last executing test programs: 2m50.892044601s ago: executing program 2 (id=9): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000800)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000880), 0x0, 0x0) read$msr(r4, &(0x7f00000008c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000198c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000180), 0x400000000000041, 0x0) 2m42.123376533s ago: executing program 2 (id=16): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x7ffffff9, 0xfcd, 0x70, 0xff, 0x8c, "388d673f088b000000020000000000001af800"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xb8) 2m37.915341575s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='keyB keyA 2000000000 0 ', 0x17) 2m37.885643175s ago: executing program 2 (id=20): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001a700)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a740), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) creat(&(0x7f00000016c0)='./file0\x00', 0x63) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000440)={r6, r6, 0xc, 0x0, &(0x7f0000000500), 0xb, 0x1, 0x4c4a, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r8, 0x29, 0x45, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@auto_da_alloc}, {@dax_inode}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") 2m35.807267416s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000640)="240000001a007f0214f9f4070009", 0xe) getsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000680), &(0x7f00000006c0)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x280000a, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file2\x00', 0x1000) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 2m28.041194484s ago: executing program 2 (id=32): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001a700)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a740), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000440)={r7, r7, 0xc, 0x0, &(0x7f0000000500), 0xb, 0x1, 0x4c4a, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@auto_da_alloc}, {@dax_inode}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") 2m12.936992118s ago: executing program 32 (id=32): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001a700)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a740), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000440)={r7, r7, 0xc, 0x0, &(0x7f0000000500), 0xb, 0x1, 0x4c4a, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@auto_da_alloc}, {@dax_inode}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") 28.015458653s ago: executing program 1 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 27.760803489s ago: executing program 1 (id=142): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x7ffffff9, 0xfcd, 0x70, 0xff, 0x8c, "388d673f088b000000020000000000001af800"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) 27.692263721s ago: executing program 4 (id=47): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001a700)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a740), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000440)={r7, r7, 0xc, 0x0, &(0x7f0000000500), 0xb, 0x1, 0x4c4a, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@auto_da_alloc}, {@dax_inode}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") 24.185088116s ago: executing program 1 (id=143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r0) 24.028823269s ago: executing program 1 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000640)="240000001a007f0214f9f4070009", 0xe) getsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000680), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x280000a, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file2\x00', 0x1000) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 23.700282757s ago: executing program 1 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x11) 23.272121038s ago: executing program 1 (id=148): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000800)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000880), 0x0, 0x0) read$msr(r3, &(0x7f00000008c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000198c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) 22.975465935s ago: executing program 4 (id=47): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001a700)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a740), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000440)={r7, r7, 0xc, 0x0, &(0x7f0000000500), 0xb, 0x1, 0x4c4a, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@auto_da_alloc}, {@dax_inode}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") 16.983202699s ago: executing program 4 (id=47): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001a700)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a740), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000440)={r7, r7, 0xc, 0x0, &(0x7f0000000500), 0xb, 0x1, 0x4c4a, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@auto_da_alloc}, {@dax_inode}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") 12.590506506s ago: executing program 0 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x11) 12.108513598s ago: executing program 4 (id=47): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001a700)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a740), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000440)={r7, r7, 0xc, 0x0, &(0x7f0000000500), 0xb, 0x1, 0x4c4a, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@auto_da_alloc}, {@dax_inode}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") 12.088056198s ago: executing program 0 (id=158): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001a700)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a740), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000440)={r7, r7, 0xc, 0x0, &(0x7f0000000500), 0xb, 0x1, 0x4c4a, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r8, 0x29, 0x45, 0x0, &(0x7f0000000280)) fstat(r6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@auto_da_alloc}, {@dax_inode}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") 8.060920675s ago: executing program 0 (id=160): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000002c0)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto(r1, &(0x7f00000003c0)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e10102", 0x33, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000140)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) 8.001440667s ago: executing program 33 (id=148): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000800)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000880), 0x0, 0x0) read$msr(r3, &(0x7f00000008c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000198c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) 7.87278868s ago: executing program 0 (id=164): io_cancel(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) listen(r5, 0xfffffffc) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000019580), 0x0) getpid() sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, r6, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, {0x8}}, {0x6, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) 6.63448831s ago: executing program 3 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32000000"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r0) 4.861272833s ago: executing program 0 (id=166): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001a700)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a740), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000440)={r7, r7, 0xc, 0x0, &(0x7f0000000500), 0xb, 0x1, 0x4c4a, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, 0x0, &(0x7f0000000280)) fstat(r6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@auto_da_alloc}, {@dax_inode}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") 3.964677864s ago: executing program 4 (id=47): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001a700)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a740), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000440)={r7, r7, 0xc, 0x0, &(0x7f0000000500), 0xb, 0x1, 