last executing test programs: 1m46.706603426s ago: executing program 2 (id=2160): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xdb, 0x0, 0x2}) 1m46.447732355s ago: executing program 2 (id=2163): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801}}], 0x1, 0x20044034) r0 = open(&(0x7f0000000000)='./file1\x00', 0x14d1c2, 0xf) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) pwritev2(r0, 0x0, 0x0, 0x6001800, 0x0, 0x0) close$binfmt(r0) unlink(0x0) fcntl$getownex(r0, 0x10, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x169cc2, 0x108) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) personality(0x8) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x672c4000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000180)=""/224) r4 = socket(0xa, 0x2, 0x0) r5 = inotify_init() r6 = socket(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) 1m43.895765751s ago: executing program 2 (id=2182): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) dup3(r1, r0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_ENTRY(r2, 0x0, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m42.454338896s ago: executing program 2 (id=2188): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xff, 0x2a0, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000000980)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000240)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES8=r3], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m42.154821894s ago: executing program 2 (id=2192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r3, 0x25, 0x0, @val=@perf_event={0x10000000000200}}, 0x18) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1m41.353488255s ago: executing program 2 (id=2199): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000440)={0xdb, 0x0, 0x2}) 1m40.9307186s ago: executing program 32 (id=2199): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000440)={0xdb, 0x0, 0x2}) 2.983992906s ago: executing program 3 (id=2808): r0 = timerfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0xa, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x1, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x1}) 2.841712578s ago: executing program 3 (id=2810): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x1000010, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x2000032, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x20580e9, 0x0, 0x2f, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) 2.652890191s ago: executing program 3 (id=2812): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x40001000000000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) clock_settime(0x0, &(0x7f0000000000)) 2.457638945s ago: executing program 3 (id=2815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x3f, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5, 0xffffffffce110f65, 0xd, 0xffff, 0x1ff, 0xffeffff4, 0x0, 0x0, 0x40, 0x10000}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, 0x0) 2.200033073s ago: executing program 0 (id=2818): r0 = timerfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0xa, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x1, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x1}) 2.154328394s ago: executing program 3 (id=2820): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x1000010, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x2000032, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x20580e9, 0x0, 0x2f, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) 2.046391398s ago: executing program 0 (id=2821): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x200000, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file2\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file2'}, 0x23) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) writev(r1, 0x0, 0x0) 1.909779749s ago: executing program 3 (id=2822): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801}}], 0x1, 0x20044034) r0 = open(&(0x7f0000000000)='./file1\x00', 0x14d1c2, 0xf) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) pwritev2(r0, 0x0, 0x0, 0x6001800, 0x0, 0x0) close$binfmt(r0) unlink(0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) open(&(0x7f00000005c0)='./bus\x00', 0x169cc2, 0x108) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) personality(0x8) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x672c4000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000180)=""/224) r4 = socket(0xa, 0x2, 0x0) r5 = inotify_init() r6 = socket(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) 1.819955939s ago: executing program 4 (id=2823): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 1.819750139s ago: executing program 0 (id=2824): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1cea, &(0x7f0000000040)={0x0, 0xe9f9, 0x4480, 0xfffff, 0x18d}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x8, 0xffffffff) 1.644147599s ago: executing program 4 (id=2826): socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) open(&(0x7f00000043c0)='./bus\x00', 0x1059c2, 0x206) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000850) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.491950383s ago: executing program 0 (id=2827): close(0xffffffffffffffff) unshare(0x4a000200) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) 1.421945489s ago: executing program 1 (id=2828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x3f, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5, 0xffffffffce110f65, 0xd, 0xffff, 0x1ff, 0xffeffff4, 0x0, 0x0, 0x40, 0x10000}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, 0x0) 1.406387822s ago: executing program 4 (id=2829): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.063964639s ago: executing program 0 (id=2830): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(r0, 0x80) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000003a40)="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", 0x2000, &(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$watch_queue(0xffffffffffffffff, &(0x7f0000001d40)=""/4095, 0xfff) 1.01806241s ago: executing program 1 (id=2831): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000040)=ANY=[@ANYBLOB='showassoc,session=0x00001e,map=acorn,\x00'/48], 0x1, 0x566, &(0x7f0000000ac0)="$eJzs3M9uG8cZAPBZmbJVFXUDBI0dxYeN04MLNAxJ1zKEAAHY1VLahOISu6vAPhVBLQVCpbRIUqDxzRe3BfoSaW99gp76RkGPPaZYLuk4tkjLfxIaze8HSDPkfjvzzYrYD6QwDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAiJLtTqcbhWE22r8Vz5dsF/neguOz8f71rWbBvCFE9U9YWwuXm6cuv/rN4Z/Vv66GS82jS2GtbtbC3R+/9sq7r7ZWZucvSOh7sDpN9vjg08WBUfg6+r6S+m7snnapW/FOOsrKPNvr76RxVubx1uZm553dQRkPsmFa3i6rdC9OWqFf5UV8LflF3N3auh6n7dv5/mhnuz9MZ0/efLvX6WzG77fHab8o89E777fLZDcbDrPRziSmPlzH3KxfiB9kVXzhwbW//qTcD4+OD7pnCeo9KajX6fW63V6vu3lj68bNTqf12BOdR4THIpb9omXZXtCdG57frP4DAAAA/7+iyWfs9fv/1cnn8FEYRF83lp0aAAAA8IJM/vN/6R9R/f4/hHA5RINsmHaWnRYAAADwAv3liXvsyvGF6N//CUWxGt0b3/p5dNKv4/on55rzzj06YjVoRReng0yazdb0UZJeiV5vgl6fRX81bQ6flEf0FAlszEkg/C1sNDEbd5r2zuxIM8v6IBum7SQfvtsN/f7FlSq9Vf3xk6M/hcny/zrauxiFw6Pjg/Zvf398Z5LLvXqUeyfTDRSP7aNYkMvnD/Y9PrLiL5uhVutcoum86828nYfXv9KcvvIUc94PbzQxb6w37fq3179Wz9ltz1v9evSTyWa651z5/XClibly7a26eevaKVn0Tsvi/HTwyW69h7N4pmtxhiyuL7gW4fDoQgjhTFn8aF4WAMtyOK8KPaj/j9bd1jPca7+p7u99h9X9fniziXlzY3JjbW2cckfvtKOw4I4+q7H3zj9rdftnuNrEXJ0Fn1pj3/vpZN7wymzepqpOiv+Xc+cth72o/kOd+/zkD+G1z764+/bRyUcfH3x88Emvd32z86tO50YvrE6WMW0WZArAD1dafBWtV3+OiiIb/6a7tdXtV7tpXOTJB3GRbe+kcTaq0iLZ7Y920nhc5FWe5MO682G2nZZxuT8e50UVD/IiHudldmvyzS/x9KtfyjT8clRlSTkepv0yjZN8VPWTKt7OyiQe7/96mJW7aTE5uRynSTbIkn6V5aO4le//PUnbcVym6UOB2XY6qrJBVndH8bjI9vrF7fjDfLi/l8bbaZkU2bjKmwFnc2WjQV7s9avsXGgv+2IDwEvisy/u/u6j4+ODT8/Y+e90c+DTnPX4rOeXsVQAYGpRlQYAAAAAAAAAAAAAAF4OT7v/7wV2VqcpLGd2nbN1wtpLkcZyOivPPU7rJVjF3M7sJnBqzPLuSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwz/8CAAD//3bhnLY=") r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r4, r5, &(0x7f0000000700)={0x0, 0xc766, 0x0, 0x0, 0x3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x8000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x40, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x2, 0x23b}}], 0x1, 0x0, 0x0) 699.470732ms ago: executing program 1 (id=2832): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x1000010, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x2000032, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x20580e9, 0x0, 0x2f, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) 487.891809ms ago: executing program 1 (id=2833): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x200000, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file2\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file2'}, 0x23) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) writev(r1, 0x0, 0x0) 420.922415ms ago: executing program 4 (id=2834): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 244.020815ms ago: executing program 1 (id=2835): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1cea, &(0x7f0000000040)={0x0, 0xe9f9, 0x4480, 0xfffff, 0x18d}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x8, 0xffffffff) 237.136276ms ago: executing program 4 (id=2836): syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="38050000", @ANYBLOB="030027bd7000fbdbdb250200000008000100", @ANYRES32=r2], 0x538}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044) 105.476146ms ago: executing program 0 (id=2837): socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 1.2859ms ago: executing program 1 (id=2838): memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x80a01) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000080)=0x8, 0x4) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x28100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000380)={0xc, r3}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r3, 0x0, &(0x7f0000000000)="2c0c1cd02fd2", 0x6, 0x100000000}) io_uring_setup(0x4013, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20048000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 0s ago: executing program 4 (id=2839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x3f, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5, 0xffffffffce110f65, 0xd, 0xffff, 0x1ff, 0xffeffff4, 0x0, 0x0, 0x40, 0x10000}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, 0x0) kernel console output (not intermixed with test programs): ][T10297] erspan2: entered allmulticast mode [ 328.195163][T10312] overlayfs: failed to clone upperpath [ 328.370111][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.001034][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.183771][T10349] 9pnet_fd: Insufficient options for proto=fd [ 329.419578][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.459657][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.777960][ T28] audit: type=1326 audit(1790435264.567:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10392 comm="syz.1.1808" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcec179e159 code=0x0 [ 331.081037][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.089778][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.515282][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.542272][T10406] FAULT_INJECTION: forcing a failure. [ 331.542272][T10406] name failslab, interval 1, probability 0, space 0, times 0 [ 331.565295][T10406] CPU: 1 PID: 10406 Comm: syz.2.1812 Not tainted syzkaller #0 [ 331.572836][T10406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.583095][T10406] Call Trace: [ 331.586387][T10406] [ 331.589366][T10406] dump_stack_lvl+0x18c/0x250 [ 331.594073][T10406] ? show_regs_print_info+0x20/0x20 [ 331.599288][T10406] ? load_image+0x420/0x420 [ 331.603809][T10406] ? __lock_acquire+0x7d80/0x7d80 [ 331.608880][T10406] should_fail_ex+0x394/0x4c0 [ 331.613592][T10406] should_failslab+0x9/0x20 [ 331.618123][T10406] slab_pre_alloc_hook+0x59/0x300 [ 331.623183][T10406] ? lockdep_init_map_type+0x9c/0x8e0 [ 331.628576][T10406] ? mqueue_init_fs_context+0x57/0x360 [ 331.634054][T10406] __kmem_cache_alloc_node+0x53/0x250 [ 331.639549][T10406] ? mqueue_init_fs_context+0x57/0x360 [ 331.645115][T10406] kmalloc_trace+0x2a/0xe0 [ 331.649566][T10406] mqueue_init_fs_context+0x57/0x360 [ 331.654871][T10406] alloc_fs_context+0x618/0x7a0 [ 331.659748][T10406] mq_init_ns+0x10a/0x510 [ 331.664096][T10406] copy_ipcs+0x309/0x500 [ 331.668358][T10406] create_new_namespaces+0x212/0x700 [ 331.673679][T10406] unshare_nsproxy_namespaces+0x11a/0x160 [ 331.679421][T10406] ksys_unshare+0x4fa/0x8f0 [ 331.683951][T10406] ? sighand_ctor+0x50/0x50 [ 331.688473][T10406] ? lock_chain_count+0x20/0x20 [ 331.693342][T10406] ? syscall_enter_from_user_mode+0x25/0x80 [ 331.699254][T10406] __x64_sys_unshare+0x38/0x40 [ 331.704035][T10406] do_syscall_64+0x55/0xb0 [ 331.708473][T10406] ? clear_bhb_loop+0x40/0x90 [ 331.713207][T10406] ? clear_bhb_loop+0x40/0x90 [ 331.717906][T10406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.723815][T10406] RIP: 0033:0x7f1ac7f9e159 [ 331.728248][T10406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.747878][T10406] RSP: 002b:00007f1ac61f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 331.756311][T10406] RAX: ffffffffffffffda RBX: 00007f1ac8225fa0 RCX: 00007f1ac7f9e159 [ 331.764298][T10406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 331.772279][T10406] RBP: 00007f1ac803506b R08: 0000000000000000 R09: 0000000000000000 [ 331.780367][T10406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.788346][T10406] R13: 00007f1ac8226038 R14: 00007f1ac8225fa0 R15: 00007ffd91f94a58 [ 331.796353][T10406] [ 331.817147][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.834928][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.040812][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.361910][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.529229][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.566589][T10423] overlayfs: missing 'lowerdir' [ 333.023880][T10429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.032458][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.040628][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.063662][ T28] audit: type=1326 audit(1790435266.847:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5790f9e159 code=0x0 [ 333.108356][T10432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.116182][T10432] IPv6: NLM_F_CREATE should be set when creating new route [ 333.551873][T10443] overlayfs: missing 'lowerdir' [ 333.597797][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.096699][T10455] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 334.471340][T10471] overlayfs: missing 'lowerdir' [ 334.810890][ T28] audit: type=1326 audit(1790435268.607:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.0.1840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f087759e159 code=0x0 [ 335.047292][T10483] __nla_validate_parse: 8 callbacks suppressed [ 335.047307][T10483] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1842'. [ 336.667763][T10511] net_ratelimit: 6 callbacks suppressed [ 336.667782][T10511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.770287][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.842731][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.861162][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.010181][T10530] overlayfs: failed to clone upperpath [ 337.156254][ T28] audit: type=1326 audit(1790435270.947:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.3.1858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5790f9e159 code=0x0 [ 337.320875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.329812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.484044][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.492930][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.052302][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.382982][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.717781][T10562] overlayfs: