last executing test programs: 10.694527884s ago: executing program 1 (id=669): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 7.354848672s ago: executing program 1 (id=696): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x19e0, 0x400, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x80, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 6.292894112s ago: executing program 1 (id=703): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0105b08, &(0x7f0000000040)={0x1, 0x2, 0x3cf3, 0x202000, 0x110001, 0x9}) 6.216281239s ago: executing program 3 (id=705): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4075, &(0x7f0000004480)="$eJzszzFKK1EUBuB/kszLPBkIglaCGCzsZOysZhfpJWuwslBxdmIpLsB9uAdLXYISZGI0toEg31cczpyfM/fesN3e+qZajookT/PH3SRH03RN8xmO+vz/13ZzlnKnGqROcrn+89nDRu8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsm/FKP1gNRjdJuuerk35QLcq/RZkfpLtuc14n1f4kuRumbA+L7CXT01/OGCYvSYokr0lmkw2+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Qy6+fY1/xnXf3K6v3h+na8tl+v7B7hwTAADCMBDMiEFMYjJYaPc7A/9tx9mT3Ld9BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDPDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAYAAABAmL91Hu0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmwIAAP//kFMWRg==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/net\x00') 5.362564102s ago: executing program 3 (id=707): setxattr(0x0, &(0x7f0000000140)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0xc4d5, 0x16, 0x0, 0x0) 5.216503234s ago: executing program 3 (id=708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0x9}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="9d", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[], 0x10}}], 0x2, 0x4040084) 4.340037763s ago: executing program 2 (id=711): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000100)='27', 0x2) ioctl$TCSETAW(r0, 0x5407, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 4.33995626s ago: executing program 3 (id=712): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.111789326s ago: executing program 2 (id=714): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1842, 0x267) fcntl$getflags(r1, 0x401) 3.758843413s ago: executing program 0 (id=716): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x19e0, 0x400, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x80, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 3.758689625s ago: executing program 2 (id=717): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$P9_RGETLOCK(r2, 0x0, 0xffffff20) write(r2, &(0x7f0000000100)="af", 0xfffffe00) write(r0, 0x0, 0x0) 3.495518189s ago: executing program 0 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x88a8, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.04545643s ago: executing program 1 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) 2.800851626s ago: executing program 1 (id=722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x5, 0x8, 0x100, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x44}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2.749627974s ago: executing program 2 (id=723): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x31, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.602192805s ago: executing program 4 (id=724): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/107, 0x6b}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x2}, 0x3ff}], 0x1, 0xcb, 0x0) 2.460630293s ago: executing program 1 (id=725): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.406902926s ago: executing program 0 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) 2.196743667s ago: executing program 5 (id=728): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x18, &(0x7f0000000300)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe}, @snprintf], 0x0, 0x3ff, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.18623185s ago: executing program 0 (id=729): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x228}], 0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 2.186083351s ago: executing program 4 (id=730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002f00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000002f80)='./nfsd\x00', &(0x7f0000002fc0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000003080)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000030c0)='3', 0x1) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0xffffff1e}, 0x1c) 1.975825914s ago: executing program 0 (id=731): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setresgid(0x0, 0xee00, 0x0) 1.894624462s ago: executing program 0 (id=732): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x1, 0x5, &(0x7f0000000080)={0x6, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) 1.879600852s ago: executing program 4 (id=733): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000240)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000400)={r4}) 1.748742317s ago: executing program 4 (id=734): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x0) 1.481329128s ago: executing program 5 (id=735): socket$inet(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x4, &(0x7f0000000540), 0x1, 0x76a, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001480)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000014c0)={@id={0x2, 0x0, @d}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002080)='./dev\x00', 0x1ff) 1.253752878s ago: executing program 5 (id=736): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}, {@verity_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e3", 0x1}], 0x1, 0xffff, 0x3ff, 0x0) 1.078045378s ago: executing program 3 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2004880, &(0x7f0000000100)=ANY=[], 0xfc, 0x60b0, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000006840)='./file1\x00', 0xc4042, 0x17f) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000006880), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 1.013231951s ago: executing program 5 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000038500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000038540)='./proc\x00', &(0x7f00000386c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000038700)='./proc/thread-self/fail-nth\x00', 0x2, 0x100) write(r0, &(0x7f0000038740)='100', 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000388c0)={0x0, 0x0, &(0x7f0000038900)={&(0x7f0000038940)=@newlink={0x34, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x20000840) 809.858492ms ago: executing program 5 (id=739): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000a40), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000a80)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 718.889579ms ago: executing program 4 (id=740): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000040)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/icmp\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000400)=""/163, 0xa3}], 0x1, 0xdd, 0x9) 416.527692ms ago: executing program 4 (id=741): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001000000000000000000fe80000000000000000000000000002b86dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 293.633534ms ago: executing program 2 (id=742): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="b3", 0x1}], 0x1, &(0x7f0000000280)=ANY=[], 0xf0}}], 0x1, 0x24004c41) 216.858616ms ago: executing program 5 (id=743): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 35.801612ms ago: executing program 2 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x20, 0x0) 0s ago: executing program 3 (id=745): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setresgid(0x0, 0xee00, 0x0) kernel console output (not intermixed with test programs): [ 160.969507][ T6967] RIP: 0033:0x7f5a0b99fb19 [ 160.969537][ T6967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.969576][ T6967] RSP: 002b:00007f5a0c928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 160.969615][ T6967] RAX: ffffffffffffffda RBX: 00007f5a0bc25fa0 RCX: 00007f5a0b99fb19 [ 160.969641][ T6967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 160.969666][ T6967] RBP: 00007f5a0ba37b70 R08: 0000000000000000 R09: 0000000000000000 [ 160.969691][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.969716][ T6967] R13: 00007f5a0bc26038 R14: 00007f5a0bc25fa0 R15: 00007ffc13886588 [ 160.969768][ T6967] [ 161.585497][ T6943] loop0: detected capacity change from 0 to 32768 [ 161.641012][ T6943] (syz.0.358,6943,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 161.641593][ T6943] (syz.0.358,6943,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 161.710106][ T6943] JBD2: Ignoring recovery information on journal [ 161.859724][ T6989] loop4: detected capacity change from 0 to 1024 [ 161.868298][ T6943] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 161.903422][ T6989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.516482][ T5639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.600131][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.384'. [ 162.615404][ T5640] ocfs2: Unmounting device (7,0) on (node local) [ 162.660236][ T7002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.661286][ T7004] lo: entered promiscuous mode [ 162.665677][ T7004] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 162.720037][ T7004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.760563][ T7004] bond1: (slave lo): Enslaving as an active interface with an up link [ 162.873293][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 162.961734][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 163.041564][ T7015] FAULT_INJECTION: forcing a failure. [ 163.041564][ T7015] name failslab, interval 1, probability 0, space 0, times 0 [ 163.041609][ T7015] CPU: 1 UID: 0 PID: 7015 Comm: syz.0.381 Not tainted syzkaller #0 PREEMPT(full) [ 163.041653][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 163.041676][ T7015] Call Trace: [ 163.041688][ T7015] [ 163.041703][ T7015] dump_stack_lvl+0x100/0x190 [ 163.041766][ T7015] should_fail_ex.cold+0x5/0xa [ 163.041822][ T7015] should_failslab+0xc2/0x120 [ 163.041881][ T7015] __kmalloc_flags_noprof+0x122/0x8e0 [ 163.041922][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.041975][ T7015] ? find_held_lock+0x2b/0x80 [ 163.042012][ T7015] ? __pcs_replace_empty_main+0x132/0x650 [ 163.042054][ T7015] ? __pcs_replace_empty_main+0x3fa/0x650 [ 163.042105][ T7015] __pcs_replace_empty_main+0x3fa/0x650 [ 163.042154][ T7015] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 163.042206][ T7015] ? jffs2_prealloc_raw_node_refs+0x1db/0x370 [ 163.042278][ T7015] jffs2_prealloc_raw_node_refs+0x1db/0x370 [ 163.042350][ T7015] jffs2_scan_medium+0x5df/0x59b0 [ 163.042417][ T7015] ? __pfx_jffs2_scan_medium+0x10/0x10 [ 163.042453][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.042497][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.042544][ T7015] ? trace_kmalloc+0xeb/0x110 [ 163.042599][ T7015] ? __kasan_kmalloc+0xaa/0xb0 [ 163.042656][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.042702][ T7015] ? __kmalloc_noprof+0x350/0x840 [ 163.042752][ T7015] ? jffs2_sum_init+0xc4/0x1b0 [ 163.042807][ T7015] jffs2_do_mount_fs+0x8a0/0x22f0 [ 163.042858][ T7015] ? rcu_is_watching+0x13/0xc0 [ 163.042897][ T7015] ? trace_kmalloc+0xeb/0x110 [ 163.042956][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.043002][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.043048][ T7015] ? lockdep_init_map_type+0x5c/0x250 [ 163.043101][ T7015] ? __pfx_jffs2_do_mount_fs+0x10/0x10 [ 163.043142][ T7015] ? __raw_spin_lock_init+0x3a/0x110 [ 163.043201][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.043247][ T7015] ? __init_rwsem+0x10e/0x180 [ 163.043308][ T7015] jffs2_do_fill_super+0x3d4/0xa60 [ 163.043363][ T7015] jffs2_fill_super+0x283/0x370 [ 163.043409][ T7015] ? __pfx_get_mtd_device+0x10/0x10 [ 163.043450][ T7015] ? __pfx_jffs2_fill_super+0x10/0x10 [ 163.043499][ T7015] mtd_get_sb+0x2f9/0x4d0 [ 163.043545][ T7015] ? __pfx_jffs2_fill_super+0x10/0x10 [ 163.043594][ T7015] get_tree_mtd+0x6f9/0x8a0 [ 163.043641][ T7015] ? __pfx_get_tree_mtd+0x10/0x10 [ 163.043686][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.043738][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.043783][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.043828][ T7015] ? security_capable+0x80/0x260 [ 163.043878][ T7015] vfs_get_tree+0x92/0x320 [ 163.043920][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.043974][ T7015] path_mount+0x7d0/0x2850 [ 163.044030][ T7015] ? __pfx_path_mount+0x10/0x10 [ 163.044074][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.044119][ T7015] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.044181][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.044226][ T7015] ? kmem_cache_free+0x127/0x6c0 [ 163.044285][ T7015] ? __x64_sys_mount+0x293/0x310 [ 163.044330][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.044375][ T7015] __x64_sys_mount+0x293/0x310 [ 163.044423][ T7015] ? __pfx___x64_sys_mount+0x10/0x10 [ 163.044476][ T7015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.044531][ T7015] do_syscall_64+0x123/0x790 [ 163.044592][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.044631][ T7015] RIP: 0033:0x7fe58b19fb19 [ 163.044662][ T7015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.044699][ T7015] RSP: 002b:00007fe58c021028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.044736][ T7015] RAX: ffffffffffffffda RBX: 00007fe58b425fa0 RCX: 00007fe58b19fb19 [ 163.044762][ T7015] RDX: 0000200000000280 RSI: 0000200000000200 RDI: 00002000000001c0 [ 163.044788][ T7015] RBP: 00007fe58b237b70 R08: 0000000000000000 R09: 0000000000000000 [ 163.044812][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.044835][ T7015] R13: 00007fe58b426038 R14: 00007fe58b425fa0 R15: 00007fff95e501c8 [ 163.044887][ T7015] [ 163.187413][ T7015] jffs2: notice: (7015) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 163.925509][ T7038] FAULT_INJECTION: forcing a failure. [ 163.925509][ T7038] name failslab, interval 1, probability 0, space 0, times 0 [ 163.925555][ T7038] CPU: 0 UID: 0 PID: 7038 Comm: syz.4.396 Not tainted syzkaller #0 PREEMPT(full) [ 163.925600][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 163.925623][ T7038] Call Trace: [ 163.925636][ T7038] [ 163.925650][ T7038] dump_stack_lvl+0x100/0x190 [ 163.925717][ T7038] should_fail_ex.cold+0x5/0xa [ 163.925774][ T7038] should_failslab+0xc2/0x120 [ 163.925835][ T7038] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 163.925886][ T7038] ? start_dirop+0x79/0xb0 [ 163.925950][ T7038] ? alloc_inode+0x68/0x250 [ 163.926004][ T7038] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 163.926047][ T7038] alloc_inode+0x68/0x250 [ 163.926100][ T7038] new_inode+0x22/0x1c0 [ 163.926156][ T7038] __debugfs_create_file+0xfb/0x500 [ 163.926204][ T7038] debugfs_create_file_unsafe+0x3c/0x50 [ 163.926250][ T7038] ptp_open+0x3b8/0x510 [ 163.926304][ T7038] ? __pfx_ptp_open+0x10/0x10 [ 163.926352][ T7038] ? do_raw_spin_lock+0x128/0x260 [ 163.926410][ T7038] ? posix_clock_open+0xc8/0x290 [ 163.926478][ T7038] ? __pfx_ptp_open+0x10/0x10 [ 163.926521][ T7038] posix_clock_open+0x17b/0x290 [ 163.926583][ T7038] ? __pfx_posix_clock_open+0x10/0x10 [ 163.926644][ T7038] chrdev_open+0x234/0x6a0 [ 163.926682][ T7038] ? __pfx_chrdev_open+0x10/0x10 [ 163.926719][ T7038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.926766][ T7038] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 163.926829][ T7038] do_dentry_open+0x674/0x1470 [ 163.926885][ T7038] ? __pfx_chrdev_open+0x10/0x10 [ 163.926922][ T7038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.926983][ T7038] vfs_open_consume+0xcc/0x460 [ 163.927024][ T7038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.927077][ T7038] path_openat+0x1547/0x23f0 [ 163.927124][ T7038] ? __pfx_path_openat+0x10/0x10 [ 163.927176][ T7038] do_file_open+0x20e/0x430 [ 163.927218][ T7038] ? __pfx_do_file_open+0x10/0x10 [ 163.927291][ T7038] ? _raw_spin_unlock+0x28/0x50 [ 163.927338][ T7038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.927384][ T7038] ? alloc_fd+0x471/0x7a0 [ 163.927438][ T7038] do_sys_openat2+0x163/0x1d0 [ 163.927481][ T7038] ? __pfx_do_sys_openat2+0x10/0x10 [ 163.927543][ T7038] __x64_sys_openat+0x12d/0x210 [ 163.927589][ T7038] ? __pfx___x64_sys_openat+0x10/0x10 [ 163.927643][ T7038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.927699][ T7038] do_syscall_64+0x123/0x790 [ 163.927763][ T7038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.927803][ T7038] RIP: 0033:0x7f29ab19fb19 [ 163.927833][ T7038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.927871][ T7038] RSP: 002b:00007f29ac01a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 163.927908][ T7038] RAX: ffffffffffffffda RBX: 00007f29ab425fa0 RCX: 00007f29ab19fb19 [ 163.927939][ T7038] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: ffffffffffffff9c [ 163.927964][ T7038] RBP: 00007f29ab237b70 R08: 0000000000000000 R09: 0000000000000000 [ 163.927990][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.928013][ T7038] R13: 00007f29ab426038 R14: 00007f29ab425fa0 R15: 00007ffdf94f4988 [ 163.928066][ T7038] [ 163.938505][ T7038] debugfs: out of free dentries, can not create file 'mask' [ 164.427939][ T7046] loop4: detected capacity change from 0 to 1024 [ 164.429089][ T7046] EXT4-fs: Ignoring removed bh option [ 164.501103][ T7046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 164.501239][ T7046] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.583544][ T7046] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: block 3: comm syz.4.399: lblock 3 mapped to illegal pblock 3 (length 3) [ 164.595609][ T7046] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 164.595654][ T7046] EXT4-fs (loop4): This should not happen!! Data will be lost [ 164.595654][ T7046] [ 164.639343][ T7046] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: block 3: comm syz.4.