last executing test programs: 7.904635374s ago: executing program 1 (id=577): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000752200004200000040000008000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808840, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES64=0x0, @ANYRES8, @ANYBLOB="a6ab4dc02b937b72fac79643bb18a01434f213db938c7647fb8c6a4cdfffecea60ffa1642a15d787e8444b15cbda989d6a06e067e80473593fad421bc9d52f69b54bc773e435995dc238ba7c44ce9bd91dfe5273650afc087df541bb9adad8f603b83cc922200c1f5d42a407cc88c915ea67f01380db04b415c7101c8cedde22a387ee16ffbc245328daf81733a6731182b3c70175", @ANYRES64, @ANYBLOB="cc6d092b99bc4683a74fca8b808a2e6bceb30df5e8954f"], 0x2, 0x23e, &(0x7f0000000f00)="$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") ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xff) r5 = socket(0xa, 0x3, 0x87) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd2f0010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) 7.777203764s ago: executing program 4 (id=580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/mdstat\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/256, 0x100) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x24, 0x0, 0xc, 0x0, 0x10003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000001, 0x200, 0x9, 0x4, 0x0, 0x1}, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 7.713191482s ago: executing program 1 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='file drivers/md/raid5.c +p', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='4096', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, &(0x7f00000004c0)='1:', 0x2) write(r5, &(0x7f0000000500)='1:2', 0x3) write(r5, &(0x7f0000000540)='1:3', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0', 0x1) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, &(0x7f0000000640)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000006c0)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000007c0)='active', 0x6) 7.670162473s ago: executing program 4 (id=582): socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) 7.225180726s ago: executing program 3 (id=588): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd08, &(0x7f0000000000)="0400000000000000000000003801") (fail_nth: 2) 7.180592909s ago: executing program 3 (id=590): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="ff01ffffffffffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000300"/28], 0x50) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r4, 0x0) r5 = getuid() r6 = getegid() getgroups(0x3, &(0x7f0000000140)=[0x0, 0xee01, 0xffffffffffffffff]) r8 = getegid() r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f000000a240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x207d) write$FUSE_INIT(r9, &(0x7f0000000100)={0x50, 0x0, r10, {0x7, 0x2b, 0x0, 0x52588107, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) syz_fuse_handle_req(r9, &(0x7f0000008240)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f520511080c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc662218715be66704be83e9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916a42630dac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2afb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952344056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c01002b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594069e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x3, 0x1, 0x0, 0x8, {0xfffffffffffffffb, 0x2, 0x8, 0x8000000000007, 0xc28d, 0x8000000000000004, 0x0, 0x6, 0x0, 0x8000, 0x48aa, r11, r12, 0x4c5, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0xee01, 0x0, 0xee01, 0x0]) r14 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r14, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)=ANY=[@ANYBLOB="10000000f4030000000000000000000010000000e903"], 0x420}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r15 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x13a322) r16 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xc2602, 0xe1) ioctl$LOOP_CONFIGURE(r15, 0x4c0a, &(0x7f0000000040)={r16, 0x0, {0x0, 0x0, 0x0, 0x2, 0x4000000000000ffe, 0x0, 0x0, 0xb, 0x1d, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061b74df2cfc06c89f3d9a234b30c50997d3bef409ff2176fe7bfe55cd4aa4243202e6cb9af2e70c7f3f800f2f7b6aa54cc50a1fcaed1e831fa79a", "6752ad3300", [0x5, 0x200]}}) ioctl$LOOP_GET_STATUS64(r15, 0x4c05, &(0x7f0000000300)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r18 = getegid() fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010006000000000002000600", @ANYRES32=r4, @ANYBLOB="02000000945564741a93df8bd07c5a63608400e697165ae12a5727b795abe161c5f821ac91ad40cae0b5597ea01c3c876462b0e0ad88f5ebefdb37faa79b49aa122cf6cefb89d513d34e23c6e02d8ccfb90843858360a57d9a40492429638dcbbb0055b2bb36779c1f32d433209332321949f9446ab8588e8d39f2f777ffcb047d6dc127b685fd06b1381719f45406", @ANYRES32=r5, @ANYBLOB="040006000000000008000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r17, @ANYBLOB="08000500", @ANYRES32=r18, @ANYBLOB="10000100000000002000030000000000"], 0x74, 0x3) r19 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r19, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") 7.042162258s ago: executing program 3 (id=592): socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'lo\x00'}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000500)="$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") 6.0834172s ago: executing program 4 (id=593): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, @can, @ethernet={0x1, @random="217902ff54f1"}, @xdp={0x2c, 0x0, 0x0, 0x3b}, 0x9, 0x0, 0x0, 0x0, 0x97, 0x0, 0x8de2, 0x6, 0x7}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4232, 0x4) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000e00000059078ac1414ff0a0101008902000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0xff) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) sendfile(r0, r5, 0x0, 0x1c) 5.992812595s ago: executing program 2 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0400e1ea32b1f05d741bc439b8fd005c"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x4}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f00000002c0)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x1b, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180a0000000000000023192ada414d4b512142df75701888"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x1b, 0xffffffffffffffff, 0x0, 0x3a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffeee}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01082bbd7000fedbdf250b00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000000000024005080050002000200000005000200030000000800030001ac0f0008000700000000005a0fa2ed8922213f84f3a134739ed865f8bb1776503421f07c96f1b4ab21142a9fd13d65ef8fcecd5a3c16c454aaebb18dcedfb9f4c314e566b10151fbbef2e38bb7a8351ea03e8492"], 0x4c}, 0x1, 0x0, 0x0, 0x24008005}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x37, 0x1f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40104}, 0x4000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r2, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) 5.522191421s ago: executing program 3 (id=596): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.510387115s ago: executing program 1 (id=597): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_1\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) 5.416682916s ago: executing program 2 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x240800, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x8920a0, 0x0, 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 5.40401172s ago: executing program 1 (id=600): setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x6, 0x1, 0x3, 0x8, 0x2, 0x89}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b27, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105"], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x18}}, 0x0) 5.384032548s ago: executing program 0 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000000400000000000000000000000000007468696e2d706f6f6c000000000000002e2f6465762f6c6f6f7030202e2f6465762f6c6f6f7031203132382030", 0x45) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000002000000000000007e0100003801000001") 5.366054089s ago: executing program 2 (id=602): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (fail_nth: 2) 5.320257488s ago: executing program 0 (id=603): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000000400000000000000000000000000007468696e2d706f6f6c000000000000002e2f6465762f6c6f6f7030202e2f6465762f6c6f6f7031203132382030", 0x45) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801000001") 5.256946993s ago: executing program 1 (id=604): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x69) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 5.207048136s ago: executing program 0 (id=605): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.16390431s ago: executing program 4 (id=606): socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'lo\x00'}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000500)="$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") 5.112886132s ago: executing program 2 (id=607): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) 4.447137948s ago: executing program 3 (id=608): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e22, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94, 0x1}, 0x9c) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e22, @rand_addr=0x64010182}]}, &(0x7f0000000100)=0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) 177.601384ms ago: executing program 0 (id=609): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) (fail_nth: 2) 158.239652ms ago: executing program 3 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000680)=ANY=[@ANYBLOB='nonumtail=0,allow_utime=00000000000000002200003,utf8=0,iocharset=iso8859-6,shortname=win95,codepage=850,iocharset=macromanian,uni_xlate=1,uni_xlate=0,shortname=win95,utf8=0,utf8=0,obj_user=,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7063723d30303030303030303030303030303034343739302c736d61636b66736465663d2d2c6f626a5f747970653daf2da0a7563d2c7375626a5f757365723d2f2c657569643d", @ANYRESDEC=0x0, @ANYBLOB='\b\x00'], 0x25, 0x35b, &(0x7f0000000200)="$eJzs3T1sW1UUAODjPMd2IpVkQKpgMmxIqGqCGGAhUVWkigxQZPG3YKkpP7FBioWlZIibBcQIYkGCia0DjJ0RA0JsDKwUCRUQC90qteIh+z3/JH5pmiEpP983RDfnnuN73/VT7ETJyesrsXFpNi7fvHkjarVSlFfOrcStUizGTCSRuRIAwH/JrTSNP9PMIPDM3bI/no/ZbFQ5kd0BAMdh8Pr/xqlxoHo/dwMAnISp7/+LPV8YfffYtgUAHKOp1/9H90zv+zF/efQ7AQDAv9eLr7z63OpaxMV6vRbR/qDb6Dbi6fH86uV4K1qxHmdjIe5EZG8UsncL/Y/PXlg7f7be9+tiNPoV3UZEu9dtZO8UVpNBfTWWYiEW8/p0VJ/065cG9fWIuNIbrB/tUrcxG/P5+j/Nx3osx0I8OFUfcWHt/HI9f4BGe1jfi9iN2vAi+vs/Ewvxw8zgk0vRr80eqx/ZWarXz6Vre+q7V6uDPAAAAAAAAAAAAAAAAAAAAAAAOA5n5iLvnlNfHPW/Sdu97vsX84T69Pygv082nfcH2s36A6XVYXeeD5P9/YH29ufpNsoxc1+vHAAAAAAAAAAAAAAAAAAAAP45OluVaLZa65udre2N8aDS6k1E3vnuy2/mYn/O28k4EuXs4fbk5LGYqEpiVJ6OytNkT04+SCLy5FI0r14b7Xgypzq6iqny/qA6NVXK99RstU498stnRVV/jSNJjKZqhUuU8vUnptoPZKGi/dx9UOpsLR+Scz1N04PKdz6dropaRHnqiTt4MOzIcHjytzfefOiJzuknO6XyRvPrvOnDY48vvHT9ky9+32i2Ij+aVquy2bmTHv00Rk/B+N4o5edcKrgTige748juZmermfz4x8sPf/T9vuSk+P5JJyPvHbzWV/sjlWzQ3+a9XOlswc1fPHjt9vDurcTweO/5ME9/vtK8tvPzb8PDPKxq4ouERh0AAAAAAAAAAAAAAAAAAHAiJv5W/AieeuH4dgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ2/8//+3tmfy2PbuMLJxlMHtXkxPVdc3OwcuPndilwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/c3wEAAP//6Y9pRQ==") semtimedop(0x0, &(0x7f0000000580), 0x0, &(0x7f00000005c0)) prlimit64(0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_int(r1, 0x1, 0x23, 0x0, &(0x7f0000000380)) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0xd, 0x40600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x17, {0xa, 0x4e1f, 0x3, @local, 0x4}}, 0x24) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) 158.09217ms ago: executing program 2 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6, 0x3, "bf69"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 154.353685ms ago: executing program 1 (id=612): socket(0x2, 0x80805, 0x0) r0 = dup(0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x1, 0x48000047, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8840) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 154.17033ms ago: executing program 4 (id=613): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf09000000000000"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 68.919366ms ago: executing program 0 (id=614): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) 28.894339ms ago: executing program 0 (id=615): socket(0x2, 0x80805, 0x0) r0 = dup(0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x1, 0x48000047, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8840) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 11.830031ms ago: executing program 2 (id=616): socket(0x2, 0x80805, 0x0) r0 = dup(0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x1, 0x48000047, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8840) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0x1a7, 0x498c3, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 0s ago: executing program 4 (id=617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 28.034218][ T4697] cgroup: Unknown subsys name 'net' [ 28.164238][ T4697] cgroup: Unknown subsys name 'cpuset' [ 28.166401][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.336987][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.164610][ T4723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.164911][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.165333][ T4724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.165834][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.166704][ T4723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.167077][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.167379][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.167563][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.167735][ T4724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.168028][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.168245][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.168506][ T4723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.168779][ T4723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.169117][ T4723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.170192][ T4717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.170396][ T4717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.170862][ T4717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.171386][ T4717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.172044][ T4717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.172172][ T4717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.175354][ T4717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.177754][ T4725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.195723][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.198488][ T4717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.200103][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.531491][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.531828][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.531983][ T4711] bridge_slave_0: entered allmulticast mode [ 29.532473][ T4711] bridge_slave_0: entered promiscuous mode [ 29.546427][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.546514][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.546614][ T4711] bridge_slave_1: entered allmulticast mode [ 29.547102][ T4711] bridge_slave_1: entered promiscuous mode [ 29.562203][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.571065][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.599953][ T4711] team0: Port device team_slave_0 added [ 29.608500][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.608599][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.608670][ T4710] bridge_slave_0: entered allmulticast mode [ 29.609121][ T4710] bridge_slave_0: entered promiscuous mode [ 29.614937][ T4711] team0: Port device team_slave_1 added [ 29.626595][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.628148][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.629578][ T4710] bridge_slave_1: entered allmulticast mode [ 29.631242][ T4710] bridge_slave_1: entered promiscuous mode [ 29.640331][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.640363][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.640394][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.641493][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.641502][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.641518][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.660993][ T4711] hsr_slave_0: entered promiscuous mode [ 29.661384][ T4711] hsr_slave_1: entered promiscuous mode [ 29.677283][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.691594][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.721097][ T4710] team0: Port device team_slave_0 added [ 29.721956][ T4710] team0: Port device team_slave_1 added [ 29.742076][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.742110][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.742126][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.745185][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.745392][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.745462][ T4716] bridge_slave_0: entered allmulticast mode [ 29.745929][ T4716] bridge_slave_0: entered promiscuous mode [ 29.747234][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.747255][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.747312][ T4716] bridge_slave_1: entered allmulticast mode [ 29.747754][ T4716] bridge_slave_1: entered promiscuous mode [ 29.756569][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.757708][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.765911][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.765938][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.765954][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.784480][ T4716] team0: Port device team_slave_0 added [ 29.786452][ T4716] team0: Port device team_slave_1 added [ 29.807852][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.810627][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.811484][ T4718] bridge_slave_0: entered allmulticast mode [ 29.812016][ T4718] bridge_slave_0: entered promiscuous mode [ 29.815040][ T4710] hsr_slave_0: entered promiscuous mode [ 29.815374][ T4710] hsr_slave_1: entered promiscuous mode [ 29.815602][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 29.815667][ T4710] Cannot create hsr debugfs directory [ 29.826668][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.826701][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.827049][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.827520][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.827584][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.827656][ T4718] bridge_slave_1: entered allmulticast mode [ 29.828107][ T4718] bridge_slave_1: entered promiscuous mode [ 29.846312][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.846340][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.846359][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.859357][ T4716] hsr_slave_0: entered promiscuous mode [ 29.860405][ T4716] hsr_slave_1: entered promiscuous mode [ 29.860605][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 29.860622][ T4716] Cannot create hsr debugfs directory [ 29.861801][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.866391][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.867801][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.869234][ T4709] bridge_slave_0: entered allmulticast mode [ 29.870828][ T4709] bridge_slave_0: entered promiscuous mode [ 29.871781][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.871801][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.871894][ T4709] bridge_slave_1: entered allmulticast mode [ 29.872312][ T4709] bridge_slave_1: entered promiscuous mode [ 29.881847][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.888244][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.898695][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.910304][ T4718] team0: Port device team_slave_0 added [ 29.918535][ T4709] team0: Port device team_slave_0 added [ 29.922436][ T4709] team0: Port device team_slave_1 added [ 29.927022][ T4718] team0: Port device team_slave_1 added [ 29.958577][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.959625][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.959648][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.960449][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.960460][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.960472][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.970439][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.970451][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.970465][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.971174][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.971182][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.971196][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.971436][ T4711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.975665][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.977936][ T4711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.983384][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.002320][ T4711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.005035][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.011461][ T4711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.014359][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.025779][ T4709] hsr_slave_0: entered promiscuous mode [ 30.026157][ T4709] hsr_slave_1: entered promiscuous mode [ 30.026402][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.026413][ T4709] Cannot create hsr debugfs directory [ 30.037292][ T4718] hsr_slave_0: entered promiscuous mode [ 30.038796][ T4718] hsr_slave_1: entered promiscuous mode [ 30.040315][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.041377][ T4718] Cannot create hsr debugfs directory [ 30.087588][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.089963][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.090321][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.092446][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.094445][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.096783][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.098545][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.101299][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.113508][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.113570][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.113742][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.113775][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.164249][ T4716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.167240][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.168441][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.168467][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.168544][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.168573][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.179632][ T4716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.183562][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.185396][ T4716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.188083][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.190451][ T4716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.193623][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.210257][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.220161][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.220233][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.220318][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.220352][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.229031][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.229510][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.234334][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.236113][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.238954][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.240525][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.250354][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.252911][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.255771][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.257594][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.259820][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.261601][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.264135][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.264844][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.266418][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.279531][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.297974][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.298038][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.298432][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.298452][ T4257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.307928][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.310776][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.312785][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.315215][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.317352][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.319543][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.327352][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.329793][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.347729][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.367231][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.371516][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.375795][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.375839][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.376227][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.376246][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.382238][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.382289][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.396815][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.404375][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.404431][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.439366][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.449245][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.449321][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.449891][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.449912][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.487576][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.512312][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.527169][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.527239][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.527805][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.527826][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.605517][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.629616][ T4711] veth0_vlan: entered promiscuous mode [ 30.644187][ T4711] veth1_vlan: entered promiscuous mode [ 30.659315][ T4711] veth0_macvtap: entered promiscuous mode [ 30.668875][ T4711] veth1_macvtap: entered promiscuous mode [ 30.678405][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.684573][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.695081][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.695307][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.695403][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.695457][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.756988][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.774179][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.774232][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.788893][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.788941][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.808587][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.829961][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.844375][ T4709] veth0_vlan: entered promiscuous mode [ 30.849106][ T4709] veth1_vlan: entered promiscuous mode [ 30.857965][ T4711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.886467][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.904402][ T4709] veth0_macvtap: entered promiscuous mode [ 30.906856][ T4710] veth0_vlan: entered promiscuous mode [ 30.916269][ T4709] veth1_macvtap: entered promiscuous mode [ 30.927087][ T4710] veth1_vlan: entered promiscuous mode [ 30.937140][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.945609][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.948634][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.950818][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.952531][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.955870][ T4718] veth0_vlan: entered promiscuous mode [ 30.959740][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.967957][ T4718] veth1_vlan: entered promiscuous mode [ 30.979576][ T4710] veth0_macvtap: entered promiscuous mode [ 30.984870][ T4716] veth0_vlan: entered promiscuous mode [ 30.997030][ T4710] veth1_macvtap: entered promiscuous mode [ 31.011642][ T4716] veth1_vlan: entered promiscuous mode [ 31.015501][ T4718] veth0_macvtap: entered promiscuous mode [ 31.021514][ T4718] veth1_macvtap: entered promiscuous mode [ 31.033833][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.033879][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.042117][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.047300][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.055778][ T4716] veth0_macvtap: entered promiscuous mode [ 31.057632][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.063267][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.068973][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.069023][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.074949][ T1240] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.075021][ T1240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.075043][ T1240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.075060][ T1240] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.075078][ T1240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.075094][ T1240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.075110][ T1240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.075126][ T1240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.088387][ T4716] veth1_macvtap: entered promiscuous mode [ 31.095078][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.097740][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.102445][ T3839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.117709][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.117774][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.117797][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.195771][ T3839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.195814][ T3839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.213621][ T4719] Bluetooth: hci3: command tx timeout [ 31.213987][ T50] Bluetooth: hci0: command tx timeout [ 31.214110][ T50] Bluetooth: hci1: command tx timeout [ 31.214175][ T50] Bluetooth: hci4: command tx timeout [ 31.235792][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.235832][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.270906][ T3839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.270942][ T3839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.292793][ T4719] Bluetooth: hci2: command tx timeout [ 31.300923][ T4902] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 31.301405][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.301418][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.338422][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.338467][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.366337][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.366375][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.406483][ T4908] loop3: detected capacity change from 0 to 256 [ 31.407087][ T4908] vfat: Unknown parameter 'nnonumtail' [ 31.410437][ T4906] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 31.419976][ T4910] loop2: detected capacity change from 0 to 7 [ 31.428170][ T4910] Dev loop2: unable to read RDB block 7 [ 31.428223][ T4910] loop2: unable to read partition table [ 31.428313][ T4910] loop2: partition table beyond EOD, truncated [ 31.428340][ T4910] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 31.514119][ T4906] md: could not open device unknown-block(1,0). [ 31.514323][ T4918] md: could not open device unknown-block(1,1). [ 31.514868][ T4906] md: could not open device unknown-block(1,2). [ 31.520892][ T4916] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 31.559220][ T4922] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 31.580252][ T4914] md/raid:md0: not clean -- starting background reconstruction [ 31.580546][ T4914] md/raid:md0: device ram0 operational as raid disk 0 [ 31.589637][ T4914] md/raid:md0: not enough operational devices (3/4 failed) [ 31.704024][ T4937] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 31.724729][ T4914] md/raid:md0: failed to run raid set. [ 31.725829][ T4914] md: pers->run() failed ... [ 31.727259][ T4902] md: could not open device unknown-block(1,3). [ 31.729060][ T4929] md: could not open device unknown-block(1,0). [ 31.730056][ T4936] md: could not open device unknown-block(1,1). [ 31.730687][ T4922] md: could not open device unknown-block(1,2). [ 31.731289][ T4922] md: could not open device unknown-block(1,3). [ 31.731414][ T4931] md: could not open device unknown-block(1,0). [ 31.731560][ T4938] md: could not open device unknown-block(1,1). [ 31.759765][ T4922] md/raid:md0: not clean -- starting background reconstruction [ 31.759916][ T4922] md/raid:md0: device ram0 operational as raid disk 0 [ 31.776261][ T4922] md/raid:md0: not enough operational devices (3/4 failed) [ 31.821009][ T4947] loop1: detected capacity change from 0 to 256 [ 31.823809][ T4947] vfat: Unknown parameter 'nnonumtail' [ 31.905860][ T4922] md/raid:md0: failed to run raid set. [ 31.905901][ T4922] md: pers->run() failed ... [ 31.906752][ T4916] md: could not open device unknown-block(1,2). [ 31.906921][ T4925] md: could not open device unknown-block(1,3). [ 31.907056][ T4945] md: could not open device unknown-block(1,1). [ 31.932008][ T4938] md/raid:md0: not clean -- starting background reconstruction [ 31.932464][ T4938] md/raid:md0: device ram0 operational as raid disk 0 [ 32.042125][ T4938] md/raid:md0: not enough operational devices (3/4 failed) [ 32.155461][ T4968] mmap: syz.0.27 (4968) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.385899][ T4971] loop1: detected capacity change from 0 to 512 [ 32.391032][ T4971] EXT4-fs: Ignoring removed oldalloc option [ 32.399576][ T4971] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 32.424285][ T4938] md/raid:md0: failed to run raid set. [ 32.424604][ T4938] md: pers->run() failed ... [ 32.424907][ T4950] md: could not open device unknown-block(1,2). [ 32.437538][ T4971] EXT4-fs (loop1): 1 truncate cleaned up [ 32.440861][ T4971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.464733][ T4969] md/raid:md0: not clean -- starting background reconstruction [ 32.464873][ T4969] md/raid:md0: device ram0 operational as raid disk 0 [ 32.503765][ T4969] md/raid:md0: not enough operational devices (3/4 failed) [ 32.934488][ T4969] md/raid:md0: failed to run raid set. [ 32.935883][ T4969] md: pers->run() failed ... [ 33.263628][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.293500][ T50] Bluetooth: hci4: command tx timeout [ 33.295167][ T4726] Bluetooth: hci1: command tx timeout [ 33.295354][ T4717] Bluetooth: hci0: command tx timeout [ 33.295386][ T4717] Bluetooth: hci3: command tx timeout [ 33.337623][ T5003] Zero length message leads to an empty skb [ 33.372773][ T50] Bluetooth: hci2: command tx timeout [ 33.439110][ T5020] loop0: detected capacity change from 0 to 128 [ 33.472297][ T5020] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 33.495905][ T5027] loop3: detected capacity change from 0 to 256 [ 33.497013][ T5027] vfat: Unknown parameter 'nnonumtail' [ 33.608208][ T9] IPVS: starting estimator thread 0... [ 33.713786][ T5045] IPVS: using max 60 ests per chain, 144000 per kthread [ 33.735901][ T5058] loop3: detected capacity change from 0 to 512 [ 33.751375][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.54'. [ 33.751495][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.54'. [ 33.755430][ T5058] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.53: corrupted inode contents [ 33.755503][ T5058] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.755903][ T5058] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 33.755949][ T5058] loop3: lost filesystem error report for type 5 error -117 [ 33.756075][ T5058] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.53: corrupted inode contents [ 33.756092][ T5058] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.756193][ T5058] EXT4-fs error (device loop3): ext4_evict_inode:315: inode #15: comm syz.3.53: mark_inode_dirty error [ 33.756209][ T5058] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.756370][ T5058] EXT4-fs (loop3): 1 orphan inode deleted [ 33.756863][ T5058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.837149][ T5070] loop4: detected capacity change from 0 to 256 [ 33.837629][ T5070] vfat: Unknown parameter 'nnonumtail' [ 34.010062][ T5078] 9p: Bad value for 'rfdno' [ 34.901110][ T5076] md: could not open device unknown-block(7,0). [ 35.297829][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.341588][ T5096] can0: slcan on ttyS3. [ 35.352454][ T5096] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 35.359534][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 35.359578][ T5100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 35.374142][ T4720] Bluetooth: hci4: command tx timeout [ 35.374189][ T4720] Bluetooth: hci1: command 0x040f tx timeout [ 35.383349][ T4719] Bluetooth: hci3: command tx timeout [ 35.383401][ T4719] Bluetooth: hci0: command 0x040f tx timeout [ 35.402442][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 35.403868][ T5102] md: could not open device unknown-block(7,0). [ 35.405788][ T5100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 35.406069][ T5095] can0 (unregistered): slcan off ttyS3. [ 35.444772][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.444838][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.444879][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.444985][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.453429][ T4720] Bluetooth: hci2: command tx timeout [ 35.536492][ T5121] loop1: detected capacity change from 0 to 512 [ 35.553714][ T5121] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.78: corrupted inode contents [ 35.553757][ T5121] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.556673][ T5121] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 35.560561][ T5121] loop1: lost filesystem error report for type 5 error -117 [ 35.562604][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 35.562654][ C1] EXT4-fs (loop1): initial error at time 35: ext4_do_update_inode:5742: inode 15 [ 35.562701][ C1] EXT4-fs (loop1): last error at time 35: ext4_orphan_del:303 [ 35.568949][ T5121] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.78: corrupted inode contents [ 35.569002][ T5121] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.575747][ T5121] EXT4-fs error (device loop1): ext4_evict_inode:315: inode #15: comm syz.1.78: mark_inode_dirty error [ 35.575803][ T5121] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.580489][ T5121] EXT4-fs (loop1): 1 orphan inode deleted [ 35.599625][ T5121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.703526][ T5146] loop3: detected capacity change from 0 to 1024 [ 35.761297][ T5146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.768804][ T5154] can0: slcan on ttyS3. [ 35.780654][ T5154] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 35.873042][ T5152] can0 (unregistered): slcan off ttyS3. [ 36.159051][ T5162] EXT4-fs: Ignoring removed oldalloc option [ 36.160200][ T5162] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 36.176978][ T5162] EXT4-fs (loop4): 1 truncate cleaned up [ 36.177499][ T5162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.591941][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.649421][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.658790][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 36.658837][ T5177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 36.692339][ T40] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.692417][ T40] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.692439][ T40] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.692457][ T40] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.700366][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 36.700415][ T5177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 36.815413][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.453392][ T4719] Bluetooth: hci3: command tx timeout [ 37.453502][ T4719] Bluetooth: hci1: command 0x040f tx timeout [ 37.453695][ T4719] Bluetooth: hci4: command tx timeout [ 37.459515][ T4720] Bluetooth: hci0: command 0x040f tx timeout [ 37.539150][ T4720] Bluetooth: hci2: command tx timeout [ 38.008812][ T5208] can0: slcan on ttyS3. [ 38.010261][ T5208] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 38.034089][ T5212] set_capacity_and_notify: 1 callbacks suppressed [ 38.035825][ T5212] loop2: detected capacity change from 0 to 1024 [ 38.054269][ T5207] can0 (unregistered): slcan off ttyS3. [ 38.072237][ T5218] batman_adv: batadv0: Adding interface: dummy0 [ 38.072275][ T5218] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.072309][ T5218] batman_adv: batadv0: Interface activated: dummy0 [ 38.085281][ T5212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.094651][ T5218] batadv0: mtu less than device minimum [ 38.096588][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.098374][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.100018][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.101649][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.103325][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.104951][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.106574][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.108201][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.109825][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 38.148132][ T5218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.150668][ T5218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.194427][ T5218] geneve2: entered promiscuous mode [ 38.195509][ T5218] geneve2: entered allmulticast mode [ 38.197973][ T5218] batman_adv: batadv0: Adding interface: geneve2 [ 38.199304][ T5218] batman_adv: batadv0: Interface activated: geneve2 [ 38.911016][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.307701][ T5257] can0: slcan on ttyS3. [ 39.311310][ T5257] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 39.364763][ T5256] can0 (unregistered): slcan off ttyS3. [ 39.416956][ T5259] batman_adv: batadv0: Adding interface: dummy0 [ 39.416995][ T5259] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.417014][ T5259] batman_adv: batadv0: Interface activated: dummy0 [ 39.505898][ T5260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.507602][ T5260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.518234][ T5260] geneve2: entered promiscuous mode [ 39.518281][ T5260] geneve2: entered allmulticast mode [ 39.522908][ T5260] batman_adv: batadv0: Adding interface: geneve2 [ 39.523204][ T5260] batman_adv: batadv0: Interface activated: geneve2 [ 39.562806][ T4720] Bluetooth: hci0: command 0x040f tx timeout [ 39.562868][ T4720] Bluetooth: hci1: command 0x040f tx timeout [ 39.826571][ T5262] loop4: detected capacity change from 0 to 1024 [ 39.860864][ T5262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.952482][ T5268] loop1: detected capacity change from 0 to 512 [ 39.967147][ T5268] EXT4-fs: Ignoring removed oldalloc option [ 39.969390][ T5268] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 39.973261][ T5268] EXT4-fs (loop1): 1 truncate cleaned up [ 39.973756][ T5268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.064159][ T5273] evm: overlay not supported [ 40.443933][ T5280] netlink: 63 bytes leftover after parsing attributes in process `syz.2.118'. [ 40.482602][ T5281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 40.698084][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.801219][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.831922][ T5288] can0: slcan on ttyS3. [ 40.895584][ T5287] can0 (unregistered): slcan off ttyS3. [ 40.944131][ T5297] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 41.463221][ T5322] loop2: detected capacity change from 0 to 256 [ 41.466191][ T5322] vfat: Unknown parameter 'nnonumtail' [ 41.590675][ T5332] netlink: 63 bytes leftover after parsing attributes in process `syz.2.140'. [ 43.234109][ T5375] 9p: Bad value for 'rfdno' [ 43.431865][ T5374] gretap1: entered promiscuous mode [ 43.531125][ T5385] net_ratelimit: 70 callbacks suppressed [ 43.531179][ T5385] ip_tables: iptables: counters copy to user failed while replacing table [ 43.756111][ T5401] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.758706][ T5403] netlink: 27 bytes leftover after parsing attributes in process `syz.3.167'. [ 43.854019][ T5401] md: could not open device unknown-block(1,0). [ 44.844680][ T5401] md: could not open device unknown-block(1,1). [ 44.883507][ T5405] md: could not open device unknown-block(1,2). [ 44.963915][ T5401] md: could not open device unknown-block(1,3). [ 44.987034][ T5414] loop3: detected capacity change from 0 to 512 [ 45.006888][ T5414] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.171: corrupted inode contents [ 45.006937][ T5414] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.011858][ T5414] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 45.011910][ T5414] loop3: lost filesystem error report for type 5 error -117 [ 45.014005][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 45.014019][ C1] EXT4-fs (loop3): initial error at time 44: ext4_do_update_inode:5742: inode 15 [ 45.014035][ C1] EXT4-fs (loop3): last error at time 44: ext4_orphan_del:303 [ 45.021583][ T5414] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.171: corrupted inode contents [ 45.021622][ T5414] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.025753][ T5414] EXT4-fs error (device loop3): ext4_evict_inode:315: inode #15: comm syz.3.171: mark_inode_dirty error [ 45.025789][ T5414] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.029774][ T5414] EXT4-fs (loop3): 1 orphan inode deleted [ 45.030287][ T5414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.031968][ T5421] loop2: detected capacity change from 0 to 256 [ 45.032416][ T5421] vfat: Unknown parameter 'nnonumtail' [ 45.299534][ T5420] ip_tables: iptables: counters copy to user failed while replacing table [ 45.360275][ T5427] loop1: detected capacity change from 0 to 512 [ 45.377502][ T5427] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.175: corrupted inode contents [ 45.377543][ T5427] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.378337][ T5427] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 45.378352][ T5427] loop1: lost filesystem error report for type 5 error -117 [ 45.378711][ T5427] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.175: corrupted inode contents [ 45.378733][ T5427] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.382607][ T5427] EXT4-fs error (device loop1): ext4_evict_inode:315: inode #15: comm syz.1.175: mark_inode_dirty error [ 45.382632][ T5427] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.382861][ T5427] EXT4-fs (loop1): 1 orphan inode deleted [ 45.383345][ T5427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.893635][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.899974][ T5378] Set syz1 is full, maxelem 65536 reached [ 46.256882][ T5446] 9p: Bad value for 'rfdno' [ 46.560554][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.595576][ T5450] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.653900][ T5450] md: could not open device unknown-block(1,0). [ 46.733402][ T5450] md: could not open device unknown-block(1,1). [ 46.770662][ T5458] netlink: 27 bytes leftover after parsing attributes in process `syz.0.185'. [ 46.783379][ T5455] md: could not open device unknown-block(1,2). [ 47.102764][ T5450] md: could not open device unknown-block(1,3). [ 47.293979][ T5477] netlink: 63 bytes leftover after parsing attributes in process `syz.3.191'. [ 47.592110][ T5474] 9p: Bad value for 'rfdno' [ 48.356001][ T5490] loop1: detected capacity change from 0 to 512 [ 48.408416][ T5490] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.193: corrupted inode contents [ 48.411121][ T5490] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.412608][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 48.412647][ C1] EXT4-fs (loop1): initial error at time 48: ext4_do_update_inode:5742: inode 15 [ 48.412680][ C1] EXT4-fs (loop1): last error at time 48: ext4_do_update_inode:5742: inode 15 [ 48.419737][ T5490] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 48.419781][ T5490] loop1: lost filesystem error report for type 5 error -117 [ 48.421887][ T5490] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.193: corrupted inode contents [ 48.426897][ T5490] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.433310][ T5490] EXT4-fs error (device loop1): ext4_evict_inode:315: inode #15: comm syz.1.193: mark_inode_dirty error [ 48.433364][ T5490] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.437785][ T5490] EXT4-fs (loop1): 1 orphan inode deleted [ 48.438325][ T5490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.631847][ T5497] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 48.683363][ T5499] loop4: detected capacity change from 0 to 512 [ 48.696286][ T5499] EXT4-fs (loop4): 1 truncate cleaned up [ 48.698560][ T5499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.850938][ T5504] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.941962][ T5507] 9p: Bad value for 'rfdno' [ 48.974161][ T5504] md: could not open device unknown-block(1,0). [ 49.117320][ T5508] md: could not open device unknown-block(1,1). [ 49.198083][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.212955][ T5504] md: could not open device unknown-block(1,2). [ 49.254302][ T5508] md: could not open device unknown-block(1,3). [ 49.527014][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.594559][ T5523] netlink: 63 bytes leftover after parsing attributes in process `syz.0.205'. [ 49.597430][ T5526] netlink: 63 bytes leftover after parsing attributes in process `syz.3.206'. [ 49.660457][ T5531] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.945825][ T5557] loop3: detected capacity change from 0 to 512 [ 50.951704][ T5557] EXT4-fs (loop3): 1 truncate cleaned up [ 50.957596][ T5557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.500695][ T5514] Set syz1 is full, maxelem 65536 reached [ 51.501995][ T5532] Set syz1 is full, maxelem 65536 reached [ 51.595949][ T5565] netlink: 63 bytes leftover after parsing attributes in process `syz.2.217'. [ 51.917464][ T5566] 9p: Bad value for 'rfdno' [ 51.928811][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.982025][ T5573] netlink: 27 bytes leftover after parsing attributes in process `syz.3.219'. [ 52.094272][ T5586] loop2: detected capacity change from 0 to 7 [ 52.096887][ T5586] Dev loop2: unable to read RDB block 7 [ 52.096930][ T5586] loop2: unable to read partition table [ 52.097009][ T5586] loop2: partition table beyond EOD, truncated [ 52.097019][ T5586] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 53.092986][ T5591] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.225153][ T5600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'. [ 53.489629][ T5599] netlink: 63 bytes leftover after parsing attributes in process `syz.4.229'. [ 53.563917][ T5606] 9p: Bad value for 'rfdno' [ 54.113401][ T5625] 9p: Bad value for 'rfdno' [ 54.285967][ T5628] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.394035][ T5633] can0: slcan on ttyS3. [ 54.535243][ T5634] 9p: Bad value for 'rfdno' [ 54.664447][ T5632] can0 (unregistered): slcan off ttyS3. [ 54.837738][ T5646] loop3: detected capacity change from 0 to 1024 [ 54.847778][ T5646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.960885][ T5651] loop1: detected capacity change from 0 to 1024 [ 54.977908][ T5651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.980681][ T5654] loop2: detected capacity change from 0 to 1024 [ 55.287898][ T5654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.338350][ T5662] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 55.889813][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.896179][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.907865][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.285304][ T5690] loop2: detected capacity change from 0 to 1024 [ 56.297477][ T5690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.375652][ T5696] 9p: Bad value for 'rfdno' [ 57.089368][ T5708] loop4: detected capacity change from 0 to 512 [ 57.103523][ T5708] EXT4-fs (loop4): 1 truncate cleaned up [ 57.104756][ T5708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.508602][ T5717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 57.960872][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.975144][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.021182][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 58.021225][ T5726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 58.022793][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 58.022872][ T5726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 58.419356][ T5736] loop1: detected capacity change from 0 to 256 [ 58.421509][ T5736] vfat: Unknown parameter 'nnonumtail' [ 58.474582][ T5738] loop1: detected capacity change from 0 to 1024 [ 58.481273][ T5739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 58.495298][ T5738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.871790][ T5747] 9p: Bad value for 'rfdno' [ 59.593397][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.002257][ T5756] md: could not open device unknown-block(0,0). [ 60.002316][ T5756] md: error, md_import_device() returned -6 [ 61.345379][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 62.031069][ T5794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 62.419179][ T5801] fuse: Bad value for 'fd' [ 62.479410][ T5808] loop3: detected capacity change from 0 to 1024 [ 62.505939][ T5808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.006190][ T5819] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.275440][ T5819] md: could not open device unknown-block(7,0). [ 63.455519][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.726953][ T5835] fuse: Bad value for 'fd' [ 64.137414][ T5853] FAULT_INJECTION: forcing a failure. [ 64.137414][ T5853] name failslab, interval 1, probability 0, space 0, times 1 [ 64.139398][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 64.142092][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: syz.0.308 Not tainted syzkaller #0 PREEMPT [ 64.142116][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 64.142122][ T5853] Call trace: [ 64.142127][ T5853] show_stack+0x2c/0x3c (C) [ 64.142152][ T5853] __dump_stack+0x30/0x40 [ 64.142165][ T5853] dump_stack_lvl+0xd8/0x12c [ 64.142175][ T5853] dump_stack+0x1c/0x28 [ 64.142185][ T5853] should_fail_ex+0x41c/0x590 [ 64.142196][ T5853] should_failslab+0xc4/0x120 [ 64.142205][ T5853] __kmalloc_noprof+0x108/0x6b8 [ 64.142213][ T5853] tomoyo_realpath_from_path+0xbc/0x4dc [ 64.142222][ T5853] tomoyo_path_number_perm+0x1f0/0x500 [ 64.142230][ T5853] tomoyo_file_ioctl+0x2c/0x3c [ 64.142239][ T5853] security_file_ioctl+0xdc/0x2b0 [ 64.142246][ T5853] __arm64_sys_ioctl+0xb0/0x1cc [ 64.142257][ T5853] invoke_syscall+0x98/0x244 [ 64.142267][ T5853] el0_svc_common+0xec/0x23c [ 64.142277][ T5853] do_el0_svc+0x4c/0x5c [ 64.142286][ T5853] el0_svc+0x64/0x260 [ 64.142297][ T5853] el0t_64_sync_handler+0x48/0x148 [ 64.142307][ T5853] el0t_64_sync+0x198/0x19c [ 64.162595][ T5853] ERROR: Out of memory at tomoyo_realpath_from_path. [ 64.273711][ T5858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.323249][ T5858] md: could not open device unknown-block(7,0). [ 64.496838][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.498415][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.690271][ T1004] cfg80211: failed to load regulatory.db [ 65.591233][ T5888] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 65.632952][ T5888] md: could not open device unknown-block(7,0). [ 65.673612][ T5899] netlink: 63 bytes leftover after parsing attributes in process `syz.3.324'. [ 65.754514][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 66.764629][ T5908] netlink: 27 bytes leftover after parsing attributes in process `syz.2.326'. [ 67.639802][ T5926] FAULT_INJECTION: forcing a failure. [ 67.639802][ T5926] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.639848][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: syz.1.332 Not tainted syzkaller #0 PREEMPT [ 67.639861][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 67.639867][ T5926] Call trace: [ 67.639870][ T5926] show_stack+0x2c/0x3c (C) [ 67.639888][ T5926] __dump_stack+0x30/0x40 [ 67.639899][ T5926] dump_stack_lvl+0xd8/0x12c [ 67.639908][ T5926] dump_stack+0x1c/0x28 [ 67.639918][ T5926] should_fail_ex+0x41c/0x590 [ 67.639929][ T5926] should_fail+0x14/0x24 [ 67.639939][ T5926] should_fail_usercopy+0x20/0x30 [ 67.639949][ T5926] _inline_copy_from_user+0x3c/0x174 [ 67.639959][ T5926] __arm64_sys_io_uring_setup+0x1c0/0x290 [ 67.639967][ T5926] invoke_syscall+0x98/0x244 [ 67.639978][ T5926] el0_svc_common+0xec/0x23c [ 67.639987][ T5926] do_el0_svc+0x4c/0x5c [ 67.639996][ T5926] el0_svc+0x64/0x260 [ 67.640007][ T5926] el0t_64_sync_handler+0x48/0x148 [ 67.640017][ T5926] el0t_64_sync+0x198/0x19c [ 67.869272][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.341'. [ 67.876930][ T5944] netlink: 63 bytes leftover after parsing attributes in process `syz.1.340'. [ 67.939260][ T5952] FAULT_INJECTION: forcing a failure. [ 67.939260][ T5952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.939306][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz.4.344 Not tainted syzkaller #0 PREEMPT [ 67.939318][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 67.939325][ T5952] Call trace: [ 67.939329][ T5952] show_stack+0x2c/0x3c (C) [ 67.939352][ T5952] __dump_stack+0x30/0x40 [ 67.939363][ T5952] dump_stack_lvl+0xd8/0x12c [ 67.939374][ T5952] dump_stack+0x1c/0x28 [ 67.939383][ T5952] should_fail_ex+0x41c/0x590 [ 67.939395][ T5952] should_fail+0x14/0x24 [ 67.939404][ T5952] should_fail_usercopy+0x20/0x30 [ 67.939415][ T5952] _inline_copy_from_user+0x3c/0x174 [ 67.939426][ T5952] copy_msghdr_from_user+0xb8/0x194 [ 67.939435][ T5952] ___sys_sendmsg+0x14c/0x224 [ 67.939444][ T5952] __sys_sendmsg+0x158/0x204 [ 67.939452][ T5952] __arm64_sys_sendmsg+0x88/0x9c [ 67.939461][ T5952] invoke_syscall+0x98/0x244 [ 67.939471][ T5952] el0_svc_common+0xec/0x23c [ 67.939481][ T5952] do_el0_svc+0x4c/0x5c [ 67.939490][ T5952] el0_svc+0x64/0x260 [ 67.939501][ T5952] el0t_64_sync_handler+0x48/0x148 [ 67.939510][ T5952] el0t_64_sync+0x198/0x19c [ 68.771552][ T30] audit: type=1326 audit(68.