][ T8119] RBP: 00007f1fc763506b R08: 000000000000000c R09: 0000000000000000 [ 243.655767][ T8119] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 243.655789][ T8119] R13: 00007f1fc7826038 R14: 00007f1fc7825fa0 R15: 00007ffd2587b328 [ 243.655841][ T8119] [ 243.958762][ T8125] md: recover of RAID array md0 [ 243.958802][ T8125] md: md0: recover done. [ 245.413830][ T8140] loop3: detected capacity change from 0 to 164 [ 245.453300][ T8140] ISOFS: unable to read i-node block [ 245.453358][ T8140] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 246.076871][ T8148] md: recover of RAID array md0 [ 246.076915][ T8148] md: md0: recover done. [ 247.222992][ T8161] netlink: 316 bytes leftover after parsing attributes in process `syz.4.585'. [ 248.248879][ T8177] md: recover of RAID array md0 [ 248.257679][ T8177] md: md0: recover done. [ 248.317046][ T8176] raw_sendmsg: syz.6.587 forgot to set AF_INET. Fix it! [ 248.713791][ T8193] md: recover of RAID array md0 [ 248.713834][ T8193] md: md0: recover done. [ 248.918178][ T8198] md: recover of RAID array md0 [ 248.919197][ T8198] md: md0: recover done. [ 249.111732][ T8205] netlink: 324 bytes leftover after parsing attributes in process `syz.4.598'. [ 249.128533][ T8207] md: recover of RAID array md0 [ 249.128635][ T8207] md: md0: recover done. [ 249.455484][ T8214] md: recover of RAID array md0 [ 249.455528][ T8214] md: md0: recover done. [ 250.833901][ T8226] md: recover of RAID array md0 [ 250.833941][ T8226] md: md0: recover done. [ 251.142767][ T8235] md: recover of RAID array md0 [ 251.142808][ T8235] md: md0: recover done. [ 251.232084][ T8236] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 251.337806][ T8240] md: recover of RAID array md0 [ 251.337840][ T8240] md: md0: recover done. [ 251.521685][ T8241] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 251.579612][ T8243] md: recover of RAID array md0 [ 251.579742][ T8243] md: md0: recover done. [ 251.923995][ T8248] md: recover of RAID array md0 [ 251.924074][ T8248] md: md0: recover done. [ 252.056033][ T8251] md: recover of RAID array md0 [ 252.056106][ T8251] md: md0: recover done. [ 252.183819][ T8263] md: recover of RAID array md0 [ 252.183859][ T8263] md: md0: recover done. [ 252.256888][ T8264] loop3: detected capacity change from 0 to 164 [ 252.277506][ T8264] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 252.311540][ T8265] md: recover of RAID array md0 [ 252.311581][ T8265] md: md0: recover done. [ 252.449733][ T8269] fuse: Bad value for 'fd' [ 252.467475][ T31] audit: type=1326 audit(1789743540.180:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.3.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286199e159 code=0x7fc00000 [ 252.534239][ T31] audit: type=1326 audit(1789743540.240:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.3.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f286199e159 code=0x7fc00000 [ 252.572795][ T8271] md: recover of RAID array md0 [ 252.572836][ T8271] md: md0: recover done. [ 252.766603][ T8278] md: recover of RAID array md0 [ 252.766643][ T8278] md: md0: recover done. [ 252.900412][ T8282] md: recover of RAID array md0 [ 252.900447][ T8282] md: md0: recover done. [ 253.000190][ T8284] md: recover of RAID array md0 [ 253.000220][ T8284] md: md0: recover done. [ 253.100268][ T8285] md: recover of RAID array md0 [ 253.100317][ T8285] md: md0: recover done. [ 253.318827][ T8297] md: recover of RAID array md0 [ 253.318871][ T8297] md: md0: recover done. [ 253.353076][ T31] audit: type=1326 audit(1789743541.060:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.3.595" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286199e159 code=0x7fc00000 [ 253.417046][ T8300] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 253.417239][ T8300] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 253.448529][ T8301] md: recover of RAID array md0 [ 253.448568][ T8301] md: md0: recover done. [ 253.616984][ T8304] md: recover of RAID array md0 [ 253.617016][ T8304] md: md0: recover done. [ 253.737249][ T8306] jffs2: notice: (8306) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 255.150192][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.150305][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.450793][ T8316] md: recover of RAID array md0 [ 255.450833][ T8316] md: md0: recover done. [ 255.535938][ T8319] netlink: 324 bytes leftover after parsing attributes in process `syz.7.621'. [ 255.670723][ T8322] md: recover of RAID array md0 [ 255.670767][ T8322] md: md0: recover done. [ 255.848490][ T8332] md: recover of RAID array md0 [ 255.848566][ T8332] md: md0: recover done. [ 256.207534][ T8343] md: recover of RAID array md0 [ 256.207574][ T8343] md: md0: recover done. [ 257.232188][ T8347] md: recover of RAID array md0 [ 257.232235][ T8347] md: md0: recover done. [ 257.683201][ T8355] binder: 8348:8355 ioctl c00c6211 0 returned -14 [ 258.256224][ T8364] md: recover of RAID array md0 [ 258.256268][ T8364] md: md0: recover done. [ 258.581490][ T8373] md: recover of RAID array md0 [ 258.581537][ T8373] md: md0: recover done. [ 258.742053][ T8382] md: recover of RAID array md0 [ 258.742130][ T8382] md: md0: recover done. [ 258.973786][ T8393] md: recover of RAID array md0 [ 258.973867][ T8393] md: md0: recover done. [ 259.070511][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 259.119991][ T8398] md: recover of RAID array md0 [ 259.120064][ T8398] md: md0: recover done. [ 259.357368][ T8409] md: recover of RAID array md0 [ 259.357455][ T8409] md: md0: recover done. [ 259.476109][ T8413] md: recover of RAID array md0 [ 259.476148][ T8413] md: md0: recover done. [ 259.697156][ T8421] jffs2: notice: (8421) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 260.254501][ T8427] md: recover of RAID array md0 [ 260.254592][ T8427] md: md0: recover done. [ 260.724204][ T8418] xt_hashlimit: size too large, truncated to 1048576 [ 260.957789][ T8432] md: recover of RAID array md0 [ 260.957835][ T8432] md: md0: recover done. [ 261.167584][ T8440] md: recover of RAID array md0 [ 261.167664][ T8440] md: md0: recover done. [ 261.216458][ T8437] jffs2: notice: (8437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 261.395138][ T8447] md: recover of RAID array md0 [ 261.395181][ T8447] md: md0: recover done. [ 261.623834][ T8459] md: recover of RAID array md0 [ 261.623882][ T8459] md: md0: recover done. [ 261.800975][ T8463] md: recover of RAID array md0 [ 261.801017][ T8463] md: md0: recover done. [ 261.950713][ T8466] binder: 8465:8466 ioctl c00c6211 0 returned -14 [ 262.212889][ T8475] md: recover of RAID array md0 [ 262.212934][ T8475] md: md0: recover done. [ 262.349897][ T4927] Bluetooth: hci6: command 0x0406 tx timeout [ 265.073875][ T8487] md: recover of RAID array md0 [ 265.073918][ T8487] md: md0: recover done. [ 265.175323][ T8481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.352354][ T8495] md: recover of RAID array md0 [ 265.352398][ T8495] md: md0: recover done. [ 265.507272][ T8499] md: recover of RAID array md0 [ 265.507309][ T8499] md: md0: recover done. [ 265.640858][ T8504] md: recover of RAID array md0 [ 265.640885][ T8504] md: md0: recover done. [ 266.037647][ T8518] md: recover of RAID array md0 [ 266.037680][ T8518] md: md0: recover done. [ 266.946877][ T8527] md: recover of RAID array md0 [ 266.946934][ T8527] md: md0: recover done. [ 267.028508][ T8532] md: recover of RAID array md0 [ 267.028535][ T8532] md: md0: recover done. [ 267.184070][ T8537] md: recover of RAID array md0 [ 267.184098][ T8537] md: md0: recover done. [ 267.436518][ T8549] md: recover of RAID array md0 [ 267.436545][ T8549] md: md0: recover done. [ 267.444070][ T8545] loop3: detected capacity change from 0 to 164 [ 268.468651][ T8552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.670335][ T8556] md: recover of RAID array md0 [ 268.670631][ T8556] md: md0: recover done. [ 268.962334][ T8557] md: recover of RAID array md0 [ 268.962363][ T8557] md: md0: recover done. [ 269.187016][ T8567] md: recover of RAID array md0 [ 269.187056][ T8567] md: md0: recover done. [ 269.255368][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.6.698'. [ 269.369020][ T8574] md: recover of RAID array md0 [ 269.369060][ T8574] md: md0: recover done. [ 269.580092][ T8578] jffs2: notice: (8578) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 270.545174][ T8582] md: recover of RAID array md0 [ 270.545206][ T8582] md: md0: recover done. [ 270.633728][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 270.633755][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'. [ 270.648913][ T8586] md: recover of RAID array md0 [ 270.648968][ T8586] md: md0: recover done. [ 270.749597][ T8592] md: recover of RAID array md0 [ 270.749644][ T8592] md: md0: recover done. [ 270.856516][ T8596] md: recover of RAID array md0 [ 270.856550][ T8596] md: md0: recover done. [ 270.941488][ T8598] md: recover of RAID array md0 [ 270.941524][ T8598] md: md0: recover done. [ 271.183394][ T8605] syzkaller0: entered promiscuous mode [ 271.183422][ T8605] syzkaller0: entered allmulticast mode [ 273.183292][ T8606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.969510][ T8610] jffs2: notice: (8610) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 274.249502][ T8623] md: recover of RAID array md0 [ 274.249530][ T8623] md: md0: recover done. [ 274.471910][ T8627] md: recover of RAID array md0 [ 274.471963][ T8627] md: md0: recover done. [ 274.677959][ T8634] md: recover of RAID array md0 [ 274.677995][ T8634] md: md0: recover done. [ 274.857400][ T8639] md: recover of RAID array md0 [ 274.857456][ T8639] md: md0: recover done. [ 274.940962][ T8641] netlink: 'syz.4.723': attribute type 4 has an invalid length. [ 274.996175][ T8645] md: recover of RAID array md0 [ 274.996222][ T8645] md: md0: recover done. [ 275.024898][ T8641] netlink: 'syz.4.723': attribute type 4 has an invalid length. [ 275.147165][ T8649] overlayfs: missing 'lowerdir' [ 275.195200][ T8652] md: recover of RAID array md0 [ 275.195243][ T8652] md: md0: recover done. [ 275.401406][ T8661] md: recover of RAID array md0 [ 275.401490][ T8661] md: md0: recover done. [ 275.458805][ T8660] FAULT_INJECTION: forcing a failure. [ 275.458805][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 275.475296][ T8660] CPU: 1 UID: 0 PID: 8660 Comm: syz.6.732 Not tainted syzkaller #0 PREEMPT(full) [ 275.475332][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 275.475349][ T8660] Call Trace: [ 275.475359][ T8660] [ 275.475370][ T8660] dump_stack_lvl+0xe8/0x150 [ 275.475414][ T8660] should_fail_ex+0x410/0x560 [ 275.475447][ T8660] ? alloc_vmap_area+0x21c/0x1420 [ 275.475490][ T8660] should_failslab+0xa8/0x100 [ 275.475530][ T8660] ? alloc_vmap_area+0x21c/0x1420 [ 275.475564][ T8660] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 275.475615][ T8660] ? alloc_vmap_area+0x21c/0x1420 [ 275.475664][ T8660] alloc_vmap_area+0x21c/0x1420 [ 275.475714][ T8660] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.475750][ T8660] ? __pfx_alloc_vmap_area+0x10/0x10 [ 275.475783][ T8660] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 275.475811][ T8660] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 275.475838][ T8660] ? __get_vm_area_node+0x155/0x2f0 [ 275.475881][ T8660] __get_vm_area_node+0x200/0x2f0 [ 275.475927][ T8660] __vmalloc_node_range_noprof+0x343/0x1540 [ 275.475978][ T8660] ? write_ldt+0x4f7/0x930 [ 275.476043][ T8660] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.476087][ T8660] ? __kasan_kmalloc+0x93/0xb0 [ 275.476118][ T8660] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.476147][ T8660] ? __kmalloc_cache_noprof+0x321/0x600 [ 275.476176][ T8660] ? write_ldt+0x4f7/0x930 [ 275.476206][ T8660] __vmalloc_noprof+0xd2/0x120 [ 275.476244][ T8660] ? write_ldt+0x4f7/0x930 [ 275.476279][ T8660] write_ldt+0x4f7/0x930 [ 275.476310][ T8660] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.476340][ T8660] ? __se_sys_futex+0x3a8/0x450 [ 275.476379][ T8660] ? __pfx_write_ldt+0x10/0x10 [ 275.476414][ T8660] ? rcu_is_watching+0x16/0xb0 [ 275.476462][ T8660] __se_sys_modify_ldt+0x6c/0x310 [ 275.476501][ T8660] do_syscall_64+0x166/0x520 [ 275.476534][ T8660] ? trace_irq_disable+0x3b/0x140 [ 275.476564][ T8660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.476601][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.476627][ T8660] RIP: 0033:0x7fc5b1b9e159 [ 275.476651][ T8660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.476673][ T8660] RSP: 002b:00007fc5b298b028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 275.476700][ T8660] RAX: ffffffffffffffda RBX: 00007fc5b1e25fa0 RCX: 00007fc5b1b9e159 [ 275.476719][ T8660] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 275.476736][ T8660] RBP: 00007fc5b1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 275.476753][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.476768][ T8660] R13: 00007fc5b1e26038 R14: 00007fc5b1e25fa0 R15: 00007fff70c1e758 [ 275.476809][ T8660] [ 275.482561][ T8660] syz.6.732: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 275.482710][ T8660] CPU: 1 UID: 0 PID: 8660 Comm: syz.6.732 Not tainted syzkaller #0 PREEMPT(full) [ 275.482738][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 275.482753][ T8660] Call Trace: [ 275.482763][ T8660] [ 275.482773][ T8660] dump_stack_lvl+0xe8/0x150 [ 275.482814][ T8660] warn_alloc+0x24d/0x270 [ 275.482841][ T8660] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.482871][ T8660] ? lockdep_hardirqs_on+0x7b/0x110 [ 275.482907][ T8660] ? __pfx_warn_alloc+0x10/0x10 [ 275.482931][ T8660] ? kfree+0x1c5/0x650 [ 275.482985][ T8660] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.483015][ T8660] ? __get_vm_area_node+0x219/0x2f0 [ 275.483063][ T8660] __vmalloc_node_range_noprof+0x36b/0x1540 [ 275.483138][ T8660] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.483182][ T8660] ? __kasan_kmalloc+0x93/0xb0 [ 275.483213][ T8660] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.483243][ T8660] ? __kmalloc_cache_noprof+0x321/0x600 [ 275.483273][ T8660] ? write_ldt+0x4f7/0x930 [ 275.483303][ T8660] __vmalloc_noprof+0xd2/0x120 [ 275.483342][ T8660] ? write_ldt+0x4f7/0x930 [ 275.483377][ T8660] write_ldt+0x4f7/0x930 [ 275.483407][ T8660] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.483437][ T8660] ? __se_sys_futex+0x3a8/0x450 [ 275.483476][ T8660] ? __pfx_write_ldt+0x10/0x10 [ 275.483511][ T8660] ? rcu_is_watching+0x16/0xb0 [ 275.483553][ T8660] __se_sys_modify_ldt+0x6c/0x310 [ 275.483589][ T8660] do_syscall_64+0x166/0x520 [ 275.483621][ T8660] ? trace_irq_disable+0x3b/0x140 [ 275.483647][ T8660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.483680][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.483706][ T8660] RIP: 0033:0x7fc5b1b9e159 [ 275.483729][ T8660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.483751][ T8660] RSP: 002b:00007fc5b298b028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 275.483777][ T8660] RAX: ffffffffffffffda RBX: 00007fc5b1e25fa0 RCX: 00007fc5b1b9e159 [ 275.483796][ T8660] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 275.483813][ T8660] RBP: 00007fc5b1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 275.483829][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.483850][ T8660] R13: 00007fc5b1e26038 R14: 00007fc5b1e25fa0 R15: 00007fff70c1e758 [ 275.483891][ T8660] [ 275.500186][ T8660] Mem-Info: [ 275.500204][ T8660] active_anon:11070 inactive_anon:0 isolated_anon:0 [ 275.500204][ T8660] active_file:0 inactive_file:62504 isolated_file:0 [ 275.500204][ T8660] unevictable:0 dirty:156 writeback:0 [ 275.500204][ T8660] slab_reclaimable:10663 slab_unreclaimable:102216 [ 275.500204][ T8660] mapped:35796 shmem:4037 pagetables:1671 [ 275.500204][ T8660] sec_pagetables:0 bounce:0 [ 275.500204][ T8660] kernel_misc_reclaimable:0 [ 275.500204][ T8660] free:1292786 free_pcp:8413 free_cma:0 [ 275.500268][ T8660] Node 0 active_anon:44280kB inactive_anon:0kB active_file:0kB inactive_file:249824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143184kB dirty:624kB writeback:0kB shmem:16148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13728kB pagetables:6572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 275.500333][ T8660] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 275.500395][ T8660] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.500465][ T8660] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 275.500516][ T8660] Node 0 DMA32 