0x4c4a, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@auto_da_alloc}, {@dax_inode}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") 3.132249804s ago: executing program 5 (id=161): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x7ffffff9, 0xfcd, 0x70, 0xff, 0x8c, "388d673f088b000000020000000000001af800"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) 3.033740107s ago: executing program 3 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000640)="240000001a007f0214f9f4070009", 0xe) getsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000680), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x280000a, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file2\x00', 0x1000) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 1.171720372s ago: executing program 0 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x11) 809.8865ms ago: executing program 3 (id=169): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000180)={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000200)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}}, 0x18) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000000) 575.453836ms ago: executing program 3 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000300), 0x0) 413.54534ms ago: executing program 3 (id=171): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000002c0)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto(r1, &(0x7f00000003c0)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e10102", 0x33, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000140)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) 4.22144ms ago: executing program 4 (id=47): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001a700)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a740), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000440)={r7, r7, 0xc, 0x0, &(0x7f0000000500), 0xb, 0x1, 0x4c4a, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@auto_da_alloc}, {@dax_inode}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt}]}, 0x0, 0x477, &(0x7f0000000bc0)="$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") 0s ago: executing program 3 (id=172): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000880), 0x0, 0x0) read$msr(r4, &(0x7f00000008c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000180), 0x400000000000041, 0x0) bind$unix(r1, &(0x7f0000019900)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 86.164791][ T5766] cgroup: Unknown subsys name 'net' [ 86.330063][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.334524][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.160166][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.172081][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.181290][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.192457][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.200234][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.212107][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.258249][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.267213][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.275568][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.283853][ T5090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.291849][ T5090] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.299365][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.304113][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.315752][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.324130][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.332850][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.336698][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.342635][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.351531][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.356179][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.363669][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.392584][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.402564][ T5090] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.414534][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.839448][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 91.020066][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 91.043756][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 91.117177][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.129479][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.137287][ T5783] bridge_slave_0: entered allmulticast mode [ 91.146824][ T5783] bridge_slave_0: entered promiscuous mode [ 91.160859][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 91.182985][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.190188][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.200244][ T5783] bridge_slave_1: entered allmulticast mode [ 91.207501][ T5783] bridge_slave_1: entered promiscuous mode [ 91.275872][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.323288][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.395263][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.402780][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.410142][ T5782] bridge_slave_0: entered allmulticast mode [ 91.418812][ T5782] bridge_slave_0: entered promiscuous mode [ 91.443010][ T5783] team0: Port device team_slave_0 added [ 91.460703][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.468311][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.476028][ T5782] bridge_slave_1: entered allmulticast mode [ 91.483699][ T5782] bridge_slave_1: entered promiscuous mode [ 91.502645][ T5783] team0: Port device team_slave_1 added [ 91.508717][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.516123][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.523541][ T5778] bridge_slave_0: entered allmulticast mode [ 91.530833][ T5778] bridge_slave_0: entered promiscuous mode [ 91.558280][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.566273][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.573988][ T5778] bridge_slave_1: entered allmulticast mode [ 91.581410][ T5778] bridge_slave_1: entered promiscuous mode [ 91.598095][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.605597][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.613306][ T5786] bridge_slave_0: entered allmulticast mode [ 91.620341][ T5786] bridge_slave_0: entered promiscuous mode [ 91.658338][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.665864][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.673815][ T5786] bridge_slave_1: entered allmulticast mode [ 91.681718][ T5786] bridge_slave_1: entered promiscuous mode [ 91.690893][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.718219][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.728504][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.736078][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.762479][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.789254][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.816532][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.823659][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.849766][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.881930][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.906731][ T5782] team0: Port device team_slave_0 added [ 91.915774][ T5782] team0: Port device team_slave_1 added [ 91.925080][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.973419][ T5778] team0: Port device team_slave_0 added [ 91.982186][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.041746][ T5778] team0: Port device team_slave_1 added [ 92.059947][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.067238][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.094166][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.113342][ T5783] hsr_slave_0: entered promiscuous mode [ 92.120445][ T5783] hsr_slave_1: entered promiscuous mode [ 92.155617][ T5786] team0: Port device team_slave_0 added [ 92.165549][ T5786] team0: Port device team_slave_1 added [ 