last executing test programs: 10m11.907536141s ago: executing program 0 (id=1): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, 0x0, 0x2141, 0x1d1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000180)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000002c0)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000300)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 10m9.120171327s ago: executing program 0 (id=14): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019380)=0x7) listen(0xffffffffffffffff, 0x5) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000019400)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000019440)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 10m6.344244696s ago: executing program 0 (id=18): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, 0x0, 0x40010120) socket$packet(0x11, 0x3, 0x300) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f00000008c0)={0x0, 0xd4ad, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x400, 0xfffffffd, 0x12b}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) connect$l2tp6(r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r8, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x47}, 0x4}], 0x1, 0x40000002, 0x0) 9m49.627654665s ago: executing program 32 (id=18): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, 0x0, 0x40010120) socket$packet(0x11, 0x3, 0x300) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f00000008c0)={0x0, 0xd4ad, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x400, 0xfffffffd, 0x12b}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) connect$l2tp6(r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r8, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x47}, 0x4}], 0x1, 0x40000002, 0x0) 2m5.365152249s ago: executing program 2 (id=666): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x4088) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80080, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = io_uring_setup(0x8309d, &(0x7f00000003c0)={0x0, 0x5acf, 0x40}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000440)=[{0x0}], 0x1) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000480)={'pcmda12\x00', [0x140, 0x40, 0x7, 0x40, 0x8, 0x8, 0x8, 0x6, 0xffff2eaa, 0xf, 0x2, 0x76428e09, 0x3, 0x1100008, 0x47, 0x209e9c, 0x101, 0x7d, 0x9, 0x784c, 0x40, 0x8, 0x7, 0x7, 0x17e5, 0x200001, 0x0, 0x4, 0x10001fc, 0x1000000, 0xc]}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfe, 0x0, 0x10}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r6, 0xffffff01, 0x3b, 0x9, 0x1, 0x2, 0x3bac, 0x4, {r6, @in6={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff27}}, 0x0, 0x2, 0x3, 0xe, 0x4cf}}, &(0x7f0000000380)=0xb0) 2m4.078264623s ago: executing program 2 (id=668): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ptype\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x2c, 0x0, 0x13, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4400c020}, 0x40800) preadv(r3, 0x0, 0x0, 0x3, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 2m1.890311591s ago: executing program 2 (id=670): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f00000002c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000192c0)=0x7) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000019300), 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x44, &(0x7f00000001c0)) 2m0.689312426s ago: executing program 2 (id=672): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit(0xe, &(0x7f0000000140)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000740)={0x90000000}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x4001af84, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)='\x00'/87, &(0x7f0000000640)='\x00'/112, 0xc000}) sched_setscheduler(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="7b0282dd1a923cd48999305a0cd21d19470e6fe191b23b92e706d1961b5064e1f6774af43fc527fa87665eb1949815ec767deb7e3324fab05fc9944480150dd75e3ecb577cc233cbd6114a57ed7af091c970389dda702e56dd23e714c2929cfa986b3b833d93da4f4b3a9dffb81b22940d1ea86643548ca9dd01e782e6aff9538ab957c11dd5dab4f39bf75fcfce11b387c1ad971e1ec8c4f34fbe38c9d21b9cf0b571cd7687ab18d68233a346a7b0b3c1dce84524e1a3e37e6c867892", @ANYBLOB="965a6026c03f8061d97398675c0df52dc5a32d2f6705708c451342a1ecbf3ad997a1349a3ae79363627a4b752fcd02fcfdd68e6e41ecb6ae66c6daaa1374cb0af33b54138747d2a4ea4ac710aa125cb3f18b7df383f50890c6417c9e5f7a9687592b72fbabf729e8529763ab8d63f9b85a3ecee6"], 0x1, 