last executing test programs: 1.453701521s ago: executing program 3 (id=678): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYRES16], 0x0, 0x68, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000040), 0x1000000000000206) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.40619959s ago: executing program 2 (id=680): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000100)={0x90, 0x0, 0x0, [{0x0, 0x2, 0x0, 0x1ff}, {0x6, 0xfffffffffffff5bc, 0x0, 0x6}, {0x5, 0x0, 0xf, 0xb, '/dev/dlm_plock\x00'}, {0x3, 0x8, 0xf, 0x5, '/dev/dlm_plock\x00'}]}, 0x90) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000480)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendto$inet6(r2, 0x0, 0x0, 0x14044804, &(0x7f0000000140)={0xa, 0x4e21, 0x767, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/127, 0xfffffffffffffca2}, 0x5}], 0x1, 0x40012041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x3, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x8, 0x4, "43ac5b8bc30032b1a75e04baa8e72627aad217bfc92f2561ad2f7a24caf03916484c0afde9003a1a5e3c160cde5e9f60293b3d89e455bbe79b16f6f6a819c9", 0x3b}, 0x60) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, "d92984bd1ca44c226af5160e961711a077b88375b78411e88509de05000000020010000080000000000000000aabeb00", 0x1002c}, 0x60) 1.369749979s ago: executing program 2 (id=682): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.368791253s ago: executing program 3 (id=683): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x4000000, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) fchownat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x100) (async) getsockopt$inet_opts(r0, 0x84, 0x80, 0xfffffffffffffffe, &(0x7f0000000000)=0x39) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e24, @empty}}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000c00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0/file0\x00', 0x200088b, &(0x7f0000002c40)={[], [{@audit}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x40}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@euid_gt={'euid>', r1}}]}, 0x0, 0x56e, &(0x7f0000000680)="$eJzs3V9rJWcZAPBnJjn5s5vdpOqFFlqrXdktuiebxrZBpFYQvSqI7f0ak7Mh7EnOkpy0m1Bs9hMIIip4pTfeCH4AQRa88VKEgvVWoaKIbhX0Qjsyk8kmezInSevJOU3y+8HsvPPOn+d5l/POmTkzmQng3HoqIl6KiPeyLHsmIibL+rQcYntnyJd798EbC/mQRJa98rckkrJud1tJOb5YrjYWEd/4WsS3koNx1ze3bs83m421cnq6vXJnen1z6/ryyvxSY6mxOjs78/zcC3PPzd3oSTsvRcSLX/nT97/z06+++MvPvf7Hm3+59u08rYmymfvb8T4NHzZzp+m10bGOFdY+YLAPo7w9td2J8eOtc+8E8wEAoLv84PcjEfHpiHgmJmPo8MNZAAAA4BTKvjQR/0kismojXeoBAACAUyQt7oFN0np5L8BEpGm9vnMP78fiQtpsrbc/e6u1sbpY3CsbU1FLby03GzfKe4Wnopbk0zNFeW/62Y7p2Yh4LCK+NzleTNcXWs3FQf/4AQAAAOfExY7z/39O7pz/AwAAAGfM1KATAAAAAE7cBz3/T3ucBwAAAHByXP8HAACAM+3rL7+cD9nu+68XX9vcuN167fpiY/12fWVjob7QWrtTX2q1lopn9q0ctb1mq3Xn87G6cXe63VhvT69vbt1caW2stm8ux1hfGgQAAAAc8Ngn77+dRMT2F8aLITcy6KSAvhh+WErKcUXv/8PlnfE7fUoK6IuhzorLB5d5Z7R6XccJcLoNd1Z06evA2VMbdALAwCVHzO96885vyvGnepsPAADQe1c/cf/t0Yrr/0MRMX7omtue/genXEcnzt4cVCJA3/3+0et92eTAMgH6rbj+f9wbeRzxw5lSO3gHIHDO/N/X/4+UZe8rIQAAoOcmiiFJ6+XPexORpvV6xKXitQC15NZys3Gj/LPA303WRvPpmWLN5MhzBgAAAAAAAAAAAAAAAAAAAAAAAABgR5aNRpaNFKUOSVUlAAAAcPpEpH9OfrXzLP+rk1cmOn8fGEn+XbwSeCQiXv/RKz+4O99ur83k9X9/WN/+YVn/bPVvDF/0ogAAAADoq93z9GL8r0FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZ8+6DNxZ2h2MsPt6ruH/9ckRMVcUfjrFiPBa1iLjwjySG962XRMRQD+Jv34uIj1fFT/K0HoasiJ8Mn3z8mCr/F6raf7EH8eE8u5/vf16q6n9pPFWMq/vfcET0ov933//Fw/3fUJf+f2n/hkart3/l1YjH3/r5dNf49yIeH340/uVHNjhWxKqK//Qx2/jNV7e2us3Lfhxxdff7p9jj7Y+wV5pur9yZXt/cur68Mr/UWGqszs7OPD/3wtxzczemby03G+W/lTG++8Qv3jus/Rcqv/+SMpvu7b9Ssb2q76T/vnX3wUd3J7YPxr/2dEX8X/+kXOJg/LSM85mynM+/ulve3inv9+TPfvtktyTz+It77a/tb//YEe2/VtHWPele8UBHeeK4Hx0A4ASsb27dnm82G2sflkI22uPExiPiOAuPxMDbrtDnwps93WCWZVn+0a2YdT8ijrOdJOZrPW1pWp3PXqFrRxvwjgkAAOi5/Fh/ZNBJAAAAAAAAAAAAAAAAAAAAwDm399CvSE7qKWudMfcegdyTR+gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTE/wIAAP//hl7IRg==") r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x7801, 0x700, 0xf, 0x3, {{0x24, 0x4, 0x2, 0x4, 0x90, 0x65, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010102, {[@lsrr={0x83, 0x13, 0xf4, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x2b, 0xe3, [@loopback, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}]}, @end, @rr={0x7, 0x23, 0x92, [@remote, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @loopback]}, @end, @timestamp={0x44, 0x18, 0xa2, 0x0, 0xf, [0x2, 0x1, 0x6, 0x2, 0x2]}]}}}}}) bind$packet(r2, &(0x7f0000000240)={0x11, 0xd, r3, 0x1, 0x40, 0x6, @local}, 0x14) 1.336146893s ago: executing program 3 (id=684): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000007c0)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 1.311681863s ago: executing program 3 (id=685): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffffb, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffa9, 0x4a}, 0x9c) 1.21997254s ago: executing program 2 (id=689): r0 = socket(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) setrlimit(0x40000000000008, &(0x7f0000000000)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x2, 0x0, @void}, 0x10) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) 1.166959858s ago: executing program 2 (id=690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800d515be2a97024a7965000c00028006000e0012000000f9227dbce8d456148cad23c83817bb35faf341125c1c7f884316f5cfc575aa109bd758b9d04ce687c07d15b3fa4ff8b271107cac8105296e332045d7d9fe2b3ccb915d94540fd0bf21504e667216a06c3550192b327c8e932380f4d5641729c7d0479c85a1db5b35c573062ccfa752"], 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_EMATCHES={0x4c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6}, {0x7, 0x4f, 0x3, 0x2}}}, @TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x1000}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1c64eec146f37431}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x3000000}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) 1.067746349s ago: executing program 0 (id=692): socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x541b, 0xffffffffffffffff) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x541b, 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0xd, 0x4) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) (async) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000100)={0xc, 0x1, 0x7, {0x10, 0x5, 0x1000, 0x2}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x280, 0xfe3e) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000000), 0x80) (async) pipe2(&(0x7f0000000000), 0x80) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="2213d3ae303f049be5e169931e92dee61d15238c574a8505d2c6fb75bd2f21b52206f3fc8231dae59d2a3c80dd1cf71df19c3994e65be6ee47379df730f69b6ad5e2fbb25d067d8b7675bed674ff6c823b033239b51b19d8684ba2398a58ae", 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="92dba7cc4e4fe50a93d5de1baaf50bbbf2eabd1d9a34aa9072af6fee1096e10f7d3457909b2d05533e04734c882101a130479f1f2fb09b39bb384f5d03b064388215c1f38cd1e8e12bdb765610e6cc54c60abc2b594784cd1396f265db0ce6aa3c", 0x61}, {&(0x7f0000000600)="6cb9b5ed91ee06e31b329aaaa4a64f8fa6270166d3d080904b759c88abab7238eaa063fa30bb668dce79bcf9fb8a890b00f98b1f7b0aa2d8dbd95626cecf55e25bae5de7881f4104e5decd17d3f114552b1823c193aba621e46d3f4517296b8ab5e26a0fe8046927b9833816d92dbefb90d76f9f7fea0391b305c1cb1ee06648ef3830ed26ddc6344d3cc2b7dfc939afef93447e99e2d747cf37513d087578a3dae42244248a398db533031d311275", 0xaf}, {&(0x7f00000006c0)="92933ae6adb1fbe9f93f904b11157cbe3d27e7dbdc7f9cccef5f06a85d3511526419362ad07778698bcebc880c5e77b2b383be1189b36200bce422d231acbfe6a476aebf0e18d3b7bff6d94f364d70bf82c296bb5e8c6c8d06", 0x59}, {&(0x7f0000000880)="e7563d3bb5ebdd5911d6455ec077369c67edc049c04cedaa94a80fda6648457f7a33c1a416dc225c16532da98fe761fae7f3af41b44ad74fc305a1bc7e36fb0775781c4cd5fd363237d965eeae4dd235564063f2661696ef27e44c9ad566d32ab793bf8f1207a834189e7953188fa13cc3fa9e73ab24555264b41ca4d39dd58d64f08f4d6606c05597bc7bbc95ec8cd3790dee4a84568232eb25b0ad97263f0d67d4e9c73dc9f97a8d73ae1d528757b6f07b0d24d2b791f5e26187ffd55c14b8f283d7477b423303798d0973", 0xcc}], 0x4}}], 0x2, 0x4080) 1.047059702s ago: executing program 0 (id=694): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc400, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@errors_continue}]}, 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r1 = openat$incfs(0xffffffffffffff9c, 0x0, 0xc21c2, 0x9c37611dc13d0d3f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001800010400000000000000000a140000fe0200010000000014000500ff01000000000000000000000000000108000400", @ANYRES32=0x2], 0x50}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x8) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000004c0)=0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) sendmmsg$inet(r1, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000200)="a3120a3e7a123e85fa95a5ea2f59dd121acd3a402aec7622437edc10e70a43958271222427b9f10f1db8a23edff84fc0f9620329d681b18c43971cf38a5b01caf87e96a281a8ac4125585d113d024b7b966c2eaf39e9545d586f28418b32e794e209b5b741ab39e435b3de9fa7a44110fc6873bf33e987d2cf80080623160404f9d6d83d4608c35d855321f458554955da9d7f5ae45c90ea753f6513adb9a10e1e196b65e6a39a8d72cc0bb4ff6067224cb87767dbb6137408f99b92253402c8108ed53e6b3a4596714a0d0c89", 0xcd}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000480), 0x0, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200003}}], 0x18}}], 0x2, 0x0) 1.0151757s ago: executing program 0 (id=695): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x408000, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x6, 0x3, 0x80880}) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x38bc43, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x1400) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0xb9, 0x505800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002cbd7000000000000900020073797a30000000000800410073691000140033006c6f0000000000000000000000b01000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) write$smackfs_cipsonum(r5, &(0x7f0000000040)=0x1000, 0x14) 1.014891324s ago: executing program 4 (id=696): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000007c0)='asymmetric\x00', 0x0, &(0x7f0000000d80), 0x0, r0) 991.960584ms ago: executing program 2 (id=697): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000340)=@x25={0x9, @remote}, &(0x7f00000003c0)=0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) fallocate(r1, 0x0, 0x0, 0x10000) pwrite64(r1, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c532ba90100"/236, 0xec, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf257b00000008000300", @ANYRES32=r4, @ANYBLOB="1a6989fc9ad247d0b09973dad797a572a0c8ff4ad84901fc93167cc02fba2bfa4dadf992dfb9655ee8427e8fcccef6bed2b2fe6354dab3a398e43275d690b7792f6adc0458f623a3e98f7e73a84564b519ac354d3bda17511593fe3df8aefb7a59ad60f1905aa32f0c90e136d6291377fa01daf553adafa1382a6bbdf445d973990ff7330c0a89644eaf73eed06550d63a6d128ac817585e894ca20786876894687ab48391668ec68b7d2807c128003053fd"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x1000, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='md123', 0x5) openat(0xffffffffffffffff, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000700)='7:0\x00', 0x4) 981.39813ms ago: executing program 4 (id=698): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x40000000015, 0x5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setreuid(r0, 0x0) socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, 0xffffffffffffffff) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r2, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r2], 0x30}, 0x4004000) 907.600228ms ago: executing program 4 (id=699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 603.348545ms ago: executing program 2 (id=700): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ab) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/del_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=+x44444444444444', 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x28080c1, &(0x7f0000000600)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@check_strict}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=") r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000280)=""/59, 0x5e) 602.665815ms ago: executing program 4 (id=701): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 580.001821ms ago: executing program 1 (id=702): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) (fail_nth: 1) 572.396275ms ago: executing program 4 (id=703): syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000800)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x80, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) 527.01156ms ago: executing program 1 (id=704): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 477.369649ms ago: executing program 4 (id=705): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000240)=0x8, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 469.548097ms ago: executing program 1 (id=706): syz_read_part_table(0x1052, &(0x7f0000000000)="$eJzsz7GNAjEUBNDZ9Z6OjWiJBsigHiCnEqqgCOqgAiQjG4REA0Dwnhz8Px4HDl81ppY5y9c+Z8x52CRZJYe3as2UfRtKFkkt/XWyvrTsP8nUa9ckQ5+G1Idd2//66fnt+Lzfnj71TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ZfcAAAD//4pMEbg=") (fail_nth: 2) 197.090146ms ago: executing program 3 (id=707): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00001c205f"], 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4d8, 0x0, 0x220, 0xffffffff, 0xf0, 0x0, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x15, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@loopback, @port=0x4e20, @gre_key=0x7}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @gre_key=0x40}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff00, 0x0, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xff], 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x87, 0x0, 0x2, 0x30}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"c5cb", 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 168.928965ms ago: executing program 1 (id=708): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000007c0)='asymmetric\x00', 0x0, &(0x7f0000000d80), 0x0, r0) 141.264717ms ago: executing program 3 (id=709): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ab) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/del_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=+x44444444444444', 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x28080c1, &(0x7f0000000600)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@check_strict}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=") r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) getdents64(r5, &(0x7f0000000280)=""/59, 0x5e) 127.432629ms ago: executing program 1 (id=710): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000340)=@x25={0x9, @remote}, &(0x7f00000003c0)=0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) fallocate(r1, 0x0, 0x0, 0x10000) pwrite64(r1, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c532ba90100"/236, 0xec, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf257b00000008000300", @ANYRES32=r4, @ANYBLOB="1a6989fc9ad247d0b09973dad797a572a0c8ff4ad84901fc93167cc02fba2bfa4dadf992dfb9655ee8427e8fcccef6bed2b2fe6354dab3a398e43275d690b7792f6adc0458f623a3e98f7e73a84564b519ac354d3bda17511593fe3df8aefb7a59ad60f1905aa32f0c90e136d6291377fa01daf553adafa1382a6bbdf445d973990ff7330c0a89644eaf73eed06550d63a6d128ac817585e894ca20786876894687ab48391668ec68b7d2807c128003053fd"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x1000, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='md123', 0x5) openat(0xffffffffffffffff, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000700)='7:0\x00', 0x4) 114.822869ms ago: executing program 0 (id=711): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@rand_addr=0x64010101, @rand_addr=0x64010100, 0xffffffffffffffff, "49a4316516250ec5a443aa71e69773565c07583330dbf1f35cb3b53bf203b2f4", 0x4e8a, 0xa, 0xa, 0x2}, 0x3c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1}, {@in6=@loopback, 0x0, 0x32}, @in6=@private2}, 0x0, 0x2000000}, [@XFRMA_IF_ID={0x8}, @mark={0xc}]}, 0x10c}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74097d88", @ANYRES16=r3, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000"], 0x34}}, 0x20000034) 34.045908ms ago: executing program 0 (id=712): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0285629, &(0x7f00000002c0)=0x3) listen(r0, 0xf5f) 23.325712ms ago: executing program 1 (id=713): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 0s ago: executing program 0 (id=714): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) kernel console output (not intermixed with test programs): pped ** ** 86 printk messages dropped ** ** 81 printk messages dropped ** ** 81 printk messages dropped ** ** 81 printk messages dropped ** ** 81 printk messages dropped ** ** 83 printk messages dropped ** ** 81 printk messages dropped ** ** 89 printk messages dropped ** ** 89 printk messages dropped ** ** 29 printk messages dropped ** ** 3692 printk messages dropped ** ** 91 printk messages dropped ** ** 89 printk messages dropped ** ** 94 printk messages dropped ** ** 110 printk messages dropped ** ** 107 printk messages dropped ** ** 109 printk messages dropped ** ** 103 printk messages dropped ** ** 113 printk messages dropped ** ** 109 printk messages dropped ** ** 117 printk messages dropped ** ** 109 printk messages dropped ** ** 200 printk messages dropped ** ** 45995 printk messages dropped ** [ 40.343663][ T5220] syz_tun: entered allmulticast mode [ 40.365155][ T5227] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 40.929324][ T5240] CUSE: unknown device info "" [ 40.929333][ T5240] CUSE: unknown device info "" [ 40.929340][ T5240] CUSE: unknown device info "ÿw" [ 40.929346][ T5240] CUSE: zero length info key specified ** 142989 printk messages dropped ** ** 109 printk messages dropped ** ** 88 printk messages dropped ** ** 90 printk messages dropped ** ** 89 printk messages dropped ** ** 91 printk messages dropped ** ** 99 printk messages dropped ** ** 92 printk messages dropped ** ** 100 printk messages dropped ** ** 97 printk messages dropped ** ** 85 printk messages dropped ** ** 83 printk messages dropped ** ** 79 printk messages dropped ** ** 78 printk messages dropped ** ** 80 printk messages dropped ** ** 81 printk messages dropped ** ** 83 printk messages dropped ** ** 80 printk messages dropped ** ** 79 printk messages dropped ** ** 85 printk messages dropped ** ** 102 printk messages dropped ** ** 80 printk messages dropped ** ** 83 printk messages dropped ** ** 93 printk messages dropped ** ** 83 printk messages dropped ** ** 86 printk messages dropped ** ** 83 printk messages dropped ** ** 83 printk messages dropped ** ** 101 printk messages dropped ** ** 106 printk messages dropped ** ** 107 printk messages dropped ** ** 104 printk messages dropped ** ** 82 printk messages dropped ** ** 83 printk messages dropped ** ** 89 printk messages dropped ** ** 84 printk messages dropped ** ** 83 printk messages dropped ** ** 76 printk messages dropped ** ** 80 printk messages dropped ** ** 85 printk messages dropped ** ** 82 printk messages dropped ** ** 77 printk messages dropped ** ** 93 printk messages dropped ** ** 77 printk messages dropped ** ** 77 printk messages dropped ** ** 89 printk messages dropped ** ** 75 printk messages dropped ** ** 79 printk messages dropped ** ** 79 printk messages dropped ** ** 121 printk messages dropped ** ** 106 printk messages dropped ** ** 109 printk messages dropped ** ** 101 printk messages dropped ** ** 135 printk messages dropped ** ** 31 printk messages dropped ** ** 4332 printk messages dropped ** ** 53358 printk messages dropped ** ** 121 printk messages dropped ** ** 108 printk messages dropped ** ** 104 printk messages dropped ** ** 89 printk messages dropped ** ** 85 printk messages dropped ** ** 100 printk messages dropped ** ** 88 printk messages dropped ** ** 89 printk messages dropped ** ** 84 printk messages dropped ** ** 98 printk messages dropped ** ** 101 printk messages dropped ** ** 132 printk messages dropped ** ** 94 printk messages dropped ** ** 86 printk messages dropped ** ** 87 printk messages dropped ** ** 89 printk messages dropped ** ** 89 printk messages dropped ** ** 83 printk messages dropped ** ** 82 printk messages dropped ** ** 94 printk messages dropped ** ** 88 printk messages dropped ** ** 86 printk messages dropped ** ** 97 printk messages dropped ** ** 106 printk messages dropped ** ** 96 printk messages dropped ** ** 94 printk messages dropped ** ** 96 printk messages dropped ** ** 101 printk messages dropped ** ** 117 printk messages dropped ** ** 109 printk messages dropped ** ** 98 printk messages dropped ** ** 106 printk messages dropped ** ** 100 printk messages dropped ** ** 102 printk messages dropped ** ** 95 printk messages dropped ** ** 90 printk messages dropped ** ** 103 printk messages dropped ** ** 100 printk messages dropped ** ** 3693 printk messages dropped ** ** 129 printk messages dropped ** ** 109 printk messages dropped ** ** 103 printk messages dropped ** ** 111 printk messages dropped ** ** 113 printk messages dropped ** ** 115 printk messages dropped ** ** 102 printk messages dropped ** ** 98 printk messages dropped ** ** 123 printk messages dropped ** ** 110 printk messages dropped ** ** 129 printk messages dropped ** ** 127 printk messages dropped ** ** 113 printk messages dropped ** ** 128 printk messages dropped ** ** 115 printk messages dropped ** ** 108 printk messages dropped ** ** 112 printk messages dropped ** ** 121 printk messages dropped ** ** 132 printk messages dropped ** ** 110 printk messages dropped ** ** 118 printk messages dropped ** ** 124 printk messages dropped ** ** 110 printk messages dropped ** ** 102 printk messages dropped ** ** 97 printk messages dropped ** ** 101 printk messages dropped ** ** 104 printk messages dropped ** ** 158 printk messages dropped ** ** 116 printk messages dropped ** ** 115 printk messages dropped ** ** 120 printk messages dropped ** ** 42 printk messages dropped ** ** 71 printk messages dropped ** ** 100 printk messages dropped ** ** 100 printk messages dropped ** ** 105 printk messages dropped ** ** 102 printk messages dropped ** ** 98 printk messages dropped ** ** 98 printk messages dropped ** ** 99 printk messages dropped ** ** 104 printk messages dropped ** ** 98 printk messages dropped ** ** 90 printk messages dropped ** ** 89 printk messages dropped ** ** 125 printk messages dropped ** ** 110 printk messages dropped ** ** 105 printk messages dropped ** ** 96 printk messages dropped ** ** 95 printk messages dropped ** ** 107 printk messages dropped ** ** 93 printk messages dropped ** ** 92 printk messages dropped ** ** 94 printk messages dropped ** ** 91 printk messages dropped ** ** 89 printk messages dropped ** ** 102 printk messages dropped ** ** 112 printk messages dropped ** ** 107 printk messages dropped ** ** 89 printk messages dropped ** ** 84 printk messages dropped ** ** 104 printk messages dropped ** ** 103 printk messages dropped ** ** 92 printk messages dropped ** ** 97 printk messages dropped ** ** 91 printk messages dropped ** ** 91 printk messages dropped ** ** 81 printk messages dropped ** ** 87 printk messages dropped ** ** 84 printk messages dropped ** ** 91 printk messages dropped ** ** 87 printk messages dropped ** ** 84 printk messages dropped ** ** 95 printk messages dropped ** ** 53 printk messages dropped ** ** 81 printk messages dropped ** ** 89 printk messages dropped ** ** 86 printk messages dropped ** ** 103 printk messages dropped ** ** 90 printk messages dropped ** ** 103 printk messages dropped ** ** 97 printk messages dropped ** ** 103 printk messages dropped ** ** 98 printk messages dropped ** ** 87 printk messages dropped ** ** 89 printk messages dropped ** ** 90 printk messages dropped ** ** 88 printk messages dropped ** ** 86 printk messages dropped ** ** 86 printk messages dropped ** ** 83 printk messages dropped ** ** 89 printk messages dropped ** ** 87 printk messages dropped ** ** 92 printk messages dropped ** ** 89 printk messages dropped ** ** 144 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 106 printk messages dropped ** ** 97 printk messages dropped ** ** 90 printk messages dropped ** ** 93 printk messages dropped ** ** 103 printk messages dropped ** ** 101 printk messages dropped ** ** 94 printk messages dropped ** ** 86 printk messages dropped ** ** 83 printk messages dropped ** ** 86 printk messages dropped ** ** 86 printk messages dropped ** ** 85 printk messages dropped ** ** 85 printk messages dropped ** ** 101 printk messages dropped ** ** 103 printk messages dropped ** ** 111 printk messages dropped ** ** 103 printk messages dropped ** ** 106 printk messages dropped ** ** 90 printk messages dropped ** ** 102 printk messages dropped ** ** 54 printk messages dropped ** ** 96 printk messages dropped ** ** 102 printk messages dropped ** ** 130 printk messages dropped ** ** 107 printk messages dropped ** ** 105 printk messages dropped ** ** 105 printk messages dropped ** ** 95 printk messages dropped ** ** 90 printk messages dropped ** ** 827 printk messages dropped ** ** 119 printk messages dropped ** ** 96 printk messages dropped ** ** 111 printk messages dropped ** ** 102 printk messages dropped ** ** 112 printk messages dropped ** ** 97 printk messages dropped ** ** 101 printk messages dropped ** ** 98 printk messages dropped ** ** 110 printk messages dropped ** ** 91 printk messages dropped ** ** 82 printk messages dropped ** ** 90 printk messages dropped ** ** 95 printk messages dropped ** ** 106 printk messages dropped ** ** 113 printk messages dropped ** ** 114 printk messages dropped ** ** 105 printk messages dropped ** ** 97 printk messages dropped ** ** 103 printk messages dropped ** ** 97 printk messages dropped ** ** 109 printk messages dropped ** ** 103 printk messages dropped ** ** 109 printk messages dropped ** ** 30 printk messages dropped ** ** 155 printk messages dropped ** ** 107 printk messages dropped ** ** 99 printk messages dropped ** ** 94 printk messages dropped ** ** 92 printk messages dropped ** ** 90 printk messages dropped ** ** 85 printk messages dropped ** ** 91 printk messages dropped ** ** 88 printk messages dropped ** ** 91 printk messages dropped ** ** 104 printk messages dropped ** ** 91 printk messages dropped ** ** 89 printk messages dropped ** ** 83 printk messages dropped ** ** 86 printk messages dropped ** ** 85 printk messages dropped ** ** 109 printk messages dropped ** ** 93 printk messages dropped ** ** 83 printk messages dropped ** ** 84 printk messages dropped ** ** 96 printk messages dropped ** ** 91 printk messages dropped ** ** 84 printk messages dropped ** ** 87 printk messages dropped ** ** 79 printk messages dropped ** ** 81 printk messages dropped ** ** 86 printk messages dropped ** ** 84 printk messages dropped ** ** 94 printk messages dropped ** ** 110 printk messages dropped ** ** 106 printk messages dropped ** ** 116 printk messages dropped ** ** 98 printk messages dropped ** ** 117 printk messages dropped ** ** 96 printk messages dropped ** ** 87 printk messages dropped ** ** 82 printk messages dropped ** ** 85 printk messages dropped ** ** 85 printk messages dropped ** ** 89 printk messages dropped ** ** 82 printk messages dropped ** ** 81 printk messages dropped ** ** 82 printk messages dropped ** ** 81 printk messages dropped ** ** 90 printk messages dropped ** ** 83 printk messages dropped ** ** 83 printk messages dropped ** ** 78 printk messages dropped ** ** 82 printk messages dropped ** ** 92 printk messages dropped ** ** 100 printk messages dropped ** ** 128 printk messages dropped ** ** 117 printk messages dropped ** ** 113 printk messages dropped ** ** 19 printk messages dropped ** ** 63 printk messages dropped ** ** 101 printk messages dropped ** ** 100 printk messages dropped ** ** 105 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 104 printk messages dropped ** ** 110 printk messages dropped ** ** 111 printk messages dropped ** ** 108 printk messages dropped ** ** 113 printk messages dropped ** ** 121 printk messages dropped ** ** 117 printk messages dropped ** ** 111 printk messages dropped ** ** 107 printk messages dropped ** ** 109 printk messages dropped ** ** 107 printk messages dropped ** ** 105 printk messages dropped ** ** 100 printk messages dropped ** ** 104 printk messages dropped ** ** 90 printk messages dropped ** ** 84 printk messages dropped ** ** 89 printk messages dropped ** ** 81 printk messages dropped ** ** 104 printk messages dropped ** ** 95 printk messages dropped ** ** 88 printk messages dropped ** ** 85 printk messages dropped ** ** 94 printk messages dropped ** ** 103 printk messages dropped ** ** 18991 printk messages dropped ** [ 42.769866][ T5265] overlayfs: missing 'lowerdir' [ 43.137882][ T5276] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 43.162926][ T5276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.202611][ T5276] bond1: (slave veth3): Enslaving as an active interface with a down link [ 43.203230][ T5286] loop1: detected capacity change from 0 to 8 [ 43.266131][ T5276] bond1: (slave dummy0): making interface the new active one [ 43.266408][ T5286] SQUASHFS error: Unable to read inode 0xa7 [ 43.266826][ T5276] dummy0: entered promiscuous mode [ 43.267032][ T5276] bond1: (slave dummy0): Enslaving as an active interface with an up link ** 800 printk messages dropped ** [ 43.355616][ T4801] usb 1-1: new high-speed USB device number 2 using dummy_hcd ** 5511 printk messages dropped ** [ 43.556650][ T4801] usb 1-1: device descriptor read/64, error -71 ** 209 printk messages dropped ** ** 82 printk messages dropped ** ** 109 printk messages dropped ** ** 82 printk messages dropped ** [ 43.790061][ T4801] usb 1-1: new high-speed USB device number 3 using dummy_hcd ** 4491 printk messages dropped ** [ 43.930029][ T4801] usb 1-1: device descriptor read/64, error -71 ** 951 printk messages dropped ** [ 44.002110][ T5302] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 44.079822][ C1] net_ratelimit: 165 callbacks suppressed [ 44.187649][ T4801] usb usb1-port1: attempt power cycle [ 44.354059][ T5306] CUSE: unknown device info "" [ 44.354070][ T5306] CUSE: unknown device info "" [ 44.354077][ T5306] CUSE: unknown device info "ÿw" [ 44.354083][ T5306] CUSE: zero length info key specified ** 43333 printk messages dropped ** ** 4710 printk messages dropped ** ** 121 printk messages dropped ** ** 95 printk messages dropped ** ** 99 printk messages dropped ** ** 90 printk messages dropped ** ** 101 printk messages dropped ** ** 93 printk messages dropped ** ** 106 printk messages dropped ** ** 98 printk messages dropped ** ** 98 printk messages dropped ** ** 92 printk messages dropped ** ** 101 printk messages dropped ** ** 93 printk messages dropped ** ** 98 printk messages dropped ** ** 152 printk messages dropped ** ** 142 printk messages dropped ** ** 132 printk messages dropped ** ** 115 printk messages dropped ** ** 103 printk messages dropped ** ** 107 printk messages dropped ** ** 96 printk messages dropped ** ** 110 printk messages dropped ** ** 98 printk messages dropped ** ** 101 printk messages dropped ** ** 85 printk messages dropped ** ** 91 printk messages dropped ** ** 89 printk messages dropped ** ** 101 printk messages dropped ** ** 92 printk messages dropped ** ** 134 printk messages dropped ** ** 93 printk messages dropped ** ** 102 printk messages dropped ** ** 93 printk messages dropped ** ** 94 printk messages dropped ** ** 88 printk messages dropped ** ** 62 printk messages dropped ** ** 91 printk messages dropped ** ** 100 printk messages dropped ** ** 95 printk messages dropped ** ** 93 printk messages dropped ** ** 86 printk messages dropped ** ** 93 printk messages dropped ** ** 88 printk messages dropped ** ** 186 printk messages dropped ** ** 145 printk messages dropped ** ** 169 printk messages dropped ** ** 99 printk messages dropped ** ** 104 printk messages dropped ** ** 96 printk messages dropped ** ** 103 printk messages dropped ** ** 111 printk messages dropped ** ** 125 printk messages dropped ** ** 118 printk messages dropped ** ** 120 printk messages dropped ** ** 112 printk messages dropped ** ** 119 printk messages dropped ** ** 114 printk messages dropped ** ** 120 printk messages dropped ** ** 109 printk messages dropped ** ** 168 printk messages dropped ** ** 106 printk messages dropped ** ** 99 printk messages dropped ** ** 90 printk messages dropped ** ** 121 printk messages dropped ** ** 109 printk messages dropped ** ** 120 printk messages dropped ** ** 91 printk messages dropped ** ** 100 printk messages dropped ** ** 84 printk messages dropped ** ** 95 printk messages dropped ** ** 74 printk messages dropped ** ** 79 printk messages dropped ** ** 87 printk messages dropped ** ** 100 printk messages dropped ** ** 90 printk messages dropped ** ** 100 printk messages dropped ** ** 141 printk messages dropped ** ** 105 printk messages dropped ** ** 81 printk messages dropped ** ** 95 printk messages dropped ** ** 85 printk messages dropped ** ** 94 printk messages dropped ** ** 87 printk messages dropped ** ** 99 printk messages dropped ** ** 90 printk messages dropped ** ** 103 printk messages dropped ** ** 90 printk messages dropped ** ** 102 printk messages dropped ** ** 87 printk messages dropped ** ** 96 printk messages dropped ** ** 89 printk messages dropped ** ** 98 printk messages dropped ** ** 146 printk messages dropped ** ** 108 printk messages dropped ** ** 84 printk messages dropped ** ** 88 printk messages dropped ** ** 84 printk messages dropped ** ** 91 printk messages dropped ** ** 82 printk messages dropped ** ** 101 printk messages dropped ** ** 92 printk messages dropped ** ** 100 printk messages dropped ** ** 90 printk messages dropped ** ** 101 printk messages dropped ** ** 91 printk messages dropped ** ** 97 printk messages dropped ** ** 85 printk messages dropped ** ** 89 printk messages dropped ** ** 95 printk messages dropped ** ** 99 printk messages dropped ** ** 54 printk messages dropped ** ** 289 printk messages dropped ** ** 972 printk messages dropped ** ** 368 printk messages dropped ** ** 95 printk messages dropped ** ** 105 printk messages dropped ** ** 89 printk messages dropped ** ** 101 printk messages dropped ** ** 50 printk messages dropped ** ** 187 printk messages dropped ** ** 4 printk messages dropped ** ** 2 printk messages dropped ** [ 45.033323][ T4801] usb 1-1: new high-speed USB device number 5 using dummy_hcd ** 1193 printk messages dropped ** ** 4 printk messages dropped ** ** 6 printk messages dropped ** ** 53 printk messages dropped ** ** 24 printk messages dropped ** ** 32 printk messages dropped ** ** 6 printk messages dropped ** [ 45.084777][ T4801] usb 1-1: device descriptor read/8, error -71 ** 70 printk messages dropped ** [ 45.103655][ T5313] hsr_slave_1 (unregistering): left promiscuous mode ** 137 printk messages dropped ** ** 5 printk messages dropped ** [ 45.195779][ T4801] usb usb1-port1: unable to enumerate USB device ** 1076 printk messages dropped ** [ 45.246062][ T5318] loop4: detected capacity change from 0 to 512 [ 45.323945][ T5318] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.325335][ T5318] EXT4-fs (loop4): 1 truncate cleaned up [ 45.325765][ T5318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.333161][ T5322] loop3: detected capacity change from 0 to 128 [ 45.334247][ T5322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 45.334272][ T5322] System zones: 1-3, 19-19, 35-36 [ 45.334790][ T5322] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 45.335868][ T5322] warning: `syz.3.