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.662094][ T7046] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: block 3: comm syz.4.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.665067][ T7046] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: block 3: comm syz.4.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.671885][ T7046] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: block 3: comm syz.4.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.674982][ T7046] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: block 3: comm syz.4.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.680351][ T7046] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: block 3: comm syz.4.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.690373][ T7046] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: block 3: comm syz.4.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.691681][ T7046] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: block 3: comm syz.4.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.693826][ T7046] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: block 3: comm syz.4.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.796775][ T7044] loop1: detected capacity change from 0 to 32768 [ 164.801625][ T7044] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.398 (7044) [ 164.898672][ T7044] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.898722][ T7044] BTRFS info (device loop1): using crc32c checksum algorithm [ 164.899909][ T7057] loop0: detected capacity change from 0 to 128 [ 164.913066][ T7057] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 165.171739][ T7044] BTRFS info (device loop1): enabling ssd optimizations [ 165.171777][ T7044] BTRFS info (device loop1): turning on flush-on-commit [ 165.171807][ T7044] BTRFS info (device loop1): enabling free space tree [ 165.171836][ T7044] BTRFS info (device loop1): enabling auto defrag [ 165.171866][ T7044] BTRFS info (device loop1): use lzo compression, level 1 [ 165.171902][ T7044] BTRFS info (device loop1): max_inline set to 4096 [ 165.177732][ T5639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.178670][ T7073] loop2: detected capacity change from 0 to 512 [ 165.247068][ T7073] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 165.254945][ T7073] EXT4-fs error (device loop2): ext4_iget_extra_inode:6026: inode #15: comm syz.2.403: corrupted in-inode xattr: e_value size too large [ 165.254994][ T7073] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.262545][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 165.262574][ C0] EXT4-fs (loop2): initial error at time 1794092331: ext4_iget_extra_inode:6026: inode 15 [ 165.262622][ C0] EXT4-fs (loop2): last error at time 1794092331: ext4_iget_extra_inode:6026: inode 15 [ 165.266144][ T7073] EXT4-fs error (device loop2): ext4_orphan_get:1407: comm syz.2.403: couldn't read orphan inode 15 (err -117) [ 165.266190][ T7073] loop2: lost filesystem error report for type 5 error -117 [ 165.331028][ T7073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.380725][ T7035] loop3: detected capacity change from 0 to 32768 [ 165.398612][ T7035] (syz.3.394,7035,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 165.400414][ T7035] (syz.3.394,7035,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 165.508898][ T7035] JBD2: Ignoring recovery information on journal [ 165.618812][ T7035] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 165.741328][ T5638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.797211][ T5636] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.156314][ T5780] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 166.297757][ T7100] Bluetooth: MGMT ver 1.23 [ 166.319377][ T5780] usb 5-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.340594][ T5780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.377411][ T5780] usb 5-1: config 0 descriptor?? [ 166.430510][ T5780] cp210x 5-1:0.0: cp210x converter detected [ 166.547394][ T7096] loop2: detected capacity change from 0 to 32768 [ 166.566578][ T5637] ocfs2: Unmounting device (7,3) on (node local) [ 166.595831][ T7096] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 166.595858][ T7096] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 166.676159][ T7096] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 166.754308][ T5368] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 166.754336][ T5368] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 167.071083][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.071779][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.113812][ T5780] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 167.113856][ T5780] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 167.132214][ T31] audit: type=1804 audit(1794092333.592:8): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.416" name="/newroot/60/tracing/events/sched/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 167.172266][ T5780] usb 5-1: cp210x converter now attached to ttyUSB0 [ 167.185155][ T5780] usb 5-1: USB disconnect, device number 8 [ 167.229187][ T7110] FAULT_INJECTION: forcing a failure. [ 167.229187][ T7110] name failslab, interval 1, probability 0, space 0, times 0 [ 167.229231][ T7110] CPU: 1 UID: 0 PID: 7110 Comm: syz.5.415 Not tainted syzkaller #0 PREEMPT(full) [ 167.229275][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 167.229298][ T7110] Call Trace: [ 167.229310][ T7110] [ 167.229324][ T7110] dump_stack_lvl+0x100/0x190 [ 167.229388][ T7110] should_fail_ex.cold+0x5/0xa [ 167.229443][ T7110] should_failslab+0xc2/0x120 [ 167.229503][ T7110] kmem_cache_alloc_noprof+0x92/0x6a0 [ 167.229530][ T5780] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 167.229555][ T7110] ? __kernfs_new_node+0xd2/0xa10 [ 167.229620][ T7110] __kernfs_new_node+0xd2/0xa10 [ 167.229684][ T7110] ? __pfx___kernfs_new_node+0x10/0x10 [ 167.229745][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.229791][ T7110] ? lock_acquire+0x1d1/0x380 [ 167.229840][ T7110] ? kernfs_root+0x23/0x2a0 [ 167.229889][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.229940][ T7110] ? find_held_lock+0x2b/0x80 [ 167.229982][ T7110] ? kernfs_root+0xee/0x2a0 [ 167.230031][ T7110] ? kernfs_root+0xee/0x2a0 [ 167.230077][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.230136][ T7110] kernfs_new_node+0x194/0x200 [ 167.230156][ T5780] cp210x 5-1:0.0: device disconnected [ 167.230197][ T7110] ? __pfx_kernfs_new_node+0x10/0x10 [ 167.230257][ T7110] ? __pfx_map_id_range_down+0x10/0x10 [ 167.230312][ T7110] ? kernfs_root+0xee/0x2a0 [ 167.230362][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.230415][ T7110] __kernfs_create_file+0x53/0x350 [ 167.230462][ T7110] sysfs_add_file_mode_ns+0x207/0x3c0 [ 167.230524][ T7110] sysfs_merge_group+0x194/0x340 [ 167.230581][ T7110] ? __pfx_sysfs_merge_group+0x10/0x10 [ 167.230634][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.230680][ T7110] ? bus_add_device+0x2e2/0x6c0 [ 167.230731][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.230778][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.230826][ T7110] ? __pfx_bus_add_device+0x10/0x10 [ 167.230876][ T7110] ? __pfx_dev_add_physical_location+0x10/0x10 [ 167.230933][ T7110] dpm_sysfs_add+0x237/0x280 [ 167.230984][ T7110] device_add+0x9f4/0x1970 [ 167.231029][ T7110] ? __pfx_device_add+0x10/0x10 [ 167.231068][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.231112][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.231158][ T7110] ? lockdep_init_map_type+0x5c/0x250 [ 167.231211][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.231256][ T7110] ? __init_waitqueue_head+0xca/0x150 [ 167.231311][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.231367][ T7110] netdev_register_kobject+0x1df/0x410 [ 167.231428][ T7110] register_netdevice+0x1313/0x26b0 [ 167.231478][ T7110] ? __pfx_register_netdevice+0x10/0x10 [ 167.231516][ T7110] ? net_generic+0xea/0x2a0 [ 167.231584][ T7110] ip_tunnel_newlink+0x2e5/0x920 [ 167.231639][ T7110] ? __entry_text_end+0x102035/0x102039 [ 167.231687][ T7110] ? __pfx_ip_tunnel_newlink+0x10/0x10 [ 167.231746][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.231790][ T7110] ? ipgre_netlink_parms.isra.0+0x819/0xa70 [ 167.231849][ T7110] erspan_newlink+0x1c9/0x250 [ 167.231897][ T7110] ? __pfx_erspan_newlink+0x10/0x10 [ 167.231965][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.232009][ T7110] ? rtnl_create_link+0xa4b/0xf80 [ 167.232051][ T7110] ? __pfx_erspan_newlink+0x10/0x10 [ 167.232101][ T7110] rtnl_newlink+0x1697/0x2620 [ 167.232158][ T7110] ? __pfx_rtnl_newlink+0x10/0x10 [ 167.232201][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.232247][ T7110] ? rcu_is_watching+0x13/0xc0 [ 167.232285][ T7110] ? kasan_quarantine_put+0x104/0x240 [ 167.232345][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.232405][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.232458][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.232507][ T7110] ? __dev_queue_xmit+0xa2e/0x48d0 [ 167.232566][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.232614][ T7110] ? lock_acquire+0x1d1/0x380 [ 167.232662][ T7110] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 167.232703][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.232748][ T7110] ? find_held_lock+0x2b/0x80 [ 167.232785][ T7110] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 167.232824][ T7110] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 167.232866][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.232917][ T7110] ? __pfx_rtnl_newlink+0x10/0x10 [ 167.232963][ T7110] rtnetlink_rcv_msg+0x95e/0xe90 [ 167.233009][ T7110] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.233075][ T7110] netlink_rcv_skb+0x159/0x420 [ 167.233113][ T7110] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.233158][ T7110] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.233194][ T7110] ? __asan_memcpy+0x3c/0x60 [ 167.233255][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.233300][ T7110] ? netlink_deliver_tap+0x1ae/0xb50 [ 167.233371][ T7110] netlink_unicast+0x668/0x950 [ 167.233415][ T7110] ? __pfx_netlink_unicast+0x10/0x10 [ 167.233463][ T7110] netlink_sendmsg+0x9ac/0x10c0 [ 167.233506][ T7110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.233555][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.233601][ T7110] ? apparmor_socket_sendmsg+0x165/0x280 [ 167.233659][ T7110] ? ____sys_sendmsg+0xa99/0xc30 [ 167.233700][ T7110] ____sys_sendmsg+0xa99/0xc30 [ 167.233736][ T7110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.233773][ T7110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.233836][ T7110] ___sys_sendmsg+0x190/0x1e0 [ 167.233882][ T7110] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.233926][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.233973][ T7110] ? futex_wait+0x11e/0x370 [ 167.234034][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.234075][ T7110] ? find_held_lock+0x2b/0x80 [ 167.234118][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.234143][ T7110] __sys_sendmsg+0x160/0x210 [ 167.234202][ T7110] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.234278][ T7110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.234332][ T7110] do_syscall_64+0x123/0x790 [ 167.234394][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.234433][ T7110] RIP: 0033:0x7feb8e59fb19 [ 167.234463][ T7110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.234499][ T7110] RSP: 002b:00007feb8f543028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.234536][ T7110] RAX: ffffffffffffffda RBX: 00007feb8e825fa0 RCX: 00007feb8e59fb19 [ 167.234562][ T7110] RDX: 0000000020040040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 167.234587][ T7110] RBP: 00007feb8e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 167.234611][ T7110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.234634][ T7110] R13: 00007feb8e826038 R14: 00007feb8e825fa0 R15: 00007ffdb56d54c8 [ 167.234686][ T7110] [ 167.476674][ T5368] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 722ms [ 167.505723][ T5368] gfs2: fsid=syz:syz.0: jid=0: Done [ 167.516738][ T7096] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 167.597437][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 167.608847][ T10] usb 4-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 167.631437][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 167.631478][ T10] usb 4-1: config 0 has no interface number 0 [ 167.631533][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.631581][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 167.677516][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.677559][ T10] usb 4-1: Product: syz [ 167.677585][ T10] usb 4-1: Manufacturer: syz [ 167.677613][ T10] usb 4-1: SerialNumber: syz [ 167.896761][ T10] usb 4-1: config 0 descriptor?? [ 168.566372][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.571194][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 168.591700][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input11 [ 168.656424][ T7130] bridge_slave_1 (unregistering): left allmulticast mode [ 168.659970][ T7130] bridge_slave_1 (unregistering): left promiscuous mode [ 168.663112][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.779984][ T7108] loop3: detected capacity change from 0 to 128 [ 168.791266][ T7108] vfat: Unknown parameter 'rootcontext' [ 168.803278][ T25] usb 4-1: USB disconnect, device number 6 [ 168.891810][ T25] appletouch 4-1:0.85: input: appletouch disconnected [ 169.862660][ T979] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 169.871346][ T7157] FAULT_INJECTION: forcing a failure. [ 169.871346][ T7157] name failslab, interval 1, probability 0, space 0, times 0 [ 169.871390][ T7157] CPU: 1 UID: 0 PID: 7157 Comm: syz.0.434 Not tainted syzkaller #0 PREEMPT(full) [ 169.871435][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 169.871470][ T7157] Call Trace: [ 169.871483][ T7157] [ 169.871498][ T7157] dump_stack_lvl+0x100/0x190 [ 169.871564][ T7157] should_fail_ex.cold+0x5/0xa [ 169.871621][ T7157] should_failslab+0xc2/0x120 [ 169.871683][ T7157] kmem_cache_alloc_noprof+0x92/0x6a0 [ 169.871737][ T7157] ? __anon_vma_prepare+0xb0/0x870 [ 169.871811][ T7157] __anon_vma_prepare+0xb0/0x870 [ 169.871883][ T7157] madvise_guard_install+0x6ef/0xcc0 [ 169.871946][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.871994][ T7157] ? __lock_acquire+0x5c0/0x1f40 [ 169.872054][ T7157] ? __pfx_madvise_guard_install+0x10/0x10 [ 169.872121][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.872169][ T7157] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 169.872228][ T7157] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 169.872288][ T7157] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 169.872355][ T7157] ? __pfx_guard_install_set_pte+0x10/0x10 [ 169.872431][ T7157] madvise_vma_behavior+0xb0c/0x2170 [ 169.872504][ T7157] ? __pfx_mas_prev+0x10/0x10 [ 169.872553][ T7157] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 169.872619][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.872672][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.872718][ T7157] ? find_vma_prev+0xd8/0x150 [ 169.872766][ T7157] ? lock_vma_under_rcu+0x1f9/0x590 [ 169.872821][ T7157] ? __pfx_find_vma_prev+0x10/0x10 [ 169.872885][ T7157] ? find_held_lock+0x2b/0x80 [ 169.872924][ T7157] ? madvise_do_behavior+0x1ea/0x510 [ 169.872988][ T7157] ? madvise_do_behavior+0x1ea/0x510 [ 169.873051][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.873108][ T7157] madvise_walk_vmas+0x30e/0xf00 [ 169.873178][ T7157] ? __pfx_try_to_wake_up+0x10/0x10 [ 169.873231][ T7157] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 169.873301][ T7157] ? __pfx_futex_wake_mark+0x10/0x10 [ 169.873360][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.873406][ T7157] ? find_held_lock+0x2b/0x80 [ 169.873444][ T7157] ? futex_wake+0x4ea/0x5e0 [ 169.873503][ T7157] madvise_do_behavior+0x1ea/0x510 [ 169.873573][ T7157] ? __pfx_madvise_do_behavior+0x10/0x10 [ 169.873635][ T7157] ? futex_wait+0x11e/0x370 [ 169.873701][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.873747][ T7157] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.873809][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.873862][ T7157] do_madvise+0x238/0x290 [ 169.873898][ T7157] ? __pfx_do_madvise+0x10/0x10 [ 169.873933][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.873978][ T7157] ? do_futex+0x190/0x440 [ 169.874030][ T7157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.874129][ T7157] __x64_sys_madvise+0xa9/0x110 [ 169.874165][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.874212][ T7157] ? lockdep_hardirqs_on+0x7d/0x110 [ 169.874268][ T7157] do_syscall_64+0x123/0x790 [ 169.874331][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.874372][ T7157] RIP: 0033:0x7fe58b19fb19 [ 169.874402][ T7157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.874442][ T7157] RSP: 002b:00007fe58c021028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 169.874485][ T7157] RAX: ffffffffffffffda RBX: 00007fe58b425fa0 RCX: 00007fe58b19fb19 [ 169.874512][ T7157] RDX: 0000000000000066 RSI: 000000000080fd00 RDI: 000020000042f000 [ 169.874537][ T7157] RBP: 00007fe58b237b70 R08: 0000000000000000 R09: 0000000000000000 [ 169.874562][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.874586][ T7157] R13: 00007fe58b426038 R14: 00007fe58b425fa0 R15: 00007fff95e501c8 [ 169.874639][ T7157] [ 170.099608][ T979] usb 4-1: New USB device found: idVendor=1199, idProduct=b000, bcdDevice=0.00 [ 170.126899][ T979] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.126955][ T979] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 170.127019][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.340287][ T7161] loop5: detected capacity change from 0 to 2048 [ 170.395144][ T7165] FAULT_INJECTION: forcing a failure. [ 170.395144][ T7165] name failslab, interval 1, probability 0, space 0, times 0 [ 170.395189][ T7165] CPU: 1 UID: 0 PID: 7165 Comm: syz.0.437 Not tainted syzkaller #0 PREEMPT(full) [ 170.395233][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.395256][ T7165] Call Trace: [ 170.395268][ T7165] [ 170.395282][ T7165] dump_stack_lvl+0x100/0x190 [ 170.395346][ T7165] should_fail_ex.cold+0x5/0xa [ 170.395401][ T7165] should_failslab+0xc2/0x120 [ 170.395460][ T7165] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 170.395523][ T7165] ? sock_alloc_inode+0x26/0x2c0 [ 170.395567][ T7165] ? __pfx_sock_alloc_inode+0x10/0x10 [ 170.395609][ T7165] sock_alloc_inode+0x26/0x2c0 [ 170.395643][ T7165] ? __pfx_sock_alloc_inode+0x10/0x10 [ 170.395677][ T7165] alloc_inode+0x68/0x250 [ 170.395726][ T7165] sock_alloc+0x42/0x240 [ 170.395760][ T7165] sock_create_lite+0x82/0x120 [ 170.395797][ T7165] __netlink_kernel_create+0xbd/0x750 [ 170.395853][ T7165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.395896][ T7165] ? __kasan_kmalloc+0xaa/0xb0 [ 170.395946][ T7165] ? __pfx___netlink_kernel_create+0x10/0x10 [ 170.396001][ T7165] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 170.396041][ T7165] ? uevent_net_init+0xd3/0x330 [ 170.396095][ T7165] uevent_net_init+0xf8/0x330 [ 170.396138][ T7165] ? __pfx_uevent_net_init+0x10/0x10 [ 170.396181][ T7165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.396222][ T7165] ? __kasan_kmalloc+0xaa/0xb0 [ 170.396276][ T7165] ? __pfx_uevent_net_rcv+0x10/0x10 [ 170.396330][ T7165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.396384][ T7165] ? __pfx_uevent_net_init+0x10/0x10 [ 170.396431][ T7165] ops_init+0x1e2/0x5f0 [ 170.396481][ T7165] setup_net+0x118/0x3a0 [ 170.396519][ T7165] ? __pfx_setup_net+0x10/0x10 [ 170.396557][ T7165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.396603][ T7165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.396658][ T7165] copy_net_ns+0x340/0x7a0 [ 170.396704][ T7165] create_new_namespaces+0x3ea/0xac0 [ 170.396767][ T7165] unshare_nsproxy_namespaces+0xf6/0x210 [ 170.396821][ T7165] ksys_unshare+0x44f/0x980 [ 170.396868][ T7165] ? __pfx_ksys_unshare+0x10/0x10 [ 170.396915][ T7165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.396981][ T7165] __x64_sys_unshare+0x31/0x40 [ 170.397026][ T7165] do_syscall_64+0x123/0x790 [ 170.397087][ T7165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.397126][ T7165] RIP: 0033:0x7fe58b19fb19 [ 170.397156][ T7165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.397194][ T7165] RSP: 002b:00007fe58c021028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 170.397231][ T7165] RAX: ffffffffffffffda RBX: 00007fe58b425fa0 RCX: 00007fe58b19fb19 [ 170.397257][ T7165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 170.397282][ T7165] RBP: 00007fe58b237b70 R08: 0000000000000000 R09: 0000000000000000 [ 170.397306][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.397330][ T7165] R13: 00007fe58b426038 R14: 00007fe58b425fa0 R15: 00007fff95e501c8 [ 170.397383][ T7165] [ 170.397407][ T7165] kobject_uevent: unable to create netlink socket! [ 170.440548][ T7161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.440688][ T7161] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.711148][ T5833] usb 4-1: USB disconnect, device number 7 [ 170.813968][ T7170] loop4: detected capacity change from 0 to 1024 [ 170.839742][ T7170] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 170.891048][ T5641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.924341][ T7170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.975823][ T7180] FAULT_INJECTION: forcing a failure. [ 170.975823][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 170.975868][ T7180] CPU: 1 UID: 0 PID: 7180 Comm: syz.1.441 Not tainted syzkaller #0 PREEMPT(full) [ 170.975916][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.975939][ T7180] Call Trace: [ 170.975952][ T7180] [ 170.975965][ T7180] dump_stack_lvl+0x100/0x190 [ 170.976030][ T7180] should_fail_ex.cold+0x5/0xa [ 170.976087][ T7180] should_failslab+0xc2/0x120 [ 170.976147][ T7180] __kmalloc_cache_noprof+0x91/0x6d0 [ 170.976189][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.976239][ T7180] ? prog_array_map_alloc+0x45/0x2a0 [ 170.976311][ T7180] prog_array_map_alloc+0x45/0x2a0 [ 170.976374][ T7180] map_create+0x874/0x3150 [ 170.976425][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.976477][ T7180] ? __lock_acquire+0x5c0/0x1f40 [ 170.976540][ T7180] ? __pfx_map_create+0x10/0x10 [ 170.976587][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.976633][ T7180] ? lock_acquire+0x1d1/0x380 [ 170.976680][ T7180] ? __might_fault+0xc5/0x140 [ 170.976745][ T7180] ? __might_fault+0xc5/0x140 [ 170.976827][ T7180] __sys_bpf+0x14cb/0x4b60 [ 170.976893][ T7180] ? __pfx___sys_bpf+0x10/0x10 [ 170.976941][ T7180] ? find_held_lock+0x2b/0x80 [ 170.976977][ T7180] ? futex_wake+0x4ea/0x5e0 [ 170.977028][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.977076][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.977149][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.977195][ T7180] ? rcu_read_lock_any_held+0x6a/0x90 [ 170.977236][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.977281][ T7180] ? find_held_lock+0x2b/0x80 [ 170.977317][ T7180] ? ksys_write+0x190/0x250 [ 170.977370][ T7180] ? ksys_write+0x190/0x250 [ 170.977428][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.977501][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.977547][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.977593][ T7180] ? __x64_sys_futex+0x358/0x4d0 [ 170.977637][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.977685][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.977731][ T7180] ? xfd_validate_state+0x129/0x190 [ 170.977784][ T7180] ? __x64_sys_bpf+0xce/0x140 [ 170.977833][ T7180] __x64_sys_bpf+0xce/0x140 [ 170.977903][ T7180] ? do_syscall_64+0xae/0x790 [ 170.977964][ T7180] do_syscall_64+0x123/0x790 [ 170.978025][ T7180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.978065][ T7180] RIP: 0033:0x7f09f559fb19 [ 170.978094][ T7180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.978132][ T7180] RSP: 002b:00007f09f645f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.978177][ T7180] RAX: ffffffffffffffda RBX: 00007f09f5825fa0 RCX: 00007f09f559fb19 [ 170.978204][ T7180] RDX: 0000000000000048 RSI: 0000200000000380 RDI: 0000000000000000 [ 170.978232][ T7180] RBP: 00007f09f5637b70 R08: 0000000000000000 R09: 0000000000000000 [ 170.978256][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.978280][ T7180] R13: 00007f09f5826038 R14: 00007f09f5825fa0 R15: 00007ffd6f3788d8 [ 170.978332][ T7180] [ 171.530364][ T5639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.617080][ T7187] loop0: detected capacity change from 0 to 1024 [ 171.628520][ T7187] EXT4-fs: Ignoring removed bh option [ 171.676607][ T7187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 171.676733][ T7187] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.775872][ T7187] EXT4-fs error (device loop0): ext4_map_blocks:951: inode #15: block 3: comm syz.0.446: lblock 3 mapped to illegal pblock 3 (length 3) [ 171.779283][ T7187] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 171.779331][ T7187] EXT4-fs (loop0): This should not happen!! Data will be lost [ 171.779331][ T7187] [ 171.835395][ T7199] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.446: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.844212][ T7199] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.446: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.846781][ T7199] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.446: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.848352][ T7199] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.446: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.848930][ T7199] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.446: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.866701][ T7199] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.446: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.872052][ T7199] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.446: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.881025][ T7199] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.446: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.887668][ T7199] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.446: lblock 3 mapped to illegal pblock 3 (length 1) [ 172.271825][ T5640] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.318247][ T7205] loop2: detected capacity change from 0 to 2048 [ 172.373835][ T7205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.107229][ T7223] loop3: detected capacity change from 0 to 4096 [ 173.268491][ T7230] netlink: 44 bytes leftover after parsing attributes in process `syz.0.462'. [ 173.285457][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.286626][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.367521][ T7230] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 173.367551][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 173.489108][ T31] audit: type=1800 audit(1794092339.952:9): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.459" name="file1" dev="loop3" ino=33 res=0 errno=-22 [ 173.629275][ T7240] FAULT_INJECTION: forcing a failure. [ 173.629275][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 173.629322][ T7240] CPU: 1 UID: 0 PID: 7240 Comm: syz.5.468 Not tainted syzkaller #0 PREEMPT(full) [ 173.629367][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 173.629391][ T7240] Call Trace: [ 173.629404][ T7240] [ 173.629417][ T7240] dump_stack_lvl+0x100/0x190 [ 173.629480][ T7240] should_fail_ex.cold+0x5/0xa [ 173.629534][ T7240] should_failslab+0xc2/0x120 [ 173.629592][ T7240] __kmalloc_flags_noprof+0x122/0x8e0 [ 173.629632][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.629678][ T7240] ? find_held_lock+0x2b/0x80 [ 173.629714][ T7240] ? __pcs_replace_empty_main+0x132/0x650 [ 173.629756][ T7240] ? __pcs_replace_empty_main+0x3fa/0x650 [ 173.629811][ T7240] __pcs_replace_empty_main+0x3fa/0x650 [ 173.629861][ T7240] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 173.629912][ T7240] ? jffs2_prealloc_raw_node_refs+0x1db/0x370 [ 173.629984][ T7240] jffs2_prealloc_raw_node_refs+0x1db/0x370 [ 173.630062][ T7240] jffs2_scan_medium+0x5df/0x59b0 [ 173.630132][ T7240] ? __pfx_jffs2_scan_medium+0x10/0x10 [ 173.630170][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.630218][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.630260][ T7240] ? trace_kmalloc+0xeb/0x110 [ 173.630314][ T7240] ? __kasan_kmalloc+0xaa/0xb0 [ 173.630367][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.630412][ T7240] ? __kmalloc_noprof+0x350/0x840 [ 173.630462][ T7240] ? jffs2_sum_init+0xc4/0x1b0 [ 173.630516][ T7240] jffs2_do_mount_fs+0x8a0/0x22f0 [ 173.630567][ T7240] ? rcu_is_watching+0x13/0xc0 [ 173.630606][ T7240] ? trace_kmalloc+0xeb/0x110 [ 173.630660][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.630706][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.630752][ T7240] ? lockdep_init_map_type+0x5c/0x250 [ 173.630805][ T7240] ? __pfx_jffs2_do_mount_fs+0x10/0x10 [ 173.630845][ T7240] ? __raw_spin_lock_init+0x3a/0x110 [ 173.630906][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.630951][ T7240] ? __init_rwsem+0x10e/0x180 [ 173.631019][ T7240] jffs2_do_fill_super+0x3d4/0xa60 [ 173.631075][ T7240] jffs2_fill_super+0x283/0x370 [ 173.631121][ T7240] ? __pfx_get_mtd_device+0x10/0x10 [ 173.631163][ T7240] ? __pfx_jffs2_fill_super+0x10/0x10 [ 173.631212][ T7240] mtd_get_sb+0x2f9/0x4d0 [ 173.631259][ T7240] ? __pfx_jffs2_fill_super+0x10/0x10 [ 173.631308][ T7240] get_tree_mtd+0x6f9/0x8a0 [ 173.631355][ T7240] ? __pfx_get_tree_mtd+0x10/0x10 [ 173.631400][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.631453][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.631499][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.631544][ T7240] ? security_capable+0x80/0x260 [ 173.631594][ T7240] vfs_get_tree+0x92/0x320 [ 173.631638][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.631686][ T7240] path_mount+0x7d0/0x2850 [ 173.631742][ T7240] ? __pfx_path_mount+0x10/0x10 [ 173.631786][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.631831][ T7240] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.631893][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.631939][ T7240] ? kmem_cache_free+0x127/0x6c0 [ 173.632003][ T7240] ? __x64_sys_mount+0x293/0x310 [ 173.632048][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.632094][ T7240] __x64_sys_mount+0x293/0x310 [ 173.632143][ T7240] ? __pfx___x64_sys_mount+0x10/0x10 [ 173.632197][ T7240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.632251][ T7240] do_syscall_64+0x123/0x790 [ 173.632311][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.632350][ T7240] RIP: 0033:0x7feb8e59fb19 [ 173.632380][ T7240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.632417][ T7240] RSP: 002b:00007feb8f543028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.632454][ T7240] RAX: ffffffffffffffda RBX: 00007feb8e825fa0 RCX: 00007feb8e59fb19 [ 173.632480][ T7240] RDX: 0000200000000280 RSI: 0000200000000200 RDI: 00002000000001c0 [ 173.632506][ T7240] RBP: 00007feb8e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 173.632529][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.632553][ T7240] R13: 00007feb8e826038 R14: 00007feb8e825fa0 R15: 00007ffdb56d54c8 [ 173.632604][ T7240] [ 173.782454][ T7243] loop2: detected capacity change from 0 to 1024 [ 173.783125][ T7240] jffs2: notice: (7240) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 173.878242][ T7243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 173.878375][ T7243] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.969948][ T7250] netlink: 762 bytes leftover after parsing attributes in process `syz.0.469'. [ 173.969982][ T7250] bridge: RTM_NEWNEIGH with unconfigured vlan 149 on bridge0 [ 174.247223][ T5638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 174.446413][ T7260] FAULT_INJECTION: forcing a failure. [ 174.446413][ T7260] name failslab, interval 1, probability 0, space 0, times 0 [ 174.446461][ T7260] CPU: 1 UID: 0 PID: 7260 Comm: syz.5.476 Not tainted syzkaller #0 PREEMPT(full) [ 174.446506][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 174.446529][ T7260] Call Trace: [ 174.446545][ T7260] [ 174.446559][ T7260] dump_stack_lvl+0x100/0x190 [ 174.446624][ T7260] should_fail_ex.cold+0x5/0xa [ 174.446680][ T7260] should_failslab+0xc2/0x120 [ 174.446740][ T7260] __kmalloc_cache_noprof+0x91/0x6d0 [ 174.446784][ T7260] ? garp_init_applicant+0x38d/0x4e0 [ 174.446832][ T7260] garp_init_applicant+0x38d/0x4e0 [ 174.446873][ T7260] register_vlan_dev+0x197/0x910 [ 174.446939][ T7260] vlan_ioctl_handler+0x8e9/0xa70 [ 174.446994][ T7260] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 174.447065][ T7260] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 174.447129][ T7260] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 174.447182][ T7260] sock_ioctl+0x5e9/0x6b0 [ 174.447231][ T7260] ? __pfx_sock_ioctl+0x10/0x10 [ 174.447286][ T7260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.447332][ T7260] ? __fget_files+0x21f/0x3d0 [ 174.447378][ T7260] ? __pfx_sock_ioctl+0x10/0x10 [ 174.447427][ T7260] __x64_sys_ioctl+0x18e/0x210 [ 174.447485][ T7260] do_syscall_64+0x123/0x790 [ 174.447547][ T7260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.447586][ T7260] RIP: 0033:0x7feb8e59fb19 [ 174.447616][ T7260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.447654][ T7260] RSP: 002b:00007feb8f543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.447690][ T7260] RAX: ffffffffffffffda RBX: 00007feb8e825fa0 RCX: 00007feb8e59fb19 [ 174.447716][ T7260] RDX: 0000200000000500 RSI: 0000000000008983 RDI: 0000000000000004 [ 174.447741][ T7260] RBP: 00007feb8e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 174.447765][ T7260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.447789][ T7260] R13: 00007feb8e826038 R14: 00007feb8e825fa0 R15: 00007ffdb56d54c8 [ 174.447841][ T7260] [ 174.986886][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.079238][ T7273] bridge_slave_1 (unregistering): left allmulticast mode [ 175.079276][ T7273] bridge_slave_1 (unregistering): left promiscuous mode [ 175.079375][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.146001][ T7277] loop3: detected capacity change from 0 to 1024 [ 175.160613][ T7277] EXT4-fs: Ignoring removed oldalloc option [ 175.160646][ T7277] EXT4-fs: Ignoring removed orlov option [ 175.218223][ T7277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.218389][ T7277] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.315812][ T7286] FAULT_INJECTION: forcing a failure. [ 175.315812][ T7286] name failslab, interval 1, probability 0, space 0, times 0 [ 175.315853][ T7286] CPU: 1 UID: 0 PID: 7286 Comm: syz.2.485 Not tainted syzkaller #0 PREEMPT(full) [ 175.315895][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 175.315915][ T7286] Call Trace: [ 175.315926][ T7286] [ 175.315939][ T7286] dump_stack_lvl+0x100/0x190 [ 175.315999][ T7286] should_fail_ex.cold+0x5/0xa [ 175.316052][ T7286] should_failslab+0xc2/0x120 [ 175.316105][ T7286] __kmalloc_noprof+0xfc/0x840 [ 175.316150][ T7286] ? load_msg+0x113/0x490 [ 175.316207][ T7286] load_msg+0x113/0x490 [ 175.316267][ T7286] do_msgsnd+0x1ad/0x17f0 [ 175.316302][ T7286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.316355][ T7286] ? __pfx_do_msgsnd+0x10/0x10 [ 175.316390][ T7286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.316431][ T7286] ? find_held_lock+0x2b/0x80 [ 175.316471][ T7286] ? __might_fault+0xc5/0x140 [ 175.316524][ T7286] ? __might_fault+0xc5/0x140 [ 175.316583][ T7286] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.316644][ T7286] ? __x64_sys_msgsnd+0xe5/0x130 [ 175.316682][ T7286] __x64_sys_msgsnd+0xe5/0x130 [ 175.316731][ T7286] do_syscall_64+0x123/0x790 [ 175.316794][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.316835][ T7286] RIP: 0033:0x7f012699fb19 [ 175.316865][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.316904][ T7286] RSP: 002b:00007f012787e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 175.316941][ T7286] RAX: ffffffffffffffda RBX: 00007f0126c25fa0 RCX: 00007f012699fb19 [ 175.316967][ T7286] RDX: 0000000000002000 RSI: 0000200000000180 RDI: 0000000000000000 [ 175.316992][ T7286] RBP: 00007f0126a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 175.317017][ T7286] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 175.317041][ T7286] R13: 00007f0126c26038 R14: 00007f0126c25fa0 R15: 00007ffd5bb33088 [ 175.317093][ T7286] [ 175.393447][ T7277] EXT4-fs error (device loop3): ext4_validate_block_bitmap:444: comm syz.3.481: bg 0: block 112: padding at end of block bitmap is not set [ 175.429763][ T7277] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #15: comm syz.3.481: lblock 0 mapped to illegal pblock 0 (length 6) [ 175.442925][ T7277] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 175.442977][ T7277] EXT4-fs (loop3): This should not happen!! Data will be lost [ 175.442977][ T7277] [ 175.667153][ T972] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 175.667203][ T972] EXT4-fs (loop3): This should not happen!! Data will be lost [ 175.667203][ T972] [ 175.667228][ T972] EXT4-fs (loop3): Total free blocks count 0 [ 175.667252][ T972] EXT4-fs (loop3): Free/Dirty block details [ 175.667300][ T972] EXT4-fs (loop3): free_blocks=0 [ 175.667354][ T972] EXT4-fs (loop3): dirty_blocks=48 [ 175.667377][ T972] EXT4-fs (loop3): Block reservation details [ 176.010237][ T7306] loop3: detected capacity change from 0 to 2048 [ 176.022482][ T7303] loop1: detected capacity change from 0 to 1024 [ 176.025141][ T7303] EXT4-fs: Ignoring removed bh option [ 176.047323][ T7306] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.117781][ T7303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.117913][ T7303] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.241751][ T7303] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 3: comm syz.1.491: lblock 3 mapped to illegal pblock 3 (length 3) [ 176.249006][ T7303] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 176.249050][ T7303] EXT4-fs (loop1): This should not happen!! Data will be lost [ 176.249050][ T7303] [ 176.299456][ T7303] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 3: comm syz.1.491: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.305897][ T7303] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 3: comm syz.1.491: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.311031][ T7303] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 3: comm syz.1.491: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.314733][ T7303] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 3: comm syz.1.491: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.324400][ T7303] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 3: comm syz.1.491: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.328455][ T7303] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 3: comm syz.1.491: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.333764][ T7303] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 3: comm syz.1.491: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.338963][ T7303] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 3: comm syz.1.491: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.346388][ T7303] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #15: block 3: comm syz.1.491: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.739757][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.456497][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.569561][ T7349] bridge_slave_1 (unregistering): left allmulticast mode [ 177.569603][ T7349] bridge_slave_1 (unregistering): left promiscuous mode [ 177.569703][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.662552][ T7332] loop5: detected capacity change from 0 to 32768 [ 177.718694][ T7332] JBD2: Ignoring recovery information on journal [ 177.902012][ T7332] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 178.018365][ T7358] FAULT_INJECTION: forcing a failure. [ 178.018365][ T7358] name failslab, interval 1, probability 0, space 0, times 0 [ 178.018413][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.4.509 Not tainted syzkaller #0 PREEMPT(full) [ 178.018457][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 178.018487][ T7358] Call Trace: [ 178.018499][ T7358] [ 178.018514][ T7358] dump_stack_lvl+0x100/0x190 [ 178.018579][ T7358] should_fail_ex.cold+0x5/0xa [ 178.018636][ T7358] should_failslab+0xc2/0x120 [ 178.018697][ T7358] __kmalloc_flags_noprof+0x122/0x8e0 [ 178.018739][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.018787][ T7358] ? find_held_lock+0x2b/0x80 [ 178.018824][ T7358] ? __pcs_replace_empty_main+0x132/0x650 [ 178.018866][ T7358] ? __pcs_replace_empty_main+0x3fa/0x650 [ 178.018918][ T7358] __pcs_replace_empty_main+0x3fa/0x650 [ 178.018971][ T7358] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 178.019025][ T7358] ? jffs2_prealloc_raw_node_refs+0x1db/0x370 [ 178.019100][ T7358] jffs2_prealloc_raw_node_refs+0x1db/0x370 [ 178.019171][ T7358] jffs2_scan_medium+0x5df/0x59b0 [ 178.019242][ T7358] ? __pfx_jffs2_scan_medium+0x10/0x10 [ 178.019284][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.019334][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.019380][ T7358] ? trace_kmalloc+0xeb/0x110 [ 178.019439][ T7358] ? __kasan_kmalloc+0xaa/0xb0 [ 178.019501][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.019548][ T7358] ? __kmalloc_noprof+0x350/0x840 [ 178.019600][ T7358] ? jffs2_sum_init+0xc4/0x1b0 [ 178.019655][ T7358] jffs2_do_mount_fs+0x8a0/0x22f0 [ 178.019707][ T7358] ? rcu_is_watching+0x13/0xc0 [ 178.019743][ T7358] ? trace_kmalloc+0xeb/0x110 [ 178.019799][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.019845][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.019892][ T7358] ? lockdep_init_map_type+0x5c/0x250 [ 178.019947][ T7358] ? __pfx_jffs2_do_mount_fs+0x10/0x10 [ 178.020006][ T7358] ? __raw_spin_lock_init+0x3a/0x110 [ 178.020070][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.020116][ T7358] ? __init_rwsem+0x10e/0x180 [ 178.020182][ T7358] jffs2_do_fill_super+0x3d4/0xa60 [ 178.020246][ T7358] jffs2_fill_super+0x283/0x370 [ 178.020293][ T7358] ? __pfx_get_mtd_device+0x10/0x10 [ 178.020335][ T7358] ? __pfx_jffs2_fill_super+0x10/0x10 [ 178.020385][ T7358] mtd_get_sb+0x2f9/0x4d0 [ 178.020432][ T7358] ? __pfx_jffs2_fill_super+0x10/0x10 [ 178.020487][ T7358] get_tree_mtd+0x6f9/0x8a0 [ 178.020533][ T7358] ? __pfx_get_tree_mtd+0x10/0x10 [ 178.020579][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.020635][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.020681][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.020727][ T7358] ? security_capable+0x80/0x260 [ 178.020777][ T7358] vfs_get_tree+0x92/0x320 [ 178.020822][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.020872][ T7358] path_mount+0x7d0/0x2850 [ 178.020928][ T7358] ? __pfx_path_mount+0x10/0x10 [ 178.020973][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.021020][ T7358] ? lockdep_hardirqs_on+0x7d/0x110 [ 178.021082][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.021129][ T7358] ? kmem_cache_free+0x127/0x6c0 [ 178.021188][ T7358] ? __x64_sys_mount+0x293/0x310 [ 178.021256][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.021301][ T7358] __x64_sys_mount+0x293/0x310 [ 178.021351][ T7358] ? __pfx___x64_sys_mount+0x10/0x10 [ 178.021405][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.021460][ T7358] do_syscall_64+0x123/0x790 [ 178.021529][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.021569][ T7358] RIP: 0033:0x7f29ab19fb19 [ 178.021599][ T7358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.021637][ T7358] RSP: 002b:00007f29ac01a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.021674][ T7358] RAX: ffffffffffffffda RBX: 00007f29ab425fa0 RCX: 00007f29ab19fb19 [ 178.021700][ T7358] RDX: 0000200000000280 RSI: 0000200000000200 RDI: 00002000000001c0 [ 178.021726][ T7358] RBP: 00007f29ab237b70 R08: 0000000000000000 R09: 0000000000000000 [ 178.021751][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.021775][ T7358] R13: 00007f29ab426038 R14: 00007f29ab425fa0 R15: 00007ffdf94f4988 [ 178.021827][ T7358] [ 178.068528][ T31] audit: type=1804 audit(1794092344.532:10): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.499" name="/newroot/95/file1/bus" dev="loop5" ino=17059 res=1 errno=0 [ 178.115932][ T7358] jffs2: notice: (7358) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 178.221555][ T7362] loop3: detected capacity change from 0 to 256 [ 178.340004][ T7362] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 178.666810][ T5641] ocfs2: Unmounting device (7,5) on (node local) [ 179.036682][ T7381] FAULT_INJECTION: forcing a failure. [ 179.036682][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 179.036729][ T7381] CPU: 0 UID: 0 PID: 7381 Comm: syz.2.518 Not tainted syzkaller #0 PREEMPT(full) [ 179.036774][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 179.036797][ T7381] Call Trace: [ 179.036810][ T7381] [ 179.036824][ T7381] dump_stack_lvl+0x100/0x190 [ 179.036891][ T7381] should_fail_ex.cold+0x5/0xa [ 179.036948][ T7381] should_failslab+0xc2/0x120 [ 179.037016][ T7381] __kmalloc_node_noprof+0xff/0x870 [ 179.037069][ T7381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.037118][ T7381] ? mempool_init_node+0x11b/0x6f0 [ 179.037180][ T7381] ? __pfx_mempool_free_slab+0x10/0x10 [ 179.037233][ T7381] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 179.037291][ T7381] mempool_init_node+0x11b/0x6f0 [ 179.037358][ T7381] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 179.037412][ T7381] ? __pfx_mempool_free_slab+0x10/0x10 [ 179.037467][ T7381] mempool_init_noprof+0x3a/0x50 [ 179.037534][ T7381] bioset_init+0x37e/0x8a0 [ 179.037576][ T7381] ? __pfx_bioset_init+0x10/0x10 [ 179.037610][ T7381] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 179.037655][ T7381] ? percpu_ref_init+0xec/0x3f0 [ 179.037711][ T7381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.037759][ T7381] ? percpu_ref_init+0x244/0x3f0 [ 179.037813][ T7381] mddev_init+0x102/0x820 [ 179.037877][ T7381] md_alloc+0xc7/0x10c0 [ 179.037931][ T7381] md_alloc_and_put+0x16/0xb0 [ 179.037982][ T7381] add_named_array+0x360/0x3a0 [ 179.038030][ T7381] ? __pfx_add_named_array+0x10/0x10 [ 179.038102][ T7381] param_attr_store+0x199/0x300 [ 179.038155][ T7381] ? __pfx_param_attr_store+0x10/0x10 [ 179.038202][ T7381] module_attr_store+0x58/0x80 [ 179.038242][ T7381] ? __pfx_module_attr_store+0x10/0x10 [ 179.038283][ T7381] sysfs_kf_write+0xf2/0x150 [ 179.038333][ T7381] kernfs_fop_write_iter+0x3e0/0x5f0 [ 179.038370][ T7381] ? __pfx_sysfs_kf_write+0x10/0x10 [ 179.038422][ T7381] vfs_write+0x6af/0x1050 [ 179.038480][ T7381] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 179.038527][ T7381] ? __pfx_vfs_write+0x10/0x10 [ 179.038579][ T7381] ? find_held_lock+0x2b/0x80 [ 179.038650][ T7381] ksys_write+0x12a/0x250 [ 179.038705][ T7381] ? __pfx_ksys_write+0x10/0x10 [ 179.038766][ T7381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.038822][ T7381] do_syscall_64+0x123/0x790 [ 179.038884][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.038924][ T7381] RIP: 0033:0x7f012699fb19 [ 179.038954][ T7381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.038998][ T7381] RSP: 002b:00007f012787e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.039034][ T7381] RAX: ffffffffffffffda RBX: 00007f0126c25fa0 RCX: 00007f012699fb19 [ 179.039060][ T7381] RDX: 0000000000000008 RSI: 0000200000000600 RDI: 0000000000000004 [ 179.039085][ T7381] RBP: 00007f0126a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 179.039110][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.039134][ T7381] R13: 00007f0126c26038 R14: 00007f0126c25fa0 R15: 00007ffd5bb33088 [ 179.039188][ T7381] [ 179.051409][ T7381] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 179.449988][ T7386] FAULT_INJECTION: forcing a failure. [ 179.449988][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 179.450036][ T7386] CPU: 1 UID: 0 PID: 7386 Comm: syz.1.531 Not tainted syzkaller #0 PREEMPT(full) [ 179.450087][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 179.450111][ T7386] Call Trace: [ 179.450123][ T7386] [ 179.450138][ T7386] dump_stack_lvl+0x100/0x190 [ 179.450205][ T7386] should_fail_ex.cold+0x5/0xa [ 179.450263][ T7386] should_failslab+0xc2/0x120 [ 179.450326][ T7386] kmem_cache_alloc_noprof+0x92/0x6a0 [ 179.450377][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.450424][ T7386] ? lock_acquire+0x1d1/0x380 [ 179.450481][ T7386] ? dst_alloc+0x99/0x1a0 [ 179.450544][ T7386] ? __pfx_ip6_dst_gc+0x10/0x10 [ 179.450586][ T7386] dst_alloc+0x99/0x1a0 [ 179.450650][ T7386] ip6_pol_route+0x9fd/0x1310 [ 179.450714][ T7386] ? __pfx_ip6_pol_route+0x10/0x10 [ 179.450772][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.450820][ T7386] ? __local_bh_enable_ip+0xa5/0x120 [ 179.450864][ T7386] ? ip6t_do_table+0xc2b/0x1ca0 [ 179.450938][ T7386] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 179.450997][ T7386] fib6_rule_lookup+0x537/0x720 [ 179.451050][ T7386] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 179.451106][ T7386] ? __pfx_ip6t_do_table+0x10/0x10 [ 179.451163][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.451210][ T7386] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 179.451273][ T7386] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 179.451346][ T7386] ip6_route_input+0x674/0xc60 [ 179.451415][ T7386] ? __pfx_ip6_route_input+0x10/0x10 [ 179.451513][ T7386] ? nf_hook.constprop.0+0x2e3/0x750 [ 179.451575][ T7386] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 179.451640][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.451700][ T7386] ip6_rcv_finish_core.isra.0+0x1b1/0x1260 [ 179.451776][ T7386] ipv6_rcv+0x1e8/0x3d0 [ 179.451837][ T7386] ? __pfx_ipv6_rcv+0x10/0x10 [ 179.451894][ T7386] __netif_receive_skb_one_core+0x12d/0x1e0 [ 179.451952][ T7386] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 179.452011][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.452058][ T7386] ? lock_acquire+0x1d1/0x380 [ 179.452111][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.452169][ T7386] __netif_receive_skb+0x1f/0x120 [ 179.452226][ T7386] netif_receive_skb+0x139/0x7d0 [ 179.452281][ T7386] ? __pfx_netif_receive_skb+0x10/0x10 [ 179.452355][ T7386] tun_rx_batched.isra.0+0x3f6/0x750 [ 179.452428][ T7386] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 179.452511][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.452561][ T7386] ? tun_get_user+0x1dcd/0x3ee0 [ 179.452601][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.452662][ T7386] tun_get_user+0x1f62/0x3ee0 [ 179.452722][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.452769][ T7386] ? __lock_acquire+0x5c0/0x1f40 [ 179.452819][ T7386] ? __pfx_tun_get_user+0x10/0x10 [ 179.452858][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.452910][ T7386] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 179.452980][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.453026][ T7386] ? find_held_lock+0x2b/0x80 [ 179.453063][ T7386] ? tun_get+0x191/0x370 [ 179.453097][ T7386] ? tun_get+0x191/0x370 [ 179.453131][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.453194][ T7386] tun_chr_write_iter+0xdc/0x200 [ 179.453241][ T7386] vfs_write+0x6af/0x1050 [ 179.453299][ T7386] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 179.453348][ T7386] ? __pfx_vfs_write+0x10/0x10 [ 179.453400][ T7386] ? find_held_lock+0x2b/0x80 [ 179.453471][ T7386] ksys_write+0x12a/0x250 [ 179.453530][ T7386] ? __pfx_ksys_write+0x10/0x10 [ 179.453590][ T7386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.453646][ T7386] do_syscall_64+0x123/0x790 [ 179.453710][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.453751][ T7386] RIP: 0033:0x7f09f556034e [ 179.453781][ T7386] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.453820][ T7386] RSP: 002b:00007f09f645efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.453858][ T7386] RAX: ffffffffffffffda RBX: 00007f09f645f6c0 RCX: 00007f09f556034e [ 179.453885][ T7386] RDX: 000000000000004a RSI: 0000200000000940 RDI: 00000000000000c8 [ 179.453910][ T7386] RBP: 00007f09f5637b70 R08: 0000000000000000 R09: 0000000000000000 [ 179.453934][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.453959][ T7386] R13: 00007f09f5826038 R14: 00007f09f5825fa0 R15: 00007ffd6f3788d8 [ 179.454012][ T7386] [ 180.016307][ T7397] FAULT_INJECTION: forcing a failure. [ 180.016307][ T7397] name failslab, interval 1, probability 0, space 0, times 0 [ 180.016351][ T7397] CPU: 1 UID: 0 PID: 7397 Comm: syz.0.535 Not tainted syzkaller #0 PREEMPT(full) [ 180.016394][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 180.016416][ T7397] Call Trace: [ 180.016428][ T7397] [ 180.016447][ T7397] dump_stack_lvl+0x100/0x190 [ 180.016515][ T7397] should_fail_ex.cold+0x5/0xa [ 180.016570][ T7397] should_failslab+0xc2/0x120 [ 180.016627][ T7397] kmem_cache_alloc_noprof+0x92/0x6a0 [ 180.016678][ T7397] ? anon_vma_clone+0x4b8/0x2080 [ 180.016742][ T7397] anon_vma_clone+0x4b8/0x2080 [ 180.016812][ T7397] __split_vma+0x58a/0xce0 [ 180.016856][ T7397] ? __pfx___split_vma+0x10/0x10 [ 180.016911][ T7397] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.016966][ T7397] vma_modify+0x1d06/0x2aa0 [ 180.017004][ T7397] ? hrtimer_start_range_ns_common+0x680/0x16f0 [ 180.017062][ T7397] ? __pfx_vma_modify+0x10/0x10 [ 180.017100][ T7397] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 180.017151][ T7397] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.017215][ T7397] vma_modify_flags+0x2c3/0x460 [ 180.017258][ T7397] ? __pfx_vma_modify_flags+0x10/0x10 [ 180.017325][ T7397] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.017382][ T7397] mlock_fixup+0x418/0xd60 [ 180.017425][ T7397] ? __pfx_mlock_fixup+0x10/0x10 [ 180.017464][ T7397] ? srso_alias_safe_ret+0x4/0x7 [ 180.017528][ T7397] apply_vma_lock_flags+0x390/0x500 [ 180.017574][ T7397] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 180.017614][ T7397] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.017670][ T7397] ? futex_wait+0x11e/0x370 [ 180.017727][ T7397] ? down_write_killable+0x14d/0x240 [ 180.017781][ T7397] do_mlock+0x261/0x830 [ 180.017820][ T7397] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.017866][ T7397] ? do_futex+0x190/0x440 [ 180.017908][ T7397] ? __pfx_do_mlock+0x10/0x10 [ 180.017941][ T7397] ? __pfx_do_futex+0x10/0x10 [ 180.017985][ T7397] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.018031][ T7397] ? __fget_files+0x21f/0x3d0 [ 180.018074][ T7397] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.018120][ T7397] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.018166][ T7397] ? __x64_sys_futex+0x358/0x4d0 [ 180.018216][ T7397] __x64_sys_mlock+0xce/0x120 [ 180.018255][ T7397] ? __pfx___x64_sys_mlock+0x10/0x10 [ 180.018299][ T7397] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.018355][ T7397] do_syscall_64+0x123/0x790 [ 180.018420][ T7397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.018461][ T7397] RIP: 0033:0x7fe58b19fb19 [ 180.018497][ T7397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.018535][ T7397] RSP: 002b:00007fe58c021028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 180.018573][ T7397] RAX: ffffffffffffffda RBX: 00007fe58b425fa0 RCX: 00007fe58b19fb19 [ 180.018599][ T7397] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 180.018624][ T7397] RBP: 00007fe58b237b70 R08: 0000000000000000 R09: 0000000000000000 [ 180.018649][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.018673][ T7397] R13: 00007fe58b426038 R14: 00007fe58b425fa0 R15: 00007fff95e501c8 [ 180.018726][ T7397] [ 180.481736][ T7410] ip_tables: iptables: counters copy to user failed while replacing table [ 180.638779][ T7412] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 180.667596][ T7414] loop0: detected capacity change from 0 to 128 [ 180.670654][ T7412] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 180.670786][ T7412] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 180.671010][ T7412] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 180.671137][ T7412] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 180.671264][ T7412] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 180.671390][ T7412] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 180.671515][ T7412] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 180.671638][ T7412] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 181.421636][ T7419] tipc: Started in network mode [ 181.421682][ T7419] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 181.454093][ T7419] tipc: Enabled bearer , priority 10 [ 181.582253][ T7421] device-mapper: ioctl: device name cannot contain '/' [ 181.981079][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.073117][ T7423] bridge_slave_1 (unregistering): left allmulticast mode [ 182.073155][ T7423] bridge_slave_1 (unregistering): left promiscuous mode [ 182.073304][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.352766][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 182.356993][ T7442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.414094][ T979] tipc: Node number set to 10005162 [ 182.506987][ T25] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 182.510040][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 182.510083][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 182.510143][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.578659][ T25] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 182.619087][ T25] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 183.217654][ T7434] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 183.219865][ T7434] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 183.249402][ T7434] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 183.430668][ T7430] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 183.441831][ T25] usb 6-1: USB disconnect, device number 4 [ 183.471202][ T25] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 183.471963][ T25] spcp8x5 6-1:1.0: device disconnected [ 184.317043][ T7477] FAULT_INJECTION: forcing a failure. [ 184.317043][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 184.317092][ T7477] CPU: 1 UID: 0 PID: 7477 Comm: syz.5.555 Not tainted syzkaller #0 PREEMPT(full) [ 184.317137][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 184.317161][ T7477] Call Trace: [ 184.317174][ T7477] [ 184.317188][ T7477] dump_stack_lvl+0x100/0x190 [ 184.317255][ T7477] should_fail_ex.cold+0x5/0xa [ 184.317313][ T7477] should_failslab+0xc2/0x120 [ 184.317375][ T7477] __kmalloc_noprof+0xfc/0x840 [ 184.317426][ T7477] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.317483][ T7477] ? asymmetric_key_generate_id+0x7e/0x180 [ 184.317537][ T7477] asymmetric_key_generate_id+0x7e/0x180 [ 184.317585][ T7477] x509_akid_note_kid+0x100/0x260 [ 184.317641][ T7477] asn1_ber_decoder+0x12b3/0x2170 [ 184.317719][ T7477] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 184.317783][ T7477] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.317830][ T7477] ? kasan_save_track+0x14/0x30 [ 184.317884][ T7477] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.317931][ T7477] ? __kasan_kmalloc+0xaa/0xb0 [ 184.317986][ T7477] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.318033][ T7477] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 184.318078][ T7477] ? x509_cert_parse+0x162/0x910 [ 184.318137][ T7477] x509_cert_parse+0x24b/0x910 [ 184.318192][ T7477] x509_key_preparse+0x65/0x9c0 [ 184.318252][ T7477] asymmetric_key_preparse+0xce/0x1d0 [ 184.318292][ T7477] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 184.318337][ T7477] __key_create_or_update+0x3f6/0xe10 [ 184.318406][ T7477] ? __pfx___key_create_or_update+0x10/0x10 [ 184.318468][ T7477] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.318515][ T7477] ? lookup_user_key+0x58c/0x14f0 [ 184.318569][ T7477] ? __lock_acquire+0x5c0/0x1f40 [ 184.318622][ T7477] ? __pfx_lookup_user_key+0x10/0x10 [ 184.318700][ T7477] ? __pfx_keyring_search_iterator+0x10/0x10 [ 184.318778][ T7477] key_create_or_update+0x42/0x60 [ 184.318844][ T7477] __do_sys_add_key+0x2e8/0x460 [ 184.318890][ T7477] ? __pfx___do_sys_add_key+0x10/0x10 [ 184.318940][ T7477] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.318995][ T7477] do_syscall_64+0x123/0x790 [ 184.319058][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.319098][ T7477] RIP: 0033:0x7feb8e59fb19 [ 184.319128][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.319166][ T7477] RSP: 002b:00007feb8f543028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 184.319203][ T7477] RAX: ffffffffffffffda RBX: 00007feb8e825fa0 RCX: 00007feb8e59fb19 [ 184.319229][ T7477] RDX: 0000200000000d80 RSI: 0000000000000000 RDI: 0000200000000540 [ 184.319254][ T7477] RBP: 00007feb8e637b70 R08: 000000003d73e247 R09: 0000000000000000 [ 184.319279][ T7477] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 184.319303][ T7477] R13: 00007feb8e826038 R14: 00007feb8e825fa0 R15: 00007ffdb56d54c8 [ 184.319355][ T7477] [ 184.432822][ T7477] X.509: Couldn't decode AuthKeyIdentifier [ 184.726615][ T7485] loop1: detected capacity change from 0 to 4096 [ 184.818351][ T7492] xt_hashlimit: size too large, truncated to 1048576 [ 184.938426][ T31] audit: type=1800 audit(1794092351.402:11): pid=7485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.559" name="file1" dev="loop1" ino=33 res=0 errno=-22 [ 185.545557][ T7502] loop0: detected capacity change from 0 to 4096 [ 185.717059][ T7510] loop4: detected capacity change from 0 to 512 [ 185.749029][ T7510] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.567: iget: bad i_size value: 38620345925642 [ 185.749081][ T7510] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.751347][ T7510] EXT4-fs error (device loop4): ext4_orphan_get:1407: comm syz.4.567: couldn't read orphan inode 15 (err -117) [ 185.751396][ T7510] loop4: lost filesystem error report for type 5 error -117 [ 185.752773][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 185.752804][ C0] EXT4-fs (loop4): initial error at time 1794092352: ext4_orphan_get:1404: inode 15 [ 185.752851][ C0] EXT4-fs (loop4): last error at time 1794092352: ext4_orphan_get:1407 [ 185.794971][ T7510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.968330][ T31] audit: type=1800 audit(1794092352.402:12): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.574" name="file1" dev="loop0" ino=33 res=0 errno=-22 [ 186.204039][ T1380] EXT4-fs error (device loop4): ext4_validate_block_bitmap:435: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 186.234363][ T1380] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 