last executing test programs: 1m37.075989441s ago: executing program 4 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m37.044403404s ago: executing program 4 (id=893): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x4004800) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x50) 1m36.968862496s ago: executing program 4 (id=897): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r3, &(0x7f0000000a40)='active', 0x6) 1m36.770252573s ago: executing program 4 (id=906): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@bh}, {@mblk_io_submit}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x2}, 0x4) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, 0x0, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1m36.358231806s ago: executing program 4 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 1m35.973374669s ago: executing program 4 (id=915): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000080)={0xc3e2, 0xd000003, 0x7}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000002c0)=0xc35, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x5}, 0x94) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffffffffffffffba, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r5, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 1m35.871795442s ago: executing program 32 (id=915): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000080)={0xc3e2, 0xd000003, 0x7}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000002c0)=0xc35, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x5}, 0x94) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffffffffffffffba, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r5, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 1m9.278841955s ago: executing program 1 (id=1507): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x60}, 0x10) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000006c0)={{0x6, 0x1}, 0x100, './file1\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000f40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x34, 0x1c, 0x68, 0x0, 0xe, 0x2, 0x0, @remote, @local}, {0x11, 0x7, 0x0, @empty}}}}}, 0x0) 1m9.229700338s ago: executing program 1 (id=1512): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (fail_nth: 2) 1m9.114628235s ago: executing program 1 (id=1514): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100)="50be08778b3dd6000000000000000000", &(0x7f0000000080)=""/34, 0x2}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f00000001c0)='@', 0x20000000}, 0x20) pwritev(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000280)="d992af74acb620687d27f58171364c19abc02e081b325dc3afb88ac04c1de7a37b1129a31358b2e946bccbd2ae27a3fdc8abe1e45f78d6fe6e97ec783ba5bd451adb01ea190a8a7b2aa7ec013e88e728c80937f8a644322a6b7d78120a2dea2c681bedadd03e3546c39277af3a57c4140054cd4e739676632fb8579b5da002c5e95c80d38c4a49784d18fdf4e351349961c514f64bd3f39ccc4ee568db3cf914e49099179bac4ae778d39bfa0f9d4779", 0xb0}, {&(0x7f0000000340)="6010287218b61c752067d2028bfc8bcb9c0aaa105452822df424b2c77493efbd45121c45dacd6c533d0d8accf846c3fabdd398d02004f310a5e0503d09bfc8f42d805ca3a8489c4e087132b4064bb714a947bbc7ff1f2372e0c3a27cd2071cec42953ff0fbc71060341a60cc9762c732a3317d74731c0fe0496839dd5e5f36c96674c5d6432d566c5b048a4ab1", 0x8d}, {&(0x7f0000000580)="c7ff6d6be72e26f31b0231aa8c9db78a680fd924cf5d78665faa153f908eadfdc0c9216030b9bb90d19a26f52a0da5b26c245a8d6d602f3f0b31bd480d584cd9128f9a00605b275870f17a4743a7653cba4db5f1f129df9e5db990e0463cdc955299fc59241176cd588bf2660ba6b0dca040cf83ab76dcb10f03257648c91f142d8c7d84700e1fe76fb995ad56c70d1bdcf691b4033f6ac2bcd154495739ba9f58e8f577a5dabe98d0c466b19b88a08fcea2f6840b87a3aab8092fcc37952c7344005fcfdce52acedff0518a3fc9f0b52afb64e8fdd15e821c9c534679a96cf9fa18c9ff15d5b26dd5d3017dfbbecd2051db6bc222e1e87fb6732124d5a64faab74cce4bcc128916fdf153b6d7c256f1bd222e00cb641f6583a710e1841f4d2b371f2f41a2f752f9d895f62eeb51bdb519f327e410e8447bdcee82c9713b3749c6c5d743d42a2c01ee33d5bb11b83a30388b66986ef847a09416aec0621fa84f56c4d8311c9916e0dce6a0b8a84f73d53c97cc26c4a18a89d786751fce27935dacdf7616463eee8cec66c83a769d976e88c402e1b32866ba4410bc5a96b247e1a727400a011c3d5ea60e06edab1c4eb1ea2bdc9243f4c027730dbe7b962b22b82b7beddefdde239dba5650a99ad7228d836c727786f85a4b35b2f2dc86ca958dbfd40cb93a7ffe53a6ce63c8d96867b20c165ea3cd8129f07b609ffac4bfb98af4e9ac8bc616f18e6007b02be39d9b7c2a13f076936960928730a559028fd7003878ea2e20eed7ff292624e3e9a10c8fc076102b09b257861438628e91b38460e796679a011fc98de316cbe029a7059ebd8b9c1a712a968806787d86a19c220130a6f74dc794eb63a2c6c13b5e19aa115e2fe9a88e9500758af2263147554d339f5df7fce080325b24fd7b9f2d74d90082076ce377757ef9bdaaafd692c377a9fe22c4633cda81d7abbf580001fcef012e5d193233e1ba9a1836ee4c2a88b2a04ae78401a4bac118b36674ca214708c3f8fafe9855da9032a1e0cc9973baec501901f1e286a5e0ca05cb5f48a494e57284518910f8a542ba25fb17ba019408c09b028d047d8c1afab5e1123b83654f872dea6eb7136ac0aa978fd3e8c01010e07c8ae3cc5bbe374082d9bae522f34402fb9d60e8ff7e70f39b7c6d9d8c569b07a889762500bc202d5a16b65e4d5ed4d53c52598a7cea9f8001053aa1877851bceb8bd6682cfa409479592f5449f78ddf245ea7c2b2e6fa6e0ab3a7465bab44e1318e718b9fe08fd80b81211182040b6626c74207e525fb0e49a6c6ecdb65bda0c5594b400da3776c2c9266c08eccf3b03464bb335b837a15ed5a80ba20aa4b46c6068e36cc4ac29781b8ef979b9d5dee37170d49a22e43989e288542f1b4a4b5a36e1144d743667c986a1a43370a2874141ce2a40bec5f25dbc125f5fbeb758d99c55b8b2c3604e8c92be9c3d75045f3ec7894d1f93db48d07735ca867a61d7a031ac96c9636087b00e8396ebfe39d944dee0169c5b6096df274b640afb78103d708569b68fdd117c1ff444706f409a71d062d43a72aac9b8dfa117a1d06e9c8bfe8de1fa16d780087b1301e3f22f57ccfdb026ad18d8dc8c41fb231e421f7c6580f8dc7b189e623952f9691e7683b045841b97b3ef667a3116d10b3c50664f2fd8e624327afb3df251586f094e1037b2b6174bc6ba42b7de4aa19075db1cd23572bb282c847e71ddbaf96ded3cabcaa75b0ae1ccbccc04d89a7ea36ece8d1fd4b2f13eecad48967961ac8b2b6cbb426bc105289ba553d24264840ac06aeb42697d9801f7e8dc30be433c127f2ebeda3eab3f78f6ce6d11c1fb777134b89f190da7179398bbb5667f37b3e7df06f6a167501b31f462668a95bcd82ac28ac34b7953ed1870ea5800e3851bd5ad49529055560184f41aab8f612d9b946db0eb4a4aaab0baad0c224617c9f3595df6d8e16b32da0f1896218108f5b9af12e50027106b3a85d2809cd0fa17e04d5252824f364b9f78c45227c82a002cd23e8836fe38ecf67ba375e23c2bac7cc5d1199dba1455619de2dc72fb4e45fb70d69e59dee0602c9a1b7ab38a5d714ff63feeb91f282feee6469c2b6f2d083f5f28a18aced38e63b4dfd5aa4cbceabb96c3bf84ff8c48e37f913c5e3d30e5d06a317746b798007515f2c31c169b68c09ce79fa5fe88b520cdba3f9a2b16565eee1d23d31b4a979e9c3d92e7d52d50f4e13b0a97829a7e8ba1c67ce54f48f79be2f3294250d8587458a62ada301137511b9b6502148d378e2dd746eca5bd05e47b9454922c3cab0ec448545938122fc9c91972002a01d3e7c04e8844f2cd5d9489c3cfde791307c9a362792dd19f9c9c95ad5cce54f60081c6d133276bf8357bfb48da62cfbfbba54608917393d81e549d417f12a8de9bb120fe4e4fab0bccb42ea63fb619b8a2375ba4ca6c7b666157df7305e616dca096c9b2e4473fdc58a46e385f6b2ea010fc69fed50e64b216615dd5ac51d042ef2617a4365feb539df5e7e73a0eb4c8627d15ea8c7a508e8954d9b841bef97dbf4c4bc0458afa513d0936680471db6143ed5d4228a167e60fc43c1ac8ee8a7645796b48f997b07fabf463bfc81a6c458bad784f1f136ea0e582b75fae6bbe21ed710ffdfa0d1c949532218686a77b8215397616a3879af8e91853aa433ed0d76c240582b5661b339990fe71b88b0dc11967807bf3eeb43a71357380ca6135d92e49ce05d903b38e67b75f20609837a8e32902a139341af1141b19449b6ac815c130a960b420e4c163b2b24e2cc96d438f566e2d10946774ff2602257f21114c92a15ff1c64b657120007ac4733cf6820726695a4fb53157cca5f6b0ba9ea16a3f99b0cc169d2864def89fd60c9a8acd395ac99d86627b87d053d70184f4130a2a005ff26d77b8968a0a3b680220af699a5957c683cfe86ba123392511239a0b502a33f96d87ce60256eecdda587b218da0a4930f34654ab2b42c81344b796b528fb3eb4ad4c4444715fb43e966603bea6f373d31a009875652229b12c753030b2e2f3b5b0de9df147d735777d6e796865f851a87a8a937c388adbf9093b157c5ccb2dfd613337bbd664389cc31b498e4d86eff8e00914fadf8342c43275256f3710f0499ddef110d59faf7de6b7a7732485790db9fc33048b3ccc244e56db313b4f94f6721351b50978f9d203e83429163613c91fa7db020db5adc782c8330703ce07ac81bbbd76c3b7eec1237a4e5d1f8592523fba7546c97c3a1ee8b579267e6a4917dd317e483c0efa06b79eacc54185a52a5ed8ee29fe697d314e290d4ff0640c3c0db3ac41000f6b88903fc3aaf7ba2908f7d249e4d17334892f75daa13ef1ae8f80dea9f2a11329f211f97009223ee5cb2efddadda94b0805fd8fd3c30ae2b3b96e0461d58eab9a3e2307e6842e10252c5728c4adb583e1fe6607d4bee1c1415b402b0a3f609c3a941375709129c51a3d10cfe42d3e9dc3e708814d270f4d74d9f5fcadaa3d0119c97bae074aa8bd3793c128d7ea393939f2acb78f13973a183e63d52fcca589ae74bf5c27f498bbcb98d5265dd2fa7cf9c43339c15262d44becdcd32642b96ce61e6fba711620067f30e09cacc191ed0c7a3beb901f9db8e64673248be8f98bba66d855f8f87cec9769ac34a66d7e4e346927d8eb3f66a1877b65c45a0e3a692df06e44ab047659ce5bf14f1b68e706b0161731a9f344b8763fa6104728dd61594123ba3303fbf89f34f20c568a467814aee635039a0982314332e79464e7d4b31a369ce97e1c52a9378946600308b7c0ab51cd0346be520992b42588ea0c926197861810beb93b02349194d6357228bf8f4bba3a999c6879c7895514558cf2cc5a4d1c3fe42a73209eda9e7202dc56b2364ebbeeba2d9c62e8726f2a2fb16eb0b761262ff51be8d282c8f74168577182b7bfc4c874cfc6b92cdc1cd224372319ccef8cc80ed942cd2bf5e1de05d5fc2118838529a82720500d1fd1ad8261416ae331d35ec49516c69042b6390715c5b008bdb387344811d3097cfdf9bfe6681038516bf1f1658a6aa71340c667c3d830a0c8915bbed28df64007aeb5ef20c5d7d390658eb978d71ab5fa2b570095178031f69cd0b17e45007c6660449289408ecc4d82fa552fbeac802c110192ce5505f13333ece9e2189eb6fb25977002644050eb25780af0d76af164fe0a6a6d412b810d50b95fb067ca83133b877748ac2ac188cbb35cd87223a8c55432bda084f8b9ea20df3ac6de3c8e933c63f0ae6694e54e35300cca42b8ba01370cdfa3a36d16cf35e501b65d3412bdc336b1f48215962d2055f249e9f3c9ecb03a00b1fb0a124e2cb3d75c5e2cb318939c0b06efc5acb69adfc2656ec41135f7bbd6cbab3417aab0f6e5febd452a656282de90b44a6f64d5a82ff003aab82fcac0e43ce02c537222be64c5b177378a49937fc4a9f6906b39b77bb551ced6dcb47057cc2d3003bf20851c726f2d8dea7604508c5f7e6897ff955d9e05aebca10cddb2e0cdb9a69528c260f6a73a1244862f3bfbec457445ee486333a0648ff6068e7e76b28a67928518bcc377171111ac16e7dbb6825f4b3054b5584f9cbc8f69c5ddef6d5b01069c65ccef09b5668059c91a8253af3f56d3aeeb9d7015b5d5034f7ca86f11e6b2517bee5ec3e56cdf9a211972053ae33edff4ae4cb891d5b78408a8eaa401514057b9e25ac3a17d2f0105b6f38e55472e8e00de5a7ced07418a966861c9261458a5450d6ec847368050177d457c52953dcab602dec1300e21b6cada50136bfa243d5a67e6b92076c501ef080746bd1be03a2197b792dd6d29584f697bf5b27a2584e1deac156eeeb88a46d199371071e71de51a2338ff6044138d1a163c683c1c1f33dd6f711f2baaaaccc42b00f61b12971a27eb614e4d531aede3142c9d0e05919d2ae139f07c3ebbe5af344e961add114e9193de2d013c68acbbff5bf888fc1bf1c30a68bbf32cd40c4f1e6e299893f0e1857b8b99e18791ec877f9854d27333bd91043c2700db6c7341d0f8cffd0c2a6c6cc5b9c54a6ae9f48e6aad963843e83fa506074ba5114efb415505759a2d03b492648e6c66d161bea64bfc483f77fdc8d7bc86fb8043b58b34def6be644988a21f501772586d8d3fcb10b29311db12dc6c5012e3edc16868cf6c65a9991a8a2f9441ea731d270f02a0f311690b3894117df5d455f5f0b553565941927904f557473d603694d67461028ccd4ebb32ddf3e3d7686364d2c6f21dde509bcd11b44f23e10a394ee66b8ef9a45754683dd0fbefe952a8c886f69ab28d0accf847bd1d528cb010dd20af03b1dc7452554b523db0f0b16c078730b9391b6db4807881799fd8a9156d000a86ed1cd814ceb16651e83ca59dee67a6dde873c50c9ac0cba6f14168cc2d1769dafa045b50628224d72fd3dccad6e681c1c044fd0cd17898ad87f492c3db1ed71ceabea0167c2682c0939c29e4fcc0aa8c4109eb2b9f1316e96647c24cc083832223a3e0ed60c5b57700e3358451f28ea6b1c04b95c1f1dfb11924f1e89b71da1143737dc6f9e0d47c8a67f367a21e3cb6062f5868878939726beae2db9770972dc51f7f65eb1e59f2b60f8496b6f4fde1a67edf627c75e8d0c2a50776951bada142213a5ac00a6c2c35dd01810e40d5639640616344a25f68b382b6cfd220d66016a84f84e28d399bb967eb9ed95767809ce8ecf64963307c60e9f021a02b044adf657399d0afac6ed900e7d4b007ccceb1fe02e32765db9e3", 0x1000}, {&(0x7f0000001580)="2f0f95589f21510d3123c5de6983b31e4fad90d191f489a763d73c0c66b0e00edf74f933db12c3d75f8fd6a6ba7f0b085e0af1b263b48e838aa7d08084c2f260b7c8ebd21fbe95ecdaed2c0a7ed927ec3183d06c5032c73edf98b22223ccaa87fef4bf71d016f6683e9ba3174b7206096f9da6d1b6648f907e40d9566d118c45a4913dcd301f26787d08552012ef2e6631f5cfbdbfcbbcde3af73c06942dd81ed043434b8f26911f14d8f525530d58", 0xaf}], 0x4, 0x80, 0x5) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000200)}, 0x20) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) 1m9.066050481s ago: executing program 1 (id=1518): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x14, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$ublk_chdev(0x0, 0x0, 0x20000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x751, &(0x7f0000001040)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0x8, 0x1000, 0x10003}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) truncate(&(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x1000000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21025}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}], @vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x40}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) 1m8.455781307s ago: executing program 1 (id=1528): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x323020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 1m8.294639032s ago: executing program 1 (id=1532): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2, 0x3}}, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}]}, 0xffffffe2}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='test_file\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000000), 0x2000000) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x40488c0) 1m8.272619987s ago: executing program 33 (id=1532): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2, 0x3}}, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}]}, 0xffffffe2}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='test_file\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000000), 0x2000000) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x40488c0) 1m4.335995473s ago: executing program 5 (id=1589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 1m3.900030078s ago: executing program 5 (id=1593): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1m3.846199678s ago: executing program 5 (id=1594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x10000000, 0x807fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 1m3.11227296s ago: executing program 5 (id=1607): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x7a6, &(0x7f0000000a40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1m2.949670594s ago: executing program 5 (id=1612): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000a40)='active', 0x6) 1m2.861686576s ago: executing program 0 (id=1613): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$kcm(r0, 0x0, 0x0) 1m2.843072105s ago: executing program 0 (id=1615): request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x0, 0x3, {0xa, 0x4e21, 0x200, @private2, 0xfb}}}, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendmmsg$inet(r5, &(0x7f0000001680), 0x0, 0x2090) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0xa00001, &(0x7f0000000340)='ecryptfs_sig=syz,ecryptfs_fnek_sig=sy\x9c6\xf1\x98*\xf3\xd9+fs_cipher=aes,ecryptfs_key_bytes=16\x00') semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x5}], 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 1m2.233306467s ago: executing program 5 (id=1619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1m2.18630806s ago: executing program 34 (id=1619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1m1.900624835s ago: executing program 0 (id=1623): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="600602"], 0x8) 1m1.855151956s ago: executing program 0 (id=1624): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x7a6, &(0x7f0000000a40)="$eJzs3c9rHFUcAPDvbH6aVhtBsPXSnLRQumlrbBWExpMIFgp6tg2bbYjZZEt2U5qQg0UEQQQtHgS9ePZHvXkT0bN/gxcRaamaFiseZGX2R7Lp5me7+dHm84FJ3pt5O2++Mzvvvd0ZdgLYswbSP5mIQxHxURJxoD4/iYiuaqozYrhW7u7CfC6dkqhU3vgzqZa5szCfi6bXpPbVMwcj4sf3Io5mWustzc5NjBQK+el6frA8eWmwNDt3bHxyZCw/lp86dWJo6OTpF06fal+sf/88t//mx68+983wv+8+ff3Dn5IYjv31Zc1xtMtADNT3SVe6C2u+b3ctu0Oy0xvAfUlPzY7aWR6H4kB0VFMAwKMs7f8rAMAek+j/AWCPaXwPcGdhPteYdvYbie1165WI6K3F37i+WVvSWb9m11u9Dtp3J1l2ZSSJiP421H8wIj7/7q2v0im26DokwEreuRoRF/oHWtv/ZOmehft0fANlBu7Ja/9g+/yQjn9eXGn8l1kc/8QK45+eFc7d+zEQ0V1fXVXr+Z+5sazShjNtqLw+/nu5dm9bGmjT+G/xprX+jnru8TRzOCLGC/m0bXsiIo5EV8/F8UL+xBp1HLn93+3Vlg00jf/+uvb2l2n96f+lEpkbnT3LXzM6Uh55kJib3boa8Uzn0r19d1va/8ZRbx3/nltrxYeXkq+99P5nqxVL40/jbUyt8W+tyhcRz8bK8Tcka96fOJge/uO1vyvX8e2vn/atVn/z8U+ntP7GZ4HtkB7/vrXj70+a79cstbf+9eNffP8vblD6/u9O3qymu+vzroyUy9MnIrqT11vnn1xaWyPfKJ/GX1vxfHcsi3+p/UtWaP/Sz4QXNhhj580/vt58/A86+tqYNP7RTR3/zSeu353o2Hz8DenxH6qmjtTnbKT92+gGPsi+AwAAAAAAAAAAAAAAAAAAAAAAAICNykTE/kgy2cV0JpPN1p7h/VT0ZQrFUvnoxeLM1GhUn5XdH12Zxk9dHqjlk8bvn/Y35U/ek38+Ip6MiE96Hqvms7liYXSngwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAun2rPP8/9XvPTm8dALBlelvmVCqVSnP+dn7NxQDAQ6e1/wcAHnX6fwDYe/T/ALD36P8BYO/R/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDFzp09m06Vfxbmc2l+9PLszETx8rHRfGkiOzmTy+aK05eyY8XiWCGfzRUn11tfoVi8NBRTM1cGy/lSebA0O3d+sjgzVT4/PjlyJs7nu7YlKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYnNLs3MRIoZCffiQSH0TELtiMdRNJ7IrNaE+iK7a6it+O/XJwrTLX1nkbD2+grt76CbFb9uqOJ3a4YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4SPwfAAD//x2oI2o=") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1m1.784767875s ago: executing program 0 (id=1625): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1m1.530834373s ago: executing program 0 (id=1626): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$ublk_chdev(0x0, 0x0, 0x20000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) 1m1.504878231s ago: executing program 35 (id=1626): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$ublk_chdev(0x0, 0x0, 0x20000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) 1m1.497004737s ago: executing program 2 (id=1629): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000a40)='active', 0x6) 1m1.400229579s ago: executing program 2 (id=1631): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x9) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec5880514"], 0xa) 1m0.826231633s ago: executing program 2 (id=1635): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1m0.702174757s ago: executing program 2 (id=1636): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x7a6, &(0x7f0000000a40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1m0.609732848s ago: executing program 2 (id=1637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x10000000, 0x807fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 1m0.207526244s ago: executing program 2 (id=1643): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 1m0.151723721s ago: executing program 36 (id=1643): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 4.679034238s ago: executing program 9 (id=2529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='shortname=winnt,utf8=0,sys_immutable,time_offset=0x0000400000000161,shortlame=winnt,nonumtail=0,check=normal,utf8=0,utf8=1,fsmag\x00\x00=0x0000000000000003,\x00'], 0xfd, 0x2c7, &(0x7f0000000480)="$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") sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x62040, 0x20) socket$netlink(0x10, 0x3, 0x9) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x6, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r7, 0x0, 0x2, &(0x7f0000000600)=""/1, &(0x7f0000000640)=0x1) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x23e}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="c43b2bbd7000fbdbdf25020000000800f3ff0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4882}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f00000020c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53ffffffff000000008bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf9407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512800000006b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fc4f4097c2a5189b10c1776713f78193c6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2814cb02511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34e77bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0xd, {0x7, 