last executing test programs: 44.577516269s ago: executing program 1 (id=1841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getegid() syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411892f5466eb01820a43d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$inet6(0x10, 0x3, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000089000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x40, 0x9, 0x7ffc1fff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x40000) finit_module(0xffffffffffffffff, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 42.867886459s ago: executing program 1 (id=1844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 41.896657184s ago: executing program 1 (id=1846): syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in6=@loopback, 0x0, 0x2b}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x138}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4095, 0xfff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xffffffff}, {0x5}, {0x6, 0x2c}]}) 39.838547951s ago: executing program 1 (id=1849): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4(r2, 0x0, &(0x7f0000000040), 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000000)=0x80000000) 38.730846003s ago: executing program 1 (id=1852): bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) memfd_secret(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x121043) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017", @ANYRES32], 0x3c}}, 0x0) 38.591389489s ago: executing program 1 (id=1856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getegid() syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411892f5466eb01820a43d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$inet6(0x10, 0x3, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000089000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x40, 0x9, 0x7ffc1fff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x40000) finit_module(0xffffffffffffffff, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 22.985769902s ago: executing program 32 (id=1856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getegid() syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411892f5466eb01820a43d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$inet6(0x10, 0x3, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000089000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x40, 0x9, 0x7ffc1fff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x40000) finit_module(0xffffffffffffffff, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 12.483241444s ago: executing program 4 (id=1918): bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) memfd_secret(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x121043) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 11.060161161s ago: executing program 0 (id=1919): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4(r2, 0x0, &(0x7f0000000040), 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000000)=0x80000000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={0x0, 0x9e}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea2c79482fb0e0cfb8bf19da1095e6b47db929", 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r5 = socket$inet(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) 11.053095891s ago: executing program 2 (id=1920): syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in6=@loopback, 0x0, 0x2b}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x138}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xffffffff}, {0x5}, {0x6, 0x2c}]}) 11.052523871s ago: executing program 3 (id=1921): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@user_xattr}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000f2840000000000000095000000000000008c695eb43e4b5301b74a58a65ae9c1b6c376a6a287bb0777e57cd40ad01b171123f7c39a6803102aef01cc9e3189b5447e7005e11ff9361e82cb208fc4f89f6b8b8e00fa19f742c99d3cb0861a4af44e1155a5aa570300000000000000e926a7ab91fc20a50d988ba7540de980f6daeacad2986b37f11421e37062cb9971e9ad995793eabb207120503e326e75029fd8b1c3171875dcb1ee4699"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x10, 0x1, 0x8, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000001c0), &(0x7f00000003c0)=r1}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) 11.046400512s ago: executing program 4 (id=1922): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) sendfile(r2, r3, 0x0, 0x8) 7.631597072s ago: executing program 0 (id=1923): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r1, 0x0, 0x0, 0x84, &(0x7f0000000300)=@file={0x7fc338224da5f62b, './file1\x00'}, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6d}}]}]}, 0x50}}, 0x8000) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x200}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x6c, 0x0, 0x0, 0x4b}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x6, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x49b) listen(0xffffffffffffffff, 0xfff) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x2e, 0x2, 0x2}, 0x0, 0xf8, 0x220, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2000, 0x2}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) getpid() 7.624697872s ago: executing program 2 (id=1924): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$unix(r2, 0x0, 0x20000840) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 7.619975412s ago: executing program 3 (id=1925): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030"], 0x15) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002600)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "97451a24bdc556"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, &(0x7f0000000600)={r10, r9, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r11 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r11) sendmmsg$inet6(r2, &(0x7f0000000040), 0x0, 0x4048011) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x7, 0x0, 0x0, {0x4}}, 0x18) 7.615838103s ago: executing program 4 (id=1926): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000300)={[{@stripe={'stripe', 0x3d, 0x9}}, {@test_dummy_encryption}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x8) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0xc1242, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000400)) r3 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x5, @private0, 0x6}, 0x1c) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r3) write$vga_arbiter(r1, &(0x7f0000000000)=@unlock_all, 0xb) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, &(0x7f0000000000), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) 5.888490864s ago: executing program 0 (id=1927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 5.887719304s ago: executing program 2 (id=1928): creat(0x0, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0xc1242, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f0000001580)="99337514dc5e", 0x0}, 0x20) 5.887093764s ago: executing program 3 (id=1929): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000016c0)=ANY=[], 0x0) socket(0x2, 0x805, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008810}, 0x24040840) r0 = socket(0x1d, 0x2, 0x6) socket$nl_audit(0x10, 0x3, 0x9) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r2, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) 4.05690089s ago: executing program 0 (id=1930): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x10000000000000}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2810}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) sched_getscheduler(0x0) 4.05610706s ago: executing program 2 (id=1931): bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) memfd_secret(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x121043) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 4.0455701s ago: executing program 3 (id=1932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.04490757s ago: executing program 4 (id=1933): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4(r2, 0x0, &(0x7f0000000040), 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000000)=0x80000000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={0x0, 0x9e}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea2c79482fb0e0cfb8bf19da1095e6b47db929", 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r5 = socket$inet(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) 4.010058082s ago: executing program 2 (id=1934): syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in6=@loopback, 0x0, 0x2b}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x138}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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") socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xffffffff}, {0x5}, {0x6, 0x2c}]}) 2.067032963s ago: executing program 0 (id=1935): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) sendfile(r2, r3, 0x0, 0x8) 2.066233533s ago: executing program 4 (id=1936): r0 = socket(0x10, 0x3, 0x0) r1 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0808050000000400140012800900010076657468000000000400028008001300", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 2.065411593s ago: executing program 3 (id=1937): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r1, 0x0, 0x0, 0x84, &(0x7f0000000300)=@file={0x7fc338224da5f62b, './file1\x00'}, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6d}}]}]}, 0x50}}, 0x8000) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x200}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x6c, 0x0, 0x0, 0x4b}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x6, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x49b) listen(0xffffffffffffffff, 0xfff) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x2e, 0x2, 0x2}, 0x0, 0xf8, 0x220, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2000, 0x2}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) getpid() 23.024949ms ago: executing program 0 (id=1938): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$unix(r2, 0x0, 0x20000840) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 15.5359ms ago: executing program 2 (id=1939): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030"], 0x15) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002600)={0x0, 0x0, "8ef11670764929adde2ed4400fae9b48c777917822452397cd2e7848dc668a9d7f65a91b486f24ad094d1d9edaa5951d606630ade5810f11b5a1477a26d3459dee8b16c0b607c4d0b2d91caaffeb5983a0d6676b3e5c35b030f33d168ca0b0edff7b667195ac0a0dc4fecd727508d8ab7bd32bfa6694118900b509fb858e1d876e27ca4f76e7292d32824c82763c77f55e56a4f4b3b6cc538195c2b6ab4e71627e373e4cf093047022cd92d6db17a7a21d7ed71d147292dd7f0f44b743857d0bbfc2a1639bd84363a6a05f710c2fb5a85e87e6fd52bc585a322fd8b111e306fcc07f4917d60dc8eba82d8d83b3cfbccd4adae4bd2be2e1d74d27a4930d9ed556", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "97451a24bdc556"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, &(0x7f0000000600)={r10, r9, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r11 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r11) sendmmsg$inet6(r2, &(0x7f0000000040), 0x0, 0x4048011) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x7, 0x0, 0x0, {0x4}}, 0x18) 7.69926ms ago: executing program 3 (id=1940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 0s ago: executing program 4 (id=1941): creat(0x0, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0xc1242, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f0000001580)="99337514dc5e", 0x0}, 0x20) kernel console output (not intermixed with test programs): 3][ T4505] R13: 00007fc4167ce038 R14: 00007fc4167cdfa0 R15: 00007fffd26d6af8 [ 69.500414][ T4505] [ 69.561850][ T4512] FAULT_INJECTION: forcing a failure. [ 69.561850][ T4512] name failslab, interval 1, probability 0, space 0, times 0 [ 69.606991][ T4512] CPU: 1 PID: 4512 Comm: syz.1.77 Not tainted syzkaller #0 [ 69.614225][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.624293][ T4512] Call Trace: [ 69.627582][ T4512] [ 69.630524][ T4512] dump_stack_lvl+0x188/0x250 [ 69.635219][ T4512] ? show_regs_print_info+0x20/0x20 [ 69.640429][ T4512] ? load_image+0x410/0x410 [ 69.644939][ T4512] ? __might_sleep+0xf0/0xf0 [ 69.649564][ T4512] ? __lock_acquire+0x7b50/0x7b50 [ 69.654602][ T4512] ? lockdep_init_map_type+0x98/0x900 [ 69.659991][ T4512] should_fail+0x383/0x4b0 [ 69.664428][ T4512] should_failslab+0x5/0x20 [ 69.668938][ T4512] slab_pre_alloc_hook+0x51/0xc0 [ 69.673881][ T4512] ? security_inode_alloc+0x30/0x110 [ 69.679197][ T4512] kmem_cache_alloc+0x3d/0x280 [ 69.683971][ T4512] security_inode_alloc+0x30/0x110 [ 69.689096][ T4512] inode_init_always+0x8e5/0xc90 [ 69.694041][ T4512] new_inode_pseudo+0x8e/0x210 [ 69.698823][ T4512] new_inode+0x25/0x1d0 [ 69.702990][ T4512] proc_get_inode+0x1e/0x6d0 [ 69.707587][ T4512] proc_lookup_de+0x244/0x2f0 [ 69.712274][ T4512] __lookup_slow+0x29d/0x410 [ 69.716877][ T4512] ? lookup_one_len+0x2d0/0x2d0 [ 69.721741][ T4512] ? step_into+0x363/0xcd0 [ 69.726172][ T4512] ? down_read+0x1aa/0x2e0 [ 69.730595][ T4512] lookup_slow+0x53/0x70 [ 69.734843][ T4512] walk_component+0x314/0x460 [ 69.739532][ T4512] link_path_walk+0x688/0xde0 [ 69.744240][ T4512] ? handle_lookup_down+0x130/0x130 [ 69.749458][ T4512] path_lookupat+0x83/0x420 [ 69.754072][ T4512] filename_lookup+0x21e/0x550 [ 69.758852][ T4512] ? __lock_acquire+0x7b50/0x7b50 [ 69.763977][ T4512] ? hashlen_string+0x110/0x110 [ 69.768857][ T4512] ? strncpy_from_user+0x1f4/0x350 [ 69.773980][ T4512] ? getname_flags+0x1f9/0x4f0 [ 69.778758][ T4512] user_path_at_empty+0x40/0x190 [ 69.783707][ T4512] vfs_statx+0x107/0x4c0 [ 69.787979][ T4512] ? vfs_write+0xaa6/0xd70 [ 69.792419][ T4512] ? vfs_fstatat+0x40/0x40 [ 69.796853][ T4512] __x64_sys_newfstatat+0x15f/0x200 [ 69.802070][ T4512] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 69.807374][ T4512] ? lock_chain_count+0x20/0x20 [ 69.812246][ T4512] ? lockdep_hardirqs_on+0x94/0x140 [ 69.817546][ T4512] do_syscall_64+0x4c/0xa0 [ 69.821968][ T4512] ? clear_bhb_loop+0x30/0x80 [ 69.826707][ T4512] ? clear_bhb_loop+0x30/0x80 [ 69.831396][ T4512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.837299][ T4512] RIP: 0033:0x7f0700074159 [ 69.841721][ T4512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.861351][ T4512] RSP: 002b:00007f06fe2cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 69.869776][ T4512] RAX: ffffffffffffffda RBX: 00007f07002fbfa0 RCX: 00007f0700074159 [ 69.877762][ T4512] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 69.885744][ T4512] RBP: 00007f070010b06b R08: 0000000000000000 R09: 0000000000000000 [ 69.893728][ T4512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.901716][ T4512] R13: 00007f07002fc038 R14: 00007f07002fbfa0 R15: 00007ffebfb89938 [ 69.909779][ T4512] [ 69.966412][ T4508] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 70.038353][ T4508] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.055312][ T4508] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.76: bad orphan inode 15 [ 70.080634][ T4508] ext4_test_bit(bit=14, block=5) = 0 [ 70.086043][ T4508] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,grpjquota=,min_batch_time=0x000000000000004a,grpjquota=,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 70.217472][ T4508] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 70.436464][ T4526] loop4: detected capacity change from 0 to 2048 [ 70.943208][ T4526] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 71.187976][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.195150][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.271768][ T25] audit: type=1800 audit(1789622196.943:3): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.67" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 71.560872][ T4526] EXT4-fs (loop4): shut down requested (1) [ 71.778289][ T4546] syz.1.89 uses obsolete (PF_INET,SOCK_PACKET) [ 72.470982][ T25] audit: type=1326 audit(1789622198.093:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 73.075571][ T25] audit: type=1326 audit(1789622198.093:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 73.170507][ T25] audit: type=1326 audit(1789622198.103:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 73.267559][ T25] audit: type=1326 audit(1789622198.103:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 73.380352][ T25] audit: type=1326 audit(1789622198.