last executing test programs: 4m23.600287774s ago: executing program 4 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x40}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000306010800000000000000210a0000e905000100070000000900020073797a3100"], 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 4m23.594274755s ago: executing program 4 (id=71): r0 = gettid() rt_sigqueueinfo(r0, 0x1d, &(0x7f0000000a40)={0x0, 0xfffffffd, 0x1}) 4m23.540415171s ago: executing program 1 (id=72): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x28d, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x101}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) r3 = add_key$user(0x0, &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000840)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x0}, &(0x7f0000000980)="ff", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000009c0)={r5, r4, r3}, &(0x7f0000000a00)=""/161, 0xa1, &(0x7f0000000ac0)={&(0x7f0000000b00)={'streebog512-generic\x00'}}) 4m23.494078695s ago: executing program 4 (id=75): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) io_setup(0x5, &(0x7f0000000640)=0x0) io_submit(r3, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x23}]) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000940), 0x1000) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) read(r5, 0x0, 0x300) r6 = socket(0x1e, 0x5, 0x0) connect$tipc(r6, 0x0, 0x0) write(0xca, &(0x7f0000000000), 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x12102, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) 4m22.633787634s ago: executing program 1 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000306010800000000000000210a0000e905000100070000000900020073797a3100"], 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 4m22.561544141s ago: executing program 4 (id=85): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/1024, 0x400) 4m22.539172134s ago: executing program 1 (id=86): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x0, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}]}}}]}, 0x44}}, 0x200088c2) 4m22.159465043s ago: executing program 4 (id=87): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x23, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syz_tun\x00'}) syz_emit_ethernet(0x3a, &(0x7f00000006c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x9}}}}}}, 0x0) 4m22.157773253s ago: executing program 1 (id=89): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) socket(0x28, 0x5, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0x32}) 4m22.048162754s ago: executing program 4 (id=91): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x1, 0x0}, 0x8) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) io_setup(0x5, &(0x7f0000000640)=0x0) io_submit(r4, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x23}]) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000940), 0x1000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=r0, 0x4) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) read(r6, 0x0, 0x300) socket(0x1e, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x12102, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) 4m21.275475074s ago: executing program 1 (id=97): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/1024, 0x400) 4m21.211233751s ago: executing program 1 (id=98): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) io_setup(0x5, &(0x7f0000000640)=0x0) io_submit(r3, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x23}]) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000940), 0x1000) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) read(r5, 0x0, 0x300) r6 = socket(0x1e, 0x5, 0x0) connect$tipc(r6, 0x0, 0x0) write(0xca, &(0x7f0000000000), 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x12102, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) 4m6.725950403s ago: executing program 32 (id=90): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e20, @empty}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='100000', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) write(r3, &(0x7f00000001c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='0', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracefs/instances/foo\x00', 0x0) dup(r1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) 4m6.697834136s ago: executing program 33 (id=91): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x1, 0x0}, 0x8) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) io_setup(0x5, &(0x7f0000000640)=0x0) io_submit(r4, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x23}]) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000940), 0x1000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=r0, 0x4) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) read(r6, 0x0, 0x300) socket(0x1e, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x12102, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) 4m5.878578641s ago: executing program 34 (id=98): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) io_setup(0x5, &(0x7f0000000640)=0x0) io_submit(r3, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x23}]) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000940), 0x1000) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) read(r5, 0x0, 0x300) r6 = socket(0x1e, 0x5, 0x0) connect$tipc(r6, 0x0, 0x0) write(0xca, &(0x7f0000000000), 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x12102, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) 2m21.681614659s ago: executing program 2 (id=987): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket(0xa, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, 0x0, 0x0) close(r2) sendmsg$inet6(r1, &(0x7f0000000b00)={&(0x7f0000000b40)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="6797f04cdb6f3395f1c922adb0da67dc3bf442976f", 0x15}], 0x1}, 0x30008b08) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f00000006c0)={0x2, 0x0, 0x11, 0x200001d, 0xd83, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001800010000000000000000001d0108010000000000000000"], 0x1c}}, 0x880) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x23, &(0x7f0000000040)={0x1, 0x0, 0xfffffffb}, 0x4) socket$inet(0x2, 0x801, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200), &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='ecryptfs\x00', 0x0, &(0x7f00000002c0)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 2m19.162576019s ago: executing program 2 (id=994): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x543, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000b40)={0x4, 0x0, 0x0, 0x290, 0x138, 0x1, 0x0, 0x9c00, 0x0, 0x0, @by_dev={r1}, [@verity={0x0, 0x1498, 0x0, 0x158, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x1}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '1024', 0x20, '1024', 0x20, 0x3bd, 0x20, 0x292, 0x20, 'md5', 0x20, @hex64=[0x39, 0x34, 0x66, 0x66, 0x30, 0x33, 0x64, 0x61, 0x61, 0x61, 0x33, 0x64, 0x63, 0x63, 0x64, 0x35, 0x31, 0x39, 0x64, 0x32, 0x62, 0x37, 0x39, 0x35, 0x64, 0x35, 0x61, 0x6f, 0x62, 0x33, 0x34, 0x63, 0x37, 0x39, 0xed22954e28ecebbb, 0x30, 0x36, 0x39, 0x63, 0x32, 0x61, 0x31, 0x61, 0x33, 0x31, 0x36, 0x36, 0x62, 0x64, 0x35, 0x34, 0x63, 0x38, 0x0, 0x30, 0x30, 0x63, 0x39, 0x50, 0x30, 0x34, 0x53, 0x32, 0x38, 0x38, 0x62, 0x35, 0x31, 0x5a, 0x39, 0x65, 0x35, 0x38, 0x33, 0x64, 0x63, 0x0, 0x61, 0x64, 0x65, 0x31, 0x61, 0x64, 0x30, 0x36, 0x31, 0x31, 0x65, 0x36, 0x33, 0x38, 0x37, 0x39, 0x34, 0x64, 0x65, 0x64, 0x33, 0x65, 0x2, 0x33, 0x63, 0x33, 0x30, 0x61, 0x38, 0x63, 0x39, 0x64, 0x66, 0x34, 0x34, 0x35, 0x63, 0x36, 0x37, 0x38, 0x36, 0x34, 0x66, 0x35, 0x37, 0x31, 0x66, 0x30, 0x65, 0x65, 0x38], 0x20, @hex=@hex16=[0x64, 0x39, 0x35, 0x34, 0x66, 0x61, 0x66, 0x31, 0x35, 0x32, 0x64, 0x30, 0x30, 0x31, 0x35, 0x66, 0x65, 0x65, 0x63, 0x37, 0x62, 0x37, 0x66, 0x34, 0xedc51d0f9695221c, 0x65, 0x32, 0x7, 0x38, 0x37, 0x50, 0x39], ' 2 ignore_zero_blocks check_at_most_once'}}]}) 2m19.085782917s ago: executing program 2 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x3, 0x40000140, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x1484a8, &(0x7f0000000500)=ANY=[], 0x21, 0x0, 0x0) symlinkat(&(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0) chdir(&(0x7f0000000700)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7/file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) 2m18.18300719s ago: executing program 2 (id=1001): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000100)={[{@nombcache}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x80042, 0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000bc0)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r0, &(0x7f0000000c80)=0x8, 0x12) setxattr$trusted_overlay_nlink(&(0x7f0000000cc0)='./file1\x00', &(0x7f0000000d00), &(0x7f0000000d40)={'U-', 0x8}, 0x16, 0x2) 2m17.904038869s ago: executing program 2 (id=1003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x22004868}, 0x20044804) 2m16.807917062s ago: executing program 2 (id=1012): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x3, 0x40000140, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x1484a8, &(0x7f0000000500)=ANY=[], 0x21, 0x0, 0x0) symlinkat(&(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0) chdir(&(0x7f0000000700)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7/file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) 2m16.796394493s ago: executing program 35 (id=1012): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x3, 0x40000140, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x1484a8, &(0x7f0000000500)=ANY=[], 0x21, 0x0, 0x0) symlinkat(&(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0) chdir(&(0x7f0000000700)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7/file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) 1m24.518845311s ago: executing program 6 (id=1412): close(0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x1001}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./security\x00', &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/ima/policy\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='appraise func=FIRMWARE_CHECK', 0x1c) listen(r0, 0x1) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x1, 0x4}, {0x1001, 0x40}}]}}, 0x11) 1m23.057081221s ago: executing program 6 (id=1424): mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./proc\x00', &(0x7f0000001540)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000015c0), 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000b40)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 1m22.709171587s ago: executing program 7 (id=1425): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x3, 0x40000140, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7/file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) setgid(0x0) 1m22.694043319s ago: executing program 6 (id=1426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x14, &(0x7f0000000c40)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0xb) unshare(0x24020400) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x2800411, &(0x7f00000004c0)=ANY=[], 0x1, 0x1a4, &(0x7f0000000500)="$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") 1m21.61558792s ago: executing program 7 (id=1430): syslog(0x3, &(0x7f0000000340)=""/185, 0x64075da62934d5d1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000940)={0x0, 0xd2}, &(0x7f0000000980)=0x8) 1m21.596078272s ago: executing program 6 (id=1432): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x20000, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000640)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m21.563850355s ago: executing program 6 (id=1433): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3ee0, 0x2, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2000, 0x4, 0x1ff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x2000, 0x4003bfff, 0x2b4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc4ce, 0x10000, 0x3, 0x268}}], 0x1, 0x0, 0x0) 1m21.474457855s ago: executing program 7 (id=1434): ioctl$sock_netdev_private(0xffffffffffffffff, 0x8947, &(0x7f0000000040)="f5") setuid(0xee01) r0 = io_uring_setup(0x1694, &(0x7f0000000580)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/130, 0x82}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2) 1m21.474010384s ago: executing program 7 (id=1435): close(0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x1001}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./security\x00', &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/ima/policy\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='appraise func=FIRMWARE_CHECK', 0x1c) listen(r0, 0x1) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x1, 0x4}, {0x1001, 0x40}}]}}, 0x11) 1m20.727943921s ago: executing program 6 (id=1441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x4, 0x2, 0x1000, 0x7, 0xfffffff9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000780)="05", 0x1, 0x20000005, &(0x7f00000007c0)={0x11, 0x7, r4, 0x1, 0x0, 0x6, @remote}, 0x14) 1m19.747731622s ago: executing program 7 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="070000004000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) sendto$inet(r2, &(0x7f00000008c0)="9400", 0x2, 0x1, 0x0, 0x0) 1m19.649984612s ago: executing program 7 (id=1446): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x23, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000006c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x9}}}}}}, 0x0) 1m5.052548487s ago: executing program 36 (id=1441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x4, 0x2, 0x1000, 0x7, 0xfffffff9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000780)="05", 0x1, 0x20000005, &(0x7f00000007c0)={0x11, 0x7, r4, 0x1, 0x0, 0x6, @remote}, 0x14) 1m4.622538921s ago: executing program 37 (id=1446): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x23, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000006c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x9}}}}}}, 0x0) 2.606653059s ago: executing program 0 (id=2317): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x400, @loopback, 0x7}, 0x1c) listen(r4, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000600)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f0000000640)=ANY=[], 0xfffffdcf) 1.748681538s ago: executing program 0 (id=2332): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0) 1.614553102s ago: executing program 9 (id=2334): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)='ext4\x00', 0x8410, 0x0) removexattr(&(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)=@random={'user.', '\xe3U\xa7j\x11\xa1\xbe\x18'}) 1.614240713s ago: executing program 0 (id=2335): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r0, &(0x7f00000003c0)='27', 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) 1.549282429s ago: executing program 9 (id=2336): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) 1.503775294s ago: executing program 0 (id=2338): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f00000000c0)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1, 0x402009, 0x2) 1.502633034s ago: executing program 0 (id=2339): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x3, 0x40000140, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7/file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) setgid(0x0) 1.415191813s ago: executing program 9 (id=2342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x4, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.393323065s ago: executing program 9 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 1.376179657s ago: executing program 9 (id=2345): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95c, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7b, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x8, 0x3, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x5, 0x1, 0x24, 0x10, 0x5, 0x0, 0xfffffffd, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x2000000, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x4, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x0, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5302, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x526d91, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x6, 0x401, 0x9, 0x6, 0x1, 0xff, 0xd9ef, 0xfffff57d, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x7, 0x400, 0x3, 0x4000009, 0x6, 0x1, 0x3, 0xbc45, 0x48c93690, 0x42], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x43, 0x5, 0x0, 0x1ef, 0x9, 0x8, 0x86, 0x3, 0x303c, 0xfff7fffa, 0xb, 0x3, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2, 0x1000, 0xa6, 0x4, 0xa9, 0xff, 0x0, 0xac8, 0xbf, 