missing 'lowerdir' [ 339.238799][ T28] audit: type=1326 audit(1790435273.027:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10573 comm="syz.0.1873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f087759e159 code=0x0 [ 339.262217][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.080107][ T28] audit: type=1326 audit(1790435274.867:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10637 comm="syz.0.1893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f087759e159 code=0x0 [ 341.206711][T10649] bridge_slave_1: left allmulticast mode [ 341.212772][T10649] bridge_slave_1: left promiscuous mode [ 341.218741][T10649] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.235184][T10649] bridge_slave_0: left allmulticast mode [ 341.248204][T10649] bridge_slave_0: left promiscuous mode [ 341.255992][T10649] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.967368][ T11] net_ratelimit: 9 callbacks suppressed [ 341.967395][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.981346][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.113564][T10678] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.240262][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.249749][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.349024][ T28] audit: type=1326 audit(1790435276.137:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10687 comm="syz.3.1911" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5790f9e159 code=0x0 [ 342.505592][T10698] sctp: [Deprecated]: syz.2.1915 (pid 10698) Use of int in max_burst socket option deprecated. [ 342.505592][T10698] Use struct sctp_assoc_value instead [ 342.529720][T10698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.555709][T10698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.570856][T10698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.590119][T10698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.603926][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.718061][T10704] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 342.932451][T10713] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 342.941566][T10713] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 343.214770][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1928'. [ 343.304090][T10721] bond5: entered promiscuous mode [ 343.321182][T10721] bond5: entered allmulticast mode [ 343.322147][T10729] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 343.331113][T10721] 8021q: adding VLAN 0 to HW filter on device bond5 [ 343.864877][ T28] audit: type=1326 audit(1790435277.657:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.3.1936" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5790f9e159 code=0x0 [ 343.891548][T10751] netlink: 'syz.0.1938': attribute type 1 has an invalid length. [ 344.128603][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'. [ 344.160036][T10760] bond6: entered promiscuous mode [ 344.167012][T10760] bond6: entered allmulticast mode [ 344.172686][T10760] 8021q: adding VLAN 0 to HW filter on device bond6 [ 344.294174][T10764] overlayfs: missing 'lowerdir' [ 344.524185][T10772] netlink: 'syz.2.1947': attribute type 1 has an invalid length. [ 344.612623][T10776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1950'. [ 344.792650][T10783] overlayfs: missing 'lowerdir' [ 345.132227][T10795] netlink: 'syz.3.1957': attribute type 1 has an invalid length. [ 345.304179][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1960'. [ 345.338893][ T28] audit: type=1326 audit(1790435279.127:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.1.1959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcec179e159 code=0x0 [ 345.549779][T10811] overlayfs: missing 'workdir' [ 345.881402][T10824] sctp: [Deprecated]: syz.2.1967 (pid 10824) Use of int in max_burst socket option deprecated. [ 345.881402][T10824] Use struct sctp_assoc_value instead [ 346.256530][T10831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1970'. [ 346.418736][T10837] overlayfs: missing 'workdir' [ 346.790168][T10844] sctp: [Deprecated]: syz.3.1976 (pid 10844) Use of int in max_burst socket option deprecated. [ 346.790168][T10844] Use struct sctp_assoc_value instead [ 347.094054][ T5838] net_ratelimit: 27 callbacks suppressed [ 347.094114][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.224743][ T28] audit: type=1326 audit(1790435281.017:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.3.1977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5790f9e159 code=0x0 [ 347.283165][T10857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1980'. [ 347.344005][T10859] overlayfs: failed to resolve './file0': -2 [ 347.383099][T10861] overlayfs: missing 'workdir' [ 347.442889][T10863] netlink: 1308 bytes leftover after parsing attributes in process `syz.0.1983'. [ 347.443244][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.480878][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.481179][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.497606][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.533649][T10866] sctp: [Deprecated]: syz.1.1985 (pid 10866) Use of int in max_burst socket option deprecated. [ 347.533649][T10866] Use struct sctp_assoc_value instead [ 347.715957][T10870] netlink: 'syz.0.1986': attribute type 1 has an invalid length. [ 347.726663][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.734914][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.157217][T10886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1992'. [ 348.365955][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.378749][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.393501][T10891] overlayfs: failed to resolve './file0': -2 [ 348.471781][T10893] sctp: [Deprecated]: syz.3.1995 (pid 10893) Use of int in max_burst socket option deprecated. [ 348.471781][T10893] Use struct sctp_assoc_value instead [ 348.490847][T10893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.587912][T10897] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 348.693303][ T28] audit: type=1326 audit(1790435282.487:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.1.1999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcec179e159 code=0x0 [ 348.859394][T10908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2001'. [ 349.139076][T10917] sctp: [Deprecated]: syz.3.2006 (pid 10917) Use of int in max_burst socket option deprecated. [ 349.139076][T10917] Use struct sctp_assoc_value instead [ 349.275816][T10919] netlink: 'syz.2.2007': attribute type 1 has an invalid length. [ 349.398997][T10923] loop2: detected capacity change from 0 to 128 [ 349.791463][T10933] overlayfs: failed to clone upperpath [ 349.933247][T10940] netlink: 'syz.0.2017': attribute type 1 has an invalid length. [ 349.993975][T10945] overlayfs: failed to clone upperpath [ 350.629084][T10961] FAULT_INJECTION: forcing a failure. [ 350.629084][T10961] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.634002][T10963] overlayfs: failed to clone upperpath [ 350.643444][T10961] CPU: 0 PID: 10961 Comm: syz.3.2025 Not tainted syzkaller #0 [ 350.655925][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.666173][T10961] Call Trace: [ 350.669524][T10961] [ 350.672513][T10961] dump_stack_lvl+0x18c/0x250 [ 350.677342][T10961] ? show_regs_print_info+0x20/0x20 [ 350.682603][T10961] ? load_image+0x420/0x420 [ 350.687234][T10961] ? __lock_acquire+0x7d80/0x7d80 [ 350.692333][T10961] should_fail_ex+0x394/0x4c0 [ 350.697155][T10961] prepare_alloc_pages+0x1e1/0x5b0 [ 350.702491][T10961] __alloc_pages+0x134/0x460 [ 350.707192][T10961] ? zone_statistics+0x170/0x170 [ 350.712148][T10961] ? alloc_pages+0x4e1/0x740 [ 350.716790][T10961] __get_free_pages+0xc/0x30 [ 350.721393][T10961] kasan_populate_vmalloc_pte+0x35/0x100 [ 350.727090][T10961] __apply_to_page_range+0x860/0xdd0 [ 350.732403][T10961] ? kasan_populate_vmalloc+0x70/0x70 [ 350.737977][T10961] ? apply_to_page_range+0x50/0x50 [ 350.743103][T10961] ? do_raw_spin_unlock+0x121/0x230 [ 350.748323][T10961] alloc_vmap_area+0x1d26/0x1e50 [ 350.753331][T10961] ? vm_map_ram+0xcf0/0xcf0 [ 350.757853][T10961] ? rcu_is_watching+0x15/0xb0 [ 350.762641][T10961] __get_vm_area_node+0x162/0x370 [ 350.767771][T10961] ? __kasan_kmalloc+0x8f/0xa0 [ 350.772655][T10961] __vmalloc_node_range+0x36f/0x1320 [ 350.778148][T10961] ? btf_new_fd+0x27a/0x9e0 [ 350.782693][T10961] ? __asan_memset+0x22/0x40 [ 350.787412][T10961] ? free_vm_area+0x50/0x50 [ 350.791939][T10961] ? kvmalloc_node+0x70/0x180 [ 350.796639][T10961] ? rcu_is_watching+0x15/0xb0 [ 350.801433][T10961] ? kvmalloc_node+0x70/0x180 [ 350.806123][T10961] ? trace_kmalloc+0x1f/0xa0 [ 350.810741][T10961] kvmalloc_node+0x13f/0x180 [ 350.815350][T10961] ? btf_new_fd+0x27a/0x9e0 [ 350.819871][T10961] btf_new_fd+0x27a/0x9e0 [ 350.824224][T10961] ? bpf_btf_show_fdinfo+0x80/0x80 [ 350.829357][T10961] ? capable+0x88/0xe0 [ 350.833480][T10961] __sys_bpf+0x670/0x890 [ 350.837745][T10961] ? bpf_link_show_fdinfo+0x560/0x560 [ 350.843241][T10961] ? lock_chain_count+0x20/0x20 [ 350.848119][T10961] __x64_sys_bpf+0x7c/0x90 [ 350.852550][T10961] do_syscall_64+0x55/0xb0 [ 350.857014][T10961] ? clear_bhb_loop+0x40/0x90 [ 350.861834][T10961] ? clear_bhb_loop+0x40/0x90 [ 350.866543][T10961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.872457][T10961] RIP: 0033:0x7f5790f9e159 [ 350.876933][T10961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.896765][T10961] RSP: 002b:00007f5791f04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.905282][T10961] RAX: ffffffffffffffda RBX: 00007f5791225fa0 RCX: 00007f5790f9e159 [ 350.913268][T10961] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012 [ 350.921251][T10961] RBP: 00007f579103506b R08: 0000000000000000 R09: 0000000000000000 [ 350.929405][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.937475][T10961] R13: 00007f5791226038 R14: 00007f5791225fa0 R15: 00007ffda6537048 [ 350.945479][T10961] [ 351.177858][T10969] overlayfs: failed to clone upperpath [ 351.201842][T10967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2028'. [ 351.437097][T10976] overlayfs: failed to clone upperpath [ 351.655221][T10986] overlayfs: failed to clone upperpath [ 351.879693][T10993] netlink: 1308 bytes leftover after parsing attributes in process `syz.0.2039'. [ 352.002335][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2040'. [ 352.639896][T11010] netlink: 1308 bytes leftover after parsing attributes in process `syz.0.2048'. [ 352.666043][T11012] net_ratelimit: 27 callbacks suppressed [ 352.666064][T11012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.685560][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.840859][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.852573][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.081521][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.198454][ T28] audit: type=1326 audit(1790435286.987:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.0.2055" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f087759e159 code=0x0 [ 353.296702][T11031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.461874][T11035] netlink: 1308 bytes leftover after parsing attributes in process `syz.1.2058'. [ 353.484136][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.493033][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.501477][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.724000][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.886433][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2065'. [ 353.947699][T11049] bond13: entered promiscuous mode [ 353.960685][T11049] bond13: entered allmulticast mode [ 353.972538][T11049] 8021q: adding VLAN 0 to HW filter on device bond13 [ 354.121127][ T2989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.208826][T11058] netlink: 1308 bytes leftover after parsing attributes in process `syz.0.2067'. [ 354.794913][ T28] audit: type=1326 audit(1790435288.587:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.0.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f087759e159 code=0x0 [ 355.325222][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2077'. [ 355.369862][T11084] bond6: entered promiscuous mode [ 355.375573][T11084] bond6: entered allmulticast mode [ 355.382477][T11084] 8021q: adding VLAN 0 to HW filter on device bond6 [ 356.139199][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'. [ 356.175651][T11106] bond14: entered promiscuous mode [ 356.186916][T11106] bond14: entered allmulticast mode [ 356.194630][T11106] 8021q: adding VLAN 0 to HW filter on device bond14 [ 356.327138][T11112] netlink: 'syz.1.2087': attribute type 1 has an invalid length. [ 356.483414][ T28] audit: type=1326 audit(1790435290.277:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.2.2089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ac7f9e159 code=0x0 [ 356.877094][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2095'. [ 356.911858][T11128] bond7: entered promiscuous mode [ 356.917163][T11128] bond7: entered allmulticast mode [ 356.924337][T11128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.144022][T11136] overlayfs: failed to clone upperpath [ 357.299115][T11139] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 357.568256][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2104'. [ 357.677019][T11149] bond7: entered promiscuous mode [ 357.682830][T11149] bond7: entered allmulticast mode [ 357.689404][T11149] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.698337][T11151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2104'. [ 357.883199][ T5767] net_ratelimit: 12 callbacks suppressed [ 357.883218][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.968460][ T28] audit: type=1326 audit(1790435291.757:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11156 comm="syz.3.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5790f9e159 code=0x7ffc0000 [ 358.044492][ T28] audit: type=1326 audit(1790435291.797:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11156 comm="syz.3.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5790f9e159 code=0x7ffc0000 [ 358.138487][ T28] audit: type=1326 audit(1790435291.797:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11156 comm="syz.3.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5790f9e159 code=0x7ffc0000 [ 358.186226][ T28] audit: type=1326 audit(1790435291.797:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11156 comm="syz.3.