last executing test programs: 1m43.304364859s ago: executing program 4 (id=74): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) ioctl$TIOCEXCL(r0, 0x540c) 1m43.198867109s ago: executing program 4 (id=78): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000140)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280), 0x4) sendto$inet(r0, &(0x7f00000002c0), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000300)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() socket$inet_sctp(0x2, 0x1, 0x84) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 1m42.254605435s ago: executing program 4 (id=91): fallocate(0xffffffffffffffff, 0x0, 0x4, 0x88ffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(0x0, 0xb) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x17) shmctl$SHM_UNLOCK(0x0, 0xc) 1m41.984405412s ago: executing program 4 (id=96): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000003c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x2, 0x3, &(0x7f0000002f40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000002f80)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002fc0)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000003000)='./file2\x00', &(0x7f0000003040)=[0x2], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) 1m41.750668266s ago: executing program 4 (id=100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xffffffffffffff58, 0x20008005, &(0x7f0000000280)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x3, 0x0, 0x0) r1 = creat(0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x0) 1m40.879089175s ago: executing program 4 (id=107): io_uring_setup(0x72d5, &(0x7f0000000080)={0x0, 0x0, 0x4000, 0x480000}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m40.743264078s ago: executing program 32 (id=107): io_uring_setup(0x72d5, &(0x7f0000000080)={0x0, 0x0, 0x4000, 0x480000}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m35.560456164s ago: executing program 1 (id=140): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfe, 0x499, &(0x7f0000000480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsync(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 1m34.927945888s ago: executing program 1 (id=143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000780)='7', 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'], 0x20) 1m34.02099651s ago: executing program 1 (id=145): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x540, 0x330, 0xffffff80, 0x178, 0x330, 0x178, 0x470, 0x22b, 0x258, 0x540, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {0x34}, {0x0, 0x0, 0xfd}, {0xa8}, {}, {}, {0x20, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x9}, {}, {0xfffd}, {0xffff}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x8, 0x3}, {}, {}, {}, {0x2}, {0x3, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x3}, {0x200}, {0x0, 0xa}, {}, {}, {0x1}, {}, {}, {0x0, 0x8a}, {}, {}, {0xffff, 0x0, 0xfc}]}}, @common=@unspec=@cluster={{0x30}, {0x8a, 0x4, 0x401}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x10000000]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 1m33.816460251s ago: executing program 1 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) mkdir(&(0x7f0000002bc0)='./file0\x00', 0x18b) mount$bind(&(0x7f0000002c80)='.\x00', &(0x7f0000002cc0)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) mount$bpf(0x0, &(0x7f0000002d00)='./file0\x00', 0x0, 0x84000, 0x0) 1m33.808587972s ago: executing program 1 (id=148): r0 = syz_io_uring_setup(0x26bc, &(0x7f00000005c0)={0x0, 0x4161, 0x110100, 0x3, 0x149}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x18) 1m33.012397783s ago: executing program 1 (id=153): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/8, 0x8}], 0x1}, 0x95}], 0x1, 0x40000043, 0x0) 1m32.84379167s ago: executing program 33 (id=153): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/8, 0x8}], 0x1}, 0x95}], 0x1, 0x40000043, 0x0) 1m27.196366743s ago: executing program 3 (id=204): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x101081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000340)={0x3, 0xfffffffa, 0x5, 0x8c, 0x14, "12ed66ed71d1a3882163fe9d92f484cf99d62b"}) 1m26.880462905s ago: executing program 3 (id=210): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000600), 0x4) 1m26.809661912s ago: executing program 3 (id=212): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2d, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0, 0x6c, r1}, 0x38) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 1m26.604369033s ago: executing program 3 (id=216): mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1095000, 0x0) 1m26.456334968s ago: executing program 3 (id=220): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000480)='e\xf4E\x88-\x00', 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000640)="db", 0x1}], 0x1, 0x4000001, 0x25fef9e5) sendfile(r0, r1, 0x0, 0x8000fb00) 1m25.148454431s ago: executing program 3 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xb, [0x0, 0x9, 0xc, 0x9, 0x7, 0x4, 0x10, 0xc, 0x6, 0x7, 0xb, 0xa, 0x10, 0xc, 0xa, 0x6], 0x0, [0x2, 0x5, 0x2, 0x7ff, 0x3, 0xc0, 0x3, 0x9953, 0x6, 0x8000, 0xff, 0x2, 0x3, 0x81, 0x4, 0x8576], [0xb, 0x9, 0xa, 0x9, 0xcf8, 0x7f, 0x5, 0x3ff, 0x9, 0x4, 0xff82, 0x2, 0x1, 0x5, 0x6, 0x8000]}}}}]}, 0x88}}, 0x0) 1m25.025742263s ago: executing program 34 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xb, [0x0, 0x9, 0xc, 0x9, 0x7, 0x4, 0x10, 0xc, 0x6, 0x7, 0xb, 0xa, 0x10, 0xc, 0xa, 0x6], 0x0, [0x2, 0x5, 0x2, 0x7ff, 0x3, 0xc0, 0x3, 0x9953, 0x6, 0x8000, 0xff, 0x2, 0x3, 0x81, 0x4, 0x8576], [0xb, 0x9, 0xa, 0x9, 0xcf8, 0x7f, 0x5, 0x3ff, 0x9, 0x4, 0xff82, 0x2, 0x1, 0x5, 0x6, 0x8000]}}}}]}, 0x88}}, 0x0) 1m9.164643333s ago: executing program 2 (id=329): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000240)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file1\x00', 0x143442, 0x0) pwritev2(r0, &(0x7f0000001000)=[{&(0x7f0000001040)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) 1m8.768425783s ago: executing program 2 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1003}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}}, 0x880) 1m8.293476941s ago: executing program 2 (id=332): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000200)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "13d021", 0x10, 0x21, 0xff, @private2, @dev={0xfe, 0x80, '\x00', 0x1c}, {[], {{0x4e23, 0x4e20, 0x4, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, "ae8811", 0xda, "ce64d1"}}}}}}}, 0x0) 1m8.153288785s ago: executing program 2 (id=333): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x210000, &(0x7f0000000100)={[{@nobh}, {@user_xattr}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@nomblk_io_submit}]}, 0xfc, 0x56f, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x181042, 0x65) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000900)='27', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0xec142, 0x38) pipe2$9p(0x0, 0xd418285826f8bc85) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000a80)='./proc/thread-self/fail-nth\x00', 0x80, 0xa1) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000080)={0x9, 0x4}) sendfile(r1, r1, 0x0, 0xe3aa6ea) 1m7.184648754s ago: executing program 2 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000d40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f0000000ec0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1m3.356456802s ago: executing program 2 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r0, &(0x7f0000000280)='27', 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 1m3.146991793s ago: executing program 35 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r0, &(0x7f0000000280)='27', 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 49.608475897s ago: executing program 7 (id=466): unshare(0x22020400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000b00), 0x4a000, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000b40)) 49.498968398s ago: executing program 7 (id=468): syz_mount_image$ext4(&(0x7f0000002880)='ext4\x00', &(0x7f00000028c0)='./file1\x00', 0x21081e, &(0x7f0000002900)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0xff, 0x4fa, &(0x7f0000002940)="$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") setreuid(0xffffffffffffffff, 0xee01) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x40880, 0x20) 49.252294403s ago: executing program 7 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000000040a011100000000000000000a"], 0x2c}, 0x1, 0x0, 0x0, 0x4008820}, 0x40) 48.901581708s ago: executing program 7 (id=477): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x402, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000c80)={'syzkaller0\x00', @multicast}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000cc0)={0x1, 0x1, [@broadcast]}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000d00)={'syzkaller0\x00', @random="2b0100004ec6"}) 48.510354758s ago: executing program 7 (id=480): arch_prctl$ARCH_GET_CPUID(0x1011) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x242, 0xc0) write$P9_RREADLINK(r0, &(0x7f00000002c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000300)='./file1\x00') acct(0x0) acct(0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 47.037765847s ago: executing program 7 (id=488): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000100000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c00098008000140", @ANYRES8=r0], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 31.83853714s ago: executing program 36 (id=488): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000100000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c00098008000140", @ANYRES8=r0], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 2.95729307s ago: executing program 0 (id=865): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_clone3(&(0x7f0000000f80)={0x188801400, &(0x7f0000001000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_read_part_table(0x409d, &(0x7f0000001040)="$eJzsz79NK0EQB+Df/bF91vnJrwSgAkJHdOGAZsASnRC6AGIqoACaICU7tCcbfBIhCIS+L5ibnZm91YQf9XRMulTTTvfZeJPk5XFM+xLOznN3OwzD6cxucntYJ3VWSS7v62SZdXvo9Ml2/5W7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv9eshKqE+XheHOr/x6zUmja7Ummqk2vHsZurbFZJt0ieN+/dJm3+pUlSz8ffd6XaTR6ut/tvXQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+COWk1P1kV70D9flO0uq12H0xv4cozAIBGEY/TcksCF3CNh4DCvvpeBNvKWdsFqIvd171TDDV0zbH2NJ5mStWYZ/+dSk6zP+cgZ3LX6/put1+z72EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7O3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMAAAD//+zPJQI=") syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16, @ANYRES8, @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYRESDEC, @ANYRES32, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f00000000c0)="$eJzs3V1v094dwPGfSzuiTOqmMSFUFTiUTSpSCU4CQRFXnnOSHkjsyHZQe4UqmqKKFCbKpLU30Bu2SduLYJd7EXtH6P8S+MsP6WMegD5SfT9VOY59fM7PbuQfp42PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOXWbLtoSdN4nSU1nFsL/Nbey2zvIyvk3oFiRL8iVvwtuZzcSFfd+OPe5uuWyMfdV7OSi4ucbP/2+u+fXJuc6O8/IuDv8t8fbGlza/v1Sq/XfXdSgVxAN68O39bQngl903IaWpnQV9VKxX6wWA9V3TR1uBxGuqXcQDuRH6h5954qVqtlpQvLfsdr1Jym7q98fL9k2xX1tNDWThD63oOnhdBdNM2m8RpJnXhzXOdx/EZ8ZiIVaael1Np6r1sedwBxpeK3VCqNq1SyS6VisVQqVh5VHz227ckjK+xD5EiNk3vT4ud0Ytdu4LgmsvwvTTHiSUeWRA38cqUmgfjSGrI908//f36gR/a7P//Ppqtmb+xtnon/mZNb6atbw/L/kFhO+GuyH9XRbZuyJdvyWlakJz3pyruziejCfDVEiydGQvHFSEucZI3K1iipSkUqYssLWZT6VHwO62KkKVpCWZZQItHJO8qVQLQ4EokvgSiZF1fuiZKiVKUqZVGipSDL4ktHPGlITZyklTVZT857WZQ1LMbdSsWhh5Hv/4S7UhpxtOR/HN8JXbmB4/vaz/8AAAAAAODSspLfvk8l3zeT13XT1PZ5hwUAAAAAAE5Q8pf/2bhIPp11UyzG/wAAAAAAXDZWco+dJSJ5uZ0urYmV3C7FLwEAAAAAALgkkr//34qLZA6U22LtTpfC+B8AAAAAgEvin7uz7w6bYzdsX7X+/4sEwZS10176k7WRzM3rbFxJ97tyuMWoPmNNZ40kRSUtJiddPWvl0kq7k2B+yYq1cXFYewE4uwF8/J4Ark3Kv+VOWufOalquZlt+l/aSr5umLrh+80lRHGd6ItJL0d/erP9dksP/l9eatnKy3usWXr7trSax7MSt7GxkEygemUdxRCzvk/kWknsuBh7xVHIjRtZv3pK19V7Xbi9dzVp2NibShYmDPX6YHtHnJ5lLa81lM97m+1vSPnNxn8XCsKPPoige88g/yd20zt35u2kxIIrSuChK+6MYfC6OH0V5XBTlY0YBAOdlbUwWsuRI3v2Bq9yh7B5f9r4hu8t3ZvdPMp/WmZ9JLqyTMwOu6Pa4K7p9zOz2vyPPQBqWY+N+/3Moq36Od/g8tN+wWbLiU3jl/cZf5frm1vb99Y2VV91X3TelUrliP7TtRyWZSg4jK8g9AIAB9j9jxxqY/0c9hefr1zh3P8xG1TuHR9VZxvvD7kcKCvJS3kpPVmUhudsg+cTBwP935Pd9DGFhzKg1n6TJ9AkvCyNGdb9J7nLot1saWfdgDOWz+FEAAHBm5sbk4dH5Px27L4wZdx/M5aNHx/l9T2sDAACnQwdfrHz0DysITPtFsVotOtGiVkFOnqnA1BpaGS/SgbvoeA2t2oEf+a7fjBeem5oOVdhpt/0gUnU/UG0/NEvJ9IEqe/R7qFuOFxk3bDe1E2rl+l7kuJGqmdBV7c5fmiZc1EGyc9jWrqkb14mM76nQ7wSuLigVar2voqlpLzJ1Ey96qh2YlhPk1HO/2WlpVdOhG5h25KcN9vsyXt0PWkmzhfM+2QAAXBCbW9uvV3q97rtTXBjYce7MDxUAAGTGZGkAAAAAAAAAAAAAAAAAAAAAAHABnMX9fyxc8oX+VNA/3k5OTi9CS877/PyUC2MvHR9O/eIE4FT9GgAA//9t+k3W") r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./mnt\x00', 0x2000c10, &(0x7f00000006c0), 0xff, 0x23f, &(0x7f0000000a40)="$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") sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c0002800800", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) 2.908463225s ago: executing program 5 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x180480d2) 2.546384552s ago: executing program 5 (id=870): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x1007, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x40) r2 = dup3(r1, r0, 0x80000) poll(&(0x7f0000000100)=[{r2, 0x80}], 0x1, 0x100) 2.373798419s ago: executing program 9 (id=872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a50000000060a010400000000000000000a0000110900010073797a31000000002400048020000180070001006374000014000280080002400000001108000440000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0xc081}, 0x24000000) 2.231334504s ago: executing program 5 (id=874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc1842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x39, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000a40), 0x56) sendmsg$kcm(r4, &(0x7f0000000a80)={&(0x7f0000000ac0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.229443904s ago: executing program 9 (id=875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x402, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000c80)={'syzkaller0\x00', @multicast}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000cc0)={0x1, 0x1, [@broadcast]}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000d00)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.021901374s ago: executing program 5 (id=876): unshare(0x2c020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004070000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd255985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8c7049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290c7536fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070de8dd60fd65dacb9ec5003fb1cca05ce1c9f924cc2ec45e8d5adf7c89e3b0b8da35c1aa7fbbee6f839a8f05294a6c02281afb7601252611583408f1"], &(0x7f0000001bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001c00), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000001c40)=r1, 0x4) 1.851387022s ago: executing program 9 (id=878): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000020) pwritev(r0, &(0x7f0000000940)=[{&(0x7f0000000340)='\x00!', 0x2}, {&(0x7f00000004c0)='X', 0x1}], 0x2, 0x739, 0xade) 1.76826786s ago: executing program 5 (id=879): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x25ab, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = dup2(r0, r0) read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x2020) r4 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000500)='\xbf\xd1\x91TE0\xe6H\x83n\xff8\x99\xd3\xf4\x9e\xe3\x8f', &(0x7f0000000580)='@00000000-0000-0000-0\x01\x80\xff\xff000000.00000.ceph=/\x00', 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x0, 0x488) r5 = openat$userio(0xffffffffffffff9c, &(0x7f00000002c0), 0x22242, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000004) write$USERIO_CMD_REGISTER(r5, &(0x7f0000000480), 0x2) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.627207105s ago: executing program 6 (id=880): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000001580)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001600)='`', 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000016c0)={0x0, 0x10, &(0x7f0000001700)=[@in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000001740)=0x10) shutdown(r0, 0x1) 1.47918243s ago: executing program 0 (id=881): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b00010062726964676500004800028005001900"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.308478107s ago: executing program 6 (id=882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 1.220233556s ago: executing program 8 (id=884): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x3) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000540)='\f', 0x1}], 0x1) 1.142294354s ago: executing program 8 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b80)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x20048040) 1.060047112s ago: executing program 8 (id=886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc1842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x39, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000a40), 0x56) sendmsg$kcm(r4, &(0x7f0000000a80)={&(0x7f0000000ac0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 646.685444ms ago: executing program 9 (id=887): mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 555.818793ms ago: executing program 0 