0x5ea, &(0x7f0000000fc0)="$eJzs3U1vG8cdB+Df0pJsuqjDJHaSFi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbBpWzCtBBJTKEFR2H299hskRSGfe+qh6MFAe+5HqIAecijQu24udrmUGEuRpVg2qfh5gOHMcHZnZ/7eHXGXMBjgubX4bqYfpMjixbfXy/rmRqe3udG5MywnOZmkkUwNshQrSTGdXM0g5Rvlm3V3xRcd571P3lr4rH3/3qA2Vadq+8Z++x3M3TplNsmJOj+q/q49cX/F9gzLgF0YBg7G7eEudw+z+xNet8AkKAZ/N3dpJaeTnKo/B6ReHRrPdnRH71CrHAAAABxTL2xlK+s5M+5xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHFS//5/UafGsDybYvj7/zP1e6nLx9qDcQ8AAAAAAAAAAI7Ad7aylfWcGdYfFtV3/uerytnq9Wv5MGvpZjWXsp6l9NPPatpJWiMdzawv9fur7QPsOb/nnvPPZr4AAAAAAAAA8BX16yzufP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACToEhODLIqnR2WW2lMJTmVZKbc7m7y92H5OHsw7gEAAADAM/DCVraynjPD+sOiuud/pbrvP5UPs5J+ltNPL91cr54FDO76G5sbnd7mRudOmXb3+6P/HWoYVY8ZPHvY+8hz1RbnqvY/zySL+Wl+nouZzTtZzXJ+kaX0081sflKVllKkVT+9aA3Hufd4r36u9s7jxvpaNZJmbmS5GtulXMv76eV6GtUcqm32P+K9MjrFD2sHjNH1Oi9n9Mc6nwytKiLT2xGZq2NfRuPF/SNxyPPk0SO109h+BnX2KcT8dJ2Xsf79RMd8fuTse2X/SCTn//Ptv97qrdy+dWPt4uRM6Ut6NBKdkUi8+lxFYqaOxmAVHa6Wpcevluerfc9kOT/L+7mebt7MQt7MfN7IG5nLQq6MxPXc46+1m0kOc61d+F5daCb5Q51PhjKuL47EdXSla1Vto+/sROmlo1+Rpr5ZF8pj/KbOJ8OjkWiPROLl/SPxp4fl61pv5fbqraUPDni879Z5edn+bqLW5vJ8ean8x6pqnz87yraX92xrV21nt9sau9rO/fvrddvjrtSZ+jPc7p7mq7ZX92zrVG2vjbTt9SkHgIl3+vXTM83/Nv/V/LT52+at5tunfnxy4eS3ZjL9z6m/nfhL437jB8Xr+TS/2rn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvry1jz6+vdTrdVcVFI5tYao+mydlPF+FwpgXJuCpu9y/88HltY8+/v7ynaWb3ZvdlU6nfWV+4crC/JXLN5Z73bnB67iHCTwFO3/0xz0SAAAAAAAAAAAA4KCexX8nGPccAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgONt8d1MP0iR9tylubK+udHplWlY3tlyKkkjSfHLpPhHcjWDlNZId8UXHee9T95a+Kx9/95OX1PD7Rv77Xcwd+uU2SQn6vyo+rv2xP0V2zMsA3ZhGDgYt/8HAAD//6ulC6Y=") r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000380)="08000700b07d5a6e", 0x8}], 0x1}, 0x4840) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000780)) flock(0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) rmdir(0x0) 1m53.633890313s ago: executing program 2 (id=679): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x20cf5) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{0x81, 0x3}, {0x4, 0x1ff}], 0xee01}, 0x18, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000001280)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./file2\x00', 0x2c3) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380), 0x0, &(0x7f00000013c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000001400)='./file0/file1\x00', 0xe2) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW2(r3, 0x5437, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r5, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001240)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m53.178711759s ago: executing program 2 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x800001000089}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f000001a040)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000033080), 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x16) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m37.643261641s ago: executing program 33 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x800001000089}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f000001a040)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000033080), 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x16) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 39.12604516s ago: executing program 3 (id=766): setns(0xc9, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000045}, 0x850) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f00000005c0)=""/102368, 0x18fe0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000019680), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='7', 0x1) userfaultfd(0x80801) 36.294545802s ago: executing program 3 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000180)='./pipefs\x00', 0xd) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./pipefs/gssd/clntXX/gssd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 30.254998057s ago: executing program 4 (id=787): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r2, 0x0, 0x0}, 0x20) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0xff, 0x3, 0x8, 0xb7b, 0x8000, 0x3}, {0x4000000f, 0x7fffffff, 0x1, 0x9e4, 0x0, 0x2, 0x5}]}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000540)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') connect$x25(r4, &(0x7f0000000640), 0x12) 28.769402214s ago: executing program 4 (id=778): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x9) unshare(0x6020400) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r2, 0xa438}, {r2, 0x210}], 0x2, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) accept$inet(r0, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="ab", 0x1, 0x1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 28.734598869s ago: executing program 3 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x651, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448f0, &(0x7f00000005c0)) recvmmsg(r1, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6) munlock(&(0x7f0000629000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) capset(0x0, 