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 45.352847][ T4712] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.409912][ T5328] FAULT_INJECTION: forcing a failure. [ 45.409912][ T5328] name failslab, interval 1, probability 0, space 0, times 0 [ 45.409934][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.1.114 Not tainted syzkaller #0 PREEMPT [ 45.409944][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.409957][ T5328] Call trace: [ 45.409960][ T5328] show_stack+0x2c/0x3c (C) [ 45.409979][ T5328] __dump_stack+0x30/0x40 [ 45.409989][ T5328] dump_stack_lvl+0xd8/0x12c [ 45.409999][ T5328] dump_stack+0x1c/0x28 [ 45.410008][ T5328] should_fail_ex+0x418/0x58c [ 45.410019][ T5328] should_failslab+0xc4/0x120 [ 45.410030][ T5328] __kmalloc_cache_node_noprof+0x98/0x618 [ 45.410038][ T5328] __get_vm_area_node+0x188/0x32c [ 45.410046][ T5328] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 45.410054][ T5328] __vmalloc_node_noprof+0xec/0x14c [ 45.410062][ T5328] __vmalloc_noprof+0x64/0x8c [ 45.410070][ T5328] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 45.410079][ T5328] bpf_prog_alloc+0x48/0x110 [ 45.410087][ T5328] bpf_prog_load+0x5e0/0x1554 [ 45.410095][ T5328] __sys_bpf+0x7d4/0x82c [ 45.410102][ T5328] __arm64_sys_bpf+0xd0/0xec [ 45.410110][ T5328] invoke_syscall+0x98/0x244 [ 45.410120][ T5328] el0_svc_common+0xec/0x23c [ 45.410129][ T5328] do_el0_svc+0x4c/0x5c [ 45.410139][ T5328] el0_svc+0x60/0x1d8 [ 45.410148][ T5328] el0t_64_sync_handler+0x44/0x104 [ 45.410157][ T5328] el0t_64_sync+0x198/0x19c [ 45.410239][ T5328] syz.1.114: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 45.410351][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.1.114 Not tainted syzkaller #0 PREEMPT [ 45.410360][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.410369][ T5328] Call trace: [ 45.410372][ T5328] show_stack+0x2c/0x3c (C) [ 45.410382][ T5328] __dump_stack+0x30/0x40 [ 45.410392][ T5328] dump_stack_lvl+0xd8/0x12c [ 45.410401][ T5328] dump_stack+0x1c/0x28 [ 45.410410][ T5328] warn_alloc+0x1c4/0x1d8 [ 45.410420][ T5328] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 45.410429][ T5328] __vmalloc_node_noprof+0xec/0x14c [ 45.410437][ T5328] __vmalloc_noprof+0x64/0x8c [ 45.410445][ T5328] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 45.410453][ T5328] bpf_prog_alloc+0x48/0x110 [ 45.410460][ T5328] bpf_prog_load+0x5e0/0x1554 [ 45.410468][ T5328] __sys_bpf+0x7d4/0x82c [ 45.410476][ T5328] __arm64_sys_bpf+0xd0/0xec [ 45.410483][ T5328] invoke_syscall+0x98/0x244 [ 45.410493][ T5328] el0_svc_common+0xec/0x23c [ 45.410502][ T5328] do_el0_svc+0x4c/0x5c [ 45.410512][ T5328] el0_svc+0x60/0x1d8 [ 45.410520][ T5328] el0t_64_sync_handler+0x44/0x104 [ 45.410529][ T5328] el0t_64_sync+0x198/0x19c [ 45.410548][ T5328] Mem-Info: [ 45.410581][ T5328] active_anon:1469 inactive_anon:9191 isolated_anon:46 [ 45.410581][ T5328] active_file:3117 inactive_file:13840 isolated_file:0 [ 45.410581][ T5328] unevictable:768 dirty:69 writeback:0 [ 45.410581][ T5328] slab_reclaimable:9040 slab_unreclaimable:88048 [ 45.410581][ T5328] mapped:34799 shmem:6752 pagetables:1868 [ 45.410581][ T5328] sec_pagetables:0 bounce:0 [ 45.410581][ T5328] kernel_misc_reclaimable:0 [ 45.410581][ T5328] free:923927 free_pcp:45979 free_cma:7616 [ 45.410629][ T5328] Node 0 active_anon:5876kB inactive_anon:36764kB active_file:12468kB inactive_file:55360kB unevictable:3072kB isolated(anon):184kB isolated(file):0kB mapped:139196kB dirty:276kB writeback:0kB shmem:27008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8804kB pagetables:7472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 45.410677][ T5328] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 45.410733][ T5328] lowmem_reserve[]: 0 0 3652 3652 3652 [ 45.410822][ T5328] Node 0 Normal free:617820kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:5876kB inactive_anon:36764kB active_file:12468kB inactive_file:55360kB unevictable:3072kB writepending:276kB zspages:336kB present:5242880kB managed:3740016kB mlocked:0kB bounce:0kB free_pcp:183916kB local_pcp:131852kB free_cma:0kB [ 45.410866][ T5328] lowmem_reserve[]: 0 0 0 0 0 [ 45.410954][ T5328] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 45.411208][ T5328] Node 0 Normal: 157*4kB (UME) 589*8kB (UME) 244*16kB (UME) 559*32kB (UME) 306*64kB (UME) 180*128kB (UME) 113*256kB (UM) 106*512kB (UME) 82*1024kB (UM) 8*2048kB (UME) 89*4096kB (UM) = 617852kB [ 45.411550][ T5328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 45.411568][ T5328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 45.411613][ T5328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 45.411631][ T5328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 45.411649][ T5328] 23737 total pagecache pages [ 45.411663][ T5328] 8 pages in swap cache [ 45.411677][ T5328] Free swap = 124840kB [ 45.411690][ T5328] Total swap = 124996kB [ 45.411705][ T5328] 2097152 pages RAM [ 45.411718][ T5328] 0 pages HighMem/MovableOnly [ 45.411732][ T5328] 392100 pages reserved [ 45.411747][ T5328] 8192 pages cma reserved [ 45.411761][ T5328] 0 pages hwpoisoned [ 45.729151][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.776062][ T5332] loop4: detected capacity change from 0 to 128 [ 45.786119][ T5332] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.849518][ T5330] syzkaller0: entered promiscuous mode [ 45.849530][ T5330] syzkaller0: entered allmulticast mode [ 45.887522][ T5330] loop3: detected capacity change from 0 to 256 [ 46.020752][ T5331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.044144][ T5337] netlink: 76 bytes leftover after parsing attributes in process `syz.2.99'. [ 46.044166][ T5337] netlink: 76 bytes leftover after parsing attributes in process `syz.2.99'. [ 46.134074][ T5340] FAULT_INJECTION: forcing a failure. [ 46.134074][ T5340] name failslab, interval 1, probability 0, space 0, times 0 [ 46.134090][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.1.118 Not tainted syzkaller #0 PREEMPT [ 46.134101][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.134115][ T5340] Call trace: [ 46.134118][ T5340] show_stack+0x2c/0x3c (C) [ 46.134139][ T5340] __dump_stack+0x30/0x40 [ 46.134151][ T5340] dump_stack_lvl+0xd8/0x12c [ 46.134162][ T5340] dump_stack+0x1c/0x28 [ 46.134173][ T5340] should_fail_ex+0x418/0x58c [ 46.134186][ T5340] should_failslab+0xc4/0x120 [ 46.134199][ T5340] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 46.134214][ T5340] proc_alloc_inode+0x2c/0xb8 [ 46.134227][ T5340] alloc_inode+0x68/0x198 [ 46.134239][ T5340] new_inode+0x20/0x50 [ 46.134249][ T5340] proc_get_inode+0x30/0x5bc [ 46.134261][ T5340] proc_lookup_de+0xfc/0x204 [ 46.134271][ T5340] proc_lookup+0xd0/0xf0 [ 46.134280][ T5340] lookup_open+0x6a8/0x1180 [ 46.134289][ T5340] path_openat+0x50c/0x18f0 [ 46.134299][ T5340] do_file_open+0x1c8/0x2e8 [ 46.134308][ T5340] do_sys_openat2+0x114/0x1e8 [ 46.134320][ T5340] do_sys_open+0xb0/0xe0 [ 46.134331][ T5340] __arm64_sys_openat+0xa8/0xc4 [ 46.134342][ T5340] invoke_syscall+0x98/0x244 [ 46.134354][ T5340] el0_svc_common+0xec/0x23c [ 46.134366][ T5340] do_el0_svc+0x4c/0x5c [ 46.134377][ T5340] el0_svc+0x60/0x1d8 [ 46.134388][ T5340] el0t_64_sync_handler+0x44/0x104 [ 46.134399][ T5340] el0t_64_sync+0x198/0x19c ** 12135 printk messages dropped ** ** 144 printk messages dropped ** ** 96 printk messages dropped ** ** 91 printk messages dropped ** ** 100 printk messages dropped ** ** 121 printk messages dropped ** ** 114 printk messages dropped ** ** 114 printk messages dropped ** ** 175 printk messages dropped ** ** 91 printk messages dropped ** ** 4361 printk messages dropped ** ** 136 printk messages dropped ** ** 134 printk messages dropped ** ** 107 printk messages dropped ** ** 87 printk messages dropped ** ** 92 printk messages dropped ** ** 98 printk messages dropped ** ** 97 printk messages dropped ** ** 90 printk messages dropped ** ** 92 printk messages dropped ** ** 99 printk messages dropped ** ** 119 printk messages dropped ** ** 102 printk messages dropped ** ** 115 printk messages dropped ** ** 87 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 118 printk messages dropped ** ** 167 printk messages dropped ** ** 120 printk messages dropped ** ** 90 printk messages dropped ** ** 106 printk messages dropped ** ** 89 printk messages dropped ** ** 109 printk messages dropped ** ** 199 printk messages dropped ** ** 108 printk messages dropped ** ** 114 printk messages dropped ** ** 95 printk messages dropped ** ** 108 printk messages dropped ** ** 104 printk messages dropped ** ** 112 printk messages dropped ** ** 92 printk messages dropped ** ** 152 printk messages dropped ** ** 101 printk messages dropped ** ** 116 printk messages dropped ** ** 86 printk messages dropped ** ** 112 printk messages dropped ** ** 4381 printk messages dropped ** ** 123 printk messages dropped ** ** 92 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 108 printk messages dropped ** ** 85 printk messages dropped ** ** 92 printk messages dropped ** ** 87 printk messages dropped ** ** 96 printk messages dropped ** ** 82 printk messages dropped ** ** 95 printk messages dropped ** ** 88 printk messages dropped ** ** 114 printk messages dropped ** ** 94 printk messages dropped ** ** 135 printk messages dropped ** ** 104 printk messages dropped ** ** 110 printk messages dropped ** ** 107 printk messages dropped ** ** 105 printk messages dropped ** ** 95 printk messages dropped ** ** 103 printk messages dropped ** ** 88 printk messages dropped ** ** 102 printk messages dropped ** ** 81 printk messages dropped ** ** 97 printk messages dropped ** ** 86 printk messages dropped ** ** 94 printk messages dropped ** ** 84 printk messages dropped ** ** 96 printk messages dropped ** ** 80 printk messages dropped ** ** 118 printk messages dropped ** ** 152 printk messages dropped ** ** 115 printk messages dropped ** ** 90 printk messages dropped ** ** 101 printk messages dropped ** ** 92 printk messages dropped ** ** 110 printk messages dropped ** ** 92 printk messages dropped ** ** 115 printk messages dropped ** ** 89 printk messages dropped ** ** 109 printk messages dropped ** ** 4563 printk messages dropped ** ** 113 printk messages dropped ** ** 103 printk messages dropped ** ** 113 printk messages dropped ** ** 90 printk messages dropped ** ** 119 printk messages dropped ** ** 93 printk messages dropped ** ** 99 printk messages dropped ** ** 89 printk messages dropped ** ** 90 printk messages dropped ** ** 84 printk messages dropped ** ** 149 printk messages dropped ** ** 102 printk messages dropped ** ** 125 printk messages dropped ** ** 87 printk messages dropped ** ** 96 printk messages dropped ** ** 85 printk messages dropped ** ** 95 printk messages dropped ** ** 91 printk messages dropped ** ** 95 printk messages dropped ** ** 77 printk messages dropped ** ** 86 printk messages dropped ** ** 80 printk messages dropped ** ** 188 printk messages dropped ** ** 99 printk messages dropped ** ** 107 printk messages dropped ** ** 98 printk messages dropped ** ** 142 printk messages dropped ** ** 104 printk messages dropped ** ** 128 printk messages dropped ** ** 113 printk messages dropped ** ** 113 printk messages dropped ** ** 96 printk messages dropped ** ** 109 printk messages dropped ** ** 96 printk messages dropped ** ** 113 printk messages dropped ** ** 104 printk messages dropped ** ** 94 printk messages dropped ** [ 46.933155][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.236187][ T5370] loop1: detected capacity change from 0 to 8 [ 47.328599][ T5377] overlayfs: missing 'workdir' ** 20257 printk messages dropped ** ** 155 printk messages dropped ** ** 119 printk messages dropped ** ** 115 printk messages dropped ** ** 108 printk messages dropped ** ** 123 printk messages dropped ** ** 109 printk messages dropped ** ** 126 printk messages dropped ** ** 100 printk messages dropped ** ** 113 printk messages dropped ** ** 72 printk messages dropped ** ** 90 printk messages dropped ** ** 102 printk messages dropped ** ** 159 printk messages dropped ** ** 103 printk messages dropped ** ** 113 printk messages dropped ** ** 101 printk messages dropped ** ** 131 printk messages dropped ** ** 116 printk messages dropped ** ** 124 printk messages dropped ** ** 105 printk messages dropped ** ** 125 printk messages dropped ** ** 109 printk messages dropped ** ** 120 printk messages dropped ** ** 108 printk messages dropped ** ** 127 printk messages dropped ** ** 96 printk messages dropped ** ** 146 printk messages dropped ** ** 95 printk messages dropped ** ** 123 printk messages dropped ** ** 91 printk messages dropped ** ** 116 printk messages dropped ** ** 115 printk messages dropped ** ** 139 printk messages dropped ** ** 113 printk messages dropped ** ** 120 printk messages dropped ** ** 108 printk messages dropped ** ** 127 printk messages dropped ** ** 106 printk messages dropped ** ** 129 printk messages dropped ** ** 112 printk messages dropped ** ** 154 printk messages dropped ** ** 91 printk messages dropped ** ** 120 printk messages dropped ** ** 97 printk messages dropped ** ** 119 printk messages dropped ** ** 105 printk messages dropped ** ** 128 printk messages dropped ** ** 103 printk messages dropped ** ** 138 printk messages dropped ** ** 97 printk messages dropped ** ** 123 printk messages dropped ** ** 105 printk messages dropped ** ** 127 printk messages dropped ** ** 106 printk messages dropped ** ** 186 printk messages dropped ** ** 92 printk messages dropped ** ** 107 printk messages dropped ** ** 99 printk messages dropped ** ** 124 printk messages dropped ** ** 95 printk messages dropped ** ** 106 printk messages dropped ** ** 104 printk messages dropped ** ** 149 printk messages dropped ** ** 126 printk messages dropped ** ** 129 printk messages dropped ** ** 112 printk messages dropped ** ** 129 printk messages dropped ** ** 97 printk messages dropped ** ** 527 printk messages dropped ** ** 118 printk messages dropped ** ** 96 printk messages dropped ** ** 112 printk messages dropped ** ** 93 printk messages dropped ** ** 106 printk messages dropped ** ** 108 printk messages dropped ** ** 140 printk messages dropped ** ** 113 printk messages dropped ** ** 121 printk messages dropped ** ** 102 printk messages dropped ** ** 169 printk messages dropped ** [ 48.611272][ T5400] No control pipe specified [ 48.772622][ T5413] FAULT_INJECTION: forcing a failure. [ 48.772622][ T5413] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.772664][ T5413] CPU: 1 UID: 0 PID: 5413 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT [ 48.772675][ T5413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 48.772688][ T5413] Call trace: [ 48.772690][ T5413] show_stack+0x2c/0x3c (C) [ 48.772709][ T5413] __dump_stack+0x30/0x40 [ 48.772720][ T5413] dump_stack_lvl+0xd8/0x12c [ 48.772729][ T5413] dump_stack+0x1c/0x28 [ 48.772739][ T5413] should_fail_ex+0x418/0x58c [ 48.772750][ T5413] should_fail_alloc_page+0xec/0x10c [ 48.772761][ T5413] prepare_alloc_pages+0x194/0x484 [ 48.772772][ T5413] __alloc_frozen_pages_noprof+0x180/0x578 [ 48.772783][ T5413] alloc_pages_mpol+0x1fc/0x3d0 [ 48.772791][ T5413] alloc_frozen_pages_noprof+0xc4/0x10c [ 48.772799][ T5413] alloc_pages_noprof+0x30/0x148 [ 48.772807][ T5413] get_free_pages_noprof+0x1c/0xbc [ 48.772814][ T5413] __kasan_populate_vmalloc+0x48/0x1d0 [ 48.772823][ T5413] alloc_vmap_area+0xcd8/0x12ec [ 48.772831][ T5413] __get_vm_area_node+0x210/0x32c [ 48.772839][ T5413] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 48.772847][ T5413] __vmalloc_node_noprof+0xec/0x14c [ 48.772855][ T5413] __vmalloc_noprof+0x64/0x8c [ 48.772863][ T5413] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 48.772872][ T5413] bpf_prog_alloc+0x48/0x110 [ 48.772880][ T5413] bpf_prog_load+0x5e0/0x1554 [ 48.772888][ T5413] __sys_bpf+0x7d4/0x82c [ 48.772895][ T5413] __arm64_sys_bpf+0xd0/0xec [ 48.772903][ T5413] invoke_syscall+0x98/0x244 [ 48.772913][ T5413] el0_svc_common+0xec/0x23c [ 48.772922][ T5413] do_el0_svc+0x4c/0x5c [ 48.772932][ T5413] el0_svc+0x60/0x1d8 [ 48.772941][ T5413] el0t_64_sync_handler+0x44/0x104 [ 48.772950][ T5413] el0t_64_sync+0x198/0x19c [ 49.119803][ C0] net_ratelimit: 74 callbacks suppressed [ 49.149844][ T5423] overlayfs: failed to