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5790f9e159 code=0x7ffc0000 [ 358.243950][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.263891][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.272874][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.281486][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.293669][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.303301][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 358.314088][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.603595][ T2989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.613535][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.613967][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.642196][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.655770][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.667401][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.930645][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.992621][ T28] audit: type=1326 audit(1790435292.777:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11169 comm="syz.2.2109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ac7f9e159 code=0x0 [ 359.049601][T11158] chnl_net:caif_netlink_parms(): no params data found [ 359.209436][T11158] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.216850][T11158] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.224587][T11158] bridge_slave_0: entered allmulticast mode [ 359.232451][T11158] bridge_slave_0: entered promiscuous mode [ 359.241202][T11158] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.248731][T11158] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.256319][T11158] bridge_slave_1: entered allmulticast mode [ 359.264069][T11158] bridge_slave_1: entered promiscuous mode [ 359.295138][T11158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.307243][T11158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.342738][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.353032][T11158] team0: Port device team_slave_0 added [ 359.369235][T11158] team0: Port device team_slave_1 added [ 359.437923][ T2989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.489834][T11158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.504426][T11158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.532000][T11158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.566697][ T2989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.576016][T11182] overlayfs: failed to clone upperpath [ 359.585499][T11158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.593088][T11158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.627450][T11158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.719281][ T2989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.761800][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2113'. [ 359.850487][T11184] bond8: entered promiscuous mode [ 359.857141][T11184] bond8: entered allmulticast mode [ 359.862959][T11184] 8021q: adding VLAN 0 to HW filter on device bond8 [ 359.913426][T11185] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2113'. [ 359.939411][T11191] 9pnet_fd: Insufficient options for proto=fd [ 360.024035][ T2989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.119666][T11158] hsr_slave_0: entered promiscuous mode [ 360.151460][T11158] hsr_slave_1: entered promiscuous mode [ 360.164055][T11158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.178193][T11158] Cannot create hsr debugfs directory [ 360.374848][ T5792] Bluetooth: hci4: command tx timeout [ 360.809873][ T2989] bond9: (slave ip6gretap1): Releasing active interface [ 360.833515][ T2989] ip6gretap1 (unregistering): left allmulticast mode [ 360.987035][ T28] audit: type=1326 audit(1790435294.777:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11206 comm="syz.2.2121" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ac7f9e159 code=0x0 [ 361.457746][T11158] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 361.518422][T11158] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 361.541032][T11158] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.560477][T11158] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.676844][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2123'. [ 361.709199][T11214] bond9: entered promiscuous mode [ 361.714483][T11214] bond9: entered allmulticast mode [ 361.720141][T11214] 8021q: adding VLAN 0 to HW filter on device bond9 [ 361.748100][T11216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2123'. [ 361.886397][T11220] overlayfs: missing 'lowerdir' [ 362.181974][T11158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.284111][ T2989] hsr_slave_0: left promiscuous mode [ 362.291893][ T2989] hsr_slave_1: left promiscuous mode [ 362.298058][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.306014][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.315089][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.324187][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.362830][ T2989] bond9: left allmulticast mode [ 362.367957][ T2989] bond9: left promiscuous mode [ 362.376347][ T2989] veth1_macvtap: left promiscuous mode [ 362.382675][ T2989] veth0_macvtap: left promiscuous mode [ 362.388375][ T2989] veth1_vlan: left promiscuous mode [ 362.394433][ T2989] veth0_vlan: left promiscuous mode [ 362.440513][ T5792] Bluetooth: hci4: command tx timeout [ 362.691932][ T2989] bond14 (unregistering): Released all slaves [ 362.941652][ T2989] bond13 (unregistering): Released all slaves [ 363.089065][ T788] net_ratelimit: 28 callbacks suppressed [ 363.089085][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.103328][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.105204][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.125240][ T2989] bond12 (unregistering): Released all slaves [ 363.273112][ T2989] bond11 (unregistering): Released all slaves [ 363.422531][ T2989] bond10 (unregistering): Released all slaves [ 363.450149][ T2989] team0 (unregistering): Port device macvlan2 removed [ 363.498000][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.600462][ T2989] bond9 (unregistering): Released all slaves [ 363.622119][ T2989] bond8 (unregistering): (slave bridge1): Releasing backup interface [ 363.674524][ T2989] bond8 (unregistering): Released all slaves [ 363.728808][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.737388][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.836862][ T2989] bond7 (unregistering): Released all slaves [ 363.977459][ T2989] bond6 (unregistering): Released all slaves [ 364.120132][ T2989] bond5 (unregistering): Released all slaves [ 364.120580][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.256255][ T2989] bond4 (unregistering): Released all slaves [ 364.364514][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.365146][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.380977][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.416915][ T2989] bond3 (unregistering): Released all slaves [ 364.520624][ T5792] Bluetooth: hci4: command tx timeout [ 364.565776][ T2989] bond2 (unregistering): Released all slaves [ 364.708160][ T2989] bond1 (unregistering): Released all slaves [ 365.265094][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 365.337065][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 365.384527][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.435737][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.807462][ T2989] bond0 (unregistering): Released all slaves [ 365.870461][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2131'. [ 365.880184][T11237] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 365.903648][T11238] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2131'. [ 365.969066][T11158] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.009062][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.016335][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.051746][T11243] overlayfs: missing 'lowerdir' [ 366.077640][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.084913][ T9066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.152942][ T28] audit: type=1326 audit(1790435299.947:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.3.2132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5790f9e159 code=0x0 [ 366.619289][ T5792] Bluetooth: hci4: command tx timeout [ 366.694633][T11158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.908445][T11158] veth0_vlan: entered promiscuous mode [ 366.953973][T11158] veth1_vlan: entered promiscuous mode [ 367.045264][T11158] veth0_macvtap: entered promiscuous mode [ 367.071791][T11158] veth1_macvtap: entered promiscuous mode [ 367.100889][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2140'. [ 367.130468][T11268] bond8: entered promiscuous mode [ 367.135689][T11268] bond8: entered allmulticast mode [ 367.141976][T11268] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.151631][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.164094][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.174490][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.185077][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.195512][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.206388][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.218349][T11158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.227786][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2141'. [ 367.256701][T11271] bond10: entered promiscuous mode [ 367.262529][T11271] bond10: entered allmulticast mode [ 367.270111][T11271] 8021q: adding VLAN 0 to HW filter on device bond10 [ 367.278331][T11272] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2140'. [ 367.289044][T11273] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2141'. [ 367.353603][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.382719][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.426971][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.438573][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.453384][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.464569][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.505912][T11158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.546348][T11158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.600526][T11158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.617148][T11158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.636569][T11158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.743190][ T28] audit: type=1326 audit(1790435301.517:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.0.2147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f087759e159 code=0x0 [ 367.890897][ T8867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.922425][ T8867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.943581][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2149'. [ 367.987098][T11292] bond9: entered promiscuous mode [ 367.992733][T11292] bond9: entered allmulticast mode [ 367.998478][T11292] 8021q: adding VLAN 0 to HW filter on device bond9 [ 368.033096][T11296] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2149'. [ 368.086533][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.115714][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.214383][ T1074] net_ratelimit: 19 callbacks suppressed [ 368.214403][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.228466][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.236689][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.245166][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.280527][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.577939][T11316] overlayfs: failed to resolve './bus': -2 [ 368.791592][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.841921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.744101][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.819193][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.840495][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.866921][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2159'. [ 369.879667][T11328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2159'. [ 370.101633][ T28] audit: type=1326 audit(1790435303.897:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.0.2164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f087759e159 code=0x0 [ 370.147178][T11338] overlayfs: failed to resolve './bus': -2 [ 371.823477][T11357] __nla_validate_parse: 1 callbacks suppressed [ 371.823521][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2173'. [ 371.855743][T11357] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2173'. [ 371.889999][T11361] overlayfs: failed to clone upperpath [ 372.109430][T11366] loop1: detected capacity change from 0 to 164 [ 372.231151][T11366] rock: directory entry would overflow storage [ 372.237879][T11366] rock: sig=0x4f50, size=4, remaining=3 [ 372.270285][T11366] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 372.347345][ T28] audit: type=1326 audit(1790435306.137:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.0.2180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087759e159 code=0x7ffc0000 [ 372.450535][ T28] audit: type=1326 audit(1790435306.137:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.0.2180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087759e159 code=0x7ffc0000 [ 372.512022][ T28] audit: type=1326 audit(1790435306.177:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.0.2180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f087759e159 code=0x7ffc0000 [ 372.592711][ T28] audit: type=1326 audit(1790435306.177:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.0.2180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087759e159 code=0x7ffc0000 [ 372.663013][ T28] audit: type=1326 audit(1790435306.177:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.0.2180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f087759e159 code=0x7ffc0000 [ 372.762537][ T28] audit: type=1326 audit(1790435306.177:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.0.2180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087759e159 code=0x7ffc0000 [ 372.787552][ T28] audit: type=1326 audit(1790435306.177:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.0.2180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087759e159 code=0x7ffc0000 [ 373.442401][ T1074] net_ratelimit: 22 callbacks suppressed [ 373.442421][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.457165][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.465551][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.473817][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.540522][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.634792][ T2179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.643205][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.651748][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.812355][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2185'. [ 373.880497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.889350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.969174][T11390] bond11: entered promiscuous mode [ 373.989006][T11390] bond11: entered allmulticast mode [ 374.028442][T11399] loop2: detected capacity change from 0 to 256 [ 374.040740][T11390] 8021q: adding VLAN 0 to HW filter on device bond11 [ 374.063293][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 374.103079][T11396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2185'. [ 374.221951][ T5783] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 374.293891][ T5783] FAT-fs (loop2): Filesystem has been set read-only [ 374.308492][ T5783] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 374.686139][T11414] loop2: detected capacity change from 0 to 7 [ 374.708855][T11416] overlayfs: failed to clone upperpath [ 374.718487][T11414] loop2: [ 374.734298][T11414] loop2: partition table partially beyond EOD, truncated [ 375.193129][ T2936] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.346754][ T2936] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.538103][ T2936] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.709551][ T2936] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.161228][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.173630][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.204474][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.234191][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.244988][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 376.252838][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.676598][T11452] EXT4-fs: Conflicting test_dummy_encryption options [ 377.153200][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'. [ 377.334559][ T2936] bond1: (slave erspan1): Releasing backup interface [ 377.356446][ T2936] erspan1 (unregistering): left promiscuous mode [ 377.696861][T11441] chnl_net:caif_netlink_parms(): no params data found [ 378.022506][T11500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.029833][T11500] IPv6: NLM_F_CREATE should be set when creating new route [ 378.369839][ T51] Bluetooth: hci0: command tx timeout [ 378.601026][ T2936] hsr_slave_0: left promiscuous mode [ 378.612573][ T2936] hsr_slave_1: left promiscuous mode [ 378.626097][ T2936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.675074][ T2936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.760599][ T27] net_ratelimit: 18 callbacks suppressed [ 378.760626][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.775848][ T2936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.798006][ T2936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.922229][ T2936] veth1_macvtap: left promiscuous mode [ 378.934569][ T2936] veth0_macvtap: left promiscuous mode [ 378.956692][ T2936] veth1_vlan: left promiscuous mode [ 378.969473][ T2936] veth0_vlan: left promiscuous mode [ 379.095195][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.103758][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.112227][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.118654][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.120804][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.130430][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.603889][ T2936] bond6 (unregistering): Released all slaves [ 379.626435][ T2936] bond5 (unregistering): Released all slaves [ 379.742462][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.807096][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.906855][ T2936] bond4 (unregistering): Released all slaves [ 380.197701][ T2936] bond3 (unregistering): Released all slaves [ 380.205931][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.214172][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.222436][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.422230][ T2936] bond2 (unregistering): Released all slaves [ 380.446305][ T51] Bluetooth: hci0: command tx timeout [ 380.677038][ T2936] bond1 (unregistering): Released all slaves [ 381.376551][ T2936] team0 (unregistering): Port device team_slave_1 removed [ 381.434152][ T2936] team0 (unregistering): Port device team_slave_0 removed [ 381.484092][ T2936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.534425][ T2936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.934103][ T2936] bond0 (unregistering): Released all slaves [ 381.985243][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.992721][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.000130][T11441] bridge_slave_0: entered allmulticast mode [ 382.007643][T11441] bridge_slave_0: entered promiscuous mode [ 382.133405][T11536] syzkaller0: entered promiscuous mode [ 382.139036][T11536] syzkaller0: entered allmulticast mode [ 382.495697][T11579] netlink: 'syz.3.2240': attribute type 1 has an invalid length. [ 382.528665][ T51] Bluetooth: hci0: command tx timeout [ 383.971728][ T5820] net_ratelimit: 11 callbacks suppressed [ 383.971750][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.548538][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.555982][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.563949][T11441] bridge_slave_1: entered allmulticast mode [ 384.575677][T11441] bridge_slave_1: entered promiscuous mode [ 384.600554][ T51] Bluetooth: hci0: command tx timeout [ 384.655399][T11441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.723640][T11441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.851898][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.860180][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.868415][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.876730][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.898711][T11441] team0: Port device team_slave_0 added [ 384.935801][T11441] team0: Port device team_slave_1 added [ 385.009776][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.050323][T11603] netlink: 'syz.1.2250': attribute type 1 has an invalid length. [ 385.068756][T11441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.103216][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.165516][T11441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.210859][T11441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.243193][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.279763][T11441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.492472][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.500744][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.508921][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.517164][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.533393][T11441] hsr_slave_0: entered promiscuous mode [ 385.549076][T11620] netlink: 'syz.1.2256': attribute type 1 has an invalid length. [ 385.557429][T11441] hsr_slave_1: entered promiscuous mode [ 385.573491][T11441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.586753][T11441] Cannot create hsr debugfs directory [ 385.938990][T11633] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 386.142479][T11441] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.185148][T11441] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 386.239271][T11441] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 386.285550][T11441] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.500820][T11648] netlink: 'syz.0.2264': attribute type 1 has an invalid length. [ 386.568125][T11441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.608042][T11441] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.659192][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.666512][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.713102][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.720414][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.371517][T11441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.662625][T11674] netlink: 'syz.3.2268': attribute type 1 has an invalid length. [ 388.188614][T11692] netlink: 'syz.1.2272': attribute type 1 has an invalid length. [ 388.276758][T11441] veth0_vlan: entered promiscuous mode [ 388.337869][T11441] veth1_vlan: entered promiscuous mode [ 388.439080][T11695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.446435][T11695] IPv6: NLM_F_CREATE should be set when creating new route [ 388.487510][T11441] veth0_macvtap: entered promiscuous mode [ 388.537240][T11441] veth1_macvtap: entered promiscuous mode [ 388.578852][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.595118][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.610841][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.645476][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.672383][T11702] loop1: detected capacity change from 0 to 128 [ 388.678927][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.708892][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.733544][T11702] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 388.750533][T11702] FAT-fs (loop1): Filesystem has been set read-only [ 388.768457][T11441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.837739][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.900315][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.922439][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.954130][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.988239][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.020625][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.062994][T11441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.138745][T11441] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.169537][ T23] net_ratelimit: 1031 callbacks suppressed [ 389.169576][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.210017][T11441] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.214525][T11714] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 389.239786][T11441] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.249083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.249402][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.249642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.278382][T11441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.319465][T11718] netlink: 'syz.1.2277': attribute type 1 has an invalid length. [ 389.482229][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.505974][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.594428][T11726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.614685][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.633443][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.926056][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2201'. [ 389.947903][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2201'. [ 389.971760][T11737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2201'. [ 390.226058][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.476757][T11746] netlink: 'syz.3.2289': attribute type 1 has an invalid length. [ 390.609577][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.617970][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.626233][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.634454][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.055763][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 391.066490][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 391.076351][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 391.079761][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2295'. [ 391.100869][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 391.108691][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 391.118033][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 391.127430][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 391.150429][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 391.241461][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.766670][T11790] netlink: 'syz.1.2299': attribute type 1 has an invalid length. [ 391.993770][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 392.026976][T11799] bond10: entered promiscuous mode [ 392.034137][T11799] bond10: entered allmulticast mode [ 392.039795][T11799] 8021q: adding VLAN 0 to HW filter on device bond10 [ 392.072610][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'. [ 392.109544][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'. [ 392.189413][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.263194][T11767] chnl_net:caif_netlink_parms(): no params data found [ 392.447401][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.763277][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.023961][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.156621][T11767] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.193032][T11767] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.229378][T11767] bridge_slave_0: entered allmulticast mode [ 393.238137][T11767] bridge_slave_0: entered promiscuous mode [ 393.241225][ T5792] Bluetooth: hci3: command tx timeout [ 393.253346][T11767] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.266608][T11767] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.278252][T11767] bridge_slave_1: entered allmulticast mode [ 393.292361][T11767] bridge_slave_1: entered promiscuous mode [ 393.408536][T11767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.453219][T11767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.545967][T11767] team0: Port device team_slave_0 added [ 393.557057][T11767] team0: Port device team_slave_1 added [ 393.714387][T11767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.736491][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.791782][T11767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.840971][T11767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.868822][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.950331][T11767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.197151][T11767] hsr_slave_0: entered promiscuous mode [ 394.238361][T11767] hsr_slave_1: entered promiscuous mode [ 394.288190][T11767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.304621][T11767] Cannot create hsr debugfs directory [ 394.376881][ T23] net_ratelimit: 11 callbacks suppressed [ 394.376900][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.951055][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.322031][ T5792] Bluetooth: hci3: command tx timeout [ 395.452627][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.518456][T11886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.244758][T11906] loop1: detected capacity change from 0 to 128 [ 396.520767][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.944599][ T11] hsr_slave_0: left promiscuous mode [ 396.973822][ T11] hsr_slave_1: left promiscuous mode [ 396.981270][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.988874][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.998676][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.017717][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.051927][ T11] veth1_macvtap: left promiscuous mode [ 397.058229][ T11] veth0_macvtap: left promiscuous mode [ 397.064927][ T11] veth1_vlan: left promiscuous mode [ 397.077698][ T11] veth0_vlan: left promiscuous mode [ 397.401508][ T5792] Bluetooth: hci3: command tx timeout [ 397.563353][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.671905][T11930] netlink: 'syz.1.2339': attribute type 1 has an invalid length. [ 397.754462][T11926] loop4: detected capacity change from 0 to 32768 [ 397.833535][T11926] loop4: p1 p3 < > [ 397.901905][ T11] bond11 (unregistering): Released all slaves [ 397.963415][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.219756][T11943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.439526][T11417] udevd[11417]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 398.439943][T11775] udevd[11775]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 398.493093][ T11] bond10 (unregistering): Released all slaves [ 398.600705][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.732058][ T11] bond9 (unregistering): Released all slaves [ 398.887078][ T11] bond8 (unregistering): Released all slaves [ 399.041951][ T11] bond7 (unregistering): Released all slaves [ 399.184825][ T11] bond6 (unregistering): Released all slaves [ 399.339907][ T11] bond5 (unregistering): Released all slaves [ 399.482783][ T5792] Bluetooth: hci3: command tx timeout [ 399.490146][ T11] bond4 (unregistering): Released all slaves [ 399.645835][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.813814][ T11] bond3 (unregistering): Released all slaves [ 400.016853][ T11] bond2 (unregistering): Released all slaves [ 400.100983][T11961] loop1: detected capacity change from 0 to 32768 [ 400.148528][T11961] loop1: p1 p3 < > [ 400.309831][ T11] bond1 (unregistering): Released all slaves [ 400.349899][ T788] smpboot: CPU 1 is now offline [ 400.629473][T11775] udevd[11775]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 400.643057][T11417] udevd[11417]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 400.658006][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.848551][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.007411][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.205052][T11974] FAULT_INJECTION: forcing a failure. [ 401.205052][T11974] name failslab, interval 1, probability 0, space 0, times 0 [ 401.239775][T11974] CPU: 0 PID: 11974 Comm: syz.1.2354 Not tainted syzkaller #0 [ 