0x2b, 0x0, 0x800000, 0x0, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.594885711s ago: executing program 7 (id=2530): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000340)={0x9a0000, 0x9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x98091e, 0x8, '\x00', @value=0x8}}) 4.593221915s ago: executing program 7 (id=2531): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x4004800) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) (fail_nth: 8) 4.301499378s ago: executing program 7 (id=2534): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000180)={0x1, 0x0, 0x73f0, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0xffffffffffffffff) 4.237813615s ago: executing program 7 (id=2537): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') exit(0x80000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x8}, 0x3a, 0xc, 0x7, 0x101, 0x15, 'syz0\x00', "7fbbb5b912c7afc697ee307b0eaf834a742f9f28d94181c22cb94604e9ec53dd", "457522c3e2b61696211af6ee55a3ca0f2cd17006ab73937dd9b5acc1ecd7fd99", [{0x6, 0xd4, {0x1, 0xfa}}, {0x6, 0x7, {0x2, 0xf1a740e}}, {0x7, 0x9, {0x1, 0xfffffffc}}, {0xe, 0x3, {0x3, 0x453d}}, {0x7, 0x329, {0x0, 0x5}}, {0x1, 0x1000, {0x0, 0x3}}, {0x0, 0xffff, {0x2, 0x4}}, {0x5, 0x7, {0x1, 0xfffffffa}}, {0xbc, 0xd25f, {0x2, 0xd1}}, {0xa8, 0x5, {0x0, 0x8}}, {0x4, 0x5, {0x0, 0x7}}, {0x9, 0x7, {0x0, 0x2}}, {0x6, 0x1, {0x2, 0xffffffff}}, {0xb, 0x5, {0x3, 0x6}}, {0x101, 0x401, {0x2, 0x8}}, {0x10, 0x4, {0x0, 0xb}}, {0x4, 0x5b4, {0x3, 0x2}}, {0x3ff, 0x2, {0x2, 0x2}}, {0x0, 0x2, {0x1, 0x4}}, {0x0, 0x6, {0x0, 0x51}}, {0x0, 0x8, {0x2, 0x5ae}}, {0x9, 0xffff, {0x2, 0x7}}, {0x4, 0x200, {0x0, 0x1000}}, {0x7, 0x3, {0x2, 0xd}}, {0x4, 0x1, {0x1, 0x401}}, {0x9, 0x3, {0x0, 0xdc}}, {0x5, 0x4, {0x0, 0x7ff}}, {0x401, 0x3, {0x0, 0x5}}, {0x1ff, 0x84ae, {0x2, 0x8652}}, {0x980, 0x8, {0x0, 0x6}}, {0x7349, 0xc, {0x0, 0x7}}, {0x81, 0xe000, {0x1, 0x7f}}, {0x3, 0x3, {0x3, 0x7}}, {0x5, 0x7c, {0x2, 0xfffffff5}}, {0x6, 0x101, {0x1, 0xf583}}, {0x400, 0x1, {0x0, 0x800000}}, {0x3, 0x9000, {0x3, 0x5}}, {0xfff9, 0x6, {0x2, 0x5}}, {0x114, 0x6000, {0x0, 0xffffffff}}, {0x9, 0x100, {0x0, 0xb}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000091}, 0x80) read$char_usb(r1, &(0x7f0000000140)=""/233, 0xe9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa32080045d2001c006800000e029078ac1414bbac1414aa1107907800000000c79edd273c2a95d8b818"], 0x0) 4.04107726s ago: executing program 3 (id=2542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0xca}) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0) 3.636474585s ago: executing program 9 (id=2545): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) fsetxattr(r0, &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00', &(0x7f00000002c0)='}{^\x00', 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) 3.589088274s ago: executing program 9 (id=2549): syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xfffffffe}}}}}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="13050b249d4ec4744f3c26e3653a77725fbac5b82ef06586b41d07000000000000007f303f41e812bba19e1b24cbc3774f930208000000b3861c150efb87377231c07e9a1170aff7c696cb664773c12e78df3a", 0x53}], 0x1, 0x0, 0x0, 0x81817f961ce36e31}], 0x1, 0x4044800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f00000000c0)=""/105, 0x69}], 0x2}, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000040)) 3.494117691s ago: executing program 9 (id=2554): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)}], 0x1}, 0x48043) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 3.310188897s ago: executing program 7 (id=2566): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000001240), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000001240), &(0x7f0000000040)=0x4) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000), 0xfe, 0x487, &(0x7f00000009c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000000000000000220000000a0001007770616e42a5"], 0x20}}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x5d031, 0xffffffffffffffff, 0x0) (async) r14 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r14, 0x12467e3c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000040), 0x4) 3.232873473s ago: executing program 8 (id=2569): open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3.210674887s ago: executing program 8 (id=2570): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x60}, 0x10) chdir(&(0x7f00000000c0)='./file1\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000f40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x34, 0x1c, 0x68, 0x0, 0xe, 0x2, 0x0, @remote, @local}, {0x11, 0x7, 0x0, @empty}}}}}, 0x0) 3.192239979s ago: executing program 8 (id=2571): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) fsetxattr(r0, &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00', &(0x7f00000002c0)='}{^\x00', 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) 3.175408013s ago: executing program 8 (id=2572): request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x0, 0x3, {0xa, 0x4e21, 0x200, @private2, 0xfb}}}, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendmmsg$inet(r5, &(0x7f0000001680), 0x0, 0x2090) writev(r0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0xa00001, &(0x7f0000000340)='ecryptfs_sig=syz,ecryptfs_fnek_sig=sy\x9c6\xf1\x98*\xf3\xd9+fs_cipher=aes,ecryptfs_key_bytes=16\x00') semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x5}], 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 3.104220123s ago: executing program 3 (id=2573): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x6, 0x3, 0x80880}) (fail_nth: 2) 3.022701158s ago: executing program 3 (id=2574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f0000008fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000003, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000028c0)={'filter\x00', 0x6001, 0x4, 0x418, 0x220, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @multicast1, 0x8, 0xffffffff}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) syz_open_dev$ublk_chdev(0x0, 0x0, 0x20000) get_robust_list(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) 2.761091701s ago: executing program 3 (id=2575): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x90001, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000040)={r1, 0x1, 0x6, 0x4, 0x1ff}, 0x1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000440)={0x578, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_OURS={0x2cc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x190, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '].+!:.\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}]}, {0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}+)-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#@!\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x312}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1c0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '#-)\x1d:\x95@\\/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8c8d}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x44, 0x5, "12b2c14807e483c61f74331d8432a7181b27d2d23f22d7d736a9e305d183e2e54b30a4b5611ca382f22c9f70202ed338cb291e864a8fb80136c7e53ebf4b397b"}, @ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "e4bb81842c36e68d534e243bd19eed13cf55458d"}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/\xc8+\xfa,+$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.\'+&#\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_OURS={0x1bc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "4525def091ecfc26107307c8e1c993f70c9ebaab27b8fada23f2251c3dff4d746a1f4221500d9e0f8444a4b23c3c29c8c3f7421ecac25ab19cceda29f0ec51f589171d2a4ae3b0b3"}, @ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "ffa4f3a7404c81b0559d7e3c59861fe0c70c79fbcda9da2348eeb4db16bb39c0c3acad4a274e14dbc1aca7bef7b3c3618a1fd37102bb1f86d75a8ee2247cc812c32845549b5e8470189787539735c7335f9562a5a4b1d74e72eedd79527a660b88c7705ff8dc87646a502678d24749721bec650a12f83418fc010eb92e3152f99a9ff77321599157de1ecfd86cafdb5b851a6e96eae82e4fca9428fa7a1de4d0f2cf93750d7adf6904388ff70969f0e6a4e37d895ba95aad6bbaa728cbdab0af0ceb2a2b710f94464d18c99266"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8e, 0x4, "922429ec027bbe99aee5c708173fb7b3f340c528df7322b71b121c7ef069af6d81f21368962e0f7f3b26e304e915f6c66a34ec16de6688640678363e52381632feacc54b5f6ea8b3a8df2cc1a3741e9547fa01cc08edd7dfbb0f40721494b5b9c18ed9c62d15eb3eb665e3c15ae302194afbe1613c61b2b32c51e756e70ada3bbfae9ef705603ae355a9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x8c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4f, 0x4, "78a728cc133a79cd1bbe59acff9d7d704b7df330d4f6e4e1730110e732b578f4837bf8e3f4462a6d94fc4853f1c5202ee41781628a20da590deeb0b3eea640ac1f81b68535d3dd4a5589b7"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8e2e}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x578}}, 0xeb75184a3874a133) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000a40)={0x7fffffff}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000a80)={0x0, 0x0}) sched_setscheduler(r4, 0x5, &(0x7f0000000b00)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000c00)={0x80000000, &(0x7f0000000b40), &(0x7f0000000b80)}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000c40)) (async) capset(&(0x7f0000000c80)={0x20080522, r4}, &(0x7f0000000cc0)={0x6, 0x6adbf99d, 0xfffff692, 0x7, 0x6, 0x5}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000d00)={0x8}) (async) connect$unix(r0, &(0x7f0000000d40)=@abs={0x1, 0x0, 0x4e20}, 0x6e) move_pages(r4, 0x2, &(0x7f0000000dc0)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000e00)=[0x387], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e80)) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000ec0)={0xd}, 0x8) (async) mkdirat(r0, &(0x7f0000000f00)='./file0\x00', 0x82) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000f40)=0x7) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000fc0)={0x1, 0x0, &(0x7f0000000f80)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000001040)={0xa, 0x0, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000010c0)={0x0, r5, r6, 0x0, 0x0, 0x6, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000001180)={&(0x7f0000001100)='#-)\x1d:\x95@\\/\x00', &(0x7f0000001140)=']\'\x00', 0x8}) (async) write$P9_RREMOVE(r0, &(0x7f00000011c0)={0x7, 0x7b, 0x1}, 0x7) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001200)={'ip6tnl0\x00'}) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000001240)={0x2, 0xbeedda85ffb1ca7c, 0xc}) syz_clone(0x0, &(0x7f0000001280)="88b238e1464c00a034909786b93c2a884cec135ae6b44d80a8fbe7d20d9851f3507b5b12a9fd34a474b492acdb1d3f2ad5cc791c853f707b9899bd0d16a58a57838168aef8144924590f86bc212442c3ac6624948bc1499bccba6af84445974ca269dbe8a28dad7d1fe312e69634abc0aed45114a8db33f25a4a4304bb678d7cfd027d556943216e043b56adf11729a5a7b977", 0x93, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)="ab71aade4702f1660c00ee082116f5205ba8f19e5ffb0aece2bcbbfb8fa7ec0eab1317492dd5f9048a151f2eb4b80392ea760532fb677cf8dfd3012ae34e38b0d0a14a90c0dd36b63e903deb8f0db00875c457351097b88b5d6a055d853cac1bebc99244f126107330fc9a165bb4e2dc99") (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 2.619426995s ago: executing program 9 (id=2578): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)="fdffffffffffff000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001fd0203080070780100"/256, 0x100) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f00000007c0)="00214500001400000000400600000a0000010a000002005000500000ffff00000001683003e80000e40201010101", 0x2e}], 0x1, 0x3, 0x0) syz_clone(0x100000, &(0x7f0000000000)="c82385d61d3998469478609019e7ac216d63f9d884daad4282c3386a92c4f932695acd50cb5765dc191832c9513c99026c6d845e41ce6e2213ee91ca960f167d19175544badd130f2aafaa29656bf8099044f975958a330ad6e99e345129acc5e732cc82e246c8df9ce5eba13b8d9ddc0083de6340a32baebe5f54c689", 0x7d, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="87ec2ea060d5361eef8fef89a5f6066306bc186b6072c943842b9d0d401929703c6e5e23328c5888ec8a8008d848a8dbedd45bbef2807c3af3621e6383f5bc4013a07cfbe083f52f31") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf256800000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.240037222s ago: executing program 8 (id=2580): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000540)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6d}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (fail_nth: 7) 1.219365134s ago: executing program 6 (id=2584): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x6, 0x3, 0x80880}) 1.190608965s ago: executing program 6 (id=2585): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000001280)={0x0, 0x80, 0x2, 0x6dd, 0x4, 0xfffffffe, 0x10, 0x4, 0x20, 0x1ff, 0x20, 0xf, 0x0, 0x0, 0x0}) 1.190215675s ago: executing program 6 (id=2586): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5668, &(0x7f0000000340)={0x5, 0x947, @name="526c87a56d4d06b2e22cb6d3587d09a70f049f6b7260b7a5c06755bb6e330d44"}) (fail_nth: 3) 1.134835219s ago: executing program 6 (id=2587): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010700000000000000006700000008003d"], 0x1c}}, 0x0) 1.134576433s ago: executing program 6 (id=2588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x5, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000026, &(0x7f0000000140)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000240)="1c", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0xffffff1e}, 0x1c) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x6, 0x222042) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003800)={r4, 0x0, 0x0}, 0x20) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x40010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) sched_setscheduler(r7, 0x0, &(0x7f0000000180)) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000017, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r11, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x2, r6, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x81, 0x241082, 0x1, 0x6, 0x2, 0x1}}, 0x50) 71.069252ms ago: executing program 3 (id=2589): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 69.638102ms ago: executing program 9 (id=2590): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000003100), &(0x7f0000003140)=0x4) 58.607605ms ago: executing program 8 (id=2591): request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x0, 0x3, {0xa, 0x4e21, 0x200, @private2, 0xfb}}}, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendmmsg$inet(r5, &(0x7f0000001680), 0x0, 0x2090) writev(r0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0xa00001, &(0x7f0000000340)='ecryptfs_sig=syz,ecryptfs_fnek_sig=sy\x9c6\xf1\x98*\xf3\xd9+fs_cipher=aes,ecryptfs_key_bytes=16\x00') semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x5}], 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 1.088362ms ago: executing program 6 (id=2592): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x60}, 0x10) chdir(&(0x7f00000000c0)='./file1\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000f40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x34, 0x1c, 0x68, 0x0, 0xe, 0x2, 0x0, @remote, @local}, {0x11, 0x7, 0x0, @empty}}}}}, 0x0) 324.657µs ago: executing program 3 (id=2593): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0xffff0000000000) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0xffff0000000000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c890}, 0x20080) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./bus\x00', 0x1800a, &(0x7f00000001c0)={[{@debug}, {@test_dummy_encryption}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x43b, &(0x7f0000000900)="$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") 0s ago: executing program 7 (id=2594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0xca}) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) kernel console output (not intermixed with test programs): T10810] genl_family_rcv_msg_doit+0xd8/0x2d4 [ 120.766676][T10810] genl_rcv_msg+0x43c/0x620 [ 120.766685][T10810] netlink_rcv_skb+0x238/0x414 [ 120.766693][T10810] genl_rcv+0x38/0x50 [ 120.766702][T10810] netlink_unicast+0x600/0x7f8 [ 120.766710][T10810] netlink_sendmsg+0x648/0x948 [ 120.766718][T10810] __sock_sendmsg+0xc8/0x17c [ 120.766726][T10810] ____sys_sendmsg+0x3d0/0x6c8 [ 120.766735][T10810] ___sys_sendmsg+0x198/0x224 [ 120.766743][T10810] __sys_sendmsg+0x158/0x204 [ 120.766751][T10810] __arm64_sys_sendmsg+0x88/0x9c [ 120.766760][T10810] invoke_syscall+0x98/0x244 [ 120.766770][T10810] el0_svc_common+0xec/0x23c [ 120.766779][T10810] do_el0_svc+0x4c/0x5c [ 120.766789][T10810] el0_svc+0x60/0x1d8 [ 120.766798][T10810] el0t_64_sync_handler+0x44/0x104 [ 120.766807][T10810] el0t_64_sync+0x198/0x19c [ 120.812733][T10808] loop7: detected capacity change from 0 to 512 [ 120.827990][T10808] EXT4-fs: Ignoring removed nobh option [ 120.848417][T10808] EXT4-fs (loop7): 1 truncate cleaned up [ 120.848877][T10808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.928175][T10824] binder: 10823:10824 ioctl 4018620d 0 returned -22 [ 120.928260][T10824] binder: tried to use weak ref as strong ref [ 120.928268][T10824] binder: 10823:10824 Acquire 1 refcount change on invalid ref 0 ret -22 [ 120.928370][T10824] binder: 10823:10824 got transaction to invalid handle, 1 [ 120.928379][T10824] binder: 10823:10824 cannot find target node [ 120.928392][T10824] binder: 10823:10824 transaction call to 0:0 failed 115/29201/-22, code 0 size 72-24 line 3252 [ 120.928483][T10824] binder: 10823:10824 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 120.928493][T10824] binder: 10824 RLIMIT_NICE not set [ 120.971296][ T9640] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.304947][T10836] syzkaller0: entered promiscuous mode [ 121.304959][T10836] syzkaller0: entered allmulticast mode [ 121.448669][T10855] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1891'. [ 121.488385][T10860] FAULT_INJECTION: forcing a failure. [ 121.488385][T10860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.488396][T10860] CPU: 1 UID: 0 PID: 10860 Comm: syz.9.1893 Not tainted syzkaller #0 PREEMPT [ 121.488405][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 121.488415][T10860] Call trace: [ 121.488418][T10860] show_stack+0x2c/0x3c (C) [ 121.488435][T10860] __dump_stack+0x30/0x40 [ 121.488445][T10860] dump_stack_lvl+0xd8/0x12c [ 121.488455][T10860] dump_stack+0x1c/0x28 [ 121.488464][T10860] should_fail_ex+0x418/0x58c [ 121.488475][T10860] should_fail+0x14/0x24 [ 121.488484][T10860] should_fail_usercopy+0x20/0x30 [ 121.488494][T10860] simple_read_from_buffer+0xc4/0x238 [ 121.488504][T10860] proc_fail_nth_read+0x1a8/0x248 [ 121.488513][T10860] vfs_read+0x230/0x8c8 [ 121.488523][T10860] ksys_read+0x12c/0x228 [ 121.488532][T10860] __arm64_sys_read+0x84/0x98 [ 121.488542][T10860] invoke_syscall+0x98/0x244 [ 121.488552][T10860] el0_svc_common+0xec/0x23c [ 121.488561][T10860] do_el0_svc+0x4c/0x5c [ 121.488571][T10860] el0_svc+0x60/0x1d8 [ 121.488580][T10860] el0t_64_sync_handler+0x44/0x104 [ 121.488589][T10860] el0t_64_sync+0x198/0x19c [ 121.506708][T10861] Device name