resolve './file1': -2 [ 49.872057][ T5436] netlink: 76 bytes leftover after parsing attributes in process `syz.2.145'. [ 49.872077][ T5436] netlink: 76 bytes leftover after parsing attributes in process `syz.2.145'. ** 132 printk messages dropped ** ** 88 printk messages dropped ** ** 108 printk messages dropped ** ** 100 printk messages dropped ** ** 104 printk messages dropped ** ** 93 printk messages dropped ** ** 152 printk messages dropped ** ** 115 printk messages dropped ** ** 132 printk messages dropped ** ** 108 printk messages dropped ** ** 119 printk messages dropped ** ** 125 printk messages dropped ** ** 122 printk messages dropped ** ** 102 printk messages dropped ** ** 113 printk messages dropped ** ** 100 printk messages dropped ** ** 119 printk messages dropped ** ** 105 printk messages dropped ** ** 130 printk messages dropped ** ** 107 printk messages dropped ** ** 121 printk messages dropped ** ** 119 printk messages dropped ** ** 130 printk messages dropped ** ** 115 printk messages dropped ** ** 127 printk messages dropped ** ** 113 printk messages dropped ** ** 124 printk messages dropped ** ** 104 printk messages dropped ** ** 119 printk messages dropped ** ** 103 printk messages dropped ** ** 119 printk messages dropped ** ** 94 printk messages dropped ** ** 92 printk messages dropped ** ** 81 printk messages dropped ** ** 95 printk messages dropped ** ** 81 printk messages dropped ** ** 91 printk messages dropped ** ** 74 printk messages dropped ** ** 3870 printk messages dropped ** ** 125 printk messages dropped ** ** 91 printk messages dropped ** ** 106 printk messages dropped ** ** 92 printk messages dropped ** ** 93 printk messages dropped ** ** 81 printk messages dropped ** ** 265 printk messages dropped ** ** 91 printk messages dropped ** ** 103 printk messages dropped ** ** 93 printk messages dropped ** ** 101 printk messages dropped ** ** 94 printk messages dropped ** ** 103 printk messages dropped ** ** 91 printk messages dropped ** ** 103 printk messages dropped ** ** 93 printk messages dropped ** ** 106 printk messages dropped ** ** 89 printk messages dropped ** ** 106 printk messages dropped ** ** 93 printk messages dropped ** ** 102 printk messages dropped ** ** 127 printk messages dropped ** ** 107 printk messages dropped ** ** 87 printk messages dropped ** ** 103 printk messages dropped ** ** 93 printk messages dropped ** ** 107 printk messages dropped ** ** 102 printk messages dropped ** ** 111 printk messages dropped ** ** 95 printk messages dropped ** ** 103 printk messages dropped ** ** 94 printk messages dropped ** ** 96 printk messages dropped ** ** 90 printk messages dropped ** ** 98 printk messages dropped ** ** 44 printk messages dropped ** ** 104 printk messages dropped ** ** 101 printk messages dropped ** ** 116 printk messages dropped ** ** 89 printk messages dropped ** ** 95 printk messages dropped ** ** 82 printk messages dropped ** ** 92 printk messages dropped ** ** 86 printk messages dropped ** ** 101 printk messages dropped ** ** 88 printk messages dropped ** ** 118 printk messages dropped ** ** 87 printk messages dropped ** ** 93 printk messages dropped ** ** 82 printk messages dropped ** ** 93 printk messages dropped ** ** 89 printk messages dropped ** ** 105 printk messages dropped ** ** 89 printk messages dropped ** ** 97 printk messages dropped ** ** 82 printk messages dropped ** ** 114 printk messages dropped ** ** 89 printk messages dropped ** ** 97 printk messages dropped ** ** 83 printk messages dropped ** ** 93 printk messages dropped ** ** 85 printk messages dropped ** ** 90 printk messages dropped ** ** 91 printk messages dropped ** ** 109 printk messages dropped ** ** 112 printk messages dropped ** ** 119 printk messages dropped ** ** 106 printk messages dropped ** ** 105 printk messages dropped ** ** 90 printk messages dropped ** ** 101 printk messages dropped ** ** 93 printk messages dropped ** ** 96 printk messages dropped ** ** 89 printk messages dropped ** ** 101 printk messages dropped ** ** 91 printk messages dropped ** ** 97 printk messages dropped ** ** 84 printk messages dropped ** ** 98 printk messages dropped ** ** 100 printk messages dropped ** ** 96 printk messages dropped ** ** 82 printk messages dropped ** ** 89 printk messages dropped ** ** 93 printk messages dropped ** ** 128 printk messages dropped ** ** 109 printk messages dropped ** ** 127 printk messages dropped ** ** 108 printk messages dropped ** ** 930 printk messages dropped ** ** 101 printk messages dropped ** ** 115 printk messages dropped ** ** 100 printk messages dropped ** ** 94 printk messages dropped ** ** 87 printk messages dropped ** ** 90 printk messages dropped ** ** 82 printk messages dropped ** ** 94 printk messages dropped ** ** 86 printk messages dropped ** ** 102 printk messages dropped ** ** 106 printk messages dropped ** ** 100 printk messages dropped ** ** 90 printk messages dropped ** ** 91 printk messages dropped ** ** 81 printk messages dropped ** ** 93 printk messages dropped ** ** 96 printk messages dropped ** ** 96 printk messages dropped ** ** 82 printk messages dropped ** ** 89 printk messages dropped ** ** 101 printk messages dropped ** ** 100 printk messages dropped ** ** 83 printk messages dropped ** ** 89 printk messages dropped ** ** 81 printk messages dropped ** ** 97 printk messages dropped ** ** 100 printk messages dropped ** ** 112 printk messages dropped ** ** 111 printk messages dropped ** ** 130 printk messages dropped ** ** 109 printk messages dropped ** ** 99 printk messages dropped ** ** 87 printk messages dropped ** ** 98 printk messages dropped ** ** 89 printk messages dropped ** ** 98 printk messages dropped ** ** 84 printk messages dropped ** ** 95 printk messages dropped ** ** 87 printk messages dropped ** ** 96 printk messages dropped ** ** 81 printk messages dropped ** ** 258 printk messages dropped ** ** 94 printk messages dropped ** ** 94 printk messages dropped ** ** 89 printk messages dropped ** ** 108 printk messages dropped ** ** 112 printk messages dropped ** ** 127 printk messages dropped ** ** 109 printk messages dropped ** ** 114 printk messages dropped ** ** 4347 printk messages dropped ** ** 102 printk messages dropped ** ** 109 printk messages dropped ** ** 117 printk messages dropped ** ** 104 printk messages dropped ** ** 107 printk messages dropped ** ** 92 printk messages dropped ** ** 84 printk messages dropped ** ** 83 printk messages dropped ** ** 91 printk messages dropped ** ** 91 printk messages dropped ** ** 81 printk messages dropped ** ** 88 printk messages dropped ** ** 89 printk messages dropped ** ** 169 printk messages dropped ** ** 90 printk messages dropped ** ** 89 printk messages dropped ** ** 89 printk messages dropped ** ** 89 printk messages dropped ** ** 87 printk messages dropped ** ** 86 printk messages dropped ** ** 86 printk messages dropped ** ** 88 printk messages dropped ** ** 89 printk messages dropped ** ** 89 printk messages dropped ** ** 95 printk messages dropped ** ** 90 printk messages dropped ** ** 78 printk messages dropped ** ** 79 printk messages dropped ** ** 93 printk messages dropped ** ** 91 printk messages dropped ** ** 173 printk messages dropped ** ** 102 printk messages dropped ** ** 88 printk messages dropped ** ** 94 printk messages dropped ** ** 106 printk messages dropped ** ** 102 printk messages dropped ** ** 117 printk messages dropped ** ** 115 printk messages dropped ** ** 117 printk messages dropped ** ** 106 printk messages dropped ** ** 63 printk messages dropped ** ** 315 printk messages dropped ** [ 50.473809][ T5448] loop4: detected capacity change from 0 to 512 [ 50.481419][ T5448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.492416][ T5448] EXT4-fs (loop4): mount failed [ 50.580074][ T5451] FAULT_INJECTION: forcing a failure. [ 50.580074][ T5451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.580116][ T5451] CPU: 0 UID: 0 PID: 5451 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT [ 50.580127][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 50.580140][ T5451] Call trace: [ 50.580143][ T5451] show_stack+0x2c/0x3c (C) [ 50.580163][ T5451] __dump_stack+0x30/0x40 [ 50.580173][ T5451] dump_stack_lvl+0xd8/0x12c [ 50.580182][ T5451] dump_stack+0x1c/0x28 [ 50.580192][ T5451] should_fail_ex+0x418/0x58c [ 50.580203][ T5451] should_fail+0x14/0x24 [ 50.580212][ T5451] should_fail_usercopy+0x20/0x30 [ 50.580222][ T5451] _copy_to_iter+0x424/0x10f8 [ 50.580233][ T5451] simple_copy_to_iter+0x50/0x8c [ 50.580241][ T5451] __skb_datagram_iter+0xd4/0x77c [ 50.580249][ T5451] skb_copy_datagram_iter+0xf4/0x2c4 [ 50.580256][ T5451] netlink_recvmsg+0x244/0x868 [ 50.580266][ T5451] sock_recvmsg+0xd4/0x170 [ 50.580274][ T5451] ____sys_recvmsg+0x1b8/0x608 [ 50.580282][ T5451] ___sys_recvmsg+0x16c/0x1f4 [ 50.580291][ T5451] do_recvmmsg+0x288/0x7d4 [ 50.580299][ T5451] __sys_recvmmsg+0x200/0x270 [ 50.580308][ T5451] __arm64_sys_recvmmsg+0xe0/0x108 [ 50.580317][ T5451] invoke_syscall+0x98/0x244 [ 50.580327][ T5451] el0_svc_common+0xec/0x23c [ 50.580336][ T5451] do_el0_svc+0x4c/0x5c [ 50.580346][ T5451] el0_svc+0x60/0x1d8 [ 50.580355][ T5451] el0t_64_sync_handler+0x44/0x104 [ 50.580364][ T5451] el0t_64_sync+0x198/0x19c [ 51.147565][ T5464] fuse: Bad value for 'group_id' [ 51.147573][ T5464] fuse: Bad value for 'group_id' [ 51.154775][ T5467] syz_tun: entered allmulticast mode [ 51.163879][ T5467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.156'. ** 238713 printk messages dropped ** ** 136 printk messages dropped ** ** 125 printk messages dropped ** ** 140 printk messages dropped ** ** 123 printk messages dropped ** ** 123 printk messages dropped ** ** 124 printk messages dropped ** ** 127 printk messages dropped ** ** 103 printk messages dropped ** ** 1 printk messages dropped ** ** 25680 printk messages dropped ** ** 129 printk messages dropped ** ** 110 printk messages dropped ** ** 93 printk messages dropped ** ** 86 printk messages dropped ** ** 84 printk messages dropped ** ** 88 printk messages dropped ** ** 133 printk messages dropped ** ** 87 printk messages dropped ** ** 87 printk messages dropped ** ** 87 printk messages dropped ** ** 90 printk messages dropped ** ** 91 printk messages dropped ** ** 97 printk messages dropped ** ** 109 printk messages dropped ** ** 109 printk messages dropped ** ** 97 printk messages dropped ** ** 104 printk messages dropped ** ** 99 printk messages dropped ** ** 97 printk messages dropped ** ** 97 printk messages dropped ** ** 89 printk messages dropped ** ** 98 printk messages dropped ** ** 77 printk messages dropped ** ** 73 printk messages dropped ** ** 125 printk messages dropped ** ** 83 printk messages dropped ** ** 82 printk messages dropped ** ** 83 printk messages dropped ** ** 79 printk messages dropped ** ** 82 printk messages dropped ** ** 81 printk messages dropped ** ** 83 printk messages dropped ** ** 81 printk messages dropped ** ** 80 printk messages dropped ** ** 77 printk messages dropped ** ** 76 printk messages dropped ** ** 83 printk messages dropped ** ** 87 printk messages dropped ** ** 88 printk messages dropped ** ** 78 printk messages dropped ** ** 82 printk messages dropped ** ** 161 printk messages dropped ** ** 99 printk messages dropped ** ** 91 printk messages dropped ** ** 90 printk messages dropped ** ** 92 printk messages dropped ** ** 90 printk messages dropped ** ** 103 printk messages dropped ** ** 115 printk messages dropped ** ** 118 printk messages dropped ** ** 95 printk messages dropped ** ** 91 printk messages dropped ** ** 92 printk messages dropped ** ** 89 printk messages dropped ** ** 87 printk messages dropped ** ** 82 printk messages dropped ** ** 84 printk messages dropped ** ** 77 printk messages dropped ** ** 134 printk messages dropped ** ** 95 printk messages dropped ** ** 91 printk messages dropped ** ** 93 printk messages dropped ** ** 94 printk messages dropped ** ** 170 printk messages dropped ** ** 95 printk messages dropped ** ** 89 printk messages dropped ** ** 89 printk messages dropped ** ** 94 printk messages dropped ** ** 12106 printk messages dropped ** ** 112 printk messages dropped ** ** 102 printk messages dropped ** ** 97 printk messages dropped ** ** 91 printk messages dropped ** ** 87 printk messages dropped ** ** 98 printk messages dropped ** ** 92 printk messages dropped ** ** 92 printk messages dropped ** ** 91 printk messages dropped ** ** 111 printk messages dropped ** ** 115 printk messages dropped ** ** 114 printk messages dropped ** ** 112 printk messages dropped ** ** 113 printk messages dropped ** ** 118 printk messages dropped ** ** 117 printk messages dropped ** ** 114 printk messages dropped ** ** 105 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 105 printk messages dropped ** ** 89 printk messages dropped ** ** 112 printk messages dropped ** ** 98 printk messages dropped ** ** 84 printk messages dropped ** ** 81 printk messages dropped ** ** 83 printk messages dropped ** ** 80 printk messages dropped ** ** 82 printk messages dropped ** ** 86 printk messages dropped ** ** 81 printk messages dropped ** ** 87 printk messages dropped ** ** 87 printk messages dropped ** ** 100 printk messages dropped ** ** 110 printk messages dropped ** ** 117 printk messages dropped ** ** 110 printk messages dropped ** ** 102 printk messages dropped ** ** 105 printk messages dropped ** ** 132 printk messages dropped ** ** 97 printk messages dropped ** ** 33 printk messages dropped ** ** 15890 printk messages dropped ** ** 147 printk messages dropped ** ** 123 printk messages dropped ** ** 135 printk messages dropped ** ** 112 printk messages dropped ** ** 143 printk messages dropped ** ** 129 printk messages dropped ** ** 141 printk messages dropped ** ** 115 printk messages dropped ** ** 123 printk messages dropped ** ** 118 printk messages dropped ** ** 119 printk messages dropped ** ** 113 printk messages dropped ** ** 133 printk messages dropped ** ** 101 printk messages dropped ** ** 107 printk messages dropped ** ** 104 printk messages dropped ** ** 120 printk messages dropped ** ** 110 printk messages dropped ** ** 106 printk messages dropped ** ** 96 printk messages dropped ** ** 98 printk messages dropped ** ** 91 printk messages dropped ** ** 93 printk messages dropped ** ** 81 printk messages dropped ** ** 98 printk messages dropped ** ** 80 printk messages dropped ** ** 100 printk messages dropped ** ** 86 printk messages dropped ** ** 95 printk messages dropped ** ** 92 printk messages dropped ** ** 104 printk messages dropped ** ** 72 printk messages dropped ** ** 76 printk messages dropped ** ** 92 printk messages dropped ** ** 111 printk messages dropped ** ** 101 printk messages dropped ** ** 123 printk messages dropped ** ** 95 printk messages dropped ** ** 102 printk messages dropped ** ** 90 printk messages dropped ** ** 101 printk messages dropped ** ** 94 printk messages dropped ** ** 96 printk messages dropped ** ** 91 printk messages dropped ** ** 98 printk messages dropped ** ** 89 printk messages dropped ** ** 104 printk messages dropped ** ** 91 printk messages dropped ** ** 101 printk messages dropped ** ** 86 printk messages dropped ** ** 99 printk messages dropped ** ** 89 printk messages dropped ** ** 103 printk messages dropped ** ** 89 printk messages dropped ** ** 403 printk messages dropped ** ** 86 printk messages dropped ** ** 83 printk messages dropped ** ** 95 printk messages dropped ** ** 89 printk messages dropped ** ** 89 printk messages dropped ** ** 107 printk messages dropped ** ** 121 printk messages dropped ** ** 104 printk messages dropped ** ** 102 printk messages dropped ** ** 102 printk messages dropped ** ** 113 printk messages dropped ** ** 104 printk messages dropped ** ** 112 printk messages dropped ** ** 59 printk messages dropped ** ** 1931 printk messages dropped ** ** 115 printk messages dropped ** ** 109 printk messages dropped ** ** 101 printk messages dropped ** ** 99 printk messages dropped ** ** 93 printk messages dropped ** ** 95 printk messages dropped ** ** 92 printk messages dropped ** ** 99 printk messages dropped ** ** 117 printk messages dropped ** ** 117 printk messages dropped ** ** 139 printk messages dropped ** ** 95 printk messages dropped ** ** 103 printk messages dropped ** ** 101 printk messages dropped ** ** 101 printk messages dropped ** ** 291 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 96 printk messages dropped ** ** 110 printk messages dropped ** ** 127 printk messages dropped ** ** 101 printk messages dropped ** ** 105 printk messages dropped ** ** 106 printk messages dropped ** ** 130 printk messages dropped ** ** 38 printk messages dropped ** ** 1 printk messages dropped ** ** 51 printk messages dropped ** ** 108 printk messages dropped ** ** 145 printk messages dropped ** ** 113 printk messages dropped ** ** 114 printk messages dropped ** ** 114 printk messages dropped ** ** 101 printk messages dropped ** ** 106 printk messages dropped ** ** 94 printk messages dropped ** ** 98 printk messages dropped ** ** 93 printk messages dropped ** ** 102 printk messages dropped ** ** 120 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 94 printk messages dropped ** ** 95 printk messages dropped ** ** 91 printk messages