0x0) pipe2(0x0, 0x800) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000d40)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}, 0xd5}) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) write(r4, &(0x7f00000006c0)='keyA keyB \\', 0xb) 23.406762062s ago: executing program 3 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000192c0)=0x7) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000019300), 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x44, &(0x7f00000001c0)) 23.404783728s ago: executing program 4 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000900)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000500)={r4, &(0x7f0000000540), &(0x7f0000000580)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r4, &(0x7f0000000600), 0x0}, 0x20) sched_setaffinity(r2, 0x47, &(0x7f0000019900)=0x7) pipe(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748edd, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0xc8, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc}]}, 0x30}}, 0x0) 23.403177378s ago: executing program 1 (id=788): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) timerfd_create(0x8, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000", 0xb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x2c, 0x11, 0x2}], 0x10, 0xffffffff}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/dynamic_debug/control\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='file device_pm.c +p\n', 0x14) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000240), 0x0) 21.457218356s ago: executing program 4 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000003f00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001cf00)=0x7) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000200)='\x00', 0x120) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f000001d000), 0x2800) r4 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, 0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x0, 0x100}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000400)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x101, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f00000004c0)) 20.896957192s ago: executing program 5 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) request_key(&(0x7f00000008c0)='dns_resolver\x00', &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000940)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0xfffffffffffffffe) r3 = socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) write(r4, &(0x7f0000000980)="240000002a0001039900000000000000000000000100"/36, 0x24) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r5 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000340)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340), 0x171}}], 0x400000000000172, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x0, 0x523, &(0x7f0000000380)="$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") 17.997117525s ago: executing program 3 (id=792): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0025bd7000fbdbdf250a003800", @ANYRES32=0x0, @ANYBLOB="31d9000014000100fe80000000000000000000000000002d14000100fc020000000000000000000000000001080002000400000014000100fe880000000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000100)={&(0x7f00000ab000/0x4000)=nil, 0x4000}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="ee0200007d01000005ad010000000000150000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b6376666f782502000000000031ffadbc920000003800704a86cec622007dfa673effeb09b5311f5bde054000000000187b8200b5002fa9595fcb14034354b9fd9ef196a51cd5157adc81010000001200cfb6000000000000000000000000000000001501f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a3700ff6b7acf16b47b52cb3b22b3cd5840007e37f20fdf36e13f78daae604801eb68b15be7f6f532bdf44760a9d3cd9edb8cee867ae38a926902e2936ec9454ce5c507b5860c4049216d1f3fb741af1e2e1b00e946b945f978eca30600f8d56b6eef3a9fc7c3d01027250adde8a2e35dea0401be2a59fe983f0bf34eabf92a4d7d79fe817c010f557fc73b50cd44ac02318a8d200f49e18d3b8886b8a6f554fc29402370c0fc5bbeebb0de3852808e12dca31cee9db2f323ed826fe4fa2df3b9ceaa2c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390788a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2ee) 17.994183649s ago: executing program 5 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000192c0)=0x7) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000019300), 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x44, &(0x7f00000001c0)) 17.333544372s ago: executing program 1 (id=793): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = open(&(0x7f0000000100)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f00000004c0)=""/224, 