cannot be null; rc = [-22] [ 121.585725][T10868] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 121.755528][T10005] net_ratelimit: 140 callbacks suppressed [ 121.817201][ T4801] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.846773][T10896] overlayfs: refusing to follow metacopy origin for (/file1) [ 121.963746][T10911] : renamed from bond0 (while UP) [ 122.071242][T10929] ip6gre1: entered promiscuous mode [ 122.071251][T10929] ip6gre1: entered allmulticast mode [ 122.144317][T10942] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.239971][T10942] md/raid:md0: not clean -- starting background reconstruction [ 122.240071][T10942] md/raid:md0: device ram1 operational as raid disk 1 [ 122.245077][T10942] md/raid:md0: starting dirty degraded array with PPL. [ 122.245085][T10942] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 122.246394][T10942] md/raid:md0: PPL space too small on ram1 [ 122.252421][T10956] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.449665][T10979] binder: 10978:10979 ioctl 4018620d 0 returned -22 [ 122.453103][T10979] binder: tried to use weak ref as strong ref [ 122.453112][T10979] binder: 10978:10979 Acquire 1 refcount change on invalid ref 0 ret -22 [ 122.453223][T10979] binder: 10978:10979 got transaction to invalid handle, 1 [ 122.453232][T10979] binder: 10978:10979 cannot find target node [ 122.453245][T10979] binder: 10978:10979 transaction call to 0:0 failed 118/29201/-22, code 0 size 72-24 line 3252 [ 122.453344][T10979] binder: 10978:10979 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 122.453355][T10979] binder: 10979 RLIMIT_NICE not set [ 122.528458][T10942] md/raid:md0: failed to run raid set. [ 122.528463][T10942] md: pers->run() failed ... [ 122.553369][T10956] md/raid:md0: not clean -- starting background reconstruction [ 122.553572][T10956] md/raid:md0: device ram1 operational as raid disk 1 [ 122.570023][T10956] md/raid:md0: starting dirty degraded array with PPL. [ 122.570031][T10956] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 122.570101][T10956] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 122.570110][T10956] CPU: 1 UID: 0 PID: 10956 Comm: syz.6.1912 Not tainted syzkaller #0 PREEMPT [ 122.570120][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 122.570132][T10956] Call trace: [ 122.570135][T10956] show_stack+0x2c/0x3c (C) [ 122.570153][T10956] __dump_stack+0x30/0x40 [ 122.570166][T10956] dump_stack_lvl+0xd8/0x12c [ 122.570180][T10956] dump_stack+0x1c/0x28 [ 122.570192][T10956] sysfs_warn_dup+0x9c/0xb8 [ 122.570205][T10956] sysfs_add_file_mode_ns+0x230/0x2a4 [ 122.570217][T10956] internal_create_group+0x550/0xb30 [ 122.570229][T10956] sysfs_create_group+0x2c/0x3c [ 122.570241][T10956] raid5_run+0x1428/0x1b68 [ 122.570250][T10956] md_run+0xb10/0x19e8 [ 122.570263][T10956] do_md_run+0x4c/0x4e4 [ 122.570275][T10956] array_state_store+0x7a8/0xce8 [ 122.570285][T10956] md_attr_store+0x304/0x438 [ 122.570294][T10956] sysfs_kf_write+0xe0/0x108 [ 122.570305][T10956] kernfs_fop_write_iter+0x260/0x3b8 [ 122.570316][T10956] vfs_write+0x51c/0xa0c [ 122.570329][T10956] ksys_write+0x12c/0x228 [ 122.570341][T10956] __arm64_sys_write+0x84/0x98 [ 122.570353][T10956] invoke_syscall+0x98/0x244 [ 122.570365][T10956] el0_svc_common+0xec/0x23c [ 122.570377][T10956] do_el0_svc+0x4c/0x5c [ 122.570389][T10956] el0_svc+0x60/0x1d8 [ 122.570400][T10956] el0t_64_sync_handler+0x44/0x104 [ 122.570411][T10956] el0t_64_sync+0x198/0x19c [ 122.570710][T10956] raid5: failed to create sysfs attributes for md0 [ 122.571863][T10956] md/raid:md0: PPL space too small on ram1 [ 122.702550][T11004] : renamed from bond0 (while UP) [ 122.793823][T10956] md/raid:md0: failed to run raid set. [ 122.793827][T10956] md: pers->run() failed ... [ 122.821348][T11013] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1922'. [ 122.901673][T11013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.991453][T11012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.998928][T11024] Device name cannot be null; rc = [-22] [ 123.339356][T10005] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.413407][T11030] Injecting memory failure for pfn 0x13abbb at process virtual address 0x20003000 [ 123.419661][T11030] Memory failure: 0x13abbb: recovery action for clean LRU page: Recovered [ 123.419678][T11030] Injecting memory failure for pfn 0x12103a at process virtual address 0x20004000 [ 123.419740][T11030] Memory failure: 0x12103a: recovery action for clean LRU page: Recovered [ 123.506902][T11037] erspan0: entered promiscuous mode [ 123.507599][T11037] macvlan2: entered promiscuous mode [ 123.626527][T11058] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.642439][T11055] FAULT_INJECTION: forcing a failure. [ 123.642439][T11055] name failslab, interval 1, probability 0, space 0, times 0 [ 123.642457][T11055] CPU: 0 UID: 0 PID: 11055 Comm: syz.6.1932 Not tainted syzkaller #0 PREEMPT [ 123.642469][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 123.642482][T11055] Call trace: [ 123.642485][T11055] show_stack+0x2c/0x3c (C) [ 123.642504][T11055] __dump_stack+0x30/0x40 [ 123.642514][T11055] dump_stack_lvl+0xd8/0x12c [ 123.642524][T11055] dump_stack+0x1c/0x28 [ 123.642533][T11055] should_fail_ex+0x418/0x58c [ 123.642544][T11055] should_failslab+0xc4/0x120 [ 123.642555][T11055] __kmalloc_noprof+0x108/0x6c8 [ 123.642566][T11055] nla_strdup+0xa0/0x148 [ 123.642576][T11055] nf_tables_dump_flowtable_start+0xbc/0x138 [ 123.642586][T11055] __netlink_dump_start+0x390/0x6f8 [ 123.642595][T11055] nft_netlink_dump_start_rcu+0xfc/0x1d4 [ 123.642603][T11055] nf_tables_getflowtable+0x1f8/0x564 [ 123.642611][T11055] nfnetlink_rcv_msg+0x710/0x1044 [ 123.642621][T11055] netlink_rcv_skb+0x238/0x414 [ 123.642629][T11055] nfnetlink_rcv+0x218/0x16ec [ 123.642639][T11055] netlink_unicast+0x600/0x7f8 [ 123.642647][T11055] netlink_sendmsg+0x648/0x948 [ 123.642655][T11055] __sock_sendmsg+0xc8/0x17c [ 123.642664][T11055] ____sys_sendmsg+0x3d0/0x6c8 [ 123.642673][T11055] ___sys_sendmsg+0x198/0x224 [ 123.642681][T11055] __sys_sendmsg+0x158/0x204 [ 123.642690][T11055] __arm64_sys_sendmsg+0x88/0x9c [ 123.642698][T11055] invoke_syscall+0x98/0x244 [ 123.642708][T11055] el0_svc_common+0xec/0x23c [ 123.642718][T11055] do_el0_svc+0x4c/0x5c [ 123.642727][T11055] el0_svc+0x60/0x1d8 [ 123.642737][T11055] el0t_64_sync_handler+0x44/0x104 [ 123.642746][T11055] el0t_64_sync+0x198/0x19c [ 123.717281][T11058] md/raid:md0: not clean -- starting background reconstruction [ 123.717390][T11058] md/raid:md0: device ram1 operational as raid disk 1 [ 123.728054][T11058] md/raid:md0: starting dirty degraded array with PPL. [ 123.728061][T11058] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 123.729216][T11058] md/raid:md0: PPL space too small on ram1 [ 123.780987][T11071] Injecting memory failure for pfn 0x11c22e at process virtual address 0x2062c000 [ 123.783877][T11071] Memory failure: 0x11c22e: Sending SIGBUS to syz.9.1937:11071 due to hardware memory corruption [ 123.783949][T11071] Memory failure: 0x11c22e: recovery action for unsplit thp: Failed [ 123.811162][ T40] IPVS: starting estimator thread 0... [ 123.811613][T11075] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 123.812668][T11073] Format for deleting device is "id" (uint). [ 123.852998][T11080] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 123.871144][T11082] FAULT_INJECTION: forcing a failure. [ 123.871144][T11082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.871157][T11082] CPU: 1 UID: 0 PID: 11082 Comm: syz.9.1941 Not tainted syzkaller #0 PREEMPT [ 123.871167][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 123.871178][T11082] Call trace: [ 123.871181][T11082] show_stack+0x2c/0x3c (C) [ 123.871197][T11082] __dump_stack+0x30/0x40 [ 123.871210][T11082] dump_stack_lvl+0xd8/0x12c [ 123.871220][T11082] dump_stack+0x1c/0x28 [ 123.871230][T11082] should_fail_ex+0x418/0x58c [ 123.871241][T11082] should_fail+0x14/0x24 [ 123.871250][T11082] should_fail_usercopy+0x20/0x30 [ 123.871261][T11082] simple_read_from_buffer+0xc4/0x238 [ 123.871271][T11082] proc_fail_nth_read+0x1a8/0x248 [ 123.871279][T11082] vfs_read+0x230/0x8c8 [ 123.871289][T11082] ksys_read+0x12c/0x228 [ 123.871299][T11082] __arm64_sys_read+0x84/0x98 [ 123.871308][T11082] invoke_syscall+0x98/0x244 [ 123.871318][T11082] el0_svc_common+0xec/0x23c [ 123.871328][T11082] do_el0_svc+0x4c/0x5c [ 123.871337][T11082] el0_svc+0x60/0x1d8 [ 123.871347][T11082] el0t_64_sync_handler+0x44/0x104 [ 123.871355][T11082] el0t_64_sync+0x198/0x19c [ 123.904929][T11074] IPVS: using max 63 ests per chain, 151200 per kthread [ 123.931519][T11087] loop6: detected capacity change from 0 to 128 [ 123.950036][T11087] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.052400][T11058] md/raid:md0: failed to run raid set. [ 124.052409][T11058] md: pers->run() failed ... [ 124.459077][T11111] FAULT_INJECTION: forcing a failure. [ 124.459077][T11111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.459090][T11111] CPU: 0 UID: 0 PID: 11111 Comm: syz.8.1950 Not tainted syzkaller #0 PREEMPT [ 124.459100][T11111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 124.459111][T11111] Call trace: [ 124.459113][T11111] show_stack+0x2c/0x3c (C) [ 124.459135][T11111] __dump_stack+0x30/0x40 [ 124.459146][T11111] dump_stack_lvl+0xd8/0x12c [ 124.459157][T11111] dump_stack+0x1c/0x28 [ 124.459167][T11111] should_fail_ex+0x418/0x58c [ 124.459179][T11111] should_fail+0x14/0x24 [ 124.459188][T11111] should_fail_usercopy+0x20/0x30 [ 124.459198][T11111] _inline_copy_from_user+0x3c/0x174 [ 124.459208][T11111] copy_msghdr_from_user+0xb8/0x194 [ 124.459217][T11111] ___sys_sendmsg+0x14c/0x224 [ 124.459226][T11111] __sys_sendmsg+0x158/0x204 [ 124.459234][T11111] __arm64_sys_sendmsg+0x88/0x9c [ 124.459242][T11111] invoke_syscall+0x98/0x244 [ 124.459253][T11111] el0_svc_common+0xec/0x23c [ 124.459262][T11111] do_el0_svc+0x4c/0x5c [ 124.459272][T11111] el0_svc+0x60/0x1d8 [ 124.459281][T11111] el0t_64_sync_handler+0x44/0x104 [ 124.459290][T11111] el0t_64_sync+0x198/0x19c [ 124.491577][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1952'. [ 124.510487][T11120] FAULT_INJECTION: forcing a failure. [ 124.510487][T11120] name failslab, interval 1, probability 0, space 0, times 0 [ 124.510502][T11120] CPU: 0 UID: 0 PID: 11120 Comm: syz.3.1953 Not tainted syzkaller #0 PREEMPT [ 124.510511][T11120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 124.510523][T11120] Call trace: [ 124.510526][T11120] show_stack+0x2c/0x3c (C) [ 124.510540][T11120] __dump_stack+0x30/0x40 [ 124.510550][T11120] dump_stack_lvl+0xd8/0x12c [ 124.510559][T11120] dump_stack+0x1c/0x28 [ 124.510569][T11120] should_fail_ex+0x418/0x58c [ 124.510579][T11120] should_failslab+0xc4/0x120 [ 124.510590][T11120] kmem_cache_alloc_noprof+0x94/0x5d4 [ 124.510601][T11120] skb_clone+0x1ac/0x320 [ 124.510610][T11120] __netlink_deliver_tap+0x364/0x6f4 [ 124.510619][T11120] netlink_deliver_tap+0x1d8/0x1dc [ 124.510628][T11120] netlink_unicast+0x5dc/0x7f8 [ 124.510635][T11120] netlink_sendmsg+0x648/0x948 [ 124.510644][T11120] __sock_sendmsg+0xc8/0x17c [ 124.510652][T11120] ____sys_sendmsg+0x3d0/0x6c8 [ 124.510660][T11120] ___sys_sendmsg+0x198/0x224 [ 124.510669][T11120] __sys_sendmsg+0x158/0x204 [ 124.510677][T11120] __arm64_sys_sendmsg+0x88/0x9c [ 124.510686][T11120] invoke_syscall+0x98/0x244 [ 124.510696][T11120] el0_svc_common+0xec/0x23c [ 124.510705][T11120] do_el0_svc+0x4c/0x5c [ 124.510714][T11120] el0_svc+0x60/0x1d8 [ 124.510723][T11120] el0t_64_sync_handler+0x44/0x104 [ 124.510732][T11120] el0t_64_sync+0x198/0x19c [ 124.568327][T11127] loop7: detected capacity change from 0 to 512 [ 124.589022][T11127] loop7: detected capacity change from 0 to 512 [ 124.612846][T11127] loop7: detected capacity change from 0 to 512 [ 124.619275][T11127] loop7: detected capacity change from 0 to 512 [ 124.638995][T11127] loop7: detected capacity change from 0 to 512 [ 124.669586][T11127] loop7: detected capacity change from 0 to 512 [ 124.680570][T11127] loop7: detected capacity change from 0 to 512 [ 124.688839][T11127] loop7: detected capacity change from 0 to 512 [ 124.700169][T11132] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.783786][T11132] md/raid:md0: not clean -- starting background reconstruction [ 124.783876][T11132] md/raid:md0: device ram1 operational as raid disk 1 [ 124.794354][T11132] md/raid:md0: starting dirty degraded array with PPL. [ 124.794365][T11132] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 124.794442][T11132] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 124.794451][T11132] CPU: 1 UID: 0 PID: 11132 Comm: syz.3.1957 Not tainted syzkaller #0 PREEMPT [ 124.794462][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 124.794475][T11132] Call trace: [ 124.794477][T11132] show_stack+0x2c/0x3c (C) [ 124.794497][T11132] __dump_stack+0x30/0x40 [ 124.794509][T11132] dump_stack_lvl+0xd8/0x12c [ 124.794521][T11132] dump_stack+0x1c/0x28 [ 124.794532][T11132] sysfs_warn_dup+0x9c/0xb8 [ 124.794545][T11132] sysfs_add_file_mode_ns+0x230/0x2a4 [ 124.794556][T11132] internal_create_group+0x550/0xb30 [ 124.794569][T11132] sysfs_create_group+0x2c/0x3c [ 124.794580][T11132] raid5_run+0x1428/0x1b68 [ 124.794590][T11132] md_run+0xb10/0x19e8 [ 124.794602][T11132] do_md_run+0x4c/0x4e4 [ 124.794615][T11132] array_state_store+0x7a8/0xce8 [ 124.794624][T11132] md_attr_store+0x304/0x438 [ 124.794633][T11132] sysfs_kf_write+0xe0/0x108 [ 124.794645][T11132] kernfs_fop_write_iter+0x260/0x3b8 [ 124.794655][T11132] vfs_write+0x51c/0xa0c [ 124.794668][T11132] ksys_write+0x12c/0x228 [ 124.794680][T11132] __arm64_sys_write+0x84/0x98 [ 124.794692][T11132] invoke_syscall+0x98/0x244 [ 124.794705][T11132] el0_svc_common+0xec/0x23c [ 124.794716][T11132] do_el0_svc+0x4c/0x5c [ 124.794728][T11132] el0_svc+0x60/0x1d8 [ 124.794739][T11132] el0t_64_sync_handler+0x44/0x104 [ 124.794749][T11132] el0t_64_sync+0x198/0x19c [ 124.794966][T11132] raid5: failed to create sysfs attributes for md0 [ 124.797423][T11132] md/raid:md0: PPL space too small on ram1 [ 124.857938][ T9266] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.268013][T11146] loop6: detected capacity change from 0 to 128 [ 125.274388][T11146] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.280228][T11146] FAULT_INJECTION: forcing a failure. [ 125.280228][T11146] name failslab, interval 1, probability 0, space 0, times 0 [ 125.280243][T11146] CPU: 0 UID: 0 PID: 11146 Comm: syz.6.1962 Not tainted syzkaller #0 PREEMPT [ 125.280253][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 125.280265][T11146] Call trace: [ 125.280268][T11146] show_stack+0x2c/0x3c (C) [ 125.280287][T11146] __dump_stack+0x30/0x40 [ 125.280297][T11146] dump_stack_lvl+0xd8/0x12c [ 125.280306][T11146] dump_stack+0x1c/0x28 [ 125.280315][T11146] should_fail_ex+0x418/0x58c [ 125.280327][T11146] should_failslab+0xc4/0x120 [ 125.280337][T11146] __kvmalloc_node_noprof+0x160/0x7fc [ 125.280345][T11146] video_usercopy+0x8a4/0xe88 [ 125.280354][T11146] video_ioctl2+0x3c/0x50 [ 125.280361][T11146] v4l2_ioctl+0x148/0x18c [ 125.280371][T11146] __arm64_sys_ioctl+0x154/0x1cc [ 125.280383][T11146] invoke_syscall+0x98/0x244 [ 125.280395][T11146] el0_svc_common+0xec/0x23c [ 125.280405][T11146] do_el0_svc+0x4c/0x5c [ 125.280414][T11146] el0_svc+0x60/0x1d8 [ 125.280426][T11146] el0t_64_sync_handler+0x44/0x104 [ 125.280435][T11146] el0t_64_sync+0x198/0x19c [ 125.299493][ T9266] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.396415][T11132] md/raid:md0: failed to run raid set. [ 125.396424][T11132] md: pers->run() failed ... [ 125.441043][T11162] binder: 11161:11162 ioctl c0306201 0 returned -14 [ 125.441155][T11162] binder: 11161:11162 cannot find target node [ 125.441169][T11162] binder: 11161:11162 transaction call to 0:0 failed 122/29201/-22, code 0 size 72-24 line 3252 [ 125.506203][T11175] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1974'. [ 125.705615][T11193] EXT4-fs: Ignoring removed oldalloc option [ 125.705845][T11193] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 125.714833][T11193] EXT4-fs (loop6): 1 truncate cleaned up [ 125.715897][T11193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.723141][T11193] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1981'. [ 125.742355][ T9266] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.904955][T11208] syzkaller0: entered promiscuous mode [ 125.904965][T11208] syzkaller0: entered allmulticast mode [ 125.984077][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 125.984097][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1987'. [ 126.246319][T11222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.259858][T11222] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.285952][T11222] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1992: bg 0: block 2: invalid block bitmap [ 126.286223][T11222] EXT4-fs (loop6): Remounting filesystem read-only [ 126.286317][T11222] overlayfs: failed to verify upper root origin [ 126.301147][ T9266] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.330558][ T4822] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.374694][T11230] binder: BINDER_SET_CONTEXT_MGR already set [ 126.374701][T11230] binder: 11228:11230 ioctl 4018620d 20004a80 returned -16 [ 126.378453][T11234] overlayfs: refusing to follow metacopy origin for (/file1) [ 126.400092][T11236] Injecting memory failure for pfn 0x1349c1 at process virtual address 0x20000000 [ 126.410714][T11236] Memory failure: 0x1349c1: Sending SIGBUS to syz.9.1996:11236 due to hardware memory corruption [ 126.410760][T11236] Memory failure: 0x1349c1: recovery action for dirty LRU page: Recovered [ 126.410788][T11236] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20001000 [ 126.410802][T11236] Memory failure: 0x2193cf: unhandlable page. [ 126.410809][T11236] Memory failure: 0x2193cf: recovery action for reserved kernel page: Ignored [ 126.663578][T11246] lo speed is unknown, defaulting to 1000 [ 126.663710][T11246] lo speed is unknown, defaulting to 1000 [ 126.744697][T11246] lo speed is unknown, defaulting to 1000 [ 126.760533][T11246] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 126.887119][T11246] lo speed is unknown, defaulting to 1000 [ 126.887602][T11246] lo speed is unknown, defaulting to 1000 [ 126.888008][T11246] lo speed is unknown, defaulting to 1000 [ 126.888421][T11246] lo speed is unknown, defaulting to 1000 [ 126.888797][T11246] lo speed is unknown, defaulting to 1000 [ 126.935366][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2003'. [ 126.974058][T11260] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2006'. [ 126.978188][T11260] FAULT_INJECTION: forcing a failure. [ 126.978188][T11260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.978205][T11260] CPU: 1 UID: 0 PID: 11260 Comm: syz.9.2006 Not tainted syzkaller #0 PREEMPT [ 126.978217][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 126.978231][T11260] Call trace: [ 126.978234][T11260] show_stack+0x2c/0x3c (C) [ 126.978252][T11260] __dump_stack+0x30/0x40 [ 126.978263][T11260] dump_stack_lvl+0xd8/0x12c [ 126.978273][T11260] dump_stack+0x1c/0x28 [ 126.978282][T11260] should_fail_ex+0x418/0x58c [ 126.978294][T11260] should_fail+0x14/0x24 [ 126.978303][T11260] should_fail_usercopy+0x20/0x30 [ 126.978313][T11260] _copy_to_iter+0x424/0x10f8 [ 126.978323][T11260] simple_copy_to_iter+0x50/0x8c [ 126.978332][T11260] __skb_datagram_iter+0xd4/0x77c [ 126.978339][T11260] skb_copy_datagram_iter+0xf4/0x2c4 [ 126.978346][T11260] netlink_recvmsg+0x244/0x868 [ 126.978356][T11260] sock_recvmsg+0xd4/0x170 [ 126.978364][T11260] ____sys_recvmsg+0x1b8/0x608 [ 126.978372][T11260] ___sys_recvmsg+0x16c/0x1f4 [ 126.978381][T11260] __sys_recvmsg+0x154/0x200 [ 126.978393][T11260] __arm64_sys_recvmsg+0x88/0x9c [ 126.978403][T11260] invoke_syscall+0x98/0x244 [ 126.978413][T11260] el0_svc_common+0xec/0x23c [ 126.978423][T11260] do_el0_svc+0x4c/0x5c [ 126.978433][T11260] el0_svc+0x60/0x1d8 [ 126.978442][T11260] el0t_64_sync_handler+0x44/0x104 [ 126.978450][T11260] el0t_64_sync+0x198/0x19c [ 126.979176][T11260] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2006'. [ 127.042678][T11268] overlayfs: refusing to follow metacopy origin for (/file1) [ 127.077484][T11272] FAULT_INJECTION: forcing a failure. [ 127.077484][T11272] name failslab, interval 1, probability 0, space 0, times 0 [ 127.077502][T11272] CPU: 1 UID: 0 PID: 11272 Comm: syz.3.2011 Not tainted syzkaller #0 PREEMPT [ 127.077516][T11272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 127.077528][T11272] Call trace: [ 127.077531][T11272] show_stack+0x2c/0x3c (C) [ 127.077549][T11272] __dump_stack+0x30/0x40 [ 127.077560][T11272] dump_stack_lvl+0xd8/0x12c [ 127.077569][T11272] dump_stack+0x1c/0x28 [ 127.077579][T11272] should_fail_ex+0x418/0x58c [ 127.077595][T11272] should_failslab+0xc4/0x120 [ 127.077606][T11272] kmem_cache_alloc_node_noprof+0x98/0x604 [ 127.077617][T11272] __alloc_skb+0x1f0/0x610 [ 127.077627][T11272] netlink_ack+0x11c/0x890 [ 127.077636][T11272] netlink_rcv_skb+0x21c/0x414 [ 127.077645][T11272] nfnetlink_rcv+0x218/0x16ec [ 127.077656][T11272] netlink_unicast+0x600/0x7f8 [ 127.077663][T11272] netlink_sendmsg+0x648/0x948 [ 127.077671][T11272] __sock_sendmsg+0xc8/0x17c [ 127.077679][T11272] ____sys_sendmsg+0x3d0/0x6c8 [ 127.077688][T11272] ___sys_sendmsg+0x198/0x224 [ 127.077696][T11272] __sys_sendmsg+0x158/0x204 [ 127.077704][T11272] __arm64_sys_sendmsg+0x88/0x9c [ 127.077713][T11272] invoke_syscall+0x98/0x244 [ 127.077723][T11272] el0_svc_common+0xec/0x23c [ 127.077732][T11272] do_el0_svc+0x4c/0x5c [ 127.077742][T11272] el0_svc+0x60/0x1d8 [ 127.077751][T11272] el0t_64_sync_handler+0x44/0x104 [ 127.077760][T11272] el0t_64_sync+0x198/0x19c [ 127.214630][T11278] net_ratelimit: 136 callbacks suppressed [ 127.214655][T11278] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.219570][T11278] Device name cannot be null; rc = [-22] [ 127.446586][T11281] ip6tnl0: Caught tx_queue_len zero misconfig [ 127.484372][T11283] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.506907][T11286] FAULT_INJECTION: forcing a failure. [ 127.506907][T11286] name failslab, interval 1, probability 0, space 0, times 0 [ 127.506925][T11286] CPU: 1 UID: 0 PID: 11286 Comm: syz.7.2016 Not tainted syzkaller #0 PREEMPT [ 127.506938][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 127.506952][T11286] Call trace: [ 127.506956][T11286] show_stack+0x2c/0x3c (C) [ 127.506975][T11286] __dump_stack+0x30/0x40 [ 127.506986][T11286] dump_stack_lvl+0xd8/0x12c [ 127.506996][T11286] dump_stack+0x1c/0x28 [ 127.507005][T11286] should_fail_ex+0x418/0x58c [ 127.507016][T11286] should_failslab+0xc4/0x120 [ 127.507027][T11286] __kmalloc_noprof+0x108/0x6c8 [ 127.507038][T11286] nfnl_acct_new+0x398/0x6dc [ 127.507046][T11286] nfnetlink_rcv_msg+0xad8/0x1044 [ 127.507057][T11286] netlink_rcv_skb+0x238/0x414 [ 127.507066][T11286] nfnetlink_rcv+0x218/0x16ec [ 127.507076][T11286] netlink_unicast+0x600/0x7f8 [ 127.507084][T11286] netlink_sendmsg+0x648/0x948 [ 127.507092][T11286] __sock_sendmsg+0xc8/0x17c [ 127.507101][T11286] ____sys_sendmsg+0x3d0/0x6c8 [ 127.507109][T11286] ___sys_sendmsg+0x198/0x224 [ 127.507117][T11286] __sys_sendmsg+0x158/0x204 [ 127.507125][T11286] __arm64_sys_sendmsg+0x88/0x9c [ 127.507134][T11286] invoke_syscall+0x98/0x244 [ 127.507144][T11286] el0_svc_common+0xec/0x23c [ 127.507154][T11286] do_el0_svc+0x4c/0x5c [ 127.507163][T11286] el0_svc+0x60/0x1d8 [ 127.507173][T11286] el0t_64_sync_handler+0x44/0x104 [ 127.507181][T11286] el0t_64_sync+0x198/0x19c [ 127.532309][T11289] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.679477][T11289] md/raid:md0: not clean -- starting background reconstruction [ 127.679577][T11289] md/raid:md0: device ram1 operational as raid disk 1 [ 127.688244][T11289] md/raid:md0: starting dirty degraded array with PPL. [ 127.688256][T11289] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 127.689438][T11289] md/raid:md0: PPL space too small on ram1 [ 127.734478][T11296] lo speed is unknown, defaulting to 1000 [ 127.735615][T11296] lo speed is unknown, defaulting to 1000 [ 128.043049][T11289] md/raid:md0: failed to run raid set. [ 128.043054][T11289] md: pers->run() failed ... [ 128.076899][ T9747] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.622369][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2029'. [ 128.622383][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2029'. [ 128.622393][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2029'. [ 128.641333][T11329] syzkaller0: entered promiscuous mode [ 128.641343][T11329] syzkaller0: entered allmulticast mode [ 128.717271][T11344] binder_user_error: 3 callbacks suppressed [ 128.717281][T11344] binder: 11343:11344 got transaction to invalid handle, 1 [ 128.717292][T11344] binder: 11343:11344 cannot find target node [ 128.717306][T11344] binder: 11343:11344 transaction call to 0:0 failed 127/29201/-22, code 0 size 72-24 line 3252 [ 128.717402][T11344] binder: 11343:11344 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 128.717413][T11344] binder: 11344 RLIMIT_NICE not set [ 128.792318][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.792344][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.375936][T11364] overlayfs: missing 'lowerdir' [ 129.428809][T11366] FAULT_INJECTION: forcing a failure. [ 129.428809][T11366] name failslab, interval 1, probability 0, space 0, times 0 [ 129.428823][T11366] CPU: 1 UID: 0 PID: 11366 Comm: syz.7.2041 Not tainted syzkaller #0 PREEMPT [ 129.428832][T11366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 129.428844][T11366] Call trace: [ 129.428847][T11366] show_stack+0x2c/0x3c (C) [ 129.428867][T11366] __dump_stack+0x30/0x40 [ 129.428877][T11366] dump_stack_lvl+0xd8/0x12c [ 129.428892][T11366] dump_stack+0x1c/0x28 [ 129.428901][T11366] should_fail_ex+0x418/0x58c [ 129.428912][T11366] should_failslab+0xc4/0x120 [ 129.428923][T11366] __kvmalloc_node_noprof+0x160/0x7fc [ 129.428931][T11366] alloc_fdtable+0xfc/0x290 [ 129.428939][T11366] dup_fd+0x614/0x848 [ 129.428945][T11366] copy_files+0xb0/0x140 [ 129.428953][T11366] copy_process+0x14d0/0x34bc [ 129.428961][T11366] kernel_clone+0x234/0x8e8 [ 129.428968][T11366] __arm64_sys_clone3+0x35c/0x390 [ 129.428976][T11366] invoke_syscall+0x98/0x244 [ 129.428986][T11366] el0_svc_common+0xec/0x23c [ 129.428996][T11366] do_el0_svc+0x4c/0x5c [ 129.429005][T11366] el0_svc+0x60/0x1d8 [ 129.429014][T11366] el0t_64_sync_handler+0x44/0x104 [ 129.429023][T11366] el0t_64_sync+0x198/0x19c [ 129.514270][T11378] syzkaller0: entered promiscuous mode [ 129.514278][T11378] syzkaller0: entered allmulticast mode [ 129.599140][T10005] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.602037][T11380] FAULT_INJECTION: forcing a failure. [ 129.602037][T11380] name failslab, interval 1, probability 0, space 0, times 0 [ 129.602052][T11380] CPU: 1 UID: 0 PID: 11380 Comm: syz.6.2050 Not tainted syzkaller #0 PREEMPT [ 129.602064][T11380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 129.602078][T11380] Call trace: [ 129.602081][T11380] show_stack+0x2c/0x3c (C) [ 129.602101][T11380] __dump_stack+0x30/0x40 [ 129.602112][T11380] dump_stack_lvl+0xd8/0x12c [ 129.602121][T11380] dump_stack+0x1c/0x28 [ 129.602130][T11380] should_fail_ex+0x418/0x58c [ 129.602141][T11380] should_failslab+0xc4/0x120 [ 129.602152][T11380] kmem_cache_alloc_noprof+0x94/0x5d4 [ 129.602163][T11380] skb_clone+0x1ac/0x320 [ 129.602173][T11380] __netlink_deliver_tap+0x364/0x6f4 [ 129.602182][T11380] netlink_deliver_tap+0x1d8/0x1dc [ 129.602190][T11380] netlink_unicast+0x5dc/0x7f8 [ 129.602198][T11380] netlink_sendmsg+0x648/0x948 [ 129.602206][T11380] __sock_sendmsg+0xc8/0x17c [ 129.602215][T11380] ____sys_sendmsg+0x3d0/0x6c8 [ 129.602223][T11380] ___sys_sendmsg+0x198/0x224 [ 129.602231][T11380] __sys_sendmsg+0x158/0x204 [ 129.602239][T11380] __arm64_sys_sendmsg+0x88/0x9c [ 129.602248][T11380] invoke_syscall+0x98/0x244 [ 129.602258][T11380] el0_svc_common+0xec/0x23c [ 129.602267][T11380] do_el0_svc+0x4c/0x5c [ 129.602277][T11380] el0_svc+0x60/0x1d8 [ 129.602286][T11380] el0t_64_sync_handler+0x44/0x104 [ 129.602295][T11380] el0t_64_sync+0x198/0x19c [ 129.630909][T11382] set_capacity_and_notify: 4 callbacks suppressed [ 129.630917][T11382] loop6: detected capacity change from 0 to 4096 [ 129.651919][T11382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.683867][T11382] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.2051: corrupted inode contents [ 129.684202][T11382] EXT4-fs error (device loop6): ext4_dirty_inode:6736: inode #15: comm syz.6.2051: mark_inode_dirty error [ 129.684345][T11382] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.2051: corrupted inode contents [ 129.684479][T11382] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.2051: mark_inode_dirty error [ 129.684610][T11382] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.2051: corrupted inode contents [ 129.684734][T11382] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.2051: mark_inode_dirty error [ 129.684875][T11382] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.2051: corrupted inode contents [ 129.685072][T11382] EXT4-fs error (device loop6): ext4_truncate:4721: inode #15: comm syz.6.2051: mark_inode_dirty error [ 129.685274][T11382] EXT4-fs error (device loop6) in ext4_setattr:6247: Corrupt filesystem [ 129.695469][T11382] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.2051: corrupted inode contents [ 130.114014][ T9266] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.153785][T11399] overlayfs: missing 'lowerdir' [ 130.276813][T11413] FAULT_INJECTION: forcing a failure. [ 130.276813][T11413] name failslab, interval 1, probability 0, space 0, times 0 [ 130.276833][T11413] CPU: 1 UID: 0 PID: 11413 Comm: syz.9.2062 Not tainted syzkaller #0 PREEMPT [ 130.276846][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 130.276859][T11413] Call trace: [ 130.276862][T11413] show_stack+0x2c/0x3c (C) [ 130.276880][T11413] __dump_stack+0x30/0x40 [ 130.276900][T11413] dump_stack_lvl+0xd8/0x12c [ 130.276910][T11413] dump_stack+0x1c/0x28 [ 130.276920][T11413] should_fail_ex+0x418/0x58c [ 130.276931][T11413] should_failslab+0xc4/0x120 [ 130.276941][T11413] kmem_cache_alloc_node_noprof+0x98/0x604 [ 130.276953][T11413] __alloc_skb+0x1f0/0x610 [ 130.276961][T11413] netlink_ack+0x11c/0x890 [ 130.276970][T11413] netlink_rcv_skb+0x21c/0x414 [ 130.276979][T11413] nfnetlink_rcv+0x218/0x16ec [ 130.276989][T11413] netlink_unicast+0x600/0x7f8 [ 130.276997][T11413] netlink_sendmsg+0x648/0x948 [ 130.277006][T11413] __sock_sendmsg+0xc8/0x17c [ 130.277014][T11413] ____sys_sendmsg+0x3d0/0x6c8 [ 130.277023][T11413] ___sys_sendmsg+0x198/0x224 [ 130.277031][T11413] __sys_sendmsg+0x158/0x204 [ 130.277039][T11413] __arm64_sys_sendmsg+0x88/0x9c [ 130.277048][T11413] invoke_syscall+0x98/0x244 [ 130.277058][T11413] el0_svc_common+0xec/0x23c [ 130.277068][T11413] do_el0_svc+0x4c/0x5c [ 130.277077][T11413] el0_svc+0x60/0x1d8 [ 130.277086][T11413] el0t_64_sync_handler+0x44/0x104 [ 130.277095][T11413] el0t_64_sync+0x198/0x19c [ 130.603688][T11458] loop9: detected capacity change from 0 to 128 [ 130.613344][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2081'. [ 131.478377][T11527] FAULT_INJECTION: forcing a failure. [ 131.478377][T11527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.478393][T11527] CPU: 0 UID: 0 PID: 11527 Comm: syz.3.2108 Not tainted syzkaller #0 PREEMPT [ 131.478405][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 131.478417][T11527] Call trace: [ 131.478420][T11527] show_stack+0x2c/0x3c (C) [ 131.478437][T11527] __dump_stack+0x30/0x40 [ 131.478447][T11527] dump_stack_lvl+0xd8/0x12c [ 131.478457][T11527] dump_stack+0x1c/0x28 [ 131.478466][T11527] should_fail_ex+0x418/0x58c [ 131.478477][T11527] should_fail+0x14/0x24 [ 131.478486][T11527] should_fail_usercopy+0x20/0x30 [ 131.478496][T11527] _copy_from_iter+0x188/0x1064 [ 131.478507][T11527] skb_copy_datagram_from_iter+0xe8/0x5c8 [ 131.478516][T11527] tun_get_user+0xa14/0x36d0 [ 131.478524][T11527] tun_chr_write_iter+0xfc/0x168 [ 131.478532][T11527] vfs_write+0x51c/0xa0c [ 131.478543][T11527] ksys_write+0x12c/0x228 [ 131.478552][T11527] __arm64_sys_write+0x84/0x98 [ 131.478562][T11527] invoke_syscall+0x98/0x244 [ 131.478572][T11527] el0_svc_common+0xec/0x23c [ 131.478582][T11527] do_el0_svc+0x4c/0x5c [ 131.478591][T11527] el0_svc+0x60/0x1d8 [ 131.478600][T11527] el0t_64_sync_handler+0x44/0x104 [ 131.478609][T11527] el0t_64_sync+0x198/0x19c [ 131.547959][T11531] FAULT_INJECTION: forcing a failure. [ 131.547959][T11531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.547972][T11531] CPU: 0 UID: 0 PID: 11531 Comm: syz.7.2109 Not tainted syzkaller #0 PREEMPT [ 131.547982][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 131.547994][T11531] Call trace: [ 131.547997][T11531] show_stack+0x2c/0x3c (C) [ 131.548015][T11531] __dump_stack+0x30/0x40 [ 131.548026][T11531] dump_stack_lvl+0xd8/0x12c [ 131.548035][T11531] dump_stack+0x1c/0x28 [ 131.548045][T11531] should_fail_ex+0x418/0x58c [ 131.548055][T11531] should_fail+0x14/0x24 [ 131.548064][T11531] should_fail_usercopy+0x20/0x30 [ 131.548074][T11531] simple_read_from_buffer+0xc4/0x238 [ 131.548085][T11531] proc_fail_nth_read+0x1a8/0x248 [ 131.548093][T11531] vfs_read+0x230/0x8c8 [ 131.548103][T11531] ksys_read+0x12c/0x228 [ 131.548113][T11531] __arm64_sys_read+0x84/0x98 [ 131.548122][T11531] invoke_syscall+0x98/0x244 [ 131.548132][T11531] el0_svc_common+0xec/0x23c [ 131.548142][T11531] do_el0_svc+0x4c/0x5c [ 131.548151][T11531] el0_svc+0x60/0x1d8 [ 131.548161][T11531] el0t_64_sync_handler+0x44/0x104 [ 131.548172][T11531] el0t_64_sync+0x198/0x19c [ 131.701469][T11533] ip6gre1: entered promiscuous mode [ 131.701479][T11533] ip6gre1: entered allmulticast mode [ 131.994056][T11552] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 131.994074][T11552] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 132.183656][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2124'. [ 132.216706][T11565] bond0: entered allmulticast mode [ 132.341545][T11586] loop6: detected capacity change from 0 to 512 [ 132.365006][T11589] FAULT_INJECTION: forcing a failure. [ 132.365006][T11589] name failslab, interval 1, probability 0, space 0, times 0 [ 132.365023][T11589] CPU: 0 UID: 0 PID: 11589 Comm: syz.9.2132 Not tainted syzkaller #0 PREEMPT [ 132.365033][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 132.365048][T11589] Call trace: [ 132.365051][T11589] show_stack+0x2c/0x3c (C) [ 132.365070][T11589] __dump_stack+0x30/0x40 [ 132.365081][T11589] dump_stack_lvl+0xd8/0x12c [ 132.365090][T11589] dump_stack+0x1c/0x28 [ 132.365100][T11589] should_fail_ex+0x418/0x58c [ 132.365111][T11589] should_failslab+0xc4/0x120 [ 132.365121][T11589] __kmalloc_noprof+0x108/0x6c8 [ 132.365132][T11589] tomoyo_realpath_from_path+0xbc/0x4dc [ 132.365142][T11589] tomoyo_path_number_perm+0x1f0/0x500 [ 132.365151][T11589] tomoyo_path_mknod+0x13c/0x18c [ 132.365160][T11589] security_path_mknod+0x16c/0x340 [ 132.365167][T11589] may_o_create+0x48/0x2d0 [ 132.365176][T11589] lookup_open+0x584/0x1180 [ 132.365184][T11589] path_openat+0x50c/0x18f0 [ 132.365191][T11589] do_file_open+0x1c8/0x2e8 [ 132.365199][T11589] do_sys_openat2+0x114/0x1e8 [ 132.365210][T11589] do_sys_open+0xb0/0xe0 [ 132.365218][T11589] __arm64_sys_openat+0xa8/0xc4 [ 132.365228][T11589] invoke_syscall+0x98/0x244 [ 132.365238][T11589] el0_svc_common+0xec/0x23c [ 132.365247][T11589] do_el0_svc+0x4c/0x5c [ 132.365257][T11589] el0_svc+0x60/0x1d8 [ 132.365266][T11589] el0t_64_sync_handler+0x44/0x104 [ 132.365275][T11589] el0t_64_sync+0x198/0x19c [ 132.365368][T11589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.440439][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2136'. [ 132.486921][T11612] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.499463][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2140'. [ 132.532025][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2140'. [ 132.576121][T11612] md/raid:md0: not clean -- starting background reconstruction [ 132.576195][T11612] md/raid:md0: device ram1 operational as raid disk 1 [ 132.582394][T11612] md/raid:md0: starting dirty degraded array with PPL. [ 132.582403][T11612] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 132.582469][T11612] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 132.582478][T11612] CPU: 1 UID: 0 PID: 11612 Comm: syz.9.2141 Not tainted syzkaller #0 PREEMPT [ 132.582488][T11612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 132.582500][T11612] Call trace: [ 132.582503][T11612] show_stack+0x2c/0x3c (C) [ 132.582522][T11612] __dump_stack+0x30/0x40 [ 132.582534][T11612] dump_stack_lvl+0xd8/0x12c [ 132.582546][T11612] dump_stack+0x1c/0x28 [ 132.582557][T11612] sysfs_warn_dup+0x9c/0xb8 [ 132.582570][T11612] sysfs_add_file_mode_ns+0x230/0x2a4 [ 132.582582][T11612] internal_create_group+0x550/0xb30 [ 132.582594][T11612] sysfs_create_group+0x2c/0x3c [ 132.582606][T11612] raid5_run+0x1428/0x1b68 [ 132.582616][T11612] md_run+0xb10/0x19e8 [ 132.582628][T11612] do_md_run+0x4c/0x4e4 [ 132.582640][T11612] array_state_store+0x7a8/0xce8 [ 132.582650][T11612] md_attr_store+0x304/0x438 [ 132.582659][T11612] sysfs_kf_write+0xe0/0x108 [ 132.582670][T11612] kernfs_fop_write_iter+0x260/0x3b8 [ 132.582681][T11612] vfs_write+0x51c/0xa0c [ 132.582694][T11612] ksys_write+0x12c/0x228 [ 132.582706][T11612] __arm64_sys_write+0x84/0x98 [ 132.582718][T11612] invoke_syscall+0x98/0x244 [ 132.582731][T11612] el0_svc_common+0xec/0x23c [ 132.582742][T11612] do_el0_svc+0x4c/0x5c [ 132.582754][T11612] el0_svc+0x60/0x1d8 [ 132.582765][T11612] el0t_64_sync_handler+0x44/0x104 [ 132.582776][T11612] el0t_64_sync+0x198/0x19c [ 132.582991][T11612] raid5: failed to create sysfs attributes for md0 [ 132.584021][T11612] md/raid:md0: PPL space too small on ram1 [ 132.603145][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2140'. [ 132.605209][T11624] binder: 11622:11624 got transaction to invalid handle, 1 [ 132.605222][T11624] binder: 11622:11624 cannot find target node [ 132.605237][T11624] binder: 11622:11624 transaction call to 0:0 failed 131/29201/-22, code 0 size 72-24 line 3252 [ 132.605336][T11624] binder: 11622:11624 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 132.605346][T11624] binder: 11624 RLIMIT_NICE not set [ 132.608831][T11626] net_ratelimit: 1156 callbacks suppressed [ 132.608980][T11626] IPv6: addrconf: prefix option has invalid lifetime [ 132.693029][T11638] loop6: detected capacity change from 0 to 512 [ 132.774759][T11638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.165595][ T9266] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.267098][T11659] FAULT_INJECTION: forcing a failure. [ 133.267098][T11659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.267115][T11659] CPU: 0 UID: 0 PID: 