free:1219540kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44280kB inactive_anon:0kB active_file:0kB inactive_file:249824kB unevictable:0kB writepending:624kB zspages:0kB present:3129332kB managed:2546972kB mlocked:0kB bounce:0kB free_pcp:33652kB local_pcp:22072kB free_cma:0kB [ 275.500588][ T8660] lowmem_reserve[]: 0 0 0 0 0 [ 275.500635][ T8660] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.500701][ T8660] lowmem_reserve[]: 0 0 0 0 0 [ 275.500749][ T8660] Node 1 Normal free:3936244kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.500819][ T8660] lowmem_reserve[]: 0 0 0 0 0 [ 275.500866][ T8660] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 275.501048][ T8660] Node 0 DMA32: 636*4kB (UE) 1286*8kB (UME) 698*16kB (UM) 344*32kB (UME) 233*64kB (UM) 170*128kB (UME) 82*256kB (UME) 9*512kB (UM) 14*1024kB (UME) [ 275.502824][ T8663] md: recover of RAID array md0 [ 275.502905][ T8663] md: md0: recover done. [ 275.535258][ T8660] 5*2048kB (UM) 268*4096kB (UM) = 1219584kB [ 275.535331][ T8660] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 275.535463][ T8660] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 8*16kB (UM) 12*32kB (UM) 7*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3936244kB [ 275.545324][ T8660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.545346][ T8660] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.545365][ T8660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.548653][ T8660] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.548676][ T8660] 66537 total pagecache pages [ 275.548687][ T8660] 0 pages in swap cache [ 275.548696][ T8660] Free swap = 124996kB [ 275.548706][ T8660] Total swap = 124996kB [ 275.548718][ T8660] 2097051 pages RAM [ 275.548727][ T8660] 0 pages HighMem/MovableOnly [ 275.548736][ T8660] 428692 pages reserved [ 275.548745][ T8660] 0 pages cma reserved [ 275.746561][ T8670] md: recover of RAID array md0 [ 275.746694][ T8670] md: md0: recover done. [ 276.039122][ T8674] md: recover of RAID array md0 [ 276.039164][ T8674] md: md0: recover done. [ 276.331277][ T8665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.366366][ T8679] md: recover of RAID array md0 [ 276.366407][ T8679] md: md0: recover done. [ 276.611058][ T8680] md: recover of RAID array md0 [ 276.611105][ T8680] md: md0: recover done. [ 276.707258][ T8685] md: recover of RAID array md0 [ 276.707348][ T8685] md: md0: recover done. [ 276.817641][ T8690] md: recover of RAID array md0 [ 276.817681][ T8690] md: md0: recover done. [ 276.856152][ T8689] loop6: detected capacity change from 0 to 164 [ 276.903135][ T8689] isofs_fill_super: root inode is not a directory. Corrupted media? [ 276.931148][ T31] audit: type=1326 audit(1789743564.640:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.1.728" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf39e159 code=0x7fc00000 [ 277.033777][ T8691] md: recover of RAID array md0 [ 277.033867][ T8691] md: md0: recover done. [ 277.056640][ T8689] syz.6.739 (8689): /proc/8687/oom_adj is deprecated, please use /proc/8687/oom_score_adj instead. [ 277.219523][ T31] audit: type=1326 audit(1789743564.930:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.1.728" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0fcf39e159 code=0x7fc00000 [ 277.267850][ T8695] md: recover of RAID array md0 [ 277.267889][ T8695] md: md0: recover done. [ 277.404888][ T31] audit: type=1326 audit(1789743565.110:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.1.728" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf39e159 code=0x7fc00000 [ 277.466214][ T8701] md: recover of RAID array md0 [ 277.466289][ T8701] md: md0: recover done. [ 277.542688][ T8699] jffs2: notice: (8699) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 277.569370][ T8704] md: recover of RAID array md0 [ 277.569407][ T8704] md: md0: recover done. [ 277.701859][ T8708] md: recover of RAID array md0 [ 277.701948][ T8708] md: md0: recover done. [ 277.716489][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 277.764250][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.744'. [ 277.787141][ T8706] erspan1: entered allmulticast mode [ 277.854527][ T8710] md: recover of RAID array md0 [ 277.854886][ T8710] md: md0: recover done. [ 277.917967][ T8673] loop0: detected capacity change from 0 to 164 [ 278.048870][ T8715] md: recover of RAID array md0 [ 278.048935][ T8715] md: md0: recover done. [ 278.078927][ T8716] loop3: detected capacity change from 0 to 128 [ 278.080027][ T31] audit: type=1326 audit(1789743565.790:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc759e159 code=0x7fc00000 [ 278.092319][ T8716] FAT-fs (loop3): bogus number of reserved sectors [ 278.092341][ T8716] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 278.092358][ T8716] FAT-fs (loop3): Can't find a valid FAT filesystem [ 278.103530][ T31] audit: type=1326 audit(1789743565.810:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1fc759e159 code=0x7fc00000 [ 278.238271][ T8719] md: recover of RAID array md0 [ 278.238303][ T8719] md: md0: recover done. [ 278.330270][ T8720] md: recover of RAID array md0 [ 278.330311][ T8720] md: md0: recover done. [ 278.458323][ T8721] md: recover of RAID array md0 [ 278.458352][ T8721] md: md0: recover done. [ 278.547739][ T8724] md: recover of RAID array md0 [ 278.547780][ T8724] md: md0: recover done. [ 278.566898][ T31] audit: type=1326 audit(1789743566.280:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc759e159 code=0x7fc00000 [ 278.641335][ T8726] fuse: Bad value for 'fd' [ 278.650034][ T8723] FAULT_INJECTION: forcing a failure. [ 278.650034][ T8723] name failslab, interval 1, probability 0, space 0, times 0 [ 278.650072][ T8723] CPU: 1 UID: 0 PID: 8723 Comm: syz.4.748 Not tainted syzkaller #0 PREEMPT(full) [ 278.650102][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 278.650119][ T8723] Call Trace: [ 278.650129][ T8723] [ 278.650140][ T8723] dump_stack_lvl+0xe8/0x150 [ 278.650183][ T8723] should_fail_ex+0x410/0x560 [ 278.650217][ T8723] ? alloc_vmap_area+0x21c/0x1420 [ 278.650255][ T8723] should_failslab+0xa8/0x100 [ 278.650290][ T8723] ? alloc_vmap_area+0x21c/0x1420 [ 278.650330][ T8723] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 278.650376][ T8723] ? alloc_vmap_area+0x21c/0x1420 [ 278.650421][ T8723] alloc_vmap_area+0x21c/0x1420 [ 278.650473][ T8723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.650509][ T8723] ? __pfx_alloc_vmap_area+0x10/0x10 [ 278.650544][ T8723] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 278.650573][ T8723] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 278.650600][ T8723] ? __get_vm_area_node+0x155/0x2f0 [ 278.650644][ T8723] __get_vm_area_node+0x200/0x2f0 [ 278.650690][ T8723] __vmalloc_node_range_noprof+0x343/0x1540 [ 278.650732][ T8723] ? write_ldt+0x4f7/0x930 [ 278.650799][ T8723] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 278.650844][ T8723] ? __kasan_kmalloc+0x93/0xb0 [ 278.650876][ T8723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.650906][ T8723] ? __kmalloc_cache_noprof+0x321/0x600 [ 278.650936][ T8723] ? write_ldt+0x4f7/0x930 [ 278.650975][ T8723] __vmalloc_noprof+0xd2/0x120 [ 278.651015][ T8723] ? write_ldt+0x4f7/0x930 [ 278.651050][ T8723] write_ldt+0x4f7/0x930 [ 278.651082][ T8723] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.651112][ T8723] ? __se_sys_futex+0x3a8/0x450 [ 278.651157][ T8723] ? __pfx_write_ldt+0x10/0x10 [ 278.651193][ T8723] ? rcu_is_watching+0x16/0xb0 [ 278.651235][ T8723] __se_sys_modify_ldt+0x6c/0x310 [ 278.651272][ T8723] do_syscall_64+0x166/0x520 [ 278.651304][ T8723] ? trace_irq_disable+0x3b/0x140 [ 278.651331][ T8723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.651364][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.651391][ T8723] RIP: 0033:0x7fdeced9e159 [ 278.651414][ T8723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.651437][ T8723] RSP: 002b:00007fdecfbd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 278.651465][ T8723] RAX: ffffffffffffffda RBX: 00007fdecf025fa0 RCX: 00007fdeced9e159 [ 278.651485][ T8723] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 278.651502][ T8723] RBP: 00007fdecee3506b R08: 0000000000000000 R09: 0000000000000000 [ 278.651519][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.651536][ T8723] R13: 00007fdecf026038 R14: 00007fdecf025fa0 R15: 00007ffd2fb5f6b8 [ 278.651576][ T8723] [ 278.758173][ T8729] md: recover of RAID array md0 [ 278.758218][ T8729] md: md0: recover done. [ 279.050235][ T31] audit: type=1326 audit(1789743566.760:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.6.751" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b1b9e159 code=0x7ffc0000 [ 279.051457][ T31] audit: type=1326 audit(1789743566.760:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.6.751" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b1b9e159 code=0x7ffc0000 [ 279.054437][ T31] audit: type=1326 audit(1789743566.760:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.6.751" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b1b9e159 code=0x7ffc0000 [ 279.055732][ T31] audit: type=1326 audit(1789743566.770:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.6.751" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b1b9e159 code=0x7ffc0000 [ 279.317367][ T8738] md: recover of RAID array md0 [ 279.317407][ T8738] md: md0: recover done. [ 279.409573][ T8742] md: recover of RAID array md0 [ 279.409614][ T8742] md: md0: recover done. [ 279.518692][ T8743] netlink: 'syz.1.756': attribute type 4 has an invalid length. [ 279.847597][ T8749] netlink: 'syz.1.756': attribute type 4 has an invalid length. [ 280.078344][ T8745] loop0: detected capacity change from 0 to 164 [ 280.454079][ T8745] isofs_fill_super: root inode is not a directory. Corrupted media? [ 280.457987][ T8747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.788920][ T8753] md: recover of RAID array md0 [ 280.789185][ T8753] md: md0: recover done. [ 281.092516][ T8756] md: recover of RAID array md0 [ 281.092573][ T8756] md: md0: recover done. [ 281.398478][ T8765] jffs2: notice: (8765) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 282.711939][ T8773] md: recover of RAID array md0 [ 282.711987][ T8773] md: md0: recover done. [ 283.035857][ T8785] md: recover of RAID array md0 [ 283.035895][ T8785] md: md0: recover done. [ 283.156704][ T8789] md: recover of RAID array md0 [ 283.156732][ T8789] md: md0: recover done. [ 283.266780][ T8793] md: recover of RAID array md0 [ 283.266807][ T8793] md: md0: recover done. [ 283.386023][ T8796] md: recover of RAID array md0 [ 283.386051][ T8796] md: md0: recover done. [ 283.487435][ T8800] md: recover of RAID array md0 [ 283.487540][ T8800] md: md0: recover done. [ 283.587178][ T8803] md: recover of RAID array md0 [ 283.587205][ T8803] md: md0: recover done. [ 283.659587][ T8805] md: recover of RAID array md0 [ 283.659629][ T8805] md: md0: recover done. [ 283.776530][ T8810] md: recover of RAID array md0 [ 283.776571][ T8810] md: md0: recover done. [ 283.869728][ T8813] md: recover of RAID array md0 [ 283.869802][ T8813] md: md0: recover done. [ 283.978719][ T8817] md: recover of RAID array md0 [ 283.978752][ T8817] md: md0: recover done. [ 284.135983][ T1371] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.155850][ T8824] md: recover of RAID array md0 [ 284.155887][ T8824] md: md0: recover done. [ 284.246703][ T8828] md: recover of RAID array md0 [ 284.246781][ T8828] md: md0: recover done. [ 284.358577][ T8829] md: recover of RAID array md0 [ 284.358659][ T8829] md: md0: recover done. [ 284.385086][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 284.434789][ T8827] null_blk: rnullb0: using native zone append [ 284.468197][ T8833] md: recover of RAID array md0 [ 284.468278][ T8833] md: md0: recover done. [ 284.578208][ T8835] md: recover of RAID array md0 [ 284.578283][ T8835] md: md0: recover done. [ 284.580178][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 284.580921][ T10] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 284.584141][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 284.584185][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 284.584225][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.641340][ T10] kobil_sct 7-1:1.0: KOBIL USB smart card terminal converter detected [ 284.766231][ T8836] md: recover of RAID array md0 [ 284.766258][ T8836] md: md0: recover done. [ 284.857573][ T8840] md: recover of RAID array md0 [ 284.857601][ T8840] md: md0: recover done. [ 284.932107][ T10] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 285.022802][ T8827] null_blk: disk rnullb0 created [ 285.094041][ T8848] openvswitch: netlink: IPv4 tunnel dst address is zero [ 285.094084][ T8848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.132581][ T8849] md: recover of RAID array md0 [ 285.132625][ T8849] md: md0: recover done. [ 285.365774][ T8855] md: recover of RAID array md0 [ 285.365813][ T8855] md: md0: recover done. [ 285.476704][ T8858] bridge0: port 3(team0) entered blocking state [ 285.476873][ T8858] bridge0: port 3(team0) entered disabled state [ 285.477325][ T8858] team0: entered allmulticast mode [ 285.477346][ T8858] team_slave_0: entered allmulticast mode [ 285.477387][ T8858] team_slave_1: entered allmulticast mode [ 285.560377][ T8858] team0: entered promiscuous mode [ 285.560408][ T8858] team_slave_0: entered promiscuous mode [ 285.566577][ T8858] team_slave_1: entered promiscuous mode [ 285.577663][ T8863] md: recover of RAID array md0 [ 285.577733][ T8863] md: md0: recover done. [ 285.637355][ T8861] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 285.699702][ T8858] bridge0: port 3(team0) entered blocking state [ 285.699846][ T8858] bridge0: port 3(team0) entered forwarding state [ 285.822837][ T8867] o2cb: This node has not been configured. [ 285.822857][ T8867] o2cb: Cluster check failed. Fix errors before retrying. [ 285.822896][ T8867] (syz.4.789,8867,1):user_dlm_register:674 ERROR: status = -22 [ 285.822923][ T8867] (syz.4.789,8867,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "config" [ 285.911000][ T8870] md: recover of RAID array md0 [ 285.911027][ T8870] md: md0: recover done. [ 286.012862][ T5759] usb 7-1: USB disconnect, device number 3 [ 286.101655][ T5759] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 286.113189][ T5759] kobil_sct 7-1:1.0: device disconnected [ 286.177399][ T8861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.178313][ T8882] md: recover of RAID array md0 [ 286.178335][ T8882] md: md0: recover done. [ 286.253339][ T8864] bond2: (slave gretap1): making interface the new active one [ 286.264422][ T8864] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 286.294798][ T8887] md: recover of RAID array md0 [ 286.294825][ T8887] md: md0: recover done. [ 286.402516][ T8892] md: recover of RAID array md0 [ 286.404185][ T8892] md: md0: recover done. [ 286.415916][ T8885] team0: No ports can be present during mode change [ 286.497177][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.7.802'. [ 286.499566][ T8896] md: recover of RAID array md0 [ 286.499604][ T8896] md: md0: recover done. [ 286.607359][ T1371] nvmet: connect request for invalid subsystem t! [ 286.608775][ T8879] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 286.627749][ T8899] md: recover of RAID array md0 [ 286.627787][ T8899] md: md0: recover done. [ 286.948808][ T8913] md: recover of RAID array md0 [ 286.948848][ T8913] md: md0: recover done. [ 286.971896][ T8911] netlink: 'syz.1.808': attribute type 83 has an invalid length. [ 287.140051][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.809'. [ 287.140083][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.809'. [ 287.168081][ T8918] md: recover of RAID array md0 [ 287.168122][ T8918] md: md0: recover done. [ 287.380095][ T8928] md: recover of RAID array md0 [ 287.380179][ T8928] md: md0: recover done. [ 287.569769][ T8933] md: recover of RAID array md0 [ 287.569815][ T8933] md: md0: recover done. [ 287.697494][ T31] kauditd_printk_skb: 95 callbacks suppressed [ 287.697519][ T31] audit: type=1800 audit(1789743574.401:129): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.815" name="file1" dev="tmpfs" ino=467 res=0 errno=0 [ 287.754557][ T8938] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 287.768547][ T8941] md: recover of RAID array md0 [ 287.768624][ T8941] md: md0: recover done. [ 287.826310][ T8938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.923935][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 