0xe0) getdents64(r0, &(0x7f00000005c0)=""/224, 0xe0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="b800000019000100000000001f2e5e70ffdc2a72db67b9f2eda4d4cf000000000000000000000000ac1e0000000000000000000000004e1f00000000b851af5ac383344b0000eb10cc11b7ae08d1461b0693f98143671d6f34aa1dbf85735a5dba24ec09ae24273f5667a187e8b23bca45d1a2cc762b311e9f19dc5a5eddd487a6b3ccf5c0a2594eff8adb9b1a7e361287ef800b039a9e6b41781b8c511ae85678fa86102021369586e07780c5a002d3fd7b95c990f513791cafc4550a5b8c3374130329c851944097b68764bf804a20814633a391d307c038d6604eb2da250ed1b7da2ed21169d3d3600640699637a7511fd2b487e0a79464df640b8b38c5fa8089c9f0f55651fcc6484a4b67cf9b99b1f0d40cd72a3b7117bb7b512a220fef662e09c6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000feffffffffffffff06000000000000000000000000000000020000000000000043e00000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000002000000008000000001020000000000"], 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x80d4) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x96f23147092a967e, 0x3c}, {0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x2190, &(0x7f0000000100)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) 15.295058971s ago: executing program 6 (id=794): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @loopback, 0x5}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write(0xffffffffffffffff, &(0x7f00000000c0)="14000000", 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x40000000000032a, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x150) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0), 0x171}}], 0x400000000000172, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x9, &(0x7f0000000480)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000680)='\x00'/14, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.29352604s ago: executing program 1 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0xd7a10da4a7122766, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000019340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f00000193c0), &(0x7f0000019400), &(0x7f0000019440)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000019480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019540)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000019580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddc, 0x80, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x9, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x800, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 15.292283123s ago: executing program 5 (id=795): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x8000, 0x1000000003, 0x1ffffffffffd, 0x5, 0x2d391, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x9, 0x0, 0xfffffffffffffffd, 0x5], 0xeeee8000, 0xa02}) ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x6, 0x8b, 0x4bc}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13.929686169s ago: executing program 1 (id=796): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 11.597740583s ago: executing program 4 (id=797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f00000005c0)=""/102392, 0x18ff8) set_mempolicy(0x6, &(0x7f0000019600)=0x8000000000000001, 0xe0) mount(&(0x7f0000019680)=@filename='127.0.0.1:file0\x00', 0x0, &(0x7f0000019700)='nfs4\x00', 0x0, &(0x7f0000019740)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000019840)={0x0, 0x9, 0x1, [0x7ff, 0xe1, 0x1f9, 0x10000, 0x100000000], [0x2, 0x7, 0x8, 0x3, 0x3, 0x100, 0xbe2e, 0x7, 0x2, 0xfffffffffffffffe, 0x8, 0x7, 0x8, 0x4, 0x2ed1, 0x8, 0x58d7, 0x3, 0x5, 0x7, 0x4, 0xfffffffffffffff7, 0x7d, 0x31cdef52, 0x7, 0x40, 0x6, 0xfffffffffffff000, 0x3, 0xff, 0x1, 0x8, 0x0, 0x696, 0x7, 0x7bee, 0x7, 0x2, 0x3, 0x3, 0xfffffffffffffd0e, 0x9, 0x8, 0x3709, 0xf991, 0x9, 0x3, 0xffffffffffffff6d, 0x8, 0x1, 0x5, 0x3, 0x2, 0xffffffffffffffff, 0xff, 0x8ae1, 0x9, 0x7, 0x52ea, 0x4, 0x6, 0x1ff, 0x6, 0x401, 0x7, 0x400, 0x7, 0x2, 0x602af74b, 0x1, 0x7, 0x9, 0x6, 0xd, 0x8789, 0x7, 0x8, 0x0, 0x2, 0xfffffffffffff7b6, 0x3, 0x7ea, 0x800, 0xfffffffffffffff7, 0x5d1, 0x7fffffffffffffff, 0x6, 0x7, 0x0, 0x401, 0x2, 0x7, 0x3ff, 0x7, 0x80000001, 0x3, 0x3, 0x2, 0xd, 0x10, 0x6, 0x8, 0x8, 0x6, 0x2, 0x9, 0x1, 0x3, 0x7, 0x7fffffff, 0x56b, 0x7fff, 0x8000, 0x7, 0x5, 0x6, 0x3, 0x400, 0xffffffffffffff7f, 0x7f, 0x6]}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000019d40)={0x10}) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0x110}}, 0x0) 11.479766681s ago: executing program 6 (id=798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004a04003c00680000ff069078e0000001000000009402890374830f20ac1414aa7f000001000000004e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="510a0074780080e7418ceb"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000003080)=ANY=[@ANYBLOB="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"], &(0x7f0000004240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000004280)={0x3, 