11659 Comm: syz.6.2159 Not tainted syzkaller #0 PREEMPT [ 133.267127][T11659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 133.267139][T11659] Call trace: [ 133.267142][T11659] show_stack+0x2c/0x3c (C) [ 133.267160][T11659] __dump_stack+0x30/0x40 [ 133.267171][T11659] dump_stack_lvl+0xd8/0x12c [ 133.267181][T11659] dump_stack+0x1c/0x28 [ 133.267190][T11659] should_fail_ex+0x418/0x58c [ 133.267201][T11659] should_fail+0x14/0x24 [ 133.267211][T11659] should_fail_usercopy+0x20/0x30 [ 133.267220][T11659] _inline_copy_from_user+0x3c/0x174 [ 133.267232][T11659] kstrtouint_from_user+0xcc/0x174 [ 133.267242][T11659] proc_fail_nth_write+0x9c/0x234 [ 133.267251][T11659] vfs_write+0x2a4/0xa0c [ 133.267263][T11659] ksys_write+0x12c/0x228 [ 133.267272][T11659] __arm64_sys_write+0x84/0x98 [ 133.267282][T11659] invoke_syscall+0x98/0x244 [ 133.267292][T11659] el0_svc_common+0xec/0x23c [ 133.267302][T11659] do_el0_svc+0x4c/0x5c [ 133.267311][T11659] el0_svc+0x60/0x1d8 [ 133.267321][T11659] el0t_64_sync_handler+0x44/0x104 [ 133.267329][T11659] el0t_64_sync+0x198/0x19c [ 133.279271][T11612] md/raid:md0: failed to run raid set. [ 133.279275][T11612] md: pers->run() failed ... [ 133.474552][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.961666][T11691] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.962799][T11692] syzkaller0: entered promiscuous mode [ 133.962813][T11692] syzkaller0: entered allmulticast mode [ 134.049939][T11691] md/raid:md0: not clean -- starting background reconstruction [ 134.050017][T11691] md/raid:md0: device ram1 operational as raid disk 1 [ 134.062384][T11691] md/raid:md0: starting dirty degraded array with PPL. [ 134.062395][T11691] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 134.063608][T11691] md/raid:md0: PPL space too small on ram1 [ 134.129867][T11706] overlayfs: missing 'lowerdir' [ 134.193359][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2178'. [ 134.238463][T11727] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 134.238577][ T54] IPVS: starting estimator thread 0... [ 134.303033][T11734] syzkaller0: entered promiscuous mode [ 134.303043][T11734] syzkaller0: entered allmulticast mode [ 134.359854][T11728] IPVS: using max 52 ests per chain, 124800 per kthread [ 134.374302][T11691] md/raid:md0: failed to run raid set. [ 134.374313][T11691] md: pers->run() failed ... [ 134.400542][T11744] overlayfs: missing 'workdir' [ 135.091237][T11783] FAULT_INJECTION: forcing a failure. [ 135.091237][T11783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.091251][T11783] CPU: 0 UID: 0 PID: 11783 Comm: syz.9.2205 Not tainted syzkaller #0 PREEMPT [ 135.091261][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 135.091273][T11783] Call trace: [ 135.091276][T11783] show_stack+0x2c/0x3c (C) [ 135.091290][T11783] __dump_stack+0x30/0x40 [ 135.091300][T11783] dump_stack_lvl+0xd8/0x12c [ 135.091310][T11783] dump_stack+0x1c/0x28 [ 135.091319][T11783] should_fail_ex+0x418/0x58c [ 135.091330][T11783] should_fail+0x14/0x24 [ 135.091339][T11783] should_fail_usercopy+0x20/0x30 [ 135.091349][T11783] _inline_copy_from_user+0x3c/0x174 [ 135.091357][T11783] __sys_bpf+0x1b4/0x82c [ 135.091365][T11783] __arm64_sys_bpf+0xd0/0xec [ 135.091372][T11783] invoke_syscall+0x98/0x244 [ 135.091382][T11783] el0_svc_common+0xec/0x23c [ 135.091392][T11783] do_el0_svc+0x4c/0x5c [ 135.091401][T11783] el0_svc+0x60/0x1d8 [ 135.091411][T11783] el0t_64_sync_handler+0x44/0x104 [ 135.091419][T11783] el0t_64_sync+0x198/0x19c [ 135.143608][T11787] syzkaller0: entered promiscuous mode [ 135.143621][T11787] syzkaller0: entered allmulticast mode [ 135.218773][T11791] overlayfs: missing 'workdir' [ 135.591782][T11800] netlink: 'syz.6.2212': attribute type 10 has an invalid length. [ 135.591799][T11800] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2212'. [ 135.591843][T11800] team0: entered promiscuous mode [ 135.591853][T11800] team_slave_0: entered promiscuous mode [ 135.591939][T11800] team_slave_1: entered promiscuous mode [ 135.592000][T11800] team0: entered allmulticast mode [ 135.592006][T11800] team_slave_0: entered allmulticast mode [ 135.592014][T11800] team_slave_1: entered allmulticast mode [ 135.592396][T11800] bridge0: port 3(team0) entered blocking state [ 135.592419][T11800] bridge0: port 3(team0) entered disabled state [ 135.593446][T11800] bridge0: port 3(team0) entered blocking state [ 135.593467][T11800] bridge0: port 3(team0) entered forwarding state [ 135.625555][T11800] FAULT_INJECTION: forcing a failure. [ 135.625555][T11800] name failslab, interval 1, probability 0, space 0, times 0 [ 135.625572][T11800] CPU: 1 UID: 60928 PID: 11800 Comm: syz.6.2212 Not tainted syzkaller #0 PREEMPT [ 135.625583][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 135.625597][T11800] Call trace: [ 135.625600][T11800] show_stack+0x2c/0x3c (C) [ 135.625621][T11800] __dump_stack+0x30/0x40 [ 135.625633][T11800] dump_stack_lvl+0xd8/0x12c [ 135.625645][T11800] dump_stack+0x1c/0x28 [ 135.625656][T11800] should_fail_ex+0x418/0x58c [ 135.625669][T11800] should_failslab+0xc4/0x120 [ 135.625682][T11800] __kmalloc_cache_noprof+0x94/0x5fc [ 135.625690][T11800] sget_fc+0x5f0/0x14e4 [ 135.625699][T11800] vfs_get_super+0x40/0x148 [ 135.625708][T11800] get_tree_nodev+0x2c/0x3c [ 135.625717][T11800] hugetlbfs_get_tree+0x184/0x218 [ 135.625727][T11800] vfs_get_tree+0x90/0x28c [ 135.625736][T11800] fc_mount+0x24/0xac [ 135.625745][T11800] do_new_mount+0x2a4/0x538 [ 135.625755][T11800] path_mount+0x5f0/0xa88 [ 135.625765][T11800] do_mount+0xe8/0x148 [ 135.625775][T11800] __arm64_sys_mount+0x33c/0x388 [ 135.625786][T11800] invoke_syscall+0x98/0x244 [ 135.625798][T11800] el0_svc_common+0x19c/0x23c [ 135.625810][T11800] do_el0_svc+0x4c/0x5c [ 135.625821][T11800] el0_svc+0x60/0x1d8 [ 135.625832][T11800] el0t_64_sync_handler+0x44/0x104 [ 135.625843][T11800] el0t_64_sync+0x198/0x19c [ 135.741531][T11821] overlayfs: missing 'workdir' [ 135.750952][T11814] binder: 11813:11814 tried to acquire reference to desc 0, got 1 instead [ 135.751948][T11814] binder: 11813:11814 ioctl c0306201 0 returned -14 [ 135.752188][T11814] binder: 11813:11814 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 135.752200][T11814] binder: 11814 RLIMIT_NICE not set [ 136.117312][T11871] syzkaller0: entered promiscuous mode [ 136.117324][T11871] syzkaller0: entered allmulticast mode [ 136.122241][T11875] overlayfs: failed to resolve './bus': -2 [ 136.472525][T11895] Device name cannot be null; rc = [-22] [ 136.741538][T11908] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2257'. [ 136.741553][T11908] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2257'. [ 136.741935][T11908] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2257'. [ 136.741947][T11908] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2257'. [ 136.824478][T11909] syzkaller0: entered promiscuous mode [ 136.824488][T11909] syzkaller0: entered allmulticast mode [ 136.981467][ T4705] : (slave syz_tun): Releasing backup interface [ 137.381125][ T1153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.413916][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.414913][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.415286][ T4719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.415907][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.416293][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.489954][ T1153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.553347][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.556069][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.556646][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.557320][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.557715][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.625122][ T1153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.661332][T11944] lo speed is unknown, defaulting to 1000 [ 137.661832][T11944] lo speed is unknown, defaulting to 1000 [ 137.706423][ T4708] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.706926][ T4708] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.707692][ T4708] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.711829][ T4708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.713307][ T4708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.808683][ T1153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.811885][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.816372][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.817526][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.818213][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.818676][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.999237][T11953] lo speed is unknown, defaulting to 1000 [ 138.000048][T11953] lo speed is unknown, defaulting to 1000 [ 138.033811][ T1153] bridge_slave_1: left allmulticast mode [ 138.033825][ T1153] bridge_slave_1: left promiscuous mode [ 138.033911][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.041626][ T1153] bridge_slave_0: left allmulticast mode [ 138.041636][ T1153] bridge_slave_0: left promiscuous mode [ 138.041708][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.180374][ T1153]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.194066][ T1153]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.208894][ T1153]  (unregistering): Released all slaves [ 138.212058][ T1153] bond1 (unregistering): Released all slaves [ 138.305204][T11964] net_ratelimit: 404 callbacks suppressed [ 138.331464][ T1153] tipc: Disabling bearer [ 138.331528][ T1153] tipc: Left network mode [ 138.373895][ T1153] IPVS: stopping master sync thread 8802 ... [ 138.374111][ T1153] IPVS: stopping backup sync thread 4935 ... [ 138.429508][T11964] lo speed is unknown, defaulting to 1000 [ 138.495259][T11964] lo speed is unknown, defaulting to 1000 [ 138.516127][T11972] lo speed is unknown, defaulting to 1000 [ 138.517230][T11972] lo speed is unknown, defaulting to 1000 [ 138.556591][T11944] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.556617][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.556696][T11944] bridge_slave_0: entered allmulticast mode [ 138.557183][T11944] bridge_slave_0: entered promiscuous mode [ 138.564567][T11944] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.566267][T11944] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.566375][T11944] bridge_slave_1: entered allmulticast mode [ 138.570192][T11944] bridge_slave_1: entered promiscuous mode [ 138.614796][ T4396] 8021q: adding VLAN 0 to HW filter on device eth20 [ 138.664971][T12034] Device name cannot be null; rc = [-22] [ 138.971366][T11944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.972545][T11944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.021573][ T1153] hsr_slave_0: left promiscuous mode [ 139.022420][ T1153] hsr_slave_1: left promiscuous mode [ 139.023178][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.023191][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.023966][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.023975][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.036007][ T1153] veth1_macvtap: left promiscuous mode [ 139.036033][ T1153] veth0_macvtap: left promiscuous mode [ 139.036076][ T1153] veth1_vlan: left promiscuous mode [ 139.036111][ T1153] veth0_vlan: left promiscuous mode [ 139.173010][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 139.178270][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 139.304170][ T4888] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 139.311131][T11944] team0: Port device team_slave_0 added [ 139.312052][T11944] team0: Port device team_slave_1 added [ 139.459515][T11944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.459521][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.459533][T11944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.460220][T11944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.460226][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.460238][T11944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.539053][T11953] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.539078][T11953] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.539173][T11953] bridge_slave_0: entered allmulticast mode [ 139.539683][T11953] bridge_slave_0: entered promiscuous mode [ 139.540492][T11953] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.540510][T11953] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.540575][T11953] bridge_slave_1: entered allmulticast mode [ 139.541051][T11953] bridge_slave_1: entered promiscuous mode [ 139.564915][T11944] hsr_slave_0: entered promiscuous mode [ 139.565324][T11944] hsr_slave_1: entered promiscuous mode [ 139.571525][T11944] debugfs: 'hsr0' already exists in 'hsr' [ 139.571536][T11944] Cannot create hsr debugfs directory [ 139.651255][ T4719] Bluetooth: hci0: command tx timeout [ 139.682717][T11953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.684000][T11953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.704755][ T4396] 8021q: adding VLAN 0 to HW filter on device eth21 [ 139.712934][T12069] overlayfs: failed to clone upperpath [ 139.739040][ T4719] Bluetooth: hci1: command tx timeout [ 139.742650][T11953] team0: Port device team_slave_0 added [ 139.743307][ T1153] IPVS: stop unused estimator thread 0... [ 139.791099][T11953] team0: Port device team_slave_1 added [ 139.795095][T12077] fuse: fd is not a fuse device [ 139.907746][ T4719] Bluetooth: hci3: command tx timeout [ 139.925387][T11972] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.925410][T11972] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.925489][T11972] bridge_slave_0: entered allmulticast mode [ 139.925972][T11972] bridge_slave_0: entered promiscuous mode [ 139.932671][T11972] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.938196][T11972] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.938287][T11972] bridge_slave_1: entered allmulticast mode [ 139.938805][T11972] bridge_slave_1: entered promiscuous mode [ 139.945994][T11953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.946000][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.946011][T11953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.946657][T11953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.946663][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.946676][T11953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.990032][T11964] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.990423][T11964] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.990519][T11964] bridge_slave_0: entered allmulticast mode [ 139.993320][ T4719] Bluetooth: hci4: command tx timeout [ 139.995149][T11964] bridge_slave_0: entered promiscuous mode [ 139.996001][T11964] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.996025][T11964] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.996092][T11964] bridge_slave_1: entered allmulticast mode [ 139.996563][T11964] bridge_slave_1: entered promiscuous mode [ 140.031036][ T1153] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.042131][T12097] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2282'. [ 140.059893][T11972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.061574][T11972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.074461][ T4396] 8021q: adding VLAN 0 to HW filter on device eth22 [ 140.082712][T12097] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2282'. [ 140.106295][T11964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.107461][T11964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.145798][T11972] team0: Port device team_slave_0 added [ 140.146666][T11972] team0: Port device team_slave_1 added [ 140.161968][T11953] hsr_slave_0: entered promiscuous mode [ 140.169468][T11953] hsr_slave_1: entered promiscuous mode [ 140.170716][T11953] debugfs: 'hsr0' already exists in 'hsr' [ 140.170726][T11953] Cannot create hsr debugfs directory [ 140.189551][T11964] team0: Port device team_slave_0 added [ 140.238403][ T1153] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.251526][T11964] team0: Port device team_slave_1 added [ 140.285938][T11972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.285945][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.285958][T11972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.286657][T11972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.286663][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.286677][T11972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.330076][T11964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.330082][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.330094][T11964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.330737][T11964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.330743][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.330754][T11964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.392966][T11972] hsr_slave_0: entered promiscuous mode [ 140.399079][T11972] hsr_slave_1: entered promiscuous mode [ 140.404691][T11972] debugfs: 'hsr0' already exists in 'hsr' [ 140.404701][T11972] Cannot create hsr debugfs directory [ 140.461611][T12120] overlayfs: failed to clone upperpath [ 140.470362][ T1153] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.502629][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2288'. [ 140.532771][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2288'. [ 140.532886][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2288'. [ 140.598365][T11964] hsr_slave_0: entered promiscuous mode [ 140.602663][T11964] hsr_slave_1: entered promiscuous mode [ 140.602969][T11964] debugfs: 'hsr0' already exists in 'hsr' [ 140.602978][T11964] Cannot create hsr debugfs directory [ 140.688517][ T1153] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.178749][ T1153] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.239968][T11944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.252200][T11944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.252620][T11944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.259749][T11944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.260131][T11944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.270752][T12183] overlayfs: failed to clone upperpath [ 141.272202][T11944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.272561][T11944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.285328][T11944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.300723][ T1153] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.351984][T11944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.356517][T11944] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.358181][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.358205][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.359977][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.360000][ T6413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.403370][ T1153] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.432610][T12196] 9p: Bad value for 'wfdno' [ 141.503645][ T1153] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.637048][T11944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.672124][T11944] veth0_vlan: entered promiscuous mode [ 141.727482][ T1153] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.733462][T11944] veth1_vlan: entered promiscuous mode [ 141.753410][T11944] veth0_macvtap: entered promiscuous mode [ 141.754825][T11944] veth1_macvtap: entered promiscuous mode [ 141.776817][T11944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.780759][T11944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.825251][ T1153] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.864359][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.864472][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.864489][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.864503][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.879553][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.879562][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.885589][ T4719] Bluetooth: hci0: command tx timeout [ 141.904279][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.904288][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.923469][ T1153] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.934814][ T4396] 8021q: adding VLAN 0 to HW filter on device eth21 [ 141.960545][ T4719] Bluetooth: hci1: command tx timeout [ 141.977433][T12239] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.991826][ T1153] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.082622][T12239] md/raid:md0: not clean -- starting background reconstruction [ 142.082715][T12239] md/raid:md0: device ram1 operational as raid disk 1 [ 142.094965][T12239] md/raid:md0: starting dirty degraded array with PPL. [ 142.094976][T12239] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 142.095887][T12239] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 142.095904][T12239] CPU: 0 UID: 0 PID: 12239 Comm: syz.3.2264 Not tainted syzkaller #0 PREEMPT [ 142.095919][T12239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 142.095934][T12239] Call trace: [ 142.095937][T12239] show_stack+0x2c/0x3c (C) [ 142.095963][T12239] __dump_stack+0x30/0x40 [ 142.095977][T12239] dump_stack_lvl+0xd8/0x12c [ 142.095989][T12239] dump_stack+0x1c/0x28 [ 142.096001][T12239] sysfs_warn_dup+0x9c/0xb8 [ 142.096014][T12239] sysfs_add_file_mode_ns+0x230/0x2a4 [ 142.096025][T12239] internal_create_group+0x550/0xb30 [ 142.096038][T12239] sysfs_create_group+0x2c/0x3c [ 142.096050][T12239] raid5_run+0x1428/0x1b68 [ 142.096059][T12239] md_run+0xb10/0x19e8 [ 142.096072][T12239] do_md_run+0x4c/0x4e4 [ 142.096084][T12239] array_state_store+0x7a8/0xce8 [ 142.096094][T12239] md_attr_store+0x304/0x438 [ 142.096103][T12239] sysfs_kf_write+0xe0/0x108 [ 142.096115][T12239] kernfs_fop_write_iter+0x260/0x3b8 [ 142.096126][T12239] vfs_write+0x51c/0xa0c [ 142.096138][T12239] ksys_write+0x12c/0x228 [ 142.096150][T12239] __arm64_sys_write+0x84/0x98 [ 142.096162][T12239] invoke_syscall+0x98/0x244 [ 142.096175][T12239] el0_svc_common+0xec/0x23c [ 142.096187][T12239] do_el0_svc+0x4c/0x5c [ 142.096198][T12239] el0_svc+0x60/0x1d8 [ 142.096210][T12239] el0t_64_sync_handler+0x44/0x104 [ 142.096221][T12239] el0t_64_sync+0x198/0x19c [ 142.114099][T12239] raid5: failed to create sysfs attributes for md0 [ 142.115284][T12239] md/raid:md0: PPL space too small on ram1 [ 142.133211][ T4719] Bluetooth: hci3: command tx timeout [ 142.157844][ T1153] bridge_slave_1: left allmulticast mode [ 142.157855][ T1153] bridge_slave_1: left promiscuous mode [ 142.157953][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.161607][ T1153] bridge_slave_0: left allmulticast mode [ 142.161617][ T1153] bridge_slave_0: left promiscuous mode [ 142.162550][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.187569][ T1153] bridge_slave_1: left allmulticast mode [ 142.187582][ T1153] bridge_slave_1: left promiscuous mode [ 142.187728][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.191293][ T1153] bridge_slave_0: left allmulticast mode [ 142.191302][ T1153] bridge_slave_0: left promiscuous mode [ 142.191362][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.223201][ T4719] Bluetooth: hci4: command tx timeout [ 142.228357][ T1153] bridge0: port 3(team0) entered disabled state [ 142.230530][ T1153] bridge_slave_1: left allmulticast mode [ 142.230542][ T1153] bridge_slave_1: left promiscuous mode [ 142.230634][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.234404][ T1153] bridge_slave_0: left allmulticast mode [ 142.234413][ T1153] bridge_slave_0: left promiscuous mode [ 142.234475][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.429656][ T1153]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.464485][ T1153]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.476711][T12239] md/raid:md0: failed to run raid set. [ 142.476716][T12239] md: pers->run() failed ... [ 142.480536][ T1153]  (unregistering): Released all slaves [ 142.567340][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2303'. [ 142.587633][ T1153]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.599556][ T1153]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.624273][ T1153]  (unregistering): Released all slaves [ 142.787888][ T1153]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.822594][ T1153]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.839211][ T1153]  (unregistering): Released all slaves [ 142.842838][ T1153] bond0 (unregistering): Released all slaves [ 142.862861][T12270] netlink: 'syz.8.2302': attribute type 2 has an invalid length. [ 142.939366][ T1153] IPVS: stopping backup sync thread 11075 ... [ 142.962971][T11953] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 142.969024][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.969437][T11953] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 142.982104][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.982545][T11953] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 142.985107][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.036050][T11953] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 143.039249][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.129270][ T4396] 8021q: adding VLAN 0 to HW filter on device eth20 [ 143.241681][T11953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.248784][T11953] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.252130][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.252153][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.265218][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.265239][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.490752][ T4396] 8021q: adding VLAN 0 to HW filter on device eth24 [ 143.569845][T11972] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 143.595399][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.601873][T11972] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 143.613826][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.614164][T11972] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 143.622210][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.638330][T12323] syzkaller0: entered promiscuous mode [ 143.638343][T12323] syzkaller0: entered allmulticast mode [ 143.647188][T11972] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 143.659687][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.662978][T12332] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2309'. [ 143.710702][ T1153] hsr_slave_0: left promiscuous mode [ 143.710990][ T1153] hsr_slave_1: left promiscuous mode [ 143.711297][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.711307][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.711645][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.711652][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.732531][ T1153] hsr_slave_0: left promiscuous mode [ 143.732924][ T1153] hsr_slave_1: left promiscuous mode [ 143.733284][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.733294][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.737432][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.737440][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.765290][ T1153] hsr_slave_0: left promiscuous mode [ 143.765685][ T1153] hsr_slave_1: left promiscuous mode [ 143.766039][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.766049][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.766472][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.766485][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.798813][ T1153] veth1_macvtap: left promiscuous mode [ 143.798895][ T1153] veth0_macvtap: left promiscuous mode [ 143.804187][ T1153] veth1_vlan: left promiscuous mode [ 143.804230][ T1153] veth0_vlan: left promiscuous mode [ 143.804432][ T1153] net_ratelimit: 262 callbacks suppressed [ 143.807307][ T1153] veth1_macvtap: left promiscuous mode [ 143.807329][ T1153] veth0_macvtap: left promiscuous mode [ 143.807416][ T1153] veth0_vlan: left promiscuous mode [ 143.808082][ T1153] veth1_macvtap: left promiscuous mode [ 143.808099][ T1153] veth0_macvtap: left promiscuous mode [ 143.808146][ T1153] veth1_vlan: left promiscuous mode [ 143.808181][ T1153] veth0_vlan: left promiscuous mode [ 144.068258][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 144.074585][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 144.098379][ T4719] Bluetooth: hci0: command tx timeout [ 144.172776][T12377] loop3: detected capacity change from 0 to 4096 [ 144.176910][T12377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.176922][T12377] EXT4-fs (loop3): Test dummy encryption mode enabled [ 144.177762][T12377] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 144.177795][T12377] System zones: 0-5 [ 144.183599][T12377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.194715][ T4719] Bluetooth: hci1: command tx timeout [ 144.326513][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 144.379478][ T4719] Bluetooth: hci3: command tx timeout [ 144.381564][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 144.451853][ T4719] Bluetooth: hci4: command tx timeout [ 144.578357][ T1153] team_slave_1 (unregistering): left promiscuous mode [ 144.578372][ T1153] team_slave_1 (unregistering): left allmulticast mode [ 144.578792][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 144.596982][ T1153] team_slave_0 (unregistering): left promiscuous mode [ 144.596992][ T1153] team_slave_0 (unregistering): left allmulticast mode [ 144.597593][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 144.685007][T11953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.704775][ T4396] 8021q: adding VLAN 0 to HW filter on device eth25 [ 144.706081][ T4793] infiniband syz0: ib_query_port failed (-19) [ 144.796393][T12366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.912852][T11972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.935115][T11972] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.021518][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.021549][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.022354][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.022373][ T6413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.026157][T11953] veth0_vlan: entered promiscuous mode [ 145.028084][T11953] veth1_vlan: entered promiscuous mode [ 145.061623][T11953] veth0_macvtap: entered promiscuous mode [ 145.064318][T12408] Injecting memory failure for pfn 0x145200 at process virtual address 0x20000000 [ 145.072572][T11953] veth1_macvtap: entered promiscuous mode [ 145.084479][T11953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.085615][T11953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.094479][T12408] Memory failure: 0x145200: recovery action for dirty LRU page: Recovered [ 145.161604][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.161615][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.176753][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.176761][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.190359][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.192237][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.192418][ T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.192544][ T60] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.248846][T11964] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 145.256955][T11964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.258265][T11964] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 145.287486][T11964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.287800][T11964] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 145.300224][T11964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.305913][T11964] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 145.328730][T11964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.391151][T12450] FAULT_INJECTION: forcing a failure. [ 145.391151][T12450] name failslab, interval 1, probability 0, space 0, times 0 [ 145.391172][T12450] CPU: 0 UID: 0 PID: 12450 Comm: syz.7.2325 Not tainted syzkaller #0 PREEMPT [ 145.391182][T12450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 145.391194][T12450] Call trace: [ 145.391196][T12450] show_stack+0x2c/0x3c (C) [ 145.391212][T12450] __dump_stack+0x30/0x40 [ 145.391223][T12450] dump_stack_lvl+0xd8/0x12c [ 145.391232][T12450] dump_stack+0x1c/0x28 [ 145.391242][T12450] should_fail_ex+0x418/0x58c [ 145.391253][T12450] should_failslab+0xc4/0x120 [ 145.391263][T12450] __kmalloc_noprof+0x108/0x6c8 [ 145.391275][T12450] tomoyo_realpath_from_path+0xbc/0x4dc [ 145.391285][T12450] tomoyo_path_number_perm+0x1f0/0x500 [ 145.391293][T12450] tomoyo_file_ioctl+0x2c/0x3c [ 145.391302][T12450] security_file_ioctl+0xdc/0x2b0 [ 145.391310][T12450] __arm64_sys_ioctl+0xb0/0x1cc [ 145.391321][T12450] invoke_syscall+0x98/0x244 [ 145.391331][T12450] el0_svc_common+0xec/0x23c [ 145.391340][T12450] do_el0_svc+0x4c/0x5c [ 145.391350][T12450] el0_svc+0x60/0x1d8 [ 145.391359][T12450] el0t_64_sync_handler+0x44/0x104 [ 145.391368][T12450] el0t_64_sync+0x198/0x19c [ 145.391378][T12450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 145.442006][T11944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.446394][T11964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.450400][T11964] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.453971][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.453995][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.454573][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.454597][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.471008][T11964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.471018][T11964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.547261][ T1153] IPVS: stop unused estimator thread 0... [ 145.592126][T11972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.676503][T12435] ip6tnl0: Caught tx_queue_len zero misconfig [ 145.724315][T12483] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2329'. [ 145.741176][T11964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.021743][T11972] veth0_vlan: entered promiscuous mode [ 146.033969][T11972] veth1_vlan: entered promiscuous mode [ 146.062237][T11972] veth0_macvtap: entered promiscuous mode [ 146.064523][T11972] veth1_macvtap: entered promiscuous mode [ 146.077602][T11972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.085436][T11972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.143633][ T14] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.143661][ T14] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.143682][ T14] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.161881][ T6421] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.209830][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.209841][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.222662][T11964] veth0_vlan: entered promiscuous mode [ 146.255357][T11964] veth1_vlan: entered promiscuous mode [ 146.262616][ T6421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.262626][ T6421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.299575][T11964] veth0_macvtap: entered promiscuous mode [ 146.305472][T11964] veth1_macvtap: entered promiscuous mode [ 146.314056][T11964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.322284][ T4719] Bluetooth: hci0: command tx timeout [ 146.322975][T11964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.356489][ T6423] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.356519][ T6423] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.356535][ T6423] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.356549][ T6423] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.416612][ T6421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.416620][ T6421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.418264][ T4719] Bluetooth: hci1: command tx timeout [ 146.446515][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.446527][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.589223][ T4719] Bluetooth: hci3: command tx timeout [ 146.664197][ T4719] Bluetooth: hci4: command tx timeout [ 146.716019][T12534] md/raid:md0: not clean -- starting background reconstruction [ 146.716100][T12534] md/raid:md0: device ram1 operational as raid disk 1 [ 146.725262][T12534] md/raid:md0: starting dirty degraded array with PPL. [ 146.725272][T12534] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 146.726464][T12534] md/raid:md0: PPL space too small on ram1 [ 147.115645][T12534] md/raid:md0: failed to run raid set. [ 147.115650][T12534] md: pers->run() failed ... [ 147.143528][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2343'. [ 147.558051][T12587] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2350'. [ 147.558349][T12587] FAULT_INJECTION: forcing a failure. [ 147.558349][T12587] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.558363][T12587] CPU: 0 UID: 0 PID: 12587 Comm: syz.9.2350 Not tainted syzkaller #0 PREEMPT [ 147.558373][T12587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 147.558385][T12587] Call trace: [ 147.558388][T12587] show_stack+0x2c/0x3c (C) [ 147.558407][T12587] __dump_stack+0x30/0x40 [ 147.558417][T12587] dump_stack_lvl+0xd8/0x12c [ 147.558427][T12587] dump_stack+0x1c/0x28 [ 147.558436][T12587] should_fail_ex+0x418/0x58c [ 147.558447][T12587] should_fail_alloc_page+0xec/0x10c [ 147.558458][T12587] prepare_alloc_pages+0x194/0x484 [ 147.558469][T12587] __alloc_frozen_pages_noprof+0x180/0x578 [ 147.558480][T12587] alloc_pages_mpol+0x1fc/0x3d0 [ 147.558489][T12587] folio_alloc_mpol_noprof+0x4c/0x248 [ 147.558497][T12587] vma_alloc_folio_noprof+0x100/0x1dc [ 147.558505][T12587] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 147.558515][T12587] folio_prealloc+0x3c/0x1b0 [ 147.558525][T12587] do_pte_missing+0x1bd0/0x28bc [ 147.558535][T12587] handle_mm_fault+0x14d0/0x2b58 [ 147.558545][T12587] do_page_fault+0x4b0/0xb88 [ 147.558554][T12587] do_translation_fault+0xc4/0x114 [ 147.558563][T12587] do_mem_abort+0x70/0x194 [ 147.558572][T12587] el1_abort+0x50/0x74 [ 147.558582][T12587] el1h_64_sync_handler+0xdc/0x130 [ 147.558590][T12587] el1h_64_sync+0x78/0x7c [ 147.558598][T12587] __arch_copy_to_user+0x74/0x240 (P) [ 147.558609][T12587] simple_copy_to_iter+0x50/0x8c [ 147.558617][T12587] __skb_datagram_iter+0xd4/0x77c [ 147.558624][T12587] skb_copy_datagram_iter+0xf4/0x2c4 [ 147.558632][T12587] netlink_recvmsg+0x244/0x868 [ 147.558642][T12587] sock_recvmsg+0xd4/0x170 [ 147.558650][T12587] ____sys_recvmsg+0x1b8/0x608 [ 147.558658][T12587] ___sys_recvmsg+0x16c/0x1f4 [ 147.558667][T12587] __sys_recvmsg+0x154/0x200 [ 147.558675][T12587] __arm64_sys_recvmsg+0x88/0x9c [ 147.558683][T12587] invoke_syscall+0x98/0x244 [ 147.558693][T12587] el0_svc_common+0xec/0x23c [ 147.558703][T12587] do_el0_svc+0x4c/0x5c [ 147.558712][T12587] el0_svc+0x60/0x1d8 [ 147.558721][T12587] el0t_64_sync_handler+0x44/0x104 [ 147.558730][T12587] el0t_64_sync+0x198/0x19c [ 147.558772][T12587] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2350'. [ 147.590071][T12589] FAULT_INJECTION: forcing a failure. [ 147.590071][T12589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.590086][T12589] CPU: 0 UID: 0 PID: 12589 Comm: syz.7.2353 Not tainted syzkaller #0 PREEMPT [ 147.590095][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 147.590107][T12589] Call trace: [ 147.590109][T12589] show_stack+0x2c/0x3c (C) [ 147.590123][T12589] __dump_stack+0x30/0x40 [ 147.590133][T12589] dump_stack_lvl+0xd8/0x12c [ 147.590142][T12589] dump_stack+0x1c/0x28 [ 147.590151][T12589] should_fail_ex+0x418/0x58c [ 147.590161][T12589] should_fail+0x14/0x24 [ 147.590170][T12589] should_fail_usercopy+0x20/0x30 [ 147.590180][T12589] _inline_copy_from_user+0x3c/0x174 [ 147.590191][T12589] kstrtouint_from_user+0xcc/0x174 [ 147.590201][T12589] proc_fail_nth_write+0x9c/0x234 [ 147.590210][T12589] vfs_write+0x2a4/0xa0c [ 147.590220][T12589] ksys_write+0x12c/0x228 [ 147.590229][T12589] __arm64_sys_write+0x84/0x98 [ 147.590239][T12589] invoke_syscall+0x98/0x244 [ 147.590249][T12589] el0_svc_common+0xec/0x23c [ 147.590258][T12589] do_el0_svc+0x4c/0x5c [ 147.590268][T12589] el0_svc+0x60/0x1d8 [ 147.590276][T12589] el0t_64_sync_handler+0x44/0x104 [ 147.590285][T12589] el0t_64_sync+0x198/0x19c [ 147.664308][T12600] FAULT_INJECTION: forcing a failure. [ 147.664308][T12600] name failslab, interval 1, probability 0, space 0, times 0 [ 147.664323][T12600] CPU: 0 UID: 0 PID: 12600 Comm: syz.7.2357 Not tainted syzkaller #0 PREEMPT [ 147.664333][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 147.664344][T12600] Call trace: [ 147.664348][T12600] show_stack+0x2c/0x3c (C) [ 147.664364][T12600] __dump_stack+0x30/0x40 [ 147.664374][T12600] dump_stack_lvl+0xd8/0x12c [ 147.664384][T12600] dump_stack+0x1c/0x28 [ 147.664393][T12600] should_fail_ex+0x418/0x58c [ 147.664404][T12600] should_failslab+0xc4/0x120 [ 147.664416][T12600] __kmalloc_noprof+0x108/0x6c8 [ 147.664427][T12600] tomoyo_realpath_from_path+0xbc/0x4dc [ 147.664437][T12600] tomoyo_path_number_perm+0x1f0/0x500 [ 147.664445][T12600] tomoyo_file_ioctl+0x2c/0x3c [ 147.664455][T12600] security_file_ioctl+0xdc/0x2b0 [ 147.664463][T12600] __arm64_sys_ioctl+0xb0/0x1cc [ 147.664477][T12600] invoke_syscall+0x98/0x244 [ 147.664488][T12600] el0_svc_common+0xec/0x23c [ 147.664497][T12600] do_el0_svc+0x4c/0x5c [ 147.664508][T12600] el0_svc+0x60/0x1d8 [ 147.664519][T12600] el0t_64_sync_handler+0x44/0x104 [ 147.664528][T12600] el0t_64_sync+0x198/0x19c [ 147.664624][T12600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.775026][T12616] FAULT_INJECTION: forcing a failure. [ 147.775026][T12616] name failslab, interval 1, probability 0, space 0, times 0 [ 147.775043][T12616] CPU: 0 UID: 0 PID: 12616 Comm: syz.6.2362 Not tainted syzkaller #0 PREEMPT [ 147.775053][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 147.775066][T12616] Call trace: [ 147.775069][T12616] show_stack+0x2c/0x3c (C) [ 147.775090][T12616] __dump_stack+0x30/0x40 [ 147.775102][T12616] dump_stack_lvl+0xd8/0x12c [ 147.775114][T12616] dump_stack+0x1c/0x28 [ 147.775125][T12616] should_fail_ex+0x418/0x58c [ 147.775135][T12616] should_failslab+0xc4/0x120 [ 147.775146][T12616] __kvmalloc_node_noprof+0x160/0x7fc [ 147.775155][T12616] page_pool_create_percpu+0x2f8/0xb10 [ 147.775164][T12616] page_pool_create+0x24/0x34 [ 147.775172][T12616] bpf_test_run_xdp_live+0x1a8/0x1770 [ 147.775183][T12616] bpf_prog_test_run_xdp+0x634/0xe0c [ 147.775193][T12616] bpf_prog_test_run+0x1e0/0x250 [ 147.775202][T12616] __sys_bpf+0x6bc/0x82c [ 147.775210][T12616] __arm64_sys_bpf+0xd0/0xec [ 147.775218][T12616] invoke_syscall+0x98/0x244 [ 147.775228][T12616] el0_svc_common+0xec/0x23c [ 147.775237][T12616] do_el0_svc+0x4c/0x5c [ 147.775247][T12616] el0_svc+0x60/0x1d8 [ 147.775256][T12616] el0t_64_sync_handler+0x44/0x104 [ 147.775265][T12616] el0t_64_sync+0x198/0x19c [ 147.775356][T12616] page_pool_create_percpu() gave up with errno -12 [ 147.843181][T12623] loop6: detected capacity change from 0 to 256 [ 147.898086][T12630] loop6: detected capacity change from 0 to 128 [ 147.898766][T12630] ext3: Unknown parameter 'uid>00000000000000000000' [ 147.913432][T12630] loop6: detected capacity change from 0 to 128 [ 147.919857][T12630] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.920508][T12630] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.945840][ T14] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.103976][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2371'. [ 148.126443][T12655] loop6: detected capacity change from 0 to 128 [ 148.158713][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 148.158721][ T30] audit: type=1326 audit(144.021:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12650 comm="syz.8.2371" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97979368 code=0x0 [ 148.170114][T12661] loop6: detected capacity change from 0 to 8 [ 148.171063][T12661] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 148.171069][T12661] unable to read xattr id index table [ 148.175520][T12661] SQUASHFS error: zlib decompression failed, data probably corrupt [ 148.175535][T12661] SQUASHFS error: Failed to read block 0x9b: -5 [ 148.175552][T12661] SQUASHFS error: Unable to read metadata cache entry [99] [ 148.175559][T12661] SQUASHFS error: Unable to read inode 0x127 [ 148.204216][T12663] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2374'. [ 148.260400][T12668] overlayfs: refusing to follow metacopy origin for (/file1) [ 148.326151][T12678] fuse: Bad value for 'fd' ** 3529 printk messages dropped ** [ 148.696009][ T30] audit: type=1326 audit(144.535:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.8.2383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97979368 code=0x7ffc0000 [ 148.696082][ T30] audit: type=1326 audit(144.535:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.8.2383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97979368 code=0x7ffc0000 [ 148.697406][ T30] audit: type=1326 audit(144.535:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.8.2383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97979368 code=0x7ffc0000 [ 148.697468][ T30] audit: type=1326 audit(144.535:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.8.2383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff97979368 code=0x7ffc0000 [ 148.697531][ T30] audit: type=1326 audit(144.535:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.8.2383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97979368 code=0x7ffc0000 [ 148.697595][ T30] audit: type=1326 audit(144.535:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.8.2383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97979368 code=0x7ffc0000 [ 148.699145][ T30] audit: type=1326 audit(144.535:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.8.2383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97979368 code=0x7ffc0000 [ 148.699171][ T30] audit: type=1326 audit(144.535:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.8.2383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97979368 code=0x7ffc0000 [ 148.699191][ T30] audit: type=1326 audit(144.535:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.8.2383" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97979368 code=0x7ffc0000 [ 148.991900][T12709] Device name cannot be null; rc = [-22] [ 149.159674][ T9] net_ratelimit: 736 callbacks suppressed [ 149.184401][T12712] loop7: detected capacity change from 0 to 256 [ 149.241511][T12712] Bluetooth: ISO socket layer initialized [ 149.420653][T12729] FAULT_INJECTION: forcing a failure. [ 149.420653][T12729] name failslab, interval 1, probability 0, space 0, times 0 [ 149.420667][T12729] CPU: 1 UID: 0 PID: 12729 Comm: syz.9.2399 Not tainted syzkaller #0 PREEMPT [ 149.420676][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 149.420688][T12729] Call trace: [ 149.420691][T12729] show_stack+0x2c/0x3c (C) [ 149.420708][T12729] __dump_stack+0x30/0x40 [ 149.420718][T12729] dump_stack_lvl+0xd8/0x12c [ 149.420728][T12729] dump_stack+0x1c/0x28 [ 149.420737][T12729] should_fail_ex+0x418/0x58c [ 149.420748][T12729] should_failslab+0xc4/0x120 [ 149.420759][T12729] kmem_cache_alloc_noprof+0x94/0x5d4 [ 149.420770][T12729] skb_clone+0x1ac/0x320 [ 149.420779][T12729] __netlink_deliver_tap+0x364/0x6f4 [ 149.420789][T12729] netlink_deliver_tap+0x1d8/0x1dc [ 149.420797][T12729] netlink_unicast+0x5dc/0x7f8 [ 149.420805][T12729] netlink_sendmsg+0x648/0x948 [ 149.420814][T12729] __sock_sendmsg+0xc8/0x17c [ 149.420821][T12729] ____sys_sendmsg+0x3d0/0x6c8 [ 149.420830][T12729] ___sys_sendmsg+0x198/0x224 [ 149.420838][T12729] __sys_sendmsg+0x158/0x204 [ 149.420847][T12729] __arm64_sys_sendmsg+0x88/0x9c [ 149.420855][T12729] invoke_syscall+0x98/0x244 [ 149.420866][T12729] el0_svc_common+0xec/0x23c [ 149.420875][T12729] do_el0_svc+0x4c/0x5c [ 149.420889][T12729] el0_svc+0x60/0x1d8 [ 149.420899][T12729] el0t_64_sync_handler+0x44/0x104 [ 149.420908][T12729] el0t_64_sync+0x198/0x19c [ 149.553124][T12734] FAULT_INJECTION: forcing a failure. [ 149.553124][T12734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.553143][T12734] CPU: 1 UID: 0 PID: 12734 Comm: syz.9.2402 Not tainted syzkaller #0 PREEMPT [ 149.553154][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 149.553167][T12734] Call trace: [ 149.553170][T12734] show_stack+0x2c/0x3c (C) [ 149.553187][T12734] __dump_stack+0x30/0x40 [ 149.553197][T12734] dump_stack_lvl+0xd8/0x12c [ 149.553207][T12734] dump_stack+0x1c/0x28 [ 149.553216][T12734] should_fail_ex+0x418/0x58c [ 149.553227][T12734] should_fail+0x14/0x24 [ 149.553236][T12734] should_fail_usercopy+0x20/0x30 [ 149.553246][T12734] _inline_copy_from_user+0x3c/0x174 [ 149.553256][T12734] copy_msghdr_from_user+0xb8/0x194 [ 149.553265][T12734] ___sys_sendmsg+0x14c/0x224 [ 149.553274][T12734] __sys_sendmsg+0x158/0x204 [ 149.553282][T12734] __arm64_sys_sendmsg+0x88/0x9c [ 149.553290][T12734] invoke_syscall+0x98/0x244 [ 149.553300][T12734] el0_svc_common+0xec/0x23c [ 149.553310][T12734] do_el0_svc+0x4c/0x5c [ 149.553319][T12734] el0_svc+0x60/0x1d8 [ 149.553329][T12734] el0t_64_sync_handler+0x44/0x104 [ 149.553337][T12734] el0t_64_sync+0x198/0x19c [ 149.983384][T12749] loop3: detected capacity change from 0 to 512 [ 149.988141][T12749] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 149.996416][T12749] EXT4-fs (loop3): 1 truncate cleaned up [ 149.996867][T12749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.051624][T12749] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2407: invalid indirect mapped block 2185560079 (level 0) [ 150.052752][T12749] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2407: invalid indirect mapped block 65535 (level 2) [ 150.054280][T12749] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.2407: Invalid inode table block 0 in block_group 0 [ 150.055801][T12749] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 150.056003][T12749] EXT4-fs error (device loop3): ext4_splice_branch:479: inode #13: comm syz.3.2407: mark_inode_dirty error [ 150.056306][T12749] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.2407: bg 0: block 46: invalid block bitmap [ 150.056481][T12749] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 150.056692][T12749] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.2407: Invalid inode table block 0 in block_group 0 [ 150.057769][T12749] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 150.057985][T12749] EXT4-fs error (device loop3): ext4_truncate:4721: inode #13: comm syz.3.2407: mark_inode_dirty error [ 150.088784][T11944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.194735][ T4822] kernel write not supported for file /input/event0 (pid: 4822 comm: kworker/1:4) [ 150.231519][T12763] SET target dimension over the limit! [ 150.307529][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2417'. [ 150.496162][T12782] Device name cannot be null; rc = [-22] [ 150.797049][T12774] md/raid:md0: not clean -- starting background reconstruction [ 150.797141][T12774] md/raid:md0: device ram1 operational as raid disk 1 [ 150.819975][T12774] md/raid:md0: starting dirty degraded array with PPL. [ 150.819990][T12774] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 150.820060][T12774] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 150.820069][T12774] CPU: 0 UID: 0 PID: 12774 Comm: syz.3.2416 Not tainted syzkaller #0 PREEMPT [ 150.820080][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 150.820093][T12774] Call trace: [ 150.820096][T12774] show_stack+0x2c/0x3c (C) [ 150.820115][T12774] __dump_stack+0x30/0x40 [ 150.820128][T12774] dump_stack_lvl+0xd8/0x12c [ 150.820139][T12774] dump_stack+0x1c/0x28 [ 150.820151][T12774] sysfs_warn_dup+0x9c/0xb8 [ 150.820164][T12774] sysfs_add_file_mode_ns+0x230/0x2a4 [ 150.820175][T12774] internal_create_group+0x550/0xb30 [ 150.820187][T12774] sysfs_create_group+0x2c/0x3c [ 150.820199][T12774] raid5_run+0x1428/0x1b68 [ 150.820209][T12774] md_run+0xb10/0x19e8 [ 150.820221][T12774] do_md_run+0x4c/0x4e4 [ 150.820233][T12774] array_state_store+0x7a8/0xce8 [ 150.820243][T12774] md_attr_store+0x304/0x438 [ 150.820252][T12774] sysfs_kf_write+0xe0/0x108 [ 150.820263][T12774] kernfs_fop_write_iter+0x260/0x3b8 [ 150.820275][T12774] vfs_write+0x51c/0xa0c [ 150.820287][T12774] ksys_write+0x12c/0x228 [ 150.820299][T12774] __arm64_sys_write+0x84/0x98 [ 150.820311][T12774] invoke_syscall+0x98/0x244 [ 150.820324][T12774] el0_svc_common+0xec/0x23c [ 150.820336][T12774] do_el0_svc+0x4c/0x5c [ 150.820347][T12774] el0_svc+0x60/0x1d8 [ 150.820359][T12774] el0t_64_sync_handler+0x44/0x104 [ 150.820370][T12774] el0t_64_sync+0x198/0x19c [ 150.820578][T12774] raid5: failed to create sysfs attributes for md0 [ 150.853815][T12774] md/raid:md0: PPL space too small on ram1 [ 150.872083][T12794] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 151.145463][T12774] md/raid:md0: failed to run raid set. [ 151.145468][T12774] md: pers->run() failed ... [ 151.192316][T12807] loop3: detected capacity change from 0 to 1024 [ 151.192823][T12807] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.196575][T12807] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.209092][T12807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.213689][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2428'. [ 151.215511][T12807] EXT4-fs error (device loop3): __ext4_iget:5592: inode #12: block 13: comm syz.3.2428: invalid block [ 151.235506][T11944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.268050][T12811] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2430'. [ 151.299506][T12815] xt_TPROXY: Can be used only with -p tcp or -p udp [ 151.323653][ T6423] IPVS: starting estimator thread 0... [ 151.393240][T12825] overlayfs: failed to resolve './bus': -2 [ 151.410692][T12818] IPVS: using max 63 ests per chain, 151200 per kthread [ 151.474089][T12835] FAULT_INJECTION: forcing a failure. [ 151.474089][T12835] name failslab, interval 1, probability 0, space 0, times 0 [ 151.474104][T12835] CPU: 1 UID: 0 PID: 12835 Comm: syz.7.2440 Not tainted syzkaller #0 PREEMPT [ 151.474114][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 151.474126][T12835] Call trace: [ 151.474129][T12835] show_stack+0x2c/0x3c (C) [ 151.474148][T12835] __dump_stack+0x30/0x40 [ 151.474160][T12835] dump_stack_lvl+0xd8/0x12c [ 151.474170][T12835] dump_stack+0x1c/0x28 [ 151.474179][T12835] should_fail_ex+0x418/0x58c [ 151.474192][T12835] should_failslab+0xc4/0x120 [ 151.474205][T12835] __kmalloc_noprof+0x108/0x6c8 [ 151.474218][T12835] tomoyo_encode2+0x10c/0x330 [ 151.474228][T12835] tomoyo_encode+0x34/0x50 [ 151.474237][T12835] tomoyo_realpath_from_path+0x488/0x4dc [ 151.474246][T12835] tomoyo_path_number_perm+0x1f0/0x500 [ 151.474254][T12835] tomoyo_file_ioctl+0x2c/0x3c [ 151.474263][T12835] security_file_ioctl+0xdc/0x2b0 [ 151.474271][T12835] __arm64_sys_ioctl+0xb0/0x1cc [ 151.474282][T12835] invoke_syscall+0x98/0x244 [ 151.474292][T12835] el0_svc_common+0xec/0x23c [ 151.474301][T12835] do_el0_svc+0x4c/0x5c [ 151.474314][T12835] el0_svc+0x60/0x1d8 [ 151.474324][T12835] el0t_64_sync_handler+0x44/0x104 [ 151.474334][T12835] el0t_64_sync+0x198/0x19c [ 151.474358][T12835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.512262][T12837] ip6gre1: entered promiscuous mode [ 151.512270][T12837] ip6gre1: entered allmulticast mode [ 151.579658][T12831] md/raid:md0: not clean -- starting background reconstruction [ 151.579743][T12831] md/raid:md0: device ram1 operational as raid disk 1 [ 151.584215][T12831] md/raid:md0: starting dirty degraded array with PPL. [ 151.584221][T12831] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 151.585369][T12831] md/raid:md0: PPL space too small on ram1 [ 151.669669][ T4719] Bluetooth: hci4: unexpected cc 0x041a length: 8 > 7 [ 151.669907][ T4719] Bluetooth: hci4: unexpected cc 0x041a length: 8 > 7 [ 151.672427][T12847] FAULT_INJECTION: forcing a failure. [ 151.672427][T12847] name failslab, interval 1, probability 0, space 0, times 0 [ 151.672440][T12847] CPU: 0 UID: 0 PID: 12847 Comm: syz.6.2444 Not tainted syzkaller #0 PREEMPT [ 151.672450][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 151.672462][T12847] Call trace: [ 151.672465][T12847] show_stack+0x2c/0x3c (C) [ 151.672482][T12847] __dump_stack+0x30/0x40 [ 151.672492][T12847] dump_stack_lvl+0xd8/0x12c [ 151.672502][T12847] dump_stack+0x1c/0x28 [ 151.672511][T12847] should_fail_ex+0x418/0x58c [ 151.672522][T12847] should_failslab+0xc4/0x120 [ 151.672533][T12847] __kmalloc_noprof+0x108/0x6c8 [ 151.672544][T12847] tomoyo_encode2+0x10c/0x330 [ 151.672553][T12847] tomoyo_encode+0x34/0x50 [ 151.672562][T12847] tomoyo_realpath_from_path+0x488/0x4dc [ 151.672571][T12847] tomoyo_path_number_perm+0x1f0/0x500 [ 151.672579][T12847] tomoyo_file_ioctl+0x2c/0x3c [ 151.672588][T12847] security_file_ioctl+0xdc/0x2b0 [ 151.672596][T12847] __arm64_sys_ioctl+0xb0/0x1cc [ 151.672607][T12847] invoke_syscall+0x98/0x244 [ 151.672617][T12847] el0_svc_common+0xec/0x23c [ 151.672627][T12847] do_el0_svc+0x4c/0x5c [ 151.672636][T12847] el0_svc+0x60/0x1d8 [ 151.672646][T12847] el0t_64_sync_handler+0x44/0x104 [ 151.672655][T12847] el0t_64_sync+0x198/0x19c [ 151.672667][T12847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.830458][T12854] overlayfs: failed to resolve './bus': -2 [ 151.840942][T12831] md/raid:md0: failed to run raid set. [ 151.840947][T12831] md: pers->run() failed ... [ 151.881535][T12862] loop3: detected capacity change from 0 to 128 [ 151.917418][T12862] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.930731][T11944] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.963919][T12860] loop6: detected capacity change from 0 to 128 [ 151.964290][T12860] vfat: Unknown parameter 'u…¯ÿh„»¹' [ 151.983247][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2452'. [ 151.999953][T12867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2454'. [ 152.017228][T12869] Bluetooth: MGMT ver 1.23 [ 152.044826][T12871] FAULT_INJECTION: forcing a failure. [ 152.044826][T12871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.044843][T12871] CPU: 1 UID: 0 PID: 12871 Comm: syz.6.2455 Not tainted syzkaller #0 PREEMPT [ 152.044855][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 152.044867][T12871] Call trace: [ 152.044870][T12871] show_stack+0x2c/0x3c (C) [ 152.044893][T12871] __dump_stack+0x30/0x40 [ 152.044904][T12871] dump_stack_lvl+0xd8/0x12c [ 152.044914][T12871] dump_stack+0x1c/0x28 [ 152.044925][T12871] should_fail_ex+0x418/0x58c [ 152.044936][T12871] should_fail+0x14/0x24 [ 152.044945][T12871] should_fail_usercopy+0x20/0x30 [ 152.044955][T12871] _inline_copy_from_user+0x3c/0x174 [ 152.044964][T12871] bpf_test_init+0xd8/0x154 [ 152.044974][T12871] bpf_prog_test_run_xdp+0x408/0xe0c [ 152.044984][T12871] bpf_prog_test_run+0x1e0/0x250 [ 152.044993][T12871] __sys_bpf+0x6bc/0x82c [ 152.045000][T12871] __arm64_sys_bpf+0xd0/0xec [ 152.045008][T12871] invoke_syscall+0x98/0x244 [ 152.045018][T12871] el0_svc_common+0xec/0x23c [ 152.045027][T12871] do_el0_svc+0x4c/0x5c [ 152.045037][T12871] el0_svc+0x60/0x1d8 [ 152.045046][T12871] el0t_64_sync_handler+0x44/0x104 [ 152.045055][T12871] el0t_64_sync+0x198/0x19c [ 152.210821][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2464'. [ 152.291920][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2466'. [ 152.402211][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2477'. [ 152.488469][T12939] FAULT_INJECTION: forcing a failure. [ 152.488469][T12939] name failslab, interval 1, probability 0, space 0, times 0 [ 152.488484][T12939] CPU: 0 UID: 0 PID: 12939 Comm: syz.9.2480 Not tainted syzkaller #0 PREEMPT [ 152.488494][T12939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 152.488505][T12939] Call trace: [ 152.488508][T12939] show_stack+0x2c/0x3c (C) [ 152.488525][T12939] __dump_stack+0x30/0x40 [ 152.488536][T12939] dump_stack_lvl+0xd8/0x12c [ 152.488545][T12939] dump_stack+0x1c/0x28 [ 152.488554][T12939] should_fail_ex+0x418/0x58c [ 152.488565][T12939] should_failslab+0xc4/0x120 [ 152.488576][T12939] __kmalloc_noprof+0x108/0x6c8 [ 152.488587][T12939] tomoyo_encode2+0x10c/0x330 [ 152.488596][T12939] tomoyo_encode+0x34/0x50 [ 152.488605][T12939] tomoyo_realpath_from_path+0x488/0x4dc [ 152.488614][T12939] tomoyo_path_number_perm+0x1f0/0x500 [ 152.488622][T12939] tomoyo_file_ioctl+0x2c/0x3c [ 152.488631][T12939] security_file_ioctl+0xdc/0x2b0 [ 152.488639][T12939] __arm64_sys_ioctl+0xb0/0x1cc [ 152.488650][T12939] invoke_syscall+0x98/0x244 [ 152.488660][T12939] el0_svc_common+0xec/0x23c [ 152.488669][T12939] do_el0_svc+0x4c/0x5c [ 152.488679][T12939] el0_svc+0x60/0x1d8 [ 152.488688][T12939] el0t_64_sync_handler+0x44/0x104 [ 152.488697][T12939] el0t_64_sync+0x198/0x19c [ 152.488709][T12939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.808888][T12956] ip6gre1: entered promiscuous mode [ 152.808897][T12956] ip6gre1: entered allmulticast mode [ 152.905012][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2491'. [ 152.926645][T12965] atomic_op 00000000d91733ba conn xmit_atomic 0000000000000000 [ 153.006970][T12974] veth0_macvtap: Caught tx_queue_len zero misconfig [ 153.048249][T12978] loop6: detected capacity change from 0 to 1024 [ 153.049091][T12978] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.064913][T12978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.195368][T12984] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 153.247905][T12991] netlink: 'syz.9.2502': attribute type 10 has an invalid length. [ 153.372332][T12999] team_slave_1: Caught tx_queue_len zero misconfig [ 153.382050][T12999] md/raid:md0: not clean -- starting background reconstruction [ 153.382137][T12999] md/raid:md0: device ram1 operational as raid disk 1 [ 153.385903][T12999] md/raid:md0: cannot start dirty degraded array. [ 153.412568][T13005] : renamed from bond0 (while UP) [ 153.452418][T13009] ip6t_rt: too many addresses specified [ 153.552351][T12999] md/raid:md0: failed to run raid set. [ 153.552356][T12999] md: pers->run() failed ... [ 153.871413][T13030] FAULT_INJECTION: forcing a failure. [ 153.871413][T13030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.871426][T13030] CPU: 0 UID: 0 PID: 13030 Comm: syz.7.2514 Not tainted syzkaller #0 PREEMPT [ 153.871438][T13030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 153.871452][T13030] Call trace: [ 153.871455][T13030] show_stack+0x2c/0x3c (C) [ 153.871474][T13030] __dump_stack+0x30/0x40 [ 153.871486][T13030] dump_stack_lvl+0xd8/0x12c [ 153.871495][T13030] dump_stack+0x1c/0x28 [ 153.871505][T13030] should_fail_ex+0x418/0x58c [ 153.871515][T13030] should_fail+0x14/0x24 [ 153.871525][T13030] should_fail_usercopy+0x20/0x30 [ 153.871535][T13030] simple_read_from_buffer+0xc4/0x238 [ 153.871545][T13030] proc_fail_nth_read+0x1a8/0x248 [ 153.871553][T13030] vfs_read+0x230/0x8c8 [ 153.871563][T13030] ksys_read+0x12c/0x228 [ 153.871573][T13030] __arm64_sys_read+0x84/0x98 [ 153.871582][T13030] invoke_syscall+0x98/0x244 [ 153.871593][T13030] el0_svc_common+0xec/0x23c [ 153.871602][T13030] do_el0_svc+0x4c/0x5c [ 153.871612][T13030] el0_svc+0x60/0x1d8 [ 153.871621][T13030] el0t_64_sync_handler+0x44/0x104 [ 153.871630][T13030] el0t_64_sync+0x198/0x19c [ 154.044574][T11964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.068998][T13044] binder: 13043:13044 tried to acquire reference to desc 0, got 1 instead [ 154.069209][T13044] binder: 13043:13044 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 154.069221][T13044] binder: 13044 RLIMIT_NICE not set [ 154.069232][T13044] binder: 13044 RLIMIT_NICE not set [ 154.069477][ T4801] binder: release 13043:13044 transaction 140 out, still active [ 154.069488][ T4801] binder: undelivered TRANSACTION_COMPLETE [ 154.086009][ T4801] binder: release 13043:13044 transaction 140 in, still active [ 154.086025][ T4801] binder: send failed reply for transaction 140, target dead [ 154.218261][T13056] ip6gre1: entered promiscuous mode [ 154.218270][T13056] ip6gre1: entered allmulticast mode [ 154.257249][T13062] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2526'. [ 154.263276][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2527'. [ 154.279554][T13068] FAULT_INJECTION: forcing a failure. [ 154.279554][T13068] name failslab, interval 1, probability 0, space 0, times 0 [ 154.279571][T13068] CPU: 1 UID: 0 PID: 13068 Comm: syz.7.2528 Not tainted syzkaller #0 PREEMPT [ 154.279583][T13068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 154.279596][T13068] Call trace: [ 154.279599][T13068] show_stack+0x2c/0x3c (C) [ 154.279616][T13068] __dump_stack+0x30/0x40 [ 154.279626][T13068] dump_stack_lvl+0xd8/0x12c [ 154.279636][T13068] dump_stack+0x1c/0x28 [ 154.279645][T13068] should_fail_ex+0x418/0x58c [ 154.279656][T13068] should_failslab+0xc4/0x120 [ 154.279667][T13068] __kmalloc_noprof+0x108/0x6c8 [ 154.279678][T13068] tomoyo_encode2+0x10c/0x330 [ 154.279687][T13068] tomoyo_encode+0x34/0x50 [ 154.279696][T13068] tomoyo_realpath_from_path+0x488/0x4dc [ 154.279705][T13068] tomoyo_path_number_perm+0x1f0/0x500 [ 154.279713][T13068] tomoyo_file_ioctl+0x2c/0x3c [ 154.279722][T13068] security_file_ioctl+0xdc/0x2b0 [ 154.279730][T13068] __arm64_sys_ioctl+0xb0/0x1cc [ 154.279740][T13068] invoke_syscall+0x98/0x244 [ 154.279751][T13068] el0_svc_common+0xec/0x23c [ 154.279761][T13068] do_el0_svc+0x4c/0x5c [ 154.279770][T13068] el0_svc+0x60/0x1d8 [ 154.279779][T13068] el0t_64_sync_handler+0x44/0x104 [ 154.279788][T13068] el0t_64_sync+0x198/0x19c [ 154.279800][T13068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.281223][T13067] loop9: detected capacity change from 0 to 128 [ 154.281629][T13067] vfat: Bad value for 'time_offset' [ 154.617849][ C0] net_ratelimit: 400 callbacks suppressed [ 155.449028][T13132] ip6gre1: entered promiscuous mode [ 155.449036][T13132] ip6gre1: entered allmulticast mode [ 155.555345][T13145] overlayfs: missing 'lowerdir' [ 155.667101][T13160] loop7: detected capacity change from 0 to 512 [ 155.668069][T13160] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 155.669446][T13160] EXT4-fs (loop7): failed to open journal device unknown-block(129,0) -ENXIO [ 155.775750][T13174] overlayfs: missing 'lowerdir' [ 155.866277][T13178] FAULT_INJECTION: forcing a failure. [ 155.866277][T13178] name failslab, interval 1, probability 0, space 0, times 0 [ 155.866297][T13178] CPU: 0 UID: 0 PID: 13178 Comm: syz.3.2573 Not tainted syzkaller #0 PREEMPT [ 155.866312][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 155.866327][T13178] Call trace: [ 155.866331][T13178] show_stack+0x2c/0x3c (C) [ 155.866349][T13178] __dump_stack+0x30/0x40 [ 155.866360][T13178] dump_stack_lvl+0xd8/0x12c [ 155.866370][T13178] dump_stack+0x1c/0x28 [ 155.866379][T13178] should_fail_ex+0x418/0x58c [ 155.866390][T13178] should_failslab+0xc4/0x120 [ 155.866401][T13178] __kmalloc_noprof+0x108/0x6c8 [ 155.866412][T13178] tomoyo_encode2+0x10c/0x330 [ 155.866422][T13178] tomoyo_encode+0x34/0x50 [ 155.866430][T13178] tomoyo_realpath_from_path+0x488/0x4dc [ 155.866439][T13178] tomoyo_path_number_perm+0x1f0/0x500 [ 155.866447][T13178] tomoyo_file_ioctl+0x2c/0x3c [ 155.866456][T13178] security_file_ioctl+0xdc/0x2b0 [ 155.866465][T13178] __arm64_sys_ioctl+0xb0/0x1cc [ 155.866475][T13178] invoke_syscall+0x98/0x244 [ 155.866485][T13178] el0_svc_common+0xec/0x23c [ 155.866495][T13178] do_el0_svc+0x4c/0x5c [ 155.866504][T13178] el0_svc+0x60/0x1d8 [ 155.866514][T13178] el0t_64_sync_handler+0x44/0x104 [ 155.866522][T13178] el0t_64_sync+0x198/0x19c [ 155.866641][T13178] ERROR: Out of memory at tomoyo_realpath_from_path. [ 155.965136][T13182] Device name cannot be null; rc = [-22] [ 156.134516][T13180] FAULT_INJECTION: forcing a failure. [ 156.134516][T13180] name fail_futex, interval 1, probability 0, space 0, times 0 [ 156.134536][T13180] CPU: 1 UID: 0 PID: 13180 Comm: syz.3.2574 Not tainted syzkaller #0 PREEMPT [ 156.134547][T13180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 156.134562][T13180] Call trace: [ 156.134565][T13180] show_stack+0x2c/0x3c (C) [ 156.134586][T13180] __dump_stack+0x30/0x40 [ 156.134601][T13180] dump_stack_lvl+0xd8/0x12c [ 156.134613][T13180] dump_stack+0x1c/0x28 [ 156.134624][T13180] should_fail_ex+0x418/0x58c [ 156.134639][T13180] should_fail+0x14/0x24 [ 156.134650][T13180] get_futex_key+0x1ec/0x12b0 [ 156.134661][T13180] futex_wake+0x10c/0x594 [ 156.134671][T13180] do_futex+0x2c4/0x378 [ 156.134681][T13180] __arm64_sys_futex+0x2e4/0x418 [ 156.134692][T13180] invoke_syscall+0x98/0x244 [ 156.134704][T13180] el0_svc_common+0xec/0x23c [ 156.134716][T13180] do_el0_svc+0x4c/0x5c [ 156.134730][T13180] el0_svc+0x60/0x1d8 [ 156.134741][T13180] el0t_64_sync_handler+0x44/0x104 [ 156.134752][T13180] el0t_64_sync+0x198/0x19c [ 156.255954][T13191] loop6: detected capacity change from 0 to 128 [ 156.261803][T13191] EXT4-fs (loop6): Test dummy encryption mode enabled [ 156.263471][T13191] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.294239][T11964] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.374073][T13199] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.518803][T13199] md/raid:md0: not clean -- starting background reconstruction [ 156.518920][T13199] md/raid:md0: device ram1 operational as raid disk 1 [ 156.524882][T13199] md/raid:md0: starting dirty degraded array with PPL. [ 156.524895][T13199] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 156.524991][T13199] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 156.525002][T13199] CPU: 0 UID: 0 PID: 13199 Comm: syz.6.2579 Not tainted syzkaller #0 PREEMPT [ 156.525016][T13199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 156.525031][T13199] Call trace: [ 156.525035][T13199] show_stack+0x2c/0x3c (C) [ 156.525057][T13199] __dump_stack+0x30/0x40 [ 156.525070][T13199] dump_stack_lvl+0xd8/0x12c [ 156.525082][T13199] dump_stack+0x1c/0x28 [ 156.525093][T13199] sysfs_warn_dup+0x9c/0xb8 [ 156.525106][T13199] sysfs_add_file_mode_ns+0x230/0x2a4 [ 156.525117][T13199] internal_create_group+0x550/0xb30 [ 156.525130][T13199] sysfs_create_group+0x2c/0x3c [ 156.525142][T13199] raid5_run+0x1428/0x1b68 [ 156.525151][T13199] md_run+0xb10/0x19e8 [ 156.525164][T13199] do_md_run+0x4c/0x4e4 [ 156.525176][T13199] array_state_store+0x7a8/0xce8 [ 156.525186][T13199] md_attr_store+0x304/0x438 [ 156.525195][T13199] sysfs_kf_write+0xe0/0x108 [ 156.525206][T13199] kernfs_fop_write_iter+0x260/0x3b8 [ 156.525217][T13199] vfs_write+0x51c/0xa0c [ 156.525230][T13199] ksys_write+0x12c/0x228 [ 156.525242][T13199] __arm64_sys_write+0x84/0x98 [ 156.525254][T13199] invoke_syscall+0x98/0x244 [ 156.525266][T13199] el0_svc_common+0xec/0x23c [ 156.525278][T13199] do_el0_svc+0x4c/0x5c [ 156.525290][T13199] el0_svc+0x60/0x1d8 [ 156.525301][T13199] el0t_64_sync_handler+0x44/0x104 [ 156.525312][T13199] el0t_64_sync+0x198/0x19c [ 156.525556][T13199] raid5: failed to create sysfs attributes for md0 [ 156.526603][T13199] md/raid:md0: PPL space too small on ram1 [ 156.761162][T13199] md/raid:md0: failed to run raid set. [ 156.761168][T13199] md: pers->run() failed ... [ 156.801148][T13210] overlayfs: missing 'lowerdir' [ 157.775862][T13220] FAULT_INJECTION: forcing a failure. [ 157.775862][T13220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.775884][T13220] CPU: 0 UID: 0 PID: 13220 Comm: syz.6.2586 Not tainted syzkaller #0 PREEMPT [ 157.775896][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 157.775910][T13220] Call trace: [ 157.775914][T13220] show_stack+0x2c/0x3c (C) [ 157.775931][T13220] __dump_stack+0x30/0x40 [ 157.775941][T13220] dump_stack_lvl+0xd8/0x12c [ 157.775951][T13220] dump_stack+0x1c/0x28 [ 157.775960][T13220] should_fail_ex+0x418/0x58c [ 157.775971][T13220] should_fail+0x14/0x24 [ 157.775980][T13220] should_fail_usercopy+0x20/0x30 [ 157.775990][T13220] _inline_copy_from_user+0x3c/0x188 [ 157.776000][T13220] video_usercopy+0x2d0/0xe88 [ 157.776007][T13220] video_ioctl2+0x3c/0x50 [ 157.776014][T13220] v4l2_ioctl+0x148/0x18c [ 157.776024][T13220] __arm64_sys_ioctl+0x154/0x1cc [ 157.776035][T13220] invoke_syscall+0x98/0x244 [ 157.776045][T13220] el0_svc_common+0xec/0x23c [ 157.776054][T13220] do_el0_svc+0x4c/0x5c [ 157.776063][T13220] el0_svc+0x60/0x1d8 [ 157.776073][T13220] el0t_64_sync_handler+0x44/0x104 [ 157.776082][T13220] el0t_64_sync+0x198/0x19c [ 158.210759][ T4708] Bluetooth: hci4: command 0x0406 tx timeout [ 158.868691][T13160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.911863][T13229] binder: 13228:13229 tried to acquire reference to desc 0, got 1 instead [ 158.912264][T13229] binder: 13228:13229 ioctl c0306201 0 returned -14 [ 158.948236][ T4801] binder: send failed reply for transaction 145 to 13228:13229 [ 158.969259][ T4801] binder: undelivered TRANSACTION_COMPLETE [ 158.969274][ T4801] binder: undelivered TRANSACTION_ERROR: 29189 [ 158.985058][T13239] ================================================================== [ 158.985066][T13239] BUG: KASAN: slab-out-of-bounds in string_nocheck+0xd8/0x140 [ 158.985080][T13239] Read of size 1 at addr ffff0000de9f9a9c by task syz.3.2593/13239 [ 158.985087][T13239] [ 158.985091][T13239] CPU: 0 UID: 0 PID: 13239 Comm: syz.3.2593 Not tainted syzkaller #0 PREEMPT [ 158.985100][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 158.985110][T13239] Call trace: [ 158.985113][T13239] show_stack+0x2c/0x3c (C) [ 158.985126][T13239] __dump_stack+0x30/0x40 [ 158.985136][T13239] dump_stack_lvl+0xd8/0x12c [ 158.985145][T13239] print_address_description+0xb0/0x238 [ 158.985153][T13239] print_report+0x68/0x84 [ 158.985160][T13239] kasan_report+0x8c/0xc4 [ 158.985168][T13239] __asan_report_load1_noabort+0x20/0x2c [ 158.985177][T13239] string_nocheck+0xd8/0x140 [ 158.985184][T13239] string+0x8c/0xc8 [ 158.985194][T13239] vsnprintf+0x880/0xd10 [ 158.985204][T13239] pointer+0x5e8/0x6b4 [ 158.985213][T13239] vsnprintf+0x618/0xd10 [ 158.985223][T13239] vprintk_store+0x344/0xb94 [ 158.985233][T13239] vprintk_emit+0x1bc/0x514 [ 158.985241][T13239] vprintk_default+0x54/0x80 [ 158.985254][T13239] vprintk+0x9c/0x13c [ 158.985264][T13239] _printk+0xe0/0x130 [ 158.985274][T13239] __dynamic_pr_debug+0x148/0x1e4 [ 158.985286][T13239] nfc_llcp_get_sdp_ssap+0x350/0x3fc [ 158.985294][T13239] llcp_sock_bind+0x2e0/0x58c [ 158.985302][T13239] __sys_bind+0x1c4/0x268 [ 158.985311][T13239] __arm64_sys_bind+0x84/0x9c [ 158.985319][T13239] invoke_syscall+0x98/0x244 [ 158.985329][T13239] el0_svc_common+0xec/0x23c [ 158.985338][T13239] do_el0_svc+0x4c/0x5c [ 158.985347][T13239] el0_svc+0x60/0x1d8 [ 158.985356][T13239] el0t_64_sync_handler+0x44/0x104 [ 158.985364][T13239] el0t_64_sync+0x198/0x19c [ 158.985372][T13239] [ 158.985374][T13239] Allocated by task 13239: [ 158.985378][T13239] kasan_save_track+0x40/0x78 [ 158.985384][T13239] kasan_save_alloc_info+0x40/0x50 [ 158.985391][T13239] __kasan_kmalloc+0x9c/0xb4 [ 158.985397][T13239] __kmalloc_node_track_caller_noprof+0x440/0x6e0 [ 158.985404][T13239] kmemdup_noprof+0x44/0x8c [ 158.985410][T13239] llcp_sock_bind+0x2b0/0x58c [ 158.985417][T13239] __sys_bind+0x1c4/0x268 [ 158.985423][T13239] __arm64_sys_bind+0x84/0x9c [ 158.985429][T13239] invoke_syscall+0x98/0x244 [ 158.985437][T13239] el0_svc_common+0xec/0x23c [ 158.985445][T13239] do_el0_svc+0x4c/0x5c [ 158.985452][T13239] el0_svc+0x60/0x1d8 [ 158.985459][T13239] el0t_64_sync_handler+0x44/0x104 [ 158.985466][T13239] el0t_64_sync+0x198/0x19c [ 158.985472][T13239] [ 158.985473][T13239] The buggy address belongs to the object at ffff0000de9f9a80 [ 158.985473][T13239] which belongs to the cache kmalloc-32 of size 32 [ 158.985479][T13239] The buggy address is located 0 bytes to the right of [ 158.985479][T13239] allocated 28-byte region [ffff0000de9f9a80, ffff0000de9f9a9c) [ 158.985487][T13239] [ 158.985489][T13239] The buggy address belongs to the physical page: [ 158.985493][T13239] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e9f9 [ 158.985499][T13239] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 158.985506][T13239] page_type: f5(slab) [ 158.985512][T13239] raw: 05ffc00000000000 ffff0000c0001780 dead000000000100 dead000000000122 [ 158.985518][T13239] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 158.985522][T13239] page dumped because: kasan: bad access detected [ 158.985525][T13239] [ 158.985527][T13239] Memory state around the buggy address: [ 158.985530][T13239] ffff0000de9f9980: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 158.985535][T13239] ffff0000de9f9a00: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 158.985539][T13239] >ffff0000de9f9a80: 00 00 00 04 fc fc fc fc fa fb fb fb fc fc fc fc [ 158.985543][T13239] ^ [ 158.985547][T13239] ffff0000de9f9b00: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 158.985551][T13239] ffff0000de9f9b80: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 158.985554][T13239] ================================================================== [ 158.985557][T13239] Disabling lock debugging due to kernel taint [ 159.016906][T13240] tipc: Enabling of bearer rejected, failed to enable media [ 159.029779][T13239] tipc: Enabling of bearer rejected, failed to enable media [ 159.160849][T13241] Device name cannot be null; rc = [-22] [ 159.209827][T13240] loop3: detected capacity change from 0 to 512 [ 159.215515][T13240] EXT4-fs: Mount option(s) incompatible with ext2 [ 159.332375][ T4708] Bluetooth: hci2: command 0x0406 tx timeout [ 160.005853][ C0] net_ratelimit: 115 callbacks suppressed [ 160.690068][ T4708] Bluetooth: hci0: command 0x0406 tx timeout [ 161.983739][ T4719] Bluetooth: hci3: command 0x0406 tx timeout [ 165.479447][ C0] net_ratelimit: 104 callbacks suppressed