287.942027][ T8942] bond2: (slave geneve2): making interface the new active one [ 287.959858][ T8942] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 287.967132][ T8944] md: recover of RAID array md0 [ 287.967167][ T8944] md: md0: recover done. [ 288.132246][ T8947] md: recover of RAID array md0 [ 288.132325][ T8947] md: md0: recover done. [ 288.248869][ T8950] md: recover of RAID array md0 [ 288.248910][ T8950] md: md0: recover done. [ 288.359349][ T8952] md: recover of RAID array md0 [ 288.359392][ T8952] md: md0: recover done. [ 288.517001][ T8958] Bluetooth: MGMT ver 1.23 [ 288.532763][ T8962] md: recover of RAID array md0 [ 288.532842][ T8962] md: md0: recover done. [ 288.651350][ T8969] md: recover of RAID array md0 [ 288.651389][ T8969] md: md0: recover done. [ 288.655558][ T5758] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 288.790122][ T8975] md: recover of RAID array md0 [ 288.790166][ T8975] md: md0: recover done. [ 288.816278][ T5758] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 288.817448][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 288.817494][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 288.817521][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 288.817550][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 288.826690][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.826717][ T5758] usb 1-1: Product: syz [ 288.826734][ T5758] usb 1-1: Manufacturer: syz [ 288.826751][ T5758] usb 1-1: SerialNumber: syz [ 288.840008][ T5758] usb 1-1: config 0 descriptor?? [ 288.925247][ T8978] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 288.956648][ T8980] md: recover of RAID array md0 [ 288.956685][ T8980] md: md0: recover done. [ 289.063466][ T5758] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 289.081073][ T8985] md: recover of RAID array md0 [ 289.081103][ T8985] md: md0: recover done. [ 289.136109][ T8987] netlink: 'syz.7.833': attribute type 4 has an invalid length. [ 289.167392][ T8987] netlink: 'syz.7.833': attribute type 4 has an invalid length. [ 289.262844][ T8954] usb 1-1: Couldn't submit interrupt_out_urb -90 [ 289.277387][ T5855] usb 1-1: USB disconnect, device number 4 [ 289.308506][ T8991] md: recover of RAID array md0 [ 289.308535][ T8991] md: md0: recover done. [ 289.456225][ T8992] syzkaller0: entered promiscuous mode [ 289.456251][ T8992] syzkaller0: entered allmulticast mode [ 289.497564][ T9002] md: recover of RAID array md0 [ 289.497637][ T9002] md: md0: recover done. [ 289.536298][ T9001] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 289.587707][ T9003] md: recover of RAID array md0 [ 289.587749][ T9003] md: md0: recover done. [ 289.769036][ T9006] md: recover of RAID array md0 [ 289.769078][ T9006] md: md0: recover done. [ 289.969704][ T9009] md: recover of RAID array md0 [ 289.969747][ T9009] md: md0: recover done. [ 289.993048][ T9010] FAULT_INJECTION: forcing a failure. [ 289.993048][ T9010] name fail_futex, interval 1, probability 0, space 0, times 0 [ 289.993086][ T9010] CPU: 1 UID: 0 PID: 9010 Comm: syz.6.840 Not tainted syzkaller #0 PREEMPT(full) [ 289.993113][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 289.993129][ T9010] Call Trace: [ 289.993138][ T9010] [ 289.993148][ T9010] dump_stack_lvl+0xe8/0x150 [ 289.993195][ T9010] should_fail_ex+0x410/0x560 [ 289.993229][ T9010] get_futex_key+0x1b4/0x1580 [ 289.993274][ T9010] ? __pfx_get_futex_key+0x10/0x10 [ 289.993319][ T9010] futex_wake+0x119/0x5f0 [ 289.993355][ T9010] ? rcu_is_watching+0x16/0xb0 [ 289.993394][ T9010] ? __pfx_futex_wake+0x10/0x10 [ 289.993445][ T9010] ? file_init_path+0x3b/0x5a0 [ 289.993483][ T9010] do_futex+0x458/0x4e0 [ 289.993517][ T9010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.993554][ T9010] ? __pfx_do_futex+0x10/0x10 [ 289.993598][ T9010] __se_sys_futex+0x3a8/0x450 [ 289.993636][ T9010] ? fd_install+0x309/0x3d0 [ 289.993671][ T9010] ? __pfx___se_sys_futex+0x10/0x10 [ 289.993704][ T9010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.993734][ T9010] ? __sys_socketpair+0x4a8/0x560 [ 289.993770][ T9010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.993799][ T9010] ? __x64_sys_futex+0x21/0xf0 [ 289.993837][ T9010] do_syscall_64+0x166/0x520 [ 289.993868][ T9010] ? trace_irq_disable+0x3b/0x140 [ 289.993895][ T9010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.993926][ T9010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.993952][ T9010] RIP: 0033:0x7fc5b1b9e159 [ 289.993975][ T9010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.994006][ T9010] RSP: 002b:00007fc5b298b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 289.994033][ T9010] RAX: ffffffffffffffda RBX: 00007fc5b1e25fa8 RCX: 00007fc5b1b9e159 [ 289.994052][ T9010] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc5b1e25fac [ 289.994069][ T9010] RBP: 00007fc5b1e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 289.994087][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.994103][ T9010] R13: 00007fc5b1e26038 R14: 00007fff70c1e670 R15: 00007fff70c1e758 [ 289.994143][ T9010] [ 290.218124][ T9015] md: recover of RAID array md0 [ 290.218162][ T9015] md: md0: recover done. [ 290.359285][ T9020] ªªªªªª: renamed from vlan0 (while UP) [ 290.440400][ T9021] md: recover of RAID array md0 [ 290.440445][ T9021] md: md0: recover done. [ 290.539477][ T9024] md: recover of RAID array md0 [ 290.540007][ T9024] md: md0: recover done. [ 290.687871][ T9032] fuse: Bad value for 'fd' [ 290.750278][ T9036] md: recover of RAID array md0 [ 290.750318][ T9036] md: md0: recover done. [ 290.837262][ T9040] md: recover of RAID array md0 [ 290.837303][ T9040] md: md0: recover done. [ 290.985421][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.049205][ T9052] md: recover of RAID array md0 [ 291.049279][ T9052] md: md0: recover done. [ 291.085761][ T9051] netlink: Conntrack attr has 8 unknown bytes [ 291.085799][ T9051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.154114][ T9054] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967295 out of range (51000000..2150000000) [ 291.222057][ T9061] ip_tables: iptables: counters copy to user failed while replacing table [ 291.273267][ T9062] md: recover of RAID array md0 [ 291.273307][ T9062] md: md0: recover done. [ 291.368301][ T9066] md: recover of RAID array md0 [ 291.368380][ T9066] md: md0: recover done. [ 291.460453][ T9070] md: recover of RAID array md0 [ 291.460533][ T9070] md: md0: recover done. [ 291.566221][ T9076] md: recover of RAID array md0 [ 291.566301][ T9076] md: md0: recover done. [ 291.648406][ T52] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 291.779730][ T9082] md: recover of RAID array md0 [ 291.779771][ T9082] md: md0: recover done. [ 291.849837][ T9085] syzkaller0: entered promiscuous mode [ 291.849865][ T9085] syzkaller0: entered allmulticast mode [ 291.853959][ T9085] tipc: Started in network mode [ 291.853992][ T9085] tipc: Node identity ead88e02447f, cluster identity 4711 [ 291.857025][ T9085] tipc: Enabled bearer , priority 0 [ 291.860645][ T9085] tipc: Resetting bearer [ 291.867933][ T9083] tipc: Resetting bearer [ 291.886162][ T9089] md: recover of RAID array md0 [ 291.886200][ T9089] md: md0: recover done. [ 291.932422][ T9083] tipc: Disabling bearer [ 291.948127][ T9092] md: recover of RAID array md0 [ 291.948200][ T9092] md: md0: recover done. [ 292.016411][ T9093] md: recover of RAID array md0 [ 292.016449][ T9093] md: md0: recover done. [ 292.075867][ T9095] evm: overlay not supported [ 292.106711][ T9098] md: recover of RAID array md0 [ 292.110667][ T9098] md: md0: recover done. [ 292.205864][ T9101] md: recover of RAID array md0 [ 292.205936][ T9101] md: md0: recover done. [ 292.329089][ T9105] md: recover of RAID array md0 [ 292.329130][ T9105] md: md0: recover done. [ 292.362489][ T9106] netlink: 'syz.0.874': attribute type 2 has an invalid length. [ 292.462374][ T9110] fuse: Bad value for 'fd' [ 292.538594][ T9113] md: recover of RAID array md0 [ 292.539875][ T9113] md: md0: recover done. [ 292.666376][ T9116] md: recover of RAID array md0 [ 292.666450][ T9116] md: md0: recover done. [ 292.767680][ T9122] md: recover of RAID array md0 [ 292.767714][ T9122] md: md0: recover done. [ 292.986055][ T9127] md: recover of RAID array md0 [ 292.986095][ T9127] md: md0: recover done. [ 293.180886][ T9138] md: recover of RAID array md0 [ 293.180964][ T9138] md: md0: recover done. [ 293.258583][ T9142] md: recover of RAID array md0 [ 293.258624][ T9142] md: md0: recover done. [ 293.359202][ T9143] md: recover of RAID array md0 [ 293.360856][ T9143] md: md0: recover done. [ 293.956160][ T9149] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 293.956198][ T9149] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 293.960540][ T9155] netlink: 148 bytes leftover after parsing attributes in process `syz.3.891'. [ 293.992187][ T9149] vhci_hcd vhci_hcd.0: Device attached [ 293.994349][ T9153] vhci_hcd: connection closed [ 294.014672][ T1371] vhci_hcd vhci_hcd.4: stop threads [ 294.015260][ T1371] vhci_hcd vhci_hcd.4: release socket [ 294.015293][ T1371] vhci_hcd vhci_hcd.4: disconnect device [ 294.447181][ T9180] md: recover of RAID array md0 [ 294.447252][ T9180] md: md0: recover done. [ 294.719098][ T9190] md: recover of RAID array md0 [ 294.719126][ T9190] md: md0: recover done. [ 294.859300][ T9197] md: recover of RAID array md0 [ 294.859344][ T9197] md: md0: recover done. [ 294.886245][ T9196] jffs2: notice: (9196) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 295.011438][ T9203] md: recover of RAID array md0 [ 295.011478][ T9203] md: md0: recover done. [ 295.248951][ T9210] md: recover of RAID array md0 [ 295.249002][ T9210] md: md0: recover done. [ 295.417643][ T9214] md: recover of RAID array md0 [ 295.417723][ T9214] md: md0: recover done. [ 295.482336][ T4927] Bluetooth: hci5: unexpected event for opcode 0x0411 [ 295.536977][ T9221] md: recover of RAID array md0 [ 295.537021][ T9221] md: md0: recover done. [ 295.655752][ T9224] md: recover of RAID array md0 [ 295.655831][ T9224] md: md0: recover done. [ 295.726376][ T9226] md: recover of RAID array md0 [ 295.726444][ T9226] md: md0: recover done. [ 295.837327][ T9222] dlm: no locking on control device [ 295.879703][ T9232] md: recover of RAID array md0 [ 295.879737][ T9232] md: md0: recover done. [ 296.019968][ T9238] md: recover of RAID array md0 [ 296.020099][ T9238] md: md0: recover done. [ 296.173042][ T9239] md: recover of RAID array md0 [ 296.173091][ T9239] md: md0: recover done. [ 296.310907][ T9244] md: recover of RAID array md0 [ 296.310994][ T9244] md: md0: recover done. [ 296.491060][ T9246] md: recover of RAID array md0 [ 296.491100][ T9246] md: md0: recover done. [ 296.568588][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 296.568655][ T9247] IPv6: Can't replace route, no match found [ 296.657346][ T9256] md: recover of RAID array md0 [ 296.657385][ T9256] md: md0: recover done. [ 296.938192][ T9260] md: recover of RAID array md0 [ 296.938235][ T9260] md: md0: recover done. [ 297.038277][ T9262] fuse: fd is not a fuse device [ 297.095048][ T9263] md: recover of RAID array md0 [ 297.095136][ T9263] md: md0: recover done. [ 297.199403][ T9266] md: recover of RAID array md0 [ 297.199477][ T9266] md: md0: recover done. [ 297.291270][ T9271] md: recover of RAID array md0 [ 297.291343][ T9271] md: md0: recover done. [ 297.358379][ T9269] netlink: 'syz.4.924': attribute type 1 has an invalid length. [ 297.358406][ T9269] netlink: 224 bytes leftover after parsing attributes in process `syz.4.924'. [ 297.365809][ T9274] md: recover of RAID array md0 [ 297.365845][ T9274] md: md0: recover done. [ 297.550335][ T9277] md: recover of RAID array md0 [ 297.550420][ T9277] md: md0: recover done. [ 297.645903][ T9282] md: recover of RAID array md0 [ 297.645978][ T9282] md: md0: recover done. [ 297.746563][ T9286] md: recover of RAID array md0 [ 297.746606][ T9286] md: md0: recover done. [ 297.862458][ T9288] md: recover of RAID array md0 [ 297.862547][ T9288] md: md0: recover done. [ 297.977572][ T9289] md: recover of RAID array md0 [ 297.977646][ T9289] md: md0: recover done. [ 298.126488][ T9290] md: recover of RAID array md0 [ 298.126575][ T9290] md: md0: recover done. [ 298.166874][ T9174] IPVS: starting estimator thread 0... [ 298.240178][ T9298] md: recover of RAID array md0 [ 298.240258][ T9298] md: md0: recover done. [ 298.255519][ T9297] IPVS: using max 24 ests per chain, 57600 per kthread [ 298.379277][ T9299] md: recover of RAID array md0 [ 298.379350][ T9299] md: md0: recover done. [ 298.498622][ T9303] md: recover of RAID array md0 [ 298.498662][ T9303] md: md0: recover done. [ 298.685604][ T9307] md: recover of RAID array md0 [ 298.685643][ T9307] md: md0: recover done. [ 298.807096][ T9314] md: recover of RAID array md0 [ 298.807136][ T9314] md: md0: recover done. [ 298.930278][ T9316] md: recover of RAID array md0 [ 298.930323][ T9316] md: md0: recover done. [ 299.005840][ T9317] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 299.059068][ T9321] md: recover of RAID array md0 [ 299.059112][ T9321] md: md0: recover done. [ 299.227265][ T9328] md: recover of RAID array md0 [ 299.227306][ T9328] md: md0: recover done. [ 299.367974][ T9335] md: recover of RAID array md0 [ 299.368018][ T9335] md: md0: recover done. [ 299.488663][ T9338] md: recover of RAID array md0 [ 299.488704][ T9338] md: md0: recover done. [ 299.572114][ T9341] syz.0.943 uses obsolete (PF_INET,SOCK_PACKET) [ 300.041495][ T9344] FAULT_INJECTION: forcing a failure. [ 300.041495][ T9344] name failslab, interval 1, probability 0, space 0, times 0 [ 300.041546][ T9344] CPU: 0 UID: 0 PID: 9344 Comm: syz.3.944 Not tainted syzkaller #0 PREEMPT(full) [ 300.041574][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 300.041589][ T9344] Call Trace: [ 300.041599][ T9344] [ 300.041610][ T9344] dump_stack_lvl+0xe8/0x150 [ 300.041652][ T9344] should_fail_ex+0x410/0x560 [ 300.041692][ T9344] should_failslab+0xa8/0x100 [ 300.041727][ T9344] __kmalloc_noprof+0xfe/0x720 [ 300.041754][ T9344] ? __list_lru_init+0xba/0x5d0 [ 300.041781][ T9344] ? __list_lru_init+0xba/0x5d0 [ 300.041808][ T9344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.041846][ T9344] __list_lru_init+0xba/0x5d0 [ 300.041881][ T9344] sget_fc+0xf41/0x1a40 [ 300.041928][ T9344] ? __pfx_set_anon_super_fc+0x10/0x10 [ 300.041970][ T9344] ? __pfx_sget_fc+0x10/0x10 [ 300.042002][ T9344] ? __kmalloc_cache_noprof+0x321/0x600 [ 300.042029][ T9344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.042058][ T9344] ? vfs_parse_monolithic_sep+0xd0/0x360 [ 300.042083][ T9344] ? shmem_init_fs_context+0x54/0x290 [ 300.042114][ T9344] ? __pfx_shmem_next_opt+0x10/0x10 [ 300.042160][ T9344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.042191][ T9344] ? __pfx_shmem_fill_super+0x10/0x10 [ 300.042231][ T9344] get_tree_nodev+0x2a/0x150 [ 300.042273][ T9344] vfs_get_tree+0x92/0x2a0 [ 300.042301][ T9344] do_new_mount+0x319/0xdc0 [ 300.042336][ T9344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.042371][ T9344] ? __pfx_do_new_mount+0x10/0x10 [ 300.042407][ T9344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.042434][ T9344] ? ns_capable+0x89/0xe0 [ 300.042471][ T9344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.042510][ T9344] ? path_mount+0x647/0x1050 [ 300.042547][ T9344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.042576][ T9344] ? user_path_at+0xd4/0x160 [ 300.042617][ T9344] __se_sys_mount+0x31d/0x420 [ 300.042660][ T9344] ? __pfx___se_sys_mount+0x10/0x10 [ 300.042704][ T9344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.042734][ T9344] ? __x64_sys_mount+0x20/0xc0 [ 300.042773][ T9344] do_syscall_64+0x166/0x520 [ 300.042805][ T9344] ? trace_irq_disable+0x3b/0x140 [ 300.042831][ T9344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.042864][ T9344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.042890][ T9344] RIP: 0033:0x7f286199e159 [ 300.042914][ T9344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.042936][ T9344] RSP: 002b:00007f286290b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 300.042964][ T9344] RAX: ffffffffffffffda RBX: 00007f2861c25fa0 RCX: 00007f286199e159 [ 300.042984][ T9344] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 300.043002][ T9344] RBP: 00007f2861a3506b R08: 0000000000000000 R09: 0000000000000000 [ 300.043019][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.043035][ T9344] R13: 00007f2861c26038 R14: 00007f2861c25fa0 