last executing test programs: 4.123535322s ago: executing program 1 (id=139): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 3.220440351s ago: executing program 1 (id=143): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50e7, &(0x7f00000051c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000040)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x41e90000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.973863096s ago: executing program 3 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x0, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000006c0)=[@text32={0x20, &(0x7f0000000e40)="660f28cb0f3566b8420066baf80cb8363d3085ef66bafc0c9a008000002000eeb8f30000c3b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x42}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.595073305s ago: executing program 3 (id=147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='westwood', 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x15, 0x87}}}}}]}}]}}, 0x0) shutdown(r0, 0x1) 2.479092207s ago: executing program 2 (id=148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x32, 0xe, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) 2.079731285s ago: executing program 2 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xa5, 0x2c, 0x601, 0x200, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x6, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x401, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0xc}, {0x81, 0x5, 0x9, 0x7}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 1.956193468s ago: executing program 1 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 1.809930551s ago: executing program 2 (id=154): pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="38010000fe00003e2a"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.717318883s ago: executing program 0 (id=155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0xa1, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.492150238s ago: executing program 2 (id=156): pipe2(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r0, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 1.42588111s ago: executing program 0 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000c00)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x80, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}}}}}, 0x32) 1.415417459s ago: executing program 1 (id=158): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1.291943492s ago: executing program 2 (id=159): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 1.120181596s ago: executing program 2 (id=160): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 1.116077356s ago: executing program 0 (id=161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000740)="440f20c03592000020440f22c0fb01c966bad104ed0f23c00f21f866b846008ed00f23f80f01cbb8010000000f01c146a70f3236660fc6b8730f0000c9b98f020000b8b90000007e25470f01e8", 0x4d}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 879.200691ms ago: executing program 3 (id=162): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x1021002, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 629.519576ms ago: executing program 3 (id=163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) 601.786107ms ago: executing program 0 (id=164): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffbf, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) 325.461403ms ago: executing program 0 (id=165): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2364, &(0x7f0000000040)={0x0, 0x80036d, 0xc000, 0x10, 0xa0002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 311.216863ms ago: executing program 3 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000180)=ANY=[], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 115.723287ms ago: executing program 0 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 115.575037ms ago: executing program 1 (id=168): openat$rtc(0xffffffffffffff9c, &(0x7f0000002bc0), 0xa80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000693000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 114.882447ms ago: executing program 3 (id=169): openat$sysfs(0xffffffffffffff9c, 0x0, 0x200, 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) sync() write(r0, &(0x7f0000000140)='off\n', 0x4) write(r0, &(0x7f0000000180)='on', 0x2) 0s ago: executing program 1 (id=170): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00f100", 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 75.704596][ T5762] cgroup: Unknown subsys name 'net' [ 75.838071][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.650165][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.325906][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.334490][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.342426][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.361253][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.369487][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.397537][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.406835][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.407736][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.414707][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.421255][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.428408][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.443613][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.444456][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.459898][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.461157][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.469722][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.474759][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.489024][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.489513][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.504055][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.506779][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.527322][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.539450][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.550771][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.978784][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 80.058666][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.109926][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 80.173962][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 80.232542][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.240162][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.248555][ T5774] bridge_slave_0: entered allmulticast mode [ 80.257464][ T5774] bridge_slave_0: entered promiscuous mode [ 80.311906][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.319080][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.326490][ T5774] bridge_slave_1: entered allmulticast mode [ 80.333560][ T5774] bridge_slave_1: entered promiscuous mode [ 80.388406][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.398152][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.405545][ T5775] bridge_slave_0: entered allmulticast mode [ 80.413913][ T5775] bridge_slave_0: entered promiscuous mode [ 80.451286][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.460919][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.468183][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.478756][ T5775] bridge_slave_1: entered allmulticast mode [ 80.485813][ T5775] bridge_slave_1: entered promiscuous mode [ 80.527433][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.548351][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.555988][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.563315][ T5779] bridge_slave_0: entered allmulticast mode [ 80.570212][ T5779] bridge_slave_0: entered promiscuous mode [ 80.578784][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.588847][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.596249][ T5780] bridge_slave_0: entered allmulticast mode [ 80.604071][ T5780] bridge_slave_0: entered promiscuous mode [ 80.633458][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.646432][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.654502][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.661867][ T5779] bridge_slave_1: entered allmulticast mode [ 80.668810][ T5779] bridge_slave_1: entered promiscuous mode [ 80.685783][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.693202][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.700401][ T5780] bridge_slave_1: entered allmulticast mode [ 80.707828][ T5780] bridge_slave_1: entered promiscuous mode [ 80.717587][ T5774] team0: Port device team_slave_0 added [ 80.729312][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.762099][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.772921][ T5774] team0: Port device team_slave_1 added [ 80.813711][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.835275][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.849737][ T5775] team0: Port device team_slave_0 added [ 80.878337][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.892138][ T5775] team0: Port device team_slave_1 added [ 80.909780][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.916918][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.943541][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.986292][ T5779] team0: Port device team_slave_0 added [ 80.993045][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.000035][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.026621][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.059324][ T5779] team0: Port device team_slave_1 added [ 81.075353][ T5780] team0: Port device team_slave_0 added [ 81.083563][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.090872][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.116989][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.129750][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.136959][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.162977][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.187362][ T5780] team0: Port device team_slave_1 added [ 81.262045][ T5775] hsr_slave_0: entered promiscuous mode [ 81.268418][ T5775] hsr_slave_1: entered promiscuous mode [ 81.278497][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.285720][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.312286][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.351588][ T5774] hsr_slave_0: entered promiscuous mode [ 81.359151][ T5774] hsr_slave_1: entered promiscuous mode [ 81.365687][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.374225][ T5774] Cannot create hsr debugfs directory [ 81.380524][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.387485][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.414005][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.425906][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.433590][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.460015][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.473625][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.480773][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.506762][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.543607][ T5781] Bluetooth: hci0: command tx timeout [ 81.543624][ T5783] Bluetooth: hci1: command tx timeout [ 81.610800][ T5781] Bluetooth: hci2: command tx timeout [ 81.620686][ T5781] Bluetooth: hci3: command tx timeout [ 81.687717][ T5780] hsr_slave_0: entered promiscuous mode [ 81.695171][ T5780] hsr_slave_1: entered promiscuous mode [ 81.702611][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.710184][ T5780] Cannot create hsr debugfs directory [ 81.732702][ T5779] hsr_slave_0: entered promiscuous mode [ 81.741664][ T5779] hsr_slave_1: entered promiscuous mode [ 81.747821][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.755668][ T5779] Cannot create hsr debugfs directory [ 82.102236][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.119062][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.129726][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.141567][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.214347][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.233342][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.248004][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.260881][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.349195][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.365584][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.375479][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.399170][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.479605][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.507872][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.519111][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.530392][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.548630][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.618890][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.677202][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.684579][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.710908][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.718110][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.770050][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.836043][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.861152][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.874304][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.908087][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.934504][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.941832][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.958362][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.965626][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.009253][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.038494][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.057096][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.064316][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.142172][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.149392][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.168630][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.175785][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.207740][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.214968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.287515][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.377390][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.518784][ T5775] veth0_vlan: entered promiscuous mode [ 83.556561][ T5775] veth1_vlan: entered promiscuous mode [ 83.611391][ T5781] Bluetooth: hci0: command tx timeout [ 83.612725][ T5783] Bluetooth: hci1: command tx timeout [ 83.669916][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.691346][ T5783] Bluetooth: hci3: command tx timeout [ 83.692200][ T5781] Bluetooth: hci2: command tx timeout [ 83.727137][ T5775] veth0_macvtap: entered promiscuous mode [ 83.764418][ T5775] veth1_macvtap: entered promiscuous mode [ 83.843801][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.879437][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.907094][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.918359][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.927631][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.937286][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.968991][ T5774] veth0_vlan: entered promiscuous mode [ 83.987244][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.013077][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.024444][ T5774] veth1_vlan: entered promiscuous mode [ 84.183323][ T5774] veth0_macvtap: entered promiscuous mode [ 84.192290][ T5779] veth0_vlan: entered promiscuous mode [ 84.219043][ T5774] veth1_macvtap: entered promiscuous mode [ 84.229628][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.247406][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.266547][ T5780] veth0_vlan: entered promiscuous mode [ 84.308044][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.308854][ T5779] veth1_vlan: entered promiscuous mode [ 84.320768][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.336820][ T5780] veth1_vlan: entered promiscuous mode [ 84.353117][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.364226][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.376328][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.392271][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.403108][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.417324][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.453497][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.462981][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.472789][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.481641][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.566598][ T5780] veth0_macvtap: entered promiscuous mode [ 84.593125][ T5779] veth0_macvtap: entered promiscuous mode [ 84.611919][ T5780] veth1_macvtap: entered promiscuous mode [ 84.624682][ T5779] veth1_macvtap: entered promiscuous mode [ 84.698332][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.719254][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.734144][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.744885][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.757000][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.776942][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.787569][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.797983][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.808521][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.820314][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.843229][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.871294][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.888428][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.908297][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.922374][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.933291][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.945270][ T28] audit: type=1326 audit(1791045147.385:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b819e159 code=0x7ffc0000 [ 84.967751][ T5844] syz.3.5[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.969129][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.988415][ T28] audit: type=1326 audit(1791045147.385:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b819e159 code=0x7ffc0000 [ 85.020899][ T28] audit: type=1326 audit(1791045147.385:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6b819e159 code=0x7ffc0000 [ 85.030163][ T5844] loop3: detected capacity change from 0 to 1024 [ 85.045536][ T28] audit: type=1326 audit(1791045147.385:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b819e159 code=0x7ffc0000 [ 85.066148][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.102277][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.106569][ T5844] hfsplus: unknown catalog record type 65281 [ 85.112337][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.112360][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.112369][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.130967][ T28] audit: type=1326 audit(1791045147.385:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b819e159 code=0x7ffc0000 [ 85.149522][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.156330][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.216845][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.227694][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.234736][ T28] audit: type=1326 audit(1791045147.385:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa6b819e159 code=0x7ffc0000 [ 85.240516][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.269204][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.310037][ T28] audit: type=1326 audit(1791045147.435:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6b819dec2 code=0x7ffc0000 [ 85.354376][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.373941][ T28] audit: type=1326 audit(1791045147.445:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa6b815e98e code=0x7ffc0000 [ 85.386776][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.402927][ T28] audit: type=1326 audit(1791045147.465:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa6b819df87 code=0x7ffc0000 [ 85.408568][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.455471][ T28] audit: type=1326 audit(1791045147.465:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6b815e98e code=0x7ffc0000 [ 85.457618][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.495325][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.514629][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.608341][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.636838][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.669151][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.690834][ T5781] Bluetooth: hci0: command tx timeout [ 85.691461][ T5783] Bluetooth: hci1: command tx timeout [ 85.701776][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.772485][ T5783] Bluetooth: hci3: command tx timeout [ 