0x2000002, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x4, 0x2, 0x120000, 0x807ff, 0x2005, 0x4, 0x1, 0x23], [0xc, 0xf, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x0, 0x3, 0x0, 0x40, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x10000, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x961e, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x70d0, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x203, 0xfffffffa, 0xfff]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 1.337999711s ago: executing program 5 (id=2346): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.304937254s ago: executing program 5 (id=2348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r1, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x80) 1.240124341s ago: executing program 5 (id=2349): r0 = openat$comedi(0xffffff9c, &(0x7f0000001700)='/dev/comedi1\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 1.239968021s ago: executing program 5 (id=2350): ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff0007058102000200070582"], 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 848.082562ms ago: executing program 8 (id=2363): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000280)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x5) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0xf) landlock_restrict_self(r1, 0x14) landlock_restrict_self(r1, 0xc) r2 = landlock_create_ruleset(&(0x7f0000000300)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2) 784.134769ms ago: executing program 8 (id=2364): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 783.871809ms ago: executing program 9 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x14, &(0x7f0000000c40)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0xb) unshare(0x24020400) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x2800411, &(0x7f00000004c0)=ANY=[], 0x1, 0x1a4, &(0x7f0000000500)="$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") 783.552269ms ago: executing program 8 (id=2366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x38, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}}, 0x24008050) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="320000001a0001002abd70000000000081ff80"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000440)={0x0, 0x80000, 0xaaca, 0xffff, 0x0, "87d3514787b8c600004a903184033c6700", 0x0, 0x6}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)=0x84) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 424.110746ms ago: executing program 3 (id=2374): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) 423.904276ms ago: executing program 5 (id=2375): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r0, 0x303, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x4814) 413.235627ms ago: executing program 3 (id=2376): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000040)={'wlan0\x00'}) 364.284622ms ago: executing program 0 (id=2377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0xb) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x2800411, &(0x7f00000004c0)=ANY=[], 0x1, 0x1a4, &(0x7f0000000500)="$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") 96.0815ms ago: executing program 5 (id=2378): syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x407}}}, 0x7) 95.84899ms ago: executing program 3 (id=2379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4c850) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000d00)={&(0x7f0000000d40)={0xa, 0x6, 0x3, @remote}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="6797f04cdb6f338ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) 64.566083ms ago: executing program 3 (id=2380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xb0}}, 0x0) 42.495465ms ago: executing program 8 (id=2381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000005180)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000005200)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004050}, 0x800) 27.383707ms ago: executing program 3 (id=2382): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 436.25µs ago: executing program 8 (id=2383): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000040)) 196.38µs ago: executing program 8 (id=2384): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1}, &(0x7f00000008c0)=ANY=[], 0x0, 0x0) 0s ago: executing program 3 (id=2385): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000580), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000005c0)={0x90000005}) epoll_pwait(r2, &(0x7f0000000600)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) close(r0) kernel console output (not intermixed with test programs): xc0/0x11c [ 114.678267][ T6589] should_failslab+0x10/0x28 [ 114.679261][ T6589] kmem_cache_alloc+0x88/0x310 [ 114.680281][ T6589] proc_net_ns_init+0x58/0x334 [ 114.681251][ T6589] ops_init+0x2b0/0x53c [ 114.682172][ T6589] setup_net+0x494/0xb6c [ 114.683073][ T6589] copy_net_ns+0x2b8/0x578 [ 114.683991][ T6589] create_new_namespaces+0x30c/0x604 [ 114.685131][ T6589] unshare_nsproxy_namespaces+0x108/0x160 [ 114.686256][ T6589] ksys_unshare+0x3f0/0x70c [ 114.687135][ T6589] __arm64_sys_unshare+0x3c/0x50 [ 114.688210][ T6589] invoke_syscall+0x98/0x290 [ 114.689248][ T6589] el0_svc_common+0x13c/0x258 [ 114.690275][ T6589] do_el0_svc+0x5c/0x134 [ 114.691203][ T6589] el0_svc+0x58/0x12c [ 114.692087][ T6589] el0t_64_sync_handler+0x84/0xf0 [ 114.693203][ T6589] el0t_64_sync+0x18c/0x190 [ 121.610796][ T6592] block nbd2: shutting down sockets [ 121.744048][ T6614] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.746537][ T6614] overlayfs: failed to set xattr on upper [ 121.750884][ T6614] overlayfs: ...falling back to index=off,metacopy=off. [ 121.763944][ T6604] loop2: detected capacity change from 0 to 8192 [ 121.798638][ T6604] syz.2.687: attempt to access beyond end of device [ 121.798638][ T6604] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 121.801380][ T6604] Buffer I/O error on dev loop2, logical block 57847, async page read [ 121.812357][ T6604] syz.2.687: attempt to access beyond end of device [ 121.812357][ T6604] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 121.819124][ T6604] Buffer I/O error on dev loop2, logical block 57847, async page read [ 121.829924][ T6604] syz.2.687: attempt to access beyond end of device [ 121.829924][ T6604] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 121.834855][ T6604] Buffer I/O error on dev loop2, logical block 57847, async page read [ 121.847181][ T6604] syz.2.687: attempt to access beyond end of device [ 121.847181][ T6604] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 121.852042][ T6604] Buffer I/O error on dev loop2, logical block 57847, async page read [ 121.853718][ T6604] syz.2.687: attempt to access beyond end of device [ 121.853718][ T6604] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 121.864219][ T6604] Buffer I/O error on dev loop2, logical block 57847, async page read [ 121.873736][ T6628] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 121.875649][ T6628] FAT-fs (loop2): Filesystem has been set read-only [ 121.878402][ T6630] loop6: detected capacity change from 0 to 1024 [ 121.899589][ T6630] EXT4-fs: Ignoring removed oldalloc option [ 121.900921][ T6630] EXT4-fs: Ignoring removed orlov option [ 121.932710][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 121.960239][ T6630] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 121.983040][ T4461] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm kworker/u4:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 121.992384][ T4461] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 121.994602][ T4461] EXT4-fs (loop6): This should not happen!! Data will be lost [ 121.994602][ T4461] [ 122.012586][ T5012] EXT4-fs (loop6): unmounting filesystem. [ 122.077817][ T6645] block nbd6: shutting down sockets [ 122.123504][ T6648] device-mapper: table: 248:6: crypt: Device lookup failed (-ENODEV) [ 122.125467][ T6648] device-mapper: ioctl: error adding target to table [ 122.232074][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.6.700'. [ 122.313172][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.319586][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.637331][ T6661] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.638681][ T6661] overlayfs: failed to set xattr on upper [ 122.639858][ T6661] overlayfs: ...falling back to index=off,metacopy=off. [ 122.700570][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.708'. [ 122.785683][ T6672] device-mapper: table: 248:1: mirror: Device lookup failure (-ENODEV) [ 122.790864][ T6674] loop7: detected capacity change from 0 to 512 [ 122.791833][ T6672] device-mapper: ioctl: error adding target to table [ 122.799861][ T6674] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 122.888316][ T6678] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.889737][ T6678] overlayfs: failed to set xattr on upper [ 122.890871][ T6678] overlayfs: ...falling back to index=off,metacopy=off. [ 123.036652][ T6674] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 123.115856][ T6674] System zones: 0-2, 18-18, 34-34 [ 123.123582][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.712'. [ 123.136655][ T6674] EXT4-fs (loop7): 1 orphan inode deleted [ 123.140305][ T6674] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 123.207229][ T5040] EXT4-fs (loop7): unmounting filesystem. [ 123.437388][ T6702] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.439201][ T6702] overlayfs: failed to set xattr on upper [ 123.440433][ T6702] overlayfs: ...falling back to index=off,metacopy=off. [ 123.698585][ T6705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.722'. [ 123.778354][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.724'. [ 123.962088][ T6715] netlink: 28 bytes leftover after parsing attributes in process `syz.6.725'. [ 124.199737][ T6722] loop5: detected capacity change from 0 to 8 [ 124.483781][ T6731] loop7: detected capacity change from 0 to 1024 [ 124.485757][ T6731] EXT4-fs: Ignoring removed bh option [ 124.514251][ T6731] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 124.590287][ T5040] EXT4-fs (loop7): unmounting filesystem. [ 124.854673][ T6754] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.856132][ T6754] overlayfs: failed to set xattr on upper [ 124.857253][ T6754] overlayfs: ...falling back to index=off,metacopy=off. [ 125.425825][ T6760] device-mapper: table: 248:6: verity: Device must be readonly (-EINVAL) [ 125.427907][ T6760] device-mapper: ioctl: error adding target to table [ 125.872717][ T6781] loop6: detected capacity change from 0 to 256 [ 125.882318][ T6784] loop2: detected capacity change from 0 to 512 [ 125.896698][ T6781] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 125.946541][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.948294][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.022530][ T6797] netlink: 'syz.7.745': attribute type 10 has an invalid length. [ 126.024651][ T6797] netlink: 55 bytes leftover after parsing attributes in process `syz.7.745'. [ 126.778618][ T6829] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 126.780189][ T6829] overlayfs: failed to set xattr on upper [ 126.781473][ T6829] overlayfs: ...falling back to index=off,metacopy=off. [ 127.197730][ T6844] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 127.199473][ T6844] overlayfs: failed to set xattr on upper [ 127.200857][ T6844] overlayfs: ...falling back to index=off,metacopy=off. [ 127.955156][ T6864] device syzkaller0 entered promiscuous mode [ 128.051972][ T6880] loop2: detected capacity change from 0 to 512 [ 128.440886][ T6887] loop6: detected capacity change from 0 to 256 [ 128.494240][ T6887] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 128.503913][ T6887] netlink: 72 bytes leftover after parsing attributes in process `syz.6.761'. [ 129.211137][ T6915] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.212629][ T6915] overlayfs: failed to set xattr on upper [ 129.213672][ T6915] overlayfs: ...falling back to index=off,metacopy=off. [ 129.986045][ T6927] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.987616][ T6927] overlayfs: failed to set xattr on upper [ 129.988929][ T6927] overlayfs: ...falling back to index=off,metacopy=off. [ 130.133422][ T6929] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.135244][ T6929] overlayfs: failed to set xattr on upper [ 130.136679][ T6929] overlayfs: ...falling back to index=off,metacopy=off. [ 132.946650][ T6998] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 132.948094][ T6998] overlayfs: failed to set xattr on upper [ 132.949266][ T6998] overlayfs: ...falling back to index=off,metacopy=off. [ 133.286995][ T6934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.818913][ T7009] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 133.820207][ T7009] overlayfs: failed to set xattr on upper [ 133.821264][ T7009] overlayfs: ...falling back to index=off,metacopy=off. [ 133.834004][ T7008] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 133.835328][ T7008] overlayfs: failed to set xattr on upper [ 133.836520][ T7008] overlayfs: ...falling back to index=off,metacopy=off. [ 133.895966][ T7018] loop5: detected capacity change from 0 to 512 [ 134.258707][ T7022] netlink: 72 bytes leftover after parsing attributes in process `syz.0.791'. [ 134.766292][ T4411] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 134.769761][ T4411] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.910084][ T7059] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 135.911835][ T7059] overlayfs: failed to set xattr on upper [ 135.913010][ T7059] overlayfs: ...falling back to index=off,metacopy=off. [ 136.609044][ T7070] loop2: detected capacity change from 0 to 512 [ 136.851711][ T7072] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 136.853110][ T7072] overlayfs: failed to set xattr on upper [ 136.854164][ T7072] overlayfs: ...falling back to index=off,metacopy=off. [ 136.863328][ T7071] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 136.864713][ T7071] overlayfs: failed to set xattr on upper [ 136.865871][ T7071] overlayfs: ...falling back to index=off,metacopy=off. [ 138.315636][ T7103] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.323872][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.813'. [ 138.344369][ T7103] Could not find key with description: [syz] [ 138.346855][ T7103] process_request_key_err: No key [ 138.347747][ T7103] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 138.355593][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.814'. [ 138.358604][ T7103] One or more global auth toks could not properly register; rc = [-2] [ 138.360576][ T7103] Error parsing options; rc = [-2] [ 138.731180][ T7113] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 138.732750][ T7113] overlayfs: failed to set xattr on upper [ 138.733750][ T7113] overlayfs: ...falling back to index=off,metacopy=off. [ 139.116460][ T7126] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.117950][ T7126] overlayfs: failed to set xattr on upper [ 139.119114][ T7126] overlayfs: ...falling back to index=off,metacopy=off. [ 139.131500][ T7129] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.132931][ T7129] overlayfs: failed to set xattr on upper [ 139.134077][ T7129] overlayfs: ...falling back to index=off,metacopy=off. [ 139.162068][ T7131] loop5: detected capacity change from 0 to 512 [ 139.368984][ T7140] FAULT_INJECTION: forcing a failure. [ 139.368984][ T7140] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.371969][ T7140] CPU: 1 PID: 7140 Comm: syz.7.825 Not tainted syzkaller #0 [ 139.373334][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 139.375311][ T7140] Call trace: [ 139.375922][ T7140] dump_backtrace+0x1c4/0x1f0 [ 139.376906][ T7140] show_stack+0x2c/0x3c [ 139.377815][ T7140] __dump_stack+0x30/0x40 [ 139.378809][ T7140] dump_stack_lvl+0xf4/0x15c [ 139.379865][ T7140] dump_stack+0x1c/0x5c [ 139.380853][ T7140] should_fail_ex+0x3cc/0x524 [ 139.381967][ T7140] should_fail+0x14/0x24 [ 139.382925][ T7140] should_fail_usercopy+0x20/0x30 [ 139.383993][ T7140] ucma_set_option+0xe8/0xa04 [ 139.384915][ T7140] ucma_write+0x2b8/0x39c [ 139.385827][ T7140] vfs_write+0x2a8/0x7c8 [ 139.386702][ T7140] ksys_write+0x12c/0x228 [ 139.387593][ T7140] __arm64_sys_write+0x7c/0x90 [ 139.388636][ T7140] invoke_syscall+0x98/0x290 [ 139.389566][ T7140] el0_svc_common+0x13c/0x258 [ 139.390526][ T7140] do_el0_svc+0x5c/0x134 [ 139.391441][ T7140] el0_svc+0x58/0x12c [ 139.392248][ T7140] el0t_64_sync_handler+0x84/0xf0 [ 139.393306][ T7140] el0t_64_sync+0x18c/0x190 [ 