R15: 00007ffeb97ffd68 [ 300.043075][ T9344] [ 300.054375][ T9346] input: syz0 as /devices/virtual/input/input18 [ 300.349152][ T9347] md: recover of RAID array md0 [ 300.349195][ T9347] md: md0: recover done. [ 405.044980][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 405.051953][ C1] rcu: 0-...!: (1 GPs behind) idle=cc74/1/0x4000000000000000 softirq=36729/36730 fqs=24 [ 405.061765][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6347/1:b..l [ 405.069688][ C1] rcu: (detected by 1, t=10502 jiffies, g=37633, q=1081 ncpus=2) [ 405.077500][ C1] Sending NMI from CPU 1 to CPUs 0: [ 405.082709][ C0] NMI backtrace for cpu 0 [ 405.082727][ C0] CPU: 0 UID: 0 PID: 5610 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 405.082754][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 405.082772][ C0] RIP: 0010:match_held_lock+0xe/0x120 [ 405.082808][ C0] Code: 41 5f e9 b0 97 2a f5 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 bb 01 00 00 00 48 39 77 10 <0f> 84 c6 00 00 00 0f b7 47 22 a9 e0 ff 00 00 0f 84 b5 00 00 00 48 [ 405.082828][ C0] RSP: 0018:ffffc90000007d68 EFLAGS: 00000046 [ 405.082849][ C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: 0000000001000001 [ 405.082864][ C0] RDX: 0000000001000001 RSI: ffff8880b8628298 RDI: ffff88807f98ab68 [ 405.082881][ C0] RBP: 00000000ffffffff R08: 0000000001000001 R09: ffff888068a47308 [ 405.082897][ C0] R10: dffffc0000000000 R11: ffffed100d148e63 R12: 0000000000000046 [ 405.082914][ C0] R13: ffff88807f989f40 R14: ffff8880b8628298 R15: 0000000000000003 [ 405.082933][ C0] FS: 0000555567e93500(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 405.082954][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.082970][ C0] CR2: 00007fdecfb556c8 CR3: 0000000059446000 CR4: 0000000000350ef0 [ 405.082992][ C0] Call Trace: [ 405.083003][ C0] [ 405.083014][ C0] lock_is_held_type+0x89/0x150 [ 405.083044][ C0] __hrtimer_run_queues+0x20b/0xa10 [ 405.083090][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 405.083139][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 405.083170][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 405.083199][ C0] [ 405.083206][ C0] [ 405.083216][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 405.083242][ C0] RIP: 0010:mas_find+0xc0/0xcb0 [ 405.083270][ C0] Code: 6d 00 bf 00 03 00 00 89 ee e8 7c 9e e9 f5 81 fd 00 03 00 00 75 24 e8 6f 99 e9 f5 4c 89 e0 48 c1 e8 03 4d 89 fd 42 80 3c 38 00 <74> 08 4c 89 e7 e8 36 a1 59 f6 4d 8b 24 24 eb 0c e8 4b 99 e9 f5 49 [ 405.083289][ C0] RSP: 0018:ffffc900041a7710 EFLAGS: 00000246 [ 405.083308][ C0] RAX: 1ffff11006602338 RBX: 1ffff92000834f19 RCX: ffff88807f989f40 [ 405.083326][ C0] RDX: 0000000000000000 RSI: 0000000000000300 RDI: 0000000000000300 [ 405.083340][ C0] RBP: 0000000000000300 R08: ffff8880762d07a7 R09: 1ffff1100ec5a0f4 [ 405.083357][ C0] R10: dffffc0000000000 R11: ffffed100ec5a0f5 R12: ffff8880330119c0 [ 405.083374][ C0] R13: dffffc0000000000 R14: ffffc900041a7880 R15: dffffc0000000000 [ 405.083403][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.083434][ C0] dup_mmap+0xf83/0x1dc0 [ 405.083482][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 405.083516][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.083543][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 405.083584][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.083611][ C0] ? lock_acquire+0x115/0x350 [ 405.083633][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.083669][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.083710][ C0] copy_mm+0x11a/0x480 [ 405.083742][ C0] ? copy_process+0xd3c/0x43e0 [ 405.083771][ C0] copy_process+0x1e75/0x43e0 [ 405.083807][ C0] ? copy_process+0xd3c/0x43e0 [ 405.083848][ C0] ? __pfx_copy_process+0x10/0x10 [ 405.083886][ C0] kernel_clone+0x2d7/0x940 [ 405.083922][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 405.083966][ C0] __x64_sys_clone+0x1b6/0x230 [ 405.084001][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 405.084045][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.084072][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 405.084101][ C0] do_syscall_64+0x166/0x520 [ 405.084130][ C0] ? trace_irq_disable+0x3b/0x140 [ 405.084153][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.084181][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.084205][ C0] RIP: 0033:0x7fdecedc6bd2 [ 405.084225][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 405.084245][ C0] RSP: 002b:00007ffd2fb5f8d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 405.084267][ C0] RAX: ffffffffffffffda RBX: 00007ffd2fb5f8d0 RCX: 00007fdecedc6bd2 [ 405.084284][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 405.084299][ C0] RBP: 00007ffd2fb5fa5c R08: 0000000000000000 R09: 0000000000000001 [ 405.084314][ C0] R10: 0000555567e937d0 R11: 0000000000000246 R12: 0000000000000001 [ 405.084328][ C0] R13: 00000000000927c0 R14: 00000000000493d5 R15: 00007ffd2fb5fab0 [ 405.084355][ C0] [ 405.514740][ C1] task:syz-executor state:R running task stack:22256 pid:6347 tgid:6347 ppid:6339 task_flags:0x400140 flags:0x00080000 [ 405.528254][ C1] Call Trace: [ 405.531534][ C1] [ 405.534554][ C1] __schedule+0x17db/0x58f0 [ 405.539072][ C1] ? __lock_acquire+0x747/0x2de0 [ 405.544024][ C1] ? __lock_acquire+0x747/0x2de0 [ 405.548966][ C1] ? __lock_acquire+0x747/0x2de0 [ 405.553913][ C1] ? __pfx___schedule+0x10/0x10 [ 405.558780][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.564427][ C1] preempt_schedule_irq+0x4b/0x90 [ 405.569464][ C1] irqentry_exit+0x14f/0x910 [ 405.574072][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.579725][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 405.585207][ C1] RIP: 0010:unwind_next_frame+0x1b68/0x2550 [ 405.591125][ C1] Code: 8b 7c 24 10 43 0f b6 04 27 84 c0 0f 85 6d 02 00 00 41 c7 06 00 00 00 00 31 ed e8 f3 9d 6d 0a 85 c0 74 3a e8 fa 55 34 00 84 c0 <75> 31 e8 e1 9d 6d 0a 85 c0 74 28 80 3d 9e 96 eb 0e 00 75 1f c6 05 [ 405.610744][ C1] RSP: 0018:ffffc9000695f5c0 EFLAGS: 00000202 [ 405.616880][ C1] RAX: 0000000000000001 RBX: ffffc9000695f678 RCX: 8000000000000001 [ 405.624854][ C1] RDX: ffffc9000695f601 RSI: ffffffff8c6da060 RDI: ffffffff8c6da020 [ 405.632825][ C1] RBP: 1ffffffff2337801 R08: ffffc9000695fee0 R09: ffffc9000695f6b8 [ 405.640797][ C1] R10: dffffc0000000000 R11: fffff52000d2bed9 R12: ffffc90006958000 [ 405.648774][ C1] R13: ffffffff8177f1df R14: ffffc9000695f668 R15: ffffc9000695fef0 [ 405.656752][ C1] ? unwind_next_frame+0x8f/0x2550 [ 405.661896][ C1] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 405.667274][ C1] ? unwind_next_frame+0x8f/0x2550 [ 405.672395][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 405.678553][ C1] arch_stack_walk+0x11b/0x150 [ 405.683331][ C1] ? do_syscall_64+0x166/0x520 [ 405.688106][ C1] stack_trace_save+0xa9/0x100 [ 405.692877][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 405.698341][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.703978][ C1] ? __lock_acquire+0x747/0x2de0 [ 405.708923][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.714565][ C1] save_stack+0x122/0x230 [ 405.718903][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.724544][ C1] ? __pfx_save_stack+0x10/0x10 [ 405.729398][ C1] ? free_pages_prepare+0x9eb/0xaf0 [ 405.734603][ C1] ? __free_contig_range_common+0x174/0x340 [ 405.740506][ C1] ? free_pages_bulk+0x48/0x120 [ 405.745361][ C1] ? vfree+0x231/0x490 [ 405.749436][ C1] ? __do_replace+0x855/0x9a0 [ 405.754115][ C1] ? do_ip6t_set_ctl+0xb45/0xe30 [ 405.759052][ C1] ? nf_setsockopt+0x26f/0x290 [ 405.763817][ C1] ? do_sock_setsockopt+0x17c/0x1b0 [ 405.769018][ C1] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 405.774406][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.780045][ C1] ? page_ext_put+0x97/0xc0 [ 405.784560][ C1] __reset_page_owner+0x71/0x1f0 [ 405.789511][ C1] free_pages_prepare+0x9eb/0xaf0 [ 405.794561][ C1] __free_contig_range_common+0x174/0x340 [ 405.800305][ C1] free_pages_bulk+0x48/0x120 [ 405.804995][ C1] vfree+0x231/0x490 [ 405.808908][ C1] __do_replace+0x855/0x9a0 [ 405.813507][ C1] ? __pfx___do_replace+0x10/0x10 [ 405.818539][ C1] ? _copy_from_user+0x94/0xb0 [ 405.823308][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.828994][ C1] do_ip6t_set_ctl+0xb45/0xe30 [ 405.833773][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.839406][ C1] ? rcu_is_watching+0x16/0xb0 [ 405.844184][ C1] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 405.849486][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.855131][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.860765][ C1] ? __mutex_unlock_slowpath+0x731/0x900 [ 405.866407][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 405.871699][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 405.876912][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 405.882919][ C1] nf_setsockopt+0x26f/0x290 [ 405.887518][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 405.893413][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 405.898457][ C1] __x64_sys_setsockopt+0x13d/0x1b0 [ 405.903677][ C1] do_syscall_64+0x166/0x520 [ 405.908275][ C1] ? trace_irq_disable+0x3b/0x140 [ 405.913299][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.919380][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.925280][ C1] RIP: 0033:0x7fc5b1b9f99a [ 405.929688][ C1] RSP: 002b:00007fff70c1e3c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 405.938104][ C1] RAX: ffffffffffffffda RBX: 00007fff70c1e450 RCX: 00007fc5b1b9f99a [ 405.946074][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 405.954041][ C1] RBP: 0000000000000003 R08: 0000000000000558 R09: 0000000000000000 [ 405.962009][ C1] R10: 00007fc5b1deebe0 R11: 0000000000000202 R12: 00007fc5b1deeb80 [ 405.969981][ C1] R13: 00007fff70c1e3ec R14: 0000000000000000 R15: 00007fc5b1deffc0 [ 405.977973][ C1] [ 405.980988][ C1] rcu: rcu_preempt kthread starved for 10454 jiffies! g37633 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 405.992000][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 406.001959][ C1] rcu: RCU grace-period kthread stack dump: [ 406.007834][ C1] task:rcu_preempt state:R running task stack:27368 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 406.021395][ C1] Call Trace: [ 406.024678][ C1] [ 406.027608][ C1] __schedule+0x17db/0x58f0 [ 406.032120][ C1] ? __lock_acquire+0x747/0x2de0 [ 406.037074][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 406.042215][ C1] ? __pfx___schedule+0x10/0x10 [ 406.047064][ C1] ? lock_acquire+0x115/0x350 [ 406.051805][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.057444][ C1] ? schedule+0x90/0x2b0 [ 406.061692][ C1] schedule+0x164/0x2b0 [ 406.065861][ C1] schedule_timeout+0x152/0x2c0 [ 406.070737][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 406.076145][ C1] ? __pfx_process_timeout+0x10/0x10 [ 406.081460][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.087100][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 406.092913][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.098549][ C1] ? prepare_to_swait_event+0x322/0x350 [ 406.104114][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 406.108986][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 406.115142][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 406.120435][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 406.125676][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 406.131490][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 406.136082][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 406.141280][ C1] ? __kthread_parkme+0x71/0x1f0 [ 406.146227][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.151862][ C1] ? __kthread_parkme+0x199/0x1f0 [ 406.156902][ C1] kthread+0x38b/0x480 [ 406.160972][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 406.166165][ C1] ? __pfx_kthread+0x10/0x10 [ 406.170759][ C1] ret_from_fork+0x514/0xb70 [ 406.175358][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 406.180466][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.186097][ C1] ? __switch_to+0xc89/0x1420 [ 406.190786][ C1] ? __pfx_kthread+0x10/0x10 [ 406.195380][ C1] ret_from_fork_asm+0x1a/0x30 [ 406.200203][ C1] [ 406.203221][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 406.209537][ C1] CPU: 1 UID: 0 PID: 9329 Comm: syz.1.940 Not tainted syzkaller #0 PREEMPT(full) [ 406.218750][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 406.228801][ C1] RIP: 0010:smp_call_function_many_cond+0x61e/0x1500 [ 406.235487][ C1] Code: b6 04 04 84 c0 0f 85 d5 03 00 00 44 8b 3b 44 89 fe 83 e6 01 31 ff e8 31 56 0c 00 41 83 e7 01 75 07 e8 26 51 0c 00 eb 3f f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 75 0f f7 03 01 [ 406.255095][ C1] RSP: 0018:ffffc9000d5bf460 EFLAGS: 00000293 [ 406.261185][ C1] RAX: ffffffff81bb817e RBX: ffff8880b8643708 RCX: ffff8880284e1f40 [ 406.269181][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 406.277154][ C1] RBP: ffffc9000d5bf5b0 R08: ffff8880284e34df R09: 1ffff1100509c69b [ 406.285126][ C1] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff110170c86e1 [ 406.293096][ C1] R13: 0000000000000000 R14: ffff8880b8643700 R15: 0000000000000001 [ 406.301157][ C1] FS: 0000000000000000(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 406.310100][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.316689][ C1] CR2: 00007fb15c73ebb1 CR3: 0000000076593000 CR4: 0000000000350ef0 [ 406.324673][ C1] Call Trace: [ 406.327946][ C1] [ 406.330878][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 406.336099][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 406.342441][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.348087][ C1] ? rcu_is_watching+0x16/0xb0 [ 406.352859][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.358494][ C1] ? trace_tlb_flush+0x3c/0x160 [ 406.363446][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.369142][ C1] flush_tlb_mm_range+0x8ff/0x1090 [ 406.374294][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 406.379863][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.385546][ C1] ? lock_acquire+0x115/0x350 [ 406.390237][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 406.395353][ C1] tlb_flush_mmu+0x1af/0xa30 [ 406.399952][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.405674][ C1] tlb_finish_mmu+0xf4/0x220 [ 406.410272][ C1] exit_mmap+0x4b2/0x9f0 [ 406.414532][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 406.419340][ C1] ? __pfx_exit_aio+0x10/0x10 [ 406.424050][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.429702][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 406.434913][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.440557][ C1] __mmput+0x118/0x420 [ 406.444647][ C1] exit_mm+0x221/0x2d0 [ 406.448735][ C1] do_exit+0x6cd/0x2360 [ 406.452899][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.458545][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.464211][ C1] ? __pfx_do_exit+0x10/0x10 [ 406.468812][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 406.473879][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.479548][ C1] do_group_exit+0x22d/0x2f0 [ 406.484143][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.489368][ C1] get_signal+0x121b/0x12c0 [ 406.493904][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 406.499463][ C1] ? __pfx_task_work_add+0x10/0x10 [ 406.504581][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 406.510749][ C1] ? sock_ioctl+0x57a/0x7e0 [ 406.515306][ C1] ? __fput_deferred+0x222/0x390 [ 406.520265][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 406.525642][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.531276][ C1] ? rcu_is_watching+0x16/0xb0 [ 406.536054][ C1] do_syscall_64+0x328/0x520 [ 406.540661][ C1] ? trace_irq_disable+0x3b/0x140 [ 406.545751][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.552190][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.558099][ C1] RIP: 0033:0x7f0fcf39e159 [ 406.562513][ C1] Code: Unable to access opcode bytes at 0x7f0fcf39e12f. [ 406.569622][ C1] RSP: 002b:00007f0fcd5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.578044][ C1] RAX: ffffffffffffffed RBX: 00007f0fcf626090 RCX: 00007f0fcf39e159 [ 406.586017][ C1] RDX: 0000200000000380 RSI: 0000000000008933 RDI: 0000000000000004 [ 406.593988][ C1] RBP: 00007f0fcf43506b R08: 0000000000000000 R09: 0000000000000000 [ 406.601960][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.609933][ C1] R13: 00007f0fcf626128 R14: 00007f0fcf626090 R15: 00007ffcd7b366b8 [ 406.618196][ C1]