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 73.466110][ T25] audit: type=1326 audit(1789622198.113:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 73.649311][ T4566] loop4: detected capacity change from 0 to 512 [ 73.681324][ T25] audit: type=1326 audit(1789622198.113:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 73.745104][ T4566] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.836052][ T25] audit: type=1326 audit(1789622198.113:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 73.897477][ T4566] EXT4-fs (loop4): 1 truncate cleaned up [ 73.907180][ T4566] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.181038][ T4558] netlink: 96 bytes leftover after parsing attributes in process `syz.2.90'. [ 74.369133][ T4577] loop3: detected capacity change from 0 to 1024 [ 74.478740][ T4577] EXT4-fs (loop3): Ignoring removed bh option [ 74.518147][ T4587] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20003 [ 74.544657][ T4577] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 75.265673][ T25] kauditd_printk_skb: 9 callbacks suppressed [ 75.265686][ T25] audit: type=1800 audit(1789622200.933:21): pid=4577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.99" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 75.355591][ T4596] loop2: detected capacity change from 0 to 512 [ 75.500711][ T4596] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 75.587879][ T4596] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.680874][ T4596] Quota error (device loop2): v2_read_file_info: Free block number too big (0 >= 0). [ 75.737561][ T4596] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.801197][ T4596] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 75.815408][ T4596] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.104: bg 0: block 40: padding at end of block bitmap is not set [ 75.864082][ T4596] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 75.905485][ T4596] EXT4-fs (loop2): 1 truncate cleaned up [ 75.929570][ T4596] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.070300][ T4632] netlink: 'syz.2.118': attribute type 12 has an invalid length. [ 77.129934][ T4627] netlink: 52 bytes leftover after parsing attributes in process `syz.0.114'. [ 77.390125][ T25] audit: type=1800 audit(1789622203.053:22): pid=4577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.99" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 77.420799][ T4627] device ip6gre1 entered promiscuous mode [ 77.458904][ T13] cfg80211: failed to load regulatory.db [ 77.967107][ T4647] device syzkaller0 entered promiscuous mode [ 78.069891][ T4644] tipc: Started in network mode [ 78.092004][ T4644] tipc: Node identity 423be650a986, cluster identity 4711 [ 78.133025][ T4644] tipc: Enabled bearer , priority 0 [ 78.145509][ T4657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.125'. [ 78.252383][ T4643] tipc: Resetting bearer [ 78.352136][ T4662] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.424464][ T4643] tipc: Disabling bearer [ 80.695652][ T4706] loop2: detected capacity change from 0 to 1764 [ 82.401215][ T4735] loop2: detected capacity change from 0 to 1024 [ 82.958148][ T4735] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.173219][ T4757] loop4: detected capacity change from 0 to 256 [ 84.279474][ T4757] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.380772][ T4757] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.493288][ T4764] loop1: detected capacity change from 0 to 512 [ 84.546191][ T4770] loop2: detected capacity change from 0 to 512 [ 84.644282][ T4768] loop4: detected capacity change from 0 to 164 [ 84.719438][ T4770] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.751989][ T4775] xt_l2tp: invalid flags combination: 0 [ 84.839607][ T4770] EXT4-fs (loop2): 1 truncate cleaned up [ 84.920586][ T4770] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.951798][ T4764] EXT4-fs (loop1): Test dummy encryption mode enabled [ 84.958633][ T4764] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.176153][ T4764] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 85.903829][ T4793] netlink: 32 bytes leftover after parsing attributes in process `syz.0.174'. [ 87.185741][ T4819] device syzkaller0 entered promiscuous mode [ 87.248218][ T4823] futex_wake_op: syz.0.181 tries to shift op by 144; fix this program [ 87.308421][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 87.864418][ T25] audit: type=1800 audit(1789622213.513:23): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.182" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 88.345914][ T4834] FAULT_INJECTION: forcing a failure. [ 88.345914][ T4834] name failslab, interval 1, probability 0, space 0, times 0 [ 88.391223][ T4834] CPU: 0 PID: 4834 Comm: syz.2.185 Not tainted syzkaller #0 [ 88.398548][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.408621][ T4834] Call Trace: [ 88.411910][ T4834] [ 88.414850][ T4834] dump_stack_lvl+0x188/0x250 [ 88.419536][ T4834] ? show_regs_print_info+0x20/0x20 [ 88.424748][ T4834] ? load_image+0x410/0x410 [ 88.429267][ T4834] ? __might_sleep+0xf0/0xf0 [ 88.433866][ T4834] ? __lock_acquire+0x7b50/0x7b50 [ 88.438903][ T4834] ? memset+0x1e/0x40 [ 88.442895][ T4834] should_fail+0x383/0x4b0 [ 88.447324][ T4834] should_failslab+0x5/0x20 [ 88.451921][ T4834] slab_pre_alloc_hook+0x51/0xc0 [ 88.457339][ T4834] kmem_cache_alloc_trace+0x47/0x290 [ 88.463031][ T4834] ? cgroup_init_fs_context+0x50/0x3c0 [ 88.468523][ T4834] cgroup_init_fs_context+0x50/0x3c0 [ 88.473825][ T4834] ? cgroup_do_get_tree+0x4c0/0x4c0 [ 88.479038][ T4834] alloc_fs_context+0x628/0x7d0 [ 88.483930][ T4834] __se_sys_fsopen+0x111/0x320 [ 88.488718][ T4834] do_syscall_64+0x4c/0xa0 [ 88.493152][ T4834] ? clear_bhb_loop+0x30/0x80 [ 88.497849][ T4834] ? clear_bhb_loop+0x30/0x80 [ 88.502579][ T4834] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.508494][ T4834] RIP: 0033:0x7f3b5a780159 [ 88.512918][ T4834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.520532][ T4839] loop4: detected capacity change from 0 to 512 [ 88.532734][ T4834] RSP: 002b:00007f3b589d8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 88.532761][ T4834] RAX: ffffffffffffffda RBX: 00007f3b5aa07fa0 RCX: 00007f3b5a780159 [ 88.532773][ T4834] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 88.532782][ T4834] RBP: 00007f3b5a81706b R08: 0000000000000000 R09: 0000000000000000 [ 88.532791][ T4834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.532800][ T4834] R13: 00007f3b5aa08038 R14: 00007f3b5aa07fa0 R15: 00007ffe6fbc83b8 [ 88.532823][ T4834] [ 89.070735][ T4839] EXT4-fs (loop4): Test dummy encryption mode enabled [ 89.077520][ T4850] Set syz1 is full, maxelem 2076 reached [ 89.077572][ T4839] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.312778][ T4839] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 89.725969][ T4871] futex_wake_op: syz.3.197 tries to shift op by 144; fix this program [ 91.519533][ T4891] FAULT_INJECTION: forcing a failure. [ 91.519533][ T4891] name failslab, interval 1, probability 0, space 0, times 0 [ 91.569668][ T4891] CPU: 0 PID: 4891 Comm: syz.3.205 Not tainted syzkaller #0 [ 91.577006][ T4891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.587075][ T4891] Call Trace: [ 91.590364][ T4891] [ 91.593305][ T4891] dump_stack_lvl+0x188/0x250 [ 91.598011][ T4891] ? show_regs_print_info+0x20/0x20 [ 91.603256][ T4891] ? load_image+0x410/0x410 [ 91.607772][ T4891] ? __might_sleep+0xf0/0xf0 [ 91.612379][ T4891] ? __lock_acquire+0x7b50/0x7b50 [ 91.617420][ T4891] ? do_futex+0xdc2/0x12b0 [ 91.621850][ T4891] ? __lock_acquire+0x7b50/0x7b50 [ 91.626890][ T4891] should_fail+0x383/0x4b0 [ 91.631321][ T4891] should_failslab+0x5/0x20 [ 91.635833][ T4891] slab_pre_alloc_hook+0x51/0xc0 [ 91.640777][ T4891] ? copy_fs_struct+0x4b/0x270 [ 91.645553][ T4891] kmem_cache_alloc+0x3d/0x280 [ 91.650338][ T4891] copy_fs_struct+0x4b/0x270 [ 91.654976][ T4891] ksys_unshare+0x397/0x8e0 [ 91.659529][ T4891] ? __lock_acquire+0x7b50/0x7b50 [ 91.664585][ T4891] ? sighand_ctor+0x40/0x40 [ 91.669103][ T4891] ? lock_chain_count+0x20/0x20 [ 91.673971][ T4891] ? syscall_enter_from_user_mode+0x21/0x70 [ 91.679895][ T4891] __x64_sys_unshare+0x34/0x40 [ 91.684761][ T4891] do_syscall_64+0x4c/0xa0 [ 91.689191][ T4891] ? clear_bhb_loop+0x30/0x80 [ 91.693876][ T4891] ? clear_bhb_loop+0x30/0x80 [ 91.698565][ T4891] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.704472][ T4891] RIP: 0033:0x7fc416546159 [ 91.708904][ T4891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.728521][ T4891] RSP: 002b:00007fc41479e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 91.736958][ T4891] RAX: ffffffffffffffda RBX: 00007fc4167cdfa0 RCX: 00007fc416546159 [ 91.744942][ T4891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 91.752924][ T4891] RBP: 00007fc4165dd06b R08: 0000000000000000 R09: 0000000000000000 [ 91.760908][ T4891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.768892][ T4891] R13: 00007fc4167ce038 R14: 00007fc4167cdfa0 R15: 00007fffd26d6af8 [ 91.776893][ T4891] [ 92.561042][ T4901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 92.848094][ T4916] capability: warning: `syz.0.212' uses 32-bit capabilities (legacy support in use) [ 92.906340][ T4916] program syz.0.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.281426][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 93.433100][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 95.300780][ T26] Bluetooth: hci5: command 0x1003 tx timeout [ 95.307977][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 96.487633][ T4969] netlink: 256 bytes leftover after parsing attributes in process `syz.3.227'. [ 96.533061][ T4969] netlink: 72 bytes leftover after parsing attributes in process `syz.3.227'. [ 97.340750][ T26] Bluetooth: hci5: command 0x1001 tx timeout [ 97.348776][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 99.420643][ T26] Bluetooth: hci5: command 0x1009 tx timeout [ 99.956786][ T5008] futex_wake_op: syz.1.237 tries to shift op by 144; fix this program [ 99.978376][ T5008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 103.841341][ T5055] futex_wake_op: syz.2.251 tries to shift op by 144; fix this program [ 103.952809][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 104.430716][ T5071] sctp: [Deprecated]: syz.2.258 (pid 5071) Use of int in max_burst socket option. [ 104.430716][ T5071] Use struct sctp_assoc_value instead [ 106.855746][ T5098] futex_wake_op: syz.3.266 tries to shift op by 144; fix this program [ 108.414610][ T5131] overlayfs: unrecognized mount option "/" or missing value [ 108.788762][ T5139] futex_wake_op: syz.3.279 tries to shift op by 144; fix this program [ 110.614454][ T5176] netlink: 96 bytes leftover after parsing attributes in process `syz.3.288'. [ 110.852618][ T5177] overlayfs: unrecognized mount option "/" or missing value [ 111.485299][ T25] audit: type=1326 audit(1789622237.457:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 111.669175][ T25] audit: type=1326 audit(1789622237.457:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 111.810482][ T25] audit: type=1326 audit(1789622237.457:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 111.990293][ T25] audit: type=1326 audit(1789622237.457:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 112.105454][ T25] audit: type=1326 audit(1789622237.457:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 112.304959][ T5186] futex_wake_op: syz.0.291 tries to shift op by 144; fix this program [ 112.365477][ T5186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 112.918895][ T25] audit: type=1326 audit(1789622237.467:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 112.950719][ T25] audit: type=1326 audit(1789622237.467:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 113.064435][ T25] audit: type=1326 audit(1789622237.467:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 113.854103][ T25] audit: type=1326 audit(1789622237.467:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 114.028199][ T25] audit: type=1326 audit(1789622237.467:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 114.370871][ T5214] xt_l2tp: invalid flags combination: 0 [ 115.442181][ T5231] loop8: detected capacity change from 0 to 16384 [ 116.148370][ T5034] syz.1.247 (5034) used greatest stack depth: 20816 bytes left [ 116.700695][ T5233] loop_set_status: loop8 () has still dirty pages (nrpages=256) [ 118.468866][ T5272] xt_l2tp: invalid flags combination: 0 [ 119.221790][ T5282] FAULT_INJECTION: forcing a failure. [ 119.221790][ T5282] name failslab, interval 1, probability 0, space 0, times 0 [ 119.403769][ T5282] CPU: 0 PID: 5282 Comm: syz.1.319 Not tainted syzkaller #0 [ 119.411091][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.421149][ T5282] Call Trace: [ 119.424436][ T5282] [ 119.427365][ T5282] dump_stack_lvl+0x188/0x250 [ 119.432052][ T5282] ? show_regs_print_info+0x20/0x20 [ 119.437257][ T5282] ? load_image+0x410/0x410 [ 119.441766][ T5282] ? __might_sleep+0xf0/0xf0 [ 119.446360][ T5282] ? __lock_acquire+0x7b50/0x7b50 [ 119.451390][ T5282] ? lockdep_init_map_type+0x98/0x900 [ 119.456776][ T5282] should_fail+0x383/0x4b0 [ 119.461204][ T5282] should_failslab+0x5/0x20 [ 119.465715][ T5282] slab_pre_alloc_hook+0x51/0xc0 [ 119.470654][ T5282] ? security_inode_alloc+0x30/0x110 [ 119.475944][ T5282] kmem_cache_alloc+0x3d/0x280 [ 119.480717][ T5282] security_inode_alloc+0x30/0x110 [ 119.485832][ T5282] inode_init_always+0x8e5/0xc90 [ 119.490772][ T5282] new_inode_pseudo+0x8e/0x210 [ 119.495546][ T5282] create_pipe_files+0x4c/0x6b0 [ 119.500399][ T5282] ? __context_tracking_exit+0x4c/0x80 [ 119.505861][ T5282] __do_pipe_flags+0x46/0x1f0 [ 119.510544][ T5282] do_pipe2+0xa7/0x190 [ 119.514615][ T5282] ? pipe_fcntl+0x530/0x530 [ 119.519122][ T5282] ? lock_chain_count+0x20/0x20 [ 119.523980][ T5282] ? syscall_enter_from_user_mode+0x21/0x70 [ 119.529881][ T5282] __x64_sys_pipe+0x36/0x40 [ 119.534382][ T5282] do_syscall_64+0x4c/0xa0 [ 119.538795][ T5282] ? clear_bhb_loop+0x30/0x80 [ 119.543471][ T5282] ? clear_bhb_loop+0x30/0x80 [ 119.548152][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.554047][ T5282] RIP: 0033:0x7f0700074159 [ 119.558463][ T5282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.578069][ T5282] RSP: 002b:00007f06fe2cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 119.586490][ T5282] RAX: ffffffffffffffda RBX: 00007f07002fbfa0 RCX: 00007f0700074159 [ 119.594469][ T5282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.602449][ T5282] RBP: 00007f070010b06b R08: 0000000000000000 R09: 0000000000000000 [ 119.610424][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.618392][ T5282] R13: 00007f07002fc038 R14: 00007f07002fbfa0 R15: 00007ffebfb89938 [ 119.626380][ T5282] [ 121.676393][ T5311] program syz.3.332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.050248][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 122.050260][ T25] audit: type=1326 audit(1789622248.707:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.3.335" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 122.108449][ T25] audit: type=1326 audit(1789622248.757:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.3.335" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 122.148081][ T25] audit: type=1326 audit(1789622248.757:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.3.335" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 122.211532][ T25] audit: type=1326 audit(1789622248.757:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.3.335" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 122.295045][ T5324] futex_wake_op: syz.3.337 tries to shift op by 144; fix this program [ 122.316840][ T5324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 124.218688][ T4462] syz.1.61 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 124.392211][ T4462] CPU: 1 PID: 4462 Comm: syz.1.61 Not tainted syzkaller #0 [ 124.399445][ T4462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.409503][ T4462] Call Trace: [ 124.412799][ T4462] [ 124.415739][ T4462] dump_stack_lvl+0x188/0x250 [ 124.420424][ T4462] ? show_regs_print_info+0x20/0x20 [ 124.425630][ T4462] ? load_image+0x410/0x410 [ 124.430149][ T4462] ? local_lock_release+0x170/0x170 [ 124.435356][ T4462] ? __rwlock_init+0x140/0x140 [ 124.440132][ T4462] dump_header+0xd9/0x780 [ 124.444471][ T4462] oom_kill_process+0x20e/0x3d0 [ 124.449333][ T4462] out_of_memory+0xdb2/0x1190 [ 124.454016][ T4462] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 124.459666][ T4462] ? mutex_lock_io_nested+0x60/0x60 [ 124.464884][ T4462] ? unregister_oom_notifier+0x20/0x20 [ 124.470356][ T4462] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 124.475905][ T4462] ? mem_cgroup_oom_trylock+0x210/0x210 [ 124.481456][ T4462] ? do_raw_spin_unlock+0x11d/0x230 [ 124.486649][ T4462] try_charge_memcg+0x1075/0x15b0 [ 124.491684][ T4462] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 124.497492][ T4462] ? rcu_lock_acquire+0x30/0x30 [ 124.502607][ T4462] charge_memcg+0x100/0x300 [ 124.507114][ T4462] ? __mem_cgroup_charge+0x80/0x80 [ 124.512224][ T4462] __mem_cgroup_charge+0x21/0x80 [ 124.517159][ T4462] shmem_add_to_page_cache+0xa8a/0x14d0 [ 124.522710][ T4462] ? put_page+0x200/0x200 [ 124.527127][ T4462] ? mark_lock+0x94/0x320 [ 124.531456][ T4462] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.537440][ T4462] shmem_getpage_gfp+0x1735/0x2c10 [ 124.542566][ T4462] shmem_write_begin+0xcd/0x1a0 [ 124.547414][ T4462] generic_perform_write+0x2b6/0x550 [ 124.552698][ T4462] ? grab_cache_page_write_begin+0xa0/0xa0 [ 124.558491][ T4462] ? file_remove_privs+0x5d0/0x5d0 [ 124.563595][ T4462] ? rwsem_write_trylock+0x135/0x1c0 [ 124.568868][ T4462] ? clear_nonspinnable+0x60/0x60 [ 124.573885][ T4462] __generic_file_write_iter+0x261/0x4e0 [ 124.579503][ T4462] ? generic_write_checks+0x3be/0x460 [ 124.584977][ T4462] generic_file_write_iter+0xa6/0x1b0 [ 124.590363][ T4462] __kernel_write+0x522/0x980 [ 124.595057][ T4462] ? vfs_read+0xd50/0xd50 [ 124.599391][ T4462] ? get_dump_page+0xee/0x670 [ 124.604059][ T4462] ? down_read_killable+0x1ce/0x340 [ 124.609250][ T4462] __dump_emit+0x258/0x380 [ 124.613657][ T4462] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 124.619108][ T4462] ? dump_emit+0x145/0x3d0 [ 124.623519][ T4462] ? dump_user_range+0x1af/0x340 [ 124.628444][ T4462] dump_user_range+0x84/0x340 [ 124.633124][ T4462] elf_core_dump+0x2fe0/0x3530 [ 124.637889][ T4462] ? load_elf_library+0x980/0x980 [ 124.642905][ T4462] ? verify_lock_unused+0x140/0x140 [ 124.648100][ T4462] ? dump_vma_snapshot+0xaf1/0xe40 [ 124.653223][ T4462] ? rcu_read_lock_any_held+0xb0/0x130 [ 124.658670][ T4462] ? getname_kernel+0x142/0x2e0 [ 124.663515][ T4462] do_coredump+0x14e8/0x2a40 [ 124.668106][ T4462] ? nfs_stat_to_errno+0x170/0x170 [ 124.673222][ T4462] ? lock_chain_count+0x20/0x20 [ 124.678066][ T4462] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.683261][ T4462] ? lockdep_hardirqs_on+0x94/0x140 [ 124.688536][ T4462] get_signal+0x531/0x12e0 [ 124.692955][ T4462] arch_do_signal_or_restart+0xe6/0x12a0 [ 124.698580][ T4462] ? _raw_spin_unlock+0x40/0x40 [ 124.703423][ T4462] ? force_sig_info_to_task+0x318/0x3c0 [ 124.708955][ T4462] ? get_sigframe_size+0x10/0x10 [ 124.713882][ T4462] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.719857][ T4462] ? exit_to_user_mode_loop+0x3b/0x130 [ 124.725300][ T4462] exit_to_user_mode_loop+0x9e/0x130 [ 124.730578][ T4462] exit_to_user_mode_prepare+0xee/0x180 [ 124.736110][ T4462] irqentry_exit_to_user_mode+0x5/0x30 [ 124.741551][ T4462] exc_page_fault+0x88/0x100 [ 124.746131][ T4462] asm_exc_page_fault+0x22/0x30 [ 124.750968][ T4462] RIP: 0033:0x7f06fff29bd7 [ 124.755368][ T4462] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 124.774974][ T4462] RSP: 002b:00007f06fe28c120 EFLAGS: 00010202 [ 124.781036][ T4462] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0700074159 [ 124.788989][ T4462] RDX: 00007f06fe28c140 RSI: 00007f06fe28c270 RDI: 000000000000000b [ 124.796942][ T4462] RBP: 00007f070010b06b R08: 0000000000000000 R09: 0000000000000000 [ 124.804899][ T4462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 124.812852][ T4462] R13: 00007f07002fc128 R14: 00007f07002fc090 R15: 00007ffebfb89938 [ 124.820840][ T4462] [ 124.870862][ T4462] memory: usage 307200kB, limit 307200kB, failcnt 11272 [ 125.117374][ T4462] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 125.634954][ T4462] kmem: usage 4200kB, limit 9007199254740988kB, failcnt 0 [ 125.660576][ T4462] Memory cgroup stats for /syz1: [ 125.661468][ T4462] anon 700416 [ 125.661468][ T4462] file 309587968 [ 125.661468][ T4462] kernel_stack 229376 [ 125.661468][ T4462] pagetables 1028096 [ 125.661468][ T4462] percpu 0 [ 125.661468][ T4462] sock 0 [ 125.661468][ T4462] shmem 309563392 [ 125.661468][ T4462] file_mapped 168431616 [ 125.661468][ T4462] file_dirty 0 [ 125.661468][ T4462] file_writeback 0 [ 125.661468][ T4462] swapcached 127995904 [ 125.661468][ T4462] anon_thp 0 [ 125.661468][ T4462] file_thp 0 [ 125.661468][ T4462] shmem_thp 0 [ 125.661468][ T4462] inactive_anon 260136960 [ 125.661468][ T4462] active_anon 50126848 [ 125.661468][ T4462] inactive_file 24576 [ 125.661468][ T4462] active_file 0 [ 125.661468][ T4462] unevictable 0 [ 125.661468][ T4462] slab_reclaimable 1582264 [ 125.661468][ T4462] slab_unreclaimable 1323200 [ 125.661468][ T4462] slab 2905464 [ 125.661468][ T4462] workingset_refault_anon 0 [ 125.661468][ T4462] workingset_refault_file 24 [ 125.661468][ T4462] workingset_activate_anon 0 [ 126.135253][ T4462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.61,pid=4462,uid=0 [ 126.166324][ T4462] Memory cgroup out of memory: Killed process 4462 (syz.1.61) total-vm:200684kB, anon-rss:1388kB, file-rss:20608kB, shmem-rss:97768kB, UID:0 pgtables:308kB oom_score_adj:1000 [ 126.351218][ T5376] futex_wake_op: syz.0.354 tries to shift op by 144; fix this program [ 128.228327][ T28] oom_reaper: reaped process 4462 (syz.1.61), now anon-rss:0kB, file-rss:20480kB, shmem-rss:97768kB [ 128.276822][ T4469] syz.1.61 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 128.287778][ T4469] CPU: 0 PID: 4469 Comm: syz.1.61 Not tainted syzkaller #0 [ 128.294999][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.305063][ T4469] Call Trace: [ 128.308349][ T4469] [ 128.311281][ T4469] dump_stack_lvl+0x188/0x250 [ 128.315968][ T4469] ? show_regs_print_info+0x20/0x20 [ 128.321179][ T4469] ? load_image+0x410/0x410 [ 128.325702][ T4469] ? local_lock_release+0x170/0x170 [ 128.330902][ T4469] ? __rwlock_init+0x140/0x140 [ 128.335675][ T4469] dump_header+0xd9/0x780 [ 128.340023][ T4469] oom_kill_process+0x20e/0x3d0 [ 128.344897][ T4469] out_of_memory+0xdb2/0x1190 [ 128.349575][ T4469] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 128.355221][ T4469] ? mutex_lock_io_nested+0x60/0x60 [ 128.360427][ T4469] ? unregister_oom_notifier+0x20/0x20 [ 128.365897][ T4469] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 128.371449][ T4469] ? mem_cgroup_oom_trylock+0x210/0x210 [ 128.377016][ T4469] ? do_raw_spin_unlock+0x11d/0x230 [ 128.382232][ T4469] try_charge_memcg+0x1075/0x15b0 [ 128.387274][ T4469] ? mark_lock+0x94/0x320 [ 128.391902][ T4469] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 128.397760][ T4469] ? rcu_lock_acquire+0x30/0x30 [ 128.402640][ T4469] charge_memcg+0x100/0x300 [ 128.407159][ T4469] ? __mem_cgroup_charge+0x80/0x80 [ 128.412293][ T4469] __mem_cgroup_charge+0x21/0x80 [ 128.417242][ T4469] shmem_add_to_page_cache+0xa8a/0x14d0 [ 128.422820][ T4469] ? put_page+0x200/0x200 [ 128.427160][ T4469] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 128.433061][ T4469] ? lock_chain_count+0x20/0x20 [ 128.437921][ T4469] shmem_getpage_gfp+0x1735/0x2c10 [ 128.443065][ T4469] shmem_fault+0x1ac/0x550 [ 128.447494][ T4469] ? shmem_fallocate+0xec0/0xec0 [ 128.452439][ T4469] ? filemap_read_page+0x4b0/0x4b0 [ 128.457548][ T4469] ? count_memcg_event_mm+0x324/0x370 [ 128.462931][ T4469] __do_fault+0x141/0x330 [ 128.467272][ T4469] handle_mm_fault+0x2982/0x4440 [ 128.472226][ T4469] ? get_page+0xe0/0xe0 [ 128.476401][ T4469] ? follow_page_mask+0xa51/0x12b0 [ 128.481528][ T4469] __get_user_pages+0x952/0x11e0 [ 128.486482][ T4469] ? read_lock_is_recursive+0x10/0x10 [ 128.491862][ T4469] ? populate_vma_page_range+0x290/0x290 [ 128.497511][ T4469] ? get_dump_page+0xee/0x670 [ 128.502220][ T4469] ? down_read_killable+0x1ce/0x340 [ 128.507426][ T4469] get_dump_page+0x18c/0x670 [ 128.512024][ T4469] ? fault_in_readable+0x150/0x150 [ 128.517139][ T4469] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 128.522598][ T4469] ? dump_emit+0x37/0x3d0 [ 128.526926][ T4469] ? dump_emit+0x145/0x3d0 [ 128.531347][ T4469] dump_user_range+0x54/0x340 [ 128.536038][ T4469] elf_core_dump+0x2fe0/0x3530 [ 128.540837][ T4469] ? load_elf_library+0x980/0x980 [ 128.546045][ T4469] ? verify_lock_unused+0x140/0x140 [ 128.551251][ T4469] ? dump_vma_snapshot+0xaf1/0xe40 [ 128.556405][ T4469] ? rcu_read_lock_any_held+0xb0/0x130 [ 128.561871][ T4469] ? getname_kernel+0x142/0x2e0 [ 128.566734][ T4469] do_coredump+0x14e8/0x2a40 [ 128.571355][ T4469] ? nfs_stat_to_errno+0x170/0x170 [ 128.576495][ T4469] ? lock_chain_count+0x20/0x20 [ 128.581355][ T4469] ? _raw_spin_unlock_irq+0x1f/0x40 [ 128.586605][ T4469] ? lockdep_hardirqs_on+0x94/0x140 [ 128.591806][ T4469] get_signal+0x531/0x12e0 [ 128.596248][ T4469] arch_do_signal_or_restart+0xe6/0x12a0 [ 128.601888][ T4469] ? _raw_spin_unlock+0x40/0x40 [ 128.606747][ T4469] ? force_sig_info_to_task+0x318/0x3c0 [ 128.612301][ T4469] ? get_sigframe_size+0x10/0x10 [ 128.617295][ T4469] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 128.623301][ T4469] ? exit_to_user_mode_loop+0x3b/0x130 [ 128.628767][ T4469] exit_to_user_mode_loop+0x9e/0x130 [ 128.634051][ T4469] exit_to_user_mode_prepare+0xee/0x180 [ 128.639599][ T4469] irqentry_exit_to_user_mode+0x5/0x30 [ 128.645058][ T4469] exc_page_fault+0x88/0x100 [ 128.650484][ T4469] asm_exc_page_fault+0x22/0x30 [ 128.655342][ T4469] RIP: 0033:0x7f06fff29bd7 [ 128.659759][ T4469] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 128.679372][ T4469] RSP: 002b:00007f06fe26b120 EFLAGS: 00010202 [ 128.685452][ T4469] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0700074159 [ 128.693434][ T4469] RDX: 00007f06fe26b140 RSI: 00007f06fe26b270 RDI: 000000000000000b [ 128.701417][ T4469] RBP: 00007f070010b06b R08: 0000000000000000 R09: 0000000000000000 [ 128.709391][ T4469] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 128.717385][ T4469] R13: 00007f07002fc218 R14: 00007f07002fc180 R15: 00007ffebfb89938 [ 128.725379][ T4469] [ 128.941560][ T4469] memory: usage 307200kB, limit 307200kB, failcnt 11678 [ 129.106635][ T4469] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 129.250931][ T4469] kmem: usage 3748kB, limit 9007199254740988kB, failcnt 0 [ 129.258073][ T4469] Memory cgroup stats for /syz1: [ 129.258962][ T4469] anon 421888 [ 129.258962][ T4469] file 310312960 [ 129.258962][ T4469] kernel_stack 163840 [ 129.258962][ T4469] pagetables 913408 [ 129.258962][ T4469] percpu 0 [ 129.258962][ T4469] sock 0 [ 129.258962][ T4469] shmem 310312960 [ 129.258962][ T4469] file_mapped 168861696 [ 129.258962][ T4469] file_dirty 0 [ 129.258962][ T4469] file_writeback 0 [ 129.258962][ T4469] swapcached 128114688 [ 129.258962][ T4469] anon_thp 0 [ 129.258962][ T4469] file_thp 0 [ 129.258962][ T4469] shmem_thp 0 [ 129.258962][ T4469] inactive_anon 260014080 [ 129.258962][ T4469] active_anon 50720768 [ 129.258962][ T4469] inactive_file 0 [ 129.258962][ T4469] active_file 0 [ 129.258962][ T4469] unevictable 0 [ 129.258962][ T4469] slab_reclaimable 1532888 [ 129.258962][ T4469] slab_unreclaimable 1131280 [ 129.258962][ T4469] slab 2664168 [ 129.258962][ T4469] workingset_refault_anon 0 [ 129.258962][ T4469] workingset_refault_file 38 [ 129.258962][ T4469] workingset_activate_anon 0 [ 129.358795][ T4469] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.61,pid=4460,uid=0 [ 129.571808][ T4469] Memory cgroup out of memory: Killed process 4460 (syz.1.61) total-vm:200552kB, anon-rss:1388kB, file-rss:20608kB, shmem-rss:98104kB, UID:0 pgtables:300kB oom_score_adj:1000 [ 130.482748][ T5430] mmap: syz.2.373 (5430): VmData 37597184 