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0xc8, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2a09f, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_PORT_SELF={0x94, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8e, 0x2, '\"\xf6^\x98\x192\xbd]\x8b\x03U\x06>:\xdfUt\x06\xa2z\x9d\xff\xe9w\x11\x9c\x88\xa7q\xbb\xd2\x01\xd4\x05Oa\"\xd0#\xba\xdbk\xdd[\x1d\xd2\xc8\xa3j\xe2\xd0\x96\x9f\x01\xbcd3\xcb\xda\xe2%\xb7L\xf3\x03\x04\xbc\x96\xd5\x04\xf9\xde#\x93\xe8y\xd2Cra\x90\v#\xad\x9f\xaa\xee4\xcf\xc7\rI\xab\xe6q\xae\xc1,T\x93\xcb\x116\xc2\x05\xca\x06\xe5W\x7f\x1f$\x06j\xa1\x1d\x89\t5\x06P\x04\xb1u\r\x01\xa8X\xe2\'\xe3\x97\xb3\xf3\x97\x95\xdc\x03'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8041}, 0x480c0) 497.464579ms ago: executing program 6 (id=889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x83fd, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x5, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0xffffffff, 0xfffffffd, 0x4, 0x8, 0x8, 0x4000002, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x3, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0xfffffffe, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x6, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8a, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0x0, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x5, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0xfffffffd, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0xfffffffe, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x4, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x3, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x2, 0xffffffff, 0x7ff, 0x10, 0x2, 0x7, 0x7, 0x0, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) 497.367989ms ago: executing program 9 (id=890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="010000000000260010000900000000010000000000020800", 0x18}, {&(0x7f0000000300)="00000f0000dba7478481709a41e0a9478b2d592773875532f6fddc40b86c99641599408f8078bcb71fce", 0x2a}], 0x2) 454.792024ms ago: executing program 6 (id=891): r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000180)) 453.389344ms ago: executing program 0 (id=892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2000000, 0x46, 0x0, 0x0, 0x0, 0x3}, 0xe) 427.373956ms ago: executing program 8 (id=893): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) preadv2(r1, &(0x7f0000005ec0)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1, 0xa, 0x8683, 0x0) 320.448517ms ago: executing program 0 (id=894): r0 = io_uring_setup(0x6ed6, &(0x7f0000000bc0)={0x0, 0xbb54, 0x1, 0x400000, 0x103}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000c40)={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x8, 0x3}, 0x1) 320.354387ms ago: executing program 6 (id=895): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2e0}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x1d, &(0x7f00000003c0)=""/29, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) 299.276829ms ago: executing program 8 (id=896): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000001600)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001640)={0x1, &(0x7f0000001680)=[{0x6, 0x20, 0x0, 0x480}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f00000016c0)={0x4d, 0x0}, 0x10) 263.557243ms ago: executing program 6 (id=897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x402, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000c80)={'syzkaller0\x00', @multicast}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000cc0)={0x1, 0x1, [@broadcast]}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000d00)={'syzkaller0\x00', @random="2b0100004ec6"}) 208.225359ms ago: executing program 0 (id=898): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x1238, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x120c, 0x2, [@TCA_BPF_ACT={0x1208, 0x1, [@m_mirred={0xf94, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0xf05, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x144, 0x12, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0x7e, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be248"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xe8, 0xe, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xb1, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8b7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71672db4998037b55d540b4b8921ba36a7e3e54e904ebe868f339d0f6a5ad79a6287cdbb16e3238dc8077ad21fd0fe097a227ba67efad74f0a441dfcd88e59a523aa041d602fab87928dc5ebc4c007fb8856019ad4252708b18bb036e4b855a38630c6aec103073dae680d15fbf65de3031b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x44, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x11, 0x6, "189c16af55244ecf3fff4c1cb7"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x1238}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001fc0)=@newtfilter={0xb6c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb3c, 0x2, [@TCA_BASIC_ACT={0x70, 0x3, [@m_connmark={0x6c, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0x2, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xb0, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x803, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb6c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000002b40), 0x56) sendmsg$kcm(r7, &(0x7f0000002b80)={&(0x7f0000002bc0)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002c80)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 152.687614ms ago: executing program 5 (id=899): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x800010, &(0x7f0000000100), 0xff, 0x507, &(0x7f00000007c0)="$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") r0 = open(&(0x7f0000001140)='.\x00', 0x8000, 0x50) fstat(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000001200)='./file1\x00', r1, r2) 126.858027ms ago: executing program 8 (id=900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001300)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x86}}}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x3, 0xcc6b, 0x8, 0x2, 0x7df, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x9, 0x89b1, 0x7, 0x1, 0x7, 0x537c, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001180)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000011c0)={&(0x7f0000001200)=@xdp={0x2c, 0x7, r8, 0x3c}, 0x80, &(0x7f0000001280)=[{&(0x7f00000012c0)='\'', 0x1}], 0x1}, 0x804) 0s ago: executing program 9 (id=901): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000300)={0x8, 0x951, 0x5}) kernel console output (not intermixed with test programs): 0003e syscall=202 compat=0 ip=0x7f06a63cd559 code=0x7ffc0000 [ 131.207350][ T5701] loop5: p4 size 8388608 extends beyond EOD, truncated [ 131.212130][ T4314] Bluetooth: hci5: command 0x0419 tx timeout [ 131.221208][ T26] audit: type=1326 audit(1792949081.506:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.7.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a63cd559 code=0x7ffc0000 [ 131.247164][ T26] audit: type=1326 audit(1792949081.506:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.7.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f06a63cd559 code=0x7ffc0000 [ 131.297779][ T26] audit: type=1326 audit(1792949081.506:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.7.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a63cd559 code=0x7ffc0000 [ 131.349306][ T3560] loop5: p1 < > p4 [ 131.356886][ T3560] loop5: p4 size 8388608 extends beyond EOD, truncated [ 131.376672][ T5713] tipc: Started in network mode [ 131.381649][ T5713] tipc: Node identity 5e88c020e2a4, cluster identity 4711 [ 131.389692][ T5713] tipc: Enabled bearer , priority 0 [ 131.397731][ T5713] device syzkaller0 entered promiscuous mode [ 131.427254][ T5713] tipc: Resetting bearer [ 131.462339][ T4255] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 131.479717][ T5336] udevd[5336]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 131.479998][ T4255] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 131.503813][ T4776] udevd[4776]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 131.615462][ T4255] peak_usb: probe of 1-1:0.0 failed with error -71 [ 131.629268][ T4255] usb 1-1: USB disconnect, device number 3 [ 131.640897][ T5719] device syzkaller0 entered promiscuous mode [ 131.999309][ T5735] loop5: detected capacity change from 0 to 512 [ 132.056671][ T5735] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 132.089635][ T5735] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.104900][ T5735] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 132.136127][ T5711] tipc: Resetting bearer [ 132.165213][ T5744] loop0: detected capacity change from 0 to 128 [ 132.172942][ T5711] tipc: Disabling bearer [ 132.227036][ T5744] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.349849][ T5750] misc userio: No port type given on /dev/userio [ 132.429968][ T5049] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.556806][ T5761] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.705875][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.712318][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.088343][ T5787] device syzkaller0 entered promiscuous mode [ 133.302521][ T5795] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.552588][ T5806] capability: warning: `syz.7.421' uses 32-bit capabilities (legacy support in use) [ 133.827525][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 133.852509][ T23] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.887973][ T5824] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.987449][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.432'. [ 134.032184][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.432'. [ 134.049024][ T5826] fido_id[5826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.154961][ T5840] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 134.184777][ T5840] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.208044][ T5843] loop5: detected capacity change from 0 to 512 [ 134.316166][ T5843] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 134.330161][ T5846] tipc: Enabled bearer , priority 0 [ 134.333071][ T5843] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.339984][ T5846] device syzkaller0 entered promiscuous mode [ 134.362586][ T5846] tipc: Resetting bearer [ 134.450218][ T5845] tipc: Resetting bearer [ 134.509297][ T5845] tipc: Disabling bearer [ 134.586688][ T5850] loop6: detected capacity change from 0 to 8192 [ 134.662752][ T5850] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.016950][ T5885] loop5: detected capacity change from 0 to 128 [ 135.031192][ T5887] loop0: detected capacity change from 0 to 512 [ 135.083677][ T5888] tipc: Started in network mode [ 135.097178][ T5888] tipc: Node identity 0a395853b0ac, cluster identity 4711 [ 135.134309][ T5888] tipc: Enabled bearer , priority 0 [ 135.149580][ T5887] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 135.166224][ T5885] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.201554][ T5888] device syzkaller0 entered promiscuous mode [ 135.207972][ T5885] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.218729][ T5887] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.317843][ T5888] tipc: Resetting bearer [ 135.363632][ T5886] tipc: Resetting bearer [ 135.415176][ T5886] tipc: Disabling bearer [ 135.528406][ T5906] FAULT_INJECTION: forcing a failure. [ 135.528406][ T5906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.544727][ T5906] CPU: 1 PID: 5906 Comm: syz.5.462 Not tainted syzkaller #0 [ 135.552068][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.562158][ T5906] Call Trace: [ 135.565490][ T5906] [ 135.568475][ T5906] dump_stack_lvl+0x188/0x250 [ 135.573205][ T5906] ? show_regs_print_info+0x20/0x20 [ 135.578449][ T5906] ? load_image+0x410/0x410 [ 135.582998][ T5906] ? __lock_acquire+0x7d40/0x7d40 [ 135.588078][ T5906] should_fail+0x383/0x4b0 [ 135.592548][ T5906] prepare_alloc_pages+0x1e3/0x5b0 [ 135.597724][ T5906] __alloc_pages+0x11b/0x480 [ 135.602357][ T5906] ? zone_statistics+0x170/0x170 [ 135.607351][ T5906] ? count_memcg_event_mm+0x324/0x370 [ 135.612765][ T5906] ? remove_device_exclusive_entry+0xac0/0xac0 [ 135.619004][ T5906] alloc_pages_vma+0x2bc/0x790 [ 135.623849][ T5906] handle_mm_fault+0x23be/0x4440 [ 135.628845][ T5906] ? get_page+0xe0/0xe0 [ 135.633058][ T5906] ? follow_page_mask+0xa51/0x12b0 [ 135.638231][ T5906] __get_user_pages+0x952/0x11e0 [ 135.643232][ T5906] ? populate_vma_page_range+0x290/0x290 [ 135.648933][ T5906] ? read_lock_is_recursive+0x10/0x10 [ 135.654390][ T5906] populate_vma_page_range+0x213/0x290 [ 135.659896][ T5906] __mm_populate+0x275/0x3b0 [ 135.664551][ T5906] ? check_vma_flags+0x470/0x470 [ 135.669534][ T5906] ? up_write+0x1b6/0x410 [ 135.673933][ T5906] do_mlock+0x49c/0x550 [ 135.678144][ T5906] __x64_sys_mlock+0x5c/0x70 [ 135.682774][ T5906] do_syscall_64+0x4c/0xa0 [ 135.687332][ T5906] ? clear_bhb_loop+0x30/0x80 [ 135.692054][ T5906] ? clear_bhb_loop+0x30/0x80 [ 135.696775][ T5906] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.702708][ T5906] RIP: 0033:0x7f856ab24559 [ 135.707156][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.726827][ T5906] RSP: 002b:00007f8568d5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 135.735319][ T5906] RAX: ffffffffffffffda RBX: 00007f856adab090 RCX: 00007f856ab24559 [ 135.743336][ T5906] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 135.751356][ T5906] RBP: 00007f856abbbb20 R08: 0000000000000000 R09: 0000000000000000 [ 135.759379][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.767478][ T5906] R13: 00007f856adab128 R14: 00007f856adab090 R15: 00007ffff06f0d18 [ 135.775515][ T5906] [ 136.191157][ T5922] loop6: detected capacity change from 0 to 128 [ 136.239394][ T5922] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.280553][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 136.280570][ T26] audit: type=1800 audit(1792949086.946:79): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.471" name="file1" dev="loop6" ino=1048684 res=0 errno=0 [ 136.390039][ T5925] loop8: detected capacity change from 0 to 1024 [ 136.408394][ T4260] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.420907][ T5926] netlink: 24 bytes leftover after parsing attributes in process `syz.7.472'. [ 136.524516][ T5925] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 136.579872][ T5925] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 136.633158][ T5925] EXT4-fs (loop8): orphan cleanup on readonly fs [ 136.641362][ T5925] EXT4-fs error (device loop8): ext4_free_blocks:6231: comm syz.8.473: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.685369][ T5931] loop5: detected capacity change from 0 to 1024 [ 136.727563][ T5935] tipc: Enabling of bearer rejected, failed to enable media [ 136.783943][ T5931] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.799711][ T5939] ip_tables: iptables: counters copy to user failed while replacing table [ 136.808546][ T5925] EXT4-fs (loop8): 1 orphan inode deleted [ 136.842463][ T5925] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,grpquota,barrier=0x0000000000000009,quota,jqfmt=vfsv0,nojournal_checksum,data_err=ignore,max_dir_size_kb=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 136.862746][ T4255] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 136.878600][ T5931] FAULT_INJECTION: forcing a failure. [ 136.878600][ T5931] name fail_futex, interval 1, probability 0, space 0, times 0 [ 136.949803][ T5931] CPU: 1 PID: 5931 Comm: syz.5.475 Not tainted syzkaller #0 [ 136.957231][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 136.967344][ T5931] Call Trace: [ 136.970666][ T5931] [ 136.973645][ T5931] dump_stack_lvl+0x188/0x250 [ 136.978517][ T5931] ? show_regs_print_info+0x20/0x20 [ 136.983776][ T5931] ? load_image+0x410/0x410 [ 136.988335][ T5931] ? kmem_cache_free+0x8f/0x210 [ 136.993234][ T5931] should_fail+0x383/0x4b0 [ 136.997798][ T5931] get_futex_key+0x1a1/0x12d0 [ 137.002522][ T5931] ? __lock_acquire+0x13b3/0x7d40 [ 137.007681][ T5931] ? futex_wait_restart+0x250/0x250 [ 137.012964][ T5931] futex_wake+0x101/0x540 [ 137.017349][ T5931] ? futex_wait+0x680/0x680 [ 137.021891][ T5931] ? verify_lock_unused+0x140/0x140 [ 137.027141][ T5931] ? verify_lock_unused+0x140/0x140 [ 137.032380][ T5931] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 137.038416][ T5931] do_futex+0xd83/0x12b0 [ 137.042982][ T5931] ? futex_exit_release+0x1c0/0x1c0 [ 137.048224][ T5931] ? __context_tracking_exit+0x4c/0x80 [ 137.053738][ T5931] __se_sys_futex+0x389/0x420 [ 137.058578][ T5931] ? __x64_sys_futex+0xf0/0xf0 [ 137.063396][ T5931] ? __x64_sys_futex+0x1d/0xf0 [ 137.068239][ T5931] do_syscall_64+0x4c/0xa0 [ 137.072702][ T5931] ? clear_bhb_loop+0x30/0x80 [ 137.077423][ T5931] ? clear_bhb_loop+0x30/0x80 [ 137.082147][ T5931] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.088090][ T5931] RIP: 0033:0x7f856ab24559 [ 137.092548][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.112289][ T5931] RSP: 002b:00007f8568d7b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.112325][ T4255] usb 7-1: Using ep0 maxpacket: 32 [ 137.120832][ T5931] RAX: ffffffffffffffda RBX: 00007f856adaafa8 RCX: 00007f856ab24559 [ 137.120854][ T5931] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f856adaafac [ 137.120869][ T5931] RBP: 00007f856adaafa0 R08: 0031514ed5e6dece R09: 0000000000000000 [ 137.120895][ T5931] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 137.120910][ T5931] R13: 00007f856adab038 R14: 00007ffff06f0c30 R15: 