186.234408][ T1380] EXT4-fs (loop4): This should not happen!! Data will be lost [ 186.234408][ T1380] [ 186.234434][ T1380] EXT4-fs (loop4): Total free blocks count 0 [ 186.234458][ T1380] EXT4-fs (loop4): Free/Dirty block details [ 186.234480][ T1380] EXT4-fs (loop4): free_blocks=0 [ 186.234505][ T1380] EXT4-fs (loop4): dirty_blocks=4 [ 186.234528][ T1380] EXT4-fs (loop4): Block reservation details [ 186.234549][ T1380] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 186.274396][ T5639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.361898][ T7525] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 187.030999][ T7549] net_ratelimit: 1593 callbacks suppressed [ 187.031027][ T7549] ip_tables: iptables: counters copy to user failed while replacing table [ 187.412651][ T979] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.447504][ T7564] loop5: detected capacity change from 0 to 512 [ 187.480307][ T7564] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.585: iget: bad i_size value: 38620345925642 [ 187.480356][ T7564] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.482556][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 187.482586][ C0] EXT4-fs (loop5): initial error at time 1794092353: ext4_orphan_get:1404: inode 15 [ 187.482633][ C0] EXT4-fs (loop5): last error at time 1794092353: ext4_orphan_get:1404: inode 15 [ 187.540934][ T7564] EXT4-fs error (device loop5): ext4_orphan_get:1407: comm syz.5.585: couldn't read orphan inode 15 (err -117) [ 187.540991][ T7564] loop5: lost filesystem error report for type 5 error -117 [ 187.578065][ T7564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.584023][ T979] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 187.585436][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.593748][ T979] usb 3-1: config 0 descriptor?? [ 187.813497][ T979] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 188.048263][ T13] EXT4-fs error (device loop5): ext4_validate_block_bitmap:435: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 188.062652][ T13] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 188.062697][ T13] EXT4-fs (loop5): This should not happen!! Data will be lost [ 188.062697][ T13] [ 188.062722][ T13] EXT4-fs (loop5): Total free blocks count 0 [ 188.062746][ T13] EXT4-fs (loop5): Free/Dirty block details [ 188.062768][ T13] EXT4-fs (loop5): free_blocks=0 [ 188.062792][ T13] EXT4-fs (loop5): dirty_blocks=4 [ 188.062815][ T13] EXT4-fs (loop5): Block reservation details [ 188.062837][ T13] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 188.093053][ T979] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 188.093087][ T979] [drm] Initialized udl on minor 1 [ 188.168203][ T5641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.790429][ T1380] IPVS: starting estimator thread 0... [ 188.791927][ T7595] IPVS: rr: UDP 172.20.20.11:20001 - no destination available [ 188.882659][ T7596] IPVS: using max 23 ests per chain, 55200 per kthread [ 189.052607][ T5368] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 189.224799][ T5368] usb 6-1: New USB device found: idVendor=046d, idProduct=c225, bcdDevice=0.00 [ 189.225953][ T5368] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 189.225995][ T5368] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.226052][ T5368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.233396][ T5368] usb 6-1: config 0 descriptor?? [ 189.242178][ T7598] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 189.692929][ T5368] lg-g15 0003:046D:C225.0006: hiddev0,hidraw0: USB HID v0.03 Device [HID 046d:c225] on usb-dummy_hcd.5-1/input0 [ 189.937990][ T25] usb 6-1: USB disconnect, device number 5 [ 190.527094][ T7608] loop0: detected capacity change from 0 to 1024 [ 190.529818][ T7608] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.530997][ T7608] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 190.558490][ T7608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.674540][ T5640] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.094652][ T5833] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 191.138905][ T7624] FAULT_INJECTION: forcing a failure. [ 191.138905][ T7624] name failslab, interval 1, probability 0, space 0, times 0 [ 191.138950][ T7624] CPU: 0 UID: 0 PID: 7624 Comm: syz.0.604 Not tainted syzkaller #0 PREEMPT(full) [ 191.138992][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 191.139013][ T7624] Call Trace: [ 191.139023][ T7624] [ 191.139034][ T7624] dump_stack_lvl+0x100/0x190 [ 191.139094][ T7624] should_fail_ex.cold+0x5/0xa [ 191.139148][ T7624] should_failslab+0xc2/0x120 [ 191.139196][ T7624] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 191.139248][ T7624] ? __d_alloc+0x34/0xad0 [ 191.139297][ T7624] __d_alloc+0x34/0xad0 [ 191.139336][ T7624] d_alloc+0x4a/0x1e0 [ 191.139374][ T7624] lookup_one_qstr_excl+0x171/0x250 [ 191.139428][ T7624] start_dirop+0x59/0xb0 [ 191.139480][ T7624] simple_start_creating+0xf9/0x110 [ 191.139517][ T7624] ? __pfx_simple_start_creating+0x10/0x10 [ 191.139559][ T7624] ? _raw_spin_unlock+0x28/0x50 [ 191.139605][ T7624] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.139642][ T7624] ? d_instantiate+0x8f/0xb0 [ 191.139684][ T7624] devpts_fill_super+0x36d/0x5e0 [ 191.139734][ T7624] ? __pfx_devpts_fill_super+0x10/0x10 [ 191.139776][ T7624] get_tree_nodev+0xe3/0x190 [ 191.139820][ T7624] vfs_get_tree+0x92/0x320 [ 191.139864][ T7624] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.139911][ T7624] path_mount+0x7d0/0x2850 [ 191.139955][ T7624] ? __pfx_path_mount+0x10/0x10 [ 191.140006][ T7624] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.140051][ T7624] ? lockdep_hardirqs_on+0x7d/0x110 [ 191.140105][ T7624] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.140140][ T7624] ? kmem_cache_free+0x127/0x6c0 [ 191.140201][ T7624] ? __x64_sys_mount+0x293/0x310 [ 191.140242][ T7624] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.140277][ T7624] __x64_sys_mount+0x293/0x310 [ 191.140323][ T7624] ? __pfx___x64_sys_mount+0x10/0x10 [ 191.140375][ T7624] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.140419][ T7624] do_syscall_64+0x123/0x790 [ 191.140474][ T7624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.140517][ T7624] RIP: 0033:0x7fe58b19fb19 [ 191.140545][ T7624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.140573][ T7624] RSP: 002b:00007fe58c021028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.140604][ T7624] RAX: ffffffffffffffda RBX: 00007fe58b425fa0 RCX: 00007fe58b19fb19 [ 191.140631][ T7624] RDX: 0000200000000680 RSI: 0000200000000840 RDI: 0000000000000000 [ 191.140656][ T7624] RBP: 00007fe58b237b70 R08: 0000000000000000 R09: 0000000000000000 [ 191.140683][ T7624] R10: 00000000022008d0 R11: 0000000000000246 R12: 0000000000000000 [ 191.140708][ T7624] R13: 00007fe58b426038 R14: 00007fe58b425fa0 R15: 00007fff95e501c8 [ 191.140761][ T7624] [ 191.140800][ T7624] devpts: Unable to alloc dentry for ptmx node [ 191.190286][ T7582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.272613][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 191.274232][ T5833] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.276459][ T5833] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 191.276529][ T5833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.276570][ T5833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.276612][ T5833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.276671][ T5833] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.276733][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.582914][ T5833] usb 6-1: usb_control_msg returned -32 [ 191.582975][ T5833] usbtmc 6-1:16.0: can't read capabilities [ 191.901100][ T7638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.184281][ T7626] loop0: detected capacity change from 0 to 32768 [ 192.222795][ T7626] JBD2: Ignoring recovery information on journal [ 192.271449][ T7626] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 192.343618][ T7648] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 192.372731][ T7651] Illegal XDP return value 7651 on prog (id 49) dev syz_tun, expect packet loss! [ 192.376792][ T31] audit: type=1804 audit(1794092358.842:13): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.605" name="/newroot/104/file1/bus" dev="loop0" ino=17059 res=1 errno=0 [ 192.556929][ T7653] netlink: 36 bytes leftover after parsing attributes in process `syz.4.616'. [ 192.571578][ T5780] usb 6-1: USB disconnect, device number 6 [ 192.627998][ T5640] ocfs2: Unmounting device (7,0) on (node local) [ 192.904101][ T7661] FAULT_INJECTION: forcing a failure. [ 192.904101][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 192.904148][ T7661] CPU: 0 UID: 0 PID: 7661 Comm: syz.3.619 Not tainted syzkaller #0 PREEMPT(full) [ 192.904192][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 192.904216][ T7661] Call Trace: [ 192.904228][ T7661] [ 192.904243][ T7661] dump_stack_lvl+0x100/0x190 [ 192.904309][ T7661] should_fail_ex.cold+0x5/0xa [ 192.904367][ T7661] should_failslab+0xc2/0x120 [ 192.904428][ T7661] kmem_cache_alloc_noprof+0x92/0x6a0 [ 192.904478][ T7661] ? __pfx_map_id_range_down+0x10/0x10 [ 192.904543][ T7661] ? rcu_is_watching+0x13/0xc0 [ 192.904582][ T7661] ? security_inode_alloc+0x3b/0x2c0 [ 192.904643][ T7661] security_inode_alloc+0x3b/0x2c0 [ 192.904696][ T7661] inode_init_always_gfp+0xc75/0xfb0 [ 192.904744][ T7661] alloc_inode+0x8e/0x250 [ 192.904796][ T7661] new_inode+0x22/0x1c0 [ 192.904845][ T7661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.904898][ T7661] bpf_get_inode+0x7b/0xf0 [ 192.904959][ T7661] bpf_mkobj_ops+0xa0/0x2a0 [ 192.905023][ T7661] bpf_fill_super+0x5f6/0x970 [ 192.905084][ T7661] ? __pfx_bpf_fill_super+0x10/0x10 [ 192.905140][ T7661] ? hook_capable+0x1bc/0x500 [ 192.905188][ T7661] ? rcu_is_watching+0x13/0xc0 [ 192.905226][ T7661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.905272][ T7661] ? apparmor_capable+0x1d7/0x4d0 [ 192.905331][ T7661] ? __pfx_bpf_fill_super+0x10/0x10 [ 192.905389][ T7661] get_tree_nodev+0xe3/0x190 [ 192.905449][ T7661] vfs_get_tree+0x92/0x320 [ 192.905492][ T7661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.905549][ T7661] vfs_cmd_create+0xd7/0x2a0 [ 192.905608][ T7661] __do_sys_fsconfig+0x55a/0xcb0 [ 192.905669][ T7661] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 192.905726][ T7661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.905785][ T7661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.905842][ T7661] do_syscall_64+0x123/0x790 [ 192.905905][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.905946][ T7661] RIP: 0033:0x7f5a0b99fb19 [ 192.905975][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.906012][ T7661] RSP: 002b:00007f5a0c928028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 192.906049][ T7661] RAX: ffffffffffffffda RBX: 00007f5a0bc25fa0 RCX: 00007f5a0b99fb19 [ 192.906076][ T7661] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 192.906100][ T7661] RBP: 00007f5a0ba37b70 R08: 0000000000000000 R09: 0000000000000000 [ 192.906124][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.906148][ T7661] R13: 00007f5a0bc26038 R14: 00007f5a0bc25fa0 R15: 00007ffc13886588 [ 192.906202][ T7661] [ 192.937859][ T7662] ip_tables: iptables: counters copy to user failed while replacing table [ 193.137684][ T979] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 193.138188][ T979] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 193.215871][ T979] usb 3-1: USB disconnect, device number 4 [ 193.223512][ T5787] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 193.606708][ T7672] FAULT_INJECTION: forcing a failure. [ 193.606708][ T7672] name failslab, interval 1, probability 0, space 0, times 0 [ 193.606755][ T7672] CPU: 1 UID: 0 PID: 7672 Comm: syz.5.624 Not tainted syzkaller #0 PREEMPT(full) [ 193.606801][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 193.606825][ T7672] Call Trace: [ 193.606838][ T7672] [ 193.606853][ T7672] dump_stack_lvl+0x100/0x190 [ 193.606920][ T7672] should_fail_ex.cold+0x5/0xa [ 193.606977][ T7672] should_failslab+0xc2/0x120 [ 193.607039][ T7672] __kvmalloc_node_noprof+0x113/0x9b0 [ 193.607098][ T7672] ? bpf_check_cfg+0x400/0x9d0 [ 193.607145][ T7672] ? bpf_compute_postorder+0x87/0x960 [ 193.607203][ T7672] bpf_compute_postorder+0x87/0x960 [ 193.607250][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.607297][ T7672] ? bpf_check_cfg+0x4a3/0x9d0 [ 193.607357][ T7672] bpf_check+0x789e/0xa0f0 [ 193.607447][ T7672] ? __pfx_bpf_check+0x10/0x10 [ 193.607507][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.607554][ T7672] ? lock_acquire+0x1d1/0x380 [ 193.607606][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.607652][ T7672] ? find_held_lock+0x2b/0x80 [ 193.607688][ T7672] ? bpf_prog_load+0x1af0/0x2b20 [ 193.607739][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.607794][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.607839][ T7672] ? __asan_memset+0x23/0x50 [ 193.607885][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.607940][ T7672] ? bpf_prog_load+0x1baf/0x2b20 [ 193.607987][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.608038][ T7672] bpf_prog_load+0x1baf/0x2b20 [ 193.608101][ T7672] ? __pfx_bpf_prog_load+0x10/0x10 [ 193.608148][ T7672] ? lock_acquire+0x1d1/0x380 [ 193.608204][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.608286][ T7672] __sys_bpf+0x146f/0x4b60 [ 193.608351][ T7672] ? __pfx___sys_bpf+0x10/0x10 [ 193.608399][ T7672] ? find_held_lock+0x2b/0x80 [ 193.608436][ T7672] ? futex_wake+0x4ea/0x5e0 [ 193.608496][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.608545][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.608619][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.608665][ T7672] ? rcu_read_lock_any_held+0x6a/0x90 [ 193.608707][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.608753][ T7672] ? find_held_lock+0x2b/0x80 [ 193.608793][ T7672] ? ksys_write+0x190/0x250 [ 193.608847][ T7672] ? ksys_write+0x190/0x250 [ 193.608906][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.608977][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.609022][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.609069][ T7672] ? __x64_sys_futex+0x358/0x4d0 [ 193.609114][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.609163][ T7672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.609210][ T7672] ? xfd_validate_state+0x129/0x190 [ 193.609264][ T7672] ? __x64_sys_bpf+0xce/0x140 [ 193.609315][ T7672] __x64_sys_bpf+0xce/0x140 [ 193.609369][ T7672] ? do_syscall_64+0xae/0x790 [ 193.609429][ T7672] do_syscall_64+0x123/0x790 [ 193.609498][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.609538][ T7672] RIP: 0033:0x7feb8e59fb19 [ 193.609568][ T7672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.609607][ T7672] RSP: 002b:00007feb8f543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.609644][ T7672] RAX: ffffffffffffffda RBX: 00007feb8e825fa0 RCX: 00007feb8e59fb19 [ 193.609671][ T7672] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 193.609696][ T7672] RBP: 00007feb8e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 193.609720][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.609744][ T7672] R13: 00007feb8e826038 R14: 00007feb8e825fa0 R15: 00007ffdb56d54c8 [ 193.609796][ T7672] [ 193.767668][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.767741][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.189632][ T7682] FAULT_INJECTION: forcing a failure. [ 194.189632][ T7682] name failslab, interval 1, probability 0, space 0, times 0 [ 194.189681][ T7682] CPU: 0 UID: 0 PID: 7682 Comm: syz.5.628 Not tainted syzkaller #0 PREEMPT(full) [ 194.189726][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.189750][ T7682] Call Trace: [ 194.189762][ T7682] [ 194.189776][ T7682] dump_stack_lvl+0x100/0x190 [ 194.189842][ T7682] should_fail_ex.cold+0x5/0xa [ 194.189900][ T7682] should_failslab+0xc2/0x120 [ 194.189962][ T7682] __kmalloc_noprof+0xfc/0x840 [ 194.190020][ T7682] ? futex_unqueue+0x29/0x2c0 [ 194.190060][ T7682] ? inotify_handle_inode_event+0x1aa/0x6a0 [ 194.190135][ T7682] inotify_handle_inode_event+0x1aa/0x6a0 [ 194.190212][ T7682] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 194.190277][ T7682] fsnotify_handle_inode_event.isra.0+0x1e3/0x480 [ 194.190339][ T7682] fsnotify+0x1b45/0x3240 [ 194.190402][ T7682] ? __pfx_fsnotify+0x10/0x10 [ 194.190458][ T7682] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.190508][ T7682] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.190568][ T7682] __fsnotify_parent+0x74f/0xd00 [ 194.190618][ T7682] ? __pfx_futex_wait+0x10/0x10 [ 194.190679][ T7682] ? __pfx___fsnotify_parent+0x10/0x10 [ 194.190738][ T7682] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.190788][ T7682] ? __pfx___might_resched+0x10/0x10 [ 194.190842][ T7682] ? __fput+0x309/0xb50 [ 194.190877][ T7682] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.190922][ T7682] __fput+0x309/0xb50 [ 194.190972][ T7682] fput_close_sync+0x118/0x250 [ 194.191025][ T7682] ? __pfx_fput_close_sync+0x10/0x10 [ 194.191083][ T7682] filp_close_sync+0x75/0xa0 [ 194.191131][ T7682] __x64_sys_close+0x81/0x110 [ 194.191176][ T7682] do_syscall_64+0x123/0x790 [ 194.191239][ T7682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.191278][ T7682] RIP: 0033:0x7feb8e59fb19 [ 194.191309][ T7682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.191347][ T7682] RSP: 002b:00007feb8f543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 194.191384][ T7682] RAX: ffffffffffffffda RBX: 00007feb8e825fa0 RCX: 00007feb8e59fb19 [ 194.191410][ T7682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 194.191432][ T7682] RBP: 00007feb8e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 194.191457][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.191483][ T7682] R13: 00007feb8e826038 R14: 00007feb8e825fa0 R15: 00007ffdb56d54c8 [ 194.191533][ T7682] [ 194.514220][ T7684] loop4: detected capacity change from 0 to 2048 [ 194.848347][ T7691] FAULT_INJECTION: forcing a failure. [ 194.848347][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 194.848388][ T7691] CPU: 1 UID: 0 PID: 7691 Comm: syz.5.632 Not tainted syzkaller #0 PREEMPT(full) [ 194.848429][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.848451][ T7691] Call Trace: [ 194.848467][ T7691] [ 194.848480][ T7691] dump_stack_lvl+0x100/0x190 [ 194.848540][ T7691] should_fail_ex.cold+0x5/0xa [ 194.848592][ T7691] should_failslab+0xc2/0x120 [ 194.848646][ T7691] __kmalloc_noprof+0xfc/0x840 [ 194.848692][ T7691] ? __register_sysctl_table+0xac/0x1650 [ 194.848760][ T7691] __register_sysctl_table+0xac/0x1650 [ 194.848818][ T7691] ? trace_kmalloc+0xeb/0x110 [ 194.848872][ T7691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.848923][ T7691] ? __kasan_kmalloc+0xaa/0xb0 [ 194.848979][ T7691] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 194.849041][ T7691] ? __pfx___register_sysctl_table+0x10/0x10 [ 194.849100][ T7691] ? setup_ipc_sysctls+0x5e/0x300 [ 194.849143][ T7691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.849188][ T7691] ? __asan_memcpy+0x3c/0x60 [ 194.849239][ T7691] setup_ipc_sysctls+0x1aa/0x300 [ 194.849284][ T7691] copy_ipcs+0x575/0x7e0 [ 194.849336][ T7691] create_new_namespaces+0x20a/0xac0 [ 194.849386][ T7691] ? security_capable+0x80/0x260 [ 194.849438][ T7691] unshare_nsproxy_namespaces+0xf6/0x210 [ 194.849493][ T7691] ksys_unshare+0x44f/0x980 [ 194.849538][ T7691] ? __pfx_ksys_unshare+0x10/0x10 [ 194.849587][ T7691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.849659][ T7691] __x64_sys_unshare+0x31/0x40 [ 194.849705][ T7691] do_syscall_64+0x123/0x790 [ 194.849767][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.849806][ T7691] RIP: 0033:0x7feb8e59fb19 [ 194.849835][ T7691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.849872][ T7691] RSP: 002b:00007feb8f543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 194.849909][ T7691] RAX: ffffffffffffffda RBX: 00007feb8e825fa0 RCX: 00007feb8e59fb19 [ 194.849935][ T7691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 194.849958][ T7691] RBP: 00007feb8e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 194.849983][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.850006][ T7691] R13: 00007feb8e826038 R14: 00007feb8e825fa0 R15: 00007ffdb56d54c8 [ 194.850066][ T7691] [ 194.900468][ T7692] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.762375][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 196.426551][ T7692] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 196.426597][ T7692] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 196.659011][ T7692] Remounting filesystem read-only [ 196.699020][ T5639] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 197.596749][ T7721] loop5: detected capacity change from 0 to 131072 [ 197.629677][ T7721] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(3584) blocks(12321792) [ 197.629718][ T7721] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 197.753646][ T7721] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 197.791544][ T7721] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 197.791572][ T7721] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 197.809888][ T7719] gadgetfs: bound to dummy_udc driver [ 198.002256][ T7721] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 198.030025][ T7731] loop3: detected capacity change from 0 to 164 [ 199.235302][ T7736] loop2: detected capacity change from 0 to 131072 [ 199.250250][ T7736] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 199.250289][ T7736] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 199.270631][ T7736] F2FS-fs (loop2): invalid crc value [ 199.372803][ T7736] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 199.388985][ T7736] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 199.389027][ T7736] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 199.449575][ T7736] netfs: Cache "CacheFiles" added (type cachefiles) [ 199.449602][ T7736] CacheFiles: File cache on CacheFiles registered [ 199.450964][ T7735] CacheFiles: File cache on CacheFiles unregistering [ 199.450982][ T7735] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 199.487595][ T7756] FAULT_INJECTION: forcing a failure. [ 199.487595][ T7756] name failslab, interval 1, probability 0, space 0, times 0 [ 199.487637][ T7756] CPU: 0 UID: 0 PID: 7756 Comm: syz.0.654 Not tainted syzkaller #0 PREEMPT(full) [ 199.487681][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 199.487704][ T7756] Call Trace: [ 199.487717][ T7756] [ 199.487730][ T7756] dump_stack_lvl+0x100/0x190 [ 199.487795][ T7756] should_fail_ex.cold+0x5/0xa [ 199.487850][ T7756] should_failslab+0xc2/0x120 [ 199.487910][ T7756] __kmalloc_noprof+0xfc/0x840 [ 199.487960][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.488011][ T7756] ? afs_alloc_vlserver_list+0x24/0xa0 [ 199.488055][ T7756] afs_alloc_vlserver_list+0x24/0xa0 [ 199.488094][ T7756] afs_lookup_cell+0x14c1/0x1940 [ 199.488143][ T7756] ? __pfx_afs_lookup_cell+0x10/0x10 [ 199.488182][ T7756] ? __pfx___might_resched+0x10/0x10 [ 199.488223][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.488268][ T7756] ? lock_acquire+0x1d1/0x380 [ 199.488314][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.488357][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.488397][ T7756] ? down_write+0x141/0x1f0 [ 199.488455][ T7756] afs_cell_init+0x17d/0x380 [ 199.488498][ T7756] afs_proc_rootcell_write+0x1c9/0x280 [ 199.488560][ T7756] proc_simple_write+0x10e/0x1a0 [ 199.488596][ T7756] ? __pfx_proc_simple_write+0x10/0x10 [ 199.488634][ T7756] proc_reg_write+0x240/0x330 [ 199.488690][ T7756] vfs_write+0x2aa/0x1050 [ 199.488739][ T7756] ? __pfx_proc_reg_write+0x10/0x10 [ 199.488788][ T7756] ? lock_acquire+0x1d1/0x380 [ 199.488829][ T7756] ? __fget_files+0x34/0x3d0 [ 199.488860][ T7756] ? __pfx_vfs_write+0x10/0x10 [ 199.488906][ T7756] ? find_held_lock+0x2b/0x80 [ 199.488942][ T7756] ? __fget_files+0x215/0x3d0 [ 199.488981][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.489031][ T7756] ? __fget_files+0x21f/0x3d0 [ 199.489078][ T7756] ksys_write+0x12a/0x250 [ 199.489125][ T7756] ? __pfx_ksys_write+0x10/0x10 [ 199.489177][ T7756] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.489224][ T7756] do_syscall_64+0x123/0x790 [ 199.489279][ T7756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.489316][ T7756] RIP: 0033:0x7fe58b19fb19 [ 199.489342][ T7756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.489376][ T7756] RSP: 002b:00007fe58c021028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.489409][ T7756] RAX: ffffffffffffffda RBX: 00007fe58b425fa0 RCX: 00007fe58b19fb19 [ 199.489433][ T7756] RDX: 0000000000000001 RSI: 0000200000000e40 RDI: 0000000000000003 [ 199.489455][ T7756] RBP: 00007fe58b237b70 R08: 0000000000000000 R09: 0000000000000000 [ 199.489475][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.489496][ T7756] R13: 00007fe58b426038 R14: 00007fe58b425fa0 R15: 00007fff95e501c8 [ 199.489542][ T7756] [ 200.038921][ T31] audit: type=1804 audit(1794092366.502:14): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.655" name="/newroot/107/file1" dev="tmpfs" ino=601 res=1 errno=0 [ 200.312089][ T7768] loop1: detected capacity change from 0 to 256 [ 200.492371][ T7770] loop0: detected capacity change from 0 to 8 [ 200.557276][ T7770] SQUASHFS error: Unable to read inode 0x11f [ 200.694028][ T7774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 200.703630][ T7774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 200.703760][ T7774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 200.703884][ T7774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 200.704032][ T7774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 200.704159][ T7774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 200.704283][ T7774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 200.704406][ T7774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 200.704539][ T7774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 200.704663][ T7774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 201.904083][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 202.726270][ T7800] loop0: detected capacity change from 0 to 2048 [ 202.831623][ T7807] loop2: detected capacity change from 0 to 2048 [ 202.900652][ T7809] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.106105][ T7814] FAULT_INJECTION: forcing a failure. [ 203.106105][ T7814] name failslab, interval 1, probability 0, space 0, times 0 [ 203.106152][ T7814] CPU: 0 UID: 0 PID: 7814 Comm: syz.5.674 Not tainted syzkaller #0 PREEMPT(full) [ 203.106196][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 203.106220][ T7814] Call Trace: [ 203.106232][ T7814] [ 203.106246][ T7814] dump_stack_lvl+0x100/0x190 [ 203.106311][ T7814] should_fail_ex.cold+0x5/0xa [ 203.106366][ T7814] should_failslab+0xc2/0x120 [ 203.106426][ T7814] __kmalloc_cache_noprof+0x91/0x6d0 [ 203.106467][ T7814] ? __might_fault+0xc5/0x140 [ 203.106527][ T7814] ? landlock_create_ruleset+0x98/0x430 [ 203.106591][ T7814] landlock_create_ruleset+0x98/0x430 [ 203.106651][ T7814] __do_sys_landlock_create_ruleset+0x2d4/0x790 [ 203.106708][ T7814] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 203.106778][ T7814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.106832][ T7814] do_syscall_64+0x123/0x790 [ 203.106895][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.106938][ T7814] RIP: 0033:0x7feb8e59fb19 [ 203.106967][ T7814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.107010][ T7814] RSP: 002b:00007feb8f543028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 203.107047][ T7814] RAX: ffffffffffffffda RBX: 00007feb8e825fa0 RCX: 00007feb8e59fb19 [ 203.107073][ T7814] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000200000000000 [ 203.107097][ T7814] RBP: 00007feb8e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 203.107121][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.107145][ T7814] R13: 00007feb8e826038 R14: 00007feb8e825fa0 R15: 00007ffdb56d54c8 [ 203.107197][ T7814] [ 203.851505][ T7809] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 203.851551][ T7809] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 203.876728][ T7809] Remounting filesystem read-only [ 203.877318][ T5638] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 203.903247][ T7832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.587561][ T7875] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 205.589490][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.590146][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.606239][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.606408][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.606824][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.606966][ T7875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.611775][ T7878] FAULT_INJECTION: forcing a failure. [ 205.611775][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 205.611817][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: syz.5.698 Not tainted syzkaller #0 PREEMPT(full) [ 205.611863][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 205.611886][ T7878] Call Trace: [ 205.611898][ T7878] [ 205.611912][ T7878] dump_stack_lvl+0x100/0x190 [ 205.611977][ T7878] should_fail_ex.cold+0x5/0xa [ 205.612033][ T7878] should_failslab+0xc2/0x120 [ 205.612093][ T7878] kmem_cache_alloc_noprof+0x92/0x6a0 [ 205.612145][ T7878] ? vm_area_dup+0x27/0xb60 [ 205.612207][ T7878] vm_area_dup+0x27/0xb60 [ 205.612264][ T7878] dup_mmap+0x526/0x2180 [ 205.612330][ T7878] ? __pfx_dup_mmap+0x10/0x10 [ 205.612381][ T7878] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 205.612431][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.612480][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.612529][ T7878] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 205.612580][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.612634][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.612679][ T7878] ? do_raw_spin_lock+0x128/0x260 [ 205.612751][ T7878] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 205.612800][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.612845][ T7878] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.612899][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.612947][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.612992][ T7878] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 205.613046][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.613091][ T7878] ? mm_init+0xc17/0xeb0 [ 205.613132][ T7878] copy_process+0x7c5c/0x88e0 [ 205.613206][ T7878] ? __pfx_copy_process+0x10/0x10 [ 205.613249][ T7878] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 205.613300][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.613345][ T7878] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.613402][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.613463][ T7878] kernel_clone+0x176/0x9d0 [ 205.613515][ T7878] ? __pfx_kernel_clone+0x10/0x10 [ 205.613578][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.613632][ T7878] __do_sys_clone+0xd9/0x120 [ 205.613676][ T7878] ? __pfx___do_sys_clone+0x10/0x10 [ 205.613717][ T7878] ? irqentry_exit+0x202/0xab0 [ 205.613770][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.613814][ T7878] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.613898][ T7878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.613952][ T7878] do_syscall_64+0x123/0x790 [ 205.614013][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.614053][ T7878] RIP: 0033:0x7feb8e59fb19 [ 205.614082][ T7878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.614119][ T7878] RSP: 002b:00007feb8f542fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 205.614156][ T7878] RAX: ffffffffffffffda RBX: 00007feb8e825fa0 RCX: 00007feb8e59fb19 [ 205.614181][ T7878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 205.614205][ T7878] RBP: 00007feb8e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 205.614229][ T7878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.614252][ T7878] R13: 00007feb8e826038 R14: 00007feb8e825fa0 R15: 00007ffdb56d54c8 [ 205.614304][ T7878] [ 205.619708][ T7875] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 