401.247456][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.257520][T11974] Call Trace: [ 401.260948][T11974] [ 401.263901][T11974] dump_stack_lvl+0x18c/0x250 [ 401.268707][T11974] ? show_regs_print_info+0x20/0x20 [ 401.274005][T11974] ? load_image+0x420/0x420 [ 401.278713][T11974] ? __might_sleep+0xe0/0xe0 [ 401.283660][T11974] ? __lock_acquire+0x7d80/0x7d80 [ 401.288724][T11974] should_fail_ex+0x394/0x4c0 [ 401.293549][T11974] should_failslab+0x9/0x20 [ 401.298058][T11974] slab_pre_alloc_hook+0x59/0x300 [ 401.303202][T11974] kmem_cache_alloc_node+0x5e/0x310 [ 401.308405][T11974] ? __alloc_skb+0x103/0x2c0 [ 401.313154][T11974] __alloc_skb+0x103/0x2c0 [ 401.317614][T11974] tcp_stream_alloc_skb+0x3d/0x330 [ 401.322898][T11974] tcp_connect+0x16cc/0x5300 [ 401.327552][T11974] ? mark_lock+0x94/0x320 [ 401.331925][T11974] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 401.338173][T11974] ? lock_chain_count+0x20/0x20 [ 401.343031][T11974] ? tcp_options_write+0xc70/0xc70 [ 401.348144][T11974] ? get_random_u16+0x4b0/0x990 [ 401.353030][T11974] ? lockdep_hardirqs_on+0x98/0x150 [ 401.358275][T11974] ? get_random_u16+0x16e/0x990 [ 401.363134][T11974] ? get_random_u16+0x517/0x990 [ 401.368003][T11974] ? __asan_memset+0x22/0x40 [ 401.372596][T11974] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 401.379207][T11974] ? dst_release+0x72/0x1a0 [ 401.383864][T11974] tcp_v4_connect+0xf99/0x18a0 [ 401.388649][T11974] ? tcp_twsk_unique+0x970/0x970 [ 401.393596][T11974] ? unwind_get_return_address+0x91/0xc0 [ 401.399239][T11974] ? stack_trace_save+0x100/0x100 [ 401.404352][T11974] ? tcp_v6_connect+0x6b4/0x1900 [ 401.409390][T11974] tcp_v6_connect+0xb06/0x1900 [ 401.414256][T11974] ? tcp_v6_pre_connect+0xf0/0xf0 [ 401.419305][T11974] ? do_syscall_64+0x55/0xb0 [ 401.423898][T11974] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.430150][T11974] __inet_stream_connect+0x254/0xdf0 [ 401.435804][T11974] ? inet_dgram_connect+0x340/0x340 [ 401.441013][T11974] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 401.446216][T11974] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 401.451497][T11974] ? verify_lock_unused+0x140/0x140 [ 401.456698][T11974] ? __might_sleep+0xe0/0xe0 [ 401.461311][T11974] ? mark_lock+0x94/0x320 [ 401.465643][T11974] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 401.471628][T11974] ? lock_chain_count+0x20/0x20 [ 401.476495][T11974] ? tcp_set_state+0x6c0/0x6c0 [ 401.481359][T11974] tcp_sendmsg+0x2f/0x50 [ 401.485690][T11974] __sys_sendto+0x4a9/0x6b0 [ 401.490235][T11974] ? __ia32_sys_getpeername+0x90/0x90 [ 401.495615][T11974] ? aa_af_perm+0x330/0x330 [ 401.500174][T11974] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 401.506241][T11974] ? lock_chain_count+0x20/0x20 [ 401.511095][T11974] __x64_sys_sendto+0xde/0xf0 [ 401.515782][T11974] do_syscall_64+0x55/0xb0 [ 401.520334][T11974] ? clear_bhb_loop+0x40/0x90 [ 401.525267][T11974] ? clear_bhb_loop+0x40/0x90 [ 401.529945][T11974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.535841][T11974] RIP: 0033:0x7fd7b0d9e159 [ 401.540284][T11974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.560334][T11974] RSP: 002b:00007fd7b1ca3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 401.568763][T11974] RAX: ffffffffffffffda RBX: 00007fd7b1025fa0 RCX: 00007fd7b0d9e159 [ 401.576731][T11974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 401.584723][T11974] RBP: 00007fd7b0e3506b R08: 0000200000000340 R09: 000000000000001c [ 401.592694][T11974] R10: 0000000020008045 R11: 0000000000000246 R12: 0000000000000000 [ 401.600659][T11974] R13: 00007fd7b1026038 R14: 00007fd7b1025fa0 R15: 00007ffc06ce4938 [ 401.608639][T11974] [ 401.722271][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.059549][ T11] team0 (unregistering): Port device team_slave_1 removed [ 402.120079][ T11] team0 (unregistering): Port device team_slave_0 removed [ 402.178712][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.235810][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.643470][ T11] bond0 (unregistering): Released all slaves [ 402.762022][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.842823][T11767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 403.055366][T11767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.115751][T11767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.145697][T11991] netlink: 1308 bytes leftover after parsing attributes in process `syz.1.2359'. [ 403.200663][T11767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.709250][T11767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.789556][T12003] FAULT_INJECTION: forcing a failure. [ 403.789556][T12003] name failslab, interval 1, probability 0, space 0, times 0 [ 403.805936][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.874549][T11767] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.892028][T12003] CPU: 0 PID: 12003 Comm: syz.4.2362 Not tainted syzkaller #0 [ 403.899578][T12003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.909657][T12003] Call Trace: [ 403.912954][T12003] [ 403.915894][T12003] dump_stack_lvl+0x18c/0x250 [ 403.920588][T12003] ? show_regs_print_info+0x20/0x20 [ 403.925810][T12003] ? load_image+0x420/0x420 [ 403.930347][T12003] should_fail_ex+0x394/0x4c0 [ 403.935046][T12003] should_failslab+0x9/0x20 [ 403.939608][T12003] slab_pre_alloc_hook+0x59/0x300 [ 403.944646][T12003] kmem_cache_alloc+0x5a/0x2c0 [ 403.949425][T12003] ? dst_alloc+0x105/0x170 [ 403.953953][T12003] dst_alloc+0x105/0x170 [ 403.958232][T12003] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 403.964379][T12003] ? ip_route_output_key_hash_rcu+0x1221/0x2350 [ 403.970647][T12003] ? ip_route_output_key_hash+0x13d/0x330 [ 403.976393][T12003] ip_route_output_key_hash+0x1f3/0x330 [ 403.982060][T12003] ? ip_route_input_rcu+0x3120/0x3120 [ 403.987469][T12003] ? rcu_force_quiescent_state+0x220/0x220 [ 403.993300][T12003] ip_route_output_flow+0x2a/0x150 [ 403.998489][T12003] ? security_sk_classify_flow+0x7b/0x90 [ 404.004150][T12003] tcp_v4_connect+0x77a/0x18a0 [ 404.010062][T12003] ? tcp_twsk_unique+0x970/0x970 [ 404.015019][T12003] ? unwind_get_return_address+0x91/0xc0 [ 404.020675][T12003] ? stack_trace_save+0x100/0x100 [ 404.025709][T12003] ? tcp_v6_connect+0x6b4/0x1900 [ 404.030717][T12003] tcp_v6_connect+0xb06/0x1900 [ 404.035533][T12003] ? tcp_v6_pre_connect+0xf0/0xf0 [ 404.040592][T12003] ? do_syscall_64+0x55/0xb0 [ 404.045427][T12003] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.053201][T12003] __inet_stream_connect+0x254/0xdf0 [ 404.058741][T12003] ? inet_dgram_connect+0x340/0x340 [ 404.064066][T12003] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 404.069289][T12003] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 404.074573][T12003] ? verify_lock_unused+0x140/0x140 [ 404.079873][T12003] ? __might_sleep+0xe0/0xe0 [ 404.084467][T12003] ? mark_lock+0x94/0x320 [ 404.088797][T12003] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 404.094781][T12003] ? lock_chain_count+0x20/0x20 [ 404.099727][T12003] ? tcp_set_state+0x6c0/0x6c0 [ 404.104674][T12003] tcp_sendmsg+0x2f/0x50 [ 404.108941][T12003] __sys_sendto+0x4a9/0x6b0 [ 404.113479][T12003] ? __ia32_sys_getpeername+0x90/0x90 [ 404.118904][T12003] ? aa_af_perm+0x330/0x330 [ 404.123560][T12003] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 404.129567][T12003] ? lock_chain_count+0x20/0x20 [ 404.134446][T12003] __x64_sys_sendto+0xde/0xf0 [ 404.139230][T12003] do_syscall_64+0x55/0xb0 [ 404.143677][T12003] ? clear_bhb_loop+0x40/0x90 [ 404.148467][T12003] ? clear_bhb_loop+0x40/0x90 [ 404.153168][T12003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.159068][T12003] RIP: 0033:0x7fce8a59e159 [ 404.163665][T12003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.183799][T12003] RSP: 002b:00007fce8b4aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 404.192305][T12003] RAX: ffffffffffffffda RBX: 00007fce8a825fa0 RCX: 00007fce8a59e159 [ 404.200284][T12003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 404.208281][T12003] RBP: 00007fce8a63506b R08: 0000200000000340 R09: 000000000000001c [ 404.216251][T12003] R10: 0000000020008045 R11: 0000000000000246 R12: 0000000000000000 [ 404.224298][T12003] R13: 00007fce8a826038 R14: 00007fce8a825fa0 R15: 00007ffd17f8a2a8 [ 404.232336][T12003] [ 404.254905][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.275760][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.283139][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.333058][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.340265][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.509932][T11767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.843133][ T2179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.879385][T12021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 405.285378][T11767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.478599][T11767] veth0_vlan: entered promiscuous mode [ 405.535958][T11767] veth1_vlan: entered promiscuous mode [ 405.679742][T11767] veth0_macvtap: entered promiscuous mode [ 405.741644][T11767] veth1_macvtap: entered promiscuous mode [ 405.882783][T12004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.905064][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.948911][T12043] FAULT_INJECTION: forcing a failure. [ 405.948911][T12043] name failslab, interval 1, probability 0, space 0, times 0 [ 405.966208][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.977930][T12043] CPU: 0 PID: 12043 Comm: syz.1.2372 Not tainted syzkaller #0 [ 405.985440][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.995495][T12043] Call Trace: [ 405.998779][T12043] [ 406.001711][T12043] dump_stack_lvl+0x18c/0x250 [ 406.006427][T12043] ? show_regs_print_info+0x20/0x20 [ 406.011625][T12043] ? load_image+0x420/0x420 [ 406.016129][T12043] ? __might_sleep+0xe0/0xe0 [ 406.020730][T12043] ? __lock_acquire+0x7d80/0x7d80 [ 406.025843][T12043] should_fail_ex+0x394/0x4c0 [ 406.030530][T12043] should_failslab+0x9/0x20 [ 406.035061][T12043] slab_pre_alloc_hook+0x59/0x300 [ 406.040182][T12043] kmem_cache_alloc_node+0x5e/0x310 [ 406.045391][T12043] ? __alloc_skb+0x103/0x2c0 [ 406.049984][T12043] __alloc_skb+0x103/0x2c0 [ 406.054413][T12043] tcp_stream_alloc_skb+0x3d/0x330 [ 406.059656][T12043] tcp_connect+0x16cc/0x5300 [ 406.064386][T12043] ? mark_lock+0x94/0x320 [ 406.068732][T12043] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 406.074715][T12043] ? lock_chain_count+0x20/0x20 [ 406.079562][T12043] ? tcp_options_write+0xc70/0xc70 [ 406.084671][T12043] ? get_random_u16+0x4b0/0x990 [ 406.089530][T12043] ? lockdep_hardirqs_on+0x98/0x150 [ 406.094737][T12043] ? get_random_u16+0x16e/0x990 [ 406.099608][T12043] ? get_random_u16+0x517/0x990 [ 406.104495][T12043] ? __asan_memset+0x22/0x40 [ 406.109167][T12043] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 406.115854][T12043] ? dst_release+0x72/0x1a0 [ 406.120395][T12043] tcp_v4_connect+0xf99/0x18a0 [ 406.125191][T12043] ? tcp_twsk_unique+0x970/0x970 [ 406.130169][T12043] ? unwind_get_return_address+0x91/0xc0 [ 406.135839][T12043] ? stack_trace_save+0x100/0x100 [ 406.141306][T12043] ? tcp_v6_connect+0x6b4/0x1900 [ 406.146526][T12043] tcp_v6_connect+0xb06/0x1900 [ 406.151360][T12043] ? tcp_v6_pre_connect+0xf0/0xf0 [ 406.156411][T12043] ? do_syscall_64+0x55/0xb0 [ 406.161010][T12043] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.167086][T12043] __inet_stream_connect+0x254/0xdf0 [ 406.172376][T12043] ? inet_dgram_connect+0x340/0x340 [ 406.177582][T12043] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 406.182886][T12043] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 406.188088][T12043] ? verify_lock_unused+0x140/0x140 [ 406.193292][T12043] ? __might_sleep+0xe0/0xe0 [ 406.197906][T12043] ? mark_lock+0x94/0x320 [ 406.202234][T12043] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 406.208471][T12043] ? lock_chain_count+0x20/0x20 [ 406.213330][T12043] ? tcp_set_state+0x6c0/0x6c0 [ 406.218185][T12043] tcp_sendmsg+0x2f/0x50 [ 406.222435][T12043] __sys_sendto+0x4a9/0x6b0 [ 406.226949][T12043] ? __ia32_sys_getpeername+0x90/0x90 [ 406.232328][T12043] ? aa_af_perm+0x330/0x330 [ 406.236923][T12043] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 406.242922][T12043] ? lock_chain_count+0x20/0x20 [ 406.247801][T12043] __x64_sys_sendto+0xde/0xf0 [ 406.252519][T12043] do_syscall_64+0x55/0xb0 [ 406.256957][T12043] ? clear_bhb_loop+0x40/0x90 [ 406.261730][T12043] ? clear_bhb_loop+0x40/0x90 [ 406.266507][T12043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.272495][T12043] RIP: 0033:0x7fd7b0d9e159 [ 406.277003][T12043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.296872][T12043] RSP: 002b:00007fd7b1ca3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 406.305308][T12043] RAX: ffffffffffffffda RBX: 00007fd7b1025fa0 RCX: 00007fd7b0d9e159 [ 406.313280][T12043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 406.321320][T12043] RBP: 00007fd7b0e3506b R08: 0000200000000340 R09: 000000000000001c [ 406.329298][T12043] R10: 0000000020008045 R11: 0000000000000246 R12: 0000000000000000 [ 406.337268][T12043] R13: 00007fd7b1026038 R14: 00007fd7b1025fa0 R15: 00007ffc06ce4938 [ 406.345252][T12043] [ 406.354478][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.365399][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.375417][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.386647][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.398412][T11767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.434374][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.445326][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.455467][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.473512][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.485384][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.500676][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.511959][T11767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.532974][T11767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.542782][T11767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.558162][T11767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.572047][T11767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.735903][ T8867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.775446][ T8867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.910127][ T9066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.920865][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.995186][ T9066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.321201][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.602231][T12071] FAULT_INJECTION: forcing a failure. [ 407.602231][T12071] name fail_futex, interval 1, probability 0, space 0, times 0 [ 407.620095][T12071] CPU: 0 PID: 12071 Comm: syz.4.2383 Not tainted syzkaller #0 [ 407.627591][T12071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.637680][T12071] Call Trace: [ 407.641070][T12071] [ 407.644003][T12071] dump_stack_lvl+0x18c/0x250 [ 407.648717][T12071] ? show_regs_print_info+0x20/0x20 [ 407.653962][T12071] ? load_image+0x420/0x420 [ 407.658491][T12071] should_fail_ex+0x394/0x4c0 [ 407.663189][T12071] get_futex_key+0x136/0x1030 [ 407.667983][T12071] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 407.673965][T12071] ? futex_setup_timer+0xc0/0xc0 [ 407.678896][T12071] ? tcp_sendmsg+0x39/0x50 [ 407.683314][T12071] futex_wake+0x127/0x4f0 [ 407.687913][T12071] ? _local_bh_enable+0xa0/0xa0 [ 407.692769][T12071] ? futex_wake_mark+0x150/0x150 [ 407.697717][T12071] ? fput+0x154/0x1a0 [ 407.701700][T12071] ? __sys_sendto+0x52b/0x6b0 [ 407.706465][T12071] do_futex+0x35d/0x3e0 [ 407.710628][T12071] ? __ia32_sys_get_robust_list+0x110/0x110 [ 407.716527][T12071] ? aa_af_perm+0x330/0x330 [ 407.721035][T12071] __se_sys_futex+0x3a9/0x440 [ 407.725729][T12071] ? __x64_sys_futex+0xf0/0xf0 [ 407.730500][T12071] ? __x64_sys_futex+0x21/0xf0 [ 407.735364][T12071] do_syscall_64+0x55/0xb0 [ 407.739780][T12071] ? clear_bhb_loop+0x40/0x90 [ 407.744644][T12071] ? clear_bhb_loop+0x40/0x90 [ 407.749339][T12071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.755233][T12071] RIP: 0033:0x7fce8a59e159 [ 407.759668][T12071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.779446][T12071] RSP: 002b:00007fce8b4aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 407.787964][T12071] RAX: ffffffffffffffda RBX: 00007fce8a825fa8 RCX: 00007fce8a59e159 [ 407.795933][T12071] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fce8a825fac [ 407.803899][T12071] RBP: 00007fce8a825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 407.811953][T12071] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 407.819915][T12071] R13: 00007fce8a826038 R14: 00007ffd17f8a1c0 R15: 00007ffd17f8a2a8 [ 407.828008][T12071] [ 407.966997][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.110106][T12076] FAULT_INJECTION: forcing a failure. [ 408.110106][T12076] name failslab, interval 1, probability 0, space 0, times 0 [ 408.214756][T12076] CPU: 0 PID: 12076 Comm: syz.4.2384 Not tainted syzkaller #0 [ 408.222346][T12076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.232424][T12076] Call Trace: [ 408.235704][T12076] [ 408.238718][T12076] dump_stack_lvl+0x18c/0x250 [ 408.243403][T12076] ? show_regs_print_info+0x20/0x20 [ 408.248603][T12076] ? load_image+0x420/0x420 [ 408.253103][T12076] ? __lock_acquire+0x7d80/0x7d80 [ 408.258218][T12076] should_fail_ex+0x394/0x4c0 [ 408.262898][T12076] should_failslab+0x9/0x20 [ 408.267400][T12076] slab_pre_alloc_hook+0x59/0x300 [ 408.272453][T12076] ? tcp_sigpool_alloc_ahash+0x239/0xcc0 [ 408.278154][T12076] ? tcp_sigpool_alloc_ahash+0x239/0xcc0 [ 408.283788][T12076] __kmem_cache_alloc_node+0x53/0x250 [ 408.289172][T12076] ? tcp_sigpool_alloc_ahash+0x239/0xcc0 [ 408.294828][T12076] __kmalloc_node+0xa6/0x240 [ 408.299517][T12076] tcp_sigpool_alloc_ahash+0x239/0xcc0 [ 408.304987][T12076] ? tcp_illinois_init+0x2b0/0x2b0 [ 408.310121][T12076] tcp_md5_alloc_sigpool+0x1b/0x50 [ 408.315243][T12076] tcp_md5_do_add+0x104/0x3b0 [ 408.319923][T12076] tcp_v6_parse_md5_keys+0x54d/0x680 [ 408.325218][T12076] ? sock_put+0x80/0x80 [ 408.329388][T12076] ? __local_bh_enable_ip+0x13a/0x1c0 [ 408.334843][T12076] ? _local_bh_enable+0xa0/0xa0 [ 408.339705][T12076] do_tcp_setsockopt+0x1089/0x1c50 [ 408.344819][T12076] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 408.350367][T12076] ? aa_af_perm+0x330/0x330 [ 408.354888][T12076] ? __fget_files+0x28/0x460 [ 408.359512][T12076] ? aa_sock_opt_perm+0x74/0x100 [ 408.364469][T12076] ? sock_common_setsockopt+0x36/0xc0 [ 408.369884][T12076] ? tcp_setsockopt+0x3d/0xe0 [ 408.374593][T12076] ? tcp_enable_tx_delay+0x70/0x70 [ 408.379713][T12076] ? sock_common_recvmsg+0x190/0x190 [ 408.385001][T12076] do_sock_setsockopt+0x175/0x1a0 [ 408.390026][T12076] ? __fdget+0x180/0x210 [ 408.394275][T12076] __x64_sys_setsockopt+0x182/0x200 [ 408.399479][T12076] do_syscall_64+0x55/0xb0 [ 408.403910][T12076] ? clear_bhb_loop+0x40/0x90 [ 408.408712][T12076] ? clear_bhb_loop+0x40/0x90 [ 408.413427][T12076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.419329][T12076] RIP: 0033:0x7fce8a59e159 [ 408.423775][T12076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.443575][T12076] RSP: 002b:00007fce8b4aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.452077][T12076] RAX: ffffffffffffffda RBX: 00007fce8a825fa0 RCX: 00007fce8a59e159 [ 408.460134][T12076] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000004 [ 408.468101][T12076] RBP: 00007fce8a63506b R08: 00000000000000d8 R09: 0000000000000000 [ 408.476165][T12076] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000000 [ 408.484142][T12076] R13: 00007fce8a826038 R14: 00007fce8a825fa0 R15: 00007ffd17f8a2a8 [ 408.492123][T12076] [ 409.001238][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.027863][T12095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.036348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.288477][T12105] loop1: detected capacity change from 0 to 256 [ 409.317213][T12107] loop3: detected capacity change from 0 to 128 [ 409.387560][ T28] audit: type=1800 audit(1790435343.177:42): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2398" name="bus" dev="loop3" ino=1048631 res=0 errno=0 [ 409.517455][ T5778] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 409.576206][ T5778] FAT-fs (loop3): Filesystem has been set read-only [ 410.041358][T12004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.361035][T12004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.444217][T12004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.082629][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.688346][T12177] netlink: 'syz.0.2426': attribute type 1 has an invalid length. [ 412.112314][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 412.129031][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.163087][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'. [ 412.242674][T12189] erspan1: entered allmulticast mode [ 412.511408][T12203] FAULT_INJECTION: forcing a failure. [ 412.511408][T12203] name fail_futex, interval 1, probability 0, space 0, times 0 [ 412.605432][T12203] CPU: 0 PID: 12203 Comm: syz.3.2434 Not tainted syzkaller #0 [ 412.613547][T12203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.623711][T12203] Call Trace: [ 412.626996][T12203] [ 412.630118][T12203] dump_stack_lvl+0x18c/0x250 [ 412.634816][T12203] ? show_regs_print_info+0x20/0x20 [ 412.640035][T12203] ? load_image+0x420/0x420 [ 412.644559][T12203] ? __lock_acquire+0x1336/0x7d80 [ 412.649589][T12203] should_fail_ex+0x394/0x4c0 [ 412.654940][T12203] get_futex_key+0x16f/0x1030 [ 412.659704][T12203] ? futex_setup_timer+0xc0/0xc0 [ 412.664728][T12203] futex_wake+0x127/0x4f0 [ 412.669062][T12203] ? futex_wake_mark+0x150/0x150 [ 412.674001][T12203] do_futex+0x35d/0x3e0 [ 412.678152][T12203] ? __might_fault+0xaa/0x120 [ 412.682824][T12203] ? __ia32_sys_get_robust_list+0x110/0x110 [ 412.688798][T12203] ? __might_fault+0xc6/0x120 [ 412.693472][T12203] mm_release+0x184/0x3a0 [ 412.697801][T12203] ? exit_mm_release+0x30/0x30 [ 412.702584][T12203] ? lockdep_hardirqs_on+0x98/0x150 [ 412.707808][T12203] exit_mm+0xa4/0x340 [ 412.711808][T12203] ? sysctl_delayacct+0x220/0x220 [ 412.716840][T12203] ? do_exit+0x2530/0x2530 [ 412.721288][T12203] do_exit+0x909/0x2530 [ 412.725542][T12203] ? put_task_struct+0xc0/0xc0 [ 412.730317][T12203] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 412.736299][T12203] ? get_signal+0x100e/0x1390 [ 412.741026][T12203] ? lock_chain_count+0x20/0x20 [ 412.745884][T12203] do_group_exit+0x22d/0x2f0 [ 412.750474][T12203] ? lockdep_hardirqs_on+0x98/0x150 [ 412.755672][T12203] get_signal+0x12a6/0x1390 [ 412.760185][T12203] arch_do_signal_or_restart+0xc2/0x7b0 [ 412.765768][T12203] ? __ia32_sys_get_robust_list+0x110/0x110 [ 412.771750][T12203] ? get_sigframe_size+0x20/0x20 [ 412.776700][T12203] ? exit_to_user_mode_loop+0x3b/0x110 [ 412.782251][T12203] exit_to_user_mode_loop+0x70/0x110 [ 412.787572][T12203] exit_to_user_mode_prepare+0xee/0x180 [ 412.793212][T12203] syscall_exit_to_user_mode+0x1a/0x50 [ 412.798676][T12203] do_syscall_64+0x61/0xb0 [ 412.803109][T12203] ? clear_bhb_loop+0x40/0x90 [ 412.807817][T12203] ? clear_bhb_loop+0x40/0x90 [ 412.812510][T12203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.818419][T12203] RIP: 0033:0x7f5790f9e159 [ 412.822934][T12203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.842562][T12203] RSP: 002b:00007f5791f040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 412.850991][T12203] RAX: fffffffffffffe00 RBX: 00007f5791225fa8 RCX: 00007f5790f9e159 [ 412.859143][T12203] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5791225fa8 [ 412.867171][T12203] RBP: 00007f5791225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 412.875159][T12203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.883284][T12203] R13: 00007f5791226038 R14: 00007ffda6536f60 R15: 00007ffda6537048 [ 412.891360][T12203] [ 413.164849][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.187706][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.198806][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.227065][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.400666][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.628591][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2441'. [ 413.657754][T12234] FAULT_INJECTION: forcing a failure. [ 413.657754][T12234] name failslab, interval 1, probability 0, space 0, times 0 [ 413.723922][T12234] CPU: 0 PID: 12234 Comm: syz.3.2443 Not tainted syzkaller #0 [ 413.731528][T12234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.741613][T12234] Call Trace: [ 413.744899][T12234] [ 413.747847][T12234] dump_stack_lvl+0x18c/0x250 [ 413.752539][T12234] ? show_regs_print_info+0x20/0x20 [ 413.757745][T12234] ? load_image+0x420/0x420 [ 413.762299][T12234] ? __might_sleep+0xe0/0xe0 [ 413.766910][T12234] ? __lock_acquire+0x7d80/0x7d80 [ 413.771943][T12234] should_fail_ex+0x394/0x4c0 [ 413.776657][T12234] should_failslab+0x9/0x20 [ 413.781195][T12234] slab_pre_alloc_hook+0x59/0x300 [ 413.786315][T12234] ? tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 413.791957][T12234] ? tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 413.797594][T12234] __kmem_cache_alloc_node+0x53/0x250 [ 413.802976][T12234] ? tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 413.808629][T12234] __kmalloc_node_track_caller+0xa4/0x230 [ 413.814537][T12234] kstrdup+0x3b/0x80 [ 413.818449][T12234] tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 413.823999][T12234] ? tcp_illinois_init+0x2b0/0x2b0 [ 413.829150][T12234] tcp_md5_alloc_sigpool+0x1b/0x50 [ 413.834272][T12234] tcp_md5_do_add+0x104/0x3b0 [ 413.838954][T12234] tcp_v6_parse_md5_keys+0x54d/0x680 [ 413.844254][T12234] ? sock_put+0x80/0x80 [ 413.848425][T12234] ? __local_bh_enable_ip+0x13a/0x1c0 [ 413.853816][T12234] ? _local_bh_enable+0xa0/0xa0 [ 413.858686][T12234] do_tcp_setsockopt+0x1089/0x1c50 [ 413.863806][T12234] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 413.869183][T12234] ? aa_af_perm+0x330/0x330 [ 413.873795][T12234] ? __fget_files+0x28/0x460 [ 413.878473][T12234] ? aa_sock_opt_perm+0x74/0x100 [ 413.883503][T12234] ? sock_common_setsockopt+0x36/0xc0 [ 413.888892][T12234] ? tcp_setsockopt+0x3d/0xe0 [ 413.893608][T12234] ? tcp_enable_tx_delay+0x70/0x70 [ 413.898729][T12234] ? sock_common_recvmsg+0x190/0x190 [ 413.904117][T12234] do_sock_setsockopt+0x175/0x1a0 [ 413.909174][T12234] ? __fdget+0x180/0x210 [ 413.913441][T12234] __x64_sys_setsockopt+0x182/0x200 [ 413.918649][T12234] do_syscall_64+0x55/0xb0 [ 413.923097][T12234] ? clear_bhb_loop+0x40/0x90 [ 413.927781][T12234] ? clear_bhb_loop+0x40/0x90 [ 413.932462][T12234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.938363][T12234] RIP: 0033:0x7f5790f9e159 [ 413.942784][T12234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.962393][T12234] RSP: 002b:00007f5791f04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 413.970810][T12234] RAX: ffffffffffffffda RBX: 00007f5791225fa0 RCX: 00007f5790f9e159 [ 413.978784][T12234] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000004 [ 413.987024][T12234] RBP: 00007f579103506b R08: 00000000000000d8 R09: 0000000000000000 [ 413.994992][T12234] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000000 [ 414.003006][T12234] R13: 00007f5791226038 R14: 00007f5791225fa0 R15: 00007ffda6537048 [ 414.011017][T12234] [ 414.320021][T12232] bond1: entered promiscuous mode [ 414.354141][T12252] netlink: 1308 bytes leftover after parsing attributes in process `syz.1.2450'. [ 414.365348][T12232] bond1: entered allmulticast mode [ 414.402544][T12232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.479758][T12235] erspan1: entered allmulticast mode [ 414.923372][T12269] FAULT_INJECTION: forcing a failure. [ 414.923372][T12269] name failslab, interval 1, probability 0, space 0, times 0 [ 415.021931][T12269] CPU: 0 PID: 12269 Comm: syz.3.2455 Not tainted syzkaller #0 [ 415.029546][T12269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.039734][T12269] Call Trace: [ 415.043032][T12269] [ 415.046081][T12269] dump_stack_lvl+0x18c/0x250 [ 415.050791][T12269] ? show_regs_print_info+0x20/0x20 [ 415.056002][T12269] ? load_image+0x420/0x420 [ 415.060529][T12269] ? __might_sleep+0xe0/0xe0 [ 415.065239][T12269] ? __lock_acquire+0x7d80/0x7d80 [ 415.070397][T12269] should_fail_ex+0x394/0x4c0 [ 415.075135][T12269] should_failslab+0x9/0x20 [ 415.079745][T12269] slab_pre_alloc_hook+0x59/0x300 [ 415.084801][T12269] ? d_instantiate+0x6f/0x90 [ 415.089408][T12269] kmem_cache_alloc+0x5a/0x2c0 [ 415.094189][T12269] ? alloc_empty_file+0x9e/0x1d0 [ 415.099127][T12269] alloc_empty_file+0x9e/0x1d0 [ 415.104060][T12269] alloc_file+0x5b/0x600 [ 415.108734][T12269] alloc_file_pseudo+0x184/0x210 [ 415.114323][T12269] ? fput+0x1a0/0x1a0 [ 415.118332][T12269] ? alloc_fd+0x590/0x640 [ 415.122748][T12269] anon_inode_getfd+0xca/0x1c0 [ 415.127552][T12269] map_create+0xf13/0x12f0 [ 415.131989][T12269] __sys_bpf+0x651/0x890 [ 415.136244][T12269] ? bpf_link_show_fdinfo+0x560/0x560 [ 415.141632][T12269] ? lock_chain_count+0x20/0x20 [ 415.146491][T12269] __x64_sys_bpf+0x7c/0x90 [ 415.150904][T12269] do_syscall_64+0x55/0xb0 [ 415.155321][T12269] ? clear_bhb_loop+0x40/0x90 [ 415.160087][T12269] ? clear_bhb_loop+0x40/0x90 [ 415.164765][T12269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.170659][T12269] RIP: 0033:0x7f5790f9e159 [ 415.175163][T12269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.194882][T12269] RSP: 002b:00007f5791f04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.203387][T12269] RAX: ffffffffffffffda RBX: 00007f5791225fa0 RCX: 00007f5790f9e159 [ 415.211382][T12269] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 0000000000000000 [ 415.219440][T12269] RBP: 00007f579103506b R08: 0000000000000000 R09: 0000000000000000 [ 415.227406][T12269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.235377][T12269] R13: 00007f5791226038 R14: 00007f5791225fa0 R15: 00007ffda6537048 [ 415.243355][T12269] [ 415.337413][ T9] net_ratelimit: 1 callbacks suppressed [ 415.337425][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.441862][T12280] netlink: 1308 bytes leftover after parsing attributes in process `syz.1.2459'. [ 415.455059][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2460'. [ 415.751651][T12284] syzkaller0: entered promiscuous mode [ 415.831705][T12284] syzkaller0: entered allmulticast mode [ 416.291835][T12310] netlink: 1308 bytes leftover after parsing attributes in process `syz.1.2469'. [ 416.365891][T12004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.442579][T12004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.417579][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.473309][T12335] FAULT_INJECTION: forcing a failure. [ 417.473309][T12335] name fail_futex, interval 1, probability 0, space 0, times 0 [ 417.516419][T12335] CPU: 0 PID: 12335 Comm: syz.1.2478 Not tainted syzkaller #0 [ 417.524269][T12335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.534452][T12335] Call Trace: [ 417.537738][T12335] [ 417.540668][T12335] dump_stack_lvl+0x18c/0x250 [ 417.545456][T12335] ? show_regs_print_info+0x20/0x20 [ 417.550755][T12335] ? load_image+0x420/0x420 [ 417.555272][T12335] ? rcu_read_lock_sched_held+0x8a/0x110 [ 