00007ffff06f0d18 [ 137.166226][ T5931] [ 137.196419][ T5925] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 16: comm syz.8.473: path /10/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 137.242962][ T5925] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 17: comm syz.8.473: path /10/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 137.296916][ T5925] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 18: comm syz.8.473: path /10/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 137.350614][ T5925] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 19: comm syz.8.473: path /10/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 137.383162][ T5925] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 20: comm syz.8.473: path /10/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 137.425729][ T5925] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 21: comm syz.8.473: path /10/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 137.462351][ T4255] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 137.476085][ T4627] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /79/bus: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 137.497802][ T4255] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.507282][ T4255] usb 7-1: Product: syz [ 137.512888][ T4255] usb 7-1: Manufacturer: syz [ 137.517860][ T4255] usb 7-1: SerialNumber: syz [ 137.532186][ T5925] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 22: comm syz.8.473: path /10/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 137.558426][ T4255] usb 7-1: config 0 descriptor?? [ 137.564466][ T5925] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 23: comm syz.8.473: path /10/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 137.592399][ T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 137.974989][ T5953] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.002375][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.026488][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.042479][ T4255] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 138.048065][ T23] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 138.060147][ T4255] peak_usb 7-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 138.099665][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.152429][ T23] usb 1-1: config 0 descriptor?? [ 138.163291][ T4255] peak_usb: probe of 7-1:0.0 failed with error -71 [ 138.183819][ T4255] usb 7-1: USB disconnect, device number 3 [ 138.248804][ T5944] Process accounting resumed [ 138.278304][ T5960] FAULT_INJECTION: forcing a failure. [ 138.278304][ T5960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.298788][ T5960] CPU: 0 PID: 5960 Comm: syz.8.485 Not tainted syzkaller #0 [ 138.306142][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.316252][ T5960] Call Trace: [ 138.319572][ T5960] [ 138.322548][ T5960] dump_stack_lvl+0x188/0x250 [ 138.327277][ T5960] ? show_regs_print_info+0x20/0x20 [ 138.332535][ T5960] ? load_image+0x410/0x410 [ 138.337204][ T5960] ? __lock_acquire+0x7d40/0x7d40 [ 138.342304][ T5960] should_fail+0x383/0x4b0 [ 138.346767][ T5960] strncpy_from_user+0x32/0x350 [ 138.351665][ T5960] __se_sys_add_key+0xd8/0x410 [ 138.356475][ T5960] ? __x64_sys_add_key+0xc0/0xc0 [ 138.361482][ T5960] ? lockdep_hardirqs_on+0x94/0x140 [ 138.366722][ T5960] ? __x64_sys_add_key+0x1c/0xc0 [ 138.371713][ T5960] do_syscall_64+0x4c/0xa0 [ 138.376167][ T5960] ? clear_bhb_loop+0x30/0x80 [ 138.380878][ T5960] ? clear_bhb_loop+0x30/0x80 [ 138.385592][ T5960] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.391523][ T5960] RIP: 0033:0x7febe6b59559 [ 138.396062][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.415706][ T5960] RSP: 002b:00007febe4db0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 138.424482][ T5960] RAX: ffffffffffffffda RBX: 00007febe6ddffa0 RCX: 00007febe6b59559 [ 138.432507][ T5960] RDX: 0000200000000c40 RSI: 0000000000000000 RDI: 0000200000000c00 [ 138.440532][ T5960] RBP: 00007febe6bf0b20 R08: ffffffffffffffff R09: 0000000000000000 [ 138.448675][ T5960] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 138.456872][ T5960] R13: 00007febe6de0038 R14: 00007febe6ddffa0 R15: 00007ffcc8c486e8 [ 138.464913][ T5960] [ 138.663123][ T23] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 138.669990][ T23] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 138.690227][ T23] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 138.707843][ T23] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 138.722934][ T23] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 138.736719][ T23] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 138.751869][ T23] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 138.755614][ T5968] tipc: Enabled bearer , priority 0 [ 138.770011][ T23] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 138.798496][ T5968] device syzkaller0 entered promiscuous mode [ 138.840250][ T5968] tipc: Resetting bearer [ 138.862362][ T23] isku 0003:1E7D:319C.0008: couldn't init struct isku_device [ 138.874458][ T23] isku 0003:1E7D:319C.0008: couldn't install keyboard [ 138.891099][ T23] isku: probe of 0003:1E7D:319C.0008 failed with error -5 [ 138.933583][ T5967] tipc: Resetting bearer [ 138.952852][ T5975] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.003859][ T5967] tipc: Disabling bearer [ 139.067140][ T23] usb 1-1: USB disconnect, device number 4 [ 139.190921][ T5977] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.227362][ T26] audit: type=1326 audit(1792949089.896:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.6.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 139.312171][ T26] audit: type=1326 audit(1792949089.926:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.6.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 139.367743][ T5984] loop5: detected capacity change from 0 to 512 [ 139.378128][ T26] audit: type=1326 audit(1792949089.926:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.6.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 139.452121][ T26] audit: type=1326 audit(1792949089.926:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.6.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 139.512093][ T26] audit: type=1326 audit(1792949089.926:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.6.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 139.573319][ T26] audit: type=1326 audit(1792949089.926:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.6.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 139.652016][ T26] audit: type=1326 audit(1792949089.926:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.6.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 139.822767][ T26] audit: type=1326 audit(1792949089.926:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.6.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 139.855404][ T6003] netlink: 'syz.8.505': attribute type 30 has an invalid length. [ 139.877481][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.8.505'. [ 139.892176][ T26] audit: type=1326 audit(1792949089.926:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.6.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 139.933923][ T6003] bond0: option arp_missed_max: invalid value (0) [ 139.961490][ T6003] bond0: option arp_missed_max: allowed values 1 - 255 [ 139.976646][ T6006] tipc: Enabled bearer , priority 0 [ 139.991755][ T6008] FAULT_INJECTION: forcing a failure. [ 139.991755][ T6008] name failslab, interval 1, probability 0, space 0, times 0 [ 140.015390][ T6006] device syzkaller0 entered promiscuous mode [ 140.029900][ T6008] CPU: 1 PID: 6008 Comm: syz.0.508 Not tainted syzkaller #0 [ 140.037252][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 140.048901][ T6008] Call Trace: [ 140.052214][ T6008] [ 140.055204][ T6008] dump_stack_lvl+0x188/0x250 [ 140.060031][ T6008] ? show_regs_print_info+0x20/0x20 [ 140.065273][ T6008] ? load_image+0x410/0x410 [ 140.069823][ T6008] ? __might_sleep+0xf0/0xf0 [ 140.074510][ T6008] ? __lock_acquire+0x7d40/0x7d40 [ 140.079588][ T6008] should_fail+0x383/0x4b0 [ 140.084057][ T6008] should_failslab+0x5/0x20 [ 140.088605][ T6008] slab_pre_alloc_hook+0x51/0xc0 [ 140.093587][ T6008] kmem_cache_alloc_trace+0x47/0x290 [ 140.098913][ T6008] ? __list_lru_init+0x535/0xac0 [ 140.103905][ T6008] __list_lru_init+0x535/0xac0 [ 140.108726][ T6008] alloc_super+0x787/0x970 [ 140.113267][ T6008] ? kernfs_get_tree+0x6b0/0x6b0 [ 140.114606][ T6006] tipc: Resetting bearer [ 140.118251][ T6008] sget_fc+0x2d4/0x6f0 [ 140.128110][ T6008] ? kernfs_test_super+0x100/0x100 [ 140.133274][ T6008] kernfs_get_tree+0x15c/0x6b0 [ 140.138086][ T6008] ? apparmor_capable+0x12c/0x190 [ 140.143158][ T6008] sysfs_get_tree+0x42/0x110 [ 140.147806][ T6008] vfs_get_tree+0x88/0x270 [ 140.152268][ T6008] do_new_mount+0x247/0xa40 [ 140.156912][ T6008] __se_sys_mount+0x2e3/0x3d0 [ 140.161637][ T6008] ? __x64_sys_mount+0xc0/0xc0 [ 140.166446][ T6008] ? lockdep_hardirqs_on+0x94/0x140 [ 140.171682][ T6008] ? __x64_sys_mount+0x1c/0xc0 [ 140.176482][ T6008] do_syscall_64+0x4c/0xa0 [ 140.180950][ T6008] ? clear_bhb_loop+0x30/0x80 [ 140.185665][ T6008] ? clear_bhb_loop+0x30/0x80 [ 140.190760][ T6008] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.196682][ T6008] RIP: 0033:0x7f8da93c7559 [ 140.201124][ T6008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.221258][ T6008] RSP: 002b:00007f8da761e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 140.229720][ T6008] RAX: ffffffffffffffda RBX: 00007f8da964dfa0 RCX: 00007f8da93c7559 [ 140.237736][ T6008] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 140.245746][ T6008] RBP: 00007f8da945eb20 R08: 0000000000000000 R09: 0000000000000000 [ 140.253783][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.261796][ T6008] R13: 00007f8da964e038 R14: 00007f8da964dfa0 R15: 00007ffeb6032e98 [ 140.269829][ T6008] [ 140.333014][ T6012] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.353776][ T6005] tipc: Resetting bearer [ 140.379382][ T6005] tipc: Disabling bearer [ 140.569263][ T6022] misc userio: No port type given on /dev/userio [ 140.763179][ T6037] FAULT_INJECTION: forcing a failure. [ 140.763179][ T6037] name failslab, interval 1, probability 0, space 0, times 0 [ 140.782647][ T6037] CPU: 0 PID: 6037 Comm: syz.5.518 Not tainted syzkaller #0 [ 140.790005][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 140.800185][ T6037] Call Trace: [ 140.803499][ T6037] [ 140.806501][ T6037] dump_stack_lvl+0x188/0x250 [ 140.811232][ T6037] ? show_regs_print_info+0x20/0x20 [ 140.816478][ T6037] ? load_image+0x410/0x410 [ 140.821039][ T6037] ? __might_sleep+0xf0/0xf0 [ 140.825792][ T6037] ? __lock_acquire+0x7d40/0x7d40 [ 140.830877][ T6037] should_fail+0x383/0x4b0 [ 140.835342][ T6037] should_failslab+0x5/0x20 [ 140.839879][ T6037] slab_pre_alloc_hook+0x51/0xc0 [ 140.844854][ T6037] ? copy_mm+0x8b6/0x13d0 [ 140.849227][ T6037] kmem_cache_alloc+0x3d/0x280 [ 140.854030][ T6037] copy_mm+0x8b6/0x13d0 [ 140.858236][ T6037] ? copy_signal+0x610/0x610 [ 140.862874][ T6037] ? __init_rwsem+0x11e/0x160 [ 140.867593][ T6037] ? copy_signal+0x501/0x610 [ 140.872227][ T6037] copy_process+0x17a7/0x3e70 [ 140.876986][ T6037] ? __lock_acquire+0x7d40/0x7d40 [ 140.882062][ T6037] ? __pidfd_prepare+0x140/0x140 [ 140.887055][ T6037] kernel_clone+0x23f/0x990 [ 140.891598][ T6037] ? create_io_thread+0x180/0x180 [ 140.896697][ T6037] __se_sys_clone3+0x312/0x3d0 [ 140.901675][ T6037] ? __x64_sys_clone3+0x60/0x60 [ 140.906580][ T6037] ? __lock_acquire+0x7d40/0x7d40 [ 140.911668][ T6037] ? lockdep_hardirqs_on+0x94/0x140 [ 140.916908][ T6037] do_syscall_64+0x4c/0xa0 [ 140.921356][ T6037] ? clear_bhb_loop+0x30/0x80 [ 140.926065][ T6037] ? clear_bhb_loop+0x30/0x80 [ 140.930777][ T6037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.936707][ T6037] RIP: 0033:0x7f856ab24559 [ 140.941188][ T6037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.960865][ T6037] RSP: 002b:00007f8568d7aef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 140.969516][ T6037] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f856ab24559 [ 140.977527][ T6037] RDX: 00007f8568d7af10 RSI: 0000000000000058 RDI: 00007f8568d7af10 [ 140.985540][ T6037] RBP: 00007f856abbbb20 R08: 0000000000000000 R09: 0000000000000058 [ 140.993550][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.001605][ T6037] R13: 00007f856adab038 R14: 00007f856adaafa0 R15: 00007ffff06f0d18 [ 141.009659][ T6037] [ 141.200264][ T6043] loop5: detected capacity change from 0 to 1024 [ 141.256252][ T6043] EXT4-fs (loop5): Ignoring removed bh option [ 141.295349][ T6043] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,jqfmt=vfsv1,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 141.313242][ T6043] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.333320][ T6043] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 3: comm syz.5.520: lblock 3 mapped to illegal pblock 3 (length 3) [ 141.355794][ T6043] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 141.369902][ T6043] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.369902][ T6043] [ 141.382093][ T6043] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm syz.5.520: lblock 0 mapped to illegal pblock 0 (length 1) [ 141.395929][ T6043] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 141.408720][ T6043] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.408720][ T6043] [ 141.444719][ T4260] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 141.502813][ T6051] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.522086][ T4260] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 141.545069][ T4260] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.545069][ T4260] [ 141.794394][ T6060] tipc: Enabled bearer , priority 0 [ 141.822486][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.522'. [ 141.896614][ T6060] device syzkaller0 entered promiscuous mode [ 141.942758][ T6064] tipc: Resetting bearer [ 141.966145][ T6058] tipc: Resetting bearer [ 142.006652][ T6058] tipc: Disabling bearer [ 142.094360][ T6068] loop0: detected capacity change from 0 to 1024 [ 142.450347][ T6068] __quota_error: 9 callbacks suppressed [ 142.450391][ T6068] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 142.466214][ T6068] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 142.475880][ T6068] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.527: Failed to acquire dquot type 0 [ 142.521275][ T6068] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 142.546689][ T6068] EXT4-fs (loop0): 1 truncate cleaned up [ 142.552602][ T6068] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.104474][ T6073] tipc: Enabled bearer , priority 0 [ 143.154592][ T6079] device syzkaller0 entered promiscuous mode [ 143.230900][ T6073] tipc: Resetting bearer [ 143.250977][ T6072] tipc: Resetting bearer [ 143.303453][ T6072] tipc: Disabling bearer [ 143.419913][ T6086] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.489332][ T6090] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.645840][ T6100] tipc: Enabled bearer , priority 0 [ 143.682627][ T6100] device syzkaller0 entered promiscuous mode [ 143.712778][ T6100] tipc: Resetting bearer [ 143.738651][ T6099] tipc: Resetting bearer [ 143.776614][ T6099] tipc: Disabling bearer [ 143.862188][ T4257] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.942336][ T6106] device syzkaller0 entered promiscuous mode [ 144.102110][ T4257] usb 1-1: Using ep0 maxpacket: 32 [ 144.392539][ T6123] FAULT_INJECTION: forcing a failure. [ 144.392539][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 144.428883][ T6123] CPU: 0 PID: 6123 Comm: syz.6.550 Not tainted syzkaller #0 [ 144.436637][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 144.446726][ T6123] Call Trace: [ 144.450037][ T6123] [ 144.453001][ T6123] dump_stack_lvl+0x188/0x250 [ 144.457725][ T6123] ? show_regs_print_info+0x20/0x20 [ 144.462957][ T6123] ? load_image+0x410/0x410 [ 144.467541][ T6123] ? __might_sleep+0xf0/0xf0 [ 144.472160][ T6123] ? __lock_acquire+0x7d40/0x7d40 [ 144.477227][ T6123] should_fail+0x383/0x4b0 [ 144.481693][ T6123] should_failslab+0x5/0x20 [ 144.484262][ T4257] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 144.486260][ T6123] slab_pre_alloc_hook+0x51/0xc0 [ 144.500244][ T6123] kmem_cache_alloc_node+0x47/0x2c0 [ 144.505483][ T6123] ? alloc_vmap_area+0x199/0x1b30 [ 144.510551][ T6123] ? __x64_sys_openat+0x135/0x160 [ 144.511070][ T6125] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.515606][ T6123] alloc_vmap_area+0x199/0x1b30 [ 144.515656][ T6123] ? vm_map_ram+0xba0/0xba0 [ 144.523850][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.528168][ T6123] __get_vm_area_node+0x14f/0x2d0 [ 144.545779][ T6123] __vmalloc_node_range+0xef/0x8b0 [ 144.550934][ T6123] ? n_tty_open+0x19/0x150 [ 144.555388][ T6123] ? read_lock_is_recursive+0x10/0x10 [ 144.560802][ T6123] ? remove_wait_queue+0x120/0x120 [ 144.565961][ T6123] ? n_tty_open+0x19/0x150 [ 144.570335][ T4257] usb 1-1: Product: syz [ 144.570552][ T6123] vzalloc+0x75/0x80 [ 144.578634][ T6123] ? n_tty_open+0x19/0x150 [ 144.580676][ T4257] usb 1-1: Manufacturer: syz [ 144.583087][ T6123] n_tty_open+0x19/0x150 [ 144.583117][ T6123] tty_ldisc_setup+0xbf/0x250 [ 144.583143][ T6123] tty_init_dev+0x239/0x470 [ 144.583170][ T6123] ptmx_open+0xe1/0x2c0 [ 144.583191][ T6123] ? pty_start+0x140/0x140 [ 144.583217][ T6123] chrdev_open+0x585/0x5f0 [ 144.583246][ T6123] ? cd_forget+0x160/0x160 [ 144.583274][ T6123] ? fsnotify_perm+0x3a7/0x560 [ 144.583297][ T6123] ? cd_forget+0x160/0x160 [ 144.583321][ T6123] do_dentry_open+0x7f7/0xf90 [ 144.583345][ T6123] ? vfs_open+0x2b/0x80 [ 144.583373][ T6123] path_openat+0x2718/0x2fb0 [ 144.583423][ T6123] ? __kasan_slab_alloc+0xa9/0xc0 [ 144.583455][ T6123] ? do_filp_open+0x400/0x400 [ 144.583498][ T6123] do_filp_open+0x1df/0x400 [ 144.608561][ T4257] usb 1-1: SerialNumber: syz [ 144.610647][ T6123] ? vfs_tmpfile+0x300/0x300 [ 144.641333][ T4257] usb 1-1: config 0 descriptor?? [ 144.642255][ T6123] ? _raw_spin_unlock+0x24/0x40 [ 144.675775][ T6123] ? alloc_fd+0x59e/0x650 [ 144.680154][ T6123] do_sys_openat2+0x14b/0x500 [ 144.684863][ T6123] ? __lock_acquire+0x7d40/0x7d40 [ 144.689944][ T6123] ? do_sys_open+0xe0/0xe0 [ 144.694394][ T6123] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 144.700416][ T6123] ? lock_chain_count+0x20/0x20 [ 144.705314][ T6123] __x64_sys_openat+0x135/0x160 [ 144.710207][ T6123] do_syscall_64+0x4c/0xa0 [ 144.714655][ T6123] ? clear_bhb_loop+0x30/0x80 [ 144.719374][ T6123] ? clear_bhb_loop+0x30/0x80 [ 144.724089][ T6123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.730018][ T6123] RIP: 0033:0x7f20e282b559 [ 144.734470][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.754135][ T6123] RSP: 002b:00007f20e0a82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 144.762591][ T6123] RAX: ffffffffffffffda RBX: 00007f20e2ab1fa0 RCX: 00007f20e282b559 [ 144.770603][ T6123] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 144.778611][ T6123] RBP: 00007f20e28c2b20 R08: 0000000000000000 R09: 0000000000000000 [ 144.786619][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.794835][ T6123] R13: 00007f20e2ab2038 R14: 00007f20e2ab1fa0 R15: 00007fff8c66b828 [ 144.802954][ T6123] [ 144.892481][ T6123] syz.6.550: vmalloc error: size 9120, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 144.919357][ T6123] CPU: 1 PID: 6123 Comm: syz.6.550 Not tainted syzkaller #0 [ 144.926814][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 144.937264][ T6123] Call Trace: [ 144.940580][ T6123] [ 144.943538][ T6123] dump_stack_lvl+0x188/0x250 [ 144.948260][ T6123] ? rcu_lock_release+0x5/0x20 [ 144.953055][ T6123] ? show_regs_print_info+0x20/0x20 [ 144.958303][ T6123] ? load_image+0x410/0x410 [ 144.962894][ T6123] warn_alloc+0x245/0x320 [ 144.967268][ T6123] ? zone_watermark_ok_safe+0x250/0x250 [ 144.973263][ T6123] ? __get_vm_area_node+0x164/0x2d0 [ 144.978500][ T6123] ? kfree+0xef/0x2a0 [ 144.982524][ T6123] __vmalloc_node_range+0x2b1/0x8b0 [ 144.988162][ T6123] ? read_lock_is_recursive+0x10/0x10 [ 144.993571][ T6123] ? remove_wait_queue+0x120/0x120 [ 144.998720][ T6123] ? n_tty_open+0x19/0x150 [ 145.003575][ T6123] vzalloc+0x75/0x80 [ 145.007506][ T6123] ? n_tty_open+0x19/0x150 [ 145.011960][ T6123] n_tty_open+0x19/0x150 [ 145.016240][ T6123] tty_ldisc_setup+0xbf/0x250 [ 145.021343][ T6123] tty_init_dev+0x239/0x470 [ 145.025905][ T6123] ptmx_open+0xe1/0x2c0 [ 145.030092][ T6123] ? pty_start+0x140/0x140 [ 145.034545][ T6123] chrdev_open+0x585/0x5f0 [ 145.039009][ T6123] ? cd_forget+0x160/0x160 [ 145.043493][ T6123] ? fsnotify_perm+0x3a7/0x560 [ 145.048290][ T6123] ? cd_forget+0x160/0x160 [ 145.052737][ T6123] do_dentry_open+0x7f7/0xf90 [ 145.057841][ T6123] ? vfs_open+0x2b/0x80 [ 145.062165][ T6123] path_openat+0x2718/0x2fb0 [ 145.066832][ T6123] ? __kasan_slab_alloc+0xa9/0xc0 [ 145.071911][ T6123] ? do_filp_open+0x400/0x400 [ 145.076684][ T6123] do_filp_open+0x1df/0x400 [ 145.081250][ T6123] ? vfs_tmpfile+0x300/0x300 [ 145.086240][ T6123] ? _raw_spin_unlock+0x24/0x40 [ 145.091123][ T6123] ? alloc_fd+0x59e/0x650 [ 145.095497][ T6123] do_sys_openat2+0x14b/0x500 [ 145.100208][ T6123] ? __lock_acquire+0x7d40/0x7d40 [ 145.105621][ T6123] ? do_sys_open+0xe0/0xe0 [ 145.110069][ T6123] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 145.116179][ T6123] ? lock_chain_count+0x20/0x20 [ 145.121474][ T6123] __x64_sys_openat+0x135/0x160 [ 145.126360][ T6123] do_syscall_64+0x4c/0xa0 [ 145.130802][ T6123] ? clear_bhb_loop+0x30/0x80 [ 145.135526][ T6123] ? clear_bhb_loop+0x30/0x80 [ 145.140662][ T6123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.146585][ T6123] RIP: 0033:0x7f20e282b559 [ 145.151034][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.171008][ T6123] RSP: 002b:00007f20e0a82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.179849][ T6123] RAX: ffffffffffffffda RBX: 00007f20e2ab1fa0 RCX: 00007f20e282b559 [ 145.187859][ T6123] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 145.196290][ T6123] RBP: 00007f20e28c2b20 R08: 0000000000000000 R09: 0000000000000000 [ 145.204315][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.212316][ T6123] R13: 00007f20e2ab2038 R14: 00007f20e2ab1fa0 R15: 00007fff8c66b828 [ 145.220714][ T6123] [ 145.247937][ T6123] Mem-Info: [ 145.253467][ T6123] active_anon:276 inactive_anon:9761 isolated_anon:0 [ 145.253467][ T6123] active_file:14997 inactive_file:36430 isolated_file:0 [ 145.253467][ T6123] unevictable:17226 dirty:190 writeback:0 [ 145.253467][ T6123] slab_reclaimable:32245 slab_unreclaimable:110998 [ 145.253467][ T6123] mapped:29798 shmem:4970 pagetables:946 bounce:0 [ 145.253467][ T6123] kernel_misc_reclaimable:0 [ 145.253467][ T6123] free:1190152 free_pcp:12795 free_cma:0 [ 145.308359][ T6123] Node 0 active_anon:1072kB inactive_anon:38532kB active_file:59788kB inactive_file:145720kB unevictable:67368kB isolated(anon):0kB isolated(file):0kB mapped:119192kB dirty:756kB writeback:0kB shmem:17800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11748kB pagetables:3784kB all_unreclaimable? no [ 145.355316][ T6123] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 145.419897][ T6131] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.429548][ T6123] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.497537][ T6123] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 145.516021][ T6123] Node 0 DMA32 free:901848kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1072kB inactive_anon:38532kB active_file:59788kB inactive_file:145720kB unevictable:67368kB writepending:756kB present:3129332kB managed:2590808kB mlocked:0kB bounce:0kB free_pcp:42700kB local_pcp:21520kB free_cma:0kB [ 145.547314][ T4257] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 145.562568][ T6123] lowmem_reserve[]: 0 0 0 0 0 [ 145.568947][ T6123] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.598106][ T4257] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 145.610993][ T6123] lowmem_reserve[]: 0 0 0 0 0 [ 145.616527][ T6123] Node 1 Normal free:3820524kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:8452kB local_pcp:2080kB free_cma:0kB [ 145.651616][ T6123] lowmem_reserve[]: 0 0 0 0 0 [ 145.656911][ T6123] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 145.676603][ T6123] Node 0 DMA32: 994*4kB (ME) 403*8kB (ME) 195*16kB (UME) 113*32kB (ME) 64*64kB (UME) 37*128kB (ME) 12*256kB (M) 3*512kB (M) 1*1024kB (E) 1*2048kB (E) 210*4096kB (M) = 890608kB [ 145.696628][ T4257] peak_usb: probe of 1-1:0.0 failed with error -71 [ 145.707178][ T4257] usb 1-1: USB disconnect, device number 5 [ 145.723980][ T6134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.740852][ T6123] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 145.757366][ T6123] Node 1 Normal: 145*4kB (UME) 37*8kB (UE) 18*16kB (UME) 91*32kB (UE) 42*64kB (UME) 25*128kB (UME) 7*256kB (UM) 3*512kB (UE) 0*1024kB 1*2048kB (M) 929*4096kB (M) = 3820524kB [ 145.779065][ T6123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.789428][ T6123] Node 0 hugepages_total=50 hugepages_free=50 hugepages_surp=0 hugepages_size=2048kB [ 145.799822][ T6123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.810307][ T6123] Node 1 hugepages_total=48 hugepages_free=48 hugepages_surp=0 hugepages_size=2048kB [ 145.820370][ T6123] 72857 total pagecache pages [ 145.825731][ T6123] 0 pages in swap cache [ 145.829925][ T6123] Swap cache stats: add 2, delete 2, find 0/1 [ 145.836858][ T6123] Free swap = 124984kB [ 145.841051][ T6123] Total swap = 124996kB [ 145.849375][ T6123] 2097051 pages RAM [ 145.854665][ T6123] 0 pages HighMem/MovableOnly [ 145.869781][ T6123] 415362 pages reserved [ 145.875966][ T6123] 0 pages cma reserved [ 145.884243][ T6123] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 146.034469][ T6138] device bond0 entered promiscuous mode [ 146.040090][ T6138] device bond_slave_0 entered promiscuous mode [ 146.058549][ T6138] device bond_slave_1 entered promiscuous mode [ 146.094232][ T6138] device batadv0 entered promiscuous mode [ 146.113278][ T6138] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 146.134725][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 146.164957][ T6140] tipc: Enabled bearer , priority 0 [ 146.204636][ T6140] device syzkaller0 entered promiscuous mode [ 146.296793][ T6143] device syzkaller0 entered promiscuous mode [ 146.327080][ T6141] tipc: Resetting bearer [ 146.362478][ T6139] tipc: Resetting bearer [ 146.413014][ T6139] tipc: Disabling bearer [ 146.514451][ T6153] device syzkaller0 entered promiscuous mode [ 146.521891][ T6155] netlink: 'syz.8.561': attribute type 1 has an invalid length. [ 146.629862][ T6155] device veth0_virt_wifi entered promiscuous mode [ 146.870009][ T6167] tipc: Enabled bearer , priority 0 [ 146.900615][ T6167] tipc: Resetting bearer [ 146.927802][ T6166] tipc: Disabling bearer [ 146.967869][ T6178] netlink: 276 bytes leftover after parsing attributes in process `syz.6.570'. [ 147.094397][ T6182] loop0: detected capacity change from 0 to 1024 [ 147.130641][ T6182] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.159082][ T6184] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.239503][ T6182] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 147.445327][ T6196] device syzkaller0 entered promiscuous mode [ 147.467205][ T6192] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.471211][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 147.723649][ T6200] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.731367][ T6203] FAULT_INJECTION: forcing a failure. [ 147.731367][ T6203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.745336][ T6203] CPU: 0 PID: 6203 Comm: syz.8.577 Not tainted syzkaller #0 [ 147.753043][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 147.763223][ T6203] Call Trace: [ 147.766549][ T6203] [ 147.769508][ T6203] dump_stack_lvl+0x188/0x250 [ 147.774226][ T6203] ? show_regs_print_info+0x20/0x20 [ 147.779671][ T6203] ? load_image+0x410/0x410 [ 147.784244][ T6203] should_fail+0x383/0x4b0 [ 147.788892][ T6203] prepare_alloc_pages+0x1e3/0x5b0 [ 147.794452][ T6203] __alloc_pages+0x11b/0x480 [ 147.799103][ T6203] ? zone_statistics+0x170/0x170 [ 147.804080][ T6203] ? rcu_lock_acquire+0x30/0x30 [ 147.808995][ T6203] ? alloc_pages+0x452/0x560 [ 147.813641][ T6203] __get_free_pages+0x8/0x30 [ 147.818375][ T6203] __tlb_remove_page_size+0x1f2/0x3f0 [ 147.823954][ T6203] unmap_page_range+0xfcf/0x2410 [ 147.828970][ T6203] unmap_vmas+0x131/0x250 [ 147.833348][ T6203] ? unmap_page_range+0x2410/0x2410 [ 147.838595][ T6203] ? __mutex_lock_common+0x435/0x2400 [ 147.844004][ T6203] ? exit_mm_release+0x16/0x30 [ 147.848812][ T6203] exit_mmap+0x3b9/0x640 [ 147.853112][ T6203] ? vm_brk+0x20/0x20 [ 147.857144][ T6203] ? uprobe_clear_state+0x2f6/0x460 [ 147.862380][ T6203] __mmput+0x115/0x390 [ 147.866515][ T6203] exit_mm+0x632/0x7b0 [ 147.870610][ T6203] ? perf_pmu_migrate_context+0xb70/0xb70 [ 147.876462][ T6203] ? do_exit+0x2110/0x2110 [ 147.881243][ T6203] ? __ia32_sys_timer_delete+0x40/0x40 [ 147.886758][ T6203] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 147.892291][ T6203] ? tty_audit_exit+0x149/0x1f0 [ 147.897188][ T6203] do_exit+0x5b8/0x2110 [ 147.901490][ T6203] ? put_task_struct+0x80/0x80 [ 147.906280][ T6203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 147.912293][ T6203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 147.917338][ T6203] do_group_exit+0x12c/0x2f0 [ 147.921978][ T6203] ? lockdep_hardirqs_on+0x94/0x140 [ 147.927223][ T6203] get_signal+0x7eb/0x12e0 [ 147.931668][ T6203] arch_do_signal_or_restart+0xe6/0x12a0 [ 147.937417][ T6203] ? __local_bh_enable_ip+0x136/0x1c0 [ 147.942894][ T6203] ? _local_bh_enable+0xa0/0xa0 [ 147.947767][ T6203] ? futex_exit_release+0x1c0/0x1c0 [ 147.952989][ T6203] ? get_sigframe_size+0x10/0x10 [ 147.957970][ T6203] ? __context_tracking_exit+0x4c/0x80 [ 147.963453][ T6203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 147.969459][ T6203] ? exit_to_user_mode_loop+0x3b/0x130 [ 147.974934][ T6203] exit_to_user_mode_loop+0x9e/0x130 [ 147.980235][ T6203] exit_to_user_mode_prepare+0xee/0x180 [ 147.985823][ T6203] syscall_exit_to_user_mode+0x16/0x40 [ 147.991328][ T6203] do_syscall_64+0x58/0xa0 [ 147.995759][ T6203] ? clear_bhb_loop+0x30/0x80 [ 148.000449][ T6203] ? clear_bhb_loop+0x30/0x80 [ 148.005318][ T6203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.011231][ T6203] RIP: 0033:0x7febe6b59559 [ 148.015663][ T6203] Code: Unable to access opcode bytes at RIP 0x7febe6b5952f. [ 148.023044][ T6203] RSP: 002b:00007febe4db00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.031476][ T6203] RAX: fffffffffffffe00 RBX: 00007febe6ddffa8 RCX: 00007febe6b59559 [ 148.039481][ T6203] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007febe6ddffa8 [ 148.047471][ T6203] RBP: 00007febe6ddffa0 R08: 0000000000000000 R09: 0000000000000000 [ 148.055457][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.063461][ T6203] R13: 00007febe6de0038 R14: 00007ffcc8c48600 R15: 00007ffcc8c486e8 [ 148.071459][ T6203] [ 148.342639][ T6209] loop8: detected capacity change from 0 to 512 [ 148.421926][ T6209] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.612206][ T6209] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.641857][ T6209] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #15: comm syz.8.580: corrupted xattr block 33 [ 148.723874][ T6216] tipc: Enabled bearer , priority 0 [ 148.766363][ T6216] tipc: Resetting bearer [ 149.182276][ T26] audit: type=1800 audit(1792949099.856:98): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.580" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 149.443206][ T6215] tipc: Disabling bearer [ 149.563671][ T6219] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.747220][ T6227] netlink: 'syz.8.584': attribute type 12 has an invalid length. [ 149.767534][ T6229] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 149.779456][ T6227] netlink: 'syz.8.584': attribute type 12 has an invalid length. [ 149.802524][ T6228] FAULT_INJECTION: forcing a failure. [ 149.802524][ T6228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.839035][ T6219] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.852140][ T6228] CPU: 0 PID: 6228 Comm: syz.0.589 Not tainted syzkaller #0 [ 149.859507][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 149.869602][ T6228] Call Trace: [ 149.872919][ T6228] [ 149.875884][ T6228] dump_stack_lvl+0x188/0x250 [ 149.881011][ T6228] ? show_regs_print_info+0x20/0x20 [ 149.886264][ T6228] ? load_image+0x410/0x410 [ 149.890815][ T6228] ? __lock_acquire+0x7d40/0x7d40 [ 149.895879][ T6228] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 149.902157][ T6228] ? ktime_get_real_ts64+0x440/0x440 [ 149.907502][ T6228] should_fail+0x383/0x4b0 [ 149.911967][ T6228] _copy_to_user+0x2e/0x130 [ 149.916511][ T6228] put_timespec64+0xc5/0x120 [ 149.921238][ T6228] ? get_timespec64+0x1b0/0x1b0 [ 149.926342][ T6228] ? _raw_spin_unlock_irq+0x1f/0x40 [ 149.931581][ T6228] poll_select_finish+0x459/0x5d0 [ 149.936651][ T6228] ? poll_schedule_timeout+0x150/0x150 [ 149.942501][ T6228] ? sigprocmask+0x190/0x190 [ 149.947155][ T6228] ? __context_tracking_exit+0x4c/0x80 [ 149.952750][ T6228] __se_sys_pselect6+0x30b/0x3c0 [ 149.957753][ T6228] ? __x64_sys_pselect6+0xf0/0xf0 [ 149.962826][ T6228] ? __x64_sys_pselect6+0x1d/0xf0 [ 149.967894][ T6228] do_syscall_64+0x4c/0xa0 [ 149.972344][ T6228] ? clear_bhb_loop+0x30/0x80 [ 149.977054][ T6228] ? clear_bhb_loop+0x30/0x80 [ 149.981776][ T6228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.987712][ T6228] RIP: 0033:0x7f8da93c7559 [ 149.992161][ T6228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.012289][ T6228] RSP: 002b:00007f8da761e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 150.020748][ T6228] RAX: ffffffffffffffda RBX: 00007f8da964dfa0 RCX: 00007f8da93c7559 [ 150.028755][ T6228] RDX: 00002000000003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.036760][ T6228] RBP: 00007f8da945eb20 R08: 0000200000000440 R09: 0000200000000480 [ 150.044769][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.052804][ T6228] R13: 00007f8da964e038 R14: 00007f8da964dfa0 R15: 00007ffeb6032e98 [ 150.060830][ T6228] [ 150.095803][ T26] audit: type=1326 audit(1792949100.766:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.6.591" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 150.180606][ T26] audit: type=1326 audit(1792949100.776:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.6.591" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 150.208474][ T6219] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.242292][ T26] audit: type=1326 audit(1792949100.776:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.6.591" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 150.322949][ T6237] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.342112][ T26] audit: type=1326 audit(1792949100.776:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.6.591" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 150.411225][ T6219] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.430866][ T26] audit: type=1326 audit(1792949100.776:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.6.591" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 150.462821][ T26] audit: type=1326 audit(1792949100.776:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.6.591" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 150.498524][ T26] audit: type=1326 audit(1792949100.786:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.6.591" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 150.592967][ T6245] FAULT_INJECTION: forcing a failure. [ 150.592967][ T6245] name failslab, interval 1, probability 0, space 0, times 0 [ 150.644677][ T26] audit: type=1326 audit(1792949100.786:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.6.591" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 150.681655][ T6245] CPU: 0 PID: 6245 Comm: syz.8.597 Not tainted syzkaller #0 [ 150.689045][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 150.699146][ T6245] Call Trace: [ 150.702462][ T6245] [ 150.705432][ T6245] dump_stack_lvl+0x188/0x250 [ 150.710156][ T6245] ? show_regs_print_info+0x20/0x20 [ 150.715403][ T6245] ? load_image+0x410/0x410 [ 150.719949][ T6245] ? __might_sleep+0xf0/0xf0 [ 150.724593][ T6245] ? __lock_acquire+0x7d40/0x7d40 [ 150.729677][ T6245] should_fail+0x383/0x4b0 [ 150.734485][ T6245] should_failslab+0x5/0x20 [ 150.739031][ T6245] slab_pre_alloc_hook+0x51/0xc0 [ 150.744007][ T6245] kmem_cache_alloc_trace+0x47/0x290 [ 150.749441][ T6245] ? __list_lru_init+0x535/0xac0 [ 150.754432][ T6245] __list_lru_init+0x535/0xac0 [ 150.759249][ T6245] alloc_super+0x787/0x970 [ 150.763707][ T6245] ? kill_litter_super+0xa0/0xa0 [ 150.768685][ T6245] sget_fc+0x2d4/0x6f0 [ 150.772790][ T6245] ? kill_litter_super+0xa0/0xa0 [ 150.777776][ T6245] ? proc_reconfigure+0x370/0x370 [ 150.782837][ T6245] get_tree_nodev+0x26/0x160 [ 150.787475][ T6245] vfs_get_tree+0x88/0x270 [ 150.791938][ T6245] do_new_mount+0x247/0xa40 [ 150.796487][ T6245] __se_sys_mount+0x2e3/0x3d0 [ 150.801207][ T6245] ? __x64_sys_mount+0xc0/0xc0 [ 150.806018][ T6245] ? lockdep_hardirqs_on+0x94/0x140 [ 150.811252][ T6245] ? __x64_sys_mount+0x1c/0xc0 [ 150.816177][ T6245] do_syscall_64+0x4c/0xa0 [ 150.821090][ T6245] ? clear_bhb_loop+0x30/0x80 [ 150.825809][ T6245] ? clear_bhb_loop+0x30/0x80 [ 150.830639][ T6245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.836583][ T6245] RIP: 0033:0x7febe6b59559 [ 150.841045][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.860791][ T6245] RSP: 002b:00007febe4db0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 150.869256][ T6245] RAX: ffffffffffffffda RBX: 00007febe6ddffa0 RCX: 00007febe6b59559 [ 150.877268][ T6245] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000000000000000 [ 150.885288][ T6245] RBP: 00007febe6bf0b20 R08: 0000000000000000 R09: 0000000000000000 [ 150.893326][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.901753][ T6245] R13: 00007febe6de0038 R14: 00007febe6ddffa0 R15: 00007ffcc8c486e8 [ 150.909889][ T6245] [ 150.920268][ T26] audit: type=1326 audit(1792949100.786:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.6.591" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f20e282b559 code=0x7ffc0000 [ 150.985331][ T6251] tipc: Enabled bearer , priority 0 [ 151.000654][ T6251] tipc: Resetting bearer [ 151.019341][ T6250] tipc: Disabling bearer [ 152.218709][ T6271] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.394387][ T6286] tipc: Enabled bearer , priority 0 [ 152.425439][ T6286] device syzkaller0 entered promiscuous mode [ 152.475014][ T6286] tipc: Resetting bearer [ 152.505245][ T6285] tipc: Resetting bearer [ 152.543845][ T6285] tipc: Disabling bearer [ 153.883084][ T6308] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.031817][ T6319] FAULT_INJECTION: forcing a failure. [ 154.031817][ T6319] name fail_futex, interval 1, probability 0, space 0, times 0 [ 154.075251][ T6319] CPU: 1 PID: 6319 Comm: syz.8.627 Not tainted syzkaller #0 [ 154.082611][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 154.092704][ T6319] Call Trace: [ 154.096018][ T6319] [ 154.098980][ T6319] dump_stack_lvl+0x188/0x250 [ 154.103699][ T6319] ? show_regs_print_info+0x20/0x20 [ 154.108935][ T6319] ? load_image+0x410/0x410 [ 154.113577][ T6319] should_fail+0x383/0x4b0 [ 154.118035][ T6319] get_futex_key+0x1a1/0x12d0 [ 154.122767][ T6319] ? __lock_acquire+0x13b3/0x7d40 [ 154.128596][ T6319] ? futex_wait_restart+0x250/0x250 [ 154.133846][ T6319] futex_wake+0x101/0x540 [ 154.138256][ T6319] ? futex_wait+0x680/0x680 [ 154.142816][ T6319] ? verify_lock_unused+0x140/0x140 [ 154.148056][ T6319] ? verify_lock_unused+0x140/0x140 [ 154.153393][ T6319] do_futex+0xd83/0x12b0 [ 154.157685][ T6319] ? _raw_spin_unlock_irq+0x1f/0x40 [ 154.163014][ T6319] ? poll_select_finish+0x522/0x5d0 [ 154.168256][ T6319] ? futex_exit_release+0x1c0/0x1c0 [ 154.173722][ T6319] ? __context_tracking_exit+0x4c/0x80 [ 154.179224][ T6319] __se_sys_futex+0x389/0x420 [ 154.183946][ T6319] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 154.189972][ T6319] ? __x64_sys_futex+0xf0/0xf0 [ 154.195167][ T6319] ? __x64_sys_futex+0x1d/0xf0 [ 154.199972][ T6319] do_syscall_64+0x4c/0xa0 [ 154.204432][ T6319] ? clear_bhb_loop+0x30/0x80 [ 154.209146][ T6319] ? clear_bhb_loop+0x30/0x80 [ 154.213859][ T6319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.219917][ T6319] RIP: 0033:0x7febe6b59559 [ 154.224371][ T6319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.244380][ T6319] RSP: 002b:00007febe4db00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 154.252847][ T6319] RAX: ffffffffffffffda RBX: 00007febe6ddffa8 RCX: 00007febe6b59559 [ 154.260952][ T6319] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007febe6ddffac [ 154.268962][ T6319] RBP: 00007febe6ddffa0 R08: 003a422193604640 R09: 0000000000000000 [ 154.277157][ T6319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.285294][ T6319] R13: 00007febe6de0038 R14: 00007ffcc8c48600 R15: 00007ffcc8c486e8 [ 154.293494][ T6319] [ 154.429910][ T4314] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 154.452632][ T4314] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.461629][ T6325] rxe_eth0 speed is unknown, defaulting to 1000 [ 154.575392][ T6335] loop8: detected capacity change from 0 to 256 [ 154.590039][ T6336] loop6: detected capacity change from 0 to 512 [ 154.616256][ T6335] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.634551][ T6338] udc-core: couldn't find an available UDC or it's busy [ 154.650216][ T6332] fido_id[6332]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.677460][ T6335] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.758485][ T6341] FAULT_INJECTION: forcing a failure. [ 154.758485][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 154.773525][ T6336] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 154.793167][ T6341] CPU: 0 PID: 6341 Comm: syz.0.635 Not tainted syzkaller #0 [ 154.800537][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 154.810635][ T6341] Call Trace: [ 154.812252][ T6336] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 154.813962][ T6341] [ 154.826750][ T6341] dump_stack_lvl+0x188/0x250 [ 154.831479][ T6341] ? show_regs_print_info+0x20/0x20 [ 154.836723][ T6341] ? load_image+0x410/0x410 [ 154.841272][ T6341] ? __might_sleep+0xf0/0xf0 [ 154.845898][ T6341] ? __lock_acquire+0x7d40/0x7d40 [ 154.850972][ T6341] should_fail+0x383/0x4b0 [ 154.855437][ T6341] should_failslab+0x5/0x20 [ 154.859978][ T6341] slab_pre_alloc_hook+0x51/0xc0 [ 154.864961][ T6341] ? __kernfs_new_node+0xe3/0x6b0 [ 154.870027][ T6341] kmem_cache_alloc+0x3d/0x280 [ 154.874837][ T6341] __kernfs_new_node+0xe3/0x6b0 [ 154.879738][ T6341] ? kernfs_new_node+0x250/0x250 [ 154.884729][ T6341] ? rcu_lock_release+0x20/0x20 [ 154.889620][ T6341] ? sysfs_do_create_link_sd+0x75/0x110 [ 154.895216][ T6341] kernfs_new_node+0x148/0x250 [ 154.900037][ T6341] kernfs_create_link+0xa3/0x200 [ 154.905015][ T6341] sysfs_do_create_link_sd+0x83/0x110 [ 154.910434][ T6341] device_add+0x83b/0x1050 [ 154.914904][ T6341] netdev_register_kobject+0x184/0x320 [ 154.920424][ T6341] register_netdevice+0x10e8/0x1720 [ 154.925856][ T6341] ? netif_stacked_transfer_operstate+0x200/0x200 [ 154.932331][ T6341] ? vscnprintf+0x80/0x80 [ 154.936749][ T6341] ? radix_tree_lookup+0x263/0x280 [ 154.941916][ T6341] ppp_dev_configure+0x81a/0xaa0 [ 154.946912][ T6341] ppp_ioctl+0x8c2/0x1a70 [ 154.951306][ T6341] ? ppp_poll+0x250/0x250 [ 154.955706][ T6341] ? bpf_lsm_file_ioctl+0x5/0x10 [ 154.960696][ T6341] ? security_file_ioctl+0x7c/0xa0 [ 154.965849][ T6341] ? ppp_poll+0x250/0x250 [ 154.970252][ T6341] __se_sys_ioctl+0xfa/0x170 [ 154.974896][ T6341] do_syscall_64+0x4c/0xa0 [ 154.979365][ T6341] ? clear_bhb_loop+0x30/0x80 [ 154.984091][ T6341] ? clear_bhb_loop+0x30/0x80 [ 154.988832][ T6341] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.994779][ T6341] RIP: 0033:0x7f8da93c7559 [ 154.999237][ T6341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.018936][ T6341] RSP: 002b:00007f8da761e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.027418][ T6341] RAX: ffffffffffffffda RBX: 00007f8da964dfa0 RCX: 00007f8da93c7559 [ 155.035443][ T6341] RDX: 00002000000003c0 RSI: 00000000c004743e RDI: 0000000000000004 [ 155.043473][ T6341] RBP: 00007f8da945eb20 R08: 0000000000000000 R09: 0000000000000000 [ 155.051639][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.059655][ T6341] R13: 00007f8da964e038 R14: 00007f8da964dfa0 R15: 00007ffeb6032e98 [ 155.067699][ T6341] [ 155.085620][ T6336] EXT4-fs (loop6): 1 truncate cleaned up [ 155.122179][ T6336] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 155.216187][ T6336] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.632: Logical block already allocated [ 155.255777][ T6336] EXT4-fs (loop6): Remounting filesystem read-only [ 155.385244][ T6351] base or size exceeds the MTRR width [ 155.453070][ T6349] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 155.560521][ T6356] netlink: 'syz.8.641': attribute type 1 has an invalid length. [ 155.659948][ T6356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.700277][ T6360] FAULT_INJECTION: forcing a failure. [ 155.700277][ T6360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.757966][ T6360] CPU: 1 PID: 6360 Comm: syz.5.643 Not tainted syzkaller #0 [ 155.765342][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 155.775537][ T6360] Call Trace: [ 155.779039][ T6360] [ 155.782023][ T6360] dump_stack_lvl+0x188/0x250 [ 155.787101][ T6360] ? show_regs_print_info+0x20/0x20 [ 155.792349][ T6360] ? load_image+0x410/0x410 [ 155.796921][ T6360] ? __lock_acquire+0x7d40/0x7d40 [ 155.802354][ T6360] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 155.808647][ T6360] ? ktime_get_real_ts64+0x440/0x440 [ 155.813991][ T6360] should_fail+0x383/0x4b0 [ 155.818466][ T6360] _copy_to_user+0x2e/0x130 [ 155.823031][ T6360] put_timespec64+0xc5/0x120 [ 155.828089][ T6360] ? get_timespec64+0x1b0/0x1b0 [ 155.833011][ T6360] ? _raw_spin_unlock_irq+0x1f/0x40 [ 155.838255][ T6360] poll_select_finish+0x459/0x5d0 [ 155.843327][ T6360] ? poll_schedule_timeout+0x150/0x150 [ 155.848847][ T6360] ? sigprocmask+0x190/0x190 [ 155.853483][ T6360] ? __context_tracking_exit+0x4c/0x80 [ 155.859414][ T6360] __se_sys_pselect6+0x30b/0x3c0 [ 155.864495][ T6360] ? __x64_sys_pselect6+0xf0/0xf0 [ 155.869568][ T6360] ? __x64_sys_pselect6+0x1d/0xf0 [ 155.874681][ T6360] do_syscall_64+0x4c/0xa0 [ 155.879144][ T6360] ? clear_bhb_loop+0x30/0x80 [ 155.883872][ T6360] ? clear_bhb_loop+0x30/0x80 [ 155.888954][ T6360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.894892][ T6360] RIP: 0033:0x7f856ab24559 [ 155.899356][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.919016][ T6360] RSP: 002b:00007f8568d7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 155.927102][ T6358] bond1: (slave dummy0): making interface the new active one [ 155.927486][ T6360] RAX: ffffffffffffffda RBX: 00007f856adaafa0 RCX: 00007f856ab24559 [ 155.943271][ T6360] RDX: 00002000000003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.951476][ T6360] RBP: 00007f856abbbb20 R08: 0000200000000440 R09: 0000200000000480 [ 155.951518][ T6358] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 155.959492][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.959510][ T6360] R13: 00007f856adab038 R14: 00007f856adaafa0 R15: 00007ffff06f0d18 [ 155.959545][ T6360] [ 156.092388][ T6361] netlink: 'syz.8.641': attribute type 10 has an invalid length. [ 156.142030][ T6361] netlink: 40 bytes leftover after parsing attributes in process `syz.8.641'. [ 156.192631][ T6361] device dummy0 entered promiscuous mode [ 156.232770][ T6361] bond1: (slave dummy0): Releasing active interface [ 156.336035][ T6367] tipc: Enabling of bearer rejected, failed to enable media [ 156.382681][ T4255] Bluetooth: hci4: command 0x0409 tx timeout [ 156.417722][ T6382] tipc: Enabled bearer , priority 0 [ 156.481594][ T6388] device syzkaller0 entered promiscuous mode [ 156.540738][ T6366] device syzkaller0 entered promiscuous mode [ 156.556219][ T6382] tipc: Resetting bearer [ 156.715953][ T6381] tipc: Resetting bearer [ 156.747326][ T6381] tipc: Disabling bearer [ 156.852165][ T6325] chnl_net:caif_netlink_parms(): no params data found [ 157.070314][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.182136][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.190757][ T6325] device bridge_slave_0 entered promiscuous mode [ 157.209584][ T6406] FAULT_INJECTION: forcing a failure. [ 157.209584][ T6406] name failslab, interval 1, probability 0, space 0, times 0 [ 157.262297][ T6406] CPU: 0 PID: 6406 Comm: syz.5.653 Not tainted syzkaller #0 [ 157.269747][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 157.279876][ T6406] Call Trace: [ 157.283194][ T6406] [ 157.286168][ T6406] dump_stack_lvl+0x188/0x250 [ 157.290912][ T6406] ? show_regs_print_info+0x20/0x20 [ 157.296258][ T6406] ? load_image+0x410/0x410 [ 157.300817][ T6406] ? __might_sleep+0xf0/0xf0 [ 157.305580][ T6406] ? __lock_acquire+0x7d40/0x7d40 [ 157.310660][ T6406] should_fail+0x383/0x4b0 [ 157.315127][ T6406] should_failslab+0x5/0x20 [ 157.319666][ T6406] slab_pre_alloc_hook+0x51/0xc0 [ 157.324647][ T6406] ? __kernfs_new_node+0xe3/0x6b0 [ 157.329711][ T6406] kmem_cache_alloc+0x3d/0x280 [ 157.334517][ T6406] __kernfs_new_node+0xe3/0x6b0 [ 157.339500][ T6406] ? kernfs_new_node+0x250/0x250 [ 157.344490][ T6406] ? sysfs_do_create_link_sd+0x75/0x110 [ 157.350084][ T6406] kernfs_new_node+0x148/0x250 [ 157.354906][ T6406] kernfs_create_link+0xa3/0x200 [ 157.359908][ T6406] sysfs_do_create_link_sd+0x83/0x110 [ 157.365328][ T6406] device_add+0x83b/0x1050 [ 157.369788][ T6406] netdev_register_kobject+0x184/0x320 [ 157.375313][ T6406] register_netdevice+0x10e8/0x1720 [ 157.380914][ T6406] ? netif_stacked_transfer_operstate+0x200/0x200 [ 157.387462][ T6406] ? vscnprintf+0x80/0x80 [ 157.391844][ T6406] ? radix_tree_lookup+0x263/0x280 [ 157.397081][ T6406] ppp_dev_configure+0x81a/0xaa0 [ 157.402075][ T6406] ppp_ioctl+0x8c2/0x1a70 [ 157.406447][ T6406] ? ppp_poll+0x250/0x250 [ 157.410831][ T6406] ? bpf_lsm_file_ioctl+0x5/0x10 [ 157.415802][ T6406] ? security_file_ioctl+0x7c/0xa0 [ 157.420964][ T6406] ? ppp_poll+0x250/0x250 [ 157.425334][ T6406] __se_sys_ioctl+0xfa/0x170 [ 157.429966][ T6406] do_syscall_64+0x4c/0xa0 [ 157.434430][ T6406] ? clear_bhb_loop+0x30/0x80 [ 157.439163][ T6406] ? clear_bhb_loop+0x30/0x80 [ 157.443886][ T6406] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.449825][ T6406] RIP: 0033:0x7f856ab24559 [ 157.454285][ T6406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.473936][ T6406] RSP: 002b:00007f8568d7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.482402][ T6406] RAX: ffffffffffffffda RBX: 00007f856adaafa0 RCX: 00007f856ab24559 [ 157.490416][ T6406] RDX: 00002000000003c0 RSI: 00000000c004743e RDI: 0000000000000004 [ 157.498517][ T6406] RBP: 00007f856abbbb20 R08: 0000000000000000 R09: 0000000000000000 [ 157.506534][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.514545][ T6406] R13: 00007f856adab038 R14: 00007f856adaafa0 R15: 00007ffff06f0d18 [ 157.522579][ T6406] [ 157.674457][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.702387][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.730008][ T6325] device bridge_slave_1 entered promiscuous mode [ 157.832789][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.858996][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.954774][ T6325] team0: Port device team_slave_0 added [ 157.976888][ T6325] team0: Port device team_slave_1 added [ 158.042308][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.049511][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.142959][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.172182][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.179193][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.262163][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.408569][ T6415] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.421771][ T6325] device hsr_slave_0 entered promiscuous mode [ 158.436545][ T255] ODEBUG: Out of memory. ODEBUG disabled [ 158.462089][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 158.471443][ T6325] device hsr_slave_1 entered promiscuous mode [ 158.499420][ T6325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.510604][ T6325] Cannot create hsr debugfs directory [ 158.526656][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.8.658'. [ 158.725415][ T6425] tipc: Enabled bearer , priority 0 [ 158.738682][ T6425] device syzkaller0 entered promiscuous mode [ 158.792205][ T6425] tipc: Resetting bearer [ 158.858436][ T6427] device syzkaller0 entered promiscuous mode [ 158.877055][ T6429] loop0: detected capacity change from 0 to 512 [ 158.888979][ T6424] tipc: Resetting bearer [ 158.932167][ T6429] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.943789][ T6424] tipc: Disabling bearer [ 158.986840][ T6429] EXT4-fs (loop0): 1 truncate cleaned up [ 159.000781][ T6429] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 159.044093][ T6431] netlink: 24 bytes leftover after parsing attributes in process `syz.6.662'. [ 160.177979][ T6325] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 160.340818][ T6325] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 160.358873][ T6451] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 3, id = 0 [ 160.395839][ T6325] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 160.803146][ T6325] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 161.047261][ T6465] misc userio: No port type given on /dev/userio [ 161.185073][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 161.212244][ T6469] tipc: Enabled bearer , priority 0 [ 161.278566][ T6471] device syzkaller0 entered promiscuous mode [ 161.297257][ T6469] device syzkaller0 entered promiscuous mode [ 161.326052][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.346374][ T6475] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.402204][ T6477] tipc: Resetting bearer [ 161.431774][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.463524][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.485602][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.503231][ T6467] tipc: Resetting bearer [ 161.525124][ T6467] tipc: Disabling bearer [ 161.553248][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.593372][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.612380][ T4739] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.619544][ T4739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.638217][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.677240][ T6482] tipc: Enabled bearer , priority 0 [ 161.703178][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.721018][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.733435][ T4739] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.740598][ T4739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.801194][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.843964][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.876861][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.936870][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.962622][ T6493] netlink: 256 bytes leftover after parsing attributes in process `syz.6.681'. [ 161.972741][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.142985][ T6493] netlink: 64 bytes leftover after parsing attributes in process `syz.6.681'. [ 162.242298][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.330320][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.706593][ T6500] FAULT_INJECTION: forcing a failure. [ 162.706593][ T6500] name failslab, interval 1, probability 0, space 0, times 0 [ 162.739111][ T6500] CPU: 0 PID: 6500 Comm: syz.6.682 Not tainted syzkaller #0 [ 162.746458][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 162.756554][ T6500] Call Trace: [ 162.759871][ T6500] [ 162.762826][ T6500] dump_stack_lvl+0x188/0x250 [ 162.767558][ T6500] ? show_regs_print_info+0x20/0x20 [ 162.772803][ T6500] ? load_image+0x410/0x410 [ 162.777359][ T6500] ? __might_sleep+0xf0/0xf0 [ 162.781984][ T6500] ? __lock_acquire+0x7d40/0x7d40 [ 162.787051][ T6500] should_fail+0x383/0x4b0 [ 162.791653][ T6500] should_failslab+0x5/0x20 [ 162.796197][ T6500] slab_pre_alloc_hook+0x51/0xc0 [ 162.801181][ T6500] ? __kernfs_new_node+0xe3/0x6b0 [ 162.806254][ T6500] kmem_cache_alloc+0x3d/0x280 [ 162.811069][ T6500] __kernfs_new_node+0xe3/0x6b0 [ 162.815963][ T6500] ? kernfs_add_one+0x564/0x6c0 [ 162.820861][ T6500] ? kernfs_new_node+0x250/0x250 [ 162.825862][ T6500] ? sysfs_do_create_link_sd+0x75/0x110 [ 162.831461][ T6500] kernfs_new_node+0x148/0x250 [ 162.836286][ T6500] kernfs_create_link+0xa3/0x200 [ 162.841278][ T6500] sysfs_do_create_link_sd+0x83/0x110 [ 162.846703][ T6500] device_add+0x641/0x1050 [ 162.851167][ T6500] netdev_register_kobject+0x184/0x320 [ 162.856676][ T6500] register_netdevice+0x10e8/0x1720 [ 162.861933][ T6500] ? netif_stacked_transfer_operstate+0x200/0x200 [ 162.868391][ T6500] ? vscnprintf+0x80/0x80 [ 162.872772][ T6500] ? radix_tree_lookup+0x263/0x280 [ 162.877932][ T6500] ppp_dev_configure+0x81a/0xaa0 [ 162.882949][ T6500] ppp_ioctl+0x8c2/0x1a70 [ 162.887327][ T6500] ? ppp_poll+0x250/0x250 [ 162.891708][ T6500] ? bpf_lsm_file_ioctl+0x5/0x10 [ 162.896686][ T6500] ? security_file_ioctl+0x7c/0xa0 [ 162.901843][ T6500] ? ppp_poll+0x250/0x250 [ 162.906219][ T6500] __se_sys_ioctl+0xfa/0x170 [ 162.910884][ T6500] do_syscall_64+0x4c/0xa0 [ 162.915339][ T6500] ? clear_bhb_loop+0x30/0x80 [ 162.920051][ T6500] ? clear_bhb_loop+0x30/0x80 [ 162.924792][ T6500] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.930758][ T6500] RIP: 0033:0x7f20e282b559 [ 162.935215][ T6500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.954862][ T6500] RSP: 002b:00007f20e0a82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.963362][ T6500] RAX: ffffffffffffffda RBX: 00007f20e2ab1fa0 RCX: 00007f20e282b559 [ 162.971383][ T6500] RDX: 00002000000003c0 RSI: 00000000c004743e RDI: 0000000000000004 [ 162.979409][ T6500] RBP: 00007f20e28c2b20 R08: 0000000000000000 R09: 0000000000000000 [ 162.987415][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.995434][ T6500] R13: 00007f20e2ab2038 R14: 00007f20e2ab1fa0 R15: 00007fff8c66b828 [ 163.003460][ T6500] [ 163.028558][ T6480] tipc: Disabling bearer [ 163.048954][ T4255] tipc: Node number set to 3157049376 [ 163.069474][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.094266][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.143645][ T6325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.203135][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.215713][ T6507] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.229298][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.245417][ T6513] loop5: detected capacity change from 0 to 128 [ 163.254352][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.263686][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 163.274069][ T6506] device syzkaller0 entered promiscuous mode [ 163.520148][ T6522] tipc: Enabled bearer , priority 0 [ 163.554893][ T6523] misc userio: No port type given on /dev/userio [ 163.583384][ T6522] device syzkaller0 entered promiscuous mode [ 163.663924][ T6522] tipc: Resetting bearer [ 163.699032][ T6521] tipc: Resetting bearer [ 163.758979][ T6521] tipc: Disabling bearer [ 163.843698][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.858760][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.890779][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.934106][ T6541] tipc: Enabled bearer , priority 0 [ 163.981631][ T6540] tipc: Disabling bearer [ 164.027554][ T6547] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.183169][ T6551] device syzkaller0 entered promiscuous mode [ 164.262416][ T6554] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.331326][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.8.700'. [ 164.363995][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.8.700'. [ 164.694356][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.719971][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.816009][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.002456][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.352871][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.974365][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.022460][ T6576] netlink: 24 bytes leftover after parsing attributes in process `syz.5.707'. [ 166.057172][ T6325] device veth0_vlan entered promiscuous mode [ 166.121295][ T6325] device veth1_vlan entered promiscuous mode [ 166.213681][ T6592] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 166.224259][ T6598] device syzkaller0 entered promiscuous mode [ 166.334878][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.358481][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.399122][ T6325] device veth0_macvtap entered promiscuous mode [ 166.437339][ T6325] device veth1_macvtap entered promiscuous mode [ 166.499590][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.537324][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.564975][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.584164][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.594759][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.606002][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.618263][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.646004][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.656744][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.669690][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.679944][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.690804][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.702088][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.713357][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.724161][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.735046][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.745300][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.759196][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.793195][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.808652][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.870929][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.901363][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.921092][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.957714][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.002213][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.039394][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.084803][ T6623] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.110197][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.141886][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.194336][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.220992][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.261195][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.294537][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.322892][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.344059][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.368298][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.391111][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.412907][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.442171][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.466202][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.488419][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.510087][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.522133][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.542580][ T6628] device syzkaller0 entered promiscuous mode [ 167.594703][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.618367][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.650305][ T6325] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.689623][ T6325] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.714807][ T6325] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.714847][ T6325] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.898717][ T6646] misc userio: Invalid payload size [ 167.958803][ T6580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.958827][ T6580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.959091][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.030004][ T6652] loop5: detected capacity change from 0 to 1024 [ 168.032548][ T4752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.032571][ T4752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.033865][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.126294][ T6652] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,dioread_lock,nodioread_nolock,noquota,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 168.435078][ T6665] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.479724][ T6671] FAULT_INJECTION: forcing a failure. [ 168.479724][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 168.535455][ T6671] CPU: 0 PID: 6671 Comm: syz.9.734 Not tainted syzkaller #0 [ 168.542837][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 168.552948][ T6671] Call Trace: [ 168.556269][ T6671] [ 168.559235][ T6671] dump_stack_lvl+0x188/0x250 [ 168.563988][ T6671] ? show_regs_print_info+0x20/0x20 [ 168.569244][ T6671] ? load_image+0x410/0x410 [ 168.573811][ T6671] ? __might_sleep+0xf0/0xf0 [ 168.578498][ T6671] ? __lock_acquire+0x7d40/0x7d40 [ 168.583589][ T6671] should_fail+0x383/0x4b0 [ 168.588062][ T6671] should_failslab+0x5/0x20 [ 168.592646][ T6671] slab_pre_alloc_hook+0x51/0xc0 [ 168.597630][ T6671] ? ima_queue_key+0x7b/0x390 [ 168.602364][ T6671] __kmalloc_track_caller+0x69/0x330 [ 168.607698][ T6671] ? ima_queue_key+0x7b/0x390 [ 168.612468][ T6671] kmemdup+0x22/0x50 [ 168.616507][ T6671] ima_queue_key+0x7b/0x390 [ 168.621074][ T6671] ima_post_key_create_or_update+0x80/0xf0 [ 168.626962][ T6671] key_create_or_update+0x911/0xa40 [ 168.632303][ T6671] ? security_key_permission+0x7c/0xa0 [ 168.637823][ T6671] ? key_type_put+0x20/0x20 [ 168.642382][ T6671] ? lookup_user_key_possessed+0x40/0x40 [ 168.648080][ T6671] ? __might_fault+0xb3/0x110 [ 168.652815][ T6671] __se_sys_add_key+0x34b/0x410 [ 168.657727][ T6671] ? __x64_sys_add_key+0xc0/0xc0 [ 168.662723][ T6671] ? lockdep_hardirqs_on+0x94/0x140 [ 168.667965][ T6671] ? __x64_sys_add_key+0x1c/0xc0 [ 168.672956][ T6671] do_syscall_64+0x4c/0xa0 [ 168.677419][ T6671] ? clear_bhb_loop+0x30/0x80 [ 168.682146][ T6671] ? clear_bhb_loop+0x30/0x80 [ 168.686874][ T6671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.692827][ T6671] RIP: 0033:0x7f7def661559 [ 168.697292][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.716960][ T6671] RSP: 002b:00007f7ded8b8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 168.725427][ T6671] RAX: ffffffffffffffda RBX: 00007f7def8e7fa0 RCX: 00007f7def661559 [ 168.733543][ T6671] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 168.741648][ T6671] RBP: 00007f7def6f8b20 R08: 000000000c5e31f7 R09: 0000000000000000 [ 168.749752][ T6671] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 168.757785][ T6671] R13: 00007f7def8e8038 R14: 00007f7def8e7fa0 R15: 00007ffce170f838 [ 168.765823][ T6671] [ 168.878493][ T6678] device syzkaller0 entered promiscuous mode [ 169.133443][ T6684] netlink: 'syz.8.740': attribute type 10 has an invalid length. [ 169.175047][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.183505][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.253251][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.260965][ T6684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.270077][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.277239][ T6684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.385401][ T6684] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 169.478165][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.6.744'. [ 169.486687][ T6695] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.745'. [ 169.540938][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 169.540955][ T26] audit: type=1804 audit(1792949120.206:122): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_key cause=ENOMEM comm="syz.9.734" name="syzD" res=0 errno=-12 [ 169.717316][ T6701] misc userio: Invalid payload size [ 169.792620][ T6708] device syzkaller0 entered promiscuous mode [ 170.030256][ T6717] tipc: Started in network mode [ 170.052189][ T6717] tipc: Node identity caf190d92b7f, cluster identity 4711 [ 170.062525][ T6717] tipc: Enabled bearer , priority 0 [ 170.097518][ T6717] device syzkaller0 entered promiscuous mode [ 170.115090][ T6721] device syzkaller0 entered promiscuous mode [ 170.159557][ T6717] tipc: Resetting bearer [ 170.176113][ T6725] netlink: 'syz.0.757': attribute type 10 has an invalid length. [ 170.292303][ T6716] tipc: Resetting bearer [ 170.323031][ T6716] tipc: Disabling bearer [ 170.737185][ T6743] x_tables: duplicate entry at hook 2 [ 170.746688][ T6739] FAULT_INJECTION: forcing a failure. [ 170.746688][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 170.781150][ T6744] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.822095][ T6739] CPU: 0 PID: 6739 Comm: syz.6.762 Not tainted syzkaller #0 [ 170.829457][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 170.839679][ T6739] Call Trace: [ 170.843001][ T6739] [ 170.846139][ T6739] dump_stack_lvl+0x188/0x250 [ 170.850956][ T6739] ? show_regs_print_info+0x20/0x20 [ 170.856241][ T6739] ? load_image+0x410/0x410 [ 170.860797][ T6739] ? __might_sleep+0xf0/0xf0 [ 170.865554][ T6739] ? __lock_acquire+0x7d40/0x7d40 [ 170.870638][ T6739] ? aa_get_newest_label+0xf5/0x5a0 [ 170.876143][ T6739] should_fail+0x383/0x4b0 [ 170.880616][ T6739] should_failslab+0x5/0x20 [ 170.885193][ T6739] slab_pre_alloc_hook+0x51/0xc0 [ 170.890201][ T6739] ? skb_clone+0x1bd/0x350 [ 170.894657][ T6739] kmem_cache_alloc+0x3d/0x280 [ 170.899467][ T6739] skb_clone+0x1bd/0x350 [ 170.903750][ T6739] ? nfnetlink_rcv+0x4a7/0x2450 [ 170.908649][ T6739] nfnetlink_rcv+0x4e0/0x2450 [ 170.913374][ T6739] ? lockdep_hardirqs_on+0x94/0x140 [ 170.918706][ T6739] ? __local_bh_enable_ip+0x136/0x1c0 [ 170.924148][ T6739] ? _local_bh_enable+0xa0/0xa0 [ 170.929077][ T6739] ? __dev_queue_xmit+0x1b64/0x2e50 [ 170.934325][ T6739] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 170.939930][ T6739] ? dev_queue_xmit+0x20/0x20 [ 170.944650][ T6739] ? memcpy+0x3c/0x60 [ 170.948673][ T6739] ? __copy_skb_header+0x3ba/0x4f0 [ 170.953839][ T6739] ? skb_clone+0x1f1/0x350 [ 170.958295][ T6739] ? rcu_lock_release+0x5/0x20 [ 170.963103][ T6739] ? __lock_acquire+0x7d40/0x7d40 [ 170.968191][ T6739] netlink_unicast+0x78f/0x940 [ 170.973009][ T6739] netlink_sendmsg+0x8ba/0xbe0 [ 170.977826][ T6739] ? netlink_getsockopt+0x570/0x570 [ 170.983243][ T6739] ? aa_sock_msg_perm+0x94/0x150 [ 170.988227][ T6739] ? apparmor_socket_sendmsg+0x88/0x230 [ 170.993816][ T6739] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 170.999155][ T6739] ? security_socket_sendmsg+0x7c/0xa0 [ 171.004744][ T6739] ? netlink_getsockopt+0x570/0x570 [ 171.009993][ T6739] ____sys_sendmsg+0x5be/0x8f0 [ 171.014805][ T6739] ? __sys_sendmsg_sock+0x30/0x30 [ 171.019880][ T6739] ? import_iovec+0x6f/0xa0 [ 171.024429][ T6739] ___sys_sendmsg+0x236/0x2e0 [ 171.029153][ T6739] ? __sys_sendmsg+0x290/0x290 [ 171.034005][ T6739] __se_sys_sendmsg+0x1b7/0x2a0 [ 171.038902][ T6739] ? __x64_sys_sendmsg+0x80/0x80 [ 171.043966][ T6739] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 171.050005][ T6739] ? lockdep_hardirqs_on+0x94/0x140 [ 171.055277][ T6739] do_syscall_64+0x4c/0xa0 [ 171.059737][ T6739] ? clear_bhb_loop+0x30/0x80 [ 171.064458][ T6739] ? clear_bhb_loop+0x30/0x80 [ 171.069178][ T6739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.075143][ T6739] RIP: 0033:0x7f20e282b559 [ 171.079593][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.099267][ T6739] RSP: 002b:00007f20e0a82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.107731][ T6739] RAX: ffffffffffffffda RBX: 00007f20e2ab1fa0 RCX: 00007f20e282b559 [ 171.115744][ T6739] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000005 [ 171.123755][ T6739] RBP: 00007f20e28c2b20 R08: 0000000000000000 R09: 0000000000000000 [ 171.131768][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.139781][ T6739] R13: 00007f20e2ab2038 R14: 00007f20e2ab1fa0 R15: 00007fff8c66b828 [ 171.147815][ T6739] [ 171.384115][ T6758] xt_hashlimit: size too large, truncated to 1048576 [ 171.469245][ T6761] device syzkaller0 entered promiscuous mode [ 171.762123][ T6768] tipc: Enabled bearer , priority 0 [ 171.771806][ T6772] loop8: detected capacity change from 0 to 512 [ 171.793071][ T6768] device syzkaller0 entered promiscuous mode [ 171.829066][ T6773] misc userio: No port type given on /dev/userio [ 171.856063][ T6768] tipc: Resetting bearer [ 171.874442][ T6767] tipc: Resetting bearer [ 171.920809][ T6767] tipc: Disabling bearer [ 171.944203][ T6772] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 171.990262][ T6772] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.256715][ T6788] Invalid option length (130) for dns_resolver key [ 172.279278][ T6788] smc: net device lo applied user defined pnetid SYZ2 [ 172.314451][ T6785] device syzkaller0 entered promiscuous mode [ 172.335261][ T26] audit: type=1107 audit(1792949123.006:123): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 172.585962][ T6795] device syzkaller0 entered promiscuous mode [ 172.896655][ T6807] loop8: detected capacity change from 0 to 512 [ 172.941527][ T6807] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 172.988080][ T6807] EXT4-fs (loop8): 1 truncate cleaned up [ 173.002857][ T6807] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,nouid32,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 173.273481][ T6819] netlink: 'syz.9.794': attribute type 1 has an invalid length. [ 173.286089][ T6817] misc userio: No port type given on /dev/userio [ 173.495911][ T6826] device syzkaller0 entered promiscuous mode [ 173.593470][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.9.800'. [ 173.804452][ T6840] netlink: 136 bytes leftover after parsing attributes in process `syz.9.803'. [ 173.855945][ T6840] netlink: 136 bytes leftover after parsing attributes in process `syz.9.803'. [ 173.970002][ T6844] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.347076][ T6855] device syzkaller0 entered promiscuous mode [ 175.240145][ T6859] loop9: detected capacity change from 0 to 512 [ 175.299494][ T6862] device syzkaller0 entered promiscuous mode [ 175.443078][ T6859] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 175.451226][ T6859] System zones: 0-2, 18-18, 34-34 [ 175.502728][ T6859] EXT4-fs (loop9): orphan cleanup on readonly fs [ 175.534681][ T6859] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.811: bg 0: block 248: padding at end of block bitmap is not set [ 175.554886][ T6859] Quota error (device loop9): write_blk: dquota write failed [ 175.566281][ T6859] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 175.577730][ T6859] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.811: Failed to acquire dquot type 1 [ 175.602949][ T6859] EXT4-fs (loop9): 1 truncate cleaned up [ 175.644934][ T6859] EXT4-fs (loop9): mounted filesystem without journal. Opts: max_batch_time=0x000000000000acd3,nodiscard,lazytime,grpjquota=,grpjquota=,acl,abort,debug,usrjquota=,,errors=continue. Quota mode: writeback. [ 175.704635][ T6869] misc userio: No port type given on /dev/userio [ 175.792386][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.8.817'. [ 176.046512][ T6884] FAULT_INJECTION: forcing a failure. [ 176.046512][ T6884] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 176.060101][ T6884] CPU: 0 PID: 6884 Comm: syz.9.822 Not tainted syzkaller #0 [ 176.067426][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.077511][ T6884] Call Trace: [ 176.080820][ T6884] [ 176.083777][ T6884] dump_stack_lvl+0x188/0x250 [ 176.088494][ T6884] ? show_regs_print_info+0x20/0x20 [ 176.093754][ T6884] ? load_image+0x410/0x410 [ 176.098326][ T6884] should_fail+0x383/0x4b0 [ 176.102783][ T6884] prepare_alloc_pages+0x1e3/0x5b0 [ 176.107935][ T6884] __alloc_pages+0x11b/0x480 [ 176.112566][ T6884] ? zone_statistics+0x170/0x170 [ 176.117538][ T6884] ? rcu_lock_acquire+0x30/0x30 [ 176.122424][ T6884] ? alloc_pages+0x452/0x560 [ 176.127056][ T6884] __get_free_pages+0x8/0x30 [ 176.131679][ T6884] __tlb_remove_page_size+0x1f2/0x3f0 [ 176.137101][ T6884] unmap_page_range+0xfcf/0x2410 [ 176.142113][ T6884] unmap_vmas+0x131/0x250 [ 176.146480][ T6884] ? unmap_page_range+0x2410/0x2410 [ 176.151703][ T6884] ? __mutex_lock_common+0x435/0x2400 [ 176.152693][ T6886] FAULT_INJECTION: forcing a failure. [ 176.152693][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 176.157211][ T6884] ? exit_mm_release+0x16/0x30 [ 176.174788][ T6884] exit_mmap+0x3b9/0x640 [ 176.179301][ T6884] ? vm_brk+0x20/0x20 [ 176.183334][ T6884] ? uprobe_clear_state+0x2f6/0x460 [ 176.188584][ T6884] __mmput+0x115/0x390 [ 176.192729][ T6884] exit_mm+0x632/0x7b0 [ 176.196833][ T6884] ? perf_pmu_migrate_context+0xb70/0xb70 [ 176.202590][ T6884] ? do_exit+0x2110/0x2110 [ 176.207050][ T6884] ? __ia32_sys_timer_delete+0x40/0x40 [ 176.212534][ T6884] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 176.218032][ T6884] ? tty_audit_exit+0x149/0x1f0 [ 176.222912][ T6884] do_exit+0x5b8/0x2110 [ 176.227100][ T6884] ? put_task_struct+0x80/0x80 [ 176.231903][ T6884] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 176.237930][ T6884] ? _raw_spin_lock_irq+0xb7/0xf0 [ 176.242995][ T6884] do_group_exit+0x12c/0x2f0 [ 176.247613][ T6884] ? lockdep_hardirqs_on+0x94/0x140 [ 176.252837][ T6884] get_signal+0x7eb/0x12e0 [ 176.257299][ T6884] arch_do_signal_or_restart+0xe6/0x12a0 [ 176.262997][ T6884] ? futex_exit_release+0x1c0/0x1c0 [ 176.268337][ T6884] ? get_sigframe_size+0x10/0x10 [ 176.273320][ T6884] ? __context_tracking_exit+0x4c/0x80 [ 176.279008][ T6884] ? exit_to_user_mode_loop+0x3b/0x130 [ 176.284500][ T6884] exit_to_user_mode_loop+0x9e/0x130 [ 176.289818][ T6884] exit_to_user_mode_prepare+0xee/0x180 [ 176.295425][ T6884] syscall_exit_to_user_mode+0x16/0x40 [ 176.300919][ T6884] do_syscall_64+0x58/0xa0 [ 176.305367][ T6884] ? clear_bhb_loop+0x30/0x80 [ 176.310072][ T6884] ? clear_bhb_loop+0x30/0x80 [ 176.314773][ T6884] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.320699][ T6884] RIP: 0033:0x7f7def661559 [ 176.325151][ T6884] Code: Unable to access opcode bytes at RIP 0x7f7def66152f. [ 176.332760][ T6884] RSP: 002b:00007f7ded8b80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 176.341204][ T6884] RAX: 0000000000000001 RBX: 00007f7def8e7fa8 RCX: 00007f7def661559 [ 176.349228][ T6884] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7def8e7fac [ 176.357233][ T6884] RBP: 00007f7def8e7fa0 R08: 003b73502b007b5c R09: 0000000000000000 [ 176.365265][ T6884] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 176.373376][ T6884] R13: 00007f7def8e8038 R14: 00007ffce170f750 R15: 00007ffce170f838 [ 176.381406][ T6884] [ 176.385937][ T6886] CPU: 1 PID: 6886 Comm: syz.8.823 Not tainted syzkaller #0 [ 176.393278][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.403367][ T6886] Call Trace: [ 176.406681][ T6886] [ 176.409650][ T6886] dump_stack_lvl+0x188/0x250 [ 176.414365][ T6886] ? show_regs_print_info+0x20/0x20 [ 176.419618][ T6886] ? load_image+0x410/0x410 [ 176.424173][ T6886] ? __might_sleep+0xf0/0xf0 [ 176.428816][ T6886] ? __lock_acquire+0x7d40/0x7d40 [ 176.433872][ T6886] ? __local_bh_enable_ip+0x136/0x1c0 [ 176.439286][ T6886] ? lockdep_hardirqs_on+0x94/0x140 [ 176.444562][ T6886] should_fail+0x383/0x4b0 [ 176.449048][ T6886] should_failslab+0x5/0x20 [ 176.453605][ T6886] slab_pre_alloc_hook+0x51/0xc0 [ 176.458588][ T6886] kmem_cache_alloc_node+0x47/0x2c0 [ 176.463829][ T6886] ? __alloc_skb+0xf4/0x750 [ 176.468378][ T6886] __alloc_skb+0xf4/0x750 [ 176.472835][ T6886] netlink_ack+0x35c/0xb10 [ 176.477300][ T6886] ? memcpy+0x3c/0x60 [ 176.481320][ T6886] ? netlink_dump+0xdd0/0xdd0 [ 176.486027][ T6886] ? __copy_skb_header+0x3ba/0x4f0 [ 176.491184][ T6886] netlink_rcv_skb+0x267/0x430 [ 176.496085][ T6886] ? rtnetlink_bind+0x80/0x80 [ 176.500804][ T6886] ? netlink_ack+0xb10/0xb10 [ 176.505537][ T6886] netlink_unicast+0x78f/0x940 [ 176.510352][ T6886] netlink_sendmsg+0x8ba/0xbe0 [ 176.515165][ T6886] ? netlink_getsockopt+0x570/0x570 [ 176.520401][ T6886] ? aa_sock_msg_perm+0x94/0x150 [ 176.525409][ T6886] ? apparmor_socket_sendmsg+0x88/0x230 [ 176.531017][ T6886] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 176.536342][ T6886] ? security_socket_sendmsg+0x7c/0xa0 [ 176.541836][ T6886] ? netlink_getsockopt+0x570/0x570 [ 176.547074][ T6886] ____sys_sendmsg+0x5be/0x8f0 [ 176.551880][ T6886] ? __sys_sendmsg_sock+0x30/0x30 [ 176.557037][ T6886] ? import_iovec+0x6f/0xa0 [ 176.561583][ T6886] ___sys_sendmsg+0x236/0x2e0 [ 176.566315][ T6886] ? __sys_sendmsg+0x290/0x290 [ 176.571176][ T6886] __se_sys_sendmsg+0x1b7/0x2a0 [ 176.576080][ T6886] ? __x64_sys_sendmsg+0x80/0x80 [ 176.581046][ T6886] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 176.587076][ T6886] ? lockdep_hardirqs_on+0x94/0x140 [ 176.592323][ T6886] do_syscall_64+0x4c/0xa0 [ 176.596777][ T6886] ? clear_bhb_loop+0x30/0x80 [ 176.601487][ T6886] ? clear_bhb_loop+0x30/0x80 [ 176.606206][ T6886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.612158][ T6886] RIP: 0033:0x7febe6b59559 [ 176.616643][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.636370][ T6886] RSP: 002b:00007febe4db0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.644843][ T6886] RAX: ffffffffffffffda RBX: 00007febe6ddffa0 RCX: 00007febe6b59559 [ 176.652854][ T6886] RDX: 0000000000000000 RSI: 0000200000000ec0 RDI: 0000000000000004 [ 176.660859][ T6886] RBP: 00007febe6bf0b20 R08: 0000000000000000 R09: 0000000000000000 [ 176.668887][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.676892][ T6886] R13: 00007febe6de0038 R14: 00007febe6ddffa0 R15: 00007ffcc8c486e8 [ 176.684920][ T6886] [ 176.952314][ T6897] device syzkaller0 entered promiscuous mode [ 177.154399][ T6900] loop8: detected capacity change from 0 to 512 [ 177.390186][ T6900] EXT4-fs (loop8): Ignoring removed oldalloc option [ 177.427707][ T6900] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 177.525367][ T6900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 177.577580][ T6900] EXT4-fs (loop8): orphan cleanup on readonly fs [ 177.632086][ T6900] EXT4-fs error (device loop8): ext4_orphan_get:1436: comm syz.8.827: bad orphan inode 267 [ 177.688240][ T6900] EXT4-fs (loop8): Remounting filesystem read-only [ 177.723756][ T6900] EXT4-fs (loop8): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 177.819809][ T6900] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.827: dx entry: limit 0 != root limit 125 [ 177.862110][ T6900] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.827: Corrupt directory, running e2fsck is recommended [ 178.059370][ T6914] FAULT_INJECTION: forcing a failure. [ 178.059370][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 178.072443][ T6914] CPU: 0 PID: 6914 Comm: syz.8.831 Not tainted syzkaller #0 [ 178.079772][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 178.089948][ T6914] Call Trace: [ 178.093262][ T6914] [ 178.096222][ T6914] dump_stack_lvl+0x188/0x250 [ 178.100980][ T6914] ? show_regs_print_info+0x20/0x20 [ 178.106221][ T6914] ? load_image+0x410/0x410 [ 178.110766][ T6914] ? __might_sleep+0xf0/0xf0 [ 178.115399][ T6914] ? __lock_acquire+0x7d40/0x7d40 [ 178.120471][ T6914] should_fail+0x383/0x4b0 [ 178.124931][ T6914] should_failslab+0x5/0x20 [ 178.129471][ T6914] slab_pre_alloc_hook+0x51/0xc0 [ 178.134445][ T6914] __kmalloc_node+0x6d/0x3a0 [ 178.139075][ T6914] ? qdisc_alloc+0x97/0xae0 [ 178.143639][ T6914] qdisc_alloc+0x97/0xae0 [ 178.148014][ T6914] qdisc_create+0x171/0x11a0 [ 178.152661][ T6914] ? __mutex_lock_common+0x1471/0x2400 [ 178.158167][ T6914] ? qdisc_notify+0x360/0x360 [ 178.162891][ T6914] ? lockdep_rtnl_is_held+0x22/0x30 [ 178.168130][ T6914] tc_modify_qdisc+0xae1/0x17d0 [ 178.173129][ T6914] ? rcu_lock_release+0x20/0x20 [ 178.178040][ T6914] ? rcu_lock_release+0x20/0x20 [ 178.182924][ T6914] rtnetlink_rcv_msg+0x7f1/0xf10 [ 178.187910][ T6914] ? lock_chain_count+0x20/0x20 [ 178.192800][ T6914] ? rtnetlink_bind+0x80/0x80 [ 178.197517][ T6914] ? __local_bh_enable_ip+0x136/0x1c0 [ 178.202922][ T6914] ? lockdep_hardirqs_on+0x94/0x140 [ 178.208174][ T6914] ? __local_bh_enable_ip+0x136/0x1c0 [ 178.213599][ T6914] ? _local_bh_enable+0xa0/0xa0 [ 178.218491][ T6914] ? __dev_queue_xmit+0x1b64/0x2e50 [ 178.223745][ T6914] ? dev_queue_xmit+0x20/0x20 [ 178.228476][ T6914] ? memcpy+0x3c/0x60 [ 178.232493][ T6914] ? __copy_skb_header+0x3ba/0x4f0 [ 178.237651][ T6914] netlink_rcv_skb+0x1e9/0x430 [ 178.242455][ T6914] ? rtnetlink_bind+0x80/0x80 [ 178.247169][ T6914] ? netlink_ack+0xb10/0xb10 [ 178.251838][ T6914] netlink_unicast+0x78f/0x940 [ 178.256740][ T6914] netlink_sendmsg+0x8ba/0xbe0 [ 178.261552][ T6914] ? netlink_getsockopt+0x570/0x570 [ 178.266786][ T6914] ? aa_sock_msg_perm+0x94/0x150 [ 178.271780][ T6914] ? apparmor_socket_sendmsg+0x88/0x230 [ 178.277639][ T6914] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 178.282958][ T6914] ? security_socket_sendmsg+0x7c/0xa0 [ 178.288454][ T6914] ? netlink_getsockopt+0x570/0x570 [ 178.293783][ T6914] ____sys_sendmsg+0x5be/0x8f0 [ 178.298682][ T6914] ? __sys_sendmsg_sock+0x30/0x30 [ 178.303751][ T6914] ? import_iovec+0x6f/0xa0 [ 178.308292][ T6914] ___sys_sendmsg+0x236/0x2e0 [ 178.313015][ T6914] ? __sys_sendmsg+0x290/0x290 [ 178.317853][ T6914] __se_sys_sendmsg+0x1b7/0x2a0 [ 178.322742][ T6914] ? __x64_sys_sendmsg+0x80/0x80 [ 178.327709][ T6914] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 178.333838][ T6914] ? lockdep_hardirqs_on+0x94/0x140 [ 178.339176][ T6914] do_syscall_64+0x4c/0xa0 [ 178.343938][ T6914] ? clear_bhb_loop+0x30/0x80 [ 178.348646][ T6914] ? clear_bhb_loop+0x30/0x80 [ 178.353362][ T6914] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.359293][ T6914] RIP: 0033:0x7febe6b59559 [ 178.363753][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.383478][ T6914] RSP: 002b:00007febe4db0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.391952][ T6914] RAX: ffffffffffffffda RBX: 00007febe6ddffa0 RCX: 00007febe6b59559 [ 178.399978][ T6914] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 178.408006][ T6914] RBP: 00007febe6bf0b20 R08: 0000000000000000 R09: 0000000000000000 [ 178.416009][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.424029][ T6914] R13: 00007febe6de0038 R14: 00007febe6ddffa0 R15: 00007ffcc8c486e8 [ 178.432049][ T6914] [ 178.629408][ T6924] misc userio: No port type given on /dev/userio [ 178.719933][ T6930] loop8: detected capacity change from 0 to 512 [ 178.755876][ T6930] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.829512][ T6930] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,norecovery,dioread_nolock,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 178.852238][ T6930] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.938574][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.9.834'. [ 179.004424][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.9.834'. [ 179.069023][ T6939] ip_tables: iptables: counters copy to user failed while replacing table [ 179.514671][ T6922] loop9: detected capacity change from 0 to 32768 [ 179.567628][ T5340] loop9: p3 < p5 p6 p7 p8 > p4 < p9 p10 > [ 179.592601][ T5340] loop9: p6 start 50334720 is beyond EOD, truncated [ 179.618932][ T5340] loop9: p7 start 68608 is beyond EOD, truncated [ 179.688566][ T5340] loop9: p8 size 33554432 extends beyond EOD, truncated [ 179.743734][ T6891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.104468][ T5340] loop9: p10 start 50334720 is beyond EOD, truncated [ 180.590429][ T6922] loop9: p3 < p5 p6 p7 p8 > p4 < p9 p10 > [ 180.609996][ T4739] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.654181][ T6922] loop9: p6 start 50334720 is beyond EOD, truncated [ 180.680601][ T6955] device syzkaller0 entered promiscuous mode [ 180.691232][ T6922] loop9: p7 start 68608 is beyond EOD, truncated [ 180.761779][ T6962] FAULT_INJECTION: forcing a failure. [ 180.761779][ T6962] name fail_futex, interval 1, probability 0, space 0, times 0 [ 180.775350][ T6922] loop9: p8 size 33554432 extends beyond EOD, truncated [ 180.784855][ T6962] CPU: 0 PID: 6962 Comm: syz.0.847 Not tainted syzkaller #0 [ 180.792366][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 180.802458][ T6962] Call Trace: [ 180.805767][ T6962] [ 180.808734][ T6962] dump_stack_lvl+0x188/0x250 [ 180.813452][ T6962] ? show_regs_print_info+0x20/0x20 [ 180.818710][ T6962] ? load_image+0x410/0x410 [ 180.823255][ T6962] ? mark_lock+0x94/0x320 [ 180.827633][ T6962] ? __lock_acquire+0x13b3/0x7d40 [ 180.832283][ T4739] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.832785][ T6962] should_fail+0x383/0x4b0 [ 180.847505][ T6962] get_futex_key+0x1a1/0x12d0 [ 180.852252][ T6962] ? __lock_acquire+0x13b3/0x7d40 [ 180.857359][ T6962] ? futex_wait_restart+0x250/0x250 [ 180.862629][ T6962] futex_wake+0x101/0x540 [ 180.867028][ T6962] ? futex_wait+0x680/0x680 [ 180.871581][ T6962] ? verify_lock_unused+0x140/0x140 [ 180.876830][ T6962] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 180.882977][ T6962] ? verify_lock_unused+0x140/0x140 [ 180.888235][ T6962] do_futex+0xd83/0x12b0 [ 180.892665][ T6962] ? exc_page_fault+0x88/0x100 [ 180.897504][ T6962] ? lockdep_hardirqs_on+0x94/0x140 [ 180.902759][ T6962] ? exc_page_fault+0x88/0x100 [ 180.907702][ T6962] ? futex_exit_release+0x1c0/0x1c0 [ 180.912994][ T6962] ? __context_tracking_exit+0x4c/0x80 [ 180.918624][ T6962] __se_sys_futex+0x389/0x420 [ 180.923342][ T6962] ? __x64_sys_futex+0xf0/0xf0 [ 180.928159][ T6962] ? __x64_sys_futex+0x1d/0xf0 [ 180.932974][ T6962] do_syscall_64+0x4c/0xa0 [ 180.937423][ T6962] ? clear_bhb_loop+0x30/0x80 [ 180.942157][ T6962] ? clear_bhb_loop+0x30/0x80 [ 180.946898][ T6962] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.952828][ T6962] RIP: 0033:0x7f8da93c7559 [ 180.957306][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.976954][ T6962] RSP: 002b:00007f8da761e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 180.985424][ T6962] RAX: ffffffffffffffda RBX: 00007f8da964dfa8 RCX: 00007f8da93c7559 [ 180.993433][ T6962] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8da964dfac [ 181.001441][ T6962] RBP: 00007f8da964dfa0 R08: 002a2a4402310ca6 R09: 0000000000000000 [ 181.009467][ T6962] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 181.017473][ T6962] R13: 00007f8da964e038 R14: 00007ffeb6032db0 R15: 00007ffeb6032e98 [ 181.025500][ T6962] [ 181.038327][ T6922] loop9: p10 start 50334720 is beyond EOD, truncated [ 181.097299][ T6964] tipc: Enabled bearer , priority 0 [ 181.153129][ T4739] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.204875][ T6960] device syzkaller0 entered promiscuous mode [ 181.253893][ T6960] tipc: Resetting bearer [ 181.331912][ T4739] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.389142][ T6959] tipc: Resetting bearer [ 181.434628][ T6959] tipc: Disabling bearer [ 181.727674][ T6976] misc userio: No port type given on /dev/userio [ 182.125828][ T4776] udevd[4776]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 182.138568][ T4797] udevd[4797]: inotify_add_watch(7, /dev/loop9p9, 10) failed: No such file or directory [ 182.163137][ T6968] udevd[6968]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 182.174025][ T5336] udevd[5336]: inotify_add_watch(7, /dev/loop9p8, 10) failed: No such file or directory [ 182.191972][ T5340] udevd[5340]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 182.275945][ T7006] device syzkaller0 entered promiscuous mode [ 182.321167][ T7010] tipc: Enabled bearer , priority 0 [ 182.380107][ T7010] device syzkaller0 entered promiscuous mode [ 182.417839][ T7010] tipc: Resetting bearer [ 182.434565][ T7007] tipc: Resetting bearer [ 182.483013][ T7007] tipc: Disabling bearer [ 182.608575][ T7027] FAULT_INJECTION: forcing a failure. [ 182.608575][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 182.671694][ T7027] CPU: 0 PID: 7027 Comm: syz.6.866 Not tainted syzkaller #0 [ 182.679066][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 182.689196][ T7027] Call Trace: [ 182.692542][ T7027] [ 182.695507][ T7027] dump_stack_lvl+0x188/0x250 [ 182.700233][ T7027] ? show_regs_print_info+0x20/0x20 [ 182.705475][ T7027] ? load_image+0x410/0x410 [ 182.710025][ T7027] ? __might_sleep+0xf0/0xf0 [ 182.714692][ T7027] ? __lock_acquire+0x7d40/0x7d40 [ 182.719778][ T7027] should_fail+0x383/0x4b0 [ 182.724326][ T7027] should_failslab+0x5/0x20 [ 182.728897][ T7027] slab_pre_alloc_hook+0x51/0xc0 [ 182.733882][ T7027] __kmalloc+0x6b/0x340 [ 182.738085][ T7027] ? mpi_resize+0x75/0x1c0 [ 182.742562][ T7027] mpi_resize+0x75/0x1c0 [ 182.746865][ T7027] mpi_powm+0xb7b/0x2390 [ 182.751278][ T7027] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 182.757494][ T7027] ? mpihelp_cmp+0xb6/0xd0 [ 182.761947][ T7027] ? mpi_cmp+0x1b4/0x290 [ 182.766226][ T7027] rsa_enc+0x28f/0x3c0 [ 182.770341][ T7027] ? rsa_exit+0x20/0x20 [ 182.774547][ T7027] pkcs1pad_verify+0x465/0x670 [ 182.779362][ T7027] public_key_verify_signature+0x87f/0xd40 [ 182.785228][ T7027] ? public_key_free+0x80/0x80 [ 182.790072][ T7027] ? asymmetric_key_id_same+0x63/0xe0 [ 182.795543][ T7027] x509_check_for_self_signed+0x317/0x420 [ 182.801452][ T7027] x509_cert_parse+0x59c/0x7a0 [ 182.806372][ T7027] x509_key_preparse+0x60/0x5d0 [ 182.811291][ T7027] ? down_read+0x1aa/0x2e0 [ 182.815944][ T7027] asymmetric_key_preparse+0xa5/0x140 [ 182.821388][ T7027] key_create_or_update+0x432/0xa40 [ 182.826641][ T7027] ? security_key_permission+0x7c/0xa0 [ 182.832358][ T7027] ? key_type_put+0x20/0x20 [ 182.836916][ T7027] ? lookup_user_key_possessed+0x40/0x40 [ 182.842716][ T7027] ? __might_fault+0xb3/0x110 [ 182.847454][ T7027] __se_sys_add_key+0x34b/0x410 [ 182.852370][ T7027] ? __x64_sys_add_key+0xc0/0xc0 [ 182.857374][ T7027] ? lockdep_hardirqs_on+0x94/0x140 [ 182.862671][ T7027] ? __x64_sys_add_key+0x1c/0xc0 [ 182.867672][ T7027] do_syscall_64+0x4c/0xa0 [ 182.872133][ T7027] ? clear_bhb_loop+0x30/0x80 [ 182.876852][ T7027] ? clear_bhb_loop+0x30/0x80 [ 182.881598][ T7027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.887539][ T7027] RIP: 0033:0x7f20e282b559 [ 182.892001][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.912006][ T7027] RSP: 002b:00007f20e0a82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 182.920477][ T7027] RAX: ffffffffffffffda RBX: 00007f20e2ab1fa0 RCX: 00007f20e282b559 [ 182.928592][ T7027] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 182.936616][ T7027] RBP: 00007f20e28c2b20 R08: 00000000120ffbfb R09: 0000000000000000 [ 182.944643][ T7027] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 182.952696][ T7027] R13: 00007f20e2ab2038 R14: 00007f20e2ab1fa0 R15: 00007fff8c66b828 [ 182.960737][ T7027] [ 183.052824][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.865'. [ 183.118510][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.865'. [ 183.408923][ T7056] device syzkaller0 entered promiscuous mode [ 183.597612][ T7062] tipc: Enabled bearer , priority 0 [ 183.626024][ T7062] device syzkaller0 entered promiscuous mode [ 183.676098][ T7062] tipc: Resetting bearer [ 183.725194][ T7060] tipc: Resetting bearer [ 183.779909][ T7060] tipc: Disabling bearer [ 183.817701][ T7072] misc userio: No port type given on /dev/userio [ 183.851628][ T4739] device hsr_slave_0 left promiscuous mode [ 183.882219][ T4739] device hsr_slave_1 left promiscuous mode [ 183.900470][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.931128][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.956637][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.000046][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.029719][ T4739] device bridge_slave_1 left promiscuous mode [ 184.075157][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.102830][ T4739] device bridge_slave_0 left promiscuous mode [ 184.121455][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.148792][ T4739] device veth1_macvtap left promiscuous mode [ 184.162400][ T4739] device veth0_macvtap left promiscuous mode [ 184.179014][ T4739] device veth1_vlan left promiscuous mode [ 184.190847][ T4739] device veth0_vlan left promiscuous mode [ 184.638362][ T4739] team0 (unregistering): Port device team_slave_1 removed [ 184.667009][ T4739] team0 (unregistering): Port device team_slave_0 removed [ 184.682876][ T4739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.701426][ T4739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.796560][ T4739] bond0 (unregistering): Released all slaves [ 184.825892][ T7085] netlink: 60 bytes leftover after parsing attributes in process `syz.0.881'. [ 184.851185][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.859904][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.354020][ T7128] device syzkaller0 entered promiscuous mode [ 185.407662][ T7133] loop5: detected capacity change from 0 to 512 [ 185.430018][ T7130] device syzkaller0 entered promiscuous mode [ 185.480380][ T7130] [ 185.482776][ T7130] ============================================ [ 185.489295][ T7130] WARNING: possible recursive locking detected [ 185.495479][ T7130] syzkaller #0 Not tainted [ 185.499921][ T7130] -------------------------------------------- [ 185.506086][ T7130] syz.0.898/7130 is trying to acquire lock: [ 185.511996][ T7130] ffff88803c910108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 185.521174][ T7130] [ 185.521174][ T7130] but task is already holding lock: [ 185.528587][ T7130] ffff88803c910108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 185.537777][ T7130] [ 185.537777][ T7130] other info that might help us debug this: [ 185.545865][ T7130] Possible unsafe locking scenario: [ 185.545865][ T7130] [ 185.553339][ T7130] CPU0 [ 185.556648][ T7130] ---- [ 185.560036][ T7130] lock(&sch->q.lock); [ 185.564222][ T7130] lock(&sch->q.lock); [ 185.568405][ T7130] [ 185.568405][ T7130] *** DEADLOCK *** [ 185.568405][ T7130] [ 185.576572][ T7130] May be due to missing lock nesting notation [ 185.576572][ T7130] [ 185.584916][ T7130] 3 locks held by syz.0.898/7130: [ 185.589968][ T7130] #0: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 185.599591][ T7130] #1: ffff88803c910108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 185.609312][ T7130] #2: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 185.618974][ T7130] [ 185.618974][ T7130] stack backtrace: [ 185.624913][ T7130] CPU: 1 PID: 7130 Comm: syz.0.898 Not tainted syzkaller #0 [ 185.632237][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.642345][ T7130] Call Trace: [ 185.645649][ T7130] [ 185.648609][ T7130] dump_stack_lvl+0x188/0x250 [ 185.653325][ T7130] ? show_regs_print_info+0x20/0x20 [ 185.658564][ T7130] ? print_deadlock_bug+0x435/0x5d0 [ 185.663885][ T7130] ? _find_first_zero_bit+0xd1/0xf0 [ 185.669118][ T7130] __lock_acquire+0x67eb/0x7d40 [ 185.674066][ T7130] ? __lock_acquire+0x12df/0x7d40 [ 185.679235][ T7130] ? verify_lock_unused+0x140/0x140 [ 185.684559][ T7130] ? mark_lock+0x94/0x320 [ 185.688925][ T7130] ? __lock_acquire+0x13b3/0x7d40 [ 185.693992][ T7130] ? rcu_lock_release+0x5/0x20 [ 185.698796][ T7130] lock_acquire+0x19f/0x400 [ 185.703328][ T7130] ? __dev_queue_xmit+0xa2b/0x2e50 [ 185.708479][ T7130] ? read_lock_is_recursive+0x10/0x10 [ 185.713898][ T7130] ? rcu_read_lock_bh_held+0x76/0xf0 [ 185.719218][ T7130] ? rcu_read_lock_held+0x40/0x40 [ 185.724273][ T7130] _raw_spin_lock+0x2a/0x40 [ 185.728810][ T7130] ? __dev_queue_xmit+0xa2b/0x2e50 [ 185.733955][ T7130] __dev_queue_xmit+0xa2b/0x2e50 [ 185.738937][ T7130] ? dev_queue_xmit+0x20/0x20 [ 185.743643][ T7130] ? __kernel_text_address+0x9a/0x100 [ 185.749047][ T7130] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 185.755004][ T7130] ? lockdep_hardirqs_on+0x94/0x140 [ 185.760233][ T7130] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 185.766162][ T7130] ? _raw_spin_unlock+0x40/0x40 [ 185.771045][ T7130] ? stack_trace_save+0xa6/0xf0 [ 185.775926][ T7130] ? netdev_core_pick_tx+0x300/0x300 [ 185.781241][ T7130] sch_frag_xmit_hook+0x2d8/0x1be0 [ 185.786390][ T7130] ? __kasan_slab_alloc+0xa9/0xc0 [ 185.791447][ T7130] ? __kasan_slab_alloc+0x92/0xc0 [ 185.796500][ T7130] ? slab_post_alloc_hook+0x4c/0x380 [ 185.801818][ T7130] ? kmem_cache_alloc+0x15d/0x280 [ 185.806885][ T7130] ? skb_clone+0x1bd/0x350 [ 185.811337][ T7130] ? tcf_mirred_act+0x5b0/0x1640 [ 185.816312][ T7130] ? tcf_action_exec+0x177/0x570 [ 185.821280][ T7130] ? basic_classify+0x1ae/0x2c0 [ 185.826167][ T7130] ? tcf_classify+0x218/0xad0 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 185.830877][ T7130] ? qfq_enqueue+0x31b/0x1310 [ 185.835593][ T7130] ? dev_qdisc_enqueue+0x48/0x210 [ 185.840642][ T7130] ? __dev_queue_xmit+0xbde/0x2e50 [ 185.845780][ T7130] ? packet_sendmsg+0x3b4f/0x4de0 [ 185.850926][ T7130] ? mq_dump_class_stats+0x430/0x430 [ 185.856314][ T7130] ? do_syscall_64+0x4c/0xa0 [ 185.860935][ T7130] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.867048][ T7130] ? __copy_skb_header+0x3ba/0x4f0 [ 185.872316][ T7130] ? memcpy+0x3c/0x60 [ 185.876325][ T7130] ? __copy_skb_header+0x3ba/0x4f0 [ 185.881461][ T7130] ? __skb_clone+0x446/0x6c0 [ 185.886069][ T7130] ? skb_clone+0x1f1/0x350 [ 185.890503][ T7130] ? tcf_mirred_act+0x59a/0x1640 [ 185.895608][ T7130] tcf_mirred_act+0xc5a/0x1640 [ 185.900425][ T7130] tcf_action_exec+0x177/0x570 [ 185.905221][ T7130] basic_classify+0x1ae/0x2c0 [ 185.909928][ T7130] tcf_classify+0x218/0xad0 [ 185.914468][ T7130] qfq_enqueue+0x31b/0x1310 [ 185.919005][ T7130] ? sch_tree_lock+0x110/0x110 [ 185.923815][ T7130] ? do_raw_spin_lock+0x128/0x2f0 [ 185.928879][ T7130] ? __rwlock_init+0x140/0x140 [ 185.933667][ T7130] ? __alloc_skb+0x473/0x750 [ 185.938299][ T7130] dev_qdisc_enqueue+0x48/0x210 [ 185.943208][ T7130] __dev_queue_xmit+0xbde/0x2e50 [ 185.948182][ T7130] ? dev_queue_xmit+0x20/0x20 [ 185.952887][ T7130] ? virtio_net_hdr_to_skb+0xca1/0x1260 [ 185.958501][ T7130] ? packet_cached_dev_get+0x270/0x270 [ 185.963985][ T7130] ? skb_put+0x10e/0x200 [ 185.968250][ T7130] packet_sendmsg+0x3b4f/0x4de0 [ 185.973145][ T7130] ? aa_sk_perm+0x7dc/0x910 [ 185.977673][ T7130] ? packet_getsockopt+0x9a0/0x9a0 [ 185.982816][ T7130] ? aa_setprocattr_changehat+0x31e/0x580 [ 185.988569][ T7130] ? apparmor_socket_sendmsg+0x88/0x230 [ 185.994138][ T7130] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 185.999444][ T7130] ? security_socket_sendmsg+0x7c/0xa0 [ 186.004924][ T7130] ? packet_getsockopt+0x9a0/0x9a0 [ 186.010057][ T7130] ____sys_sendmsg+0x5be/0x8f0 [ 186.014844][ T7130] ? __sys_sendmsg_sock+0x30/0x30 [ 186.019894][ T7130] ? import_iovec+0x6f/0xa0 [ 186.024429][ T7130] ___sys_sendmsg+0x236/0x2e0 [ 186.029147][ T7130] ? __sys_sendmsg+0x290/0x290 [ 186.034060][ T7130] __se_sys_sendmsg+0x1b7/0x2a0 [ 186.038939][ T7130] ? __x64_sys_sendmsg+0x80/0x80 [ 186.043893][ T7130] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 186.049919][ T7130] ? lockdep_hardirqs_on+0x94/0x140 [ 186.055134][ T7130] do_syscall_64+0x4c/0xa0 [ 186.059570][ T7130] ? clear_bhb_loop+0x30/0x80 [ 186.064260][ T7130] ? clear_bhb_loop+0x30/0x80 [ 186.068962][ T7130] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.074871][ T7130] RIP: 0033:0x7f8da93c7559 [ 186.079302][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.098929][ T7130] RSP: 002b:00007f8da761e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.107360][ T7130] RAX: ffffffffffffffda RBX: 00007f8da964dfa0 RCX: 00007f8da93c7559 [ 186.115351][ T7130] RDX: 0000000000004005 RSI: 0000200000002b80 RDI: 0000000000000007 [ 186.123338][ T7130] RBP: 00007f8da945eb20 R08: 0000000000000000 R09: 0000000000000000 [ 186.131328][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.139308][ T7130] R13: 00007f8da964e038 R14: 00007f8da964dfa0 R15: 00007ffeb6032e98 [ 186.147392][ T7130] [ 186.266220][ T7136] device syzkaller0 entered promiscuous mode [ 186.461809][ T7133] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 194.148223][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.154866][ T1423] ieee802154 phy1 wpan1: encryption failed: -22