139.935280][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.827'. [ 140.622582][ T7170] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.624125][ T7170] overlayfs: failed to set xattr on upper [ 140.625393][ T7170] overlayfs: ...falling back to index=off,metacopy=off. [ 140.985914][ T7167] netlink: 72 bytes leftover after parsing attributes in process `syz.0.829'. [ 141.438019][ T7184] loop6: detected capacity change from 0 to 512 [ 141.536578][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'. [ 141.607060][ T7189] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 141.608615][ T7189] overlayfs: failed to set xattr on upper [ 141.609927][ T7189] overlayfs: ...falling back to index=off,metacopy=off. [ 142.844741][ T7214] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 142.846443][ T7214] overlayfs: failed to set xattr on upper [ 142.847769][ T7214] overlayfs: ...falling back to index=off,metacopy=off. [ 143.434065][ T7216] FAULT_INJECTION: forcing a failure. [ 143.434065][ T7216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.446242][ T7216] CPU: 0 PID: 7216 Comm: syz.6.850 Not tainted syzkaller #0 [ 143.447904][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 143.450288][ T7216] Call trace: [ 143.451041][ T7216] dump_backtrace+0x1c4/0x1f0 [ 143.452013][ T7216] show_stack+0x2c/0x3c [ 143.452908][ T7216] __dump_stack+0x30/0x40 [ 143.453871][ T7216] dump_stack_lvl+0xf4/0x15c [ 143.454906][ T7216] dump_stack+0x1c/0x5c [ 143.455785][ T7216] should_fail_ex+0x3cc/0x524 [ 143.456794][ T7216] should_fail+0x14/0x24 [ 143.457704][ T7216] should_fail_usercopy+0x20/0x30 [ 143.458770][ T7216] ucma_set_option+0xe8/0xa04 [ 143.459764][ T7216] ucma_write+0x2b8/0x39c [ 143.460682][ T7216] vfs_write+0x2a8/0x7c8 [ 143.461582][ T7216] ksys_write+0x12c/0x228 [ 143.462539][ T7216] __arm64_sys_write+0x7c/0x90 [ 143.463602][ T7216] invoke_syscall+0x98/0x290 [ 143.464607][ T7216] el0_svc_common+0x13c/0x258 [ 143.465640][ T7216] do_el0_svc+0x5c/0x134 [ 143.466569][ T7216] el0_svc+0x58/0x12c [ 143.467509][ T7216] el0t_64_sync_handler+0x84/0xf0 [ 143.468616][ T7216] el0t_64_sync+0x18c/0x190 [ 143.857811][ T7227] loop6: detected capacity change from 0 to 512 [ 143.859650][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.7.852'. [ 144.137291][ T7232] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 144.139039][ T7232] overlayfs: failed to set xattr on upper [ 144.140256][ T7232] overlayfs: ...falling back to index=off,metacopy=off. [ 144.423462][ T7238] tun0: tun_chr_ioctl cmd 1074025673 [ 145.662400][ T7262] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 145.664025][ T7262] overlayfs: failed to set xattr on upper [ 145.665226][ T7262] overlayfs: ...falling back to index=off,metacopy=off. [ 146.813447][ T7283] loop2: detected capacity change from 0 to 512 [ 147.015805][ T7292] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 147.017526][ T7292] overlayfs: failed to set xattr on upper [ 147.018883][ T7292] overlayfs: ...falling back to index=off,metacopy=off. [ 147.258053][ T7294] netlink: 72 bytes leftover after parsing attributes in process `syz.0.873'. [ 148.309872][ T7317] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.311486][ T7317] overlayfs: failed to set xattr on upper [ 148.312776][ T7317] overlayfs: ...falling back to index=off,metacopy=off. [ 149.405443][ T7339] loop6: detected capacity change from 0 to 512 [ 149.922479][ T7348] device-mapper: table: 248:7: verity: Device must be readonly (-EINVAL) [ 149.924542][ T7348] device-mapper: ioctl: error adding target to table [ 151.055208][ T7376] loop7: detected capacity change from 0 to 8 [ 152.069075][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.404112][ T7410] netlink: 132 bytes leftover after parsing attributes in process `syz.2.911'. [ 152.521112][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.332161][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.398981][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.716076][ T4334] Bluetooth: hci4: command 0x0406 tx timeout [ 153.717598][ T4348] Bluetooth: hci3: command 0x0406 tx timeout [ 153.813883][ T7431] loop5: detected capacity change from 0 to 256 [ 153.904285][ T7431] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 153.923706][ T7431] netlink: 72 bytes leftover after parsing attributes in process `syz.5.917'. [ 154.129727][ T7452] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 154.131144][ T7452] overlayfs: failed to set xattr on upper [ 154.132410][ T7452] overlayfs: ...falling back to index=off,metacopy=off. [ 155.084676][ T7477] netlink: 132 bytes leftover after parsing attributes in process `syz.7.927'. [ 156.399804][ T7510] FAULT_INJECTION: forcing a failure. [ 156.399804][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 156.402816][ T7510] CPU: 0 PID: 7510 Comm: syz.0.936 Not tainted syzkaller #0 [ 156.404232][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 156.406380][ T7510] Call trace: [ 156.407026][ T7510] dump_backtrace+0x1c4/0x1f0 [ 156.407975][ T7510] show_stack+0x2c/0x3c [ 156.408824][ T7510] __dump_stack+0x30/0x40 [ 156.409706][ T7510] dump_stack_lvl+0xf4/0x15c [ 156.410613][ T7510] dump_stack+0x1c/0x5c [ 156.411496][ T7510] should_fail_ex+0x3cc/0x524 [ 156.412487][ T7510] __should_failslab+0xc0/0x11c [ 156.413430][ T7510] should_failslab+0x10/0x28 [ 156.414379][ T7510] kmem_cache_alloc+0x88/0x310 [ 156.415363][ T7510] __sigqueue_alloc+0x3e0/0x4e4 [ 156.416362][ T7510] __send_signal_locked+0x1d8/0xc88 [ 156.417324][ T7510] do_notify_parent+0x9bc/0xbe4 [ 156.418185][ T7510] release_task+0x11d0/0x1510 [ 156.419204][ T7510] do_exit+0x10bc/0x19ac [ 156.420150][ T7510] do_group_exit+0x198/0x238 [ 156.421197][ T7510] get_signal+0x11f4/0x133c [ 156.422084][ T7510] do_notify_resume+0x364/0x2c84 [ 156.423090][ T7510] el0_svc+0x9c/0x12c [ 156.423869][ T7510] el0t_64_sync_handler+0x84/0xf0 [ 156.424935][ T7510] el0t_64_sync+0x18c/0x190 [ 157.443986][ T7538] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 157.445636][ T7538] overlayfs: failed to set xattr on upper [ 157.446919][ T7538] overlayfs: ...falling back to index=off,metacopy=off. [ 157.907305][ T7554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.943'. [ 158.615785][ T7568] FAULT_INJECTION: forcing a failure. [ 158.615785][ T7568] name failslab, interval 1, probability 0, space 0, times 0 [ 158.623963][ T7568] CPU: 0 PID: 7568 Comm: syz.6.948 Not tainted syzkaller #0 [ 158.625518][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 158.627560][ T7568] Call trace: [ 158.628237][ T7568] dump_backtrace+0x1c4/0x1f0 [ 158.629109][ T7568] show_stack+0x2c/0x3c [ 158.629980][ T7568] __dump_stack+0x30/0x40 [ 158.630914][ T7568] dump_stack_lvl+0xf4/0x15c [ 158.631855][ T7568] dump_stack+0x1c/0x5c [ 158.632779][ T7568] should_fail_ex+0x3cc/0x524 [ 158.633758][ T7568] __should_failslab+0xc0/0x11c [ 158.634826][ T7568] should_failslab+0x10/0x28 [ 158.635911][ T7568] __kmem_cache_alloc_node+0x7c/0x318 [ 158.637089][ T7568] kmalloc_trace+0x48/0x94 [ 158.638052][ T7568] vidtv_mux_init+0x5d4/0x1554 [ 158.639039][ T7568] vidtv_start_feed+0x2e0/0x49c [ 158.640000][ T7568] dmx_section_feed_start_filtering+0x328/0x464 [ 158.641349][ T7568] dvb_dmxdev_filter_start+0xafc/0xf10 [ 158.642493][ T7568] dvb_dmxdev_filter_set+0x2cc/0x57c [ 158.643619][ T7568] dvb_demux_do_ioctl+0x410/0x4d8 [ 158.644701][ T7568] dvb_usercopy+0x248/0x45c [ 158.645653][ T7568] dvb_demux_ioctl+0x3c/0x54 [ 158.646552][ T7568] __arm64_sys_ioctl+0x14c/0x1c8 [ 158.647547][ T7568] invoke_syscall+0x98/0x290 [ 158.648552][ T7568] el0_svc_common+0x13c/0x258 [ 158.649613][ T7568] do_el0_svc+0x5c/0x134 [ 158.650512][ T7568] el0_svc+0x58/0x12c [ 158.651379][ T7568] el0t_64_sync_handler+0x84/0xf0 [ 158.652461][ T7568] el0t_64_sync+0x18c/0x190 [ 159.304991][ T7591] overlayfs: failed to resolve './file1': -2 [ 159.644435][ T11] device hsr_slave_0 left promiscuous mode [ 159.678424][ T11] device hsr_slave_1 left promiscuous mode [ 159.790155][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.791680][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.793986][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.795363][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.800938][ T11] device bridge_slave_1 left promiscuous mode [ 159.802380][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.803680][ T7608] loop7: detected capacity change from 0 to 512 [ 159.853600][ T11] device bridge_slave_0 left promiscuous mode [ 159.860701][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.893872][ T7610] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 159.895547][ T7610] overlayfs: failed to set xattr on upper [ 159.896991][ T7610] overlayfs: ...falling back to index=off,metacopy=off. [ 160.212522][ T7617] loop6: detected capacity change from 0 to 2048 [ 160.226368][ T11] device veth1_macvtap left promiscuous mode [ 160.230048][ T11] device veth0_macvtap left promiscuous mode [ 160.232422][ T11] device veth1_vlan left promiscuous mode [ 160.234167][ T11] device veth0_vlan left promiscuous mode [ 160.250634][ T7617] loop6: p1 < > p4 [ 160.253117][ T7617] loop6: p4 size 722688 extends beyond EOD, truncated [ 160.318492][ T6793] udevd[6793]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 160.320644][ T7440] udevd[7440]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 160.405199][ T7623] netlink: 132 bytes leftover after parsing attributes in process `syz.5.961'. [ 161.602478][ T7651] overlayfs: failed to resolve './file1': -2 [ 161.970758][ T7660] loop2: detected capacity change from 0 to 256 [ 162.008430][ T7660] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 162.012959][ T7660] netlink: 72 bytes leftover after parsing attributes in process `syz.2.971'. [ 162.675907][ T7670] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 162.677634][ T7670] overlayfs: failed to set xattr on upper [ 162.678829][ T7670] overlayfs: ...falling back to index=off,metacopy=off. [ 163.151648][ T7672] loop5: detected capacity change from 0 to 512 [ 163.474325][ T7677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.977'. [ 165.142419][ T7699] FAULT_INJECTION: forcing a failure. [ 165.142419][ T7699] name fail_futex, interval 1, probability 0, space 0, times 1 [ 165.145450][ T7699] CPU: 1 PID: 7699 Comm: syz.5.984 Not tainted syzkaller #0 [ 165.147001][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 165.149043][ T7699] Call trace: [ 165.149735][ T7699] dump_backtrace+0x1c4/0x1f0 [ 165.150630][ T7699] show_stack+0x2c/0x3c [ 165.151474][ T7699] __dump_stack+0x30/0x40 [ 165.152367][ T7699] dump_stack_lvl+0xf4/0x15c [ 165.153262][ T7699] dump_stack+0x1c/0x5c [ 165.154124][ T7699] should_fail_ex+0x3cc/0x524 [ 165.155064][ T7699] should_fail+0x14/0x24 [ 165.155898][ T7699] get_futex_key+0x904/0xec0 [ 165.156864][ T7699] futex_wake+0x10c/0x458 [ 165.157739][ T7699] do_futex+0x2c4/0x340 [ 165.158564][ T7699] mm_release+0x190/0x274 [ 165.159398][ T7699] exit_mm_release+0x30/0x40 [ 165.160284][ T7699] exit_mm+0x50/0x290 [ 165.161039][ T7699] do_exit+0x4d0/0x19ac [ 165.161785][ T7699] do_group_exit+0x198/0x238 [ 165.162700][ T7699] get_signal+0x11f4/0x133c [ 165.163617][ T7699] do_notify_resume+0x364/0x2c84 [ 165.164660][ T7699] el0_svc+0x9c/0x12c [ 165.165497][ T7699] el0t_64_sync_handler+0x84/0xf0 [ 165.166555][ T7699] el0t_64_sync+0x18c/0x190 [ 165.208684][ T11] team0 (unregistering): Port device team_slave_1 removed [ 165.367801][ T11] team0 (unregistering): Port device team_slave_0 removed [ 165.508146][ T7710] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.550136][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.597451][ T7711] Could not find key with description: [syz] [ 165.598733][ T7711] process_request_key_err: No key [ 165.599603][ T7711] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 165.601675][ T7711] One or more global auth toks could not properly register; rc = [-2] [ 165.604319][ T7711] Error parsing options; rc = [-2] [ 165.759854][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.182348][ T7726] netlink: 72 bytes leftover after parsing attributes in process `syz.0.992'. [ 167.657141][ T11] bond0 (unregistering): Released all slaves [ 167.965920][ T7707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.987398][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 168.084642][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 168.184532][ T48] block nbd7: Receive control failed (result -107) [ 168.187819][ T7736] nbd7: detected capacity change from 0 to 131074 [ 168.189901][ T52] block nbd7: Dead connection, failed to find a fallback [ 168.191225][ T52] block nbd7: shutting down sockets [ 168.192098][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.193579][ T52] Buffer I/O error on dev nbd7, logical block 0, async page read [ 168.195442][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.197172][ T52] Buffer I/O error on dev nbd7, logical block 0, async page read [ 168.199627][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.201234][ T52] Buffer I/O error on dev nbd7, logical block 0, async page read [ 168.202998][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.204931][ T52] Buffer I/O error on dev nbd7, logical block 0, async page read [ 168.397068][ T7750] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 168.398536][ T7750] overlayfs: failed to set xattr on upper [ 168.399690][ T7750] overlayfs: ...falling back to index=off,metacopy=off. [ 168.401080][ T7750] overlayfs: failed to resolve './file0': -2 [ 168.418941][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.420904][ T52] Buffer I/O error on dev nbd7, logical block 0, async page read [ 168.422814][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.424706][ T52] Buffer I/O error on dev nbd7, logical block 0, async page read [ 168.426574][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.428436][ T52] Buffer I/O error on dev nbd7, logical block 0, async page read [ 168.430142][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.432114][ T52] Buffer I/O error on dev nbd7, logical block 0, async page read [ 168.434869][ T7727] ldm_validate_partition_table(): Disk read failed. [ 168.439596][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.441287][ T52] Buffer I/O error on dev nbd7, logical block 0, async page read [ 168.443113][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.445103][ T52] Buffer I/O error on dev nbd7, logical block 0, async page read [ 168.446843][ T7727] Dev nbd7: unable to read RDB block 0 [ 168.449442][ T7727] nbd7: unable to read partition table [ 168.462845][ T7727] ldm_validate_partition_table(): Disk read failed. [ 168.465160][ T7727] Dev nbd7: unable to read RDB block 0 [ 168.476727][ T7727] nbd7: unable to read partition table [ 168.518832][ T7760] loop7: detected capacity change from 0 to 512 [ 169.022744][ T7787] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1000'. [ 169.025123][ T7785] loop2: detected capacity change from 0 to 512 [ 169.094453][ T7785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 169.225681][ T7795] loop6: detected capacity change from 0 to 8 [ 169.240860][ T4341] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 169.253906][ T4341] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 169.732969][ T7809] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.866536][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1008'. [ 170.252232][ T7823] Could not find key with description: [syz] [ 170.253612][ T7823] process_request_key_err: No key [ 170.254653][ T7823] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 170.258588][ T7823] One or more global auth toks could not properly register; rc = [-2] [ 170.260467][ T7823] Error parsing options; rc = [-2] [ 170.269312][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 170.290327][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 170.311780][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.400927][ T7845] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1013'. [ 170.460097][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.473965][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.491825][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.495056][ T4334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.497982][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.499985][ T4334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.501679][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.561638][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.664361][ T7869] loop7: detected capacity change from 0 to 4096 [ 170.677443][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.681358][ T7848] rxe_eth0 speed is unknown, defaulting to 1000 [ 170.759662][ T7869] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 170.889037][ T4334] block nbd5: Receive control failed (result -107) [ 170.890601][ T7886] nbd5: detected capacity change from 0 to 131074 [ 170.892952][ T7885] block nbd5: shutting down sockets [ 170.901893][ T7884] capability: warning: `syz.7.1019' uses deprecated v2 capabilities in a way that may be insecure [ 171.006048][ T7848] chnl_net:caif_netlink_parms(): no params data found [ 171.011986][ T7895] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 171.312692][ T7913] netlink: 'syz.5.1026': attribute type 8 has an invalid length. [ 171.314963][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1026'. [ 171.332338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 171.389362][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.392694][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.394840][ T7848] device bridge_slave_0 entered promiscuous mode [ 171.401934][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.404675][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.407157][ T7848] device bridge_slave_1 entered promiscuous mode [ 171.480181][ T5040] EXT4-fs (loop7): unmounting filesystem. [ 171.492438][ T7848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.501053][ T7848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.645491][ T7848] team0: Port device team_slave_0 added [ 171.655852][ T7848] team0: Port device team_slave_1 added [ 171.754249][ T7941] loop6: detected capacity change from 0 to 8 [ 172.021938][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.025536][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.037522][ T7848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.040494][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.041979][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.065920][ T7848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.138140][ T7848] device hsr_slave_0 entered promiscuous mode [ 172.180035][ T7848] device hsr_slave_1 entered promiscuous mode [ 172.441702][ T7848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.446066][ T7848] Cannot create hsr debugfs directory [ 172.596234][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 172.639799][ T7968] netlink: 'syz.7.1037': attribute type 8 has an invalid length. [ 172.641549][ T7968] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1037'. [ 172.708502][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 172.836805][ T7848] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 173.078537][ T8004] loop5: detected capacity change from 0 to 8 [ 173.304549][ T7848] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 173.339040][ T7848] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 173.420465][ T8010] Injecting memory failure for pfn 0x1474ab at process virtual address 0x20000000 [ 173.422701][ T8010] Memory failure: 0x1474ab: recovery action for dirty LRU page: Recovered [ 173.424613][ T8010] Injecting memory failure for pfn 0x20ebcb at process virtual address 0x20001000 [ 173.426858][ T8010] Memory failure: 0x20ebcb: already hardware poisoned [ 173.639842][ T7848] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 174.367969][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.373375][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.375346][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.417264][ T8040] overlayfs: failed to clone lowerpath [ 174.525377][ T11] device hsr_slave_0 left promiscuous mode [ 174.625592][ T8051] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.646548][ T11] device hsr_slave_1 left promiscuous mode [ 174.726240][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 174.866895][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.871819][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.874662][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.878505][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.882418][ T11] device bridge_slave_1 left promiscuous mode [ 174.888268][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.926687][ T11] device bridge_slave_0 left promiscuous mode [ 174.928370][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.126227][ T11] device veth1_macvtap left promiscuous mode [ 175.127796][ T11] device veth0_macvtap left promiscuous mode [ 175.129478][ T11] device veth1_vlan left promiscuous mode [ 175.132397][ T11] device veth0_vlan left promiscuous mode [ 175.523464][ T8068] loop6: detected capacity change from 0 to 8 [ 176.223424][ T27] audit: type=1326 audit(176.190:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.6.1066" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979728 code=0x7ffc0000 [ 176.228162][ T27] audit: type=1326 audit(176.190:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.6.1066" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979728 code=0x7ffc0000 [ 176.234354][ T27] audit: type=1326 audit(176.200:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.6.1066" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffaa979728 code=0x7ffc0000 [ 176.242491][ T27] audit: type=1326 audit(176.200:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.6.1066" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979728 code=0x7ffc0000 [ 176.249350][ T27] audit: type=1326 audit(176.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.6.1066" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979728 code=0x7ffc0000 [ 176.253396][ T27] audit: type=1326 audit(176.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.6.1066" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffaa979728 code=0x7ffc0000 [ 176.261884][ T27] audit: type=1326 audit(176.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.6.1066" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979728 code=0x7ffc0000 [ 176.265954][ T27] audit: type=1326 audit(176.210:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.6.1066" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979728 code=0x7ffc0000 [ 176.271718][ T27] audit: type=1326 audit(176.210:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.6.1066" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffffaa979728 code=0x7ffc0000 [ 176.279608][ T27] audit: type=1326 audit(176.210:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.6.1066" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979728 code=0x7ffc0000 [ 176.746156][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 177.789302][ T8094] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 178.166149][ T8101] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1075'. [ 178.377155][ T11] team0 (unregistering): Port device team_slave_1 removed [ 178.805031][ T11] team0 (unregistering): Port device team_slave_0 removed [ 178.856915][ T4334] Bluetooth: hci0: command 0x0419 tx timeout [ 179.116567][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.338110][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.454200][ T8135] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.818668][ T8139] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1087'. [ 182.052672][ T11] bond0 (unregistering): Released all slaves [ 182.370014][ T7848] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.374165][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.377497][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.379193][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.402662][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.419833][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.435155][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.436684][ T6529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.487449][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.489530][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.491376][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.493436][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.494948][ T6529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.505476][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.522449][ T7848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.525022][ T7848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.528288][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.530665][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.533193][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.535810][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.538342][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.540800][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.542827][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.544927][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.547487][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.552685][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.554611][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.682215][ T8163] loop7: detected capacity change from 0 to 8 [ 183.015717][ T7848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.019212][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.020889][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.964574][ T8199] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 183.966104][ T8199] overlayfs: failed to set xattr on upper [ 183.967314][ T8199] overlayfs: ...falling back to index=off,metacopy=off. [ 184.330248][ T8214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1102'. [ 184.347590][ T48] Bluetooth: hci7: command 0x0406 tx timeout [ 184.349641][ T4348] Bluetooth: hci5: command 0x0406 tx timeout [ 184.352231][ T4334] Bluetooth: hci6: command 0x0406 tx timeout [ 184.719652][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.721731][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.737311][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.739244][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.752462][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.757796][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.765215][ T7848] device veth0_vlan entered promiscuous mode [ 184.772373][ T7848] device veth1_vlan entered promiscuous mode [ 184.826434][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.828456][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.830130][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.834404][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.845608][ T7848] device veth0_macvtap entered promiscuous mode [ 184.850174][ T7848] device veth1_macvtap entered promiscuous mode [ 184.865007][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.874544][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.876740][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.878761][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.880707][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.882786][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.891331][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.893351][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.897440][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.899533][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.903239][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.904818][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.911219][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.913208][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.915500][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.919486][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.921695][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.923783][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.931079][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.933184][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.935203][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.938747][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.156107][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.207647][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.265712][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.275577][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.282420][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.284506][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.289210][ T7848] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.290991][ T7848] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.295573][ T7848] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.299240][ T7848] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.380808][ T7684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.383416][ T7684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.388629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.402462][ T7684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.404268][ T7684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.406055][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.750152][ T8252] loop6: detected capacity change from 0 to 512 [ 185.819582][ T8255] FAULT_INJECTION: forcing a failure. [ 185.819582][ T8255] name failslab, interval 1, probability 0, space 0, times 0 [ 185.829263][ T8255] CPU: 1 PID: 8255 Comm: syz.5.1111 Not tainted syzkaller #0 [ 185.830708][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 185.832759][ T8255] Call trace: [ 185.833437][ T8255] dump_backtrace+0x1c4/0x1f0 [ 185.834417][ T8255] show_stack+0x2c/0x3c [ 185.835377][ T8255] __dump_stack+0x30/0x40 [ 185.836212][ T8255] dump_stack_lvl+0xf4/0x15c [ 185.837211][ T8255] dump_stack+0x1c/0x5c [ 185.838173][ T8255] should_fail_ex+0x3cc/0x524 [ 185.839212][ T8255] __should_failslab+0xc0/0x11c [ 185.840251][ T8255] should_failslab+0x10/0x28 [ 185.841239][ T8255] __kmem_cache_alloc_node+0x7c/0x318 [ 185.842341][ T8255] __kmalloc+0xc4/0x180 [ 185.843236][ T8255] sock_kmalloc+0xb0/0x158 [ 185.844131][ T8255] tcp_md5_do_add+0x2f8/0x60c [ 185.845038][ T8255] tcp_v6_parse_md5_keys+0x500/0x624 [ 185.846191][ T8255] do_tcp_setsockopt+0x9e8/0x1948 [ 185.847310][ T8255] tcp_setsockopt+0x68/0xe8 [ 185.848268][ T8255] sock_common_setsockopt+0xb0/0xcc [ 185.849370][ T8255] __sys_setsockopt+0x2fc/0x50c [ 185.850427][ T8255] __arm64_sys_setsockopt+0xc0/0xdc [ 185.851503][ T8255] invoke_syscall+0x98/0x290 [ 185.852538][ T8255] el0_svc_common+0x13c/0x258 [ 185.853581][ T8255] do_el0_svc+0x5c/0x134 [ 185.854515][ T8255] el0_svc+0x58/0x12c [ 185.855408][ T8255] el0t_64_sync_handler+0x84/0xf0 [ 185.856505][ T8255] el0t_64_sync+0x18c/0x190 [ 185.861145][ T8143] blk_print_req_error: 24 callbacks suppressed [ 185.861161][ T8143] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 186.681318][ T8291] syz.6.1123 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 186.710180][ T8295] loop6: detected capacity change from 0 to 128 [ 187.446557][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.453523][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.633357][ T8320] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1129'. [ 187.751767][ T8331] loop6: detected capacity change from 0 to 8 [ 188.472382][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1135'. [ 189.039756][ T8377] loop7: detected capacity change from 0 to 256 [ 189.232171][ T8377] FAT-fs (loop7): Directory bread(block 1285) failed [ 189.274767][ T8377] FAT-fs (loop7): Directory bread(block 1286) failed [ 189.437417][ T8377] FAT-fs (loop7): Directory bread(block 1287) failed [ 189.439223][ T8377] FAT-fs (loop7): Directory bread(block 1288) failed [ 189.473908][ T8377] FAT-fs (loop7): Directory bread(block 1285) failed [ 189.492577][ T8377] FAT-fs (loop7): Directory bread(block 1286) failed [ 189.494058][ T8377] FAT-fs (loop7): Directory bread(block 1287) failed [ 189.512330][ T8377] FAT-fs (loop7): Directory bread(block 1288) failed [ 189.514119][ T8377] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 189.787523][ T8399] loop8: detected capacity change from 0 to 8 [ 190.079302][ T8404] loop6: detected capacity change from 0 to 512 [ 190.187069][ T8143] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.525100][ T8392] loop7: detected capacity change from 0 to 8 [ 192.646100][ T8495] loop7: detected capacity change from 0 to 8 [ 192.933478][ T8498] loop8: detected capacity change from 0 to 512 [ 193.111323][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1165'. [ 193.866245][ T8523] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 193.867975][ T8523] overlayfs: failed to set xattr on upper [ 193.869088][ T8523] overlayfs: ...falling back to index=off,metacopy=off. [ 194.619536][ T8542] loop5: detected capacity change from 0 to 8 [ 195.522865][ T8563] loop7: detected capacity change from 0 to 512 [ 195.743233][ T8574] loop8: detected capacity change from 0 to 8 [ 196.184922][ T8580] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 196.186941][ T8580] overlayfs: failed to set xattr on upper [ 196.188295][ T8580] overlayfs: ...falling back to index=off,metacopy=off. [ 196.767320][ T8595] loop7: detected capacity change from 0 to 256 [ 196.791832][ T8595] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 197.063197][ T8602] loop6: detected capacity change from 0 to 8 [ 197.423377][ T8610] loop5: detected capacity change from 0 to 512 [ 197.640182][ T8618] loop8: detected capacity change from 0 to 8 [ 198.052065][ T8143] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.676367][ T8641] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 198.677910][ T8641] overlayfs: failed to set xattr on upper [ 198.679078][ T8641] overlayfs: ...falling back to index=off,metacopy=off. [ 199.675347][ T8691] loop8: detected capacity change from 0 to 8 [ 200.475782][ T8705] loop5: detected capacity change from 0 to 8 [ 200.615106][ T8707] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 200.616676][ T8707] overlayfs: failed to set xattr on upper [ 200.617833][ T8707] overlayfs: ...falling back to index=off,metacopy=off. [ 201.213612][ T8724] FAULT_INJECTION: forcing a failure. [ 201.213612][ T8724] name failslab, interval 1, probability 0, space 0, times 0 [ 201.217780][ T8724] CPU: 1 PID: 8724 Comm: syz.7.1219 Not tainted syzkaller #0 [ 201.219464][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 201.221681][ T8724] Call trace: [ 201.222429][ T8724] dump_backtrace+0x1c4/0x1f0 [ 201.223516][ T8724] show_stack+0x2c/0x3c [ 201.224372][ T8724] __dump_stack+0x30/0x40 [ 201.225349][ T8724] dump_stack_lvl+0xf4/0x15c [ 201.226443][ T8724] dump_stack+0x1c/0x5c [ 201.227443][ T8724] should_fail_ex+0x3cc/0x524 [ 201.228557][ T8724] __should_failslab+0xc0/0x11c [ 201.229656][ T8724] should_failslab+0x10/0x28 [ 201.230745][ T8724] __kmem_cache_alloc_node+0x7c/0x318 [ 201.232018][ T8724] __kmalloc+0xc4/0x180 [ 201.232992][ T8724] sock_kmalloc+0xb0/0x158 [ 201.233960][ T8724] tcp_md5_do_add+0x2f8/0x60c [ 201.234990][ T8724] tcp_v6_parse_md5_keys+0x500/0x624 [ 201.236159][ T8724] do_tcp_setsockopt+0x9e8/0x1948 [ 201.237286][ T8724] tcp_setsockopt+0x68/0xe8 [ 201.238270][ T8724] sock_common_setsockopt+0xb0/0xcc [ 201.239468][ T8724] __sys_setsockopt+0x2fc/0x50c [ 201.240488][ T8724] __arm64_sys_setsockopt+0xc0/0xdc [ 201.241587][ T8724] invoke_syscall+0x98/0x290 [ 201.242619][ T8724] el0_svc_common+0x13c/0x258 [ 201.243611][ T8724] do_el0_svc+0x5c/0x134 [ 201.244493][ T8724] el0_svc+0x58/0x12c [ 201.245302][ T8724] el0t_64_sync_handler+0x84/0xf0 [ 201.246347][ T8724] el0t_64_sync+0x18c/0x190 [ 201.719930][ T8741] Console: switching to colour frame buffer device 128x48 [ 201.854880][ T8755] loop8: detected capacity change from 0 to 512 [ 201.914433][ T8758] loop6: detected capacity change from 0 to 256 [ 201.940814][ T8758] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 202.205036][ T8765] loop7: detected capacity change from 0 to 8 [ 205.252412][ T8888] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1260'. [ 206.074378][ T8911] bond0: (slave ip6tnl0): refused to change device type [ 206.663303][ T8918] device syzkaller0 entered promiscuous mode [ 206.881160][ T8942] loop6: detected capacity change from 0 to 8 [ 207.264356][ T8949] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 207.265714][ T8949] overlayfs: failed to set xattr on upper [ 207.267108][ T8949] overlayfs: ...falling back to index=off,metacopy=off. [ 207.372101][ T8965] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1282'. [ 207.849672][ T8972] ima: policy update failed [ 207.851612][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 207.851622][ T27] audit: type=1802 audit(207.820:16): pid=8972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1286" res=0 errno=0 [ 208.818238][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 209.141430][ T9007] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 209.142956][ T9007] overlayfs: failed to set xattr on upper [ 209.144464][ T9007] overlayfs: ...falling back to index=off,metacopy=off. [ 209.792515][ T9041] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1302'. [ 209.916308][ T9044] bond0: (slave ip6tnl0): refused to change device type [ 211.351942][ T9092] loop7: detected capacity change from 0 to 1024 [ 211.357834][ T9098] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 211.359208][ T9098] overlayfs: failed to set xattr on upper [ 211.360438][ T9098] overlayfs: ...falling back to index=off,metacopy=off. [ 211.370065][ T9092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.663430][ T9092] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.928488][ T9092] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 212.056494][ T9119] bond0: (slave ip6tnl0): refused to change device type [ 212.261810][ T9092] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1326: bg 0: block 112: padding at end of block bitmap is not set [ 212.276903][ T9092] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 212.292246][ T9092] EXT4-fs (loop7): This should not happen!! Data will be lost [ 212.292246][ T9092] [ 212.334032][ T9092] EXT4-fs (loop7): Total free blocks count 0 [ 212.335326][ T9092] EXT4-fs (loop7): Free/Dirty block details [ 212.344709][ T9092] EXT4-fs (loop7): free_blocks=0 [ 212.345711][ T9092] EXT4-fs (loop7): dirty_blocks=64 [ 212.355474][ T9092] EXT4-fs (loop7): Block reservation details [ 212.369773][ T9092] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 212.604210][ T300] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 213.041884][ T9151] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 213.043264][ T9151] overlayfs: failed to set xattr on upper [ 213.044406][ T9151] overlayfs: ...falling back to index=off,metacopy=off. [ 213.556504][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1331'. [ 213.788983][ T9171] loop7: detected capacity change from 0 to 256 [ 213.888593][ T9171] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 213.969399][ T9177] loop6: detected capacity change from 0 to 8 [ 214.479684][ T9196] process 'syz.0.1337' launched '/dev/fd/3' with NULL argv: empty string added [ 214.877775][ T9224] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 214.879542][ T9224] overlayfs: failed to set xattr on upper [ 214.882841][ T9224] overlayfs: ...falling back to index=off,metacopy=off. [ 215.352393][ T9242] FAULT_INJECTION: forcing a failure. [ 215.352393][ T9242] name fail_futex, interval 1, probability 0, space 0, times 0 [ 215.370240][ T9242] CPU: 0 PID: 9242 Comm: syz.8.1347 Not tainted syzkaller #0 [ 215.371966][ T9242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 215.373933][ T9242] Call trace: [ 215.374603][ T9242] dump_backtrace+0x1c4/0x1f0 [ 215.375561][ T9242] show_stack+0x2c/0x3c [ 215.376474][ T9242] __dump_stack+0x30/0x40 [ 215.377457][ T9242] dump_stack_lvl+0xf4/0x15c [ 215.378461][ T9242] dump_stack+0x1c/0x5c [ 215.379310][ T9242] should_fail_ex+0x3cc/0x524 [ 215.380252][ T9242] should_fail+0x14/0x24 [ 215.381107][ T9242] get_futex_key+0x904/0xec0 [ 215.382001][ T9242] futex_wait_setup+0xbc/0x320 [ 215.382969][ T9242] futex_wait+0x178/0x488 [ 215.383894][ T9242] do_futex+0x2e8/0x340 [ 215.384695][ T9242] __arm64_sys_futex+0x390/0x414 [ 215.385739][ T9242] invoke_syscall+0x98/0x290 [ 215.386742][ T9242] el0_svc_common+0x13c/0x258 [ 215.387662][ T9242] do_el0_svc+0x5c/0x134 [ 215.388582][ T9242] el0_svc+0x58/0x12c [ 215.389398][ T9242] el0t_64_sync_handler+0x84/0xf0 [ 215.390464][ T9242] el0t_64_sync+0x18c/0x190 [ 215.500607][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1346'. [ 216.241150][ T27] audit: type=1807 audit(216.190:17): action=appraise func=FIRMWARE_CHECK res=1 [ 216.246265][ T4334] Bluetooth: hci0: link tx timeout [ 216.248036][ T4334] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 216.752112][ T9262] ima: policy update completed [ 216.753199][ T27] audit: type=1802 audit(216.720:18): pid=9262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.8.1353" res=1 errno=0 [ 216.802678][ T4334] Bluetooth: hci0: link tx timeout [ 216.803948][ T4334] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 217.810382][ T9338] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1367'. [ 217.912418][ T9339] loop6: detected capacity change from 0 to 8 [ 218.266100][ T4334] Bluetooth: hci0: command 0x0406 tx timeout [ 218.463449][ T9345] FAULT_INJECTION: forcing a failure. [ 218.463449][ T9345] name fail_futex, interval 1, probability 0, space 0, times 0 [ 218.469414][ T9345] CPU: 1 PID: 9345 Comm: syz.5.1371 Not tainted syzkaller #0 [ 218.470824][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 218.472992][ T9345] Call trace: [ 218.473700][ T9345] dump_backtrace+0x1c4/0x1f0 [ 218.474706][ T9345] show_stack+0x2c/0x3c [ 218.475544][ T9345] __dump_stack+0x30/0x40 [ 218.476500][ T9345] dump_stack_lvl+0xf4/0x15c [ 218.477549][ T9345] dump_stack+0x1c/0x5c [ 218.478524][ T9345] should_fail_ex+0x3cc/0x524 [ 218.479572][ T9345] should_fail+0x14/0x24 [ 218.480434][ T9345] get_futex_key+0x904/0xec0 [ 218.481483][ T9345] futex_wait_setup+0xbc/0x320 [ 218.482566][ T9345] futex_wait+0x178/0x488 [ 218.483550][ T9345] do_futex+0x2e8/0x340 [ 218.484401][ T9345] __arm64_sys_futex+0x390/0x414 [ 218.485417][ T9345] invoke_syscall+0x98/0x290 [ 218.486332][ T9345] el0_svc_common+0x13c/0x258 [ 218.487330][ T9345] do_el0_svc+0x5c/0x134 [ 218.488283][ T9345] el0_svc+0x58/0x12c [ 218.489176][ T9345] el0t_64_sync_handler+0x84/0xf0 [ 218.490265][ T9345] el0t_64_sync+0x18c/0x190 [ 219.549521][ T9395] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1386'. [ 220.074080][ T9399] loop5: detected capacity change from 0 to 8 [ 220.330191][ T9401] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1389'. [ 220.402642][ T9412] loop8: detected capacity change from 0 to 512 [ 220.415017][ T9412] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 220.417961][ T9412] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 220.419805][ T9412] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #13: comm syz.8.1394: iget: bad i_size value: 12154757448730 [ 220.422770][ T9412] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.1394: couldn't read orphan inode 13 (err -117) [ 220.425683][ T9412] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 220.435385][ T9412] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 220.460635][ T7848] EXT4-fs (loop8): unmounting filesystem. [ 221.240738][ T9437] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1401'. [ 222.351780][ T9460] loop5: detected capacity change from 0 to 8 [ 222.897667][ T27] audit: type=1807 audit(222.840:19): action=appraise func=FIRMWARE_CHECK res=1 [ 223.521970][ T9465] ima: policy update completed [ 223.523085][ T27] audit: type=1802 audit(223.490:20): pid=9465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.6.1412" res=1 errno=0 [ 223.652524][ T9488] loop7: detected capacity change from 0 to 8 [ 224.219734][ T9504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.833966][ T9511] loop6: detected capacity change from 0 to 8 [ 225.958680][ T27] audit: type=1807 audit(225.870:21): action=appraise func=FIRMWARE_CHECK res=1 [ 226.202581][ T9551] FAULT_INJECTION: forcing a failure. [ 226.202581][ T9551] name failslab, interval 1, probability 0, space 0, times 0 [ 226.205467][ T9551] CPU: 0 PID: 9551 Comm: syz.5.1438 Not tainted syzkaller #0 [ 226.206923][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 226.208860][ T9551] Call trace: [ 226.209537][ T9551] dump_backtrace+0x1c4/0x1f0 [ 226.210579][ T9551] show_stack+0x2c/0x3c [ 226.211466][ T9551] __dump_stack+0x30/0x40 [ 226.212448][ T9551] dump_stack_lvl+0xf4/0x15c [ 226.213340][ T9551] dump_stack+0x1c/0x5c [ 226.214123][ T9551] should_fail_ex+0x3cc/0x524 [ 226.215062][ T9551] __should_failslab+0xc0/0x11c [ 226.216081][ T9551] should_failslab+0x10/0x28 [ 226.217029][ T9551] kmem_cache_alloc+0x88/0x310 [ 226.217967][ T9551] posix_lock_inode+0x1c4/0x3458 [ 226.218928][ T9551] fcntl_setlk+0xac4/0x11a0 [ 226.219834][ T9551] do_fcntl+0x7a0/0x163c [ 226.220735][ T9551] __arm64_sys_fcntl+0x110/0x1e4 [ 226.221717][ T9551] invoke_syscall+0x98/0x290 [ 226.222584][ T9551] el0_svc_common+0x13c/0x258 [ 226.223714][ T9551] do_el0_svc+0x5c/0x134 [ 226.224667][ T9551] el0_svc+0x58/0x12c [ 226.225499][ T9551] el0t_64_sync_handler+0x84/0xf0 [ 226.226596][ T9551] el0t_64_sync+0x18c/0x190 [ 226.245412][ T9549] loop8: detected capacity change from 0 to 8 [ 226.487881][ T9558] device syzkaller0 entered promiscuous mode [ 226.563307][ T9541] ima: policy update completed [ 226.565255][ T27] audit: type=1802 audit(226.530:22): pid=9541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.7.1435" res=1 errno=0 [ 227.183682][ T9566] loop8: detected capacity change from 0 to 8 [ 229.516269][ T27] audit: type=1807 audit(229.400:23): action=appraise func=FIRMWARE_CHECK res=1 [ 230.088383][ T9601] ima: policy update completed [ 230.093835][ T27] audit: type=1802 audit(230.060:24): pid=9601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.5.1455" res=1 errno=0 [ 230.292449][ T9615] loop8: detected capacity change from 0 to 8 [ 231.109674][ T9633] FAULT_INJECTION: forcing a failure. [ 231.109674][ T9633] name failslab, interval 1, probability 0, space 0, times 0 [ 231.112482][ T9633] CPU: 1 PID: 9633 Comm: syz.8.1464 Not tainted syzkaller #0 [ 231.114020][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 231.116107][ T9633] Call trace: [ 231.116866][ T9633] dump_backtrace+0x1c4/0x1f0 [ 231.117971][ T9633] show_stack+0x2c/0x3c [ 231.118864][ T9633] __dump_stack+0x30/0x40 [ 231.119753][ T9633] dump_stack_lvl+0xf4/0x15c [ 231.120733][ T9633] dump_stack+0x1c/0x5c [ 231.121613][ T9633] should_fail_ex+0x3cc/0x524 [ 231.122666][ T9633] __should_failslab+0xc0/0x11c [ 231.123786][ T9633] should_failslab+0x10/0x28 [ 231.124830][ T9633] kmem_cache_alloc+0x88/0x310 [ 231.125869][ T9633] getname_flags+0xb8/0x458 [ 231.126881][ T9633] getname+0x28/0x38 [ 231.127704][ T9633] do_sys_openat2+0xdc/0x3fc [ 231.128664][ T9633] __arm64_sys_openat+0x11c/0x150 [ 231.129678][ T9633] invoke_syscall+0x98/0x290 [ 231.130716][ T9633] el0_svc_common+0x13c/0x258 [ 231.131804][ T9633] do_el0_svc+0x5c/0x134 [ 231.132703][ T9633] el0_svc+0x58/0x12c [ 231.133573][ T9633] el0t_64_sync_handler+0x84/0xf0 [ 231.134745][ T9633] el0t_64_sync+0x18c/0x190 [ 231.755226][ T9645] loop5: detected capacity change from 0 to 256 [ 231.791766][ T9645] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 232.040387][ T9650] FAULT_INJECTION: forcing a failure. [ 232.040387][ T9650] name fail_futex, interval 1, probability 0, space 0, times 0 [ 232.043586][ T9650] CPU: 1 PID: 9650 Comm: syz.8.1469 Not tainted syzkaller #0 [ 232.045031][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 232.046952][ T9650] Call trace: [ 232.047588][ T9650] dump_backtrace+0x1c4/0x1f0 [ 232.048567][ T9650] show_stack+0x2c/0x3c [ 232.049426][ T9650] __dump_stack+0x30/0x40 [ 232.050300][ T9650] dump_stack_lvl+0xf4/0x15c [ 232.051258][ T9650] dump_stack+0x1c/0x5c [ 232.052184][ T9650] should_fail_ex+0x3cc/0x524 [ 232.053196][ T9650] should_fail+0x14/0x24 [ 232.054137][ T9650] get_futex_key+0x904/0xec0 [ 232.055148][ T9650] futex_wake+0x10c/0x458 [ 232.056011][ T9650] do_futex+0x2c4/0x340 [ 232.056909][ T9650] __arm64_sys_futex+0x390/0x414 [ 232.057950][ T9650] invoke_syscall+0x98/0x290 [ 232.058937][ T9650] el0_svc_common+0x13c/0x258 [ 232.059993][ T9650] do_el0_svc+0x5c/0x134 [ 232.060878][ T9650] el0_svc+0x58/0x12c [ 232.061767][ T9650] el0t_64_sync_handler+0x84/0xf0 [ 232.062884][ T9650] el0t_64_sync+0x18c/0x190 [ 232.182611][ T9652] overlayfs: missing 'lowerdir' [ 234.769526][ T9698] overlayfs: missing 'lowerdir' [ 238.038822][ T9735] loop5: detected capacity change from 0 to 8 [ 238.294289][ T9738] overlayfs: missing 'lowerdir' [ 242.180729][ T4348] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.183915][ T4348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.194881][ T4348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.197169][ T4348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.199025][ T4348] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 242.200590][ T4348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.615402][ T9787] rxe_eth0 speed is unknown, defaulting to 1000 [ 242.648410][ T9799] overlayfs: unrecognized mount option "/" or missing value [ 