417.560921][T12335] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 417.567085][T12335] should_fail_ex+0x394/0x4c0 [ 417.571773][T12335] get_futex_key+0x136/0x1030 [ 417.576453][T12335] ? futex_setup_timer+0xc0/0xc0 [ 417.581478][T12335] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 417.587739][T12335] ? __lock_acquire+0x7d80/0x7d80 [ 417.592806][T12335] ? lock_chain_count+0x20/0x20 [ 417.597808][T12335] futex_wait_setup+0xbc/0x270 [ 417.602630][T12335] ? futex_wait_multiple+0x920/0x920 [ 417.607993][T12335] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 417.613985][T12335] ? _raw_spin_unlock+0x40/0x40 [ 417.618849][T12335] futex_wait+0x1bc/0x5c0 [ 417.623217][T12335] ? futex_wait_setup+0x270/0x270 [ 417.628275][T12335] ? do_tcp_setsockopt+0x152d/0x1c50 [ 417.633845][T12335] do_futex+0x2ff/0x3e0 [ 417.638011][T12335] ? __ia32_sys_get_robust_list+0x110/0x110 [ 417.643907][T12335] ? aa_af_perm+0x330/0x330 [ 417.648424][T12335] __se_sys_futex+0x3a9/0x440 [ 417.653127][T12335] ? __x64_sys_futex+0xf0/0xf0 [ 417.657929][T12335] ? __x64_sys_futex+0x21/0xf0 [ 417.662793][T12335] do_syscall_64+0x55/0xb0 [ 417.667233][T12335] ? clear_bhb_loop+0x40/0x90 [ 417.671914][T12335] ? clear_bhb_loop+0x40/0x90 [ 417.676597][T12335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.682779][T12335] RIP: 0033:0x7fd7b0d9e159 [ 417.687207][T12335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.706905][T12335] RSP: 002b:00007fd7b1ca30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 417.715422][T12335] RAX: ffffffffffffffda RBX: 00007fd7b1025fa8 RCX: 00007fd7b0d9e159 [ 417.723407][T12335] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd7b1025fa8 [ 417.731479][T12335] RBP: 00007fd7b1025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 417.739446][T12335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.747534][T12335] R13: 00007fd7b1026038 R14: 00007ffc06ce4850 R15: 00007ffc06ce4938 [ 417.755534][T12335] [ 418.920868][T12337] input: syz1 as /devices/virtual/input/input21 [ 419.022334][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.042052][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.051767][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.071287][T12004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.482229][T12004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.067377][T12004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.747473][T12358] input: syz1 as /devices/virtual/input/input22 [ 421.778690][ T9] net_ratelimit: 1 callbacks suppressed [ 421.778702][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.520914][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.851259][ T2179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.610997][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2470'. [ 423.704094][T12313] bond11: entered promiscuous mode [ 423.709345][T12313] bond11: entered allmulticast mode [ 423.770916][T12313] 8021q: adding VLAN 0 to HW filter on device bond11 [ 423.821224][T12368] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 423.866015][T12368] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 423.894337][ T2179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.196862][T12383] input: syz1 as /devices/virtual/input/input23 [ 425.213275][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.565374][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.614682][T12391] syzkaller0: entered promiscuous mode [ 425.654381][T12391] syzkaller0: entered allmulticast mode [ 425.688938][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2502'. [ 425.793643][T12395] bond2: entered promiscuous mode [ 425.842192][T12395] bond2: entered allmulticast mode [ 425.880875][T12395] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.043238][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'. [ 426.285371][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.488380][T12418] input: syz1 as /devices/virtual/input/input24 [ 427.503710][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.124737][T12432] syzkaller0: entered promiscuous mode [ 428.174659][T12432] syzkaller0: entered allmulticast mode [ 428.525620][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.605913][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.639511][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'. [ 428.791230][T12443] bond1: entered promiscuous mode [ 428.834460][T12443] bond1: entered allmulticast mode [ 428.861127][T12443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.934957][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2515'. [ 430.102940][T12461] input: syz1 as /devices/virtual/input/input25 [ 430.127860][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.140882][ T2179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.151230][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.160135][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.168813][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.755630][T12477] syzkaller0: entered promiscuous mode [ 430.805630][T12477] syzkaller0: entered allmulticast mode [ 431.165928][T12010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.733870][T12010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.847767][T12501] input: syz1 as /devices/virtual/input/input26 [ 432.865342][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.105559][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.116653][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.124941][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.147103][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.169860][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 433.178367][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.696177][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2533'. [ 433.832674][T12514] bond1: entered promiscuous mode [ 433.857654][T12514] bond1: entered allmulticast mode [ 433.898199][T12010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.907181][T12514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.253078][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.442714][T12528] syzkaller0: entered promiscuous mode [ 434.475312][T12528] syzkaller0: entered allmulticast mode [ 434.597255][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.242226][ T51] Bluetooth: hci1: command tx timeout [ 436.237494][T12575] xt_hashlimit: size too large, truncated to 1048576 [ 437.320980][ T51] Bluetooth: hci1: command tx timeout [ 439.401635][ T51] Bluetooth: hci1: command tx timeout [ 440.164563][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.276352][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2544'. [ 440.302656][T12561] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 440.406763][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.536551][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.543930][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.893766][T12504] chnl_net:caif_netlink_parms(): no params data found [ 441.490977][ T51] Bluetooth: hci1: command tx timeout [ 441.691899][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2569'. [ 441.817544][T12645] bond2: entered promiscuous mode [ 441.838864][T12645] bond2: entered allmulticast mode [ 441.864063][T12645] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.038857][T12647] syzkaller0: entered promiscuous mode [ 442.077118][T12647] syzkaller0: entered allmulticast mode [ 442.170518][T12504] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.210790][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.241736][T12504] bridge_slave_0: entered allmulticast mode [ 442.267755][T12504] bridge_slave_0: entered promiscuous mode [ 442.534408][ T28] audit: type=1326 audit(1790435376.327:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.1.2571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b0d9e159 code=0x7ffc0000 [ 442.651313][ T28] audit: type=1326 audit(1790435376.357:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.1.2571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd7b0d9e159 code=0x7ffc0000 [ 442.736604][T12656] loop1: detected capacity change from 0 to 764 [ 442.757632][ T28] audit: type=1326 audit(1790435376.357:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.1.2571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b0d9e159 code=0x7ffc0000 [ 442.885442][ T28] audit: type=1326 audit(1790435376.357:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.1.2571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd7b0d9e159 code=0x7ffc0000 [ 442.998121][ T28] audit: type=1326 audit(1790435376.357:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.1.2571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b0d9e159 code=0x7ffc0000 [ 443.086849][ T28] audit: type=1326 audit(1790435376.357:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.1.2571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7b0d5e98e code=0x7ffc0000 [ 443.179567][ T28] audit: type=1326 audit(1790435376.357:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.1.2571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7b0d5e98e code=0x7ffc0000 [ 443.299957][ T28] audit: type=1326 audit(1790435376.357:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.1.2571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b0d9e159 code=0x7ffc0000 [ 443.398513][ T28] audit: type=1326 audit(1790435376.377:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.1.2571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd7b0d9e159 code=0x7ffc0000 [ 443.514622][ T28] audit: type=1326 audit(1790435376.377:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.1.2571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b0d9e159 code=0x7ffc0000 [ 445.585597][T12504] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.614190][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.644635][T12504] bridge_slave_1: entered allmulticast mode [ 445.676062][T12504] bridge_slave_1: entered promiscuous mode [ 445.985456][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2579'. [ 446.163454][T12685] bond3: entered promiscuous mode [ 446.176219][T12685] bond3: entered allmulticast mode [ 446.208299][T12685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.359974][T12504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.516228][T12504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.727604][T12504] team0: Port device team_slave_0 added [ 446.884379][T12504] team0: Port device team_slave_1 added [ 447.214177][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2591'. [ 447.319184][T12504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.381458][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.535066][T12504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.589802][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2592'. [ 447.679993][T12729] bond3: entered promiscuous mode [ 447.702146][T12729] bond3: entered allmulticast mode [ 447.720686][T12729] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.820109][T12504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.868210][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.012182][T12504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.128223][T12756] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 448.207412][ T59] hsr_slave_0: left promiscuous mode [ 448.229111][ T59] hsr_slave_1: left promiscuous mode [ 448.253010][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.285869][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.316979][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.336566][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.415380][ T59] veth1_macvtap: left promiscuous mode [ 448.437054][ T59] veth0_macvtap: left promiscuous mode [ 448.461821][ T59] veth1_vlan: left promiscuous mode [ 448.477199][ T59] veth0_vlan: left promiscuous mode [ 449.272231][ T59] bond11 (unregistering): Released all slaves [ 449.614717][T12779] loop4: detected capacity change from 0 to 16 [ 449.667514][T12779] erofs: (device loop4): mounted with root inode @ nid 36. [ 450.003938][ T59] bond10 (unregistering): Released all slaves [ 450.428365][ T59] bond9 (unregistering): Released all slaves [ 450.801913][ T59] bond8 (unregistering): Released all slaves [ 451.273552][ T59] bond7 (unregistering): Released all slaves [ 451.841026][ T59] bond6 (unregistering): Released all slaves [ 451.995187][T12821] loop1: detected capacity change from 0 to 2048 [ 452.044528][T12821] loop1: p1 < > p3 < > [ 452.052616][T12821] loop1: partition table partially beyond EOD, truncated [ 452.079758][T12821] loop1: p1 start 3405774849 is beyond EOD, truncated [ 452.115273][ T5143] loop1: p1 < > p3 < > [ 452.135150][ T5143] loop1: partition table partially beyond EOD, truncated [ 452.172622][ T5143] loop1: p1 start 3405774849 is beyond EOD, truncated [ 452.303988][T11417] udevd[11417]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 452.394866][T11417] udevd[11417]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 452.442709][ T59] bond5 (unregistering): Released all slaves [ 452.702558][ T59] bond4 (unregistering): Released all slaves [ 452.718684][ T59] bond3 (unregistering): Released all slaves [ 452.888841][ T59] bond2 (unregistering): Released all slaves [ 453.045296][ T59] bond1 (unregistering): Released all slaves [ 454.226012][ T59] team0 (unregistering): Port device team_slave_1 removed [ 454.338613][ T59] team0 (unregistering): Port device team_slave_0 removed [ 454.447316][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.560530][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.155305][ T59] bond0 (unregistering): Released all slaves [ 455.208363][T12504] hsr_slave_0: entered promiscuous mode [ 455.218927][T12504] hsr_slave_1: entered promiscuous mode [ 455.253745][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2606'. [ 455.289398][T12770] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 456.658854][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2646'. [ 456.867707][T12881] bond4: entered promiscuous mode [ 456.912544][T12881] bond4: entered allmulticast mode [ 456.945744][T12881] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.000109][T12885] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2646'. [ 457.478370][T12504] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 457.614654][T12504] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 457.707203][T12504] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 457.759474][T12504] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.118846][T12504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.233850][T12504] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.284931][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'. [ 458.378162][T12916] bond2: entered promiscuous mode [ 458.430911][T12916] bond2: entered allmulticast mode [ 458.451792][T12916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.530699][T12921] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2654'. [ 458.592947][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.600095][ T8867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.730811][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.737969][ T8867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.736527][T12504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.912575][T12504] veth0_vlan: entered promiscuous mode [ 459.987563][T12504] veth1_vlan: entered promiscuous mode [ 460.019195][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 460.108513][T12963] bond3: entered promiscuous mode [ 460.125432][T12963] bond3: entered allmulticast mode [ 