92.173598][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.180602][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.207186][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.242117][ T5090] Bluetooth: hci0: command tx timeout [ 92.284309][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.291512][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.318612][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.332139][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.339158][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.369955][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.401106][ T5090] Bluetooth: hci3: command tx timeout [ 92.401129][ T5789] Bluetooth: hci1: command tx timeout [ 92.448322][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.455553][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.481847][ T5090] Bluetooth: hci2: command tx timeout [ 92.491506][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.527837][ T5782] hsr_slave_0: entered promiscuous mode [ 92.535235][ T5782] hsr_slave_1: entered promiscuous mode [ 92.542546][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.550459][ T5782] Cannot create hsr debugfs directory [ 92.571558][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.578576][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.604752][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.660112][ T5778] hsr_slave_0: entered promiscuous mode [ 92.666702][ T5778] hsr_slave_1: entered promiscuous mode [ 92.673862][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.681545][ T5778] Cannot create hsr debugfs directory [ 92.771683][ T5786] hsr_slave_0: entered promiscuous mode [ 92.778483][ T5786] hsr_slave_1: entered promiscuous mode [ 92.785626][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.793275][ T5786] Cannot create hsr debugfs directory [ 93.123159][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.176028][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.206297][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.217535][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.291021][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.317067][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.328331][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.339165][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.448021][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.459149][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.481445][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.494350][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.568882][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.633461][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.660794][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.676428][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.699039][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.706623][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.723195][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.734491][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.784652][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.791871][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.805557][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.862450][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.897642][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.904872][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.935391][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.942654][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.026185][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.113738][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.129188][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.174652][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.200157][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.207703][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.260448][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.267725][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.294510][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.301795][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.321334][ T5090] Bluetooth: hci0: command tx timeout [ 94.357959][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.365195][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.482484][ T5090] Bluetooth: hci3: command tx timeout [ 94.491190][ T5090] Bluetooth: hci1: command tx timeout [ 94.505977][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.564032][ T5090] Bluetooth: hci2: command tx timeout [ 94.636070][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.705963][ T5783] veth0_vlan: entered promiscuous mode [ 94.749397][ T5783] veth1_vlan: entered promiscuous mode [ 94.810603][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.893723][ T5783] veth0_macvtap: entered promiscuous mode [ 94.934417][ T5783] veth1_macvtap: entered promiscuous mode [ 95.023122][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.050165][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.076033][ T5782] veth0_vlan: entered promiscuous mode [ 95.108519][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.120041][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.135390][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.145327][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.180880][ T5782] veth1_vlan: entered promiscuous mode [ 95.197997][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.239060][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.338705][ T5782] veth0_macvtap: entered promiscuous mode [ 95.385327][ T5782] veth1_macvtap: entered promiscuous mode [ 95.410784][ T5778] veth0_vlan: entered promiscuous mode [ 95.438205][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.461753][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.480201][ T5778] veth1_vlan: entered promiscuous mode [ 95.496917][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.508243][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.520552][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.559178][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.572101][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.583661][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.599495][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.608836][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.620446][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.630175][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.640079][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.649089][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.663367][ T5786] veth0_vlan: entered promiscuous mode [ 95.713492][ T5786] veth1_vlan: entered promiscuous mode [ 95.836370][ T5778] veth0_macvtap: entered promiscuous mode [ 95.854775][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.872130][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.899003][ T5778] veth1_macvtap: entered promiscuous mode [ 95.958818][ T5786] veth0_macvtap: entered promiscuous mode [ 95.977193][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.985866][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.995291][ T5786] veth1_macvtap: entered promiscuous mode [ 96.065076][ T5848] FAULT_INJECTION: forcing a failure. [ 96.065076][ T5848] name failslab, interval 1, probability 0, space 0, times 1 [ 96.077846][ T5848] CPU: 0 PID: 5848 Comm: syz.0.1 Not tainted syzkaller #0 [ 96.085020][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.095168][ T5848] Call Trace: [ 96.098490][ T5848] [ 96.101459][ T5848] dump_stack_lvl+0x18c/0x250 [ 96.106204][ T5848] ? show_regs_print_info+0x20/0x20 [ 96.111448][ T5848] ? load_image+0x420/0x420 [ 96.116020][ T5848] ? __lock_acquire+0x7eb0/0x7eb0 [ 96.121096][ T5848] should_fail_ex+0x394/0x4c0 [ 96.125870][ T5848] should_failslab+0x9/0x20 [ 96.130429][ T5848] slab_pre_alloc_hook+0x59/0x300 [ 96.135501][ T5848] kmem_cache_alloc+0x5a/0x2c0 [ 96.140318][ T5848] ? create_new_namespaces+0x34/0x700 [ 96.145836][ T5848] create_new_namespaces+0x34/0x700 [ 96.151178][ T5848] __se_sys_setns+0x2f3/0x1740 [ 96.156001][ T5848] ? __x64_sys_setns+0x60/0x60 [ 96.160811][ T5848] ? lockdep_hardirqs_on+0x98/0x150 [ 96.166056][ T5848] do_syscall_64+0x55/0xb0 [ 96.170508][ T5848] ? clear_bhb_loop+0x40/0x90 [ 96.175235][ T5848] ? clear_bhb_loop+0x40/0x90 [ 96.179974][ T5848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.185935][ T5848] RIP: 0033:0x7fc36159f4d7 [ 96.190391][ T5848] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.210050][ T5848] RSP: 002b:00007fc35f7f5fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 96.218532][ T5848] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fc36159f4d7 [ 96.226547][ T5848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 96.234760][ T5848] RBP: 00007fc361635888 R08: 0000000000000000 R09: 0000000000000000 [ 96.242828][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.251010][ T5848] R13: 00007fc361826218 R14: 00007fc361826180 R15: 00007fffd119d298 [ 96.259083][ T5848] [ 96.402682][ T5090] Bluetooth: hci0: command tx timeout [ 96.560678][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.583549][ T5090] Bluetooth: hci1: command tx timeout [ 96.589306][ T5090] Bluetooth: hci3: command tx timeout [ 96.641217][ T5789] Bluetooth: hci2: command tx timeout [ 96.713097][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.076051][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.090354][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.121910][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.195939][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.215960][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.226384][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.243340][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.191014][ T5090] Bluetooth: hci0: command tx timeout [ 99.191036][ T5789] Bluetooth: hci3: command tx timeout [ 99.196471][ T5090] Bluetooth: hci1: command tx timeout [ 99.203294][ T5784] Bluetooth: hci2: command tx timeout [ 99.215967][ T27] cfg80211: failed to load regulatory.db [ 99.262671][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.297617][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.328768][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.352157][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.379081][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.404057][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.440477][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.465872][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.565724][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.580692][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.638324][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.781411][ T5826] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 99.895357][ T5856] ceph: No mds server is up or the cluster is laggy [ 99.923167][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.951129][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.975855][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.007904][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.060692][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.093707][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.116499][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.141086][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.202504][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.235859][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.261046][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.269851][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.481112][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.489022][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.577163][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.602116][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.646177][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.665586][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.752372][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.760332][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.888907][ T5861] can0: slcan on ttynull. [ 102.829574][ T5860] can0 (unregistered): slcan off ttynull. [ 102.919719][ T5868] syz.0.6[5868]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 104.191146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.840218][ T5872] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 105.770771][ T5879] loop3: detected capacity change from 0 to 32768 [ 107.926948][ T5881] read_mapping_page failed! [ 107.927524][ T28] audit: type=1800 audit(1791785745.958:2): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 109.311198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 109.749649][ T5883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 109.804457][ T5885] loop1: detected capacity change from 0 to 512 [ 109.936797][ T5885] ext3: Unknown parameter 'measure' [ 111.830433][ T5890] loop0: detected capacity change from 0 to 512 [ 111.837561][ T5890] ext3: Unknown parameter 'measure' [ 112.047120][ T5790] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.087416][ T5901] FAULT_INJECTION: forcing a failure. [ 114.087416][ T5901] name failslab, interval 1, probability 0, space 0, times 0 [ 114.100316][ T5901] CPU: 0 PID: 5901 Comm: syz.3.11 Not tainted syzkaller #0 [ 114.107578][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.117683][ T5901] Call Trace: [ 114.121003][ T5901] [ 114.123986][ T5901] dump_stack_lvl+0x18c/0x250 [ 114.128718][ T5901] ? show_regs_print_info+0x20/0x20 [ 114.133959][ T5901] ? load_image+0x420/0x420 [ 114.138517][ T5901] ? __might_sleep+0xe0/0xe0 [ 114.143154][ T5901] ? __lock_acquire+0x7eb0/0x7eb0 [ 114.148226][ T5901] should_fail_ex+0x394/0x4c0 [ 114.152960][ T5901] should_failslab+0x9/0x20 [ 114.157512][ T5901] slab_pre_alloc_hook+0x59/0x300 [ 114.162614][ T5901] kmem_cache_alloc_lru+0x4d/0x2b0 [ 114.167769][ T5901] ? __d_alloc+0x31/0x710 [ 114.172142][ T5901] __d_alloc+0x31/0x710 [ 114.176338][ T5901] ? alloc_fd+0x590/0x640 [ 114.180744][ T5901] d_alloc_pseudo+0x1d/0x70 [ 114.185285][ T5901] alloc_file_pseudo+0xe4/0x210 [ 114.190177][ T5901] ? fput+0x1a0/0x1a0 [ 114.194202][ T5901] ? alloc_fd+0x590/0x640 [ 114.198581][ T5901] sock_alloc_file+0xb7/0x280 [ 114.203303][ T5901] __sys_socket+0x140/0x1b0 [ 114.207997][ T5901] __x64_sys_socket+0x7a/0x90 [ 114.212888][ T5901] do_syscall_64+0x55/0xb0 [ 114.217361][ T5901] ? clear_bhb_loop+0x40/0x90 [ 114.222082][ T5901] ? clear_bhb_loop+0x40/0x90 [ 114.226816][ T5901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.232797][ T5901] RIP: 0033:0x7f5a3379e1d9 [ 114.237268][ T5901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.256915][ T5901] RSP: 002b:00007f5a345fbfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 114.265375][ T5901] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f5a3379e1d9 [ 114.273400][ T5901] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000009 [ 114.281427][ T5901] RBP: 00007f5a33835888 R08: 0000000000000000 R09: 0000000000000000 [ 114.289482][ T5901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.297509][ T5901] R13: 00007f5a33a26218 R14: 00007f5a33a26180 R15: 00007ffd5532c1d8 [ 114.305563][ T5901] [ 116.991166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.468368][ T5910] FAULT_INJECTION: forcing a failure. [ 117.468368][ T5910] name failslab, interval 1, probability 0, space 0, times 0 [ 117.481230][ T5910] CPU: 1 PID: 5910 Comm: syz.1.12 Not tainted syzkaller #0 [ 117.488678][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.498812][ T5910] Call Trace: [ 117.502150][ T5910] [ 117.505134][ T5910] dump_stack_lvl+0x18c/0x250 [ 117.509886][ T5910] ? show_regs_print_info+0x20/0x20 [ 117.515146][ T5910] ? load_image+0x420/0x420 [ 117.519734][ T5910] ? __might_sleep+0xe0/0xe0 [ 117.524448][ T5910] ? __lock_acquire+0x7eb0/0x7eb0 [ 117.529634][ T5910] should_fail_ex+0x394/0x4c0 [ 117.534388][ T5910] should_failslab+0x9/0x20 [ 117.539071][ T5910] slab_pre_alloc_hook+0x59/0x300 [ 117.544171][ T5910] kmem_cache_alloc+0x5a/0x2c0 [ 117.549013][ T5910] ? security_file_alloc+0x34/0x120 [ 117.554485][ T5910] security_file_alloc+0x34/0x120 [ 117.559585][ T5910] init_file+0x94/0x1f0 [ 117.563795][ T5910] alloc_empty_file+0xb7/0x1d0 [ 117.568602][ T5910] alloc_file+0x5b/0x600 [ 117.572976][ T5910] alloc_file_pseudo+0x184/0x210 [ 117.577973][ T5910] ? fput+0x1a0/0x1a0 [ 117.582022][ T5910] ? alloc_fd+0x590/0x640 [ 117.586402][ T5910] sock_alloc_file+0xb7/0x280 [ 117.591131][ T5910] __sys_socket+0x140/0x1b0 [ 117.595742][ T5910] __x64_sys_socket+0x7a/0x90 [ 117.600499][ T5910] do_syscall_64+0x55/0xb0 [ 117.605066][ T5910] ? clear_bhb_loop+0x40/0x90 [ 117.609806][ T5910] ? clear_bhb_loop+0x40/0x90 [ 117.614547][ T5910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.620525][ T5910] RIP: 0033:0x7f25a879e1d9 [ 117.624993][ T5910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.644672][ T5910] RSP: 002b:00007f25a9622fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 117.653173][ T5910] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f25a879e1d9 [ 117.661180][ T5910] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000009 [ 117.669207][ T5910] RBP: 00007f25a8835888 R08: 0000000000000000 R09: 0000000000000000 [ 117.677214][ T5910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.685306][ T5910] R13: 00007f25a8a26128 R14: 00007f25a8a26090 R15: 00007ffe9460d7b8 [ 117.693333][ T5910] [ 119.551214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.815867][ T5916] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 119.861134][ T5916] loop2: detected capacity change from 0 to 512 [ 119.868268][ T5916] ext3: Unknown parameter 'measure' [ 120.031551][ T5793] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.176550][ T5922] loop1: detected capacity change from 0 to 4096 [ 120.222663][ T5922] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 120.389295][ T5922] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 120.415621][ T5922] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 122.111282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 122.519114][ T5927] loop0: detected capacity change from 0 to 512 [ 122.527062][ T5927] ext3: Unknown parameter 'measure' [ 122.628183][ T5779] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.811815][ T5925] can0: slcan on ttynull. [ 122.975296][ T5925] can0 (unregistered): slcan off ttynull. [ 124.868156][ T5950] loop3: detected capacity change from 0 to 256 [ 127.231208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.005136][ T8] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 129.101254][ T5969] ceph: No mds server is up or the cluster is laggy [ 129.371452][ T5981] FAULT_INJECTION: forcing a failure. [ 129.371452][ T5981] name failslab, interval 1, probability 0, space 0, times 0 [ 129.384880][ T5981] CPU: 0 PID: 5981 Comm: syz.1.26 Not tainted syzkaller #0 [ 129.392156][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.402249][ T5981] Call Trace: [ 129.405561][ T5981] [ 129.408533][ T5981] dump_stack_lvl+0x18c/0x250 [ 129.413254][ T5981] ? show_regs_print_info+0x20/0x20 [ 129.418481][ T5981] ? load_image+0x420/0x420 [ 129.423048][ T5981] ? __might_sleep+0xe0/0xe0 [ 129.427681][ T5981] ? __lock_acquire+0x7eb0/0x7eb0 [ 129.432770][ T5981] should_fail_ex+0x394/0x4c0 [ 129.437502][ T5981] should_failslab+0x9/0x20 [ 129.442056][ T5981] slab_pre_alloc_hook+0x59/0x300 [ 129.447117][ T5981] kmem_cache_alloc_lru+0x4d/0x2b0 [ 129.452267][ T5981] ? __d_alloc+0x31/0x710 [ 129.456734][ T5981] __d_alloc+0x31/0x710 [ 129.460941][ T5981] ? alloc_fd+0x590/0x640 [ 129.465320][ T5981] d_alloc_pseudo+0x1d/0x70 [ 129.469872][ T5981] alloc_file_pseudo+0xe4/0x210 [ 129.474772][ T5981] ? fput+0x1a0/0x1a0 [ 129.478792][ T5981] ? alloc_fd+0x590/0x640 [ 129.483169][ T5981] sock_alloc_file+0xb7/0x280 [ 129.487890][ T5981] __sys_socket+0x140/0x1b0 [ 129.492441][ T5981] __x64_sys_socket+0x7a/0x90 [ 129.497163][ T5981] do_syscall_64+0x55/0xb0 [ 129.501611][ T5981] ? clear_bhb_loop+0x40/0x90 [ 129.506333][ T5981] ? clear_bhb_loop+0x40/0x90 [ 129.511056][ T5981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.517028][ T5981] RIP: 0033:0x7f25a879e1d9 [ 129.521475][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.541207][ T5981] RSP: 002b:00007f25a9601fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 129.549654][ T5981] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f25a879e1d9 [ 129.557660][ T5981] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000009 [ 129.565678][ T5981] RBP: 00007f25a8835888 R08: 0000000000000000 R09: 0000000000000000 [ 129.573686][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.581723][ T5981] R13: 00007f25a8a26218 R14: 00007f25a8a26180 R15: 00007ffe9460d7b8 [ 129.589840][ T5981] [ 130.825285][ T5987] can0: slcan on ttynull. [ 130.982192][ T5986] can0 (unregistered): slcan off ttynull. [ 132.351106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.048089][ T6000] FAULT_INJECTION: forcing a failure. [ 133.048089][ T6000] name failslab, interval 1, probability 0, space 0, times 0 [ 133.061048][ T6000] CPU: 1 PID: 6000 Comm: syz.0.38 Not tainted syzkaller #0 [ 133.068321][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.078444][ T6000] Call Trace: [ 133.081771][ T6000] [ 133.084746][ T6000] dump_stack_lvl+0x18c/0x250 [ 133.089485][ T6000] ? show_regs_print_info+0x20/0x20 [ 133.094757][ T6000] ? load_image+0x420/0x420 [ 133.099335][ T6000] ? __might_sleep+0xe0/0xe0 [ 133.103999][ T6000] ? __lock_acquire+0x7eb0/0x7eb0 [ 133.109102][ T6000] should_fail_ex+0x394/0x4c0 [ 133.113860][ T6000] should_failslab+0x9/0x20 [ 133.118440][ T6000] slab_pre_alloc_hook+0x59/0x300 [ 133.123525][ T6000] ? d_instantiate+0x6f/0x90 [ 133.128190][ T6000] kmem_cache_alloc+0x5a/0x2c0 [ 133.133034][ T6000] ? alloc_empty_file+0x9e/0x1d0 [ 133.138247][ T6000] alloc_empty_file+0x9e/0x1d0 [ 133.143086][ T6000] alloc_file+0x5b/0x600 [ 133.147567][ T6000] alloc_file_pseudo+0x184/0x210 [ 133.152581][ T6000] ? fput+0x1a0/0x1a0 [ 133.156662][ T6000] ? alloc_fd+0x590/0x640 [ 133.161093][ T6000] sock_alloc_file+0xb7/0x280 [ 133.165864][ T6000] __sys_socket+0x140/0x1b0 [ 133.170439][ T6000] __x64_sys_socket+0x7a/0x90 [ 133.175223][ T6000] do_syscall_64+0x55/0xb0 [ 133.179696][ T6000] ? clear_bhb_loop+0x40/0x90 [ 133.184429][ T6000] ? clear_bhb_loop+0x40/0x90 [ 133.189175][ T6000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.195141][ T6000] RIP: 0033:0x7fc36159e1d9 [ 133.199625][ T6000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.219292][ T6000] RSP: 002b:00007fc362399fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 133.227777][ T6000] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fc36159e1d9 [ 133.235808][ T6000] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000009 [ 133.243838][ T6000] RBP: 00007fc361635888 R08: 0000000000000000 R09: 0000000000000000 [ 133.251893][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.259951][ T6000] R13: 00007fc361826128 R14: 00007fc361826090 R15: 00007fffd119d298 [ 133.268002][ T6000] [ 133.276491][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.283364][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.490495][ T5995] loop3: detected capacity change from 0 to 32768 [ 135.321033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 137.146908][ T6012] loop1: detected capacity change from 0 to 256 [ 140.031159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 142.585327][ T6020] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 142.629781][ T6020] loop3: detected capacity change from 0 to 512 [ 142.636979][ T6020] ext3: Unknown parameter 'measure' [ 142.801699][ T5793] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.693636][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.706151][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.714652][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.725063][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.732999][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.740442][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.345387][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.886915][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.987784][ T6047] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 147.064974][ T6048] loop1: detected capacity change from 0 to 512 [ 147.072858][ T6048] ext3: Unknown parameter 'measure' [ 149.455758][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.659619][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.356198][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.370572][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.380467][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.392183][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.451928][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.459378][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.189791][ T6058] loop0: detected capacity change from 0 to 32768 [ 154.476885][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.496857][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.505164][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.524978][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.536189][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.544153][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.832874][ T6094] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 157.950989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 158.067205][ T6095] loop3: detected capacity change from 0 to 512 [ 158.074269][ T6095] ext3: Unknown parameter 'measure' [ 158.341042][ T6055] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.001738][ T42] hsr_slave_0: left promiscuous mode [ 159.061066][ T42] hsr_slave_1: left promiscuous mode [ 159.112262][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.119826][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.200360][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.240602][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.243169][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.263559][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.272186][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.301193][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.309212][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.316742][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.329591][ T42] bridge_slave_1: left allmulticast mode [ 159.363514][ T42] bridge_slave_1: left promiscuous mode [ 159.418571][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.503868][ T42] bridge_slave_0: left allmulticast mode [ 159.509619][ T42] bridge_slave_0: left promiscuous mode [ 159.547427][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.782758][ T42] veth1_macvtap: left promiscuous mode [ 159.788926][ T42] veth0_macvtap: left promiscuous mode [ 159.816932][ T42] veth1_vlan: left promiscuous mode [ 159.834128][ T42] veth0_vlan: left promiscuous mode [ 160.751404][ T6110] tcpci: probe of 0-0002 failed with error -5 [ 160.759050][ T6110] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 161.879003][ T6120] loop3: detected capacity change from 0 to 256 [ 162.857618][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'. [ 165.844652][ T6125] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 165.893685][ T6125] loop3: detected capacity change from 0 to 512 [ 165.900714][ T6125] ext3: Unknown parameter 'measure' [ 167.832500][ T6138] loop1: detected capacity change from 0 to 512 [ 167.839540][ T6138] ext3: Unknown parameter 'measure' [ 168.772542][ T5826] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 168.964645][ T6145] ceph: No mds server is up or the cluster is laggy [ 169.292039][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.301984][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.310263][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.342688][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.350519][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.358529][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.397234][ T42] team0 (unregistering): Port device team_slave_1 removed [ 170.662010][ T42] team0 (unregistering): Port device team_slave_0 removed [ 172.071699][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.321479][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.448814][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.461300][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.477789][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.497731][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.506653][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.514551][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.956634][ T6163] loop0: detected capacity change from 0 to 32768 [ 174.471167][ T6168] read_mapping_page failed! [ 175.178340][ T6171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 175.219934][ T42] bond0 (unregistering): Released all slaves [ 177.402545][ T6186] loop0: detected capacity change from 0 to 512 [ 177.410166][ T6186] ext3: Unknown parameter 'measure' [ 179.229103][ T6055] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 181.062054][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.073285][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.083939][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.097858][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.124541][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 181.141447][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.322922][ T6212] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 186.508598][ T6241] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 188.602693][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.616457][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.624774][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.639680][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.647787][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.661231][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.516361][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85'. [ 193.158399][ T6267] loop0: detected capacity change from 0 to 512 [ 193.165763][ T6267] ext3: Unknown parameter 'measure' [ 193.363873][ T6055] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.110235][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.121314][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.652416][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.665785][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.674337][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.691816][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.711454][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.719538][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.274714][ T6292] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 199.313737][ T6292] loop1: detected capacity change from 0 to 512 [ 199.321782][ T6292] ext3: Unknown parameter 'measure' [ 199.471059][ T6056] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.092701][ T6298] loop0: detected capacity change from 0 to 32768 [ 202.045266][ T6307] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 205.429545][ T6311] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14 [ 206.042850][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.052556][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.061824][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.070283][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.083874][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.092273][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.100068][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'. [ 207.740918][ C1] sched: RT throttling activated [ 210.776226][ T6341] can0: slcan on ttynull. [ 210.981120][ T6338] can0 (unregistered): slcan off ttynull. [ 214.403495][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.413247][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.433639][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.462616][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.481115][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.489380][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.083872][ T5090] Bluetooth: hci3: command 0x0406 tx timeout [ 218.083885][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 219.916545][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.109'. ¸[ 221.946838][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.962061][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.970228][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.991388][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.999148][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.007090][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.421806][ T6381] loop0: detected capacity change from 0 to 4096 [ 222.457403][ T6381] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 224.077589][ T6381] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 224.121455][ T6381] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 226.316465][ T6387] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15 [ 226.546883][ T6394] can0: slcan on ttynull. [ 226.631900][ T6393] can0 (unregistered): slcan off ttynull. [ 228.745836][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.119'. [ 228.799538][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.813969][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.826289][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.853033][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.862513][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.870397][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 ¸[ 229.826005][ T789] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 230.019423][ T6419] ceph: No mds server is up or the cluster is laggy [ 231.497822][ T5826] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 233.307491][ T6430] overlayfs: failed to verify upper (/file0, ino=8194, err=-116) [ 233.351318][ T6430] overlayfs: failed to verify index dir 'upper' xattr [ 233.372342][ T6430] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 233.869796][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.891149][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.899472][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.930020][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.942887][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.950358][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.237310][ T6439] netlink: 'syz.0.122': attribute type 10 has an invalid length. [ 234.256976][ T6435] loop3: detected capacity change from 0 to 32768 [ 234.301118][ T6440] loop0: detected capacity change from 0 to 8 [ 234.320186][ T6439] team0: Port device netdevsim0 added [ 234.373696][ T6440] SQUASHFS error: lzo decompression failed, data probably corrupt [ 234.391406][ T6440] SQUASHFS error: Failed to read block 0x28d: -5 [ 234.397839][ T6440] SQUASHFS error: Unable to read metadata cache entry [28b] [ 234.427890][ T6440] SQUASHFS error: Unable to read inode 0x11f [ 234.977232][ T6439] netlink: 'syz.0.122': attribute type 10 has an invalid length. [ 235.027944][ T6439] team0: Port device netdevsim0 removed [ 235.046415][ T6439] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 235.126766][ T6439] loop0: detected capacity change from 0 to 64 [ 235.136882][ T6439] ======================================================= [ 235.136882][ T6439] WARNING: The mand mount option has been deprecated and [ 235.136882][ T6439] and is ignored by this kernel. Remove the mand [ 235.136882][ T6439] option from the mount to silence this warning. [ 235.136882][ T6439] ======================================================= [ 235.224656][ T6439] Trying to free block not in datazone [ 235.297574][ T6439] netlink: 'syz.0.122': attribute type 8 has an invalid length. [ 235.313643][ T6439] syz.0.122 (6439) used greatest stack depth: 20392 bytes left [ 241.772856][ T6456] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input16 [ 242.402071][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.412279][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.420487][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.429671][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.438584][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.451381][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 ¸[ 244.694719][ T6478] overlayfs: failed to verify upper (/file0, ino=8194, err=-116) [ 244.730989][ T6478] overlayfs: failed to verify index dir 'upper' xattr [ 244.742130][ T6478] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 244.774102][ T6480] can0: slcan on ttynull. [ 244.842291][ T6477] can0 (unregistered): slcan off ttynull. [ 247.898993][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.924735][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.934333][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.942572][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.955141][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.965445][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.563031][ T6507] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input17 [ 252.005754][ T6516] overlayfs: failed to verify upper (/file0, ino=8194, err=-116) [ 252.021662][ T6516] overlayfs: failed to verify index dir 'upper' xattr [ 252.029187][ T6516] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 252.393086][ T6519] can0: slcan on ttynull. [ 252.481323][ T6518] can0 (unregistered): slcan off ttynull. [ 252.508428][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.518702][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.527727][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.564246][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.576833][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.585335][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.900677][ T6529] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input18 [ 254.073998][ T6531] loop0: detected capacity change from 0 to 512 [ 254.081750][ T6531] ext3: Unknown parameter 'measure' [ 256.087876][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.095092][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.678861][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.689905][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.699908][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.709774][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.720044][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 258.728333][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.807348][ T6541] loop3: detected capacity change from 0 to 32768 [ 262.871669][ T6561] FAULT_INJECTION: forcing a failure. [ 262.871669][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 262.885756][ T6561] CPU: 1 PID: 6561 Comm: syz.3.155 Not tainted syzkaller #0 [ 262.893856][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.904971][ T6561] Call Trace: [ 262.908629][ T6561] [ 262.911894][ T6561] dump_stack_lvl+0x18c/0x250 [ 262.917098][ T6561] ? show_regs_print_info+0x20/0x20 [ 262.922870][ T6561] ? load_image+0x420/0x420 [ 262.927908][ T6561] ? __might_sleep+0xe0/0xe0 [ 262.933008][ T6561] ? __lock_acquire+0x7eb0/0x7eb0 [ 262.938588][ T6561] should_fail_ex+0x394/0x4c0 [ 262.943799][ T6561] should_failslab+0x9/0x20 [ 262.948849][ T6561] slab_pre_alloc_hook+0x59/0x300 [ 262.954435][ T6561] kmem_cache_alloc+0x5a/0x2c0 [ 262.959732][ T6561] ? security_file_alloc+0x34/0x120 [ 262.965525][ T6561] security_file_alloc+0x34/0x120 [ 262.971116][ T6561] init_file+0x94/0x1f0 [ 262.975741][ T6561] alloc_empty_file+0xb7/0x1d0 [ 262.981041][ T6561] alloc_file+0x5b/0x600 [ 262.985766][ T6561] alloc_file_pseudo+0x184/0x210 [ 262.991246][ T6561] ? fput+0x1a0/0x1a0 [ 262.995674][ T6561] ? alloc_fd+0x590/0x640 [ 263.000500][ T6561] sock_alloc_file+0xb7/0x280 [ 263.005709][ T6561] __sys_socket+0x140/0x1b0 [ 263.010728][ T6561] __x64_sys_socket+0x7a/0x90 [ 263.015930][ T6561] do_syscall_64+0x55/0xb0 [ 263.020835][ T6561] ? clear_bhb_loop+0x40/0x90 [ 263.026037][ T6561] ? clear_bhb_loop+0x40/0x90 [ 263.031237][ T6561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.037785][ T6561] RIP: 0033:0x7f5a3379e1d9 [ 263.042689][ T6561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.064309][ T6561] RSP: 002b:00007f5a3461cfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 263.073633][ T6561] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f5a3379e1d9 [ 263.082547][ T6561] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000009 [ 263.091404][ T6561] RBP: 00007f5a33835888 R08: 0000000000000000 R09: 0000000000000000 [ 263.100217][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.109054][ T6561] R13: 00007f5a33a26128 R14: 00007f5a33a26090 R15: 00007ffd5532c1d8 [ 263.118015][ T6561] [ 263.170094][ T6563] overlayfs: failed to verify upper (/file0, ino=8194, err=-116) [ 263.178930][ T6563] overlayfs: failed to verify index dir 'upper' xattr [ 263.187091][ T6563] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 263.503947][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.514693][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.524066][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.537813][ T6565] can0: slcan on ttynull. [ 263.546292][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.556266][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 263.565545][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.641132][ T6564] can0 (unregistered): slcan off ttynull. [ 264.749942][ T6577] loop0: detected capacity change from 0 to 512 [ 264.784102][ T6577] ext3: Unknown parameter 'measure' [ 265.561101][ T6498] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 271.485058][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.498794][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.521254][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.543040][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.561235][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.569366][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.623962][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.635634][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.662326][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.690312][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.703142][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.712613][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.505555][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.743884][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.540615][ T6603] loop0: detected capacity change from 0 to 512 [ 274.548303][ T6603] ext3: Unknown parameter 'measure' [ 274.844631][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.876991][ T6608] overlayfs: failed to verify upper (/file0, ino=8194, err=-116) [ 274.901330][ T6608] overlayfs: failed to verify index dir 'upper' xattr [ 274.908891][ T6608] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 275.011868][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.525769][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.535795][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.548224][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.561553][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.583645][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.599923][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.645728][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.656231][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.668319][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.682253][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.700358][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.708716][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=47 state=3 status=67 (errno 9: Bad file descriptor) [ 277.653652][ T6634] can0: slcan on ttynull. [ 277.753048][ T6633] can0 (unregistered): slcan off ttynull. [ 278.585712][ T42] hsr_slave_0: left promiscuous mode [ 278.604496][ T42] hsr_slave_1: left promiscuous mode [ 278.622054][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.630314][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.652010][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.660244][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.690531][ T42] bridge_slave_1: left allmulticast mode [ 278.697043][ T42] bridge_slave_1: left promiscuous mode [ 278.704062][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.715249][ T42] bridge_slave_0: left allmulticast mode [ 278.722861][ T42] bridge_slave_0: left promiscuous mode [ 278.729258][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.760416][ T42] veth1_macvtap: left promiscuous mode [ 278.766884][ T42] veth0_macvtap: left promiscuous mode [ 278.775196][ T42] veth1_vlan: left promiscuous mode [ 278.781174][ T42] veth0_vlan: left promiscuous mode [ 279.333309][ T42] team0 (unregistering): Port device team_slave_1 removed [ 279.376287][ T42] team0 (unregistering): Port device team_slave_0 removed [ 279.417560][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.462500][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.753665][ T42] bond0 (unregistering): Released all slaves [ 280.367168][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.458560][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.515909][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.565386][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.694343][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.792519][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.856972][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.938130][ T42] bond0: (slave netdevsim0): Releasing backup interface [ 280.950580][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.258858][ T42] hsr_slave_0: left promiscuous mode [ 282.265650][ T42] hsr_slave_1: left promiscuous mode [ 282.272885][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.281123][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.290283][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.302325][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.313740][ T42] bridge_slave_1: left allmulticast mode [ 282.320014][ T42] bridge_slave_1: left promiscuous mode [ 282.329239][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.346392][ T42] bridge_slave_0: left allmulticast mode [ 282.354316][ T42] bridge_slave_0: left promiscuous mode [ 282.360925][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.379100][ T42] hsr_slave_0: left promiscuous mode [ 282.386192][ T42] hsr_slave_1: left promiscuous mode [ 282.393978][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.402307][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.413442][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.422940][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.443289][ T42] bridge_slave_1: left allmulticast mode [ 282.449575][ T42] bridge_slave_1: left promiscuous mode [ 282.457062][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.469415][ T42] bridge_slave_0: left allmulticast mode [ 282.477266][ T42] bridge_slave_0: left promiscuous mode [ 282.486304][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.530110][ T42] veth1_macvtap: left promiscuous mode [ 282.536457][ T42] veth0_macvtap: left promiscuous mode [ 282.543935][ T42] veth1_vlan: left promiscuous mode [ 282.549821][ T42] veth0_vlan: left promiscuous mode [ 282.559578][ T42] veth1_macvtap: left promiscuous mode [ 282.568293][ T42] veth0_macvtap: left promiscuous mode [ 282.576196][ T42] veth1_vlan: left promiscuous mode [ 282.584329][ T42] veth0_vlan: left promiscuous mode [ 283.275167][ T42] team0 (unregistering): Port device team_slave_1 removed [ 283.318363][ T42] team0 (unregistering): Port device team_slave_0 removed [ 283.358747][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.409565][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.730131][ T42] bond0 (unregistering): Released all slaves [ 284.217961][ T42] team0 (unregistering): Port device team_slave_1 removed [ 284.265290][ T42] team0 (unregistering): Port device team_slave_0 removed [ 284.310503][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.355050][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.673629][ T42] bond0 (unregistering): Released all slaves