206.222847][ T7888] FAULT_INJECTION: forcing a failure. [ 206.222847][ T7888] name failslab, interval 1, probability 0, space 0, times 0 [ 206.222895][ T7888] CPU: 0 UID: 0 PID: 7888 Comm: syz.3.701 Not tainted syzkaller #0 PREEMPT(full) [ 206.222940][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 206.222964][ T7888] Call Trace: [ 206.222976][ T7888] [ 206.222991][ T7888] dump_stack_lvl+0x100/0x190 [ 206.223066][ T7888] should_fail_ex.cold+0x5/0xa [ 206.223124][ T7888] should_failslab+0xc2/0x120 [ 206.223187][ T7888] kmem_cache_alloc_noprof+0x92/0x6a0 [ 206.223241][ T7888] ? __mpol_dup+0x74/0x390 [ 206.223293][ T7888] __mpol_dup+0x74/0x390 [ 206.223335][ T7888] ? __pfx___mpol_dup+0x10/0x10 [ 206.223380][ T7888] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.223438][ T7888] mbind_range+0x2ad/0x550 [ 206.223490][ T7888] do_mbind+0x81a/0x1030 [ 206.223545][ T7888] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.223595][ T7888] ? __pfx_do_mbind+0x10/0x10 [ 206.223650][ T7888] ? _copy_from_user+0x59/0xd0 [ 206.223726][ T7888] ? __pfx_get_nodes+0x10/0x10 [ 206.223801][ T7888] kernel_mbind+0x1b7/0x200 [ 206.223852][ T7888] ? __pfx_kernel_mbind+0x10/0x10 [ 206.223902][ T7888] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.223950][ T7888] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.224012][ T7888] do_syscall_64+0x123/0x790 [ 206.224077][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.224118][ T7888] RIP: 0033:0x7f5a0b99fb19 [ 206.224149][ T7888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.224188][ T7888] RSP: 002b:00007f5a0c928028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 206.224230][ T7888] RAX: ffffffffffffffda RBX: 00007f5a0bc25fa0 RCX: 00007f5a0b99fb19 [ 206.224257][ T7888] RDX: 0000000000000005 RSI: 0000000000600000 RDI: 0000200000000000 [ 206.224282][ T7888] RBP: 00007f5a0ba37b70 R08: 0000000000000008 R09: 0000000000000000 [ 206.224308][ T7888] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 206.224332][ T7888] R13: 00007f5a0bc26038 R14: 00007f5a0bc25fa0 R15: 00007ffc13886588 [ 206.224386][ T7888] [ 206.623810][ T7893] loop5: detected capacity change from 0 to 512 [ 206.675636][ T7893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 206.675782][ T7893] System zones: 1-12 [ 206.713884][ T7893] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.702: missing EA_INODE flag [ 206.713934][ T7893] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 206.717121][ T7893] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: comm syz.5.702: error while reading EA inode 12 err=-117 [ 206.718824][ T7893] loop5: lost filesystem error report for type 5 error -117 [ 206.721467][ T7893] EXT4-fs (loop5): 1 orphan inode deleted [ 206.779870][ T7893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.967731][ T7893] EXT4-fs (loop5): Online defrag not supported for non-extent files [ 207.121106][ T5641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.255679][ T7901] loop3: detected capacity change from 0 to 32768 [ 207.302380][ T7901] loop3: p1 p3 < > [ 207.874184][ T7904] device-mapper: table: 248:0: crypt: Error allocating crypto tfm (-EINVAL) [ 207.874223][ T7904] device-mapper: ioctl: error adding target to table [ 208.083723][ T7083] udevd[7083]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 208.084940][ T7085] udevd[7085]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 208.578427][ T7927] FAULT_INJECTION: forcing a failure. [ 208.578427][ T7927] name failslab, interval 1, probability 0, space 0, times 0 [ 208.578473][ T7927] CPU: 1 UID: 0 PID: 7927 Comm: syz.2.711 Not tainted syzkaller #0 PREEMPT(full) [ 208.578525][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 208.578549][ T7927] Call Trace: [ 208.578561][ T7927] [ 208.578575][ T7927] dump_stack_lvl+0x100/0x190 [ 208.578640][ T7927] should_fail_ex.cold+0x5/0xa [ 208.578697][ T7927] should_failslab+0xc2/0x120 [ 208.578760][ T7927] __kmalloc_noprof+0xfc/0x840 [ 208.578809][ T7927] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.578856][ T7927] ? trace_kmalloc+0xeb/0x110 [ 208.578912][ T7927] ? lsm_blob_alloc+0x68/0x90 [ 208.578960][ T7927] lsm_blob_alloc+0x68/0x90 [ 208.579001][ T7927] security_sk_alloc+0x2d/0x290 [ 208.579054][ T7927] sk_prot_alloc+0x12a/0x2a0 [ 208.579101][ T7927] sk_alloc+0x36/0xe80 [ 208.579159][ T7927] bt_sock_alloc+0x3b/0x3c0 [ 208.579217][ T7927] sco_sock_create+0xe8/0x3b0 [ 208.579261][ T7927] bt_sock_create+0x185/0x350 [ 208.579316][ T7927] __sock_create+0x339/0x860 [ 208.579371][ T7927] __sys_socket+0x14d/0x260 [ 208.579422][ T7927] ? __pfx___sys_socket+0x10/0x10 [ 208.579486][ T7927] __x64_sys_socket+0x72/0xb0 [ 208.579538][ T7927] ? lockdep_hardirqs_on+0x7d/0x110 [ 208.579596][ T7927] do_syscall_64+0x123/0x790 [ 208.579660][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.579701][ T7927] RIP: 0033:0x7f012699fb19 [ 208.579732][ T7927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.579771][ T7927] RSP: 002b:00007f012787dfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 208.579809][ T7927] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f012699fb19 [ 208.579834][ T7927] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 208.579859][ T7927] RBP: 00007f0126a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 208.579884][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.579908][ T7927] R13: 00007f0126c26038 R14: 00007f0126c25fa0 R15: 00007ffd5bb33088 [ 208.579960][ T7927] [ 208.802663][ T5368] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 208.952691][ T5368] usb 4-1: Using ep0 maxpacket: 32 [ 208.953413][ T5368] usb 4-1: New USB device found: idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 208.954949][ T5368] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 208.954979][ T5368] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.958624][ T5368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.958664][ T5368] usb 4-1: Product: syz [ 208.958691][ T5368] usb 4-1: Manufacturer: syz [ 208.958718][ T5368] usb 4-1: SerialNumber: syz [ 208.963910][ T5368] usb 4-1: config 0 descriptor?? [ 208.968681][ T5368] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 209.172626][ T5833] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 209.175477][ T5368] gspca_sunplus: reg_r err -32 [ 209.336079][ T5833] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 209.337388][ T5833] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 209.337426][ T5833] usb 6-1: config 1 has no interface number 0 [ 209.339877][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.339915][ T5833] usb 6-1: Product: syz [ 209.339941][ T5833] usb 6-1: Manufacturer: syz [ 209.339967][ T5833] usb 6-1: SerialNumber: syz [ 209.341614][ T7944] lo: left promiscuous mode [ 209.408638][ T5833] usb 6-1: 3:1 : does not exist [ 209.408672][ T5833] usb 6-1: 3:2 : does not exist [ 209.627340][ T5833] usb 6-1: USB disconnect, device number 7 [ 209.639735][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.667957][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.161439][ T5368] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 210.222641][ T1117] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.223738][ T1117] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.223798][ T1117] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.223855][ T1117] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.403449][ T5833] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 210.583344][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 210.584250][ T5833] usb 3-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 210.585637][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 210.585684][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.590046][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.590085][ T5833] usb 3-1: Product: syz [ 210.590111][ T5833] usb 3-1: Manufacturer: syz [ 210.590138][ T5833] usb 3-1: SerialNumber: syz [ 210.599162][ T5833] usb 3-1: config 0 descriptor?? [ 210.609981][ T5833] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 210.610035][ T5833] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 210.780825][ T7977] svc: failed to register nfsdv3 RPC service (errno 97). [ 210.780861][ T7977] svc: failed to register nfsaclv3 RPC service (errno 97). [ 211.223092][ T30] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 211.232218][ T5833] em28xx 3-1:0.0: unknown em28xx chip ID (228) [ 211.398629][ T7990] loop5: detected capacity change from 0 to 2048 [ 211.402610][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 211.409713][ T30] usb 1-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 211.429421][ T30] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.429474][ T30] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.429518][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 211.429557][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.435687][ T5833] em28xx 3-1:0.0: Config register raw data: 0xe4 [ 211.435717][ T5833] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 211.435744][ T5833] em28xx 3-1:0.0: No AC97 audio processor [ 211.439757][ T7990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.439916][ T7990] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.461382][ T7990] EXT4-fs (loop5): shut down requested (2) [ 211.476887][ T30] usb 1-1: config 0 descriptor?? [ 211.553624][ T5641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.658722][ T7946] usb 4-1: USB disconnect, device number 8 [ 211.871506][ T7997] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 212.019255][ T30] hid_parser_main: 447 callbacks suppressed [ 212.019289][ T30] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 212.019327][ T30] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 212.019362][ T30] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 212.019396][ T30] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 212.019431][ T30] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 212.077366][ T7995] loop3: detected capacity change from 0 to 32768 [ 212.094532][ T30] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 212.095503][ T5833] usb 3-1: USB disconnect, device number 5 [ 212.137076][ T31] audit: type=1800 audit(1794092378.602:15): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.737" name="file1" dev="loop3" ino=4 res=0 errno=-22 [ 212.341807][ T30] usb 1-1: USB disconnect, device number 8 [ 212.548974][ T7995] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 212.548974][ T7995] [ 212.551197][ T7995] ERROR: (device loop3): remounting filesystem as read-only [ 212.766504][ T8010] netlink: 'syz.5.743': attribute type 14 has an invalid length. [ 212.766542][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.743'. [ 212.797991][ T5637] ------------[ cut here ]------------ [ 212.798008][ T5637] kernel BUG at fs/jfs/inode.c:175! [ 212.800292][ T5637] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 212.817373][ T5637] CPU: 1 UID: 0 PID: 5637 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 212.826854][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 212.836918][ T5637] RIP: 0010:jfs_evict_inode+0x3d3/0x4a0 [ 212.842487][ T5637] Code: 24 80 00 74 0d e8 fd 16 4c fe 48 89 df e8 f5 92 02 00 e8 f0 16 4c fe 48 89 df e8 78 eb 04 ff e9 fc fc ff ff e8 de 16 4c fe 90 <0f> 0b 48 c7 c7 00 3e 68 90 e8 ff 89 c5 fe e9 5c fc ff ff e8 f5 89 [ 212.862111][ T5637] RSP: 0018:ffffc900035b7b20 EFLAGS: 00010293 [ 212.868185][ T5637] RAX: 0000000000000000 RBX: ffff888068cdb928 RCX: 0000000000000000 [ 212.876161][ T5637] RDX: ffff88807ef0be80 RSI: ffffffff83c24462 RDI: ffff888068cdb918 [ 212.884136][ T5637] RBP: ffff888068cdb5c8 R08: 0000000000000000 R09: 0000000000000000 [ 212.892109][ T5637] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888068cdb9a8 [ 212.900079][ T5637] R13: ffffffff83c24090 R14: 0000000000000000 R15: 0000000000000001 [ 212.908052][ T5637] FS: 000055558ee6c500(0000) GS:ffff888122572000(0000) knlGS:0000000000000000 [ 212.916990][ T5637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.923579][ T5637] CR2: 00007f01277556c8 CR3: 0000000058423000 CR4: 0000000000350ef0 [ 212.931552][ T5637] Call Trace: [ 212.934821][ T5637] [ 212.937747][ T5637] ? __pfx_jfs_evict_inode+0x10/0x10 [ 212.943047][ T5637] evict+0x3c2/0xad0 [ 212.946955][ T5637] ? list_lru_del+0xba/0x2f0 [ 212.951566][ T5637] ? list_lru_del+0xba/0x2f0 [ 212.956181][ T5637] ? __pfx_evict+0x10/0x10 [ 212.960617][ T5637] ? __pfx___might_resched+0x10/0x10 [ 212.965910][ T5637] ? find_held_lock+0x2b/0x80 [ 212.970592][ T5637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.976236][ T5637] ? find_held_lock+0x2b/0x80 [ 212.980920][ T5637] dispose_list+0x117/0x1e0 [ 212.985442][ T5637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.991097][ T5637] evict_inodes+0x473/0x700 [ 212.995618][ T5637] ? __pfx_evict_inodes+0x10/0x10 [ 213.000656][ T5637] ? __pfx___call_rcu_common.constprop.0+0x10/0x10 [ 213.007190][ T5637] generic_shutdown_super+0xce/0x370 [ 213.012493][ T5637] kill_block_super+0x43/0x130 [ 213.017295][ T5637] deactivate_locked_super+0xbd/0x130 [ 213.022691][ T5637] deactivate_super+0xea/0x110 [ 213.027521][ T5637] cleanup_mnt+0xb7/0x160 [ 213.031871][ T5637] task_work_run+0x150/0x240 [ 213.036471][ T5637] ? __pfx_task_work_run+0x10/0x10 [ 213.041597][ T5637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 213.047247][ T5637] exit_to_user_mode_loop+0x1d8/0x700 [ 213.052644][ T5637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 213.058291][ T5637] ? rcu_is_watching+0x13/0xc0 [ 213.063062][ T5637] do_syscall_64+0x661/0x790 [ 213.067679][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.073582][ T5637] RIP: 0033:0x7f5a0b9a0d57 [ 213.077994][ T5637] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 213.097637][ T5637] RSP: 002b:00007ffc138857f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 213.106058][ T5637] RAX: 0000000000000000 RBX: 00007f5a0ba36fb3 RCX: 00007f5a0b9a0d57 [ 213.114033][ T5637] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc138858b0 [ 213.122007][ T5637] RBP: 00007ffc138858b0 R08: 00007ffc138868b0 R09: 00000000ffffffff [ 213.129980][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc13886940 [ 213.137951][ T5637] R13: 00007f5a0ba36fb3 R14: 0000000000033ef0 R15: 00007ffc13886980 [ 213.145938][ T5637] [ 213.148949][ T5637] Modules linked in: [ 213.153986][ T5637] ---[ end trace 0000000000000000 ]--- [ 213.172432][ T8010] netlink: 'syz.5.743': attribute type 14 has an invalid length. [ 213.172457][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.743' ** replaying previous printk message ** [ 213.172457][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.743'. [ 213.188924][ T990] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.188970][ T990] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.189010][ T990] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.189052][ T990] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.196394][ T5637] RIP: 0010:jfs_evict_inode+0x3d3/0x4a0 [ 213.196447][ T5637] Code: 24 80 00 74 0d e8 fd 16 4c fe 48 89 df e8 f5 92 02 00 e8 f0 16 4c fe 48 89 df e8 78 eb 04 ff e9 fc fc ff ff e8 de 16 4c fe 90 <0f> 0b 48 c7 c7 00 3e 68 90 e8 ff 89 c5 fe e9 5c fc ff ff e8 f5 89 [ 213.196503][ T5637] RSP: 0018:ffffc900035b7b20 EFLAGS: 00010293 [ 213.196533][ T5637] RAX: 0000000000000000 RBX: ffff888068cdb928 RCX: 0000000000000000 [ 213.196557][ T5637] RDX: ffff88807ef0be80 RSI: ffffffff83c24462 RDI: ffff888068cdb918 [ 213.196581][ T5637] RBP: ffff888068cdb5c8 R08: 0000000000000000 R09: 0000000000000000 [ 213.196604][ T5637] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888068cdb9a8 [ 213.196627][ T5637] R13: ffffffff83c24090 R14: 0000000000000000 R15: 0000000000000001 [ 213.196652][ T5637] FS: 000055558ee6c500(0000) GS:ffff888122472000(0000) knlGS:0000000000000000 [ 213.196685][ T5637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.196710][ T5637] CR2: 00007fe58b3f5158 CR3: 0000000058423000 CR4: 0000000000350ef0 [ 213.196737][ T5637] Kernel panic - not syncing: Fatal exception [ 213.343007][ T5637] Kernel Offset: disabled [ 213.347357][ T5637] Rebooting in 86400 seconds..