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.4.345" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d781a8 code=0x0 [ 68.952771][ T5973] CUSE: unknown device info "" [ 68.952804][ T5973] CUSE: unknown device info "" [ 68.952823][ T5973] CUSE: unknown device info "ÿw" [ 68.952832][ T5973] CUSE: unknown device info "" [ 68.952840][ T5973] CUSE: unknown device info "" [ 68.952848][ T5973] CUSE: unknown device info "" [ 68.952855][ T5973] CUSE: unknown device info "" [ 68.952862][ T5973] CUSE: unknown device info "" [ 68.952869][ T5973] CUSE: DEVNAME unspecified [ 68.956449][ T5973] loop3: detected capacity change from 0 to 1024 [ 68.956858][ T5973] ======================================================= [ 68.956858][ T5973] WARNING: The mand mount option has been deprecated and [ 68.956858][ T5973] and is ignored by this kernel. Remove the mand [ 68.956858][ T5973] option from the mount to silence this warning. [ 68.956858][ T5973] ======================================================= [ 68.956989][ T5973] ext4: Unknown parameter 'dont_hash' [ 69.147170][ T867] kernel read not supported for file [fscontext] (pid: 867 comm: kworker/1:2) [ 69.201615][ T5988] FAULT_INJECTION: forcing a failure. [ 69.201615][ T5988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.201668][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.3.355 Not tainted syzkaller #0 PREEMPT [ 69.201682][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 69.201689][ T5988] Call trace: [ 69.201693][ T5988] show_stack+0x2c/0x3c (C) [ 69.201712][ T5988] __dump_stack+0x30/0x40 [ 69.201723][ T5988] dump_stack_lvl+0xd8/0x12c [ 69.201733][ T5988] dump_stack+0x1c/0x28 [ 69.201742][ T5988] should_fail_ex+0x41c/0x590 [ 69.201754][ T5988] should_fail+0x14/0x24 [ 69.201763][ T5988] should_fail_usercopy+0x20/0x30 [ 69.201773][ T5988] strncpy_from_user+0x48/0x388 [ 69.201781][ T5988] __arm64_sys_add_key+0x150/0x43c [ 69.201789][ T5988] invoke_syscall+0x98/0x244 [ 69.201800][ T5988] el0_svc_common+0xec/0x23c [ 69.201809][ T5988] do_el0_svc+0x4c/0x5c [ 69.201818][ T5988] el0_svc+0x64/0x260 [ 69.201830][ T5988] el0t_64_sync_handler+0x48/0x148 [ 69.201839][ T5988] el0t_64_sync+0x198/0x19c [ 69.247230][ T5996] syzkaller0: entered promiscuous mode [ 69.248600][ T5996] syzkaller0: entered allmulticast mode [ 69.336619][ T30] audit: type=1326 audit(69.310:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5982 comm="syz.4.353" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d781a8 code=0x0 [ 69.341051][ T6007] netlink: 63 bytes leftover after parsing attributes in process `syz.3.361'. [ 69.537638][ T6011] loop3: detected capacity change from 0 to 512 [ 69.568732][ T6011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.312383][ T867] kernel read not supported for file [fscontext] (pid: 867 comm: kworker/1:2) [ 70.423431][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.491101][ T6030] syz.2.368: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 70.497443][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.2.368 Not tainted syzkaller #0 PREEMPT [ 70.497476][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 70.497483][ T6030] Call trace: [ 70.497487][ T6030] show_stack+0x2c/0x3c (C) [ 70.497516][ T6030] __dump_stack+0x30/0x40 [ 70.497530][ T6030] dump_stack_lvl+0xd8/0x12c [ 70.497542][ T6030] dump_stack+0x1c/0x28 [ 70.497554][ T6030] warn_alloc+0x1bc/0x1d0 [ 70.497565][ T6030] __vmalloc_node_range_noprof+0x120/0x105c [ 70.497577][ T6030] __vmalloc_node_noprof+0xec/0x14c [ 70.497588][ T6030] vmalloc_noprof+0x3c/0x4c [ 70.497598][ T6030] dvb_dvr_do_ioctl+0x120/0x1f8 [ 70.497613][ T6030] dvb_usercopy+0x2a4/0x4d4 [ 70.497622][ T6030] dvb_dvr_ioctl+0x3c/0x54 [ 70.497630][ T6030] __arm64_sys_ioctl+0x154/0x1cc [ 70.497644][ T6030] invoke_syscall+0x98/0x244 [ 70.497656][ T6030] el0_svc_common+0xec/0x23c [ 70.497668][ T6030] do_el0_svc+0x4c/0x5c [ 70.497680][ T6030] el0_svc+0x64/0x260 [ 70.497693][ T6030] el0t_64_sync_handler+0x48/0x148 [ 70.497705][ T6030] el0t_64_sync+0x198/0x19c [ 70.522231][ T6030] Mem-Info: [ 70.522281][ T6030] active_anon:1050 inactive_anon:5061 isolated_anon:0 [ 70.522281][ T6030] active_file:2606 inactive_file:4668 isolated_file:0 [ 70.522281][ T6030] unevictable:768 dirty:339 writeback:0 [ 70.522281][ T6030] slab_reclaimable:8959 slab_unreclaimable:90773 [ 70.522281][ T6030] mapped:29364 shmem:1988 pagetables:1063 [ 70.522281][ T6030] sec_pagetables:0 bounce:0 [ 70.522281][ T6030] kernel_misc_reclaimable:0 [ 70.522281][ T6030] free:1485139 free_pcp:11889 free_cma:7616 [ 70.522327][ T6030] Node 0 active_anon:4200kB inactive_anon:20244kB active_file:10424kB inactive_file:18672kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:117456kB dirty:1356kB writeback:0kB shmem:7952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8580kB pagetables:4252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 70.522356][ T6030] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 70.522395][ T6030] lowmem_reserve[]: 0 0 3651 3651 3651 [ 70.522444][ T6030] Node 0 Normal free:2862668kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4200kB inactive_anon:20244kB active_file:10424kB inactive_file:18672kB unevictable:3072kB writepending:1356kB zspages:0kB present:5242880kB managed:3739372kB mlocked:0kB bounce:0kB free_pcp:47556kB local_pcp:15736kB free_cma:0kB [ 70.522477][ T6030] lowmem_reserve[]: 0 0 0 0 0 [ 70.522521][ T6030] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 70.522759][ T6030] Node 0 Normal: 2291*4kB (UME) 925*8kB (UME) 602*16kB (UME) 112*32kB (UME) 87*64kB (ME) 56*128kB (M) 20*256kB (UM) 24*512kB (UME) 7*1024kB (ME) 5*2048kB (UME) 680*4096kB (M) = 2862612kB [ 70.522934][ T6030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 70.522946][ T6030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 70.522956][ T6030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 70.522966][ T6030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 70.522977][ T6030] 9258 total pagecache pages [ 70.522985][ T6030] 0 pages in swap cache [ 70.522992][ T6030] Free swap = 124996kB [ 70.522999][ T6030] Total swap = 124996kB [ 70.523007][ T6030] 2097152 pages RAM [ 70.523013][ T6030] 0 pages HighMem/MovableOnly [ 70.523020][ T6030] 392261 pages reserved [ 70.523027][ T6030] 8192 pages cma reserved [ 70.523035][ T6030] 0 pages hwpoisoned [ 70.784855][ T6052] FAULT_INJECTION: forcing a failure. [ 70.784855][ T6052] name failslab, interval 1, probability 0, space 0, times 0 [ 70.784900][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.1.374 Not tainted syzkaller #0 PREEMPT [ 70.784913][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 70.784920][ T6052] Call trace: [ 70.784926][ T6052] show_stack+0x2c/0x3c (C) [ 70.784952][ T6052] __dump_stack+0x30/0x40 [ 70.784963][ T6052] dump_stack_lvl+0xd8/0x12c [ 70.784973][ T6052] dump_stack+0x1c/0x28 [ 70.784982][ T6052] should_fail_ex+0x41c/0x590 [ 70.784994][ T6052] should_failslab+0xc4/0x120 [ 70.785003][ T6052] __kvmalloc_node_noprof+0x160/0x7d8 [ 70.785013][ T6052] do_semtimedop+0x188/0x310 [ 70.785021][ T6052] ksys_semtimedop+0xdc/0x144 [ 70.785028][ T6052] __arm64_sys_semtimedop+0xa8/0xc0 [ 70.785035][ T6052] invoke_syscall+0x98/0x244 [ 70.785045][ T6052] el0_svc_common+0xec/0x23c [ 70.785055][ T6052] do_el0_svc+0x4c/0x5c [ 70.785064][ T6052] el0_svc+0x64/0x260 [ 70.785075][ T6052] el0t_64_sync_handler+0x48/0x148 [ 70.785085][ T6052] el0t_64_sync+0x198/0x19c [ 71.144350][ T6058] netlink: 63 bytes leftover after parsing attributes in process `syz.1.377'. [ 71.363138][ T6064] loop1: detected capacity change from 0 to 512 [ 71.477934][ T6064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.100505][ T6071] netlink: 63 bytes leftover after parsing attributes in process `syz.3.380'. [ 72.174721][ T6073] loop4: detected capacity change from 0 to 256 [ 72.176718][ T6073] vfat: Unknown parameter 'nnonumtail' [ 72.184040][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.251272][ T6081] FAULT_INJECTION: forcing a failure. [ 72.251272][ T6081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.251321][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: syz.2.383 Not tainted syzkaller #0 PREEMPT [ 72.251334][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 72.251341][ T6081] Call trace: [ 72.251345][ T6081] show_stack+0x2c/0x3c (C) [ 72.251365][ T6081] __dump_stack+0x30/0x40 [ 72.251377][ T6081] dump_stack_lvl+0xd8/0x12c [ 72.251387][ T6081] dump_stack+0x1c/0x28 [ 72.251397][ T6081] should_fail_ex+0x41c/0x590 [ 72.251409][ T6081] should_fail+0x14/0x24 [ 72.251418][ T6081] should_fail_usercopy+0x20/0x30 [ 72.251428][ T6081] simple_read_from_buffer+0xc4/0x238 [ 72.251439][ T6081] proc_fail_nth_read+0x1a8/0x248 [ 72.251447][ T6081] vfs_read+0x230/0x8c8 [ 72.251458][ T6081] ksys_read+0x12c/0x228 [ 72.251464][ T6081] __arm64_sys_read+0x84/0x98 [ 72.251470][ T6081] invoke_syscall+0x98/0x244 [ 72.251480][ T6081] el0_svc_common+0xec/0x23c [ 72.251490][ T6081] do_el0_svc+0x4c/0x5c [ 72.251499][ T6081] el0_svc+0x64/0x260 [ 72.251509][ T6081] el0t_64_sync_handler+0x48/0x148 [ 72.251519][ T6081] el0t_64_sync+0x198/0x19c [ 72.270432][ T6080] loop2: detected capacity change from 0 to 7 [ 72.274006][ T6080] Dev loop2: unable to read RDB block 7 [ 72.274025][ T6080] loop2: unable to read partition table [ 72.274100][ T6080] loop2: partition table beyond EOD, truncated [ 72.274112][ T6080] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 72.282288][ T6083] FAULT_INJECTION: forcing a failure. [ 72.282288][ T6083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.282307][ T6083] CPU: 1 UID: 0 PID: 6083 Comm: syz.1.386 Not tainted syzkaller #0 PREEMPT [ 72.282316][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 72.282321][ T6083] Call trace: [ 72.282325][ T6083] show_stack+0x2c/0x3c (C) [ 72.282343][ T6083] __dump_stack+0x30/0x40 [ 72.282354][ T6083] dump_stack_lvl+0xd8/0x12c [ 72.282364][ T6083] dump_stack+0x1c/0x28 [ 72.282373][ T6083] should_fail_ex+0x41c/0x590 [ 72.282384][ T6083] should_fail+0x14/0x24 [ 72.282393][ T6083] should_fail_usercopy+0x20/0x30 [ 72.282404][ T6083] _inline_copy_from_user+0x3c/0x174 [ 72.282414][ T6083] copy_msghdr_from_user+0xb8/0x194 [ 72.282424][ T6083] ___sys_recvmsg+0x11c/0x1f4 [ 72.282433][ T6083] do_recvmmsg+0x288/0x7d4 [ 72.282441][ T6083] __sys_recvmmsg+0x1e0/0x270 [ 72.282450][ T6083] __arm64_sys_recvmmsg+0xe0/0x108 [ 72.282459][ T6083] invoke_syscall+0x98/0x244 [ 72.282469][ T6083] el0_svc_common+0xec/0x23c [ 72.282479][ T6083] do_el0_svc+0x4c/0x5c [ 72.282488][ T6083] el0_svc+0x64/0x260 [ 72.282499][ T6083] el0t_64_sync_handler+0x48/0x148 [ 72.282509][ T6083] el0t_64_sync+0x198/0x19c [ 72.294240][ T6066] FAULT_INJECTION: forcing a failure. [ 72.294240][ T6066] name fail_futex, interval 1, probability 0, space 0, times 1 [ 72.294265][ T6066] CPU: 1 UID: 0 PID: 6066 Comm: syz.0.379 Not tainted syzkaller #0 PREEMPT [ 72.294275][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 72.294281][ T6066] Call trace: [ 72.294284][ T6066] show_stack+0x2c/0x3c (C) [ 72.294305][ T6066] __dump_stack+0x30/0x40 [ 72.294316][ T6066] dump_stack_lvl+0xd8/0x12c [ 72.294326][ T6066] dump_stack+0x1c/0x28 [ 72.294335][ T6066] should_fail_ex+0x41c/0x590 [ 72.294347][ T6066] should_fail+0x14/0x24 [ 72.294356][ T6066] get_futex_key+0x1ec/0x12b0 [ 72.294365][ T6066] futex_wake+0x10c/0x594 [ 72.294374][ T6066] do_futex+0x2ec/0x3b0 [ 72.294382][ T6066] mm_release+0x188/0x274 [ 72.294390][ T6066] exit_mm_release+0x30/0x40 [ 72.294397][ T6066] exit_mm+0x54/0x264 [ 72.294407][ T6066] do_exit+0x524/0x1a74 [ 72.294417][ T6066] do_group_exit+0x198/0x238 [ 72.294427][ T6066] get_signal+0xfb0/0x1094 [ 72.294435][ T6066] arch_do_signal_or_restart+0x288/0x444c [ 72.294445][ T6066] exit_to_user_mode_loop+0x70/0x17c [ 72.294454][ T6066] el0_svc+0x18c/0x260 [ 72.294465][ T6066] el0t_64_sync_handler+0x48/0x148 [ 72.294475][ T6066] el0t_64_sync+0x198/0x19c [ 72.549153][ T6096] binder: BC_ACQUIRE_RESULT not supported [ 72.549251][ T6096] binder: 6087:6096 ioctl c0306201 20000300 returned -22 [ 73.233964][ T6097] loop4: detected capacity change from 0 to 256 [ 73.239787][ T6097] vfat: Unknown parameter 'nnonumtail' [ 73.380264][ T4799] IPVS: starting estimator thread 0... [ 73.388730][ T6102] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 73.430673][ T6108] fuse: Unknown parameter 'gzÇKp_i' [ 73.473370][ T6103] IPVS: using max 60 ests per chain, 144000 per kthread [ 73.498853][ T6111] syzkaller0: entered promiscuous mode [ 73.498902][ T6111] syzkaller0: entered allmulticast mode [ 73.629510][ T6120] syzkaller0: entered promiscuous mode [ 73.629551][ T6120] syzkaller0: entered allmulticast mode [ 73.635417][ T6120] FAULT_INJECTION: forcing a failure. [ 73.635417][ T6120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.635458][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.1.398 Not tainted syzkaller #0 PREEMPT [ 73.635471][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 73.635478][ T6120] Call trace: [ 73.635482][ T6120] show_stack+0x2c/0x3c (C) [ 73.635505][ T6120] __dump_stack+0x30/0x40 [ 73.635517][ T6120] dump_stack_lvl+0xd8/0x12c [ 73.635527][ T6120] dump_stack+0x1c/0x28 [ 73.635537][ T6120] should_fail_ex+0x41c/0x590 [ 73.635548][ T6120] should_fail+0x14/0x24 [ 73.635557][ T6120] should_fail_usercopy+0x20/0x30 [ 73.635568][ T6120] _inline_copy_from_user+0x3c/0x174 [ 73.635579][ T6120] copy_msghdr_from_user+0xb8/0x194 [ 73.635589][ T6120] ___sys_sendmsg+0x14c/0x224 [ 73.635606][ T6120] __sys_sendmsg+0x158/0x204 [ 73.635615][ T6120] __arm64_sys_sendmsg+0x88/0x9c [ 73.635624][ T6120] invoke_syscall+0x98/0x244 [ 73.635634][ T6120] el0_svc_common+0xec/0x23c [ 73.635644][ T6120] do_el0_svc+0x4c/0x5c [ 73.635653][ T6120] el0_svc+0x64/0x260 [ 73.635664][ T6120] el0t_64_sync_handler+0x48/0x148 [ 73.635674][ T6120] el0t_64_sync+0x198/0x19c [ 73.694922][ T6119] syzkaller0: entered promiscuous mode [ 73.696204][ T6119] syzkaller0: entered allmulticast mode [ 73.760634][ T6122] loop2: detected capacity change from 0 to 7 [ 73.761670][ T6122] Dev loop2: unable to read RDB block 7 [ 73.761688][ T6122] loop2: unable to read partition table [ 73.761753][ T6122] loop2: partition table beyond EOD, truncated [ 73.762835][ T6122] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.434300][ T6137] Cannot find del_set index 2 as target [ 75.287593][ T6150] FAULT_INJECTION: forcing a failure. [ 75.287593][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 75.287647][ T6150] CPU: 0 UID: 0 PID: 6150 Comm: syz.0.410 Not tainted syzkaller #0 PREEMPT [ 75.287661][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 75.287668][ T6150] Call trace: [ 75.287672][ T6150] show_stack+0x2c/0x3c (C) [ 75.287693][ T6150] __dump_stack+0x30/0x40 [ 75.287704][ T6150] dump_stack_lvl+0xd8/0x12c [ 75.287714][ T6150] dump_stack+0x1c/0x28 [ 75.287724][ T6150] should_fail_ex+0x41c/0x590 [ 75.287735][ T6150] should_failslab+0xc4/0x120 [ 75.287744][ T6150] __kmalloc_noprof+0x108/0x6b8 [ 75.287752][ T6150] tomoyo_realpath_from_path+0xbc/0x4dc [ 75.287762][ T6150] tomoyo_path_number_perm+0x1f0/0x500 [ 75.287769][ T6150] tomoyo_file_ioctl+0x2c/0x3c [ 75.287778][ T6150] security_file_ioctl+0xdc/0x2b0 [ 75.287785][ T6150] __arm64_sys_ioctl+0xb0/0x1cc [ 75.287796][ T6150] invoke_syscall+0x98/0x244 [ 75.287806][ T6150] el0_svc_common+0xec/0x23c [ 75.287815][ T6150] do_el0_svc+0x4c/0x5c [ 75.287825][ T6150] el0_svc+0x64/0x260 [ 75.287836][ T6150] el0t_64_sync_handler+0x48/0x148 [ 75.287846][ T6150] el0t_64_sync+0x198/0x19c [ 75.287869][ T6150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.422954][ T6153] 9p: Bad value for 