dropped ** ** 95 printk messages dropped ** ** 145 printk messages dropped ** ** 94 printk messages dropped ** ** 105 printk messages dropped ** ** 100 printk messages dropped ** ** 90 printk messages dropped ** ** 83 printk messages dropped ** ** 89 printk messages dropped ** ** 90 printk messages dropped ** ** 86 printk messages dropped ** ** 91 printk messages dropped ** ** 109 printk messages dropped ** ** 90 printk messages dropped ** ** 90 printk messages dropped ** ** 90 printk messages dropped ** ** 95 printk messages dropped ** ** 92 printk messages dropped ** ** 85 printk messages dropped ** ** 139 printk messages dropped ** ** 91 printk messages dropped ** ** 92 printk messages dropped ** ** 91 printk messages dropped ** ** 90 printk messages dropped ** ** 93 printk messages dropped ** ** 92 printk messages dropped ** ** 96 printk messages dropped ** ** 61 printk messages dropped ** ** 1 printk messages dropped ** [ 53.077860][ T5488] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 53.111253][ T5490] loop0: detected capacity change from 0 to 8 [ 53.114110][ T5490] SQUASHFS error: Unable to read inode 0xa7 ** 6423 printk messages dropped ** [ 53.537363][ T5488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.563314][ T5501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.166'. [ 53.565784][ T5492] bond1: (slave veth3): Enslaving as an active interface with a down link [ 54.226849][ T5514] loop2: detected capacity change from 0 to 512 [ 54.238472][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 54.314216][ T5515] netlink: 76 bytes leftover after parsing attributes in process `syz.0.168'. [ 54.314287][ T5515] netlink: 76 bytes leftover after parsing attributes in process `syz.0.168'. [ 54.477839][ T5514] loop2: detected capacity change from 0 to 512 [ 54.481920][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 54.533640][ T5514] loop2: detected capacity change from 0 to 512 [ 54.537098][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 54.549740][ T5514] loop2: detected capacity change from 0 to 512 [ 54.554922][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 54.559832][ C1] net_ratelimit: 260 callbacks suppressed [ 54.611734][ T5514] loop2: detected capacity change from 0 to 512 [ 54.624585][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 54.654622][ T5523] CUSE: unknown device info "" [ 54.654633][ T5523] CUSE: unknown device info "" [ 54.654639][ T5523] CUSE: unknown device info "ÿw" [ 54.654644][ T5523] CUSE: zero length info key specified [ 54.686964][ T5514] loop2: detected capacity change from 0 to 512 [ 54.694185][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 54.744304][ T5514] loop2: detected capacity change from 0 to 512 [ 54.759157][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 54.794725][ T5514] loop2: detected capacity change from 0 to 512 [ 54.799472][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 54.882361][ T5533] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 54.882440][ T5533] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 55.126274][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 55.170135][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 55.231319][ T5543] nfs4: Unknown parameter '|dma' [ 55.260682][ T5538] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 55.275978][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 55.285288][ T5538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.376169][ T5551] overlayfs: failed to resolve './file1': -2 [ 55.577637][ T5514] set_capacity_and_notify: 3 callbacks suppressed [ 55.577645][ T5514] loop2: detected capacity change from 0 to 512 [ 55.583420][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 55.647226][ T5514] loop2: detected capacity change from 0 to 512 [ 55.649294][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 55.654227][ T5538] bond1: (slave veth3): Enslaving as an active interface with a down link [ 55.679472][ T5514] loop2: detected capacity change from 0 to 512 [ 55.691773][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 55.764435][ T5558] FAULT_INJECTION: forcing a failure. [ 55.764435][ T5558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.764477][ T5558] CPU: 1 UID: 0 PID: 5558 Comm: syz.0.182 Not tainted syzkaller #0 PREEMPT [ 55.764487][ T5558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 55.764500][ T5558] Call trace: [ 55.764502][ T5558] show_stack+0x2c/0x3c (C) [ 55.764522][ T5558] __dump_stack+0x30/0x40 [ 55.764533][ T5558] dump_stack_lvl+0xd8/0x12c [ 55.764542][ T5558] dump_stack+0x1c/0x28 [ 55.764552][ T5558] should_fail_ex+0x418/0x58c [ 55.764562][ T5558] should_fail+0x14/0x24 [ 55.764571][ T5558] should_fail_usercopy+0x20/0x30 [ 55.764581][ T5558] _copy_to_iter+0x424/0x10f8 [ 55.764596][ T5558] simple_copy_to_iter+0x50/0x8c [ 55.764606][ T5558] __skb_datagram_iter+0xd4/0x77c [ 55.764614][ T5558] skb_copy_datagram_iter+0xf4/0x2c4 [ 55.764622][ T5558] netlink_recvmsg+0x244/0x868 [ 55.764632][ T5558] sock_recvmsg+0xd4/0x170 [ 55.764640][ T5558] ____sys_recvmsg+0x1b8/0x608 [ 55.764648][ T5558] ___sys_recvmsg+0x16c/0x1f4 [ 55.764657][ T5558] do_recvmmsg+0x288/0x7d4 [ 55.764665][ T5558] __sys_recvmmsg+0x200/0x270 [ 55.764674][ T5558] __arm64_sys_recvmmsg+0xe0/0x108 [ 55.764683][ T5558] invoke_syscall+0x98/0x244 [ 55.764693][ T5558] el0_svc_common+0xec/0x23c [ 55.764702][ T5558] do_el0_svc+0x4c/0x5c [ 55.764711][ T5558] el0_svc+0x60/0x1d8 [ 55.764721][ T5558] el0t_64_sync_handler+0x44/0x104 [ 55.764730][ T5558] el0t_64_sync+0x198/0x19c [ 55.963968][ T5514] loop2: detected capacity change from 0 to 512 [ 55.966983][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 55.984541][ T5514] loop2: detected capacity change from 0 to 512 [ 56.001714][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 56.057671][ T5514] loop2: detected capacity change from 0 to 512 [ 56.066405][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 56.093897][ T5514] loop2: detected capacity change from 0 to 512 [ 56.099968][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown ** 11366 printk messages dropped ** [ 56.337384][ T5514] loop2: detected capacity change from 0 to 512 [ 56.347662][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 56.351710][ T5514] loop2: detected capacity change from 0 to 512 [ 56.352193][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 56.354534][ T5514] loop2: detected capacity change from 0 to 512 [ 56.430623][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown ** 1214 printk messages dropped ** ** 126 printk messages dropped ** ** 113 printk messages dropped ** ** 109 printk messages dropped ** ** 114 printk messages dropped ** ** 167 printk messages dropped ** ** 91 printk messages dropped ** ** 47 printk messages dropped ** ** 107 printk messages dropped ** ** 112 printk messages dropped ** ** 109 printk messages dropped ** ** 114 printk messages dropped ** ** 110 printk messages dropped ** ** 135 printk messages dropped ** ** 94 printk messages dropped ** ** 181 printk messages dropped ** ** 64 printk messages dropped ** ** 13 printk messages dropped ** [ 56.500251][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 56.538425][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 56.590695][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 56.595139][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 56.610784][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 56.626610][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 56.711173][ T5569] netlink: 76 bytes leftover after parsing attributes in process `syz.0.187'. [ 56.711452][ T5569] netlink: 76 bytes leftover after parsing attributes in process `syz.0.187'. [ 56.899689][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 56.913539][ T5514] EXT4-fs (loop2): Encoding requested by superblock is unknown ** 40983 printk messages dropped ** [ 58.280740][ T5593] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 58.313912][ T5593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.336316][ T5590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.337973][ T5593] bond2: (slave veth3): Enslaving as an active interface with a down link [ 58.348706][ T5590] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.195: lblock 3 mapped to illegal pblock 3 (length 3) [ 58.353643][ T5590] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 58.353664][ T5590] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.353664][ T5590] [ 58.366964][ T5590] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.195: Freeing blocks not in datazone - block = 3, count = 1 [ 58.388164][ T5593] bond2: (slave dummy0): making interface the new active one [ 58.392386][ T5593] dummy0: entered promiscuous mode [ 58.396277][ T5593] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 58.413477][ T4873] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 58.413858][ T4873] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 58.413876][ T4873] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.413876][ T4873] [ 58.415658][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.475051][ T5600] EXT4-fs: Ignoring removed bh option [ 58.504507][ T5600] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 58.551541][ T5600] EXT4-fs (loop2): 1 truncate cleaned up [ 58.552011][ T5600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.591674][ T5600] netlink: 48 bytes leftover after parsing attributes in process `syz.2.197'. [ 58.907591][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.269616][ T5614] SQUASHFS error: Unable to read inode 0xa7 ** 82986 printk messages dropped ** ** 112 printk messages dropped ** ** 117 printk messages dropped ** ** 108 printk messages dropped ** ** 103 printk messages dropped ** ** 101 printk messages dropped ** ** 80 printk messages dropped ** ** 27646 printk messages dropped ** ** 18887 printk messages dropped ** [ 61.153084][ T5632] netlink: 76 bytes leftover after parsing attributes in process `syz.0.203'. [ 61.153145][ T5632] netlink: 76 bytes leftover after parsing attributes in process `syz.0.203'. [ 61.780916][ T5638] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.946257][ T5648] CUSE: unknown device info "" [ 61.946268][ T5648] CUSE: unknown device info "" [ 61.946273][ T5648] CUSE: unknown device info "ÿw" [ 61.946277][ T5648] CUSE: zero length info key specified [ 62.786030][ T5642] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.238129][ T5642] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.434061][ T5642] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.527785][ T5685] netlink: 'syz.4.215': attribute type 1 has an invalid length. [ 63.612152][ T5685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.731237][ T5689] bond2: (slave veth5): Enslaving as an active interface with a down link [ 63.742331][ T5685] bond2: (slave dummy0): making interface the new active one [ 63.785316][ T5685] dummy0: entered promiscuous mode [ 63.785446][ T5685] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 63.836564][ T5705] CUSE: unknown device info "" [ 63.836579][ T5705] CUSE: unknown device info "" [ 63.836584][ T5705] CUSE: unknown device info "ÿw" [ 63.836589][ T5705] CUSE: zero length info key specified [ 63.959935][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.020181][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.023955][ T4842] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.024071][ T4842] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.799800][ C1] net_ratelimit: 57 callbacks suppressed [ 64.922929][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.922968][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.927150][ T1158] cfg80211: failed to load regulatory.db [ 65.115423][ T5719] FAULT_INJECTION: forcing a failure. [ 65.115423][ T5719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.115453][ T5719] CPU: 0 UID: 0 PID: 5719 Comm: syz.4.223 Not tainted syzkaller #0 PREEMPT [ 65.115463][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.115475][ T5719] Call trace: [ 65.115478][ T5719] show_stack+0x2c/0x3c (C) [ 65.115498][ T5719] __dump_stack+0x30/0x40 [ 65.115508][ T5719] dump_stack_lvl+0xd8/0x12c [ 65.115518][ T5719] dump_stack+0x1c/0x28 [ 65.115527][ T5719] should_fail_ex+0x418/0x58c [ 65.115538][ T5719] should_fail+0x14/0x24 [ 65.115547][ T5719] should_fail_usercopy+0x20/0x30 [ 65.115557][ T5719] _copy_to_iter+0x424/0x10f8 [ 65.115568][ T5719] simple_copy_to_iter+0x50/0x8c [ 65.115581][ T5719] __skb_datagram_iter+0xd4/0x77c [ 65.115590][ T5719] skb_copy_datagram_iter+0xf4/0x2c4 [ 65.115598][ T5719] netlink_recvmsg+0x244/0x868 [ 65.115608][ T5719] sock_recvmsg+0xd4/0x170 [ 65.115617][ T5719] ____sys_recvmsg+0x1b8/0x608 [ 65.115625][ T5719] ___sys_recvmsg+0x16c/0x1f4 [ 65.115634][ T5719] do_recvmmsg+0x288/0x7d4 [ 65.115642][ T5719] __sys_recvmmsg+0x200/0x270 [ 65.115650][ T5719] __arm64_sys_recvmmsg+0xe0/0x108 [ 65.115659][ T5719] invoke_syscall+0x98/0x244 [ 65.115670][ T5719] el0_svc_common+0xec/0x23c [ 65.115679][ T5719] do_el0_svc+0x4c/0x5c [ 65.115688][ T5719] el0_svc+0x60/0x1d8 [ 65.115698][ T5719] el0t_64_sync_handler+0x44/0x104 [ 65.115707][ T5719] el0t_64_sync+0x198/0x19c [ 65.587324][ T5736] No control pipe specified [ 65.621562][ T5736] Cannot find del_set index 2 as target [ 66.034989][ T5743] sit0: entered promiscuous mode [ 66.038302][ T5744] set_capacity_and_notify: 11 callbacks suppressed [ 66.038309][ T5744] loop3: detected capacity change from 0 to 8 [ 66.059526][ T5743] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 66.059539][ T5743] netlink: 1 bytes leftover after parsing attributes in process `syz.0.229'. [ 66.080469][ T5744] SQUASHFS error: Unable to read inode 0xa7 [ 66.124779][ T30] audit: type=1326 audit(66.110:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.2.232" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81179368 code=0x7ffc0000 [ 66.124909][ T30] audit: type=1326 audit(66.110:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.2.232" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81179368 code=0x7ffc0000 [ 66.125932][ T30] audit: type=1326 audit(66.110:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.2.232" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81179368 code=0x7ffc0000 [ 66.126020][ T30] audit: type=1326 audit(66.110:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.2.232" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=262 compat=0 ip=0xffff81179368 code=0x7ffc0000 [ 66.126078][ T30] audit: type=1326 audit(66.110:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.2.232" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81179368 code=0x7ffc0000 [ 66.126201][ T30] audit: type=1326 audit(66.110:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.2.232" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81179368 code=0x7ffc0000 [ 66.126330][ T30] audit: type=1326 audit(66.110:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.2.232" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81179368 code=0x7ffc0000 [ 66.126400][ T30] audit: type=1326 audit(66.110:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.2.232" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff81179368 code=0x7ffc0000 [ 66.126944][ T30] audit: type=1326 audit(66.110:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.2.232" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81179368 code=0x7ffc0000 [ 66.127206][ T30] audit: type=1326 audit(66.110:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5748 comm="syz.2.232" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81179368 code=0x7ffc0000 [ 66.673117][ T5763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'. [ 67.822358][ T5769] FAULT_INJECTION: forcing a failure. [ 67.822358][ T5769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.822404][ T5769] CPU: 0 UID: 0 PID: 5769 Comm: syz.2.239 Not tainted syzkaller #0 PREEMPT [ 67.822414][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.822427][ T5769] Call trace: [ 67.822430][ T5769] show_stack+0x2c/0x3c (C) [ 67.822448][ T5769] __dump_stack+0x30/0x40 [ 67.822458][ T5769] dump_stack_lvl+0xd8/0x12c [ 67.822468][ T5769] dump_stack+0x1c/0x28 [ 67.822477][ T5769] should_fail_ex+0x418/0x58c [ 67.822487][ T5769] should_fail+0x14/0x24 [ 67.822497][ T5769] should_fail_usercopy+0x20/0x30 [ 67.822507][ T5769] _copy_to_iter+0x424/0x10f8 [ 67.822517][ T5769] simple_copy_to_iter+0x50/0x8c [ 67.822526][ T5769] __skb_datagram_iter+0xd4/0x77c [ 67.822533][ T5769] skb_copy_datagram_iter+0xf4/0x2c4 [ 67.822541][ T5769] netlink_recvmsg+0x244/0x868 [ 67.822550][ T5769] sock_recvmsg+0xd4/0x170 [ 67.822558][ T5769] ____sys_recvmsg+0x1b8/0x608 [ 67.822567][ T5769] ___sys_recvmsg+0x16c/0x1f4 [ 67.822581][ T5769] do_recvmmsg+0x288/0x7d4 [ 67.822590][ T5769] __sys_recvmmsg+0x200/0x270 [ 67.822599][ T5769] __arm64_sys_recvmmsg+0xe0/0x108 [ 67.822608][ T5769] invoke_syscall+0x98/0x244 [ 67.822619][ T5769] el0_svc_common+0xec/0x23c [ 67.822628][ T5769] do_el0_svc+0x4c/0x5c [ 67.822638][ T5769] el0_svc+0x60/0x1d8 [ 67.822647][ T5769] el0t_64_sync_handler+0x44/0x104 [ 67.822656][ T5769] el0t_64_sync+0x198/0x19c [ 68.412870][ T5799] loop1: detected capacity change from 0 to 512 [ 68.419886][ T5793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 68.432869][ T5799] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.452406][ T5799] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 68.455529][ T5799] EXT4-fs (loop1): mount failed [ 68.477364][ T5790] loop4: detected capacity change from 0 to 512 [ 68.477712][ T5790] EXT4-fs: Ignoring removed bh option [ 68.493748][ T5790] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 68.506757][ T5790] EXT4-fs (loop4): 1 truncate cleaned up [ 68.513997][ T5790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.591691][ T5815] loop1: detected capacity change from 0 to 8 [ 68.612529][ T5815] SQUASHFS error: Unable to read inode 0xa7 [ 69.016335][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.190778][ T5831] FAULT_INJECTION: forcing a failure. [ 69.190778][ T5831] name failslab, interval 1, probability 0, space 0, times 0 [ 69.191410][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz.3.256 Not tainted syzkaller #0 PREEMPT [ 69.191422][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.191436][ T5831] Call trace: [ 69.191439][ T5831] show_stack+0x2c/0x3c (C) [ 69.191458][ T5831] __dump_stack+0x30/0x40 [ 69.191469][ T5831] dump_stack_lvl+0xd8/0x12c [ 69.191478][ T5831] dump_stack+0x1c/0x28 [ 69.191488][ T5831] should_fail_ex+0x418/0x58c [ 69.191498][ T5831] should_failslab+0xc4/0x120 [ 69.191509][ T5831] kmem_cache_alloc_node_noprof+0x98/0x604 [ 69.191521][ T5831] __alloc_skb+0x1f0/0x610 [ 69.191530][ T5831] netlink_dump+0x190/0xb6c [ 69.191539][ T5831] netlink_recvmsg+0x4f0/0x868 [ 69.191547][ T5831] sock_recvmsg+0xd4/0x170 [ 69.191555][ T5831] ____sys_recvmsg+0x1b8/0x608 [ 69.191564][ T5831] ___sys_recvmsg+0x16c/0x1f4 [ 69.191573][ T5831] do_recvmmsg+0x288/0x7d4 [ 69.191581][ T5831] __sys_recvmmsg+0x200/0x270 [ 69.191598][ T5831] __arm64_sys_recvmmsg+0xe0/0x108 [ 69.191608][ T5831] invoke_syscall+0x98/0x244 [ 69.191620][ T5831] el0_svc_common+0xec/0x23c [ 69.191630][ T5831] do_el0_svc+0x4c/0x5c [ 69.191639][ T5831] el0_svc+0x60/0x1d8 [ 69.191649][ T5831] el0t_64_sync_handler+0x44/0x104 [ 69.191658][ T5831] el0t_64_sync+0x198/0x19c [ 69.392373][ T5835] netlink: 'syz.4.261': attribute type 1 has an invalid length. [ 69.414228][ T5835] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.487564][ T5847] capability: warning: `syz.1.263' uses 32-bit capabilities (legacy support in use) [ 69.488049][ T5835] bond3: (slave veth7): Enslaving as an active interface with a down link [ 69.495369][ T5835] bond2: (slave dummy0): Releasing active interface [ 69.495387][ T5835] dummy0: left promiscuous mode [ 69.496971][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 69.515262][ T5849] loop0: detected capacity change from 0 to 1024 [ 69.515695][ T5849] EXT4-fs: Ignoring removed bh option [ 69.526102][ T5849] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 69.532140][ T5835] bond3: (slave dummy0): making interface the new active one [ 69.534928][ T5835] dummy0: entered promiscuous mode [ 69.535048][ T5835] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 69.549039][ T5849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.608108][ T5849] netlink: 'syz.0.259': attribute type 4 has an invalid length. [ 69.643154][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.099603][ T4818] net_ratelimit: 69 callbacks suppressed [ 70.154636][ T5872] loop4: detected capacity change from 0 to 256 [ 70.221156][ T5879] CUSE: unknown device info "" [ 70.221163][ T5879] CUSE: unknown device info "" [ 70.221168][ T5879] CUSE: unknown device info "ÿw" [ 70.221172][ T5879] CUSE: zero length info key specified [ 70.316325][ T5885] ip_tables: iptables: counters copy to user failed while replacing table [ 70.348761][ T5887] loop1: detected capacity change from 0 to 8 [ 70.372397][ T5887] SQUASHFS error: Unable to read inode 0xa7 [ 71.527631][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 71.564121][ T5930] CUSE: unknown device info "" [ 71.564130][ T5930] CUSE: unknown device info "" [ 71.564136][ T5930] CUSE: unknown device info "ÿw" [ 71.564141][ T5930] CUSE: zero length info key specified [ 71.658550][ T5932] loop2: detected capacity change from 0 to 256 [ 71.919735][ T5927] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.288'. [ 72.056404][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 72.060703][ T5942] veth0_to_batadv: entered promiscuous mode [ 72.061451][ T5942] macsec1: entered allmulticast mode [ 72.061462][ T5942] veth0_to_batadv: entered allmulticast mode [ 72.179390][ T5959] ipvlan2: entered allmulticast mode [ 72.179405][ T5959] virt_wifi0: entered allmulticast mode [ 72.182805][ T5959] batman_adv: batadv0: Adding interface: ipvlan2 [ 72.182811][ T5959] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.182827][ T5959] batman_adv: batadv0: Interface activated: ipvlan2 [ 72.252544][ T5961] overlayfs: missing 'lowerdir' [ 72.441913][ T5959] ipvlan3: entered allmulticast mode [ 72.442589][ T5959] batman_adv: batadv0: Adding interface: ipvlan3 [ 72.442595][ T5959] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.442608][ T5959] batman_adv: The newly added mac address (d2:91:19:01:24:01) already exists on: ipvlan2 [ 72.442615][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.442622][ T5959] batman_adv: batadv0: Interface activated: ipvlan3 [ 72.603261][ T5969] loop1: detected capacity change from 0 to 1024 [ 72.673375][ T5978] bridge0: port 3(syzkaller0) entered blocking state [ 72.673515][ T5978] bridge0: port 3(syzkaller0) entered disabled state [ 72.673599][ T5978] syzkaller0: entered allmulticast mode [ 72.674169][ T5978] syzkaller0: entered promiscuous mode [ 72.674394][ T5978] bridge0: port 3(syzkaller0) entered blocking state [ 72.674422][ T5978] bridge0: port 3(syzkaller0) entered forwarding state [ 72.676188][ T5978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.307'. [ 72.676203][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 72.677655][ T5977] bridge0: port 3(syzkaller0) entered disabled state [ 72.696317][ T5977] syzkaller0 (unregistering): left allmulticast mode [ 72.696329][ T5977] syzkaller0 (unregistering): left promiscuous mode [ 72.696401][ T5977] bridge0: port 3(syzkaller0) entered disabled state [ 72.909018][ T5985] netlink: 76 bytes leftover after parsing attributes in process `syz.1.309'. [ 72.909079][ T5985] netlink: 76 bytes leftover after parsing attributes in process `syz.1.309'. [ 73.232717][ T5989] lo: entered allmulticast mode [ 73.254201][ T5992] ipvlan4: entered allmulticast mode [ 73.256804][ T5992] batman_adv: batadv0: Adding interface: ipvlan4 [ 73.256812][ T5992] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.256828][ T5992] batman_adv: The newly added mac address (c2:4f:b4:21:f6:93) already exists on: ipvlan2 [ 73.256836][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.256843][ T5992] batman_adv: The newly added mac address (c2:4f:b4:21:f6:93) already exists on: ipvlan3 [ 73.256851][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.256857][ T5992] batman_adv: batadv0: Interface activated: ipvlan4 [ 73.291431][ T5995] CUSE: unknown device info "" [ 73.291439][ T5995] CUSE: unknown device info "" [ 73.291444][ T5995] CUSE: unknown device info "ÿw" [ 73.291448][ T5995] CUSE: zero length info key specified [ 73.298435][ T5992] ipvlan5: entered allmulticast mode [ 73.299081][ T5992] batman_adv: batadv0: Adding interface: ipvlan5 [ 73.299086][ T5992] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.299100][ T5992] batman_adv: The newly added mac address (c2:4f:b4:21:f6:93) already exists on: ipvlan2 [ 73.299107][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.299112][ T5992] batman_adv: The newly added mac address (c2:4f:b4:21:f6:93) already exists on: ipvlan3 [ 73.299117][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.299122][ T5992] batman_adv: The newly added mac address (c2:4f:b4:21:f6:93) already exists on: ipvlan4 [ 73.299128][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.299134][ T5992] batman_adv: batadv0: Interface activated: ipvlan5 [ 73.323749][ T5998] loop2: detected capacity change from 0 to 1024 [ 73.403949][ T6002] loop4: detected capacity change from 0 to 256 [ 73.520694][ T4708] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 73.620465][ T5998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.663571][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.731528][ T6007] loop2: detected capacity change from 0 to 128 [ 73.761519][ T12] dummy0: left promiscuous mode [ 73.835029][ T6023] No control pipe specified [ 73.930752][ T6028] CUSE: unknown device info "" [ 73.930761][ T6028] CUSE: unknown device info "" [ 73.930767][ T6028] CUSE: unknown device info "ÿw" [ 73.930772][ T6028] CUSE: zero length info key specified [ 74.003797][ T6030] Console: switching to colour dummy device 80x25 [ 74.276903][ T6037] netlink: 'syz.4.327': attribute type 1 has an invalid length. [ 74.284918][ T6039] loop2: detected capacity change from 0 to 1024 [ 74.343372][ T6039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.368942][ T6037] 8021q: adding VLAN 0 to HW filter on device bond4 [ 74.395861][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.505896][ T6044] bond4: (slave veth9): Enslaving as an active interface with a down link [ 74.514817][ T6037] bond3: (slave dummy0): Releasing active interface [ 74.514835][ T6037] dummy0: left promiscuous mode [ 74.527524][ T6059] No control pipe specified [ 74.617910][ T6062] netlink: 76 bytes leftover after parsing attributes in process `syz.3.329'. [ 74.617996][ T6062] netlink: 76 bytes leftover after parsing attributes in process `syz.3.329'. [ 74.782016][ T6037] bond4: (slave dummy0): making interface the new active one [ 74.782604][ T6037] dummy0: entered promiscuous mode [ 74.784217][ T6037] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 74.834984][ T6068] CUSE: unknown device info "" [ 74.834994][ T6068] CUSE: unknown device info "" [ 74.835002][ T6068] CUSE: unknown device info "ÿw" [ 74.835009][ T6068] CUSE: zero length info key specified [ 75.010191][ T6083] loop4: detected capacity change from 0 to 256 [ 75.209808][ C0] net_ratelimit: 60 callbacks suppressed [ 75.218508][ T6081] loop2: detected capacity change from 0 to 512 [ 75.223981][ T6082] Soft offlining pfn 0x2193cf at process virtual address 0x20ffe000 [ 75.229478][ T6082] Memory failure: 0x2193cf: unhandlable page. [ 75.265373][ T6081] EXT4-fs (loop2): 1 orphan inode deleted [ 75.265835][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.280513][ T4842] __quota_error: 97 callbacks suppressed [ 75.280525][ T4842] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 75.280555][ T4842] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 1 [ 75.356956][ T6099] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 75.368001][ T6099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.396768][ T6099] bond2: (slave veth5): Enslaving as an active interface with a down link [ 75.421350][ T6099] bond1: (slave dummy0): Releasing active interface [ 75.442273][ T6099] bond2: (slave dummy0): making interface the new active one [ 75.442901][ T6099] dummy0: entered promiscuous mode [ 75.443023][ T6099] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 75.475707][ T6102] No control pipe specified [ 75.810253][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.848119][ T6117] loop1: detected capacity change from 0 to 4096 [ 75.857360][ T6117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.865644][ T6117] Quota error (device loop1): do_check_range: Getting block 65537 out of range 1-5 [ 75.865667][ T6117] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 75.865677][ T6117] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.355: Failed to acquire dquot type 1 [ 75.948671][ T6122] overlayfs: missing 'lowerdir' [ 76.354334][ T4704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.548298][ T6109] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 76.577754][ T6147] lo: entered allmulticast mode [ 76.750581][ T6156] loop1: detected capacity change from 0 to 256 [ 76.995201][ T6154] tc action pedit 'at' offset 5 out of bounds [ 76.995212][ T6154] tc action pedit 'at' offset 5 out of bounds [ 76.995218][ T6154] tc action pedit 'at' offset 5 out of bounds [ 76.995224][ T6154] tc action pedit 'at' offset 5 out of bounds [ 76.995230][ T6154] tc action pedit 'at' offset 5 out of bounds [ 76.995236][ T6154] tc action pedit 'at' offset 5 out of bounds [ 76.995241][ T6154] tc action pedit 'at' offset 5 out of bounds [ 76.995247][ T6154] tc action pedit 'at' offset 5 out of bounds [ 76.995252][ T6154] tc action pedit 'at' offset 5 out of bounds [ 76.995257][ T6154] tc action pedit 'at' offset 5 out of bounds [ 77.031084][ T6161] FAULT_INJECTION: forcing a failure. [ 77.031084][ T6161] name failslab, interval 1, probability 0, space 0, times 0 [ 77.031105][ T6161] CPU: 1 UID: 0 PID: 6161 Comm: syz.2.368 Not tainted syzkaller #0 PREEMPT [ 77.031119][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.031133][ T6161] Call trace: [ 77.031136][ T6161] show_stack+0x2c/0x3c (C) [ 77.031157][ T6161] __dump_stack+0x30/0x40 [ 77.031172][ T6161] dump_stack_lvl+0xd8/0x12c [ 77.031183][ T6161] dump_stack+0x1c/0x28 [ 77.031194][ T6161] should_fail_ex+0x418/0x58c [ 77.031209][ T6161] should_failslab+0xc4/0x120 [ 77.031221][ T6161] kmem_cache_alloc_noprof+0x94/0x5d4 [ 77.031235][ T6161] security_inode_alloc+0x40/0x304 [ 77.031244][ T6161] inode_init_always_gfp+0x704/0xb20 [ 77.031255][ T6161] alloc_inode+0x9c/0x198 [ 77.031265][ T6161] alloc_anon_inode+0x28/0x31c [ 77.031276][ T6161] anon_inode_make_secure_inode+0x84/0x18c [ 77.031289][ T6161] __anon_inode_getfile+0xa8/0x1c8 [ 77.031301][ T6161] anon_inode_create_getfile+0x4c/0x64 [ 77.031313][ T6161] new_userfaultfd+0x1a0/0x37c [ 77.031323][ T6161] __arm64_sys_userfaultfd+0x8c/0xac [ 77.031333][ T6161] invoke_syscall+0x98/0x244 [ 77.031345][ T6161] el0_svc_common+0xec/0x23c [ 77.031356][ T6161] do_el0_svc+0x4c/0x5c [ 77.031368][ T6161] el0_svc+0x60/0x1d8 [ 77.031379][ T6161] el0t_64_sync_handler+0x44/0x104 [ 77.031390][ T6161] el0t_64_sync+0x198/0x19c [ 77.385382][ T6181] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 77.398349][ T6181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 77.457972][ T6181] bond3: (slave veth7): Enslaving as an active interface with a down link [ 77.459955][ T6188] FAULT_INJECTION: forcing a failure. [ 77.459955][ T6188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.459966][ T6188] CPU: 0 UID: 0 PID: 6188 Comm: syz.1.379 Not tainted syzkaller #0 PREEMPT [ 77.459975][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.459986][ T6188] Call trace: [ 77.459989][ T6188] show_stack+0x2c/0x3c (C) [ 77.460005][ T6188] __dump_stack+0x30/0x40 [ 77.460016][ T6188] dump_stack_lvl+0xd8/0x12c [ 77.460026][ T6188] dump_stack+0x1c/0x28 [ 77.460035][ T6188] should_fail_ex+0x418/0x58c [ 77.460046][ T6188] should_fail+0x14/0x24 [ 77.460055][ T6188] should_fail_usercopy+0x20/0x30 [ 77.460066][ T6188] simple_read_from_buffer+0xc4/0x238 [ 77.460076][ T6188] proc_fail_nth_read+0x1a8/0x248 [ 77.460085][ T6188] vfs_read+0x230/0x8c8 [ 77.460095][ T6188] ksys_read+0x12c/0x228 [ 77.460104][ T6188] __arm64_sys_read+0x84/0x98 [ 77.460114][ T6188] invoke_syscall+0x98/0x244 [ 77.460124][ T6188] el0_svc_common+0xec/0x23c [ 77.460134][ T6188] do_el0_svc+0x4c/0x5c [ 77.460143][ T6188] el0_svc+0x60/0x1d8 [ 77.460152][ T6188] el0t_64_sync_handler+0x44/0x104 [ 77.460161][ T6188] el0t_64_sync+0x198/0x19c [ 77.520157][ T6181] bond2: (slave dummy0): Releasing active interface [ 77.520212][ T6181] dummy0: left promiscuous mode [ 77.542462][ T6181] bond3: (slave dummy0): making interface the new active one [ 77.543015][ T6181] dummy0: entered promiscuous mode [ 77.543122][ T6181] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 77.603837][ T6201] loop3: detected capacity change from 0 to 1024 [ 77.604203][ T6201] ext4: Unknown parameter 'fowner<00000000000000060928' [ 77.785720][ T6219] ipvlan2: entered allmulticast mode [ 77.785729][ T6219] virt_wifi0: entered allmulticast mode [ 77.786318][ T6219] batman_adv: batadv0: Adding interface: ipvlan2 [ 77.786324][ T6219] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.786339][ T6219] batman_adv: batadv0: Interface activated: ipvlan2 [ 77.787147][ T6224] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 78.043803][ T6232] loop1: detected capacity change from 0 to 256 [ 78.045737][ T4715] Bluetooth: hci3: Unable to find connection for big 0x6c [ 78.308780][ T6224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 78.367486][ T6234] bond4: (slave veth9): Enslaving as an active interface with a down link [ 78.380555][ T6224] bond3: (slave dummy0): Releasing active interface [ 78.380625][ T6224] dummy0: left promiscuous mode [ 78.418924][ T6224] bond4: (slave dummy0): making interface the new active one [ 78.419503][ T6224] dummy0: entered promiscuous mode [ 78.425017][ T6224] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 78.486184][ T6245] loop3: detected capacity change from 0 to 2048 [ 78.488687][ T6245] EXT4-fs: Mount option(s) incompatible with ext3 [ 78.913683][ T6264] FAULT_INJECTION: forcing a failure. [ 78.913683][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 78.913696][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.0.409 Not tainted syzkaller #0 PREEMPT [ 