85.781211][ T5783] Bluetooth: hci2: command tx timeout [ 85.815824][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.837402][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.937361][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.959075][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.986096][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.003645][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 86.019638][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.031606][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 86.388355][ T5866] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 86.485923][ T5857] loop3: detected capacity change from 0 to 1024 [ 86.519605][ T5857] hfsplus: unable to parse mount options [ 86.933157][ T5879] loop2: detected capacity change from 0 to 4096 [ 87.102909][ T5879] ntfs3: loop2: Failed to initialize $Secure::$SDH (-22). [ 87.123040][ T5879] ntfs3: loop2: Failed to initialize $Secure (-22). [ 87.772100][ T5783] Bluetooth: hci1: command tx timeout [ 87.772126][ T5781] Bluetooth: hci0: command tx timeout [ 87.841673][ T5914] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.851008][ T5781] Bluetooth: hci2: command tx timeout [ 87.856455][ T5781] Bluetooth: hci3: command tx timeout [ 88.400394][ T5923] loop3: detected capacity change from 0 to 16 [ 88.416404][ T5923] erofs: (device loop3): mounted with root inode @ nid 36. [ 88.470365][ T5925] input: syz1 as /devices/virtual/input/input5 [ 88.485418][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-diskseq/75.tmp-b7:3' failed: Read-only file system [ 88.515884][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:3' failed: Read-only file system [ 88.622382][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-diskseq/75.tmp-b7:3' failed: Read-only file system [ 88.654897][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:3' failed: Read-only file system [ 88.739667][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-diskseq/75.tmp-b7:3' failed: Read-only file system [ 88.804069][ T5928] loop3: detected capacity change from 0 to 8 [ 88.866185][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-diskseq/75.tmp-b7:3' failed: Read-only file system [ 88.899262][ T5928] SQUASHFS error: Unable to read inode 0xe3 [ 88.928619][ T5930] loop0: detected capacity change from 0 to 256 [ 88.935814][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-diskseq/77.tmp-b7:3' failed: Read-only file system [ 89.048593][ T5776] udevd[5776]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 89.178033][ T5786] udevd[5786]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 89.307832][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-diskseq/77.tmp-b7:3' failed: Read-only file system [ 89.525753][ T5921] loop2: detected capacity change from 0 to 32768 [ 89.570181][ T5941] loop0: detected capacity change from 0 to 512 [ 89.586244][ T5921] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.677338][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.759250][ T5941] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 89.793283][ T5941] FAT-fs (loop0): Filesystem has been set read-only [ 89.812301][ T5941] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 89.832432][ T5941] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 89.880268][ T5921] XFS (loop2): Ending clean mount [ 89.970650][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 89.970668][ T28] audit: type=1800 audit(1791045152.405:34): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.27" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 90.118802][ T5961] gadgetfs: bound to dummy_udc driver [ 90.358457][ T5779] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 90.750693][ T5972] netlink: 'syz.1.44': attribute type 4 has an invalid length. [ 92.189354][ T9] cfg80211: failed to load regulatory.db [ 92.414294][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 92.774667][ T6029] Zero length message leads to an empty skb [ 92.865855][ T6032] loop0: detected capacity change from 0 to 256 [ 92.914749][ T6032] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 92.989485][ T28] audit: type=1800 audit(1791045155.425:35): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.65" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 93.203901][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.67'. [ 94.167249][ T5786] udevd[5786]: symlink '../../loop0' '/dev/disk/by-diskseq/85.tmp-b7:0' failed: Read-only file system [ 94.225440][ T5786] udevd[5786]: symlink '../../loop0' '/dev/disk/by-diskseq/85.tmp-b7:0' failed: Read-only file system [ 94.369410][ T6064] loop0: detected capacity change from 0 to 512 [ 94.379145][ T6069] ======================================================= [ 94.379145][ T6069] WARNING: The mand mount option has been deprecated and [ 94.379145][ T6069] and is ignored by this kernel. Remove the mand [ 94.379145][ T6069] option from the mount to silence this warning. [ 94.379145][ T6069] ======================================================= [ 94.448440][ T6064] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.80: inode has both inline data and extents flags [ 94.464524][ T5786] udevd[5786]: symlink '../../loop0' '/dev/disk/by-diskseq/87.tmp-b7:0' failed: Read-only file system [ 94.464912][ T6069] jffs2: notice: (6069) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.477570][ T5786] udevd[5786]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 94.519450][ T6064] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.80: couldn't read orphan inode 15 (err -117) [ 94.576070][ T6064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.608174][ T5786] udevd[5786]: symlink '../../loop0' '/dev/disk/by-diskseq/87.tmp-b7:0' failed: Read-only file system [ 94.648072][ T5786] udevd[5786]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 94.747662][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.839622][ T5786] udevd[5786]: symlink '../../loop0' '/dev/disk/by-diskseq/87.tmp-b7:0' failed: Read-only file system [ 94.893045][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 94.918662][ T5786] udevd[5786]: symlink '../../loop0' '/dev/disk/by-diskseq/87.tmp-b7:0' failed: Read-only file system [ 95.027349][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 95.277385][ T28] audit: type=1326 audit(1791045157.715:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6089 comm="syz.1.