'rfdno' [ 75.534967][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.414'. [ 75.575838][ T6161] FAULT_INJECTION: forcing a failure. [ 75.575838][ T6161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.575895][ T6161] CPU: 1 UID: 0 PID: 6161 Comm: syz.2.416 Not tainted syzkaller #0 PREEMPT [ 75.575906][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 75.575911][ T6161] Call trace: [ 75.575915][ T6161] show_stack+0x2c/0x3c (C) [ 75.575935][ T6161] __dump_stack+0x30/0x40 [ 75.575946][ T6161] dump_stack_lvl+0xd8/0x12c [ 75.575956][ T6161] dump_stack+0x1c/0x28 [ 75.575965][ T6161] should_fail_ex+0x41c/0x590 [ 75.575976][ T6161] should_fail+0x14/0x24 [ 75.575986][ T6161] should_fail_usercopy+0x20/0x30 [ 75.575996][ T6161] _inline_copy_from_user+0x3c/0x174 [ 75.576005][ T6161] __sys_bpf+0x1b4/0x8c8 [ 75.576012][ T6161] __arm64_sys_bpf+0xd0/0xec [ 75.576019][ T6161] invoke_syscall+0x98/0x244 [ 75.576029][ T6161] el0_svc_common+0xec/0x23c [ 75.576038][ T6161] do_el0_svc+0x4c/0x5c [ 75.576048][ T6161] el0_svc+0x64/0x260 [ 75.576059][ T6161] el0t_64_sync_handler+0x48/0x148 [ 75.576068][ T6161] el0t_64_sync+0x198/0x19c [ 75.617206][ T6166] FAULT_INJECTION: forcing a failure. [ 75.617206][ T6166] name failslab, interval 1, probability 0, space 0, times 0 [ 75.617365][ T6165] loop2: detected capacity change from 0 to 7 [ 75.618308][ T6165] Dev loop2: unable to read RDB block 7 [ 75.618326][ T6165] loop2: unable to read partition table [ 75.618394][ T6165] loop2: partition table beyond EOD, truncated [ 75.618403][ T6165] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 75.626804][ T6166] CPU: 0 UID: 0 PID: 6166 Comm: syz.2.417 Not tainted syzkaller #0 PREEMPT [ 75.626823][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 75.626830][ T6166] Call trace: [ 75.626834][ T6166] show_stack+0x2c/0x3c (C) [ 75.626860][ T6166] __dump_stack+0x30/0x40 [ 75.626872][ T6166] dump_stack_lvl+0xd8/0x12c [ 75.626882][ T6166] dump_stack+0x1c/0x28 [ 75.626892][ T6166] should_fail_ex+0x41c/0x590 [ 75.626903][ T6166] should_failslab+0xc4/0x120 [ 75.626912][ T6166] __kmalloc_noprof+0x108/0x6b8 [ 75.626920][ T6166] kernfs_fop_write_iter+0x144/0x3b8 [ 75.626930][ T6166] vfs_write+0x51c/0xa0c [ 75.626938][ T6166] ksys_write+0x12c/0x228 [ 75.626944][ T6166] __arm64_sys_write+0x84/0x98 [ 75.626951][ T6166] invoke_syscall+0x98/0x244 [ 75.626961][ T6166] el0_svc_common+0xec/0x23c [ 75.626971][ T6166] do_el0_svc+0x4c/0x5c [ 75.626980][ T6166] el0_svc+0x64/0x260 [ 75.626991][ T6166] el0t_64_sync_handler+0x48/0x148 [ 75.627001][ T6166] el0t_64_sync+0x198/0x19c [ 75.657183][ T6169] netlink: 63 bytes leftover after parsing attributes in process `syz.1.418'. [ 75.733194][ T6174] 9p: Bad value for 'rfdno' [ 76.513813][ T6180] loop4: detected capacity change from 0 to 512 [ 76.765590][ T6202] syzkaller0: entered promiscuous mode [ 76.765649][ T6202] syzkaller0: entered allmulticast mode [ 76.963290][ T6213] 9p: Bad value for 'rfdno' [ 77.045565][ T6222] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 77.051908][ T6221] capability: warning: `syz.0.437' uses 32-bit capabilities (legacy support in use) [ 77.126799][ T6226] netlink: 63 bytes leftover after parsing attributes in process `syz.0.440'. [ 77.148223][ T6228] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 77.209311][ T6233] loop3: detected capacity change from 0 to 512 [ 77.211613][ T6233] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.211653][ T6233] EXT4-fs (loop3): blocks per group (42) and clusters per group (32768) inconsistent [ 77.229251][ T6235] loop1: detected capacity change from 0 to 1024 [ 78.199036][ T6235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.311803][ T6246] FAULT_INJECTION: forcing a failure. [ 78.311803][ T6246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.311848][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: syz.2.447 Not tainted syzkaller #0 PREEMPT [ 78.311864][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 78.311870][ T6246] Call trace: [ 78.311874][ T6246] show_stack+0x2c/0x3c (C) [ 78.311892][ T6246] __dump_stack+0x30/0x40 [ 78.311903][ T6246] dump_stack_lvl+0xd8/0x12c [ 78.311913][ T6246] dump_stack+0x1c/0x28 [ 78.311922][ T6246] should_fail_ex+0x41c/0x590 [ 78.311933][ T6246] should_fail+0x14/0x24 [ 78.311943][ T6246] should_fail_usercopy+0x20/0x30 [ 78.311953][ T6246] _inline_copy_from_user+0x3c/0x174 [ 78.311964][ T6246] move_addr_to_kernel+0x88/0x168 [ 78.311971][ T6246] __sys_sendto+0x1b0/0x328 [ 78.311980][ T6246] __arm64_sys_sendto+0xec/0x10c [ 78.311988][ T6246] invoke_syscall+0x98/0x244 [ 78.311998][ T6246] el0_svc_common+0xec/0x23c [ 78.312008][ T6246] do_el0_svc+0x4c/0x5c [ 78.312017][ T6246] el0_svc+0x64/0x260 [ 78.312028][ T6246] el0t_64_sync_handler+0x48/0x148 [ 78.312038][ T6246] el0t_64_sync+0x198/0x19c [ 78.627581][ T6255] Injecting memory failure for pfn 0x13418f at process virtual address 0x20001000 [ 78.660032][ T6251] netlink: 68 bytes leftover after parsing attributes in process `syz.4.449'. [ 78.661964][ T6251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.449'. [ 78.676019][ T6255] Memory failure: 0x13418f: unhandlable page. [ 78.676062][ T6255] Memory failure: 0x13418f: recovery action for get hwpoison page: Ignored [ 78.757775][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.772113][ T6269] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.743547][ T6277] md/raid:md0: not clean -- starting background reconstruction [ 79.743586][ T6277] md/raid:md0: invalid chunk size 0 [ 79.743617][ T6277] md: pers->run() failed ... [ 79.930945][ T6291] FAULT_INJECTION: forcing a failure. [ 79.930945][ T6291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.930991][ T6291] CPU: 0 UID: 0 PID: 6291 Comm: syz.2.460 Not tainted syzkaller #0 PREEMPT [ 79.931006][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 79.931012][ T6291] Call trace: [ 79.931017][ T6291] show_stack+0x2c/0x3c (C) [ 79.931040][ T6291] __dump_stack+0x30/0x40 [ 79.931052][ T6291] dump_stack_lvl+0xd8/0x12c [ 79.931062][ T6291] dump_stack+0x1c/0x28 [ 79.931072][ T6291] should_fail_ex+0x41c/0x590 [ 79.931083][ T6291] should_fail+0x14/0x24 [ 79.931092][ T6291] should_fail_usercopy+0x20/0x30 [ 79.931103][ T6291] simple_read_from_buffer+0xc4/0x238 [ 79.931113][ T6291] proc_fail_nth_read+0x1a8/0x248 [ 79.931122][ T6291] vfs_read+0x230/0x8c8 [ 79.931132][ T6291] ksys_read+0x12c/0x228 [ 79.931139][ T6291] __arm64_sys_read+0x84/0x98 [ 79.931146][ T6291] invoke_syscall+0x98/0x244 [ 79.931156][ T6291] el0_svc_common+0xec/0x23c [ 79.931165][ T6291] do_el0_svc+0x4c/0x5c [ 79.931175][ T6291] el0_svc+0x64/0x260 [ 79.931186][ T6291] el0t_64_sync_handler+0x48/0x148 [ 79.931196][ T6291] el0t_64_sync+0x198/0x19c [ 80.265617][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 80.380417][ T6307] FAULT_INJECTION: forcing a failure. [ 80.380417][ T6307] name failslab, interval 1, probability 0, space 0, times 0 [ 80.383765][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.0.466 Not tainted syzkaller #0 PREEMPT [ 80.383787][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 80.383793][ T6307] Call trace: [ 80.383796][ T6307] show_stack+0x2c/0x3c (C) [ 80.383817][ T6307] __dump_stack+0x30/0x40 [ 80.383828][ T6307] dump_stack_lvl+0xd8/0x12c [ 80.383838][ T6307] dump_stack+0x1c/0x28 [ 80.383847][ T6307] should_fail_ex+0x41c/0x590 [ 80.383859][ T6307] should_failslab+0xc4/0x120 [ 80.383868][ T6307] __kmalloc_cache_noprof+0x94/0x5ec [ 80.383877][ T6307] resv_map_alloc+0x60/0x284 [ 80.383888][ T6307] hugetlbfs_get_inode+0x70/0x834 [ 80.383898][ T6307] hugetlb_file_setup+0x20c/0x574 [ 80.383908][ T6307] ksys_mmap_pgoff+0x16c/0x5b4 [ 80.383917][ T6307] __arm64_sys_mmap+0x110/0x12c [ 80.383927][ T6307] invoke_syscall+0x98/0x244 [ 80.383938][ T6307] el0_svc_common+0xec/0x23c [ 80.383948][ T6307] do_el0_svc+0x4c/0x5c [ 80.383957][ T6307] el0_svc+0x64/0x260 [ 80.383967][ T6307] el0t_64_sync_handler+0x48/0x148 [ 80.383977][ T6307] el0t_64_sync+0x198/0x19c [ 80.446487][ T6313] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.452455][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 80.452521][ T6309] bridge_slave_1: left allmulticast mode [ 80.452537][ T6309] bridge_slave_1: left promiscuous mode [ 80.455584][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.467208][ T6309] bridge_slave_0: left allmulticast mode [ 80.467253][ T6309] bridge_slave_0: left promiscuous mode [ 80.467358][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.500769][ T6313] md/raid:md0: not clean -- starting background reconstruction [ 80.502409][ T6313] md/raid:md0: invalid chunk size 0 [ 80.504431][ T6313] md: pers->run() failed ... [ 80.575809][ T6316] syz.0.470 uses obsolete (PF_INET,SOCK_PACKET) [ 80.639189][ T6319] loop2: detected capacity change from 0 to 512 [ 80.639990][ T6319] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.640001][ T6319] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.647924][ T6319] EXT4-fs (loop2): 1 truncate cleaned up [ 80.652047][ T6319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.737363][ T6322] netlink: 'syz.0.470': attribute type 2 has an invalid length. [ 80.737404][ T6322] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 81.095903][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.151980][ T6344] process 'syz.3.478' launched './file0' with NULL argv: empty string added [ 81.168837][ T6344] netlink: 44 bytes leftover after parsing attributes in process `syz.3.478'. [ 81.172086][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.161196][ T6377] FAULT_INJECTION: forcing a failure. [ 82.161196][ T6377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.164851][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.2.490 Not tainted syzkaller #0 PREEMPT [ 82.164870][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 82.164875][ T6377] Call trace: [ 82.164879][ T6377] show_stack+0x2c/0x3c (C) [ 82.164899][ T6377] __dump_stack+0x30/0x40 [ 82.164910][ T6377] dump_stack_lvl+0xd8/0x12c [ 82.164919][ T6377] dump_stack+0x1c/0x28 [ 82.164928][ T6377] should_fail_ex+0x41c/0x590 [ 82.164940][ T6377] should_fail+0x14/0x24 [ 82.164949][ T6377] should_fail_usercopy+0x20/0x30 [ 82.164960][ T6377] _inline_copy_from_user+0x3c/0x174 [ 82.164970][ T6377] copy_msghdr_from_user+0xb8/0x194 [ 82.164980][ T6377] ___sys_recvmsg+0x11c/0x1f4 [ 82.164989][ T6377] do_recvmmsg+0x288/0x7d4 [ 82.164997][ T6377] __sys_recvmmsg+0x1e0/0x270 [ 82.165006][ T6377] __arm64_sys_recvmmsg+0xe0/0x108 [ 82.165015][ T6377] invoke_syscall+0x98/0x244 [ 82.165025][ T6377] el0_svc_common+0xec/0x23c [ 82.165035][ T6377] do_el0_svc+0x4c/0x5c [ 82.165044][ T6377] el0_svc+0x64/0x260 [ 82.165055][ T6377] el0t_64_sync_handler+0x48/0x148 [ 82.165064][ T6377] el0t_64_sync+0x198/0x19c [ 82.253810][ T1503] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.402760][ T1503] usb 1-1: Using ep0 maxpacket: 8 [ 82.406716][ T6397] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.424712][ T6397] md: could not open device unknown-block(7,0). [ 82.503072][ T6404] loop2: detected capacity change from 0 to 1024 [ 82.525764][ T6404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.936377][ T6414] loop1: detected capacity change from 0 to 1024 [ 82.963320][ T6414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.402147][ T6433] xt_hashlimit: size too large, truncated to 1048576 [ 83.423408][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.505759][ T6407] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 conventional PCI endpoint [ 83.521388][ T6407] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff] [ 83.527559][ T6407] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f] [ 83.529132][ T6407] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff] [ 83.534672][ T6407] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 83.539793][ T6407] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 83.541197][ T6407] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 83.544608][ T6407] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned [ 83.546626][ T6407] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned [ 83.548347][ T6407] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned [ 83.549965][ T6407] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 83.553632][ T6407] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 83.566422][ T6407] gve 0000:00:00.0: Driver is running with DQO RDA queue format. [ 83.569778][ T6407] gve 0000:00:00.0: MAC addr: 42:01:0a:80:01:60 [ 83.571129][ T6407] gve 0000:00:00.0: BUFFER SIZES device option enabled with max_rx_buffer_size of 4096, header_buf_size of 128. [ 83.573870][ T6407] gve 0000:00:00.0: FLOW STEERING device option enabled with max rule limit of 20000. [ 83.576019][ T6407] gve 0000:00:00.0: TX queues 2, RX queues 2 [ 83.577340][ T6407] gve 0000:00:00.0: Max TX queues 2, Max RX queues 2 [ 83.624877][ T6448] FAULT_INJECTION: forcing a failure. [ 83.624877][ T6448] name failslab, interval 1, probability 0, space 0, times 0 [ 83.624920][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.4.505 Not tainted syzkaller #0 PREEMPT [ 83.624935][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 83.624941][ T6448] Call trace: [ 83.624946][ T6448] show_stack+0x2c/0x3c (C) [ 83.624969][ T6448] __dump_stack+0x30/0x40 [ 83.624984][ T6448] dump_stack_lvl+0xd8/0x12c [ 83.624994][ T6448] dump_stack+0x1c/0x28 [ 83.625004][ T6448] should_fail_ex+0x41c/0x590 [ 83.625017][ T6448] should_failslab+0xc4/0x120 [ 83.625027][ T6448] __kmalloc_noprof+0x108/0x6b8 [ 83.625037][ T6448] kernfs_fop_write_iter+0x144/0x3b8 [ 83.625049][ T6448] vfs_write+0x51c/0xa0c [ 83.625057][ T6448] ksys_pwrite64+0x118/0x1ac [ 83.625063][ T6448] __arm64_sys_pwrite64+0xa8/0xc0 [ 83.625070][ T6448] invoke_syscall+0x98/0x244 [ 83.625081][ T6448] el0_svc_common+0xec/0x23c [ 83.625090][ T6448] do_el0_svc+0x4c/0x5c [ 83.625100][ T6448] el0_svc+0x64/0x260 [ 83.625111][ T6448] el0t_64_sync_handler+0x48/0x148 [ 83.625121][ T6448] el0t_64_sync+0x198/0x19c [ 83.667032][ T6407] gve 0000:00:00.0: GVE version 1.0.0 [ 83.672455][ T6407] gve 0000:00:00.0: GVE queue format 3 [ 83.718571][ T6407] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 83.723944][ T6459] 9p: Bad value for 'wfdno' [ 83.730149][ T4701] gve 0000:00:00.0 enp0s0: renamed from eth0 [ 83.795523][ T1503] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.798572][ T1503] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 83.800121][ T1503] usb 1-1: can't read configurations, error -71 [ 83.836991][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.996264][ T139] gve 0000:00:00.0 enp0s0: Device link is up. [ 102.811850][ T6507] CUSE: unknown device info "" [ 102.811888][ T6507] CUSE: unknown device info "" [ 102.811910][ T6507] CUSE: unknown device info "ÿw" [ 102.811921][ T6507] CUSE: unknown device info "" [ 102.811932][ T6507] CUSE: unknown device info "" [ 102.811940][ T6507] CUSE: unknown device info "" [ 102.811948][ T6507] CUSE: unknown device info "" [ 102.811955][ T6507] CUSE: unknown device info "" [ 102.811963][ T6507] CUSE: DEVNAME unspecified [ 102.862468][ T6517] loop2: detected capacity