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 131.285664][ T5442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.376'. [ 131.477243][ T4469] syz.1.61 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 132.198101][ T4469] CPU: 1 PID: 4469 Comm: syz.1.61 Not tainted syzkaller #0 [ 132.205428][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.215490][ T4469] Call Trace: [ 132.218785][ T4469] [ 132.221729][ T4469] dump_stack_lvl+0x188/0x250 [ 132.226427][ T4469] ? show_regs_print_info+0x20/0x20 [ 132.231640][ T4469] ? load_image+0x410/0x410 [ 132.236155][ T4469] ? local_lock_release+0x170/0x170 [ 132.241364][ T4469] ? __rwlock_init+0x140/0x140 [ 132.246145][ T4469] dump_header+0xd9/0x780 [ 132.250484][ T4469] oom_kill_process+0x20e/0x3d0 [ 132.255346][ T4469] out_of_memory+0xdb2/0x1190 [ 132.260026][ T4469] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 132.265667][ T4469] ? mutex_lock_io_nested+0x60/0x60 [ 132.270877][ T4469] ? unregister_oom_notifier+0x20/0x20 [ 132.276350][ T4469] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 132.281904][ T4469] ? mem_cgroup_oom_trylock+0x210/0x210 [ 132.287463][ T4469] ? do_raw_spin_unlock+0x11d/0x230 [ 132.292666][ T4469] try_charge_memcg+0x1075/0x15b0 [ 132.297714][ T4469] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 132.303544][ T4469] ? rcu_lock_acquire+0x30/0x30 [ 132.308401][ T4469] charge_memcg+0x100/0x300 [ 132.312910][ T4469] ? __mem_cgroup_charge+0x80/0x80 [ 132.318030][ T4469] __mem_cgroup_charge+0x21/0x80 [ 132.322967][ T4469] shmem_add_to_page_cache+0xa8a/0x14d0 [ 132.328527][ T4469] ? put_page+0x200/0x200 [ 132.332862][ T4469] ? mark_lock+0x94/0x320 [ 132.337197][ T4469] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.343186][ T4469] shmem_getpage_gfp+0x1735/0x2c10 [ 132.348341][ T4469] shmem_write_begin+0xcd/0x1a0 [ 132.353201][ T4469] generic_perform_write+0x2b6/0x550 [ 132.358490][ T4469] ? atime_needs_update+0x770/0x770 [ 132.363704][ T4469] ? grab_cache_page_write_begin+0xa0/0xa0 [ 132.369511][ T4469] ? file_remove_privs+0x5d0/0x5d0 [ 132.374633][ T4469] ? rwsem_write_trylock+0x135/0x1c0 [ 132.379923][ T4469] ? clear_nonspinnable+0x60/0x60 [ 132.384956][ T4469] __generic_file_write_iter+0x261/0x4e0 [ 132.390597][ T4469] ? generic_write_checks+0x3be/0x460 [ 132.395975][ T4469] generic_file_write_iter+0xa6/0x1b0 [ 132.401363][ T4469] __kernel_write+0x522/0x980 [ 132.406057][ T4469] ? vfs_read+0xd50/0xd50 [ 132.410395][ T4469] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 132.416042][ T4469] ? get_dump_page+0xee/0x670 [ 132.420722][ T4469] ? down_read_killable+0x1ce/0x340 [ 132.425942][ T4469] __dump_emit+0x258/0x380 [ 132.430364][ T4469] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 132.435914][ T4469] ? dump_emit+0x145/0x3d0 [ 132.440331][ T4469] dump_user_range+0x84/0x340 [ 132.445034][ T4469] elf_core_dump+0x2fe0/0x3530 [ 132.449816][ T4469] ? load_elf_library+0x980/0x980 [ 132.454852][ T4469] ? verify_lock_unused+0x140/0x140 [ 132.460060][ T4469] ? dump_vma_snapshot+0xaf1/0xe40 [ 132.465214][ T4469] ? rcu_read_lock_any_held+0xb0/0x130 [ 132.470679][ T4469] ? getname_kernel+0x142/0x2e0 [ 132.475538][ T4469] do_coredump+0x14e8/0x2a40 [ 132.480148][ T4469] ? nfs_stat_to_errno+0x170/0x170 [ 132.485288][ T4469] ? lock_chain_count+0x20/0x20 [ 132.490151][ T4469] ? _raw_spin_unlock_irq+0x1f/0x40 [ 132.495349][ T4469] ? lockdep_hardirqs_on+0x94/0x140 [ 132.500558][ T4469] get_signal+0x531/0x12e0 [ 132.504992][ T4469] arch_do_signal_or_restart+0xe6/0x12a0 [ 132.510627][ T4469] ? _raw_spin_unlock+0x40/0x40 [ 132.515488][ T4469] ? force_sig_info_to_task+0x318/0x3c0 [ 132.521038][ T4469] ? get_sigframe_size+0x10/0x10 [ 132.526002][ T4469] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.531996][ T4469] ? exit_to_user_mode_loop+0x3b/0x130 [ 132.537457][ T4469] exit_to_user_mode_loop+0x9e/0x130 [ 132.542744][ T4469] exit_to_user_mode_prepare+0xee/0x180 [ 132.548296][ T4469] irqentry_exit_to_user_mode+0x5/0x30 [ 132.553754][ T4469] exc_page_fault+0x88/0x100 [ 132.558357][ T4469] asm_exc_page_fault+0x22/0x30 [ 132.563216][ T4469] RIP: 0033:0x7f06fff29bd7 [ 132.567632][ T4469] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 132.587242][ T4469] RSP: 002b:00007f06fe26b120 EFLAGS: 00010202 [ 132.593316][ T4469] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0700074159 [ 132.601290][ T4469] RDX: 00007f06fe26b140 RSI: 00007f06fe26b270 RDI: 000000000000000b [ 132.609267][ T4469] RBP: 00007f070010b06b R08: 0000000000000000 R09: 0000000000000000 [ 132.617241][ T4469] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.625213][ T4469] R13: 00007f07002fc218 R14: 00007f07002fc180 R15: 00007ffebfb89938 [ 132.633206][ T4469] [ 132.650796][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.682885][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.700522][ T4469] memory: usage 306868kB, limit 307200kB, failcnt 11989 [ 132.708408][ T4469] memory+swap: usage 430008kB, limit 9007199254740988kB, failcnt 0 [ 132.724921][ T4469] kmem: usage 3336kB, limit 9007199254740988kB, failcnt 0 [ 132.734809][ T4469] Memory cgroup stats for /syz1: [ 132.735093][ T4469] anon 356352 [ 132.735093][ T4469] file 310460416 [ 132.735093][ T4469] kernel_stack 262144 [ 132.735093][ T4469] pagetables 724992 [ 132.735093][ T4469] percpu 0 [ 132.735093][ T4469] sock 0 [ 132.735093][ T4469] shmem 310452224 [ 132.735093][ T4469] file_mapped 101703680 [ 132.735093][ T4469] file_dirty 0 [ 132.735093][ T4469] file_writeback 0 [ 132.735093][ T4469] swapcached 128233472 [ 132.735093][ T4469] anon_thp 0 [ 132.735093][ T4469] file_thp 0 [ 132.735093][ T4469] shmem_thp 0 [ 132.735093][ T4469] inactive_anon 243167232 [ 132.735093][ T4469] active_anon 67641344 [ 132.735093][ T4469] inactive_file 8192 [ 132.735093][ T4469] active_file 0 [ 132.735093][ T4469] unevictable 0 [ 132.735093][ T4469] slab_reclaimable 1471064 [ 132.735093][ T4469] slab_unreclaimable 856008 [ 132.735093][ T4469] slab 2327072 [ 132.735093][ T4469] workingset_refault_anon 0 [ 132.735093][ T4469] workingset_refault_file 101 [ 132.735093][ T4469] workingset_activate_anon 0 [ 132.914535][ T4469] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.61,pid=4469,uid=0 [ 133.016717][ T4469] Memory cgroup out of memory: Killed process 4469 (syz.1.61) total-vm:200816kB, anon-rss:1388kB, file-rss:20608kB, shmem-rss:66920kB, UID:0 pgtables:248kB oom_score_adj:1000 [ 133.293223][ T5473] FAULT_INJECTION: forcing a failure. [ 133.293223][ T5473] name failslab, interval 1, probability 0, space 0, times 0 [ 133.306329][ T5473] CPU: 1 PID: 5473 Comm: syz.4.386 Not tainted syzkaller #0 [ 133.313623][ T5473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.323683][ T5473] Call Trace: [ 133.326971][ T5473] [ 133.329910][ T5473] dump_stack_lvl+0x188/0x250 [ 133.334598][ T5473] ? show_regs_print_info+0x20/0x20 [ 133.339796][ T5473] ? load_image+0x410/0x410 [ 133.344309][ T5473] ? verify_lock_unused+0x140/0x140 [ 133.349514][ T5473] should_fail+0x383/0x4b0 [ 133.353945][ T5473] should_failslab+0x5/0x20 [ 133.358449][ T5473] slab_pre_alloc_hook+0x51/0xc0 [ 133.363472][ T5473] ? __sigqueue_alloc+0x3a6/0x4b0 [ 133.368494][ T5473] kmem_cache_alloc+0x3d/0x280 [ 133.373266][ T5473] __sigqueue_alloc+0x3a6/0x4b0 [ 133.378139][ T5473] __send_signal+0x223/0xd40 [ 133.382739][ T5473] send_signal+0x77e/0x8e0 [ 133.387165][ T5473] ? __rwlock_init+0x140/0x140 [ 133.391931][ T5473] ? __group_send_sig_info+0x30/0x30 [ 133.397229][ T5473] ? lockdep_hardirqs_off+0x70/0x100 [ 133.402530][ T5473] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 133.408000][ T5473] ? _raw_spin_lock+0x40/0x40 [ 133.412722][ T5473] force_sig_info_to_task+0x2f0/0x3c0 [ 133.418113][ T5473] force_sig_fault+0xd9/0x130 [ 133.422795][ T5473] ? page_fault_oops+0x890/0x890 [ 133.427749][ T5473] ? force_sig_fault_to_task+0x130/0x130 [ 133.433398][ T5473] ? __bad_area_nosemaphore+0x306/0x490 [ 133.438957][ T5473] exc_page_fault+0x60/0x100 [ 133.443554][ T5473] ? clear_bhb_loop+0x30/0x80 [ 133.448256][ T5473] asm_exc_page_fault+0x22/0x30 [ 133.453136][ T5473] RIP: 0033:0x7f79fa9ac2df [ 133.457669][ T5473] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 133.477293][ T5473] RSP: 002b:00007f79f8c1abd8 EFLAGS: 00010283 [ 133.483433][ T5473] RAX: 0000000000000000 RBX: 0000000000002aba RCX: 0000000000000000 [ 133.491415][ T5473] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f79f8c1ac00 [ 133.499404][ T5473] RBP: 00007f79f8c1ac00 R08: 0000000000000000 R09: 0000000000000000 [ 133.507393][ T5473] R10: 0000000000000000 R11: 0000000000204080 R12: cccccccccccccccd [ 133.515380][ T5473] R13: 00007f79fac4b038 R14: 00007f79fac4afa0 R15: 00007ffccdf0fd18 [ 133.523371][ T5473] [ 133.545000][ T5475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.387'. [ 133.686829][ T5480] dns_resolver: Unsupported server list version (0) [ 134.618654][ T5491] FAULT_INJECTION: forcing a failure. [ 134.618654][ T5491] name failslab, interval 1, probability 0, space 0, times 0 [ 135.782918][ T5486] syz.1.389 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 135.792711][ T5486] CPU: 0 PID: 5486 Comm: syz.1.389 Not tainted syzkaller #0 [ 135.800007][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.810061][ T5486] Call Trace: [ 135.813338][ T5486] [ 135.816272][ T5486] dump_stack_lvl+0x188/0x250 [ 135.820955][ T5486] ? show_regs_print_info+0x20/0x20 [ 135.826154][ T5486] ? load_image+0x410/0x410 [ 135.830662][ T5486] ? local_lock_release+0x170/0x170 [ 135.835865][ T5486] ? __rwlock_init+0x140/0x140 [ 135.840634][ T5486] dump_header+0xd9/0x780 [ 135.844972][ T5486] oom_kill_process+0x20e/0x3d0 [ 135.849825][ T5486] out_of_memory+0xdb2/0x1190 [ 135.854506][ T5486] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 135.860144][ T5486] ? mutex_lock_io_nested+0x60/0x60 [ 135.865350][ T5486] ? unregister_oom_notifier+0x20/0x20 [ 135.870822][ T5486] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 135.876458][ T5486] ? mem_cgroup_oom_trylock+0x210/0x210 [ 135.882011][ T5486] ? do_raw_spin_unlock+0x11d/0x230 [ 135.887213][ T5486] try_charge_memcg+0x1075/0x15b0 [ 135.892418][ T5486] ? __lock_acquire+0x1305/0x7b50 [ 135.897457][ T5486] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 135.904954][ T5486] ? rcu_lock_acquire+0x30/0x30 [ 135.909872][ T5486] charge_memcg+0x100/0x300 [ 135.914393][ T5486] ? __mem_cgroup_charge+0x80/0x80 [ 135.919523][ T5486] __mem_cgroup_charge+0x21/0x80 [ 135.924465][ T5486] shmem_add_to_page_cache+0xa8a/0x14d0 [ 135.930136][ T5486] ? put_page+0x200/0x200 [ 135.934608][ T5486] ? mark_lock+0x94/0x320 [ 135.938951][ T5486] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.945040][ T5486] shmem_getpage_gfp+0x1735/0x2c10 [ 135.950196][ T5486] shmem_write_begin+0xcd/0x1a0 [ 135.955084][ T5486] generic_perform_write+0x2b6/0x550 [ 135.960394][ T5486] ? grab_cache_page_write_begin+0xa0/0xa0 [ 135.966219][ T5486] ? file_remove_privs+0x5d0/0x5d0 [ 135.971354][ T5486] ? rwsem_write_trylock+0x135/0x1c0 [ 135.976648][ T5486] ? clear_nonspinnable+0x60/0x60 [ 135.981689][ T5486] __generic_file_write_iter+0x261/0x4e0 [ 135.987326][ T5486] ? generic_write_checks+0x3be/0x460 [ 135.992726][ T5486] generic_file_write_iter+0xa6/0x1b0 [ 135.998240][ T5486] __kernel_write+0x522/0x980 [ 136.002940][ T5486] ? vfs_read+0xd50/0xd50 [ 136.007292][ T5486] ? get_dump_page+0x2f1/0x670 [ 136.012067][ T5486] ? down_read_killable+0x1ce/0x340 [ 136.017283][ T5486] __dump_emit+0x258/0x380 [ 136.021717][ T5486] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 136.027185][ T5486] ? dump_user_range+0x1ce/0x340 [ 136.032130][ T5486] ? dump_emit+0x145/0x3d0 [ 136.036558][ T5486] dump_user_range+0x84/0x340 [ 136.041243][ T5486] elf_core_dump+0x2fe0/0x3530 [ 136.046302][ T5486] ? load_elf_library+0x980/0x980 [ 136.051339][ T5486] ? verify_lock_unused+0x140/0x140 [ 136.056543][ T5486] ? dump_vma_snapshot+0xaf1/0xe40 [ 136.061695][ T5486] ? rcu_read_lock_any_held+0xb0/0x130 [ 136.067618][ T5486] ? do_raw_spin_unlock+0x11d/0x230 [ 136.072830][ T5486] do_coredump+0x14e8/0x2a40 [ 136.077440][ T5486] ? nfs_stat_to_errno+0x170/0x170 [ 136.082573][ T5486] ? lock_chain_count+0x20/0x20 [ 136.087432][ T5486] ? _raw_spin_unlock_irq+0x1f/0x40 [ 136.092641][ T5486] ? lockdep_hardirqs_on+0x94/0x140 [ 136.097845][ T5486] get_signal+0x531/0x12e0 [ 136.102280][ T5486] arch_do_signal_or_restart+0xe6/0x12a0 [ 136.107919][ T5486] ? _raw_spin_unlock+0x40/0x40 [ 136.112782][ T5486] ? force_sig_info_to_task+0x318/0x3c0 [ 136.118334][ T5486] ? get_sigframe_size+0x10/0x10 [ 136.123277][ T5486] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 136.129271][ T5486] ? exit_to_user_mode_loop+0x3b/0x130 [ 136.134734][ T5486] exit_to_user_mode_loop+0x9e/0x130 [ 136.140025][ T5486] exit_to_user_mode_prepare+0xee/0x180 [ 136.145745][ T5486] irqentry_exit_to_user_mode+0x5/0x30 [ 136.151207][ T5486] exc_page_fault+0x88/0x100 [ 136.155806][ T5486] asm_exc_page_fault+0x22/0x30 [ 136.160666][ T5486] RIP: 0033:0x7f0700074161 [ 136.165082][ T5486] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 136.184701][ T5486] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 136.190786][ T5486] RAX: 0000000000000000 RBX: 00007f07002fbfa0 RCX: 00007f0700074159 [ 136.198802][ T5486] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 136.206787][ T5486] RBP: 00007f070010b06b R08: 0000000000000000 R09: 0000000000000000 [ 136.215090][ T5486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.223075][ T5486] R13: 00007f07002fc038 R14: 00007f07002fbfa0 R15: 00007ffebfb89938 [ 136.231072][ T5486] [ 136.234887][ T5486] memory: usage 307200kB, limit 307200kB, failcnt 14712 [ 136.241869][ T5486] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 136.249768][ T5486] kmem: usage 3272kB, limit 9007199254740988kB, failcnt 0 [ 136.257073][ T5486] Memory cgroup stats for /syz1: [ 136.257242][ T5486] anon 512000 [ 136.257242][ T5486] file 310648832 [ 136.257242][ T5486] kernel_stack 262144 [ 136.257242][ T5486] pagetables 643072 [ 136.257242][ T5486] percpu 0 [ 136.257242][ T5486] sock 0 [ 136.257242][ T5486] shmem 310640640 [ 136.257242][ T5486] file_mapped 6905856 [ 136.257242][ T5486] file_dirty 4096 [ 136.257242][ T5486] file_writeback 0 [ 136.257242][ T5486] swapcached 146165760 [ 136.257242][ T5486] anon_thp 0 [ 136.257242][ T5486] file_thp 0 [ 136.257242][ T5486] shmem_thp 0 [ 136.257242][ T5486] inactive_anon 227119104 [ 136.257242][ T5486] active_anon 84033536 [ 136.257242][ T5486] inactive_file 4096 [ 136.257242][ T5486] active_file 4096 [ 136.257242][ T5486] unevictable 0 [ 136.257242][ T5486] slab_reclaimable 1573072 [ 136.257242][ T5486] slab_unreclaimable 764016 [ 136.257242][ T5486] slab 2337088 [ 136.257242][ T5486] workingset_refault_anon 0 [ 136.257242][ T5486] workingset_refault_file 1098 [ 136.257242][ T5486] workingset_activate_anon 0 [ 136.355410][ T5486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.389,pid=5486,uid=0 [ 136.370447][ T5486] Memory cgroup out of memory: Killed process 5486 (syz.1.389) total-vm:102376kB, anon-rss:1444kB, file-rss:52816kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 136.431149][ T5486] syz.1.389 (5486) used greatest stack depth: 20432 bytes left [ 136.481345][ T5491] CPU: 0 PID: 5491 Comm: syz.3.393 Not tainted syzkaller #0 [ 136.488669][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.498733][ T5491] Call Trace: [ 136.502013][ T5491] [ 136.504937][ T5491] dump_stack_lvl+0x188/0x250 [ 136.509611][ T5491] ? show_regs_print_info+0x20/0x20 [ 136.514796][ T5491] ? load_image+0x410/0x410 [ 136.519285][ T5491] ? rcu_lock_release+0x9/0x20 [ 136.524043][ T5491] should_fail+0x383/0x4b0 [ 136.528464][ T5491] should_failslab+0x5/0x20 [ 136.532974][ T5491] slab_pre_alloc_hook+0x51/0xc0 [ 136.537923][ T5491] ? dst_alloc+0x101/0x160 [ 136.542344][ T5491] kmem_cache_alloc+0x3d/0x280 [ 136.547107][ T5491] dst_alloc+0x101/0x160 [ 136.551348][ T5491] rt_dst_clone+0x54/0x6a0 [ 136.555944][ T5491] ip_mc_finish_output+0xe6/0x260 [ 136.560982][ T5491] ? skb_clone+0x1f1/0x350 [ 136.565401][ T5491] ip_mc_output+0x3d9/0x5d0 [ 136.569918][ T5491] ip_send_skb+0x12b/0x1d0 [ 136.574341][ T5491] udp_send_skb+0x93f/0x1330 [ 136.578937][ T5491] udp_sendmsg+0x1ac7/0x2350 [ 136.583533][ T5491] ? aa_sk_perm+0x910/0x910 [ 136.588032][ T5491] ? ip_skb_dst_mtu+0x860/0x860 [ 136.592872][ T5491] ? udp_cmsg_send+0x350/0x350 [ 136.597637][ T5491] ? aa_sk_perm+0x7dc/0x910 [ 136.602137][ T5491] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 136.608560][ T5491] ? sock_rps_record_flow+0x17/0x3b0 [ 136.613850][ T5491] ? inet_sendmsg+0x7a/0x2a0 [ 136.618427][ T5491] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 136.623697][ T5491] ? inet_send_prepare+0x250/0x250 [ 136.628799][ T5491] ____sys_sendmsg+0x5be/0x8f0 [ 136.633557][ T5491] ? __sys_sendmsg_sock+0x30/0x30 [ 136.638620][ T5491] ? rcu_is_watching+0x11/0xa0 [ 136.643375][ T5491] ? import_iovec+0x6f/0xa0 [ 136.647872][ T5491] ___sys_sendmsg+0x236/0x2e0 [ 136.652543][ T5491] ? __sys_sendmsg+0x290/0x290 [ 136.657324][ T5491] ? __might_fault+0xb3/0x110 [ 136.661998][ T5491] __sys_sendmmsg+0x2ba/0x500 [ 136.666665][ T5491] ? __ia32_sys_sendmsg+0x80/0x80 [ 136.671949][ T5491] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 136.677925][ T5491] ? lock_chain_count+0x20/0x20 [ 136.682771][ T5491] __x64_sys_sendmmsg+0x9c/0xb0 [ 136.687608][ T5491] do_syscall_64+0x4c/0xa0 [ 136.692014][ T5491] ? clear_bhb_loop+0x30/0x80 [ 136.696678][ T5491] ? clear_bhb_loop+0x30/0x80 [ 136.701341][ T5491] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.707219][ T5491] RIP: 0033:0x7fc416546159 [ 136.711638][ T5491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.731235][ T5491] RSP: 002b:00007fc41479e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.739645][ T5491] RAX: ffffffffffffffda RBX: 00007fc4167cdfa0 RCX: 00007fc416546159 [ 136.747614][ T5491] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000005 [ 136.755581][ T5491] RBP: 00007fc4165dd06b R08: 0000000000000000 R09: 0000000000000000 [ 136.763551][ T5491] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000000 [ 136.771513][ T5491] R13: 00007fc4167ce038 R14: 00007fc4167cdfa0 R15: 00007fffd26d6af8 [ 136.779485][ T5491] [ 138.216208][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 139.969301][ T5533] netlink: 168 bytes leftover after parsing attributes in process `syz.0.409'. [ 142.444982][ T5565] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 142.999637][ T4462] syz.1.61 (4462) used greatest stack depth: 18640 bytes left [ 143.998215][ T5596] Zero length message leads to an empty skb [ 145.492982][ T5625] Mass Storage Function, version: 2009/09/11 [ 145.499477][ T5625] LUN: removable file: (no medium) [ 146.576261][ T5632] FAULT_INJECTION: forcing a failure. [ 146.576261][ T5632] name failslab, interval 1, probability 0, space 0, times 0 [ 146.853257][ T5632] CPU: 1 PID: 5632 Comm: syz.3.438 Not tainted syzkaller #0 [ 146.860590][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.870664][ T5632] Call Trace: [ 146.874000][ T5632] [ 146.876943][ T5632] dump_stack_lvl+0x188/0x250 [ 146.881639][ T5632] ? show_regs_print_info+0x20/0x20 [ 146.886859][ T5632] ? load_image+0x410/0x410 [ 146.891374][ T5632] ? __might_sleep+0xf0/0xf0 [ 146.895977][ T5632] ? __lock_acquire+0x7b50/0x7b50 [ 146.901019][ T5632] ? verify_lock_unused+0x140/0x140 [ 146.906233][ T5632] should_fail+0x383/0x4b0 [ 146.910704][ T5632] should_failslab+0x5/0x20 [ 146.915211][ T5632] slab_pre_alloc_hook+0x51/0xc0 [ 146.920160][ T5632] ? __kernfs_new_node+0xa8/0x6b0 [ 146.925196][ T5632] __kmalloc_track_caller+0x69/0x330 [ 146.930484][ T5632] ? __kernfs_new_node+0xa8/0x6b0 [ 146.935523][ T5632] kstrdup_const+0x51/0x90 [ 146.939943][ T5632] __kernfs_new_node+0xa8/0x6b0 [ 146.944817][ T5632] ? kernfs_new_node+0x250/0x250 [ 146.949826][ T5632] ? lock_chain_count+0x20/0x20 [ 146.954700][ T5632] ? sysfs_do_create_link_sd+0x75/0x110 [ 146.960262][ T5632] kernfs_new_node+0x148/0x250 [ 146.965042][ T5632] kernfs_create_link+0xa3/0x200 [ 146.969995][ T5632] sysfs_do_create_link_sd+0x83/0x110 [ 146.975376][ T5632] device_add+0x83b/0x1050 [ 146.979802][ T5632] netdev_register_kobject+0x184/0x320 [ 146.985275][ T5632] register_netdevice+0x10e8/0x1720 [ 146.990490][ T5632] ? netif_stacked_transfer_operstate+0x200/0x200 [ 146.996915][ T5632] ? memset+0x1e/0x40 [ 147.000907][ T5632] ? alloc_netdev_mqs+0x9da/0xc40 [ 147.005949][ T5632] mif6_add+0x450/0xc40 [ 147.010122][ T5632] ? ip6_mroute_setsockopt+0xde4/0x1380 [ 147.015678][ T5632] ? __might_fault+0xb7/0x110 [ 147.020374][ T5632] ? ip6_mroute_setsockopt+0x1380/0x1380 [ 147.026016][ T5632] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 147.031673][ T5632] ip6_mroute_setsockopt+0x1118/0x1380 [ 147.037156][ T5632] ? ip6mr_fib_lookup+0x1e0/0x1e0 [ 147.042205][ T5632] ? _copy_from_user+0xd1/0x170 [ 147.047067][ T5632] ? copy_user_generic_unrolled+0xa0/0xc0 [ 147.052804][ T5632] ? _copy_from_user+0x111/0x170 [ 147.057749][ T5632] ipv6_setsockopt+0x4c0/0x3cc0 [ 147.062607][ T5632] ? __lock_acquire+0x7b50/0x7b50 [ 147.067644][ T5632] ? ipv6_setsockopt+0x421/0x3cc0 [ 147.072683][ T5632] ? ipv6_update_options+0x400/0x400 [ 147.077977][ T5632] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 147.083966][ T5632] ? __lock_acquire+0x7b50/0x7b50 [ 147.088998][ T5632] ? lock_chain_count+0x20/0x20 [ 147.093855][ T5632] ? finish_lock_switch+0x12d/0x290 [ 147.099057][ T5632] ? lockdep_hardirqs_on+0x94/0x140 [ 147.104267][ T5632] ? finish_lock_switch+0x12d/0x290 [ 147.109474][ T5632] ? finish_task_switch+0x12f/0x650 [ 147.114681][ T5632] ? __schedule+0x11cb/0x4350 [ 147.119383][ T5632] ? verify_lock_unused+0x140/0x140 [ 147.124587][ T5632] ? release_firmware_map_entry+0x190/0x190 [ 147.130490][ T5632] ? aa_label_sk_perm+0x3e6/0x540 [ 147.135542][ T5632] ? aa_sk_perm+0x910/0x910 [ 147.140071][ T5632] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 147.145720][ T5632] ? __might_sleep+0xf0/0xf0 [ 147.150330][ T5632] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 147.155986][ T5632] ? aa_sk_perm+0x7dc/0x910 [ 147.160504][ T5632] rawv6_setsockopt+0x29e/0x660 [ 147.165367][ T5632] ? __fget_files+0x402/0x470 [ 147.170056][ T5632] ? raw6_destroy+0x30/0x30 [ 147.174594][ T5632] ? aa_sock_opt_perm+0x74/0x100 [ 147.179564][ T5632] ? sock_common_setsockopt+0x32/0xb0 [ 147.184940][ T5632] ? sock_common_recvmsg+0x1c0/0x1c0 [ 147.190232][ T5632] __sys_setsockopt+0x2bf/0x3d0 [ 147.195096][ T5632] __x64_sys_setsockopt+0xb1/0xc0 [ 147.200139][ T5632] do_syscall_64+0x4c/0xa0 [ 147.204570][ T5632] ? clear_bhb_loop+0x30/0x80 [ 147.209254][ T5632] ? clear_bhb_loop+0x30/0x80 [ 147.213940][ T5632] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.219849][ T5632] RIP: 0033:0x7fc416546159 [ 147.224275][ T5632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.243883][ T5632] RSP: 002b:00007fc41479e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.252303][ T5632] RAX: ffffffffffffffda RBX: 00007fc4167cdfa0 RCX: 00007fc416546159 [ 147.260282][ T5632] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0000000000000004 [ 147.268257][ T5632] RBP: 00007fc4165dd06b R08: 000000000000000c R09: 0000000000000000 [ 147.276242][ T5632] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 147.284246][ T5632] R13: 00007fc4167ce038 R14: 00007fc4167cdfa0 R15: 00007fffd26d6af8 [ 147.292251][ T5632] [ 151.076753][ T5682] netlink: 'syz.4.455': attribute type 8 has an invalid length. [ 156.204766][ T5751] netlink: 68 bytes leftover after parsing attributes in process `syz.4.479'. [ 156.581335][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 156.841850][ T5764] device hsr_slave_1 left promiscuous mode [ 161.224393][ T5811] netlink: 165 bytes leftover after parsing attributes in process `syz.2.497'. [ 161.287739][ T5813] device veth0 entered promiscuous mode [ 161.327397][ T5812] device veth0 left promiscuous mode [ 162.448284][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'. [ 162.678846][ T5847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.511'. [ 162.739684][ T5853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.511'. [ 162.808054][ T5847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.511'. [ 163.053040][ T5853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.511'. [ 163.086667][ T5847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.511'. [ 163.200657][ T5853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.511'. [ 166.512074][ T5911] futex_wake_op: syz.1.527 tries to shift op by 144; fix this program [ 167.518210][ T5926] netlink: 48 bytes leftover after parsing attributes in process `syz.2.533'. [ 167.831494][ T5926] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 167.907263][ T5926] device bridge1 entered promiscuous mode [ 168.073990][ T5935] x_tables: unsorted entry at hook 3 [ 168.896376][ T5953] futex_wake_op: syz.1.541 tries to shift op by 144; fix this program [ 169.044674][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 170.522060][ T5978] device vlan2 entered promiscuous mode [ 170.527885][ T5978] device bridge0 entered promiscuous mode [ 171.922203][ T5994] netlink: 96 bytes leftover after parsing attributes in process `syz.2.551'. [ 173.127024][ T6000] futex_wake_op: syz.1.554 tries to shift op by 144; fix this program [ 173.281795][ T6005] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 174.656108][ T6021] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.663467][ T6001] Bluetooth: hci2: command 0x0406 tx timeout [ 175.669055][ T4261] Bluetooth: hci0: command 0x0406 tx timeout [ 175.671776][ T6001] Bluetooth: hci3: command 0x0406 tx timeout [ 175.692674][ T6001] Bluetooth: hci1: command 0x0406 tx timeout [ 175.706239][ T6001] Bluetooth: hci4: command 0x0406 tx timeout [ 177.966764][ T6079] size and base must be multiples of 4 kiB [ 177.980628][ T6079] CPU: 0 PID: 6079 Comm: syz.4.581 Not tainted syzkaller #0 [ 177.987937][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.997997][ T6079] Call Trace: [ 178.001287][ T6079] [ 178.004244][ T6079] dump_stack_lvl+0x188/0x250 [ 178.008954][ T6079] ? show_regs_print_info+0x20/0x20 [ 178.014162][ T6079] ? load_image+0x410/0x410 [ 178.018679][ T6079] ? __lock_acquire+0x7b50/0x7b50 [ 178.023721][ T6079] mtrr_add+0x8e/0xc0 [ 178.027714][ T6079] mtrr_ioctl+0x9bf/0x1140 [ 178.032142][ T6079] ? mtrr_close+0x1f0/0x1f0 [ 178.036670][ T6079] ? mtrr_close+0x1f0/0x1f0 [ 178.041185][ T6079] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 178.046659][ T6079] ? proc_reg_poll+0x280/0x280 [ 178.051429][ T6079] __se_sys_ioctl+0xfa/0x170 [ 178.056026][ T6079] do_syscall_64+0x4c/0xa0 [ 178.060480][ T6079] ? clear_bhb_loop+0x30/0x80 [ 178.065161][ T6079] ? clear_bhb_loop+0x30/0x80 [ 178.069845][ T6079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.076040][ T6079] RIP: 0033:0x7f79fa9c3159 [ 178.080465][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.100076][ T6079] RSP: 002b:00007f79f8c1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.108504][ T6079] RAX: ffffffffffffffda RBX: 00007f79fac4afa0 RCX: 00007f79fa9c3159 [ 178.116483][ T6079] RDX: 0000200000000a00 RSI: 00000000400c4d01 RDI: 0000000000000007 [ 178.124548][ T6079] RBP: 00007f79faa5a06b R08: 0000000000000000 R09: 0000000000000000 [ 178.132535][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.140515][ T6079] R13: 00007f79fac4b038 R14: 00007f79fac4afa0 R15: 00007ffccdf0fd18 [ 178.148506][ T6079] [ 178.151552][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.481621][ T6098] netlink: 3 bytes leftover after parsing attributes in process `syz.3.586'. [ 179.486136][ T25] audit: type=1800 audit(1789622306.147:42): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.589" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 180.829611][ T6129] device syzkaller0 entered promiscuous mode [ 180.919677][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 180.949825][ T6096] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.959151][ T6096] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.968024][ T6096] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.976784][ T6096] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.056519][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 181.610804][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 183.162538][ T6181] netlink: 96 bytes leftover after parsing attributes in process `syz.1.609'. [ 183.768710][ T25] audit: type=1326 audit(1789622309.847:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.609" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700074159 code=0x7ffc0000 [ 183.805197][ T25] audit: type=1326 audit(1789622309.847:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.609" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700074159 code=0x7ffc0000 [ 183.849506][ T25] audit: type=1326 audit(1789622309.847:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.609" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0700074159 code=0x7ffc0000 [ 183.907647][ T25] audit: type=1326 audit(1789622309.847:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.609" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700074159 code=0x7ffc0000 [ 183.996841][ T25] audit: type=1326 audit(1789622309.847:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.609" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700074159 code=0x7ffc0000 [ 184.360996][ T25] audit: type=1326 audit(1789622309.847:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.609" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f0700074159 code=0x7ffc0000 [ 184.557435][ T25] audit: type=1326 audit(1789622309.847:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.609" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700074159 code=0x7ffc0000 [ 