460.149467][T12963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.229591][T12965] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2666'. [ 460.276987][T12504] veth0_macvtap: entered promiscuous mode [ 460.336027][T12504] veth1_macvtap: entered promiscuous mode [ 460.443602][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.496316][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.554183][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.609817][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.661262][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.715246][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.766480][T12504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.839677][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.894781][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.929669][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.971023][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.997955][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.028649][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.066411][T12504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.118160][T12504] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.180368][T12504] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.189104][T12504] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.267977][T12504] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.313878][T12990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2676'. [ 461.397576][T12990] bond4: entered promiscuous mode [ 461.422863][T12990] bond4: entered allmulticast mode [ 461.440927][T12990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.501752][T12994] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2676'. [ 461.742638][ T9066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.784538][ T9066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.934964][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.977770][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.016963][T13014] loop1: detected capacity change from 0 to 736 [ 462.700783][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2690'. [ 462.745827][T13027] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2690'. [ 462.953140][T13038] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 463.000824][T13038] overlayfs: failed to set xattr on upper [ 463.037551][T13038] overlayfs: ...falling back to redirect_dir=nofollow. [ 463.093305][T13038] overlayfs: ...falling back to index=off. [ 463.118801][T13038] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 463.368983][T13051] netlink: 1316 bytes leftover after parsing attributes in process `syz.0.2700'. [ 463.587828][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 463.705327][T13060] bond5: entered promiscuous mode [ 463.719766][T13060] bond5: entered allmulticast mode [ 463.743277][T13060] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.836203][T13067] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2704'. [ 464.468142][T13090] netlink: 1316 bytes leftover after parsing attributes in process `syz.4.2714'. [ 464.935111][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2719'. [ 464.951567][T13106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2719'. [ 465.953229][T13131] bond4: entered promiscuous mode [ 465.983710][T13131] bond4: entered allmulticast mode [ 466.010860][T13131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 466.846301][T13153] loop4: detected capacity change from 0 to 8192 [ 466.914466][T13153] loop4: p1 < > p3 < p5 > p4 [ 467.007600][T13153] loop4: p4 size 3081 extends beyond EOD, truncated [ 467.021348][T13163] __nla_validate_parse: 4 callbacks suppressed [ 467.021361][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2742'. [ 467.094740][T13153] loop4: p5 size 3081 extends beyond EOD, truncated [ 467.141163][T13168] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2742'. [ 467.176447][T13169] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.2744'. [ 467.485233][T13176] overlayfs: failed to resolve './bus': -2 [ 468.053530][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2754'. [ 468.093751][T13194] FAULT_INJECTION: forcing a failure. [ 468.093751][T13194] name failslab, interval 1, probability 0, space 0, times 0 [ 468.108892][T13193] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.2755'. [ 468.129617][T13195] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2754'. [ 468.180128][T13194] CPU: 0 PID: 13194 Comm: syz.1.2753 Not tainted syzkaller #0 [ 468.187762][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.197831][T13194] Call Trace: [ 468.201109][T13194] [ 468.204039][T13194] dump_stack_lvl+0x18c/0x250 [ 468.208726][T13194] ? show_regs_print_info+0x20/0x20 [ 468.213923][T13194] ? load_image+0x420/0x420 [ 468.218423][T13194] ? __might_sleep+0xe0/0xe0 [ 468.223738][T13194] ? __lock_acquire+0x7d80/0x7d80 [ 468.228808][T13194] should_fail_ex+0x394/0x4c0 [ 468.233503][T13194] should_failslab+0x9/0x20 [ 468.238024][T13194] slab_pre_alloc_hook+0x59/0x300 [ 468.243064][T13194] kmem_cache_alloc+0x5a/0x2c0 [ 468.247906][T13194] ? security_inode_alloc+0x34/0x110 [ 468.253226][T13194] security_inode_alloc+0x34/0x110 [ 468.258376][T13194] inode_init_always+0x914/0xc90 [ 468.263324][T13194] new_inode_pseudo+0x95/0x1d0 [ 468.268088][T13194] __sock_create+0x12d/0x940 [ 468.272709][T13194] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 468.278694][T13194] __sys_socket+0xd7/0x1b0 [ 468.283132][T13194] __x64_sys_socket+0x7a/0x90 [ 468.288114][T13194] do_syscall_64+0x55/0xb0 [ 468.292542][T13194] ? clear_bhb_loop+0x40/0x90 [ 468.297231][T13194] ? clear_bhb_loop+0x40/0x90 [ 468.301925][T13194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.307930][T13194] RIP: 0033:0x7fd7b0d9e159 [ 468.312346][T13194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.331956][T13194] RSP: 002b:00007fd7b1ca3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 468.340383][T13194] RAX: ffffffffffffffda RBX: 00007fd7b1025fa0 RCX: 00007fd7b0d9e159 [ 468.348354][T13194] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 468.356330][T13194] RBP: 00007fd7b0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 468.364296][T13194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.372358][T13194] R13: 00007fd7b1026038 R14: 00007fd7b1025fa0 R15: 00007ffc06ce4938 [ 468.380345][T13194] [ 468.501605][T13201] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 468.621043][T13204] overlayfs: failed to resolve './bus': -2 [ 469.046895][T13194] socket: no more sockets [ 469.122015][T13218] netlink: 1308 bytes leftover after parsing attributes in process `syz.0.2766'. [ 469.394327][T13227] overlayfs: failed to resolve './bus': -2 [ 470.109328][T13246] netlink: 1308 bytes leftover after parsing attributes in process `syz.3.2777'. [ 471.449719][T13278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2792'. [ 471.581065][T13281] netlink: 1308 bytes leftover after parsing attributes in process `syz.0.2787'. [ 471.983630][T13293] kvm: requested 88838 ns i8254 timer period limited to 200000 ns [ 472.033995][T13293] kvm: requested 20114 ns i8254 timer period limited to 200000 ns [ 472.088351][T13293] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 472.154267][T13293] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 472.230051][T13293] kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 472.304246][T13293] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 472.354065][T13293] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 472.964463][T13317] netlink: 1308 bytes leftover after parsing attributes in process `syz.3.2805'. [ 473.632149][T13327] overlayfs: workdir and upperdir must reside under the same mount [ 473.899961][T13334] netlink: 1308 bytes leftover after parsing attributes in process `syz.4.2814'. [ 474.238309][T13346] loop4: detected capacity change from 0 to 736 [ 474.333479][T13348] overlayfs: workdir and upperdir must reside under the same mount [ 474.841189][T13359] netlink: 1308 bytes leftover after parsing attributes in process `syz.1.2825'. [ 475.487900][T13377] loop1: detected capacity change from 0 to 736 [ 475.814950][T13379] overlayfs: workdir and upperdir must reside under the same mount [ 476.464495][T13391] ================================================================== [ 476.464564][T13391] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0 [ 476.464632][T13391] Write of size 4 at addr ffffc90003e11000 by task syz.0.2837/13391 [ 476.464645][T13391] [ 476.464668][T13391] CPU: 0 PID: 13391 Comm: syz.0.2837 Not tainted syzkaller #0 [ 476.464682][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.464690][T13391] Call Trace: [ 476.464696][T13391] [ 476.464702][T13391] dump_stack_lvl+0x18c/0x250 [ 476.464726][T13391] ? sys_imageblit+0x1bac/0x25d0 [ 476.464739][T13391] ? show_regs_print_info+0x20/0x20 [ 476.464755][T13391] ? load_image+0x420/0x420 [ 476.464770][T13391] ? mark_lock+0x94/0x320 [ 476.464787][T13391] print_report+0xa8/0x210 [ 476.464809][T13391] ? sys_imageblit+0x1bac/0x25d0 [ 476.464821][T13391] kasan_report+0x117/0x150 [ 476.464838][T13391] ? sys_imageblit+0x1bac/0x25d0 [ 476.464852][T13391] sys_imageblit+0x1bac/0x25d0 [ 476.464868][T13391] ? sys_copyarea+0x2530/0x2530 [ 476.464888][T13391] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 476.464915][T13391] soft_cursor+0xa01/0xc30 [ 476.464935][T13391] bit_cursor+0x16dd/0x1f60 [ 476.464958][T13391] ? bit_clear_margins+0x550/0x550 [ 476.464979][T13391] ? get_color+0x2e8/0x4d0 [ 476.464995][T13391] ? bit_clear_margins+0x550/0x550 [ 476.465013][T13391] ? fbcon_cursor+0x430/0x640 [ 476.465028][T13391] ? add_softcursor+0x8c/0x440 [ 476.465046][T13391] con_flush_chars+0x1fa/0x280 [ 476.465063][T13391] con_write+0x2e/0x40 [ 476.465079][T13391] do_output_char+0x64a/0x960 [ 476.465098][T13391] __process_echoes+0x2e0/0x9f0 [ 476.465118][T13391] n_tty_receive_buf_common+0xc81/0x1380 [ 476.465143][T13391] ? paste_selection+0x1cb/0x4d0 [ 476.465156][T13391] paste_selection+0x329/0x4d0 [ 476.465170][T13391] ? set_selection_kernel+0x17b0/0x17b0 [ 476.465183][T13391] ? do_task_dead+0xd0/0xd0 [ 476.465196][T13391] ? __might_fault+0xaa/0x120 [ 476.465208][T13391] ? __might_fault+0xc6/0x120 [ 476.465220][T13391] ? __might_fault+0xaa/0x120 [ 476.465232][T13391] ? tioclinux+0x34e/0x450 [ 476.465247][T13391] vt_ioctl+0x813/0x1f20 [ 476.465260][T13391] ? __vt_event_wait+0x260/0x260 [ 476.465274][T13391] ? __fget_files+0x28/0x460 [ 476.465292][T13391] ? tty_jobctrl_ioctl+0x378/0xba0 [ 476.465307][T13391] tty_ioctl+0x91e/0xdc0 [ 476.465323][T13391] ? tty_get_icount+0xb0/0xb0 [ 476.465338][T13391] __se_sys_ioctl+0xfd/0x170 [ 476.465354][T13391] do_syscall_64+0x55/0xb0 [ 476.465395][T13391] ? clear_bhb_loop+0x40/0x90 [ 476.465413][T13391] ? clear_bhb_loop+0x40/0x90 [ 476.465429][T13391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.465446][T13391] RIP: 0033:0x7f4401d9e159 [ 476.465458][T13391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.465469][T13391] RSP: 002b:00007f4402d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.465485][T13391] RAX: ffffffffffffffda RBX: 00007f4402025fa0 RCX: 00007f4401d9e159 [ 476.465496][T13391] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000004 [ 476.465505][T13391] RBP: 00007f4401e3506b R08: 0000000000000000 R09: 0000000000000000 [ 476.465513][T13391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.465521][T13391] R13: 00007f4402026038 R14: 00007f4402025fa0 R15: 00007ffc2528ecd8 [ 476.465535][T13391] [ 476.465546][T13391] [ 476.465549][T13391] The buggy address belongs to a 768-page vmalloc region starting at 0xffffc90003b11000 allocated at drm_fbdev_generic_helper_fb_probe+0x247/0x520 [ 476.465579][T13391] Memory state around the buggy address: [ 476.465585][T13391] ffffc90003e10f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.465593][T13391] ffffc90003e10f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.465601][T13391] >ffffc90003e11000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 476.465607][T13391] ^ [ 476.465614][T13391] ffffc90003e11080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 476.465621][T13391] ffffc90003e11100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 476.465627][T13391] ================================================================== [ 476.468188][T13391] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 476.468197][T13391] CPU: 0 PID: 13391 Comm: syz.0.2837 Not tainted syzkaller #0 [ 476.468211][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.468217][T13391] Call Trace: [ 476.468221][T13391] [ 476.468226][T13391] dump_stack_lvl+0x18c/0x250 [ 476.468245][T13391] ? show_regs_print_info+0x20/0x20 [ 476.468261][T13391] ? load_image+0x420/0x420 [ 476.468276][T13391] panic+0x2ca/0x720 [ 476.468289][T13391] ? bpf_jit_dump+0xd0/0xd0 [ 476.468301][T13391] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 476.468316][T13391] ? _raw_spin_unlock+0x40/0x40 [ 476.468328][T13391] ? print_memory_metadata+0x314/0x400 [ 476.468342][T13391] ? sys_imageblit+0x1bac/0x25d0 [ 476.468354][T13391] check_panic_on_warn+0x84/0xa0 [ 476.468368][T13391] ? sys_imageblit+0x1bac/0x25d0 [ 476.468378][T13391] end_report+0x6f/0x130 [ 476.468392][T13391] kasan_report+0x128/0x150 [ 476.468405][T13391] ? sys_imageblit+0x1bac/0x25d0 [ 476.468418][T13391] sys_imageblit+0x1bac/0x25d0 [ 476.468432][T13391] ? sys_copyarea+0x2530/0x2530 [ 476.468446][T13391] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 476.468462][T13391] soft_cursor+0xa01/0xc30 [ 476.468479][T13391] bit_cursor+0x16dd/0x1f60 [ 476.468498][T13391] ? bit_clear_margins+0x550/0x550 [ 476.468516][T13391] ? get_color+0x2e8/0x4d0 [ 476.468530][T13391] ? bit_clear_margins+0x550/0x550 [ 476.468554][T13391] ? fbcon_cursor+0x430/0x640 [ 476.468567][T13391] ? add_softcursor+0x8c/0x440 [ 476.468582][T13391] con_flush_chars+0x1fa/0x280 [ 476.468597][T13391] con_write+0x2e/0x40 [ 476.468613][T13391] do_output_char+0x64a/0x960 [ 476.468631][T13391] __process_echoes+0x2e0/0x9f0 [ 476.468650][T13391] n_tty_receive_buf_common+0xc81/0x1380 [ 476.468673][T13391] ? paste_selection+0x1cb/0x4d0 [ 476.468685][T13391] paste_selection+0x329/0x4d0 [ 476.468698][T13391] ? set_selection_kernel+0x17b0/0x17b0 [ 476.468709][T13391] ? do_task_dead+0xd0/0xd0 [ 476.468721][T13391] ? __might_fault+0xaa/0x120 [ 476.468732][T13391] ? __might_fault+0xc6/0x120 [ 476.468743][T13391] ? __might_fault+0xaa/0x120 [ 476.468754][T13391] ? tioclinux+0x34e/0x450 [ 476.468767][T13391] vt_ioctl+0x813/0x1f20 [ 476.468785][T13391] ? __vt_event_wait+0x260/0x260 [ 476.468798][T13391] ? __fget_files+0x28/0x460 [ 476.468814][T13391] ? tty_jobctrl_ioctl+0x378/0xba0 [ 476.468829][T13391] tty_ioctl+0x91e/0xdc0 [ 476.468843][T13391] ? tty_get_icount+0xb0/0xb0 [ 476.468857][T13391] __se_sys_ioctl+0xfd/0x170 [ 476.468873][T13391] do_syscall_64+0x55/0xb0 [ 476.468887][T13391] ? clear_bhb_loop+0x40/0x90 [ 476.468902][T13391] ? clear_bhb_loop+0x40/0x90 [ 476.468917][T13391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.468932][T13391] RIP: 0033:0x7f4401d9e159 [ 476.468943][T13391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.468952][T13391] RSP: 002b:00007f4402d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.468966][T13391] RAX: ffffffffffffffda RBX: 00007f4402025fa0 RCX: 00007f4401d9e159 [ 476.468974][T13391] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000004 [ 476.468981][T13391] RBP: 00007f4401e3506b R08: 0000000000000000 R09: 0000000000000000 [ 476.468988][T13391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.468995][T13391] R13: 00007f4402026038 R14: 00007f4402025fa0 R15: 00007ffc2528ecd8 [ 476.469006][T13391] [ 476.469066][T13391] Kernel Offset: disabled