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff370f9e159 code=0x0 [ 95.478360][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 95.487543][ T6100] netlink: 14 bytes leftover after parsing attributes in process `syz.2.93'. [ 95.914384][ T6108] loop0: detected capacity change from 0 to 1024 [ 95.975451][ T6108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.026840][ T5786] udevd[5786]: symlink '../../loop0' '/dev/disk/by-diskseq/89.tmp-b7:0' failed: Read-only file system [ 96.079481][ T5786] udevd[5786]: symlink '../../loop0' '/dev/disk/by-label/LinuxUDF.tmp-b7:0' failed: Read-only file system [ 96.214402][ T6116] loop1: detected capacity change from 0 to 512 [ 96.243010][ T6108] loop0: detected capacity change from 1024 to 1 [ 96.243927][ T6116] ext4: Unknown parameter 'È' [ 96.418919][ T6113] loop3: detected capacity change from 0 to 4096 [ 96.426944][ T5774] syz-executor: attempt to access beyond end of device [ 96.426944][ T5774] loop0: rw=2049, sector=128, nr_sectors = 1 limit=1 [ 96.461752][ T5774] Buffer I/O error on dev loop0, logical block 128, lost sync page write [ 96.510619][ T6113] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 96.640946][ T6113] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 96.706484][ T6119] netlink: 27 bytes leftover after parsing attributes in process `syz.0.101'. [ 96.897337][ T6121] loop2: detected capacity change from 0 to 512 [ 96.940632][ T6121] EXT4-fs (loop2): Test dummy encryption mode enabled [ 97.087490][ T6121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.206331][ T6121] jffs2: notice: (6121) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.583718][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.040315][ T6128] loop1: detected capacity change from 0 to 32768 [ 98.057073][ T5851] IPVS: starting estimator thread 0... [ 98.131275][ T6128] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.104 (6128) [ 98.180998][ T6143] IPVS: using max 17 ests per chain, 40800 per kthread [ 98.216711][ T6128] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.265571][ T6128] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 98.276913][ T6128] BTRFS info (device loop1): using free space tree [ 98.391246][ T6145] pim6reg1: entered promiscuous mode [ 98.400698][ T6145] pim6reg1: entered allmulticast mode [ 98.452131][ T6128] BTRFS info (device loop1): enabling ssd optimizations [ 98.459185][ T6128] BTRFS info (device loop1): auto enabling async discard [ 98.921251][ T6128] BTRFS info (device loop1): disk added /dev/nullb0 [ 100.585772][ T6225] bridge_slave_1: left allmulticast mode [ 100.595760][ T6225] bridge_slave_1: left promiscuous mode [ 100.608908][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.627570][ T6225] bridge_slave_0: left allmulticast mode [ 100.650607][ T6225] bridge_slave_0: left promiscuous mode [ 100.678333][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.644935][ T6246] FAULT_INJECTION: forcing a failure. [ 101.644935][ T6246] name failslab, interval 1, probability 0, space 0, times 0 [ 101.674919][ T6248] af_packet: packet size is too long (65554 > 2016) [ 101.682803][ T6246] CPU: 0 PID: 6246 Comm: syz.1.139 Not tainted syzkaller #0 [ 101.690145][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.700208][ T6246] Call Trace: [ 101.703494][ T6246] [ 101.706427][ T6246] dump_stack_lvl+0x18c/0x250 [ 101.711138][ T6246] ? show_regs_print_info+0x20/0x20 [ 101.716376][ T6246] ? load_image+0x420/0x420 [ 101.720886][ T6246] ? __might_sleep+0xe0/0xe0 [ 101.725480][ T6246] ? __lock_acquire+0x7eb0/0x7eb0 [ 101.730521][ T6246] should_fail_ex+0x394/0x4c0 [ 101.735258][ T6246] should_failslab+0x9/0x20 [ 101.739906][ T6246] slab_pre_alloc_hook+0x59/0x300 [ 101.744980][ T6246] kmem_cache_alloc_node+0x5e/0x310 [ 101.750203][ T6246] ? __alloc_skb+0x103/0x2c0 [ 101.754845][ T6246] __alloc_skb+0x103/0x2c0 [ 101.759283][ T6246] netlink_ack+0x377/0x1160 [ 101.763837][ T6246] ? netlink_dump+0xec0/0xec0 [ 101.768545][ T6246] nfnetlink_rcv+0x21ba/0x2490 [ 101.773359][ T6246] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 101.778974][ T6246] ? __lock_acquire+0x7eb0/0x7eb0 [ 101.784024][ T6246] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.789269][ T6246] netlink_unicast+0x7b1/0x930 [ 101.794060][ T6246] netlink_sendmsg+0x8d0/0xbf0 [ 101.798851][ T6246] ? netlink_getsockopt+0x590/0x590 [ 101.804069][ T6246] ? apparmor_socket_sendmsg+0x8e/0x330 [ 101.809641][ T6246] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 101.814942][ T6246] ? security_socket_sendmsg+0x80/0xa0 [ 101.820505][ T6246] ? netlink_getsockopt+0x590/0x590 [ 101.825725][ T6246] ____sys_sendmsg+0x61b/0x980 [ 101.830516][ T6246] ? __asan_memset+0x22/0x40 [ 101.835149][ T6246] ? __sys_sendmsg_sock+0x30/0x30 [ 101.840187][ T6246] ? __import_iovec+0x5f2/0x850 [ 101.845063][ T6246] ? import_iovec+0x73/0xa0 [ 101.849629][ T6246] ___sys_sendmsg+0x2a6/0x360 [ 101.854337][ T6246] ? __sys_sendmsg+0x2b0/0x2b0 [ 101.859166][ T6246] __se_sys_sendmsg+0x1d0/0x2c0 [ 101.864043][ T6246] ? __x64_sys_sendmsg+0x80/0x80 [ 101.869013][ T6246] ? lockdep_hardirqs_on+0x98/0x150 [ 101.874233][ T6246] do_syscall_64+0x55/0xb0 [ 101.878671][ T6246] ? clear_bhb_loop+0x40/0x90 [ 101.883360][ T6246] ? clear_bhb_loop+0x40/0x90 [ 101.888048][ T6246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.893963][ T6246] RIP: 0033:0x7ff370f9e159 [ 101.898395][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.918020][ T6246] RSP: 002b:00007ff371dcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.926461][ T6246] RAX: ffffffffffffffda RBX: 00007ff371225fa0 RCX: 00007ff370f9e159 [ 101.934448][ T6246] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 101.942438][ T6246] RBP: 00007ff37103506b R08: 0000000000000000 R09: 0000000000000000 [ 101.950427][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.958429][ T6246] R13: 00007ff371226038 R14: 00007ff371225fa0 R15: 00007ffd92b8bb28 [ 101.966433][ T6246] [ 102.114724][ T21] process 6230 (syz.3.135) no longer affine to cpu1 [ 102.153958][ T9] smpboot: CPU 1 is now offline [ 102.253932][ T6252] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 102.360904][ T5786] udevd[5786]: setting mode of /dev/cpu/1/msr to 020600 failed: Read-only file system [ 102.374813][ T5776] udevd[5776]: setting mode of /dev/cpu/1/cpuid to 020600 failed: Read-only file system [ 102.411044][ T5786] udevd[5786]: setting owner of /dev/cpu/1/msr to uid=0, gid=0 failed: Read-only file system [ 102.428674][ T5776] udevd[5776]: setting owner of /dev/cpu/1/cpuid to uid=0, gid=0 failed: Read-only file system [ 103.247958][ T5786] udevd[5786]: symlink '../../loop1' '/dev/disk/by-diskseq/97.tmp-b7:1' failed: Read-only file system [ 103.268209][ T5786] udevd[5786]: symlink '../../loop1' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:1' failed: Read-only file system [ 103.304987][ T6274] Illegal XDP return value 4294967274 on prog (id 14) dev syz_tun, expect packet loss! [ 103.395759][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.609206][ T6279] netlink: 121 bytes leftover after parsing attributes in process `syz.2.151'. [ 103.637990][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 103.655005][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.672363][ T8] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 103.720545][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.770570][ T8] usb 4-1: config 0 descriptor?? [ 103.965890][ T6288] tipc: Started in network mode [ 103.988908][ T6288] tipc: Node identity 4, cluster identity 4711 [ 104.018274][ T6288] tipc: Node number set to 4 [ 104.040642][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 104.048337][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 104.121155][ T8] usb 4-1: USB disconnect, device number 2 [ 104.282240][ T6294] syzkaller1: entered promiscuous mode [ 104.291120][ T6294] syzkaller1: entered allmulticast mode [ 104.398366][ T6295] overlayfs: upper fs does not support tmpfile. [ 105.707186][ T178] smpboot: CPU 1 is now offline [ 105.740347][ T6325] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 105.768687][ T6318] ------------[ cut here ]------------ [ 105.769787][ T6318] [ 105.769792][ T6318] ====================================================== [ 105.769798][ T6318] WARNING: possible circular locking dependency detected [ 105.769803][ T6318] syzkaller #0 Not tainted [ 105.769811][ T6318] ------------------------------------------------------ [ 105.769816][ T6318] syz.0.167/6318 is trying to acquire lock: [ 105.769825][ T6318] ffffffff8d1263e0 (console_owner){-...