185.095786][ T25] audit: type=1326 audit(1789622309.847:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.609" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700074159 code=0x7ffc0000 [ 185.495786][ T25] audit: type=1326 audit(1789622309.847:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.609" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0700074159 code=0x7ffc0000 [ 185.563504][ T25] audit: type=1326 audit(1789622309.847:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.609" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700074159 code=0x7ffc0000 [ 185.922239][ T25] audit: type=1326 audit(1789622309.847:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.609" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700074159 code=0x7ffc0000 [ 188.624411][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 188.634714][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.634754][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.641918][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.733519][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.205361][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 190.176526][ T6292] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.516824][ T6322] netlink: 3 bytes leftover after parsing attributes in process `syz.3.664'. [ 192.881605][ T6349] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.063989][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.323240][ T6426] device syzkaller0 entered promiscuous mode [ 195.387230][ T6426] tipc: Enabled bearer , priority 0 [ 195.415453][ T6424] tipc: Resetting bearer [ 195.625374][ T6424] tipc: Disabling bearer [ 196.041555][ T25] audit: type=1326 audit(1789622322.697:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.3.724" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 196.125212][ T25] audit: type=1326 audit(1789622322.777:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.3.724" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 196.125880][ T25] audit: type=1326 audit(1789622322.777:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.3.724" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 196.180268][ T25] audit: type=1326 audit(1789622322.787:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.3.724" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 196.180434][ T25] audit: type=1326 audit(1789622322.787:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.3.724" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 196.203956][ T25] audit: type=1326 audit(1789622322.867:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.3.724" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 196.218210][ T25] audit: type=1326 audit(1789622322.877:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.3.724" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 196.225319][ T25] audit: type=1326 audit(1789622322.877:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.3.724" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 196.227086][ T25] audit: type=1326 audit(1789622322.887:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.3.724" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 196.233090][ T25] audit: type=1326 audit(1789622322.887:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.3.724" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 196.448874][ T6449] netlink: 52 bytes leftover after parsing attributes in process `syz.2.714'. [ 196.508605][ T6451] device veth0 entered promiscuous mode [ 196.509441][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 196.576838][ T6451] bond0: (slave bond_slave_1): Releasing backup interface [ 196.764509][ T6450] device veth0 left promiscuous mode [ 196.867848][ T6468] netlink: 56 bytes leftover after parsing attributes in process `syz.1.723'. [ 196.919791][ T6471] device syzkaller0 entered promiscuous mode [ 198.361349][ T6489] xt_l2tp: invalid flags combination: 0 [ 201.733309][ T6539] xt_l2tp: invalid flags combination: 0 [ 202.386106][ T6543] FAULT_INJECTION: forcing a failure. [ 202.386106][ T6543] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 202.400535][ T6543] CPU: 1 PID: 6543 Comm: syz.1.746 Not tainted syzkaller #0 [ 202.407835][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.417897][ T6543] Call Trace: [ 202.421186][ T6543] [ 202.424123][ T6543] dump_stack_lvl+0x188/0x250 [ 202.428804][ T6543] ? show_regs_print_info+0x20/0x20 [ 202.434002][ T6543] ? load_image+0x410/0x410 [ 202.438509][ T6543] ? uncharge_page+0x490/0x490 [ 202.443275][ T6543] should_fail+0x383/0x4b0 [ 202.447701][ T6543] prepare_alloc_pages+0x1e3/0x5b0 [ 202.452829][ T6543] __alloc_pages+0x11b/0x480 [ 202.457425][ T6543] ? zone_statistics+0x170/0x170 [ 202.462375][ T6543] ? rcu_lock_acquire+0x30/0x30 [ 202.467230][ T6543] ? alloc_pages+0x452/0x560 [ 202.471823][ T6543] __get_free_pages+0x8/0x30 [ 202.476411][ T6543] __tlb_remove_page_size+0x1f2/0x3f0 [ 202.481791][ T6543] unmap_page_range+0xfcf/0x2410 [ 202.486761][ T6543] unmap_vmas+0x131/0x250 [ 202.491088][ T6543] ? unmap_page_range+0x2410/0x2410 [ 202.496284][ T6543] ? __mutex_lock_common+0x435/0x2400 [ 202.501654][ T6543] ? exit_mm_release+0x16/0x30 [ 202.506433][ T6543] exit_mmap+0x3b9/0x640 [ 202.510683][ T6543] ? vm_brk+0x20/0x20 [ 202.514686][ T6543] ? uprobe_clear_state+0x2f6/0x460 [ 202.519889][ T6543] __mmput+0x115/0x390 [ 202.523962][ T6543] exit_mm+0x632/0x7b0 [ 202.528035][ T6543] ? perf_pmu_migrate_context+0xb70/0xb70 [ 202.533759][ T6543] ? do_exit+0x2110/0x2110 [ 202.538176][ T6543] ? __ia32_sys_timer_delete+0x40/0x40 [ 202.543632][ T6543] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 202.549100][ T6543] ? tty_audit_exit+0x149/0x1f0 [ 202.553953][ T6543] do_exit+0x5b8/0x2110 [ 202.558124][ T6543] ? put_task_struct+0x80/0x80 [ 202.562884][ T6543] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 202.568873][ T6543] ? _raw_spin_lock_irq+0xb7/0xf0 [ 202.573906][ T6543] do_group_exit+0x12c/0x2f0 [ 202.578497][ T6543] ? lockdep_hardirqs_on+0x94/0x140 [ 202.583698][ T6543] get_signal+0x7eb/0x12e0 [ 202.588131][ T6543] arch_do_signal_or_restart+0xe6/0x12a0 [ 202.593770][ T6543] ? lock_chain_count+0x20/0x20 [ 202.598634][ T6543] ? futex_exit_release+0x1c0/0x1c0 [ 202.603837][ T6543] ? get_sigframe_size+0x10/0x10 [ 202.608782][ T6543] ? __context_tracking_exit+0x4c/0x80 [ 202.614254][ T6543] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 202.620242][ T6543] ? exit_to_user_mode_loop+0x3b/0x130 [ 202.625706][ T6543] exit_to_user_mode_loop+0x9e/0x130 [ 202.630994][ T6543] exit_to_user_mode_prepare+0xee/0x180 [ 202.636543][ T6543] syscall_exit_to_user_mode+0x16/0x40 [ 202.642004][ T6543] do_syscall_64+0x58/0xa0 [ 202.646418][ T6543] ? clear_bhb_loop+0x30/0x80 [ 202.651109][ T6543] ? clear_bhb_loop+0x30/0x80 [ 202.655794][ T6543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.661690][ T6543] RIP: 0033:0x7f0700074159 [ 202.666104][ T6543] Code: Unable to access opcode bytes at RIP 0x7f070007412f. [ 202.673462][ T6543] RSP: 002b:00007f06fe2cc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 202.681874][ T6543] RAX: fffffffffffffe00 RBX: 00007f07002fbfa8 RCX: 00007f0700074159 [ 202.689845][ T6543] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f07002fbfa8 [ 202.697814][ T6543] RBP: 00007f07002fbfa0 R08: 0000000000000000 R09: 0000000000000000 [ 202.705786][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.713754][ T6543] R13: 00007f07002fc038 R14: 00007ffebfb89850 R15: 00007ffebfb89938 [ 202.721738][ T6543] [ 202.871033][ T6554] bond0: Error: CAN devices cannot be enslaved [ 203.197689][ T6558] device syzkaller0 entered promiscuous mode [ 204.383773][ T6565] netlink: 96 bytes leftover after parsing attributes in process `syz.3.751'. [ 205.819436][ T6573] netlink: 'syz.1.755': attribute type 12 has an invalid length. [ 206.563207][ T6579] xt_l2tp: invalid flags combination: 0 [ 207.756649][ T6604] netlink: 96 bytes leftover after parsing attributes in process `syz.4.764'. [ 209.429821][ T6609] xt_l2tp: invalid flags combination: 0 [ 212.229676][ T6656] xt_l2tp: invalid flags combination: 0 [ 212.794063][ T6664] netlink: 'syz.2.787': attribute type 1 has an invalid length. [ 212.834620][ T6664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.851931][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 213.017345][ T6664] bond1: (slave bridge2): making interface the new active one [ 213.035551][ T6670] netlink: 52 bytes leftover after parsing attributes in process `syz.3.789'. [ 213.047594][ T6664] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 213.075912][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 213.134609][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 213.247005][ T6685] netlink: 'syz.0.794': attribute type 10 has an invalid length. [ 213.416945][ T6685] team0: Device wg1 is of different type [ 213.730677][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 214.110927][ T6703] xt_l2tp: invalid flags combination: 0 [ 215.396424][ T6740] mtrr: base(0x317a7973000) is not aligned on a size(0x0000) boundary [ 215.414701][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.814'. [ 215.503407][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 215.560864][ T25] audit: type=1800 audit(1789622342.157:67): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.812" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 216.376194][ T6748] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 216.383548][ T6748] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.442113][ T6748] vhci_hcd vhci_hcd.0: Device attached [ 216.462505][ T6755] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 216.469055][ T6755] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.507675][ T6755] vhci_hcd vhci_hcd.0: Device attached [ 216.562376][ T6759] xt_l2tp: invalid flags combination: 0 [ 216.831822][ T6757] vhci_hcd: connection closed [ 216.836967][ T4255] vhci_hcd: stop threads [ 216.857084][ T6752] vhci_hcd: connection closed [ 216.859189][ T4255] vhci_hcd: release socket [ 216.895716][ T4255] vhci_hcd: disconnect device [ 216.912679][ T4255] vhci_hcd: stop threads [ 216.918040][ T4255] vhci_hcd: release socket [ 216.923544][ T4255] vhci_hcd: disconnect device [ 216.950473][ T4233] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 216.958216][ T4233] usb 41-1: enqueue for inactive port 0 [ 217.060559][ T4233] vhci_hcd: vhci_device speed not set [ 217.231909][ T6785] netlink: 'syz.3.826': attribute type 12 has an invalid length. [ 218.190063][ T6809] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 218.240321][ T6809] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 218.252553][ T6809] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 218.264655][ T6809] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 218.274777][ T6809] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 218.283268][ T6809] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 218.300613][ T6809] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 218.318605][ T6809] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 218.330040][ T6809] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 218.348968][ T6809] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 218.505071][ T6818] batman_adv: batadv0: Adding interface: dummy0 [ 218.522088][ T6818] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.578436][ T6818] batman_adv: batadv0: Interface activated: dummy0 [ 218.591735][ T6822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.838'. [ 218.620547][ T6822] device caif0 entered promiscuous mode [ 218.626197][ T6822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.909063][ T6832] netlink: 56 bytes leftover after parsing attributes in process `syz.1.843'. [ 218.960927][ T6833] device syzkaller0 entered promiscuous mode [ 219.222222][ T6847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.849'. [ 219.244095][ T6847] openvswitch: netlink: Message has 34 unknown bytes. [ 219.484248][ T6864] netlink: 56 bytes leftover after parsing attributes in process `syz.0.855'. [ 219.499169][ T6864] device syzkaller0 entered promiscuous mode [ 220.549928][ T25] audit: type=1800 audit(1789622347.197:68): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.865" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 221.402148][ T6898] netlink: 56 bytes leftover after parsing attributes in process `syz.3.867'. [ 221.451451][ T6898] device syzkaller0 entered promiscuous mode [ 221.985852][ T6914] FAULT_INJECTION: forcing a failure. [ 221.985852][ T6914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 221.999634][ T6914] CPU: 0 PID: 6914 Comm: syz.4.872 Not tainted syzkaller #0 [ 222.006929][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.016985][ T6914] Call Trace: [ 222.020269][ T6914] [ 222.023202][ T6914] dump_stack_lvl+0x188/0x250 [ 222.027887][ T6914] ? show_regs_print_info+0x20/0x20 [ 222.033089][ T6914] ? load_image+0x410/0x410 [ 222.037599][ T6914] ? uncharge_page+0x490/0x490 [ 222.042369][ T6914] should_fail+0x383/0x4b0 [ 222.046796][ T6914] prepare_alloc_pages+0x1e3/0x5b0 [ 222.051933][ T6914] __alloc_pages+0x11b/0x480 [ 222.056537][ T6914] ? zone_statistics+0x170/0x170 [ 222.061482][ T6914] ? rcu_lock_acquire+0x30/0x30 [ 222.066339][ T6914] ? alloc_pages+0x452/0x560 [ 222.070940][ T6914] __get_free_pages+0x8/0x30 [ 222.075538][ T6914] __tlb_remove_page_size+0x1f2/0x3f0 [ 222.082335][ T6914] unmap_page_range+0xfcf/0x2410 [ 222.087406][ T6914] unmap_vmas+0x131/0x250 [ 222.091751][ T6914] ? unmap_page_range+0x2410/0x2410 [ 222.096961][ T6914] ? __mutex_lock_common+0x435/0x2400 [ 222.102338][ T6914] ? exit_mm_release+0x16/0x30 [ 222.107115][ T6914] exit_mmap+0x3b9/0x640 [ 222.111360][ T6914] ? vm_brk+0x20/0x20 [ 222.115356][ T6914] ? uprobe_clear_state+0x2f6/0x460 [ 222.120557][ T6914] __mmput+0x115/0x390 [ 222.124628][ T6914] exit_mm+0x632/0x7b0 [ 222.128691][ T6914] ? perf_pmu_migrate_context+0xb70/0xb70 [ 222.134416][ T6914] ? do_exit+0x2110/0x2110 [ 222.138831][ T6914] ? __ia32_sys_timer_delete+0x40/0x40 [ 222.144291][ T6914] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 222.149758][ T6914] ? tty_audit_exit+0x149/0x1f0 [ 222.154626][ T6914] do_exit+0x5b8/0x2110 [ 222.158798][ T6914] ? put_task_struct+0x80/0x80 [ 222.163565][ T6914] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 222.169558][ T6914] ? _raw_spin_lock_irq+0xb7/0xf0 [ 222.174600][ T6914] do_group_exit+0x12c/0x2f0 [ 222.179193][ T6914] ? lockdep_hardirqs_on+0x94/0x140 [ 222.184399][ T6914] get_signal+0x7eb/0x12e0 [ 222.188838][ T6914] arch_do_signal_or_restart+0xe6/0x12a0 [ 222.194489][ T6914] ? futex_exit_release+0x1c0/0x1c0 [ 222.199860][ T6914] ? get_sigframe_size+0x10/0x10 [ 222.204808][ T6914] ? __context_tracking_exit+0x4c/0x80 [ 222.210287][ T6914] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 222.216283][ T6914] ? exit_to_user_mode_loop+0x3b/0x130 [ 222.221755][ T6914] exit_to_user_mode_loop+0x9e/0x130 [ 222.227055][ T6914] exit_to_user_mode_prepare+0xee/0x180 [ 222.232617][ T6914] syscall_exit_to_user_mode+0x16/0x40 [ 222.238087][ T6914] do_syscall_64+0x58/0xa0 [ 222.242513][ T6914] ? clear_bhb_loop+0x30/0x80 [ 222.247206][ T6914] ? clear_bhb_loop+0x30/0x80 [ 222.251895][ T6914] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.257795][ T6914] RIP: 0033:0x7f79fa9c3159 [ 222.262215][ T6914] Code: Unable to access opcode bytes at RIP 0x7f79fa9c312f. [ 222.269578][ T6914] RSP: 002b:00007f79f8c1b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.278002][ T6914] RAX: fffffffffffffe00 RBX: 00007f79fac4afa8 RCX: 00007f79fa9c3159 [ 222.286014][ T6914] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79fac4afa8 [ 222.293996][ T6914] RBP: 00007f79fac4afa0 R08: 0000000000000000 R09: 0000000000000000 [ 222.301974][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.309953][ T6914] R13: 00007f79fac4b038 R14: 00007ffccdf0fc30 R15: 00007ffccdf0fd18 [ 222.317947][ T6914] [ 222.497389][ T6925] FAULT_INJECTION: forcing a failure. [ 222.497389][ T6925] name failslab, interval 1, probability 0, space 0, times 0 [ 222.540424][ T6925] CPU: 1 PID: 6925 Comm: syz.4.876 Not tainted syzkaller #0 [ 222.547752][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.557820][ T6925] Call Trace: [ 222.561115][ T6925] [ 222.564056][ T6925] dump_stack_lvl+0x188/0x250 [ 222.568747][ T6925] ? show_regs_print_info+0x20/0x20 [ 222.573960][ T6925] ? load_image+0x410/0x410 [ 222.578479][ T6925] ? rcu_lock_release+0x5/0x20 [ 222.583253][ T6925] should_fail+0x383/0x4b0 [ 222.587685][ T6925] should_failslab+0x5/0x20 [ 222.592197][ T6925] slab_pre_alloc_hook+0x51/0xc0 [ 222.597142][ T6925] kmem_cache_alloc_trace+0x47/0x290 [ 222.602441][ T6925] ? proc_thread_self_get_link+0xf8/0x190 [ 222.608172][ T6925] proc_thread_self_get_link+0xf8/0x190 [ 222.613729][ T6925] ? proc_setup_thread_self+0x2d0/0x2d0 [ 222.619284][ T6925] pick_link+0x701/0xdc0 [ 222.623547][ T6925] step_into+0xac6/0xcd0 [ 222.627803][ T6925] ? set_root+0x3a0/0x3a0 [ 222.632142][ T6925] ? walk_component+0x1b6/0x460 [ 222.637002][ T6925] link_path_walk+0x688/0xde0 [ 222.641698][ T6925] ? handle_lookup_down+0x130/0x130 [ 222.646916][ T6925] __filename_parentat+0x254/0x690 [ 222.652045][ T6925] ? vfs_path_parent_lookup+0x50/0x50 [ 222.657631][ T6925] do_renameat2+0x38d/0xf70 [ 222.662140][ T6925] ? __might_sleep+0xf0/0xf0 [ 222.666739][ T6925] ? __might_fault+0xb7/0x110 [ 222.671432][ T6925] ? fsnotify_move+0x4e0/0x4e0 [ 222.676203][ T6925] ? __check_object_size+0x30c/0x410 [ 222.681494][ T6925] ? strncpy_from_user+0x1f4/0x350 [ 222.686612][ T6925] ? getname_flags+0x1f9/0x4f0 [ 222.691384][ T6925] __x64_sys_rename+0x82/0x90 [ 222.696068][ T6925] do_syscall_64+0x4c/0xa0 [ 222.700486][ T6925] ? clear_bhb_loop+0x30/0x80 [ 222.705162][ T6925] ? clear_bhb_loop+0x30/0x80 [ 222.709848][ T6925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.715743][ T6925] RIP: 0033:0x7f79fa9c3159 [ 222.720159][ T6925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.739764][ T6925] RSP: 002b:00007f79f8c1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 222.748199][ T6925] RAX: ffffffffffffffda RBX: 00007f79fac4afa0 RCX: 00007f79fa9c3159 [ 222.756180][ T6925] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000380 [ 222.764151][ T6925] RBP: 00007f79faa5a06b R08: 0000000000000000 R09: 0000000000000000 [ 222.772124][ T6925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.780094][ T6925] R13: 00007f79fac4b038 R14: 00007f79fac4afa0 R15: 00007ffccdf0fd18 [ 222.788080][ T6925] [ 222.815378][ T4231] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 222.867201][ T4231] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 222.906194][ T6931] netlink: 96 bytes leftover after parsing attributes in process `syz.0.873'. [ 222.917194][ T25] audit: type=1326 audit(1789622349.577:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.0.873" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f0cea159 code=0x7ffc0000 [ 223.002083][ T6933] fido_id[6933]: Failed to get parent HID device: No such file or directory [ 223.028640][ T25] audit: type=1326 audit(1789622349.577:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.0.873" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f0cea159 code=0x7ffc0000 [ 223.086007][ T6937] netlink: 56 bytes leftover after parsing attributes in process `syz.3.880'. [ 223.110019][ T25] audit: type=1326 audit(1789622349.577:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.0.873" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f65f0cea159 code=0x7ffc0000 [ 223.161511][ T6938] device syzkaller0 entered promiscuous mode [ 223.178351][ T25] audit: type=1326 audit(1789622349.577:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.0.873" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f0cea159 code=0x7ffc0000 [ 223.243154][ T25] audit: type=1326 audit(1789622349.577:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.0.873" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f0cea159 code=0x7ffc0000 [ 223.298569][ T25] audit: type=1326 audit(1789622349.577:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.0.873" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f65f0cea159 code=0x7ffc0000 [ 223.360443][ T25] audit: type=1326 audit(1789622349.577:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.0.873" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f0cea159 code=0x7ffc0000 [ 223.441325][ T25] audit: type=1326 audit(1789622349.577:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.0.873" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f0cea159 code=0x7ffc0000 [ 223.520434][ T25] audit: type=1326 audit(1789622349.577:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.0.873" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f65f0cea159 code=0x7ffc0000 [ 223.779629][ T6956] ODEBUG: Out of memory. ODEBUG disabled [ 224.204070][ T6967] netlink: 108 bytes leftover after parsing attributes in process `syz.3.892'. [ 224.436762][ T6979] device syzkaller0 entered promiscuous mode [ 225.803118][ T7025] program syz.4.917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.021583][ T7032] xt_l2tp: invalid flags combination: 0 [ 226.367627][ T7036] device syzkaller0 entered promiscuous mode [ 226.688064][ T7050] netlink: 52 bytes leftover after parsing attributes in process `syz.2.926'. [ 226.779661][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 226.863008][ T1504] Bluetooth: hci5: Frame reassembly failed (-84) [ 226.876416][ T1504] Bluetooth: hci5: Frame reassembly failed (-84) [ 226.981984][ T7056] program syz.3.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.090076][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 227.090161][ T25] audit: type=1326 audit(1789622353.747:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.2.926" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x0 [ 228.555731][ T7070] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 228.946984][ T4233] Bluetooth: hci5: command 0x1003 tx timeout [ 228.960459][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 229.224028][ T7082] netlink: 96 bytes leftover after parsing attributes in process `syz.2.935'. [ 229.895066][ T25] audit: type=1326 audit(1789622355.907:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 229.960553][ T25] audit: type=1326 audit(1789622355.907:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 230.020008][ T25] audit: type=1326 audit(1789622355.907:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 230.080664][ T25] audit: type=1326 audit(1789622355.907:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 230.144479][ T25] audit: type=1326 audit(1789622355.907:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 230.173042][ T25] audit: type=1326 audit(1789622355.907:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 230.204166][ T25] audit: type=1326 audit(1789622355.907:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 230.239634][ T25] audit: type=1326 audit(1789622355.917:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 230.268355][ T25] audit: type=1326 audit(1789622355.917:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 230.996336][ T7098] xt_l2tp: invalid flags combination: 0 [ 231.031579][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 231.037693][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 231.987446][ T4261] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 232.432569][ T7150] netlink: 56 bytes leftover after parsing attributes in process `syz.4.964'. [ 232.451413][ T7150] device syzkaller0 entered promiscuous mode [ 233.107468][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 233.269972][ T7154] block device autoloading is deprecated and will be removed. [ 233.316257][ T7154] block device autoloading is deprecated and will be removed. [ 233.735477][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.972'. [ 233.949363][ T7185] device syzkaller0 entered promiscuous mode [ 235.407356][ T7215] FAULT_INJECTION: forcing a failure. [ 235.407356][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 235.443176][ T7215] CPU: 0 PID: 7215 Comm: syz.4.986 Not tainted syzkaller #0 [ 235.450511][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.460589][ T7215] Call Trace: [ 235.463875][ T7215] [ 235.466806][ T7215] dump_stack_lvl+0x188/0x250 [ 235.471499][ T7215] ? show_regs_print_info+0x20/0x20 [ 235.476712][ T7215] ? load_image+0x410/0x410 [ 235.481230][ T7215] ? __lock_acquire+0x7b50/0x7b50 [ 235.486269][ T7215] should_fail+0x383/0x4b0 [ 235.491785][ T7215] should_failslab+0x5/0x20 [ 235.496310][ T7215] slab_pre_alloc_hook+0x51/0xc0 [ 235.501291][ T7215] kmem_cache_alloc_trace+0x47/0x290 [ 235.506592][ T7215] ? alloc_fdtable+0xca/0x2c0 [ 235.511287][ T7215] ? __rwlock_init+0x140/0x140 [ 235.516063][ T7215] alloc_fdtable+0xca/0x2c0 [ 235.520582][ T7215] dup_fd+0x982/0xc70 [ 235.524584][ T7215] ? copy_fs_struct+0x1bf/0x270 [ 235.529452][ T7215] ksys_unshare+0x458/0x8e0 [ 235.533962][ T7215] ? __lock_acquire+0x7b50/0x7b50 [ 235.539002][ T7215] ? sighand_ctor+0x40/0x40 [ 235.543510][ T7215] ? lock_chain_count+0x20/0x20 [ 235.548379][ T7215] ? syscall_enter_from_user_mode+0x21/0x70 [ 235.554285][ T7215] __x64_sys_unshare+0x34/0x40 [ 235.559053][ T7215] do_syscall_64+0x4c/0xa0 [ 235.563475][ T7215] ? clear_bhb_loop+0x30/0x80 [ 235.568155][ T7215] ? clear_bhb_loop+0x30/0x80 [ 235.572840][ T7215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 235.578739][ T7215] RIP: 0033:0x7f79fa9c3159 [ 235.583160][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.602772][ T7215] RSP: 002b:00007f79f8c1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 235.611198][ T7215] RAX: ffffffffffffffda RBX: 00007f79fac4afa0 RCX: 00007f79fa9c3159 [ 235.619293][ T7215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 235.627277][ T7215] RBP: 00007f79faa5a06b R08: 0000000000000000 R09: 0000000000000000 [ 235.635263][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.643244][ T7215] R13: 00007f79fac4b038 R14: 00007f79fac4afa0 R15: 00007ffccdf0fd18 [ 235.651243][ T7215] [ 236.549708][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 238.833208][ T7272] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 239.318428][ T7276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1005'. [ 239.746522][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 239.746804][ T25] audit: type=1800 audit(1789622366.097:98): pid=7278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1006" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 240.236868][ T7284] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.246624][ T7284] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.255387][ T7284] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.264115][ T7284] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.328569][ T7284] team0: Port device vxlan0 added [ 241.077674][ T25] audit: type=1326 audit(1789622367.737:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.3.1018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 241.154600][ T25] audit: type=1326 audit(1789622367.777:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.3.1018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 241.255969][ T25] audit: type=1326 audit(1789622367.777:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.3.1018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 241.353932][ T25] audit: type=1326 audit(1789622367.777:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.3.1018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 242.007294][ T25] audit: type=1326 audit(1789622367.777:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.3.1018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 242.246702][ T25] audit: type=1326 audit(1789622367.777:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.3.1018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 242.309847][ T25] audit: type=1326 audit(1789622367.777:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.3.1018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 242.669190][ T25] audit: type=1326 audit(1789622367.777:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.3.1018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 242.706560][ T25] audit: type=1326 audit(1789622367.777:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.3.1018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 244.939129][ T7392] validate_nla: 42 callbacks suppressed [ 244.939145][ T7392] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 244.974828][ T7392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.008081][ T7392] bond1: (slave geneve2): making interface the new active one [ 245.018231][ T7392] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 245.032383][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 245.260495][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 245.446893][ T4233] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 245.516733][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 246.876131][ T7410] FAULT_INJECTION: forcing a failure. [ 246.876131][ T7410] name failslab, interval 1, probability 0, space 0, times 0 [ 246.914128][ T7410] CPU: 0 PID: 7410 Comm: syz.2.1058 Not tainted syzkaller #0 [ 246.921533][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.931607][ T7410] Call Trace: [ 246.934888][ T7410] [ 246.937818][ T7410] dump_stack_lvl+0x188/0x250 [ 246.942504][ T7410] ? show_regs_print_info+0x20/0x20 [ 246.947715][ T7410] ? load_image+0x410/0x410 [ 246.952226][ T7410] ? __might_sleep+0xf0/0xf0 [ 246.956821][ T7410] ? __lock_acquire+0x7b50/0x7b50 [ 246.961852][ T7410] ? tomoyo_get_local_path+0x62a/0x780 [ 246.967324][ T7410] should_fail+0x383/0x4b0 [ 246.971765][ T7410] should_failslab+0x5/0x20 [ 246.976271][ T7410] slab_pre_alloc_hook+0x51/0xc0 [ 246.981217][ T7410] __kmalloc+0x6b/0x340 [ 246.985377][ T7410] ? tomoyo_encode+0x28a/0x550 [ 246.990150][ T7410] tomoyo_encode+0x28a/0x550 [ 246.994750][ T7410] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 247.000401][ T7410] tomoyo_check_open_permission+0x1eb/0x410 [ 247.006306][ T7410] ? tomoyo_check_path_number_acl+0x280/0x280 [ 247.012414][ T7410] ? __lock_acquire+0x7b50/0x7b50 [ 247.017453][ T7410] ? __rwlock_init+0x140/0x140 [ 247.022220][ T7410] ? do_raw_spin_lock+0x128/0x2f0 [ 247.027262][ T7410] ? preempt_count_add+0x8d/0x190 [ 247.032302][ T7410] ? hook_file_open+0xf1/0x230 [ 247.037077][ T7410] ? tomoyo_file_open+0xe9/0x170 [ 247.042026][ T7410] security_file_open+0x5e/0xa0 [ 247.046888][ T7410] do_dentry_open+0x321/0xf90 [ 247.051572][ T7410] ? vfs_open+0x2b/0x80 [ 247.055738][ T7410] path_openat+0x2718/0x2fb0 [ 247.060367][ T7410] ? __kasan_slab_alloc+0xa9/0xc0 [ 247.065410][ T7410] ? do_filp_open+0x400/0x400 [ 247.070109][ T7410] do_filp_open+0x1df/0x400 [ 247.074622][ T7410] ? vfs_tmpfile+0x300/0x300 [ 247.079235][ T7410] ? _raw_spin_unlock+0x24/0x40 [ 247.084090][ T7410] ? alloc_fd+0x59e/0x650 [ 247.088434][ T7410] do_sys_openat2+0x14b/0x500 [ 247.093113][ T7410] ? __lock_acquire+0x7b50/0x7b50 [ 247.098148][ T7410] ? do_sys_open+0xe0/0xe0 [ 247.102569][ T7410] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 247.108562][ T7410] ? lock_chain_count+0x20/0x20 [ 247.113422][ T7410] __x64_sys_openat+0x135/0x160 [ 247.118282][ T7410] do_syscall_64+0x4c/0xa0 [ 247.122711][ T7410] ? clear_bhb_loop+0x30/0x80 [ 247.127386][ T7410] ? clear_bhb_loop+0x30/0x80 [ 247.132071][ T7410] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.137971][ T7410] RIP: 0033:0x7f3b5a780159 [ 247.142392][ T7410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.162128][ T7410] RSP: 002b:00007f3b589d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 247.170555][ T7410] RAX: ffffffffffffffda RBX: 00007f3b5aa07fa0 RCX: 00007f3b5a780159 [ 247.178537][ T7410] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 247.186511][ T7410] RBP: 00007f3b5a81706b R08: 0000000000000000 R09: 0000000000000000 [ 247.194486][ T7410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.202461][ T7410] R13: 00007f3b5aa08038 R14: 00007f3b5aa07fa0 R15: 00007ffe6fbc83b8 [ 247.210449][ T7410] [ 247.551397][ T7410] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.685191][ T6001] Bluetooth: hci5: command 0x1003 tx timeout [ 247.720331][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 248.335688][ T4261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 248.345584][ T4261] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.414252][ T7433] fido_id[7433]: Failed to get parent HID device: No such file or directory [ 249.795973][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 249.812344][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 250.844520][ T7469] xt_hashlimit: size too large, truncated to 1048576 [ 251.367040][ T7485] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.384676][ T7485] IPv6: Can't replace route, no match found [ 251.773002][ T7489] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1083'. [ 251.813964][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 251.814326][ T25] audit: type=1326 audit(1789622378.447:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 252.028680][ T25] audit: type=1326 audit(1789622378.447:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 252.432568][ T25] audit: type=1326 audit(1789622378.457:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 252.517792][ T25] audit: type=1326 audit(1789622378.457:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 252.592890][ T25] audit: type=1326 audit(1789622378.457:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 252.678791][ T25] audit: type=1326 audit(1789622378.457:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 252.764587][ T25] audit: type=1326 audit(1789622378.467:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 252.842647][ T25] audit: type=1326 audit(1789622378.467:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 252.927952][ T25] audit: type=1326 audit(1789622378.467:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 253.004718][ T25] audit: type=1326 audit(1789622378.467:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5a780159 code=0x7ffc0000 [ 253.404995][ T6001] Bluetooth: hci5: command 0x1009 tx timeout [ 253.900686][ T7501] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1088'. [ 253.941511][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 254.332726][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 255.052588][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 255.202754][ T7526] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1096'. [ 255.320755][ T4229] usb 2-1: device descriptor read/64, error -71 [ 255.541116][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.640652][ T4229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 256.025178][ T4229] usb 2-1: device descriptor read/64, error -71 [ 256.162358][ T4229] usb usb2-port1: attempt power cycle [ 256.346569][ T7539] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 256.405887][ T7542] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 256.590688][ T4229] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 256.716115][ T4229] usb 2-1: device descriptor read/8, error -71 [ 256.887748][ T7550] Need at least one configuration in g1. [ 256.897819][ T7550] udc usbip-vudc.0: failed to start g1: -22 [ 257.020631][ T4229] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 257.144848][ T4229] usb 2-1: device descriptor read/8, error -71 [ 257.283857][ T4229] usb usb2-port1: unable to enumerate USB device [ 258.052470][ T7574] program syz.3.1111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.366643][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.384651][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.419412][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.455918][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.573959][ T7618] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1131'. [ 260.763845][ T7659] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 260.890756][ T7667] xt_policy: neither incoming nor outgoing policy selected [ 261.150819][ T4228] kernel write not supported for file /564/net/snmp6 (pid: 4228 comm: kworker/1:5) [ 261.239751][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1152'. [ 263.190559][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 263.769636][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 263.895282][ T7715] block device autoloading is deprecated and will be removed. [ 264.935931][ T7746] xt_connbytes: Forcing CT accounting to be enabled [ 266.057804][ T25] kauditd_printk_skb: 18 callbacks suppressed [ 266.057819][ T25] audit: type=1326 audit(1789622392.717:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 266.127863][ T25] audit: type=1326 audit(1789622392.757:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 266.156000][ T25] audit: type=1326 audit(1789622392.757:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 266.180250][ T25] audit: type=1326 audit(1789622392.757:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 266.204675][ T25] audit: type=1326 audit(1789622392.757:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 266.232062][ T25] audit: type=1326 audit(1789622392.757:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 266.255674][ T7779] device bridge0 entered promiscuous mode [ 266.257632][ T25] audit: type=1326 audit(1789622392.757:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 266.290814][ T25] audit: type=1326 audit(1789622392.757:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 266.297794][ T7779] device macvlan2 entered promiscuous mode [ 266.318158][ T25] audit: type=1326 audit(1789622392.757:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc416546159 code=0x7ffc0000 [ 267.848674][ T7803] usb usb1: usbfs: process 7803 (syz.3.1206) did not claim interface 0 before use [ 267.981280][ T7808] FAULT_INJECTION: forcing a failure. [ 267.981280][ T7808] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.002019][ T7808] CPU: 0 PID: 7808 Comm: syz.1.1208 Not tainted syzkaller #0 [ 268.009429][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.019493][ T7808] Call Trace: [ 268.022780][ T7808] [ 268.025715][ T7808] dump_stack_lvl+0x188/0x250 [ 268.030405][ T7808] ? show_regs_print_info+0x20/0x20 [ 268.035612][ T7808] ? load_image+0x410/0x410 [ 268.040137][ T7808] ? __lock_acquire+0x7b50/0x7b50 [ 268.045177][ T7808] ? do_user_addr_fault+0x69f/0xc90 [ 268.050396][ T7808] should_fail+0x383/0x4b0 [ 268.054829][ T7808] prepare_alloc_pages+0x1e3/0x5b0 [ 268.059959][ T7808] __alloc_pages+0x11b/0x480 [ 268.064563][ T7808] ? copy_page_from_iter+0x381/0x760 [ 268.069865][ T7808] ? zone_statistics+0x170/0x170 [ 268.074814][ T7808] ? copy_user_enhanced_fast_string+0xe/0x40 [ 268.080813][ T7808] ? copy_page_from_iter+0x499/0x760 [ 268.086114][ T7808] ? alloc_pages+0x452/0x560 [ 268.090718][ T7808] pipe_write+0x5cd/0x1b40 [ 268.095147][ T7808] ? pipe_write+0xed0/0x1b40 [ 268.099744][ T7808] ? pipe_write+0xed1/0x1b40 [ 268.104359][ T7808] ? pipe_read+0x12d0/0x12d0 [ 268.108957][ T7808] ? init_wait_entry+0xd0/0xd0 [ 268.113734][ T7808] ? memset+0x1e/0x40 [ 268.117722][ T7808] ? iov_iter_init+0xb4/0x170 [ 268.122414][ T7808] vfs_write+0x748/0xd70 [ 268.126671][ T7808] ? file_end_write+0x250/0x250 [ 268.131538][ T7808] ? __fget_files+0x402/0x470 [ 268.136229][ T7808] ? __fdget_pos+0x1e2/0x370 [ 268.140825][ T7808] ? ksys_write+0x70/0x260 [ 268.145337][ T7808] ksys_write+0x153/0x260 [ 268.149676][ T7808] ? __ia32_sys_read+0x80/0x80 [ 268.154449][ T7808] ? lockdep_hardirqs_on+0x94/0x140 [ 268.159658][ T7808] do_syscall_64+0x4c/0xa0 [ 268.164081][ T7808] ? clear_bhb_loop+0x30/0x80 [ 268.168762][ T7808] ? clear_bhb_loop+0x30/0x80 [ 268.173452][ T7808] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.179349][ T7808] RIP: 0033:0x7f0700074159 [ 268.183770][ T7808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.203381][ T7808] RSP: 002b:00007f06fe2cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.211821][ T7808] RAX: ffffffffffffffda RBX: 00007f07002fbfa0 RCX: 00007f0700074159 [ 268.219811][ T7808] RDX: 00000000200002e6 RSI: 0000200000000100 RDI: 0000000000000005 [ 268.220487][ T6001] Bluetooth: hci5: command 0x1003 tx timeout [ 268.227793][ T7808] RBP: 00007f070010b06b R08: 0000000000000000 R09: 0000000000000000 [ 268.227842][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.227853][ T7808] R13: 00007f07002fc038 R14: 00007f07002fbfa0 R15: 00007ffebfb89938 [ 268.245797][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 268.249760][ T7808] [ 268.337065][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 269.463709][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 269.484038][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1219'. [ 269.504465][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1219'. [ 269.675118][ T7842] FAULT_INJECTION: forcing a failure. [ 269.675118][ T7842] name fail_futex, interval 1, probability 0, space 0, times 1 [ 269.694080][ T7842] CPU: 1 PID: 7842 Comm: syz.3.1221 Not tainted syzkaller #0 [ 269.701484][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.711552][ T7842] Call Trace: [ 269.714843][ T7842] [ 269.717776][ T7842] dump_stack_lvl+0x188/0x250 [ 269.722475][ T7842] ? futex_wait_queue_me+0x16e/0x440 [ 269.727778][ T7842] ? show_regs_print_info+0x20/0x20 [ 269.732990][ T7842] ? load_image+0x410/0x410 [ 269.737522][ T7842] should_fail+0x383/0x4b0 [ 269.741961][ T7842] get_futex_key+0x1a1/0x12d0 [ 269.746656][ T7842] ? futex_wait_restart+0x250/0x250 [ 269.751866][ T7842] ? __lock_acquire+0x13dc/0x7b50 [ 269.756910][ T7842] futex_wake+0x101/0x540 [ 269.761261][ T7842] ? futex_wait+0x680/0x680 [ 269.765771][ T7842] ? verify_lock_unused+0x140/0x140 [ 269.771063][ T7842] ? verify_lock_unused+0x140/0x140 [ 269.776270][ T7842] do_futex+0xd83/0x12b0 [ 269.780520][ T7842] ? lock_chain_count+0x20/0x20 [ 269.785385][ T7842] ? exc_page_fault+0x88/0x100 [ 269.790166][ T7842] ? futex_exit_release+0x1c0/0x1c0 [ 269.795374][ T7842] ? __context_tracking_exit+0x4c/0x80 [ 269.800850][ T7842] __se_sys_futex+0x389/0x420 [ 269.805543][ T7842] ? __x64_sys_futex+0xf0/0xf0 [ 269.810321][ T7842] ? __x64_sys_futex+0x1d/0xf0 [ 269.815092][ T7842] do_syscall_64+0x4c/0xa0 [ 269.819516][ T7842] ? clear_bhb_loop+0x30/0x80 [ 269.824203][ T7842] ? clear_bhb_loop+0x30/0x80 [ 269.828891][ T7842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.834798][ T7842] RIP: 0033:0x7fc416546159 [ 269.839220][ T7842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.858833][ T7842] RSP: 002b:00007fc41479e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 269.867263][ T7842] RAX: ffffffffffffffda RBX: 00007fc4167cdfa8 RCX: 00007fc416546159 [ 269.875251][ T7842] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc4167cdfac [ 269.883234][ T7842] RBP: 00007fc4167cdfa0 R08: 00258e946e7d74b1 R09: 0000000000000000 [ 269.891221][ T7842] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 269.899202][ T7842] R13: 00007fc4167ce038 R14: 00007fffd26d6a10 R15: 00007fffd26d6af8 [ 269.907199][ T7842] [ 271.019432][ T26] Bluetooth: hci5: command 0x1001 tx timeout [ 271.030131][ T7799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.107959][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 271.534074][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'. [ 272.879413][ T25] audit: type=1800 audit(1789622399.507:146): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1238" name=08 dev="sda1" ino=1478 res=0 errno=0 [ 273.027275][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.035487][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.492115][ T6001] Bluetooth: hci5: command 0x1009 tx timeout [ 274.521743][ T7899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.573631][ T7901] autofs4:pid:7901:autofs_fill_super: called with bogus options [ 274.761684][ T7905] netlink: 'syz.0.1243': attribute type 10 has an invalid length. [ 274.798480][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.807165][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.907825][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.914970][ T7905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.922548][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.929613][ T7905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.060107][ T7905] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 275.216342][ T7907] printk: console [ttyS0] disabled SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=5 req=1888 state=1 status=67 (errno 9: Bad file descriptor)