78.913706][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.913718][ T6264] Call trace: [ 78.913721][ T6264] show_stack+0x2c/0x3c (C) [ 78.913740][ T6264] __dump_stack+0x30/0x40 [ 78.913751][ T6264] dump_stack_lvl+0xd8/0x12c [ 78.913760][ T6264] dump_stack+0x1c/0x28 [ 78.913769][ T6264] should_fail_ex+0x418/0x58c [ 78.913780][ T6264] should_failslab+0xc4/0x120 [ 78.913792][ T6264] __kmalloc_noprof+0x108/0x6c8 [ 78.913803][ T6264] tomoyo_realpath_from_path+0xbc/0x4dc [ 78.913813][ T6264] tomoyo_path_number_perm+0x1f0/0x500 [ 78.913821][ T6264] tomoyo_file_ioctl+0x2c/0x3c [ 78.913830][ T6264] security_file_ioctl+0xdc/0x2b0 [ 78.913838][ T6264] __arm64_sys_ioctl+0xb0/0x1cc [ 78.913849][ T6264] invoke_syscall+0x98/0x244 [ 78.913859][ T6264] el0_svc_common+0xec/0x23c [ 78.913868][ T6264] do_el0_svc+0x4c/0x5c [ 78.913877][ T6264] el0_svc+0x60/0x1d8 [ 78.913887][ T6264] el0t_64_sync_handler+0x44/0x104 [ 78.913896][ T6264] el0t_64_sync+0x198/0x19c [ 78.913905][ T6264] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.915294][ T6260] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 78.957514][ T6260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 78.971074][ T6271] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 78.979006][ T6271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.992271][ T6271] bond2: (slave veth5): Enslaving as an active interface with a down link [ 78.994301][ T6271] dummy0: left promiscuous mode [ 79.002857][ T6271] bond2: (slave dummy0): making interface the new active one [ 79.003391][ T6271] dummy0: entered promiscuous mode [ 79.004493][ T6271] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 79.038251][ T6260] bond5: (slave veth11): Enslaving as an active interface with a down link [ 79.112977][ T6260] bond4: (slave dummy0): Releasing active interface [ 79.112996][ T6260] dummy0: left promiscuous mode [ 79.207801][ T6280] loop1: detected capacity change from 0 to 256 [ 79.445313][ T6260] bond5: (slave dummy0): making interface the new active one [ 79.447017][ T6260] dummy0: entered promiscuous mode [ 79.447147][ T6260] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 79.464654][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 79.548184][ T6295] loop4: detected capacity change from 0 to 256 [ 79.647353][ T6314] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 79.683556][ T6314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.729087][ T6314] bond1: (slave veth3): Enslaving as an active interface with a down link [ 79.752878][ T6314] bond1: (slave dummy0): making interface the new active one [ 79.753506][ T6314] dummy0: entered promiscuous mode [ 79.753636][ T6314] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 79.909038][ T6342] FAULT_INJECTION: forcing a failure. [ 79.909038][ T6342] name failslab, interval 1, probability 0, space 0, times 0 [ 79.909058][ T6342] CPU: 0 UID: 0 PID: 6342 Comm: syz.4.428 Not tainted syzkaller #0 PREEMPT [ 79.909071][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 79.909085][ T6342] Call trace: [ 79.909088][ T6342] show_stack+0x2c/0x3c (C) [ 79.909105][ T6342] __dump_stack+0x30/0x40 [ 79.909116][ T6342] dump_stack_lvl+0xd8/0x12c [ 79.909126][ T6342] dump_stack+0x1c/0x28 [ 79.909135][ T6342] should_fail_ex+0x418/0x58c [ 79.909146][ T6342] should_failslab+0xc4/0x120 [ 79.909157][ T6342] __kmalloc_noprof+0x108/0x6c8 [ 79.909168][ T6342] tomoyo_encode2+0x10c/0x330 [ 79.909178][ T6342] tomoyo_encode+0x34/0x50 [ 79.909186][ T6342] tomoyo_realpath_from_path+0x488/0x4dc [ 79.909195][ T6342] tomoyo_path_number_perm+0x1f0/0x500 [ 79.909203][ T6342] tomoyo_file_ioctl+0x2c/0x3c [ 79.909212][ T6342] security_file_ioctl+0xdc/0x2b0 [ 79.909220][ T6342] __arm64_sys_ioctl+0xb0/0x1cc [ 79.909231][ T6342] invoke_syscall+0x98/0x244 [ 79.909241][ T6342] el0_svc_common+0xec/0x23c [ 79.909250][ T6342] do_el0_svc+0x4c/0x5c [ 79.909259][ T6342] el0_svc+0x60/0x1d8 [ 79.909269][ T6342] el0t_64_sync_handler+0x44/0x104 [ 79.909278][ T6342] el0t_64_sync+0x198/0x19c [ 79.909290][ T6342] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.068864][ T6354] loop4: detected capacity change from 0 to 1024 [ 80.121763][ T6354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.135272][ T6354] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.432: lblock 3 mapped to illegal pblock 3 (length 3) [ 80.135948][ T6354] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 80.135973][ T6354] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.135973][ T6354] [ 80.137654][ T6354] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.432: Freeing blocks not in datazone - block = 3, count = 1 [ 80.171489][ T4842] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 80.171824][ T4842] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 80.171844][ T4842] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.171844][ T4842] [ 80.173320][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.334360][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 80.407006][ T6371] FAULT_INJECTION: forcing a failure. [ 80.407006][ T6371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.407045][ T6371] CPU: 0 UID: 0 PID: 6371 Comm: syz.4.435 Not tainted syzkaller #0 PREEMPT [ 80.407055][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 80.407068][ T6371] Call trace: [ 80.407071][ T6371] show_stack+0x2c/0x3c (C) [ 80.407091][ T6371] __dump_stack+0x30/0x40 [ 80.407101][ T6371] dump_stack_lvl+0xd8/0x12c [ 80.407111][ T6371] dump_stack+0x1c/0x28 [ 80.407120][ T6371] should_fail_ex+0x418/0x58c [ 80.407131][ T6371] should_fail+0x14/0x24 [ 80.407140][ T6371] should_fail_usercopy+0x20/0x30 [ 80.407150][ T6371] _copy_to_iter+0x424/0x10f8 [ 80.407161][ T6371] simple_copy_to_iter+0x50/0x8c [ 80.407170][ T6371] __skb_datagram_iter+0xd4/0x77c [ 80.407177][ T6371] skb_copy_datagram_iter+0xf4/0x2c4 [ 80.407185][ T6371] netlink_recvmsg+0x244/0x868 [ 80.407194][ T6371] sock_recvmsg_nosec+0x94/0x130 [ 80.407202][ T6371] ____sys_recvmsg+0x4fc/0x608 [ 80.407211][ T6371] ___sys_recvmsg+0x16c/0x1f4 [ 80.407219][ T6371] do_recvmmsg+0x288/0x7d4 [ 80.407228][ T6371] __sys_recvmmsg+0x200/0x270 [ 80.407236][ T6371] __arm64_sys_recvmmsg+0xe0/0x108 [ 80.407245][ T6371] invoke_syscall+0x98/0x244 [ 80.407255][ T6371] el0_svc_common+0xec/0x23c [ 80.407264][ T6371] do_el0_svc+0x4c/0x5c [ 80.407274][ T6371] el0_svc+0x60/0x1d8 [ 80.407284][ T6371] el0t_64_sync_handler+0x44/0x104 [ 80.407293][ T6371] el0t_64_sync+0x198/0x19c [ 80.479871][ C1] net_ratelimit: 224 callbacks suppressed [ 80.576360][ T6366] netlink: 52 bytes leftover after parsing attributes in process `syz.3.436'. [ 80.626954][ T6374] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 80.669536][ T6374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.717161][ T6374] bond3: (slave veth7): Enslaving as an active interface with a down link [ 80.741151][ T6374] bond2: (slave dummy0): Releasing active interface [ 80.741170][ T6374] dummy0: left promiscuous mode [ 80.769178][ T6374] bond3: (slave dummy0): making interface the new active one [ 80.778237][ T6374] dummy0: entered promiscuous mode [ 80.778388][ T6374] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 80.800501][ T6391] overlayfs: failed to resolve './file0': -2 [ 80.824710][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 81.007528][ T6427] loop2: detected capacity change from 0 to 256 [ 81.327950][ T6467] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 81.342717][ T6467] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.349363][ T6467] misc userio: Invalid payload size [ 81.356984][ T6467] bond2: (slave dummy0): Releasing active interface [ 81.400388][ T6475] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 81.400398][ T6475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'. [ 81.406196][ T6467] bond3: (slave dummy0): making interface the new active one [ 81.418140][ T6467] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 81.431062][ T6475] dummy0: entered promiscuous mode [ 81.436232][ T6475] bond3: (slave dummy0): Releasing active interface [ 81.531429][ T6481] syz.3.474 uses obsolete (PF_INET,SOCK_PACKET) [ 81.534060][ T6486] overlay: Unknown parameter '/dev/net/tun' [ 82.021811][ T6523] binder: 6522:6523 tried to acquire reference to desc 0, got 1 instead [ 82.022237][ T6523] binder: 6522:6523 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 82.022250][ T6523] binder: 6523 RLIMIT_NICE not set [ 82.022287][ T6523] binder: 6523 RLIMIT_NICE not set [ 82.023249][ T24] binder: release 6522:6523 transaction 5 out, still active [ 82.023265][ T24] binder: undelivered TRANSACTION_COMPLETE [ 82.028365][ T1158] binder: release 6522:6523 transaction 5 in, still active [ 82.028383][ T1158] binder: send failed reply for transaction 5, target dead [ 82.132055][ T6535] No control pipe specified [ 82.520136][ T9] atkbd serio0: keyboard reset failed on [ 82.956254][ T6553] overlayfs: failed to resolve './bus': -2 [ 83.180632][ T6573] fuse: Bad value for 'group_id' [ 83.180641][ T6573] fuse: Bad value for 'group_id' [ 83.279082][ T6581] overlayfs: failed to resolve './bus': -2 [ 83.521996][ T6590] overlayfs: missing 'workdir' [ 83.701467][ T6589] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 84.153517][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 84.280195][ T6639] overlayfs: failed to resolve './bus': -2 [ 85.600003][ C0] net_ratelimit: 116 callbacks suppressed [ 86.930744][ T6663] lapbether: lapb_data_request error - 4 [ 86.986014][ T6657] batman_adv: batadv0: Adding interface: syzkaller0 [ 86.986021][ T6657] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.986037][ T6657] batman_adv: batadv0: Interface activated: syzkaller0 [ 86.998695][ T6657] FAULT_INJECTION: forcing a failure. [ 86.998695][ T6657] name failslab, interval 1, probability 0, space 0, times 0 [ 86.998713][ T6657] CPU: 1 UID: 0 PID: 6657 Comm: syz.1.530 Not tainted syzkaller #0 PREEMPT [ 86.998723][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 86.998737][ T6657] Call trace: [ 86.998740][ T6657] show_stack+0x2c/0x3c (C) [ 86.998758][ T6657] __dump_stack+0x30/0x40 [ 86.998771][ T6657] dump_stack_lvl+0xd8/0x12c [ 86.998782][ T6657] dump_stack+0x1c/0x28 [ 86.998793][ T6657] should_fail_ex+0x418/0x58c [ 86.998806][ T6657] should_failslab+0xc4/0x120 [ 86.998819][ T6657] __kvmalloc_node_noprof+0x160/0x7fc [ 86.998828][ T6657] bpf_check_cfg+0x154/0x211c [ 86.998837][ T6657] bpf_check+0x1c40/0x243c [ 86.998849][ T6657] bpf_prog_load+0xf4c/0x1554 [ 86.998858][ T6657] __sys_bpf+0x7d4/0x82c [ 86.998867][ T6657] __arm64_sys_bpf+0xd0/0xec [ 86.998876][ T6657] invoke_syscall+0x98/0x244 [ 86.998888][ T6657] el0_svc_common+0xec/0x23c [ 86.998900][ T6657] do_el0_svc+0x4c/0x5c [ 86.998911][ T6657] el0_svc+0x60/0x1d8 [ 86.998922][ T6657] el0t_64_sync_handler+0x44/0x104 [ 86.998932][ T6657] el0t_64_sync+0x198/0x19c [ 87.186964][ T6675] overlayfs: failed to resolve './bus': -2 [ 87.238834][ T6668] overlayfs: missing 'lowerdir' [ 87.269109][ T6657] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 87.279004][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 87.283705][ T6657] batman_adv: batadv0: Removing interface: syzkaller0 [ 87.323632][ T293] dummy0: left promiscuous mode [ 87.370885][ T6693] lo: entered allmulticast mode [ 87.405842][ T6697] autofs: Unknown parameter '¢AÉëèd½ê\Üx' [ 87.539410][ T6704] loop3: detected capacity change from 0 to 256 [ 87.886760][ T6717] autofs: Unknown parameter '0x0000000000000000' [ 87.899320][ T6281] IPVS: starting estimator thread 0... [ 87.918467][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 87.950871][ T6731] FAULT_INJECTION: forcing a failure. [ 87.950871][ T6731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.950883][ T6731] CPU: 0 UID: 0 PID: 6731 Comm: syz.0.556 Not tainted syzkaller #0 PREEMPT [ 87.950892][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.950903][ T6731] Call trace: [ 87.950906][ T6731] show_stack+0x2c/0x3c (C) [ 87.950922][ T6731] __dump_stack+0x30/0x40 [ 87.950932][ T6731] dump_stack_lvl+0xd8/0x12c [ 87.950942][ T6731] dump_stack+0x1c/0x28 [ 87.950951][ T6731] should_fail_ex+0x418/0x58c [ 87.950962][ T6731] should_fail+0x14/0x24 [ 87.950971][ T6731] should_fail_usercopy+0x20/0x30 [ 87.950981][ T6731] _copy_from_iter+0x188/0x1064 [ 87.950992][ T6731] hci_sock_sendmsg+0x340/0xc24 [ 87.951004][ T6731] __sock_sendmsg+0xc8/0x17c [ 87.951013][ T6731] sock_write_iter+0x220/0x310 [ 87.951022][ T6731] vfs_write+0x51c/0xa0c [ 87.951032][ T6731] ksys_write+0x12c/0x228 [ 87.951041][ T6731] __arm64_sys_write+0x84/0x98 [ 87.951051][ T6731] invoke_syscall+0x98/0x244 [ 87.951061][ T6731] el0_svc_common+0xec/0x23c [ 87.951070][ T6731] do_el0_svc+0x4c/0x5c [ 87.951080][ T6731] el0_svc+0x60/0x1d8 [ 87.951089][ T6731] el0t_64_sync_handler+0x44/0x104 [ 87.951098][ T6731] el0t_64_sync+0x198/0x19c [ 88.022698][ T6720] IPVS: using max 55 ests per chain, 132000 per kthread [ 88.963389][ T6747] overlayfs: missing 'lowerdir' [ 89.418659][ T6770] FAULT_INJECTION: forcing a failure. [ 89.418659][ T6770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.418674][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.1.563 Not tainted syzkaller #0 PREEMPT [ 89.418684][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 89.418697][ T6770] Call trace: [ 89.418700][ T6770] show_stack+0x2c/0x3c (C) [ 89.418718][ T6770] __dump_stack+0x30/0x40 [ 89.418729][ T6770] dump_stack_lvl+0xd8/0x12c [ 89.418739][ T6770] dump_stack+0x1c/0x28 [ 89.418748][ T6770] should_fail_ex+0x418/0x58c [ 89.418759][ T6770] should_fail+0x14/0x24 [ 89.418768][ T6770] should_fail_usercopy+0x20/0x30 [ 89.418778][ T6770] _inline_copy_from_user+0x3c/0x174 [ 89.418789][ T6770] kstrtouint_from_user+0xcc/0x174 [ 89.418800][ T6770] proc_fail_nth_write+0x9c/0x234 [ 89.418809][ T6770] vfs_write+0x2a4/0xa0c [ 89.418819][ T6770] ksys_write+0x12c/0x228 [ 89.418829][ T6770] __arm64_sys_write+0x84/0x98 [ 89.418839][ T6770] invoke_syscall+0x98/0x244 [ 89.418849][ T6770] el0_svc_common+0xec/0x23c [ 89.418858][ T6770] do_el0_svc+0x4c/0x5c [ 89.418868][ T6770] el0_svc+0x60/0x1d8 [ 89.418877][ T6770] el0t_64_sync_handler+0x44/0x104 [ 89.418886][ T6770] el0t_64_sync+0x198/0x19c [ 89.452169][ T6772] autofs: Unknown parameter 'fd0x0000000000000000' [ 89.481614][ T4395] veth0_macvtap: left promiscuous mode [ 89.518424][ T6782] loop2: detected capacity change from 0 to 1024 [ 89.537274][ T6782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.576199][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 90.111457][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 90.175240][ T6825] autofs: Unknown parameter 'fd0x0000000000000000' [ 90.215716][ T6834] loop0: detected capacity change from 0 to 512 [ 90.218610][ T6834] EXT4-fs: Ignoring removed bh option [ 90.218622][ T6834] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.219435][ T6834] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.233228][ T6811] netlink: 'syz.4.573': attribute type 1 has an invalid length. [ 90.233781][ T6834] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.580: bad orphan inode 131083 [ 90.233801][ T6834] loop0: lost filesystem error report for type 5 error -117 [ 90.243280][ T6834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.259018][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.352362][ T6811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.573'. [ 90.528667][ T6853] overlayfs: missing 'lowerdir' [ 90.719820][ C1] net_ratelimit: 221 callbacks suppressed [ 90.720471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.764288][ T6858] loop3: detected capacity change from 0 to 8192 [ 91.003007][ T6876] autofs: Unknown parameter 'fd0x0000000000000000' [ 91.227108][ T6896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.596'. [ 91.227189][ T6896] IPVS: Unknown mcast interface: vcan0 [ 91.270243][ T6900] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 91.453719][ T6925] loop3: detected capacity change from 0 to 512 [ 91.495552][ T6925] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 91.495565][ T6925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 91.495598][ T6925] System zones: 0-1, 15-15, 18-18, 34-34 [ 91.495702][ T6925] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.495880][ T6925] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1792). [ 91.495990][ T6925] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.496002][ T6925] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 91.496112][ T6925] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.605: bad orphan inode 16 [ 91.496122][ T6925] loop3: lost filesystem error report for type 5 error -117 [ 91.496210][ T6925] ext4_test_bit(bit=15, block=18) = 1 [ 91.496216][ T6925] is_bad_inode(inode)=0 [ 91.496220][ T6925] NEXT_ORPHAN(inode)=0 [ 91.496223][ T6925] max_ino=32 [ 91.496227][ T6925] i_nlink=2 [ 91.496676][ T6925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.497235][ T6925] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 91.577884][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.611584][ T6281] dummy0: left promiscuous mode [ 91.622797][ T6936] FAULT_INJECTION: forcing a failure. [ 91.622797][ T6936] name failslab, interval 1, probability 0, space 0, times 0 [ 91.622811][ T6936] CPU: 0 UID: 0 PID: 6936 Comm: syz.1.607 Not tainted syzkaller #0 PREEMPT [ 