}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 105.769875][ T6318] [ 105.769875][ T6318] but task is already holding lock: [ 105.769879][ T6318] ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 105.769932][ T6318] [ 105.769932][ T6318] which lock already depends on the new lock. [ 105.769932][ T6318] [ 105.769936][ T6318] [ 105.769936][ T6318] the existing dependency chain (in reverse order) is: [ 105.769941][ T6318] [ 105.769941][ T6318] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 105.769963][ T6318] _raw_spin_lock_nested+0x32/0x50 [ 105.769988][ T6318] raw_spin_rq_lock_nested+0x29/0x130 [ 105.770010][ T6318] task_fork_fair+0x62/0x1f0 [ 105.770025][ T6318] sched_cgroup_fork+0x352/0x3e0 [ 105.770040][ T6318] copy_process+0x21fd/0x3da0 [ 105.770057][ T6318] kernel_clone+0x24b/0x8a0 [ 105.770074][ T6318] user_mode_thread+0x111/0x180 [ 105.770090][ T6318] rest_init+0x27/0x300 [ 105.770109][ T6318] arch_call_rest_init+0xe/0x10 [ 105.770127][ T6318] start_kernel+0x461/0x4e0 [ 105.770143][ T6318] x86_64_start_reservations+0x2a/0x30 [ 105.770158][ T6318] copy_bootdata+0x0/0xd0 [ 105.770171][ T6318] secondary_startup_64_no_verify+0x179/0x17b [ 105.770192][ T6318] [ 105.770192][ T6318] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 105.770212][ T6318] _raw_spin_lock_irqsave+0xb4/0x100 [ 105.770231][ T6318] try_to_wake_up+0x5b/0x10e0 [ 105.770245][ T6318] kick_pool+0x320/0x420 [ 105.770259][ T6318] create_worker+0x61e/0x820 [ 105.770274][ T6318] workqueue_init+0x306/0x670 [ 105.770287][ T6318] kernel_init_freeable+0x3a7/0x560 [ 105.770304][ T6318] kernel_init+0x1d/0x1c0 [ 105.770322][ T6318] ret_from_fork+0x48/0x80 [ 105.770340][ T6318] ret_from_fork_asm+0x11/0x20 [ 105.770361][ T6318] [ 105.770361][ T6318] -> #3 (&pool->lock){-.-.}-{2:2}: [ 105.770381][ T6318] _raw_spin_lock+0x2e/0x40 [ 105.770400][ T6318] __queue_work+0x72f/0xfd0 [ 105.770415][ T6318] queue_work_on+0x128/0x1f0 [ 105.770429][ T6318] rpm_suspend+0x1133/0x1b60 [ 105.770442][ T6318] __pm_runtime_idle+0x12f/0x1a0 [ 105.770455][ T6318] __device_attach+0x352/0x420 [ 105.770470][ T6318] bus_probe_device+0x180/0x260 [ 105.770491][ T6318] device_add+0x87c/0xc40 [ 105.770509][ T6318] serial_base_port_add+0x2f6/0x430 [ 105.770527][ T6318] serial_core_register_port+0x378/0x20b0 [ 105.770542][ T6318] serial8250_register_8250_port+0x15fd/0x1f40 [ 105.770562][ T6318] serial_pnp_probe+0x577/0x750 [ 105.770580][ T6318] pnp_device_probe+0x305/0x4b0 [ 105.770600][ T6318] really_probe+0x247/0xae0 [ 105.770614][ T6318] __driver_probe_device+0x1f5/0x390 [ 105.770630][ T6318] driver_probe_device+0x4f/0x420 [ 105.770645][ T6318] __driver_attach+0x444/0x6d0 [ 105.770661][ T6318] bus_for_each_dev+0x235/0x2b0 [ 105.770683][ T6318] bus_add_driver+0x340/0x630 [ 105.770705][ T6318] driver_register+0x23a/0x310 [ 105.770721][ T6318] serial8250_init+0x9a/0x170 [ 105.770736][ T6318] do_one_initcall+0x242/0x790 [ 105.770755][ T6318] do_initcall_level+0x13d/0x1f0 [ 105.770772][ T6318] do_initcalls+0x69/0xd0 [ 105.770788][ T6318] kernel_init_freeable+0x3d9/0x560 [ 105.770804][ T6318] kernel_init+0x1d/0x1c0 [ 105.770822][ T6318] ret_from_fork+0x48/0x80 [ 105.770840][ T6318] ret_from_fork_asm+0x11/0x20 [ 105.770859][ T6318] [ 105.770859][ T6318] -> #2 (&dev->power.lock){-...}-{2:2}: [ 105.770879][ T6318] _raw_spin_lock_irqsave+0xb4/0x100 [ 105.770899][ T6318] __pm_runtime_resume+0x10f/0x170 [ 105.770918][ T6318] __uart_start+0x171/0x3e0 [ 105.770933][ T6318] uart_write+0x449/0x5d0 [ 105.770948][ T6318] n_tty_write+0xd3d/0x11e0 [ 105.770969][ T6318] file_tty_write+0x529/0x960 [ 105.770988][ T6318] vfs_write+0x474/0x9a0 [ 105.771009][ T6318] ksys_write+0x151/0x260 [ 105.771029][ T6318] do_syscall_64+0x55/0xb0 [ 105.771051][ T6318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.771074][ T6318] [ 105.771074][ T6318] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 105.771094][ T6318] _raw_spin_lock_irqsave+0xb4/0x100 [ 105.771114][ T6318] serial8250_console_write+0x181/0x18b0 [ 105.771136][ T6318] console_flush_all+0x6ad/0xcf0 [ 105.771155][ T6318] console_unlock+0xad/0x350 [ 105.771173][ T6318] vprintk_emit+0x497/0x610 [ 105.771190][ T6318] _printk+0xde/0x130 [ 105.771208][ T6318] register_console+0xb96/0xf00 [ 105.771226][ T6318] univ8250_console_init+0x45/0x50 [ 105.771240][ T6318] console_init+0x17b/0x5d0 [ 105.771256][ T6318] start_kernel+0x2c8/0x4e0 [ 105.771271][ T6318] x86_64_start_reservations+0x2a/0x30 [ 105.771286][ T6318] copy_bootdata+0x0/0xd0 [ 105.771298][ T6318] secondary_startup_64_no_verify+0x179/0x17b [ 105.771318][ T6318] [ 105.771318][ T6318] -> #0 (console_owner){-...}-{0:0}: [ 105.771338][ T6318] __lock_acquire+0x3a07/0x7eb0 [ 105.771354][ T6318] lock_acquire+0x19e/0x420 [ 105.771370][ T6318] console_flush_all+0x676/0xcf0 [ 105.771388][ T6318] console_unlock+0xad/0x350 [ 105.771405][ T6318] vprintk_emit+0x497/0x610 [ 105.771422][ T6318] _printk+0xde/0x130 [ 105.771439][ T6318] report_bug+0x34e/0x4f0 [ 105.771452][ T6318] handle_bug+0xcf/0x120 [ 105.771464][ T6318] exc_invalid_op+0x1a/0x50 [ 105.771477][ T6318] asm_exc_invalid_op+0x1a/0x20 [ 105.771498][ T6318] update_rq_clock+0x32e/0x4b0 [ 105.771519][ T6318] __schedule+0x2c72/0x4660 [ 105.771533][ T6318] preempt_schedule_common+0x82/0xc0 [ 105.771548][ T6318] preempt_schedule+0xc0/0xd0 [ 105.771563][ T6318] preempt_schedule_thunk+0x1a/0x30 [ 105.771584][ T6318] smp_call_function_single_async+0xbd/0x100 [ 105.771602][ T6318] rdmsr_safe_on_cpu+0x166/0x2a0 [ 105.771620][ T6318] msr_read+0x142/0x240 [ 105.771634][ T6318] vfs_read+0x298/0x990 [ 105.771653][ T6318] ksys_read+0x151/0x260 [ 105.771673][ T6318] do_syscall_64+0x55/0xb0 [ 105.771693][ T6318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.771716][ T6318] [ 105.771716][ T6318] other info that might help us debug this: [ 105.771716][ T6318] [ 105.771720][ T6318] Chain exists of: [ 105.771720][ T6318] console_owner --> &p->pi_lock --> &rq->__lock [ 105.771720][ T6318] [ 105.771743][ T6318] Possible unsafe locking scenario: [ 105.771743][ T6318] [ 105.771747][ T6318] CPU0 CPU1 [ 105.771750][ T6318] ---- ---- [ 105.771754][ T6318] lock(&rq->__lock); [ 105.771763][ T6318] lock(&p->pi_lock); [ 105.771772][ T6318] lock(&rq->__lock); [ 105.771782][ T6318] lock(console_owner); [ 