242.711775][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.715460][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.717785][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.720196][ T4334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.721855][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 242.723565][ T4334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.743699][ T9800] rxe_eth0 speed is unknown, defaulting to 1000 [ 243.180541][ T9787] chnl_net:caif_netlink_parms(): no params data found [ 243.252764][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.255231][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.259766][ T9787] device bridge_slave_0 entered promiscuous mode [ 243.288030][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.289801][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.291775][ T9787] device bridge_slave_1 entered promiscuous mode [ 243.305480][ T9787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.339352][ T9822] loop5: detected capacity change from 0 to 8 [ 243.657936][ T9787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.731076][ T4462] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.969213][ T9800] chnl_net:caif_netlink_parms(): no params data found [ 243.979726][ T9787] team0: Port device team_slave_0 added [ 243.986409][ T9787] team0: Port device team_slave_1 added [ 244.000498][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.002140][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.007779][ T9787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.014465][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.016317][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.022301][ T9787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.068774][ T4462] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.122837][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.124349][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.127590][ T9800] device bridge_slave_0 entered promiscuous mode [ 244.130051][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.131577][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.133634][ T9800] device bridge_slave_1 entered promiscuous mode [ 244.201666][ T4462] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.257513][ T9787] device hsr_slave_0 entered promiscuous mode [ 244.266128][ T4348] Bluetooth: hci1: command 0x0409 tx timeout [ 244.296496][ T9787] device hsr_slave_1 entered promiscuous mode [ 244.427593][ T4462] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.432344][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.442444][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.470830][ T9800] team0: Port device team_slave_0 added [ 244.487291][ T9800] team0: Port device team_slave_1 added [ 244.508714][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.510484][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.519870][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.539231][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.540822][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.547731][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.574742][ T9787] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 244.597768][ T9787] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 244.667822][ T9800] device hsr_slave_0 entered promiscuous mode [ 244.706484][ T9800] device hsr_slave_1 entered promiscuous mode [ 244.746108][ T4348] Bluetooth: hci2: command 0x0409 tx timeout [ 244.748683][ T9800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.750871][ T9800] Cannot create hsr debugfs directory [ 244.754859][ T9787] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 244.797480][ T9787] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 245.773618][ T9787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.781473][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.783491][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.791681][ T9787] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.794824][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.797172][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.799052][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.800674][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.803969][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.815821][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.821211][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.824050][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.825554][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.880050][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.882612][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.884936][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.891599][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.895846][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.902924][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.059391][ T9787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.061563][ T9787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.077814][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.079661][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.081526][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.083385][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.085118][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.095678][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.202242][ T9787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.205545][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.207785][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.351123][ T4348] Bluetooth: hci1: command 0x041b tx timeout [ 246.463462][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.465732][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.472165][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.474408][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.484675][ T9787] device veth0_vlan entered promiscuous mode [ 246.490906][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.494031][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.561166][ T9787] device veth1_vlan entered promiscuous mode [ 246.573483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.575268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.578179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.580174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.584071][ T9787] device veth0_macvtap entered promiscuous mode [ 246.595015][ T9787] device veth1_macvtap entered promiscuous mode [ 246.603758][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.611668][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.613717][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.615810][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.617944][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.622190][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.624239][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.631619][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.633477][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.635546][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.637857][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.640133][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.642814][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.645013][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.647497][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.649191][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.651006][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.705915][ T9954] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 246.836156][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 246.904432][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.908401][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.910449][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.912708][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.914706][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.917389][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.919604][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.922068][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.924333][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.929920][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.931859][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.933912][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.937013][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.944960][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.951837][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.956271][ T9787] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.958499][ T9787] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.960846][ T9787] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.962820][ T9787] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.114523][ T9967] loop8: detected capacity change from 0 to 8 [ 247.863987][ T9973] netlink: 'syz.5.1552': attribute type 2 has an invalid length. [ 247.890019][ T4462] device hsr_slave_0 left promiscuous mode [ 247.926791][ T4462] device hsr_slave_1 left promiscuous mode [ 247.938968][ T9979] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 247.986463][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.987904][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.993072][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.994582][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.996473][ T4462] device bridge_slave_1 left promiscuous mode [ 247.997928][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.049241][ T4462] device bridge_slave_0 left promiscuous mode [ 248.050713][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.054608][ T9983] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1557'. [ 248.176201][ T4462] device veth1_macvtap left promiscuous mode [ 248.177489][ T4462] device veth0_macvtap left promiscuous mode [ 248.178720][ T4462] device veth1_vlan left promiscuous mode [ 248.180318][ T4462] device veth0_vlan left promiscuous mode [ 248.233643][ T9992] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1560'. [ 248.427124][ T4348] Bluetooth: hci1: command 0x040f tx timeout [ 248.826764][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.828447][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.906124][ T4348] Bluetooth: hci2: command 0x040f tx timeout [ 249.764730][T10026] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1571'. [ 250.530485][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 250.966329][T10045] sctp: [Deprecated]: syz.5.1579 (pid 10045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.966329][T10045] Use struct sctp_sack_info instead [ 250.986548][ T4348] Bluetooth: hci2: command 0x0419 tx timeout [ 251.401747][ T4462] team0 (unregistering): Port device team_slave_1 removed [ 251.688989][ T4462] team0 (unregistering): Port device team_slave_0 removed [ 251.886710][ T4462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.067509][ T4462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.567882][ T4462] bond0 (unregistering): Released all slaves [ 253.859971][T10038] netlink: 'syz.8.1576': attribute type 2 has an invalid length. [ 253.861904][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1579'. [ 253.877405][ T4568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.878997][ T4568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.881169][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.900655][ T4568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.902324][ T4568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.905150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.393672][ T9800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 254.438411][ T9800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 254.470743][ T9800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 254.505053][T10095] loop8: detected capacity change from 0 to 256 [ 254.537371][ T9800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 254.575737][T10095] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 254.715757][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.743180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.745434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.755763][ T9800] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.788023][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.793887][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.795961][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.797652][ T4464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.811921][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.838026][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.846715][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.854573][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.856152][ T4464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.989796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.996931][T10112] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1595'. [ 255.005126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.011119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.043525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.046770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.050130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.071405][ T9800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.073975][ T9800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.084710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.089105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.093512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.097762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.103629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.118033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.444912][T10141] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 255.449731][T10141] overlayfs: failed to set xattr on upper [ 255.450831][T10141] overlayfs: ...falling back to index=off,metacopy=off. [ 255.462625][T10141] overlayfs: failed to resolve './file0': -2 [ 255.528909][ T4462] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.539765][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.545963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.547817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.567705][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.569532][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.914946][T10153] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1603'. [ 255.919206][ T4462] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.925571][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.928062][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.931726][ T9800] device veth0_vlan entered promiscuous mode [ 255.934586][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.936724][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.949508][ T9800] device veth1_vlan entered promiscuous mode [ 256.010834][ T4462] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.017878][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 256.020112][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 256.030815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.033237][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.100209][ T9800] device veth0_macvtap entered promiscuous mode [ 256.117658][ T9800] device veth1_macvtap entered promiscuous mode [ 256.170525][ T4462] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.178669][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.180904][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.182967][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.209392][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.211174][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.213317][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.215340][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.221226][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.225287][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.233918][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.241273][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.250452][T10169] loop9: detected capacity change from 0 to 8 [ 