91.622823][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.622834][ T6936] Call trace: [ 91.622837][ T6936] show_stack+0x2c/0x3c (C) [ 91.622855][ T6936] __dump_stack+0x30/0x40 [ 91.622865][ T6936] dump_stack_lvl+0xd8/0x12c [ 91.622875][ T6936] dump_stack+0x1c/0x28 [ 91.622884][ T6936] should_fail_ex+0x418/0x58c [ 91.622895][ T6936] should_failslab+0xc4/0x120 [ 91.622906][ T6936] kmem_cache_alloc_node_noprof+0x98/0x604 [ 91.622917][ T6936] __alloc_skb+0x1f0/0x610 [ 91.622926][ T6936] create_monitor_ctrl_event+0x50/0x3dc [ 91.622935][ T6936] mgmt_cmd_complete+0x1a4/0x4c8 [ 91.622942][ T6936] stop_discovery+0x14c/0x278 [ 91.622950][ T6936] hci_mgmt_cmd+0x7a8/0xc54 [ 91.622958][ T6936] hci_sock_sendmsg+0x54c/0xc24 [ 91.622968][ T6936] __sock_sendmsg+0xc8/0x17c [ 91.622976][ T6936] sock_write_iter+0x220/0x310 [ 91.622985][ T6936] vfs_write+0x51c/0xa0c [ 91.622995][ T6936] ksys_write+0x12c/0x228 [ 91.623004][ T6936] __arm64_sys_write+0x84/0x98 [ 91.623014][ T6936] invoke_syscall+0x98/0x244 [ 91.623024][ T6936] el0_svc_common+0xec/0x23c [ 91.623034][ T6936] do_el0_svc+0x4c/0x5c [ 91.623043][ T6936] el0_svc+0x60/0x1d8 [ 91.623053][ T6936] el0t_64_sync_handler+0x44/0x104 [ 91.623061][ T6936] el0t_64_sync+0x198/0x19c [ 92.019870][ T6951] netlink: 'syz.3.611': attribute type 1 has an invalid length. [ 92.060232][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 92.089377][ T6951] bond6: option mode: invalid value (8) [ 92.100797][ T6951] bond6 (unregistering): Released all slaves [ 92.217324][ T6959] loop0: detected capacity change from 0 to 2048 [ 92.218656][ T6960] netlink: 'syz.3.611': attribute type 10 has an invalid length. [ 92.218665][ T6960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.611'. [ 92.245961][ T6955] bond5: (slave dummy0): Releasing active interface [ 92.255263][ T6959] loop0: p1 p4 [ 92.255263][ T6959] p1: [ 92.255276][ T6959] loop0: partition table partially beyond EOD, truncated [ 92.257252][ T6959] loop0: p4 start 184549376 is beyond EOD, truncated [ 92.261687][ T6959] loop0: p6 start 184549376 is beyond EOD, truncated [ 92.296650][ T6960] dummy0: entered promiscuous mode [ 92.380811][ T4873] dummy0: left promiscuous mode [ 92.561141][ T6972] loop0: detected capacity change from 0 to 256 [ 92.962108][ T6974] loop2: detected capacity change from 0 to 256 [ 93.706828][ T6982] FAULT_INJECTION: forcing a failure. [ 93.706828][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 93.706845][ T6982] CPU: 0 UID: 0 PID: 6982 Comm: syz.1.621 Not tainted syzkaller #0 PREEMPT [ 93.706855][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.706868][ T6982] Call trace: [ 93.706871][ T6982] show_stack+0x2c/0x3c (C) [ 93.706890][ T6982] __dump_stack+0x30/0x40 [ 93.706903][ T6982] dump_stack_lvl+0xd8/0x12c [ 93.706914][ T6982] dump_stack+0x1c/0x28 [ 93.706925][ T6982] should_fail_ex+0x418/0x58c [ 93.706939][ T6982] should_failslab+0xc4/0x120 [ 93.706952][ T6982] __kvmalloc_node_noprof+0x160/0x7fc [ 93.706961][ T6982] vmemdup_user+0x38/0xe0 [ 93.706969][ T6982] setxattr_copy+0x168/0x1c0 [ 93.706978][ T6982] path_setxattrat+0x130/0x2a8 [ 93.706987][ T6982] __arm64_sys_setxattr+0xd0/0xec [ 93.706995][ T6982] invoke_syscall+0x98/0x244 [ 93.707008][ T6982] el0_svc_common+0xec/0x23c [ 93.707019][ T6982] do_el0_svc+0x4c/0x5c [ 93.707030][ T6982] el0_svc+0x60/0x1d8 [ 93.707041][ T6982] el0t_64_sync_handler+0x44/0x104 [ 93.707052][ T6982] el0t_64_sync+0x198/0x19c [ 93.748489][ T6988] loop3: detected capacity change from 0 to 512 [ 93.769627][ T6988] EXT4-fs: Ignoring removed bh option [ 93.793071][ T4842] dummy0: left promiscuous mode [ 93.796673][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.831678][ T7002] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 93.831736][ T7002] overlayfs: failed to get uuid (119/file2, err=-13); falling back to uuid=null. [ 93.851807][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.951268][ T7014] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 93.951910][ T7014] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.970906][ T7021] FAULT_INJECTION: forcing a failure. [ 93.970906][ T7021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 93.970922][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.0.635 Not tainted syzkaller #0 PREEMPT [ 93.970932][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.970944][ T7021] Call trace: [ 93.970947][ T7021] show_stack+0x2c/0x3c (C) [ 93.970964][ T7021] __dump_stack+0x30/0x40 [ 93.970974][ T7021] dump_stack_lvl+0xd8/0x12c [ 93.970984][ T7021] dump_stack+0x1c/0x28 [ 93.970993][ T7021] should_fail_ex+0x418/0x58c [ 93.971004][ T7021] should_fail_alloc_page+0xec/0x10c [ 93.971015][ T7021] prepare_alloc_pages+0x194/0x484 [ 93.971026][ T7021] __alloc_frozen_pages_noprof+0x180/0x578 [ 93.971036][ T7021] alloc_pages_mpol+0x1fc/0x3d0 [ 93.971044][ T7021] folio_alloc_mpol_noprof+0x4c/0x248 [ 93.971052][ T7021] vma_alloc_folio_noprof+0x100/0x1dc [ 93.971060][ T7021] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 93.971070][ T7021] folio_prealloc+0x3c/0x1b0 [ 93.971080][ T7021] do_pte_missing+0x1bd0/0x28bc [ 93.971090][ T7021] handle_mm_fault+0x14d0/0x2b58 [ 93.971100][ T7021] do_page_fault+0x77c/0xb88 [ 93.971109][ T7021] do_translation_fault+0xc4/0x114 [ 93.971118][ T7021] do_mem_abort+0x70/0x194 [ 93.971126][ T7021] el0_da+0x78/0x1d4 [ 93.971136][ T7021] el0t_64_sync_handler+0xd8/0x104 [ 93.971145][ T7021] el0t_64_sync+0x198/0x19c [ 93.971210][ T7021] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 94.258725][ T7026] loop4: detected capacity change from 0 to 256 [ 94.361441][ T7014] md: loop0 has zero or unknown size, marking faulty! [ 94.512877][ T7021] loop0: detected capacity change from 0 to 8192 [ 95.038922][ T7052] FAULT_INJECTION: forcing a failure. [ 95.038922][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 95.038938][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.4.646 Not tainted syzkaller #0 PREEMPT [ 95.038949][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.038963][ T7052] Call trace: [ 95.038966][ T7052] show_stack+0x2c/0x3c (C) [ 95.038985][ T7052] __dump_stack+0x30/0x40 [ 95.038996][ T7052] dump_stack_lvl+0xd8/0x12c [ 95.039005][ T7052] dump_stack+0x1c/0x28 [ 95.039015][ T7052] should_fail_ex+0x418/0x58c [ 95.039025][ T7052] should_failslab+0xc4/0x120 [ 95.039036][ T7052] __kmalloc_noprof+0x108/0x6c8 [ 95.039047][ T7052] tomoyo_realpath_from_path+0xbc/0x4dc [ 95.039058][ T7052] tomoyo_path_number_perm+0x1f0/0x500 [ 95.039066][ T7052] tomoyo_file_ioctl+0x2c/0x3c [ 95.039075][ T7052] security_file_ioctl+0xdc/0x2b0 [ 95.039084][ T7052] __arm64_sys_ioctl+0xb0/0x1cc [ 95.039094][ T7052] invoke_syscall+0x98/0x244 [ 95.039104][ T7052] el0_svc_common+0xec/0x23c [ 95.039113][ T7052] do_el0_svc+0x4c/0x5c [ 95.039123][ T7052] el0_svc+0x60/0x1d8 [ 95.039132][ T7052] el0t_64_sync_handler+0x44/0x104 [ 95.039141][ T7052] el0t_64_sync+0x198/0x19c [ 95.039151][ T7052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.160025][ T7054] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 95.161429][ T7054] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.191411][ T7063] overlayfs: missing 'lowerdir' [ 95.202823][ T7054] md: loop0 has zero or unknown size, marking faulty! [ 95.329452][ T7075] No control pipe specified [ 95.365460][ T7080] loop2: detected capacity change from 0 to 1024 [ 95.373553][ T7080] EXT4-fs: Ignoring removed bh option [ 95.373581][ T7080] EXT4-fs: Ignoring removed bh option [ 95.378194][ T7080] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 95.392996][ T7080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.622622][ T7093] netlink: 76 bytes leftover after parsing attributes in process `syz.0.663'. [ 95.622712][ T7093] netlink: 76 bytes leftover after parsing attributes in process `syz.0.663'. [ 95.771743][ T4395] net_ratelimit: 69 callbacks suppressed [ 95.787371][ T7095] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 95.787386][ T7095] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 95.803785][ T7097] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 95.804350][ T7097] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.815596][ T7080] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 95.817243][ T7080] evm: overlay not supported [ 95.823171][ T7097] md: loop0 has zero or unknown size, marking faulty! [ 95.878421][ T7112] No control pipe specified [ 95.907113][ T7116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.676'. [ 95.923323][ T4709] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /124/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 95.924693][ T4709] EXT4-fs (loop2): Remounting filesystem read-only [ 95.932398][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.958558][ T7120] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 95.958580][ T7120] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 96.005546][ T7130] loop0: detected capacity change from 0 to 128 [ 96.008816][ T7130] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.026356][ T7134] overlayfs: failed to resolve './file0': -2 [ 96.033654][ T7134] loop3: detected capacity change from 0 to 512 [ 96.037055][ T7138] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 96.088538][ T7138] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.105220][ T7144] bond4: (slave veth5): Enslaving as an active interface with a down link [ 96.139055][ T7138] dummy0: left promiscuous mode [ 96.142011][ T7138] bond4: (slave dummy0): making interface the new active one [ 96.142704][ T7138] dummy0: entered promiscuous mode [ 96.143834][ T7138] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 96.203517][ T7152] loop4: detected capacity change from 0 to 8192 [ 96.304084][ T7158] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 96.304098][ T7158] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 96.353418][ T7163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'. [ 96.479389][ T7173] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.521699][ T7173] md: could not open device unknown-block(7,0). [ 96.823054][ T7188] FAULT_INJECTION: forcing a failure. [ 96.823054][ T7188] name failslab, interval 1, probability 0, space 0, times 0 [ 96.823077][ T7188] CPU: 0 UID: 0 PID: 7188 Comm: syz.1.702 Not tainted syzkaller #0 PREEMPT [ 96.823087][ T7188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.823102][ T7188] Call trace: [ 96.823106][ T7188] show_stack+0x2c/0x3c (C) [ 96.823128][ T7188] __dump_stack+0x30/0x40 [ 96.823140][ T7188] dump_stack_lvl+0xd8/0x12c [ 96.823149][ T7188] dump_stack+0x1c/0x28 [ 96.823158][ T7188] should_fail_ex+0x418/0x58c [ 96.823170][ T7188] should_failslab+0xc4/0x120 [ 96.823182][ T7188] __kmalloc_noprof+0x108/0x6c8 [ 96.823194][ T7188] tomoyo_realpath_from_path+0xbc/0x4dc [ 96.823205][ T7188] tomoyo_path_number_perm+0x1f0/0x500 [ 96.823213][ T7188] tomoyo_file_ioctl+0x2c/0x3c [ 96.823222][ T7188] security_file_ioctl+0xdc/0x2b0 [ 96.823231][ T7188] __arm64_sys_ioctl+0xb0/0x1cc [ 96.823242][ T7188] invoke_syscall+0x98/0x244 [ 96.823252][ T7188] el0_svc_common+0xec/0x23c [ 96.823262][ T7188] do_el0_svc+0x4c/0x5c [ 96.823271][ T7188] el0_svc+0x60/0x1d8 [ 96.823282][ T7188] el0t_64_sync_handler+0x44/0x104 [ 96.823291][ T7188] el0t_64_sync+0x198/0x19c [ 96.823301][ T7188] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.866812][ T7191] overlayfs: missing 'lowerdir' [ 96.873522][ T7186] loop4: detected capacity change from 0 to 128 [ 96.883242][ T7186] FAT-fs (loop4): Directory bread(block 1048) failed [ 96.883263][ T7186] FAT-fs (loop4): Directory bread(block 1049) failed [ 96.883274][ T7186] FAT-fs (loop4): Directory bread(block 1050) failed [ 96.883285][ T7186] FAT-fs (loop4): Directory bread(block 1051) failed [ 96.883295][ T7186] FAT-fs (loop4): Directory bread(block 1052) failed [ 96.883304][ T7186] FAT-fs (loop4): Directory bread(block 1053) failed [ 96.883314][ T7186] FAT-fs (loop4): Directory bread(block 1054) failed [ 96.883323][ T7186] FAT-fs (loop4): Directory bread(block 1055) failed [ 96.929663][ T7194] FAULT_INJECTION: forcing a failure. [ 96.929663][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 96.929682][ T7194] CPU: 1 UID: 0 PID: 7194 Comm: syz.1.706 Not tainted syzkaller #0 PREEMPT [ 96.929695][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.929707][ T7194] Call trace: [ 96.929710][ T7194] show_stack+0x2c/0x3c (C) [ 96.929727][ T7194] __dump_stack+0x30/0x40 [ 96.929738][ T7194] dump_stack_lvl+0xd8/0x12c [ 96.929747][ T7194] dump_stack+0x1c/0x28 [ 96.929756][ T7194] should_fail_ex+0x418/0x58c [ 96.929770][ T7194] should_failslab+0xc4/0x120 [ 96.929781][ T7194] __kmalloc_cache_noprof+0x94/0x5fc [ 96.929789][ T7194] __arm64_sys_memfd_create+0x258/0x3ec [ 96.929798][ T7194] invoke_syscall+0x98/0x244 [ 96.929808][ T7194] el0_svc_common+0xec/0x23c [ 96.929818][ T7194] do_el0_svc+0x4c/0x5c [ 96.929827][ T7194] el0_svc+0x60/0x1d8 [ 96.929837][ T7194] el0t_64_sync_handler+0x44/0x104 [ 96.929845][ T7194] el0t_64_sync+0x198/0x19c [ 97.326339][ T7205] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.350770][ T7205] md: could not open device unknown-block(7,0). [ 97.364998][ T7214] ================================================================== [ 97.365005][ T7214] BUG: KASAN: slab-out-of-bounds in string_nocheck+0xd8/0x140 [ 97.365019][ T7214] Read of size 1 at addr ffff0000d755fcdc by task syz.0.712/7214 [ 97.365026][ T7214] [ 97.365031][ T7214] CPU: 0 UID: 0 PID: 7214 Comm: syz.0.712 Not tainted syzkaller #0 PREEMPT [ 97.365041][ T7214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.365053][ T7214] Call trace: [ 97.365055][ T7214] show_stack+0x2c/0x3c (C) [ 97.365070][ T7214] __dump_stack+0x30/0x40 [ 97.365082][ T7214] dump_stack_lvl+0xd8/0x12c [ 97.365094][ T7214] print_address_description+0xb0/0x238 [ 97.365103][ T7214] print_report+0x68/0x84 [ 97.365110][ T7214] kasan_report+0x8c/0xc4 [ 97.365120][ T7214] __asan_report_load1_noabort+0x20/0x2c [ 97.365131][ T7214] string_nocheck+0xd8/0x140 [ 97.365138][ T7214] string+0x8c/0xc8 [ 97.365150][ T7214] vsnprintf+0x880/0xd10 [ 97.365162][ T7214] pointer+0x5e8/0x6b4 [ 97.365174][ T7214] vsnprintf+0x618/0xd10 [ 97.365186][ T7214] vprintk_store+0x344/0xb94 [ 97.365198][ T7214] vprintk_emit+0x1bc/0x514 [ 97.365208][ T7214] vprintk_default+0x54/0x80 [ 97.365219][ T7214] vprintk+0x9c/0x13c [ 97.365231][ T7214] _printk+0xe0/0x130 [ 97.365242][ T7214] __dynamic_pr_debug+0x148/0x1e4 [ 97.365256][ T7214] nfc_llcp_get_sdp_ssap+0x350/0x3fc [ 97.365266][ T7214] llcp_sock_bind+0x2e0/0x58c [ 97.365275][ T7214] __sys_bind+0x1c4/0x268 [ 97.365285][ T7214] __arm64_sys_bind+0x84/0x9c [ 97.365295][ T7214] invoke_syscall+0x98/0x244 [ 97.365307][ T7214] el0_svc_common+0xec/0x23c [ 97.365318][ T7214] do_el0_svc+0x4c/0x5c [ 97.365330][ T7214] el0_svc+0x60/0x1d8 [ 97.365340][ T7214] el0t_64_sync_handler+0x44/0x104 [ 97.365350][ T7214] el0t_64_sync+0x198/0x19c [ 97.365359][ T7214] [ 97.365361][ T7214] Allocated by task 7214: [ 97.365365][ T7214] kasan_save_track+0x40/0x78 [ 97.365372][ T7214] kasan_save_alloc_info+0x40/0x50 [ 97.365381][ T7214] __kasan_kmalloc+0x9c/0xb4 [ 97.365388][ T7214] __kmalloc_node_track_caller_noprof+0x440/0x6e0 [ 97.365395][ T7214] kmemdup_noprof+0x44/0x8c [ 97.365402][ T7214] llcp_sock_bind+0x2b0/0x58c [ 97.365410][ T7214] __sys_bind+0x1c4/0x268 [ 97.365417][ T7214] __arm64_sys_bind+0x84/0x9c [ 97.365425][ T7214] invoke_syscall+0x98/0x244 [ 97.365435][ T7214] el0_svc_common+0xec/0x23c [ 97.365445][ T7214] do_el0_svc+0x4c/0x5c [ 97.365455][ T7214] el0_svc+0x60/0x1d8 [ 97.365463][ T7214] el0t_64_sync_handler+0x44/0x104 [ 97.365471][ T7214] el0t_64_sync+0x198/0x19c [ 97.365478][ T7214] [ 97.365480][ T7214] The buggy address belongs to the object at ffff0000d755fcc0 [ 97.365480][ T7214] which belongs to the cache kmalloc-32 of size 32 [ 97.365487][ T7214] The buggy address is located 0 bytes to the right of [ 97.365487][ T7214] allocated 28-byte region [ffff0000d755fcc0, ffff0000d755fcdc) [ 97.365495][ T7214] [ 97.365497][ T7214] The buggy address belongs to the physical page: [ 97.365501][ T7214] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11755f [ 97.365508][ T7214] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 97.365516][ T7214] page_type: f5(slab) [ 97.365524][ T7214] raw: 05ffc00000000000 ffff0000c0001780 dead000000000100 dead000000000122 [ 97.365531][ T7214] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 97.365535][ T7214] page dumped because: kasan: bad access detected [ 97.365539][ T7214] [ 97.365541][ T7214] Memory state around the buggy address: [ 97.365546][ T7214] ffff0000d755fb80: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 97.365551][ T7214] ffff0000d755fc00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 97.365557][ T7214] >ffff0000d755fc80: fa fb fb fb fc fc fc fc 00 00 00 04 fc fc fc fc [ 97.365561][ T7214] ^ [ 97.365566][ T7214] ffff0000d755fd00: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 97.365578][ T7214] ffff0000d755fd80: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 97.365582][ T7214] ================================================================== [ 97.365586][ T7214] Disabling lock debugging due to kernel taint [ 100.959784][ C1] net_ratelimit: 64 callbacks suppressed [ 106.079787][ C0] net_ratelimit: 69 callbacks suppressed [ 107.320112][ T4842] dummy0: left promiscuous mode