105.771791][ T6318] [ 105.771791][ T6318] *** DEADLOCK *** [ 105.771791][ T6318] [ 105.771794][ T6318] 3 locks held by syz.0.167/6318: [ 105.771803][ T6318] #0: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 105.771850][ T6318] #1: ffffffff8d1264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 105.771890][ T6318] #2: ffffffff8d00dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 105.771937][ T6318] [ 105.771937][ T6318] stack backtrace: [ 105.771942][ T6318] CPU: 0 PID: 6318 Comm: syz.0.167 Not tainted syzkaller #0 [ 105.771958][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.771966][ T6318] Call Trace: [ 105.771973][ T6318] [ 105.771979][ T6318] dump_stack_lvl+0x18c/0x250 [ 105.772003][ T6318] ? load_image+0x420/0x420 [ 105.772024][ T6318] ? show_regs_print_info+0x20/0x20 [ 105.772052][ T6318] ? print_circular_bug+0x12b/0x1a0 [ 105.772074][ T6318] check_noncircular+0x2fc/0x400 [ 105.772097][ T6318] ? print_deadlock_bug+0x5d0/0x5d0 [ 105.772116][ T6318] ? lockdep_lock+0xf5/0x230 [ 105.772140][ T6318] __lock_acquire+0x3a07/0x7eb0 [ 105.772168][ T6318] ? verify_lock_unused+0x140/0x140 [ 105.772196][ T6318] lock_acquire+0x19e/0x420 [ 105.772213][ T6318] ? console_flush_all+0x10b/0xcf0 [ 105.772237][ T6318] ? __lock_acquire+0x7eb0/0x7eb0 [ 105.772255][ T6318] ? do_raw_spin_lock+0x11f/0x2b0 [ 105.772277][ T6318] ? read_lock_is_recursive+0x20/0x20 [ 105.772296][ T6318] ? __rwlock_init+0x150/0x150 [ 105.772320][ T6318] ? do_raw_spin_unlock+0x121/0x230 [ 105.772342][ T6318] console_flush_all+0x676/0xcf0 [ 105.772362][ T6318] ? console_flush_all+0x10b/0xcf0 [ 105.772382][ T6318] ? console_flush_all+0x10b/0xcf0 [ 105.772406][ T6318] ? is_console_locked+0x20/0x20 [ 105.772431][ T6318] console_unlock+0xad/0x350 [ 105.772451][ T6318] ? other_cpu_in_panic+0xf0/0xf0 [ 105.772471][ T6318] ? __lock_acquire+0x1431/0x7eb0 [ 105.772494][ T6318] vprintk_emit+0x497/0x610 [ 105.772514][ T6318] ? printk_sprint+0x460/0x460 [ 105.772535][ T6318] ? verify_lock_unused+0x140/0x140 [ 105.772554][ T6318] ? verify_lock_unused+0x140/0x140 [ 105.772575][ T6318] _printk+0xde/0x130 [ 105.772597][ T6318] ? load_image+0x420/0x420 [ 105.772618][ T6318] ? find_bug+0xa5/0x3a0 [ 105.772632][ T6318] ? update_rq_clock+0x32e/0x4b0 [ 105.772656][ T6318] report_bug+0x34e/0x4f0 [ 105.772671][ T6318] ? update_rq_clock+0x32e/0x4b0 [ 105.772693][ T6318] ? update_rq_clock+0x32e/0x4b0 [ 105.772715][ T6318] ? update_rq_clock+0x330/0x4b0 [ 105.772737][ T6318] handle_bug+0xcf/0x120 [ 105.772752][ T6318] exc_invalid_op+0x1a/0x50 [ 105.772767][ T6318] asm_exc_invalid_op+0x1a/0x20 [ 105.772789][ T6318] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 105.772815][ T6318] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 74 2d 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 105.772828][ T6318] RSP: 0018:ffffc9000344f720 EFLAGS: 00010046 [ 105.772842][ T6318] RAX: 0000000000000000 RBX: ffff8880b8f3c240 RCX: 9623889ede660300 [ 105.772854][ T6318] RDX: 0000000000000003 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 105.772865][ T6318] RBP: ffffc9000344f970 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 105.772876][ T6318] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: ffffffff8caa0a38 [ 105.772888][ T6318] R13: dffffc0000000000 R14: ffff8880b8f3cf88 R15: ffff8880b8f3c240 [ 105.772962][ T6318] __schedule+0x2c72/0x4660 [ 105.772989][ T6318] ? asan.module_dtor+0x20/0x20 [ 105.773007][ T6318] ? asm_sysvec_call_function_single+0x1a/0x20 [ 105.773023][ T6318] ? lockdep_hardirqs_on+0x98/0x150 [ 105.773045][ T6318] ? preempt_schedule+0xc0/0xd0 [ 105.773063][ T6318] preempt_schedule_common+0x82/0xc0 [ 105.773082][ T6318] preempt_schedule+0xc0/0xd0 [ 105.773098][ T6318] ? schedule_preempt_disabled+0x20/0x20 [ 105.773114][ T6318] ? rdmsr_safe_on_cpu+0x2a0/0x2a0 [ 105.773135][ T6318] ? smp_call_function_single+0x5a0/0x5a0 [ 105.773156][ T6318] ? lockdep_hardirqs_on+0x98/0x150 [ 105.773176][ T6318] preempt_schedule_thunk+0x1a/0x30 [ 105.773199][ T6318] ? smp_call_function_single_async+0xb8/0x100 [ 105.773220][ T6318] smp_call_function_single_async+0xbd/0x100 [ 105.773240][ T6318] rdmsr_safe_on_cpu+0x166/0x2a0 [ 105.773262][ T6318] ? wrmsr_on_cpus+0x30/0x30 [ 105.773281][ T6318] ? rdmsr_safe_on_cpu+0x2a0/0x2a0 [ 105.773305][ T6318] ? __might_fault+0xaa/0x120 [ 105.773323][ T6318] ? __might_fault+0xc6/0x120 [ 105.773338][ T6318] ? __might_fault+0xaa/0x120 [ 105.773357][ T6318] msr_read+0x142/0x240 [ 105.773374][ T6318] ? msr_device_destroy+0x30/0x30 [ 105.773392][ T6318] ? fsnotify_perm+0x3ed/0x5e0 [ 105.773416][ T6318] ? msr_device_destroy+0x30/0x30 [ 105.773432][ T6318] vfs_read+0x298/0x990 [ 105.773456][ T6318] ? kernel_read+0x1e0/0x1e0 [ 105.773477][ T6318] ? __fget_files+0x28/0x460 [ 105.773499][ T6318] ? __fget_files+0x3fc/0x460 [ 105.773524][ T6318] ? __fdget_pos+0x1d8/0x330 [ 105.773545][ T6318] ? ksys_read+0x74/0x260 [ 105.773566][ T6318] ksys_read+0x151/0x260 [ 105.773589][ T6318] ? vfs_write+0x9a0/0x9a0 [ 105.773612][ T6318] ? lockdep_hardirqs_on+0x98/0x150 [ 105.773630][ T6318] do_syscall_64+0x55/0xb0 [ 105.773653][ T6318] ? clear_bhb_loop+0x40/0x90 [ 105.773667][ T6318] ? clear_bhb_loop+0x40/0x90 [ 105.773682][ T6318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.773705][ T6318] RIP: 0033:0x7ff29659e159 [ 105.773717][ T6318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.773730][ T6318] RSP: 002b:00007ff297529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.773746][ T6318] RAX: ffffffffffffffda RBX: 00007ff296825fa0 RCX: 00007ff29659e159 [ 105.773757][ T6318] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000003 [ 105.773767][ T6318] RBP: 00007ff29663506b R08: 0000000000000000 R09: 0000000000000000 [ 105.773777][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.773787][ T6318] R13: 00007ff296826038 R14: 00007ff296825fa0 R15: 00007ffd9867f3a8 [ 105.773804][ T6318] [ 107.052632][ T6318] WARNING: CPU: 0 PID: 6318 at kernel/sched/sched.h:1370 update_rq_clock+0x32e/0x4b0 [ 107.062121][ T6318] Modules linked in: [ 107.066033][ T6318] CPU: 0 PID: 6318 Comm: syz.0.167 Not tainted syzkaller #0 [ 107.073331][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.083418][ T6318] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 107.088992][ T6318] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 74 2d 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 107.108613][ T6318] RSP: 0018:ffffc9000344f720 EFLAGS: 00010046 [ 107.114689][ T6318] RAX: 0000000000000000 RBX: ffff8880b8f3c240 RCX: 9623889ede660300 [ 107.122672][ T6318] RDX: 0000000000000003 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 107.130647][ T6318] RBP: ffffc9000344f970 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 107.138630][ T6318] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: ffffffff8caa0a38 [ 107.146611][ T6318] R13: dffffc0000000000 R14: ffff8880b8f3cf88 R15: ffff8880b8f3c240 [ 107.154600][ T6318] FS: 00007ff2975296c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 107.163543][ T6318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.170142][ T6318] CR2: 0000200000029000 CR3: 000000002e052000 CR4: 00000000003506f0 [ 107.178133][ T6318] Call Trace: [ 107.181423][ T6318] [ 107.184369][ T6318] __schedule+0x2c72/0x4660 [ 107.188904][ T6318] ? asan.module_dtor+0x20/0x20 [ 107.193765][ T6318] ? asm_sysvec_call_function_single+0x1a/0x20 [ 107.199933][ T6318] ? lockdep_hardirqs_on+0x98/0x150 [ 107.205146][ T6318] ? preempt_schedule+0xc0/0xd0 [ 107.210184][ T6318] preempt_schedule_common+0x82/0xc0 [ 107.215483][ T6318] preempt_schedule+0xc0/0xd0 [ 107.220176][ T6318] ? schedule_preempt_disabled+0x20/0x20 [ 107.225820][ T6318] ? rdmsr_safe_on_cpu+0x2a0/0x2a0 [ 107.230946][ T6318] ? smp_call_function_single+0x5a0/0x5a0 [ 107.236682][ T6318] ? lockdep_hardirqs_on+0x98/0x150 [ 107.241892][ T6318] preempt_schedule_thunk+0x1a/0x30 [ 107.247119][ T6318] ? smp_call_function_single_async+0xb8/0x100 [ 107.253286][ T6318] smp_call_function_single_async+0xbd/0x100 [ 107.259283][ T6318] rdmsr_safe_on_cpu+0x166/0x2a0 [ 107.264266][ T6318] ? wrmsr_on_cpus+0x30/0x30 [ 107.268869][ T6318] ? rdmsr_safe_on_cpu+0x2a0/0x2a0 [ 107.274004][ T6318] ? __might_fault+0xaa/0x120 [ 107.278695][ T6318] ? __might_fault+0xc6/0x120 [ 107.283380][ T6318] ? __might_fault+0xaa/0x120 [ 107.288069][ T6318] msr_read+0x142/0x240 [ 107.292272][ T6318] ? msr_device_destroy+0x30/0x30 [ 107.297331][ T6318] ? fsnotify_perm+0x3ed/0x5e0 [ 107.302216][ T6318] ? msr_device_destroy+0x30/0x30 [ 107.307255][ T6318] vfs_read+0x298/0x990 [ 107.311456][ T6318] ? kernel_read+0x1e0/0x1e0 [ 107.316097][ T6318] ? __fget_files+0x28/0x460 [ 107.320726][ T6318] ? __fget_files+0x3fc/0x460 [ 107.325430][ T6318] ? __fdget_pos+0x1d8/0x330 [ 107.330040][ T6318] ? ksys_read+0x74/0x260 [ 107.334389][ T6318] ksys_read+0x151/0x260 [ 107.338652][ T6318] ? vfs_write+0x9a0/0x9a0 [ 107.343085][ T6318] ? lockdep_hardirqs_on+0x98/0x150 [ 107.348296][ T6318] do_syscall_64+0x55/0xb0 [ 107.352733][ T6318] ? clear_bhb_loop+0x40/0x90 [ 107.357424][ T6318] ? clear_bhb_loop+0x40/0x90 [ 107.362110][ T6318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.368021][ T6318] RIP: 0033:0x7ff29659e159 [ 107.372448][ T6318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.392070][ T6318] RSP: 002b:00007ff297529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.400498][ T6318] RAX: ffffffffffffffda RBX: 00007ff296825fa0 RCX: 00007ff29659e159 [ 107.408480][ T6318] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000003 [ 107.416488][ T6318] RBP: 00007ff29663506b R08: 0000000000000000 R09: 0000000000000000 [ 107.424494][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.432488][ T6318] R13: 00007ff296826038 R14: 00007ff296825fa0 R15: 00007ffd9867f3a8 [ 107.440482][ T6318] [ 107.443514][ T6318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.450797][ T6318] CPU: 0 PID: 6318 Comm: syz.0.167 Not tainted syzkaller #0 [ 107.458096][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.468160][ T6318] Call Trace: [ 107.471450][ T6318] [ 107.474405][ T6318] dump_stack_lvl+0x18c/0x250 [ 107.479106][ T6318] ? show_regs_print_info+0x20/0x20 [ 107.484325][ T6318] ? load_image+0x420/0x420 [ 107.488855][ T6318] panic+0x2ca/0x720 [ 107.492767][ T6318] ? bpf_jit_dump+0xd0/0xd0 [ 107.497292][ T6318] __warn+0x2e0/0x470 [ 107.501286][ T6318] ? update_rq_clock+0x32e/0x4b0 [ 107.506243][ T6318] ? update_rq_clock+0x32e/0x4b0 [ 107.511194][ T6318] report_bug+0x2be/0x4f0 [ 107.515538][ T6318] ? update_rq_clock+0x32e/0x4b0 [ 107.520493][ T6318] ? update_rq_clock+0x32e/0x4b0 [ 107.525454][ T6318] ? update_rq_clock+0x330/0x4b0 [ 107.530406][ T6318] handle_bug+0xcf/0x120 [ 107.534665][ T6318] exc_invalid_op+0x1a/0x50 [ 107.539177][ T6318] asm_exc_invalid_op+0x1a/0x20 [ 107.544052][ T6318] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 107.549617][ T6318] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 74 2d 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 107.569233][ T6318] RSP: 0018:ffffc9000344f720 EFLAGS: 00010046 [ 107.575313][ T6318] RAX: 0000000000000000 RBX: ffff8880b8f3c240 RCX: 9623889ede660300 [ 107.583293][ T6318] RDX: 0000000000000003 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 107.591278][ T6318] RBP: ffffc9000344f970 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 107.599261][ T6318] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: ffffffff8caa0a38 [ 107.607239][ T6318] R13: dffffc0000000000 R14: ffff8880b8f3cf88 R15: ffff8880b8f3c240 [ 107.615230][ T6318] __schedule+0x2c72/0x4660 [ 107.619759][ T6318] ? asan.module_dtor+0x20/0x20 [ 107.624626][ T6318] ? asm_sysvec_call_function_single+0x1a/0x20 [ 107.630788][ T6318] ? lockdep_hardirqs_on+0x98/0x150 [ 107.636037][ T6318] ? preempt_schedule+0xc0/0xd0 [ 107.640901][ T6318] preempt_schedule_common+0x82/0xc0 [ 107.646217][ T6318] preempt_schedule+0xc0/0xd0 [ 107.650906][ T6318] ? schedule_preempt_disabled+0x20/0x20 [ 107.656547][ T6318] ? rdmsr_safe_on_cpu+0x2a0/0x2a0 [ 107.661678][ T6318] ? smp_call_function_single+0x5a0/0x5a0 [ 107.667409][ T6318] ? lockdep_hardirqs_on+0x98/0x150 [ 107.672626][ T6318] preempt_schedule_thunk+0x1a/0x30 [ 107.677850][ T6318] ? smp_call_function_single_async+0xb8/0x100 [ 107.684026][ T6318] smp_call_function_single_async+0xbd/0x100 [ 107.690023][ T6318] rdmsr_safe_on_cpu+0x166/0x2a0 [ 107.694975][ T6318] ? wrmsr_on_cpus+0x30/0x30 [ 107.699583][ T6318] ? rdmsr_safe_on_cpu+0x2a0/0x2a0 [ 107.704802][ T6318] ? __might_fault+0xaa/0x120 [ 107.709493][ T6318] ? __might_fault+0xc6/0x120 [ 107.714195][ T6318] ? __might_fault+0xaa/0x120 [ 107.718894][ T6318] msr_read+0x142/0x240 [ 107.723062][ T6318] ? msr_device_destroy+0x30/0x30 [ 107.728097][ T6318] ? fsnotify_perm+0x3ed/0x5e0 [ 107.732880][ T6318] ? msr_device_destroy+0x30/0x30 [ 107.737918][ T6318] vfs_read+0x298/0x990 [ 107.742098][ T6318] ? kernel_read+0x1e0/0x1e0 [ 107.746709][ T6318] ? __fget_files+0x28/0x460 [ 107.751316][ T6318] ? __fget_files+0x3fc/0x460 [ 107.756021][ T6318] ? __fdget_pos+0x1d8/0x330 [ 107.760631][ T6318] ? ksys_read+0x74/0x260 [ 107.764982][ T6318] ksys_read+0x151/0x260 [ 107.769243][ T6318] ? vfs_write+0x9a0/0x9a0 [ 107.773681][ T6318] ? lockdep_hardirqs_on+0x98/0x150 [ 107.778892][ T6318] do_syscall_64+0x55/0xb0 [ 107.783329][ T6318] ? clear_bhb_loop+0x40/0x90 [ 107.788017][ T6318] ? clear_bhb_loop+0x40/0x90 [ 107.792704][ T6318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.798615][ T6318] RIP: 0033:0x7ff29659e159 [ 107.803041][ T6318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.822663][ T6318] RSP: 002b:00007ff297529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.831096][ T6318] RAX: ffffffffffffffda RBX: 00007ff296825fa0 RCX: 00007ff29659e159 [ 107.839077][ T6318] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000003 [ 107.847058][ T6318] RBP: 00007ff29663506b R08: 0000000000000000 R09: 0000000000000000 [ 107.855042][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.863021][ T6318] R13: 00007ff296826038 R14: 00007ff296825fa0 R15: 00007ffd9867f3a8 [ 107.871007][ T6318] [ 107.874099][ T6318] Kernel Offset: disabled [ 107.878436][ T6318] Rebooting in 86400 seconds..