256.254448][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.264668][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.302416][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.304452][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.311410][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.313389][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.332745][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.346672][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.349537][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.421433][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.423493][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.425453][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.434930][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.442337][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.444498][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.736268][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.738384][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.740622][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.747358][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.753933][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.765291][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.780473][ T9800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.782734][ T9800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.786568][ T9800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.791744][ T9800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.877699][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.879416][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.881300][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.917773][T10194] overlayfs: failed to clone upperpath [ 256.921200][ T6999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.923058][ T6999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.924643][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.281854][T10215] loop9: detected capacity change from 0 to 8 [ 257.315074][T10209] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1615'. [ 257.394819][T10227] overlayfs: failed to clone upperpath [ 258.027324][T10252] loop5: detected capacity change from 0 to 8 [ 258.455281][T10267] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1633'. [ 258.514134][T10273] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 258.515642][T10273] overlayfs: failed to set xattr on upper [ 258.521203][T10273] overlayfs: ...falling back to index=off,metacopy=off. [ 258.522921][T10273] overlayfs: failed to resolve './file0': -2 [ 259.063389][T10319] overlayfs: failed to resolve './file1': -2 [ 259.280646][T10337] loop8: detected capacity change from 0 to 256 [ 259.306576][T10337] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 259.667701][T10348] loop9: detected capacity change from 0 to 8 [ 260.147487][T10375] overlayfs: failed to resolve './file1': -2 [ 260.194825][ T4462] device hsr_slave_0 left promiscuous mode [ 260.239596][ T4462] device hsr_slave_1 left promiscuous mode [ 260.417066][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.418871][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.439867][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.441518][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.444511][ T4462] device bridge_slave_1 left promiscuous mode [ 260.445946][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.576876][T10386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1675'. [ 260.587090][ T4462] device bridge_slave_0 left promiscuous mode [ 260.588364][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.662897][T10395] loop9: detected capacity change from 0 to 8 [ 260.748760][ T4462] device veth1_macvtap left promiscuous mode [ 260.750488][ T4462] device veth0_macvtap left promiscuous mode [ 260.751897][ T4462] device veth1_vlan left promiscuous mode [ 260.753199][ T4462] device veth0_vlan left promiscuous mode [ 261.209527][T10408] overlayfs: failed to resolve './file1': -2 [ 261.354299][T10417] netlink: 584 bytes leftover after parsing attributes in process `syz.5.1680'. [ 261.590012][T10426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1683'. [ 262.211223][T10441] loop5: detected capacity change from 0 to 8 [ 262.311339][T10446] loop8: detected capacity change from 0 to 8 [ 263.033759][T10459] loop5: detected capacity change from 0 to 256 [ 263.080696][T10459] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 263.306302][ T4334] Bluetooth: hci0: command 0x0406 tx timeout [ 263.424242][T10476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1703'. [ 264.001358][ T4462] team0 (unregistering): Port device team_slave_1 removed [ 264.216854][ T27] audit: type=1807 audit(264.150:25): action=appraise func=FIRMWARE_CHECK res=1 [ 264.577849][ T4462] team0 (unregistering): Port device team_slave_0 removed [ 264.777249][ T4462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.845529][T10477] ima: policy update completed [ 264.847274][ T27] audit: type=1802 audit(264.820:26): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.1704" res=1 errno=0 [ 265.044766][ T4462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.157245][T10494] loop5: detected capacity change from 0 to 8 [ 266.557224][T10514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1716'. [ 267.133351][ T27] audit: type=1807 audit(267.100:27): action=appraise func=FIRMWARE_CHECK res=1 [ 267.597022][T10526] loop3: detected capacity change from 0 to 8 [ 267.637324][ T4462] bond0 (unregistering): Released all slaves [ 267.800673][T10519] ima: policy update completed [ 267.801802][ T27] audit: type=1802 audit(267.770:28): pid=10519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.5.1719" res=1 errno=0 [ 267.875364][T10400] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1671'. [ 268.829943][T10605] loop8: detected capacity change from 0 to 8 [ 269.162965][T10627] loop3: detected capacity change from 0 to 8 [ 269.681892][T10681] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1759'. [ 269.683991][T10681] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1759'. [ 269.690530][T10681] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1759'. [ 269.693802][T10681] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1759'. [ 270.018703][T10714] loop8: detected capacity change from 0 to 8 [ 270.576791][T10766] loop3: detected capacity change from 0 to 8 [ 270.780991][T10785] overlayfs: missing 'lowerdir' [ 271.279135][T10842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1796'. [ 271.282440][T10842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1796'. [ 271.313142][T10845] overlayfs: missing 'lowerdir' [ 271.471847][T10861] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1800'. [ 271.837821][T10894] loop3: detected capacity change from 0 to 8 [ 272.073270][T10908] overlayfs: missing 'lowerdir' [ 272.424996][T10957] overlayfs: missing 'lowerdir' [ 272.451214][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1822'. [ 272.787014][T11001] loop8: detected capacity change from 0 to 8 [ 273.037257][T11016] overlayfs: missing 'lowerdir' [ 273.082158][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1834'. [ 273.473675][T11054] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1841'. [ 273.475776][T11054] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1841'. [ 273.671787][T11070] overlayfs: missing 'lowerdir' [ 273.704486][T11076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1846'. [ 274.343508][T11121] overlayfs: missing 'workdir' [ 274.507287][T11144] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1859'. [ 275.327315][T11181] loop8: detected capacity change from 0 to 8 [ 275.371035][T11183] overlayfs: missing 'workdir' [ 276.177412][T11225] overlayfs: missing 'workdir' [ 276.425468][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1891'. [ 276.530250][T11261] overlayfs: missing 'lowerdir' [ 276.653831][T11278] loop9: detected capacity change from 0 to 8 [ 276.667187][T11277] netlink: 'syz.5.1899': attribute type 29 has an invalid length. [ 276.671607][T11277] netlink: 'syz.5.1899': attribute type 29 has an invalid length. [ 276.694436][T11277] netlink: 'syz.5.1899': attribute type 29 has an invalid length. [ 277.423044][T11316] overlayfs: missing 'lowerdir' [ 277.652989][T11341] FAULT_INJECTION: forcing a failure. [ 277.652989][T11341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.655699][T11341] CPU: 0 PID: 11341 Comm: syz.5.1915 Not tainted syzkaller #0 [ 277.657375][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 277.659697][T11341] Call trace: [ 277.660459][T11341] dump_backtrace+0x1c4/0x1f0 [ 277.661423][T11341] show_stack+0x2c/0x3c [ 277.662314][T11341] __dump_stack+0x30/0x40 [ 277.663127][T11341] dump_stack_lvl+0xf4/0x15c [ 277.664054][T11341] dump_stack+0x1c/0x5c [ 277.665039][T11341] should_fail_ex+0x3cc/0x524 [ 277.666059][T11341] should_fail+0x14/0x24 [ 277.667067][T11341] should_fail_usercopy+0x20/0x30 [ 277.668271][T11341] copy_from_bpfptr+0x84/0x1d8 [ 277.669354][T11341] __sys_bpf+0x1f8/0x660 [ 277.670293][T11341] __arm64_sys_bpf+0x80/0x98 [ 277.671165][T11341] invoke_syscall+0x98/0x290 [ 277.672158][T11341] el0_svc_common+0x13c/0x258 [ 277.673175][T11341] do_el0_svc+0x5c/0x134 [ 277.674075][T11341] el0_svc+0x58/0x12c [ 277.674840][T11341] el0t_64_sync_handler+0x84/0xf0 [ 277.675869][T11341] el0t_64_sync+0x18c/0x190 [ 277.826596][T11353] overlayfs: missing 'lowerdir' [ 277.970822][T11369] loop8: detected capacity change from 0 to 8 [ 278.202146][T11375] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1926'. [ 278.251719][T11380] FAULT_INJECTION: forcing a failure. [ 278.251719][T11380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.255056][T11380] CPU: 1 PID: 11380 Comm: syz.3.1928 Not tainted syzkaller #0 [ 278.256569][T11380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 278.258557][T11380] Call trace: [ 278.259229][T11380] dump_backtrace+0x1c4/0x1f0 [ 278.260112][T11380] show_stack+0x2c/0x3c [ 278.260991][T11380] __dump_stack+0x30/0x40 [ 278.261904][T11380] dump_stack_lvl+0xf4/0x15c [ 278.262932][T11380] dump_stack+0x1c/0x5c [ 278.263848][T11380] should_fail_ex+0x3cc/0x524 [ 278.264902][T11380] should_fail+0x14/0x24 [ 278.265834][T11380] should_fail_usercopy+0x20/0x30 [ 278.266906][T11380] copy_from_bpfptr+0x84/0x1d8 [ 278.267898][T11380] __sys_bpf+0x1f8/0x660 [ 278.268843][T11380] __arm64_sys_bpf+0x80/0x98 [ 278.269887][T11380] invoke_syscall+0x98/0x290 [ 278.270938][T11380] el0_svc_common+0x13c/0x258 [ 278.271974][T11380] do_el0_svc+0x5c/0x134 [ 278.272922][T11380] el0_svc+0x58/0x12c [ 278.273813][T11380] el0t_64_sync_handler+0x84/0xf0 [ 278.274943][T11380] el0t_64_sync+0x18c/0x190 [ 278.950341][T11417] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1932'. [ 279.125369][T11430] FAULT_INJECTION: forcing a failure. [ 279.125369][T11430] name fail_futex, interval 1, probability 0, space 0, times 0 [ 279.144166][T11430] CPU: 1 PID: 11430 Comm: syz.5.1939 Not tainted syzkaller #0 [ 279.145874][T11430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 279.148131][T11430] Call trace: [ 279.148799][T11430] dump_backtrace+0x1c4/0x1f0 [ 279.149815][T11430] show_stack+0x2c/0x3c [ 279.150754][T11430] __dump_stack+0x30/0x40 [ 279.151641][T11430] dump_stack_lvl+0xf4/0x15c [ 279.152701][T11430] dump_stack+0x1c/0x5c [ 279.153663][T11430] should_fail_ex+0x3cc/0x524 [ 279.154746][T11430] should_fail+0x14/0x24 [ 279.155716][T11430] get_futex_key+0x18c/0xec0 [ 279.156848][T11430] futex_wake+0x10c/0x458 [ 279.157908][T11430] do_futex+0x2c4/0x340 [ 279.158910][T11430] mm_release+0x190/0x274 [ 279.159971][T11430] exit_mm_release+0x30/0x40 [ 279.161095][T11430] exit_mm+0x50/0x290 [ 279.162067][T11430] do_exit+0x4d0/0x19ac [ 279.163098][T11430] do_group_exit+0x198/0x238 [ 279.164029][T11430] get_signal+0x11f4/0x133c [ 279.164909][T11430] do_notify_resume+0x364/0x2c84 [ 279.166025][T11430] el0_svc+0x9c/0x12c [ 279.166895][T11430] el0t_64_sync_handler+0x84/0xf0 [ 279.168024][T11430] el0t_64_sync+0x18c/0x190 [ 279.372818][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1946'. [ 279.591846][T11465] loop3: detected capacity change from 0 to 8 [ 280.161111][ T27] audit: type=1807 audit(280.130:29): action=appraise func=FIRMWARE_CHECK res=1 [ 280.808623][T11524] loop8: detected capacity change from 0 to 8 [ 280.875245][T11477] ima: policy update completed [ 280.930371][ T27] audit: type=1802 audit(280.850:30): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.9.1952" res=1 errno=0 [ 281.103028][T11534] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 281.104634][T11534] overlayfs: failed to set xattr on upper [ 281.110062][T11534] overlayfs: ...falling back to index=off,metacopy=off. [ 281.827727][T11562] netlink: 'syz.5.1977': attribute type 6 has an invalid length. [ 281.829392][T11562] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1977'. [ 281.874822][T11567] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 281.877981][T11567] overlayfs: failed to set xattr on upper [ 281.879381][T11567] overlayfs: ...falling back to index=off,metacopy=off. [ 282.116921][T11578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1984'. [ 282.118902][T11578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1984'. [ 282.121339][T11578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1984'. [ 282.123651][T11578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1984'. [ 282.264092][T11591] loop8: detected capacity change from 0 to 8 [ 282.265181][T11589] loop5: detected capacity change from 0 to 256 [ 282.304537][T11589] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 282.351104][T11589] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1983'. [ 282.899544][T11600] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 282.901043][T11600] overlayfs: failed to set xattr on upper [ 282.902223][T11600] overlayfs: ...falling back to index=off,metacopy=off. [ 283.520511][T11633] netlink: 'syz.8.2001': attribute type 10 has an invalid length. [ 283.570365][T11633] team0: Port device macvlan1 added [ 283.750300][T11654] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2010'. [ 283.961932][T11664] loop9: detected capacity change from 0 to 8 [ 284.138570][T11673] overlayfs: failed to clone upperpath [ 284.351923][T11687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2026'. [ 284.942991][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2030'. [ 285.057539][T11708] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 285.059205][T11708] overlayfs: failed to set xattr on upper [ 285.060344][T11708] overlayfs: ...falling back to index=off,metacopy=off. [ 285.293818][T11727] netlink: 'syz.5.2038': attribute type 10 has an invalid length. [ 285.356188][T11727] team0: Port device syz_tun added [ 285.454837][T11740] loop9: detected capacity change from 0 to 8 [ 286.006556][ T27] audit: type=1807 audit(285.980:31): action=appraise func=FIRMWARE_CHECK res=1 [ 286.008728][T11761] ima: policy update completed [ 286.012690][ T27] audit: type=1802 audit(285.980:32): pid=11761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.5.2047" res=1 errno=0 [ 286.162741][T11776] loop8: detected capacity change from 0 to 256 [ 286.302605][T11782] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2052'. [ 286.305157][T11782] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2052'. [ 286.314348][T11776] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 286.318538][T11782] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2052'. [ 286.337424][T11782] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2052'. [ 286.362147][T11788] netlink: 'syz.3.2055': attribute type 10 has an invalid length. [ 286.379731][T11788] team0: Port device syz_tun added [ 286.380642][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2056'. [ 286.517112][ T27] audit: type=1807 audit(286.490:33): action=appraise func=FIRMWARE_CHECK res=1 [ 286.519353][T11798] ima: policy update completed [ 286.520946][ T27] audit: type=1802 audit(286.490:34): pid=11798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.2060" res=1 errno=0 [ 287.171446][T11829] Bluetooth: MGMT ver 1.22 [ 287.178863][T11829] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 287.318499][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2075'. [ 287.593419][T11864] binder: 11862:11864 unknown command 1074553619 [ 287.656905][T11864] binder: 11862:11864 ioctl c0306201 200005c0 returned -22 [ 287.659528][T11868] binder: 11862:11868 unknown command 1074553619 [ 287.660920][T11868] binder: 11862:11868 ioctl c0306201 20000740 returned -22 [ 287.762981][T11875] loop5: detected capacity change from 0 to 8 [ 288.399510][T11895] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2090'. [ 288.951969][T11940] loop3: detected capacity change from 0 to 8 [ 289.207982][T11941] md: could not open device unknown-block(1,10). [ 289.211945][T11941] md: md_import_device returned -16 [ 289.328256][T11950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.685549][ T27] audit: type=1807 audit(289.650:35): action=appraise func=FIRMWARE_CHECK res=1 [ 290.413136][T11960] ima: policy update completed [ 290.414211][ T27] audit: type=1802 audit(290.380:36): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.8.2113" res=1 errno=0 [ 290.676126][T12004] loop8: detected capacity change from 0 to 8 [ 290.906601][T12005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.908632][T12005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.546123][ T27] audit: type=1807 audit(291.350:37): action=appraise func=FIRMWARE_CHECK res=1 [ 291.704449][T12060] FAULT_INJECTION: forcing a failure. [ 291.704449][T12060] name failslab, interval 1, probability 0, space 0, times 0 [ 291.708044][T12060] CPU: 0 PID: 12060 Comm: syz.8.2136 Not tainted syzkaller #0 [ 291.709486][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 291.711272][T12060] Call trace: [ 291.711891][T12060] dump_backtrace+0x1c4/0x1f0 [ 291.712849][T12060] show_stack+0x2c/0x3c [ 291.713620][T12060] __dump_stack+0x30/0x40 [ 291.714369][T12060] dump_stack_lvl+0xf4/0x15c [ 291.715271][T12060] dump_stack+0x1c/0x5c [ 291.716078][T12060] should_fail_ex+0x3cc/0x524 [ 291.716911][T12060] __should_failslab+0xc0/0x11c [ 291.717826][T12060] should_failslab+0x10/0x28 [ 291.718724][T12060] __kmem_cache_alloc_node+0x7c/0x318 [ 291.719835][T12060] kmalloc_node_trace+0x44/0x90 [ 291.720709][T12060] bdi_alloc+0x5c/0x150 [ 291.721550][T12060] __alloc_disk_node+0xb8/0x438 [ 291.722607][T12060] __blk_alloc_disk+0x40/0xb8 [ 291.723439][T12060] dm_create+0x514/0xf48 [ 291.724360][T12060] dev_create+0xf4/0x25c [ 291.725231][T12060] dm_ctl_ioctl+0xaac/0xf1c [ 291.726263][T12060] __arm64_sys_ioctl+0x14c/0x1c8 [ 291.727347][T12060] invoke_syscall+0x98/0x290 [ 291.728372][T12060] el0_svc_common+0x13c/0x258 [ 291.729278][T12060] do_el0_svc+0x5c/0x134 [ 291.730190][T12060] el0_svc+0x58/0x12c [ 291.731026][T12060] el0t_64_sync_handler+0x84/0xf0 [ 291.731968][T12060] el0t_64_sync+0x18c/0x190 [ 292.110029][T12045] ima: policy update completed [ 292.111173][ T27] audit: type=1802 audit(292.080:38): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.2134" res=1 errno=0 [ 292.140746][T12086] loop8: detected capacity change from 0 to 8 [ 292.283243][T12091] md: invalid raid superblock magic on ram6 [ 292.284690][T12091] md: ram6 does not have a valid v0.0 superblock, not importing! [ 292.287769][T12091] md: md_import_device returned -22 [ 292.647683][T12141] FAULT_INJECTION: forcing a failure. [ 292.647683][T12141] name failslab, interval 1, probability 0, space 0, times 0 [ 292.650842][T12141] CPU: 0 PID: 12141 Comm: syz.3.2158 Not tainted syzkaller #0 [ 292.652431][T12141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 292.654626][T12141] Call trace: [ 292.655328][T12141] dump_backtrace+0x1c4/0x1f0 [ 292.656431][T12141] show_stack+0x2c/0x3c [ 292.657363][T12141] __dump_stack+0x30/0x40 [ 292.658356][T12141] dump_stack_lvl+0xf4/0x15c [ 292.659366][T12141] dump_stack+0x1c/0x5c [ 292.660310][T12141] should_fail_ex+0x3cc/0x524 [ 292.661378][T12141] __should_failslab+0xc0/0x11c [ 292.662524][T12141] should_failslab+0x10/0x28 [ 292.663513][T12141] __kmem_cache_alloc_node+0x7c/0x318 [ 292.664739][T12141] kmalloc_node_trace+0x44/0x90 [ 292.665818][T12141] bdi_alloc+0x5c/0x150 [ 292.666759][T12141] __alloc_disk_node+0xb8/0x438 [ 292.667718][T12141] __blk_alloc_disk+0x40/0xb8 [ 292.668543][T12141] dm_create+0x514/0xf48 [ 292.669295][T12141] dev_create+0xf4/0x25c [ 292.670099][T12141] dm_ctl_ioctl+0xaac/0xf1c [ 292.670961][T12141] __arm64_sys_ioctl+0x14c/0x1c8 [ 292.671941][T12141] invoke_syscall+0x98/0x290 [ 292.672788][T12141] el0_svc_common+0x13c/0x258 [ 292.673620][T12141] do_el0_svc+0x5c/0x134 [ 292.674448][T12141] el0_svc+0x58/0x12c [ 292.675213][T12141] el0t_64_sync_handler+0x84/0xf0 [ 292.676143][T12141] el0t_64_sync+0x18c/0x190 [ 293.851439][T12212] loop5: detected capacity change from 0 to 8 [ 294.059357][T12143] Set syz1 is full, maxelem 65536 reached [ 294.568638][T12257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.572140][T12257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.621907][T12273] device-mapper: table: 248:1: linear: Device lookup failed (-ENODEV) [ 294.623658][T12273] device-mapper: ioctl: error adding target to table [ 295.160882][T12313] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 295.441572][ T27] audit: type=1807 audit(295.410:39): action=appraise func=FIRMWARE_CHECK res=1 [ 296.105072][T12326] ima: policy update completed [ 296.111871][ T27] audit: type=1802 audit(296.080:40): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.8.2200" res=1 errno=0 [ 296.169480][T12377] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2212'. [ 296.439635][T12397] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2217'. [ 296.441394][T12397] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 296.731787][T12397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.763761][T12403] FAULT_INJECTION: forcing a failure. [ 296.763761][T12403] name failslab, interval 1, probability 0, space 0, times 0 [ 296.766828][T12403] CPU: 1 PID: 12403 Comm: syz.5.2219 Not tainted syzkaller #0 [ 296.768320][T12403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 296.770198][T12403] Call trace: [ 296.770895][T12403] dump_backtrace+0x1c4/0x1f0 [ 296.771924][T12403] show_stack+0x2c/0x3c [ 296.772888][T12403] __dump_stack+0x30/0x40 [ 296.773843][T12403] dump_stack_lvl+0xf4/0x15c [ 296.774868][T12403] dump_stack+0x1c/0x5c [ 296.775837][T12403] should_fail_ex+0x3cc/0x524 [ 296.776907][T12403] __should_failslab+0xc0/0x11c [ 296.777950][T12403] should_failslab+0x10/0x28 [ 296.778965][T12403] __kmem_cache_alloc_node+0x7c/0x318 [ 296.780053][T12403] __kmalloc+0xc4/0x180 [ 296.781003][T12403] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 296.782245][T12403] genl_family_rcv_msg_doit+0xf8/0x308 [ 296.783365][T12403] genl_rcv_msg+0x424/0x600 [ 296.784387][T12403] netlink_rcv_skb+0x220/0x3ec [ 296.785541][T12403] genl_rcv+0x38/0x50 [ 296.786328][T12403] netlink_unicast+0x5fc/0x80c [ 296.787398][T12403] netlink_sendmsg+0x6f0/0x9d8 [ 296.788270][T12403] ____sys_sendmsg+0x588/0x90c [ 296.789290][T12403] __sys_sendmsg+0x288/0x374 [ 296.790269][T12403] __arm64_sys_sendmsg+0x80/0x94 [ 296.791343][T12403] invoke_syscall+0x98/0x290 [ 296.792339][T12403] el0_svc_common+0x13c/0x258 [ 296.793335][T12403] do_el0_svc+0x5c/0x134 [ 296.794208][T12403] el0_svc+0x58/0x12c [ 296.795014][T12403] el0t_64_sync_handler+0x84/0xf0 [ 296.796127][T12403] el0t_64_sync+0x18c/0x190 [ 296.851707][T12406] loop9: detected capacity change from 0 to 256 [ 296.875800][T12406] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 296.919141][T12410] ubi0: attaching mtd0 [ 296.930648][T12410] ubi0: scanning is finished [ 296.935564][T12410] ubi0: empty MTD device detected [ 296.977903][T12411] using random self ethernet address [ 296.979141][T12411] using random host ethernet address [ 296.997939][T12411] using random self ethernet address [ 296.999668][T12411] using random host ethernet address [ 297.065914][T12414] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2222'. [ 297.200879][T12410] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 297.202653][T12410] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 297.215673][T12410] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 297.225909][T12410] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 297.256113][T12410] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 297.257628][T12410] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 297.264319][T12410] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 718971086 [ 297.266972][T12410] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 297.286244][T12417] ubi0: background thread "ubi_bgt0d" started, PID 12417 [ 298.514231][T12454] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2239'. [ 298.725375][T12462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.732626][T12462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.820091][T12468] FAULT_INJECTION: forcing a failure. [ 298.820091][T12468] name failslab, interval 1, probability 0, space 0, times 0 [ 298.829853][T12468] CPU: 1 PID: 12468 Comm: syz.5.2245 Not tainted syzkaller #0 [ 298.831373][T12468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 298.833298][T12468] Call trace: [ 298.833980][T12468] dump_backtrace+0x1c4/0x1f0 [ 298.835103][T12468] show_stack+0x2c/0x3c [ 298.835991][T12468] __dump_stack+0x30/0x40 [ 298.836917][T12468] dump_stack_lvl+0xf4/0x15c [ 298.837846][T12468] dump_stack+0x1c/0x5c [ 298.838845][T12468] should_fail_ex+0x3cc/0x524 [ 298.839874][T12468] __should_failslab+0xc0/0x11c [ 298.840954][T12468] should_failslab+0x10/0x28 [ 298.841972][T12468] __kmem_cache_alloc_node+0x7c/0x318 [ 298.843124][T12468] kmalloc_trace+0x48/0x94 [ 298.844022][T12468] rfkill_fop_open+0x16c/0x4ec [ 298.845030][T12468] misc_open+0x310/0x388 [ 298.845931][T12468] chrdev_open+0x3d0/0x51c [ 298.846892][T12468] do_dentry_open+0x738/0xf8c [ 298.847894][T12468] vfs_open+0x7c/0x90 [ 298.848784][T12468] path_openat+0x1fc0/0x27a0 [ 298.849794][T12468] do_filp_open+0x198/0x38c [ 298.850813][T12468] do_sys_openat2+0x134/0x3fc [ 298.851849][T12468] __arm64_sys_openat+0x11c/0x150 [ 298.852986][T12468] invoke_syscall+0x98/0x290 [ 298.854029][T12468] el0_svc_common+0x13c/0x258 [ 298.855006][T12468] do_el0_svc+0x5c/0x134 [ 298.855968][T12468] el0_svc+0x58/0x12c [ 298.856845][T12468] el0t_64_sync_handler+0x84/0xf0 [ 298.857894][T12468] el0t_64_sync+0x18c/0x190 [ 299.421020][T12462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.430575][T12462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.452176][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.454539][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.456359][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.462793][T12492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.728472][T12439] Set syz1 is full, maxelem 65536 reached [ 300.025214][T12515] loop9: detected capacity change from 0 to 256 [ 300.083300][T12515] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 300.270153][T12526] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2269'. [ 301.681325][ T27] audit: type=1807 audit(301.650:41): action=appraise func=FIRMWARE_CHECK res=1 [ 302.336930][T12549] ima: policy update completed [ 302.341855][ T27] audit: type=1802 audit(302.310:42): pid=12549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.2279" res=1 errno=0 [ 302.375927][T12571] loop8: detected capacity change from 0 to 8 [ 302.934405][T12592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.937111][T12592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.427166][T12603] binder: 12602:12603 context manager tried to acquire desc 0 [ 303.429313][T12603] binder: 12602:12603 ioctl c0306201 200002c0 returned -22 [ 303.705724][T12620] loop8: detected capacity change from 0 to 256 [ 303.733652][T12620] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 303.747480][T12625] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2308'. [ 303.766154][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.998257][T12636] loop3: detected capacity change from 0 to 8 [ 304.080764][T12639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.115242][T12639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.860357][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2322'. [ 305.443641][T12695] loop3: detected capacity change from 0 to 8 [ 305.683434][T12707] sp0: Synchronizing with TNC [ 305.852142][T12724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.853966][T12724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.903230][T12729] block device autoloading is deprecated and will be removed. [ 306.210953][ T27] audit: type=1400 audit(306.180:43): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA pid=12752 comm="syz.3.2358" [ 306.217127][T12735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.219152][T12735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.241916][T12757] FAULT_INJECTION: forcing a failure. [ 306.241916][T12757] name failslab, interval 1, probability 0, space 0, times 0 [ 306.249103][T12757] CPU: 1 PID: 12757 Comm: syz.8.2360 Not tainted syzkaller #0 [ 306.250720][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 306.252823][T12757] Call trace: [ 306.253584][T12757] dump_backtrace+0x1c4/0x1f0 [ 306.254527][T12757] show_stack+0x2c/0x3c [ 306.255414][T12757] __dump_stack+0x30/0x40 [ 306.256400][T12757] dump_stack_lvl+0xf4/0x15c [ 306.257425][T12757] dump_stack+0x1c/0x5c [ 306.258359][T12757] should_fail_ex+0x3cc/0x524 [ 306.259432][T12757] __should_failslab+0xc0/0x11c [ 306.260547][T12757] should_failslab+0x10/0x28 [ 306.261548][T12757] __kmem_cache_alloc_node+0x7c/0x318 [ 306.262819][T12757] __kmalloc+0xc4/0x180 [ 306.263753][T12757] __list_lru_init+0xa4/0x50c [ 306.264827][T12757] alloc_super+0x66c/0x840 [ 306.265841][T12757] sget_fc+0x28c/0x658 [ 306.266689][T12757] kernfs_get_tree+0x168/0x688 [ 306.267757][T12757] sysfs_get_tree+0x4c/0x124 [ 306.268809][T12757] vfs_get_tree+0x90/0x278 [ 306.269683][T12757] do_new_mount+0x228/0x818 [ 306.270614][T12757] path_mount+0x5ac/0xe6c [ 306.271461][T12757] __arm64_sys_mount+0x4a0/0x5a0 [ 306.272461][T12757] invoke_syscall+0x98/0x290 [ 306.273318][T12757] el0_svc_common+0x13c/0x258 [ 306.274236][T12757] do_el0_svc+0x5c/0x134 [ 306.275081][T12757] el0_svc+0x58/0x12c [ 306.275915][T12757] el0t_64_sync_handler+0x84/0xf0 [ 306.276989][T12757] el0t_64_sync+0x18c/0x190 [ 306.277941][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.410813][T12775] netlink: 22 bytes leftover after parsing attributes in process `syz.8.2366'. [ 306.486225][T12775] [U] „ [ 306.591865][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.614145][T12789] loop9: detected capacity change from 0 to 8 [ 307.190564][T12818] ------------[ cut here ]------------ [ 307.191696][T12818] kernel BUG at include/linux/scatterlist.h:163! [ 307.193040][T12818] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 307.194578][T12818] Modules linked in: [ 307.195346][T12818] CPU: 1 PID: 12818 Comm: syz.8.2384 Not tainted syzkaller #0 [ 307.196973][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 307.199189][T12818] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 307.200946][T12818] pc : sg_init_one+0x1b4/0x1c8 [ 307.201983][T12818] lr : sg_init_one+0x1b4/0x1c8 [ 307.203033][T12818] sp : ffff800024307750 [ 307.203894][T12818] x29: ffff800024307750 x28: ffff0000d25cde00 x27: dfff800000000000 [ 307.205598][T12818] x26: ffff0000d705da0e x25: ffff700004860f00 x24: 1ffff00004860f14 [ 307.207118][T12818] x23: dfff800000000000 x22: 0001000000000010 x21: 0000000000000010 [ 307.208676][T12818] x20: ffff8000243078a0 x19: 0000000000000000 x18: 0000000000000000 [ 307.210370][T12818] x17: ffff80000a50a158 x16: ffff800011ba16d0 x15: ffff80000a50a158 [ 307.212185][T12818] x14: 0000000000000003 x13: 1ffff00004860f15 x12: 0000000000080000 [ 307.213964][T12818] x11: 0000000000002b9e x10: ffff8000237bb000 x9 : ffff80000a8cce04 [ 307.215727][T12818] x8 : 0000000000002b9f x7 : 0000000000000000 x6 : ffff80000805ab74 [ 307.217406][T12818] x5 : 00000000ffffffff x4 : 0000000000000008 x3 : 0000000000000010 [ 307.219274][T12818] x2 : 0000000000000000 x1 : 0001000000000010 x0 : 0000600000000000 [ 307.221057][T12818] Call trace: [ 307.221700][T12818] sg_init_one+0x1b4/0x1c8 [ 307.222590][T12818] software_key_eds_op+0x410/0x938 [ 307.223676][T12818] asymmetric_key_eds_op+0x108/0x128 [ 307.224835][T12818] keyctl_pkey_e_d_s+0x1c8/0x3a0 [ 307.225831][T12818] __arm64_sys_keyctl+0x66c/0x8e0 [ 307.226977][T12818] invoke_syscall+0x98/0x290 [ 307.227971][T12818] el0_svc_common+0x13c/0x258 [ 307.228951][T12818] do_el0_svc+0x5c/0x134 [ 307.229921][T12818] el0_svc+0x58/0x12c [ 307.230713][T12818] el0t_64_sync_handler+0x84/0xf0 [ 307.231775][T12818] el0t_64_sync+0x18c/0x190 [ 307.232669][T12818] Code: aa1503e0 9780bd5d 17ffffec 976fa5ad (d4210000) [ 307.234132][T12818] ---[ end trace 0000000000000000 ]--- [ 307.492760][T12818] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 307.494206][T12818] SMP: stopping secondary CPUs [ 307.495237][T12818] Kernel Offset: disabled [ 307.496073][T12818] CPU features: 0x050000,000f0097,a65bfea7 [ 307.497342][T12818] Memory Limit: none [ 307.750133][T12818] Rebooting in 86400 seconds..