change from 0 to 1024 [ 103.036707][ T6517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.043273][ T6531] xt_hashlimit: size too large, truncated to 1048576 [ 103.132854][ T6536] loop4: detected capacity change from 0 to 512 [ 103.144784][ T6536] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.518: inode has both inline data and extents flags [ 103.144824][ T6536] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.148437][ T6536] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.518: couldn't read orphan inode 15 (err -117) [ 103.152389][ T6536] loop4: lost filesystem error report for type 5 error -117 [ 103.152589][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 103.152621][ C1] EXT4-fs (loop4): initial error at time 103: ext4_orphan_get:1399: inode 15 [ 103.152658][ C1] EXT4-fs (loop4): last error at time 103: ext4_orphan_get:1404 [ 103.158470][ T6536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.409266][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.431068][ T6542] loop4: detected capacity change from 0 to 2048 [ 103.508554][ T6544] loop4: detected capacity change from 0 to 256 [ 103.509025][ T6544] vfat: Unknown parameter 'nnonumtail' [ 103.745292][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.990881][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.523'. [ 104.071250][ T6563] FAULT_INJECTION: forcing a failure. [ 104.071250][ T6563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.071286][ T6563] CPU: 1 UID: 0 PID: 6563 Comm: syz.3.527 Not tainted syzkaller #0 PREEMPT [ 104.071299][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 104.071305][ T6563] Call trace: [ 104.071309][ T6563] show_stack+0x2c/0x3c (C) [ 104.071331][ T6563] __dump_stack+0x30/0x40 [ 104.071342][ T6563] dump_stack_lvl+0xd8/0x12c [ 104.071352][ T6563] dump_stack+0x1c/0x28 [ 104.071362][ T6563] should_fail_ex+0x41c/0x590 [ 104.071373][ T6563] should_fail+0x14/0x24 [ 104.071383][ T6563] should_fail_usercopy+0x20/0x30 [ 104.071393][ T6563] _inline_copy_from_user+0x3c/0x174 [ 104.071404][ T6563] copy_msghdr_from_user+0xb8/0x194 [ 104.071414][ T6563] ___sys_recvmsg+0x11c/0x1f4 [ 104.071423][ T6563] do_recvmmsg+0x288/0x7d4 [ 104.071431][ T6563] __sys_recvmmsg+0x1e0/0x270 [ 104.071440][ T6563] __arm64_sys_recvmmsg+0xe0/0x108 [ 104.071449][ T6563] invoke_syscall+0x98/0x244 [ 104.071460][ T6563] el0_svc_common+0xec/0x23c [ 104.071469][ T6563] do_el0_svc+0x4c/0x5c [ 104.071479][ T6563] el0_svc+0x64/0x260 [ 104.071490][ T6563] el0t_64_sync_handler+0x48/0x148 [ 104.071499][ T6563] el0t_64_sync+0x198/0x19c [ 104.097227][ T6565] xt_hashlimit: size too large, truncated to 1048576 [ 104.518740][ T6579] syz.0.530 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 104.521250][ T6579] CPU: 0 UID: 0 PID: 6579 Comm: syz.0.530 Not tainted syzkaller #0 PREEMPT [ 104.521268][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 104.521275][ T6579] Call trace: [ 104.521279][ T6579] show_stack+0x2c/0x3c (C) [ 104.521304][ T6579] __dump_stack+0x30/0x40 [ 104.521315][ T6579] dump_stack_lvl+0xd8/0x12c [ 104.521326][ T6579] dump_stack+0x1c/0x28 [ 104.521336][ T6579] dump_header+0xbc/0x3f0 [ 104.521344][ T6579] oom_kill_process+0x248/0x8a0 [ 104.521354][ T6579] out_of_memory+0xd24/0x1064 [ 104.521362][ T6579] mem_cgroup_out_of_memory+0xe8/0x170 [ 104.521372][ T6579] try_charge_memcg+0x8ec/0xc64 [ 104.521380][ T6579] obj_cgroup_charge_pages+0x30/0xb0 [ 104.521391][ T6579] __memcg_slab_post_alloc_hook+0x4a0/0x8cc [ 104.521402][ T6579] kmem_cache_alloc_lru_noprof+0x32c/0x5dc [ 104.521411][ T6579] alloc_inode+0x84/0x198 [ 104.521420][ T6579] new_inode+0x20/0x50 [ 104.521429][ T6579] gadgetfs_make_inode+0x34/0x18c [ 104.521439][ T6579] gadgetfs_create_file+0x48/0xd8 [ 104.521447][ T6579] gadgetfs_bind+0x3f8/0x75c [ 104.521455][ T6579] gadget_bind_driver+0x274/0x834 [ 104.521463][ T6579] really_probe+0x29c/0x800 [ 104.521474][ T6579] __driver_probe_device+0x1e0/0x350 [ 104.521483][ T6579] driver_probe_device+0x6c/0x19c [ 104.521493][ T6579] __driver_attach+0x168/0x384 [ 104.521502][ T6579] bus_for_each_dev+0x128/0x1b4 [ 104.521510][ T6579] driver_attach+0x50/0x60 [ 104.521519][ T6579] bus_add_driver+0x208/0x500 [ 104.521528][ T6579] driver_register+0x220/0x310 [ 104.521537][ T6579] usb_gadget_register_driver_owner+0xf0/0x25c [ 104.521549][ T6579] dev_config+0x91c/0xcc0 [ 104.521556][ T6579] vfs_write+0x2a4/0xa0c [ 104.521563][ T6579] ksys_write+0x12c/0x228 [ 104.521570][ T6579] __arm64_sys_write+0x84/0x98 [ 104.521577][ T6579] invoke_syscall+0x98/0x244 [ 104.521588][ T6579] el0_svc_common+0xec/0x23c [ 104.521602][ T6579] do_el0_svc+0x4c/0x5c [ 104.521613][ T6579] el0_svc+0x64/0x260 [ 104.521625][ T6579] el0t_64_sync_handler+0x48/0x148 [ 104.521635][ T6579] el0t_64_sync+0x198/0x19c [ 104.523903][ T6579] memory: usage 0kB, limit 0kB, failcnt 38 [ 104.523926][ T6579] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 104.523933][ T6579] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 104.523940][ T6579] Memory cgroup stats for /syz0/test: [ 104.524008][ T6579] cache 0 [ 104.524013][ T6579] rss 0 [ 104.524016][ T6579] rss_huge 0 [ 104.524020][ T6579] shmem 0 [ 104.524023][ T6579] mapped_file 0 [ 104.524026][ T6579] dirty 0 [ 104.524029][ T6579] writeback 0 [ 104.524032][ T6579] workingset_refault_anon 0 [ 104.524035][ T6579] workingset_refault_file 0 [ 104.524039][ T6579] swap 0 [ 104.524042][ T6579] swapcached 0 [ 104.524045][ T6579] pgpgin 0 [ 104.524048][ T6579] pgpgout 0 [ 104.524051][ T6579] pgfault 6 [ 104.524054][ T6579] pgmajfault 0 [ 104.524057][ T6579] inactive_anon 0 [ 104.524060][ T6579] active_anon 0 [ 104.524063][ T6579] inactive_file 0 [ 104.524066][ T6579] active_file 0 [ 104.524069][ T6579] unevictable 0 [ 104.524073][ T6579] hierarchical_memory_limit 0 [ 104.524076][ T6579] hierarchical_memsw_limit 9223372036854771712 [ 104.524079][ T6579] total_cache 0 [ 104.524083][ T6579] total_rss 0 [ 104.524085][ T6579] total_rss_huge 0 [ 104.524089][ T6579] total_shmem 0 [ 104.524092][ T6579] total_mapped_file 0 [ 104.524095][ T6579] total_dirty 0 [ 104.524098][ T6579] total_writeback 0 [ 104.524101][ T6579] total_workingset_refault_anon 0 [ 104.524104][ T6579] total_workingset_refault_file 0 [ 104.524108][ T6579] total_swap 0 [ 104.524111][ T6579] total_swapcached 0 [ 104.524114][ T6579] total_pgpgin 0 [ 104.524117][ T6579] total_pgpgout 0 [ 104.524120][ T6579] total_pgfault 6 [ 104.524123][ T6579] total_pgmajfault 0 [ 104.524127][ T6579] total_inactive_anon 0 [ 104.524130][ T6579] total_active_anon 0 [ 104.524133][ T6579] total_inactive_file 0 [ 104.524136][ T6579] total_active_file 0 [ 104.524139][ T6579] total_unevictable 0 [ 104.524142][ T6579] anon_cost 0 [ 104.524145][ T6579] file_cost 0 [ 104.524149][ T6579] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.530,pid=6578,uid=0 [ 104.524857][ T6579] Memory cgroup out of memory: Killed process 6578 (syz.0.530) total-vm:112420kB, anon-rss:1320kB, file-rss:21784kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 104.530229][ T6579] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 104.530250][ T6579] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 104.530633][ T6579] gadgetfs expected dummy_udc controller not usbip-vudc [ 104.530644][ T6579] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 104.532858][ T6579] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 104.555913][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 104.640047][ T6586] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 104.863187][ T6588] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.906613][ T6592] fuse: Unknown parameter 'user_id00000000000000000000' [ 104.914557][ T6588] md: could not open device unknown-block(1,0). [ 104.953279][ T6588] md: could not open device unknown-block(1,2). [ 104.973128][ T6588] md: could not open device unknown-block(1,3). [ 104.995759][ T6588] md/raid:md0: not clean -- starting background reconstruction [ 104.995916][ T6588] md/raid:md0: device ram0 operational as raid disk 0 [ 105.018280][ T6588] md/raid:md0: not enough operational devices (3/4 failed) [ 105.224700][ T6588] md/raid:md0: failed to run raid set. [ 105.227600][ T6600] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 conventional PCI endpoint [ 105.230415][ T6588] md: pers->run() failed ... [ 105.249524][ T6600] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff] [ 105.252410][ T6600] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f] [ 105.253994][ T6600] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff] [ 105.258204][ T6600] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned [ 105.260858][ T6600] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned [ 105.263893][ T6600] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned [ 105.276446][ T6600] gve 0000:00:00.0: Driver is running with DQO RDA queue format. [ 105.276526][ T6600] gve 0000:00:00.0: MAC addr: 42:01:0a:80:01:60 [ 105.276542][ T6600] gve 0000:00:00.0: BUFFER SIZES device option enabled with max_rx_buffer_size of 4096, header_buf_size of 128. [ 105.276553][ T6600] gve 0000:00:00.0: FLOW STEERING device option enabled with max rule limit of 20000. [ 105.276580][ T6600] gve 0000:00:00.0: TX queues 2, RX queues 2 [ 105.276592][ T6600] gve 0000:00:00.0: Max TX queues 2, Max RX queues 2 [ 105.489855][ T6600] gve 0000:00:00.0: GVE version 1.0.0 [ 105.492964][ T6600] gve 0000:00:00.0: GVE queue format 3 [ 105.586021][ T6515] gve 0000:00:00.0 enp0s0: renamed from eth0 [ 105.606397][ T139] Bluetooth: hci5: Frame reassembly failed (-84) [ 105.607840][ T139] Bluetooth: hci5: Frame reassembly failed (-84) [ 105.611243][ T6637] loop2: detected capacity change from 0 to 128 [ 105.612508][ T40] Bluetooth: hci5: Frame reassembly failed (-84) [ 105.643106][ T6637] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.173030][ T12] gve 0000:00:00.0 enp0s0: Device link is up. [ 106.362522][ T6670] fuse: Unknown parameter 'user_id00000000000000000000' [ 107.612658][ T4720] Bluetooth: hci5: command 0x1003 tx timeout [ 107.612655][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 107.650468][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.035850][ T6693] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 119.051206][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.552'. [ 119.066223][ T6696] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.110109][ T6695] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 119.110216][ T6695] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 119.110261][ T6695] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 119.110285][ T6695] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 119.110323][ T6695] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 119.110345][ T6695] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 119.110381][ T6695] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 119.110403][ T6695] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 119.110435][ T6695] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 119.110457][ T6695] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 119.140233][ T6696] md: could not open device unknown-block(1,0). [ 119.159867][ T6711] faux_driver vkms: [drm] Unknown color mode 4096; guessing buffer size. [ 119.173217][ T6696] md: could not open device unknown-block(1,2). [ 119.184803][ T6719] loop4: detected capacity change from 0 to 128 [ 119.204003][ T6719] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.213942][ T6696] md: could not open device unknown-block(1,3). [ 119.256180][ T6696] md/raid:md0: not clean -- starting background reconstruction [ 119.256327][ T6696] md/raid:md0: device ram0 operational as raid disk 0 [ 119.276618][ T6696] md/raid:md0: not enough operational devices (3/4 failed) [ 119.340442][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.394647][ T6738] overlayfs: failed to resolve './bus': -2 [ 119.410754][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 119.437776][ T6696] md/raid:md0: failed to run raid set. [ 119.438854][ T6696] md: pers->run() failed ... [ 119.499068][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 119.527986][ T6750] ipvlan2: entered promiscuous mode [ 119.529971][ T6750] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.549055][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.570'. [ 119.888345][ T6761] Bluetooth: MGMT ver 1.23 [ 120.071845][ T6771] loop4: detected capacity change from 0 to 128 [ 120.081165][ T6771] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.132212][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.152919][ T6776] loop1: detected capacity change from 0 to 256 [ 120.155502][ T6776] warning: `syz.1.577' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.184874][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.580'. [ 120.288424][ T6784] FAULT_INJECTION: forcing a failure. [ 120.288424][ T6784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.291107][ T6784] CPU: 0 UID: 0 PID: 6784 Comm: syz.0.583 Not tainted syzkaller #0 PREEMPT [ 120.291136][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 120.291146][ T6784] Call trace: [ 120.291149][ T6784] show_stack+0x2c/0x3c (C) [ 120.291177][ T6784] __dump_stack+0x30/0x40 [ 120.291189][ T6784] dump_stack_lvl+0xd8/0x12c [ 120.291200][ T6784] dump_stack+0x1c/0x28 [ 120.291209][ T6784] should_fail_ex+0x41c/0x590 [ 120.291221][ T6784] should_fail+0x14/0x24 [ 120.291231][ T6784] should_fail_usercopy+0x20/0x30 [ 120.291241][ T6784] _copy_from_iter+0x188/0x1064 [ 120.291250][ T6784] copy_page_from_iter+0x220/0x2e8 [ 120.291257][ T6784] tun_get_user+0x1764/0x364c [ 120.291269][ T6784] tun_chr_write_iter+0xfc/0x168 [ 120.291279][ T6784] vfs_write+0x51c/0xa0c [ 120.291287][ T6784] ksys_write+0x12c/0x228 [ 120.291293][ T6784] __arm64_sys_write+0x84/0x98 [ 120.291300][ T6784] invoke_syscall+0x98/0x244 [ 120.291310][ T6784] el0_svc_common+0xec/0x23c [ 120.291320][ T6784] do_el0_svc+0x4c/0x5c [ 120.291329][ T6784] el0_svc+0x64/0x260 [ 120.291340][ T6784] el0t_64_sync_handler+0x48/0x148 [ 120.291350][ T6784] el0t_64_sync+0x198/0x19c [ 120.298698][ T6780] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.364640][ T6780] md: could not open device unknown-block(1,0). [ 120.686518][ T6780] md: could not open device unknown-block(1,2). [ 120.702098][ T6799] FAULT_INJECTION: forcing a failure. [ 120.702098][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 120.702151][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.3.588 Not tainted syzkaller #0 PREEMPT [ 120.702164][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 120.702171][ T6799] Call trace: [ 120.702176][ T6799] show_stack+0x2c/0x3c (C) [ 120.702199][ T6799] __dump_stack+0x30/0x40 [ 120.702210][ T6799] dump_stack_lvl+0xd8/0x12c [ 120.702220][ T6799] dump_stack+0x1c/0x28 [ 120.702230][ T6799] should_fail_ex+0x41c/0x590 [ 120.702242][ T6799] should_failslab+0xc4/0x120 [ 120.702250][ T6799] __kmalloc_noprof+0x108/0x6b8 [ 120.702259][ T6799] tomoyo_encode2+0x10c/0x330 [ 120.702269][ T6799] tomoyo_encode+0x34/0x50 [ 120.702276][ T6799] tomoyo_realpath_from_path+0x488/0x4dc [ 120.702285][ T6799] tomoyo_path_number_perm+0x1f0/0x500 [ 120.702292][ T6799] tomoyo_file_ioctl+0x2c/0x3c [ 120.702300][ T6799] security_file_ioctl+0xdc/0x2b0 [ 120.702308][ T6799] __arm64_sys_ioctl+0xb0/0x1cc [ 120.702319][ T6799] invoke_syscall+0x98/0x244 [ 120.702329][ T6799] el0_svc_common+0xec/0x23c [ 120.702339][ T6799] do_el0_svc+0x4c/0x5c [ 120.702348][ T6799] el0_svc+0x64/0x260 [ 120.702359][ T6799] el0t_64_sync_handler+0x48/0x148 [ 120.702369][ T6799] el0t_64_sync+0x198/0x19c [ 120.702384][ T6799] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.733679][ T6801] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 120.772268][ T6792] md/raid:md0: not clean -- starting background reconstruction [ 120.772402][ T6792] md/raid:md0: device ram0 operational as raid disk 0 [ 120.791639][ T6792] md/raid:md0: not enough operational devices (3/4 failed) [ 120.875666][ T6814] netlink: 63 bytes leftover after parsing attributes in process `syz.3.592'. [ 121.230523][ T6823] loop3: detected capacity change from 0 to 512 [ 121.434448][ T6823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 122.382209][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.383145][ T6792] md/raid:md0: failed to run raid set. [ 122.383167][ T6792] md: pers->run() failed ... [ 122.568038][ T6860] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 122.656662][ T6876] FAULT_INJECTION: forcing a failure. [ 122.656662][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 122.656703][ T6876] CPU: 0 UID: 0 PID: 6876 Comm: syz.2.602 Not tainted syzkaller #0 PREEMPT [ 122.656717][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 122.656725][ T6876] Call trace: [ 122.656728][ T6876] show_stack+0x2c/0x3c (C) [ 122.656749][ T6876] __dump_stack+0x30/0x40 [ 122.656760][ T6876] dump_stack_lvl+0xd8/0x12c [ 122.656770][ T6876] dump_stack+0x1c/0x28 [ 122.656780][ T6876] should_fail_ex+0x41c/0x590 [ 122.656791][ T6876] should_failslab+0xc4/0x120 [ 122.656800][ T6876] __kmalloc_cache_noprof+0x94/0x5ec [ 122.656809][ T6876] io_ring_ctx_alloc+0x64/0x934 [ 122.656818][ T6876] io_uring_create+0x6c/0x830 [ 122.656826][ T6876] __arm64_sys_io_uring_setup+0x284/0x290 [ 122.656836][ T6876] invoke_syscall+0x98/0x244 [ 122.656847][ T6876] el0_svc_common+0xec/0x23c [ 122.656856][ T6876] do_el0_svc+0x4c/0x5c [ 122.656866][ T6876] el0_svc+0x64/0x260 [ 122.656877][ T6876] el0t_64_sync_handler+0x48/0x148 [ 122.656886][ T6876] el0t_64_sync+0x198/0x19c [ 122.685496][ T6873] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 125.933604][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934914][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.764513][ T6891] FAULT_INJECTION: forcing a failure. [ 127.764513][ T6891] name failslab, interval 1, probability 0, space 0, times 0 [ 127.764557][ T6891] CPU: 0 UID: 0 PID: 6891 Comm: syz.0.609 Not tainted syzkaller #0 PREEMPT [ 127.764572][ T6891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 127.764579][ T6891] Call trace: [ 127.764584][ T6891] show_stack+0x2c/0x3c (C) [ 127.764616][ T6891] __dump_stack+0x30/0x40 [ 127.764632][ T6891] dump_stack_lvl+0xd8/0x12c [ 127.764643][ T6891] dump_stack+0x1c/0x28 [ 127.764652][ T6891] should_fail_ex+0x41c/0x590 [ 127.764664][ T6891] should_failslab+0xc4/0x120 [ 127.764673][ T6891] __kvmalloc_node_noprof+0x160/0x7d8 [ 127.764682][ T6891] __arm64_sys_add_key+0x2e0/0x43c [ 127.764690][ T6891] invoke_syscall+0x98/0x244 [ 127.764701][ T6891] el0_svc_common+0xec/0x23c [ 127.764711][ T6891] do_el0_svc+0x4c/0x5c [ 127.764720][ T6891] el0_svc+0x64/0x260 [ 127.764731][ T6891] el0t_64_sync_handler+0x48/0x148 [ 127.764741][ T6891] el0t_64_sync+0x198/0x19c [ 127.791587][ T6893] loop3: detected capacity change from 0 to 256 [ 127.792179][ T6893] vfat: Unknown parameter 'obj_user' [ 127.877051][ T6898] loop2: detected capacity change from 0 to 7 [ 127.879667][ T6898] Dev loop2: unable to read RDB block 7 [ 127.879712][ T6898] loop2: unable to read partition table [ 127.879790][ T6898] loop2: partition table beyond EOD, truncated [ 127.879801][ T6898] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 127.997157][ T6912] ================================================================== [ 127.997180][ T6912] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x58/0x70 [ 127.997207][ T6912] Read of size 1 at addr ffff0000c304e018 by task syz.3.610/6912 [ 127.997216][ T6912] [ 127.997222][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.3.610 Not tainted syzkaller #0 PREEMPT [ 127.997233][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 127.997239][ T6912] Call trace: [ 127.997242][ T6912] show_stack+0x2c/0x3c (C) [ 127.997258][ T6912] __dump_stack+0x30/0x40 [ 127.997270][ T6912] dump_stack_lvl+0xd8/0x12c [ 127.997282][ T6912] print_address_description+0xb0/0x238 [ 127.997291][ T6912] print_report+0x68/0x84 [ 127.997299][ T6912] kasan_report+0x8c/0xc4 [ 127.997311][ T6912] __kasan_check_byte+0x3c/0x54 [ 127.997321][ T6912] lock_acquire+0xa4/0x364 [ 127.997330][ T6912] _raw_spin_lock_irq+0x58/0x70 [ 127.997342][ T6912] gadget_dev_open+0x50/0x1c4 [ 127.997352][ T6912] do_dentry_open+0x5c4/0xfc0 [ 127.997365][ T6912] vfs_open+0x44/0x2dc [ 127.997375][ T6912] path_openat+0x21fc/0x2a60 [ 127.997385][ T6912] do_file_open+0x1c8/0x2e8 [ 127.997395][ T6912] do_sys_openat2+0x114/0x1e8 [ 127.997406][ T6912] do_sys_open+0xb0/0xe0 [ 127.997417][ T6912] __arm64_sys_openat+0xa8/0xc4 [ 127.997429][ T6912] invoke_syscall+0x98/0x244 [ 127.997442][ T6912] el0_svc_common+0xec/0x23c [ 127.997454][ T6912] do_el0_svc+0x4c/0x5c [ 127.997465][ T6912] el0_svc+0x64/0x260 [ 127.997477][ T6912] el0t_64_sync_handler+0x48/0x148 [ 127.997489][ T6912] el0t_64_sync+0x198/0x19c [ 127.997498][ T6912] [ 127.997500][ T6912] Allocated by task 6812: [ 127.997505][ T6912] kasan_save_track+0x40/0x78 [ 127.997515][ T6912] kasan_save_alloc_info+0x44/0x54 [ 127.997524][ T6912] __kasan_kmalloc+0x9c/0xb4 [ 127.997532][ T6912] __kmalloc_noprof+0x340/0x6b8 [ 127.997540][ T6912] ieee802_11_parse_elems_full+0x114/0x21e4 [ 127.997552][ T6912] ieee80211_inform_bss+0x114/0xd70 [ 127.997563][ T6912] cfg80211_inform_single_bss_data+0xabc/0x19dc [ 127.997572][ T6912] cfg80211_inform_bss_data+0x1f0/0x2d24 [ 127.997580][ T6912] cfg80211_inform_bss_frame_data+0x348/0x838 [ 127.997587][ T6912] ieee80211_bss_info_update+0x5d0/0x944 [ 127.997603][ T6912] ieee80211_scan_rx+0x450/0x928 [ 127.997613][ T6912] ieee80211_rx_list+0x229c/0x3000 [ 127.997622][ T6912] ieee80211_rx_napi+0x18c/0x370 [ 127.997631][ T6912] ieee80211_handle_queued_frames+0xc8/0x17c [ 127.997640][ T6912] ieee80211_tasklet_handler+0x20/0x30 [ 127.997648][ T6912] tasklet_action_common+0x1dc/0x278 [ 127.997657][ T6912] tasklet_action+0x68/0x8c [ 127.997663][ T6912] handle_softirqs+0x2ec/0xd98 [ 127.997670][ T6912] __do_softirq+0x14/0x20 [ 127.997676][ T6912] [ 127.997678][ T6912] Freed by task 6812: [ 127.997681][ T6912] kasan_save_track+0x40/0x78 [ 127.997689][ T6912] kasan_save_free_info+0x58/0x70 [ 127.997699][ T6912] __kasan_slab_free+0x74/0xa4 [ 127.997707][ T6912] kfree+0x188/0x690 [ 127.997714][ T6912] ieee80211_inform_bss+0x914/0xd70 [ 127.997724][ T6912] cfg80211_inform_single_bss_data+0xabc/0x19dc [ 127.997732][ T6912] cfg80211_inform_bss_data+0x1f0/0x2d24 [ 127.997739][ T6912] cfg80211_inform_bss_frame_data+0x348/0x838 [ 127.997747][ T6912] ieee80211_bss_info_update+0x5d0/0x944 [ 127.997758][ T6912] ieee80211_scan_rx+0x450/0x928 [ 127.997768][ T6912] ieee80211_rx_list+0x229c/0x3000 [ 127.997777][ T6912] ieee80211_rx_napi+0x18c/0x370 [ 127.997785][ T6912] ieee80211_handle_queued_frames+0xc8/0x17c [ 127.997793][ T6912] ieee80211_tasklet_handler+0x20/0x30 [ 127.997801][ T6912] tasklet_action_common+0x1dc/0x278 [ 127.997808][ T6912] tasklet_action+0x68/0x8c [ 127.997815][ T6912] handle_softirqs+0x2ec/0xd98 [ 127.997822][ T6912] __do_softirq+0x14/0x20 [ 127.997828][ T6912] [ 127.997830][ T6912] The buggy address belongs to the object at ffff0000c304e000 [ 127.997830][ T6912] which belongs to the cache kmalloc-1k of size 1024 [ 127.997836][ T6912] The buggy address is located 24 bytes inside of [ 127.997836][ T6912] freed 1024-byte region [ffff0000c304e000, ffff0000c304e400) [ 127.997845][ T6912] [ 127.997847][ T6912] The buggy address belongs to the physical page: [ 127.997852][ T6912] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103048 [ 127.997860][ T6912] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 127.997866][ T6912] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 127.997875][ T6912] page_type: f5(slab) [ 127.997883][ T6912] raw: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 127.997890][ T6912] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 127.997898][ T6912] head: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 127.997905][ T6912] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 127.997912][ T6912] head: 05ffc00000000003 fffffdffc30c1201 00000000ffffffff 00000000ffffffff [ 127.997919][ T6912] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 127.997923][ T6912] page dumped because: kasan: bad access detected [ 127.997927][ T6912] [ 127.997928][ T6912] Memory state around the buggy address: [ 127.997933][ T6912] ffff0000c304df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.997938][ T6912] ffff0000c304df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.997944][ T6912] >ffff0000c304e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.997947][ T6912] ^ [ 127.997952][ T6912] ffff0000c304e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.997957][ T6912] ffff0000c304e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.997961][ T6912] ================================================================== [ 127.997965][ T6912] Disabling lock debugging due to kernel taint [ 127.997969][ T6912] ------------[ cut here ]------------ [ 127.997972][ T6912] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.h:68:9 [ 127.997979][ T6912] index 12791 is out of range for type 'unsigned long[8]' [ 127.997986][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.3.610 Tainted: G B syzkaller #0 PREEMPT [ 127.997996][ T6912] Tainted: [B]=BAD_PAGE [ 127.997999][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 127.998004][ T6912] Call trace: [ 127.998006][ T6912] show_stack+0x2c/0x3c (C) [ 127.998019][ T6912] __dump_stack+0x30/0x40 [ 127.998030][ T6912] dump_stack_lvl+0xd8/0x12c [ 127.998041][ T6912] dump_stack+0x1c/0x28 [ 127.998052][ T6912] ubsan_epilogue+0x14/0x48 [ 127.998063][ T6912] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 127.998076][ T6912] queued_spin_lock_slowpath+0x834/0xd04 [ 127.998089][ T6912] do_raw_spin_lock+0x21c/0x2d0 [ 127.998099][ T6912] _raw_spin_lock_irq+0x60/0x70 [ 127.998111][ T6912] gadget_dev_open+0x50/0x1c4 [ 127.998119][ T6912] do_dentry_open+0x5c4/0xfc0 [ 127.998131][ T6912] vfs_open+0x44/0x2dc [ 127.998141][ T6912] path_openat+0x21fc/0x2a60 [ 127.998151][ T6912] do_file_open+0x1c8/0x2e8 [ 127.998161][ T6912] do_sys_openat2+0x114/0x1e8 [ 127.998172][ T6912] do_sys_open+0xb0/0xe0 [ 127.998183][ T6912] __arm64_sys_openat+0xa8/0xc4 [ 127.998194][ T6912] invoke_syscall+0x98/0x244 [ 127.998206][ T6912] el0_svc_common+0xec/0x23c [ 127.998217][ T6912] do_el0_svc+0x4c/0x5c [ 127.998229][ T6912] el0_svc+0x64/0x260 [ 127.998239][ T6912] el0t_64_sync_handler+0x48/0x148 [ 127.998251][ T6912] el0t_64_sync+0x198/0x19c [ 127.998259][ T6912] ---[ end trace ]--- [ 127.998274][ T6912] Unable to handle kernel paging request at virtual address ffff800088ac7730 [ 127.998280][ T6912] KASAN: probably user-memory-access in range [0x000000044563b980-0x000000044563b987] [ 127.998285][ T6912] Mem abort info: [ 127.998287][ T6912] ESR = 0x0000000096000047 [ 127.998291][ T6912] EC = 0x25: DABT (current EL), IL = 32 bits [ 127.998296][ T6912] SET = 0, FnV = 0 [ 127.998299][ T6912] EA = 0, S1PTW = 0 [ 127.998303][ T6912] FSC = 0x07: level 3 translation fault [ 127.998307][ T6912] Data abort info: [ 127.998309][ T6912] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 [ 127.998313][ T6912] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 127.998317][ T6912] GCS = 0, Overlay = 0, DirtyBit = 0 [ 127.998322][ T6912] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b01f000 [ 127.998328][ T6912] [ffff800088ac7730] pgd=0000000000000000, p4d=10000002212fc003, pud=10000002212fd003, pmd=1000000221301003, pte=0000000000000000 [ 127.998350][ T6912] Internal error: Oops: 0000000096000047 [#1] SMP [ 128.134061][ T6912] Modules linked in: [ 128.134733][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.3.610 Tainted: G B syzkaller #0 PREEMPT [ 128.136431][ T6912] Tainted: [B]=BAD_PAGE [ 128.137120][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 128.138835][ T6912] pstate: 834000c5 (Nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 128.140133][ T6912] pc : queued_spin_lock_slowpath+0x544/0xd04 [ 128.141149][ T6912] lr : queued_spin_lock_slowpath+0x834/0xd04 [ 128.142147][ T6912] sp : ffff8000995c7560 [ 128.142820][ T6912] x29: ffff8000995c7600 x28: ffff800088ac7730 x27: 1fffe0001963b3aa [ 128.144164][ T6912] x26: 1fffe00018609c00 x25: ffff0001ade40708 x24: dfff800000000000 [ 128.145530][ T6912] x23: ffff7000132b8eb0 x22: ffff0001ade40700 x21: 1fffe00035bc80e0 [ 128.146911][ T6912] x20: ffff0000cb1d9d50 x19: ffff0000c304e000 x18: 1fffe00035bc5428 [ 128.148280][ T6912] x17: 363a682e6b636f6c x16: 0000000000000001 x15: 0000000000000000 [ 128.149590][ T6912] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000004 [ 128.151007][ T6912] x11: ffff70001145ec6c x10: ffff800088ac7700 x9 : ffff800088ac7730 [ 128.152404][ T6912] x8 : 0000000000000000 x7 : 0000000000000001 x6 : ffff80008048e080 [ 128.153872][ T6912] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f74b4 [ 128.155229][ T6912] x2 : 0000000000000002 x1 : 0000000000000004 x0 : ffff0001ade40708 [ 128.156648][ T6912] Call trace: [ 128.157233][ T6912] queued_spin_lock_slowpath+0x544/0xd04 (P) [ 128.158284][ T6912] do_raw_spin_lock+0x21c/0x2d0 [ 128.159158][ T6912] _raw_spin_lock_irq+0x60/0x70 [ 128.159990][ T6912] gadget_dev_open+0x50/0x1c4 [ 128.160819][ T6912] do_dentry_open+0x5c4/0xfc0 [ 128.161648][ T6912] vfs_open+0x44/0x2dc [ 128.162334][ T6912] path_openat+0x21fc/0x2a60 [ 128.163123][ T6912] do_file_open+0x1c8/0x2e8 [ 128.163950][ T6912] do_sys_openat2+0x114/0x1e8 [ 128.164796][ T6912] do_sys_open+0xb0/0xe0 [ 128.165530][ T6912] __arm64_sys_openat+0xa8/0xc4 [ 128.166388][ T6912] invoke_syscall+0x98/0x244 [ 128.167151][ T6912] el0_svc_common+0xec/0x23c [ 128.167934][ T6912] do_el0_svc+0x4c/0x5c [ 128.168645][ T6912] el0_svc+0x64/0x260 [ 128.169333][ T6912] el0t_64_sync_handler+0x48/0x148 [ 128.170256][ T6912] el0t_64_sync+0x198/0x19c [ 128.171110][ T6912] Code: aa1c03e0 968a425d 910022c0 52800081 (f9000396) [ 128.172379][ T6912] ---[ end trace 0000000000000000 ]--- [ 128.731840][ T6912] Kernel panic - not syncing: Oops: Fatal exception [ 128.732986][ T6912] SMP: stopping secondary CPUs [ 128.733796][ T6912] Kernel Offset: disabled [ 128.734529][ T6912] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 128.735659][ T6912] Memory Limit: none [ 129.280937][ T6912] Rebooting in 86400 seconds..