0x8, &(0x7f0000004340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000005500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000055c0)={@cgroup=r3, r3, 0x2f, 0x202c, 0x4}, 0xa3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000004c0)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) r5 = syz_open_procfs(0x0, &(0x7f00000015c0)='maps\x00') pread64(r5, &(0x7f0000002040)=""/4103, 0x1007, 0x4b) 10.492659124s ago: executing program 3 (id=799): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000171401"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="00012dbd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x21081e, &(0x7f0000000940)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000980)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000e80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000ec0)={0x4, 0x0, 0x3, 0x8, 0x6, 0x6, 0x20000001002, 0xf64, 0xfffffffd}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='.\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000f80)='./file1\x00', &(0x7f0000000fc0), &(0x7f0000001000)=ANY=[], 0x841, 0x0) fchown(r5, 0xee00, 0xee01) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000740), 0x8002) write$binfmt_aout(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r7, r6, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "f431f310823660b2", "5976101a9c55ec1eb6d9ff220b56f0a0", "af358000", "20b8191b09d6ced4"}, 0x28) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004"], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000000)=""/177, 0x7ee9}) 9.473347528s ago: executing program 6 (id=800): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f00001eb000/0x2000)=nil, 0x800000, 0x0, 0xf4ffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) 9.337268495s ago: executing program 5 (id=801): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000000, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101400, 0x100) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newtaction={0x14, 0x1c, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 8.562164732s ago: executing program 6 (id=803): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r1, 0x20000800, 0x81, &(0x7f0000000200), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="b0", 0x1, 0x40811, 0x0, 0x0) close(0x4) acct(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_flowlabel\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x20a02, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f00005b0000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80010, 0xffffffffffffffff, 0x20000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0ffffff, 0x0, 0x0, 0x0, 0xd0ffffff}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @ldst={0x6, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000500)='syzkaller\x00', 0x6}, 0x94) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x103e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x58, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x43fb, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x2, 0x2, {0x7, 0x25, 0x1, 0xc, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x10, 0x8, {0x7, 0x25, 0x1, 0x8, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x81d}}]}) 7.03678524s ago: executing program 5 (id=804): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183842, 0x0) r1 = getpid() r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1e, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$P9_RLINK(r0, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x10448) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000440)=""/196, &(0x7f0000000540)=0xc4) 5.405455106s ago: executing program 6 (id=806): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x2a, 0x2, 0x9) bind$inet(r1, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d"], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x111) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) chdir(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) 3.980686296s ago: executing program 4 (id=807): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1}}}}}}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffe88}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f00000194c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000019500)='./trace\x00', &(0x7f0000019540)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019580)='./trace/trace_clock\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019600)='./trace/trace\x00', 0x0, 0x0) 2.639693675s ago: executing program 5 (id=808): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x10800, &(0x7f0000000000)=ANY=[], 0x11, 0x193, &(0x7f00000003c0)="$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") r0 = epoll_create(0xe7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000d80)={0xa, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000dc0)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000e00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f80)=0x6) fcntl$lock(r0, 0x24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) setresuid(0xee01, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_mount_image$ext4(&(0x7f0000001100)='ext4\x00', &(0x7f0000001140)='./file1\x00', 0x21081e, &(0x7f0000001180)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0xfe, 0x506, &(0x7f00000011c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001700)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$loop(0x0, 0x8f, 0x40240) 2.091633907s ago: executing program 6 (id=809): socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='100', 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='5', 0x1) r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='1', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_mount_image$f2fs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000012600)=ANY=[@ANYBLOB="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"], 0x1d, 0x55a8, &(0x7f00000006c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000006e00)='./file0\x00', 0x0, &(0x7f000000cdc0)=ANY=[@ANYBLOB="6e6f666c7573685f6d657267652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c6572726f72733d63246e74696e75652c64697361626c655f726f6c6c5f666f72776172642c6261636b677291756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c6e6f666c7573685f6d657267652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6d6f64653d61646170746976652c6572726f72733d72656d6f756e742d726f2c6e6f696e6c696e655f64656e7472792c00"], 0x1, 0x550e, &(0x7f000000cec0)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$set_reqkey_keyring(0xe, 0x3) sendmsg$NFT_BATCH(r3, &(0x7f0000012400)={0x0, 0x0, &(0x7f0000012440)={&(0x7f0000012480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f78790000000004000280140000001100"], 0xcc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000012580)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 1.320722987s ago: executing program 1 (id=810): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit(0xe, &(0x7f0000000140)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000740)={0x90000000}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x4001af84, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)='\x00'/87, &(0x7f0000000640)='\x00'/112, 0xc000}) sched_setscheduler(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="7b0282dd1a923cd48999305a0cd21d19470e6fe191b23b92e706d1961b5064e1f6774af43fc527fa87665eb1949815ec767deb7e3324fab05fc9944480150dd75e3ecb577cc233cbd6114a57ed7af091c970389dda702e56dd23e714c2929cfa986b3b833d93da4f4b3a9dffb81b22940d1ea86643548ca9dd01e782e6aff9538ab957c11dd5dab4f39bf75fcfce11b387c1ad971e1ec8c4f34fbe38c9d21b9cf0b571cd7687ab18d68233a346a7b0b3c1dce84524e1a3e37e6c867892", @ANYBLOB="965a6026c03f8061d97398675c0df52dc5a32d2f6705708c451342a1ecbf3ad997a1349a3ae79363627a4b752fcd02fcfdd68e6e41ecb6ae66c6daaa1374cb0af33b54138747d2a4ea4ac710aa125cb3f18b7df383f50890c6417c9e5f7a9687592b72fbabf729e8529763ab8d63f9b85a3ecee6"], 0x1, 0x5ea, &(0x7f0000000fc0)="$eJzs3U1vG8cdB+Df0pJsuqjDJHaSFi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbBpWzCtBBJTKEFR2H299hskRSGfe+qh6MFAe+5HqIAecijQu24udrmUGEuRpVg2qfh5gOHMcHZnZ/7eHXGXMBjgubX4bqYfpMjixbfXy/rmRqe3udG5MywnOZmkkUwNshQrSTGdXM0g5Rvlm3V3xRcd571P3lr4rH3/3qA2Vadq+8Z++x3M3TplNsmJOj+q/q49cX/F9gzLgF0YBg7G7eEudw+z+xNet8AkKAZ/N3dpJaeTnKo/B6ReHRrPdnRH71CrHAAAABxTL2xlK+s5M+5xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHFS//5/UafGsDybYvj7/zP1e6nLx9qDcQ8AAAAAAAAAAI7Ad7aylfWcGdYfFtV3/uerytnq9Wv5MGvpZjWXsp6l9NPPatpJWiMdzawv9fur7QPsOb/nnvPPZr4AAAAAAAAA8BX16yzufP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACToEhODLIqnR2WW2lMJTmVZKbc7m7y92H5OHsw7gEAAADAM/DCVraynjPD+sOiuud/pbrvP5UPs5J+ltNPL91cr54FDO76G5sbnd7mRudOmXb3+6P/HWoYVY8ZPHvY+8hz1RbnqvY/zySL+Wl+nouZzTtZzXJ+kaX0081sflKVllKkVT+9aA3Hufd4r36u9s7jxvpaNZJmbmS5GtulXMv76eV6GtUcqm32P+K9MjrFD2sHjNH1Oi9n9Mc6nwytKiLT2xGZq2NfRuPF/SNxyPPk0SO109h+BnX2KcT8dJ2Xsf79RMd8fuTse2X/SCTn//Ptv97qrdy+dWPt4uRM6Ut6NBKdkUi8+lxFYqaOxmAVHa6Wpcevluerfc9kOT/L+7mebt7MQt7MfN7IG5nLQq6MxPXc46+1m0kOc61d+F5daCb5Q51PhjKuL47EdXSla1Vto+/sROmlo1+Rpr5ZF8pj/KbOJ8OjkWiPROLl/SPxp4fl61pv5fbqraUPDni879Z5edn+bqLW5vJ8ean8x6pqnz87yraX92xrV21nt9sau9rO/fvrddvjrtSZ+jPc7p7mq7ZX92zrVG2vjbTt9SkHgIl3+vXTM83/Nv/V/LT52+at5tunfnxy4eS3ZjL9z6m/nfhL437jB8Xr+TS/2rn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvry1jz6+vdTrdVcVFI5tYao+mydlPF+FwpgXJuCpu9y/88HltY8+/v7ynaWb3ZvdlU6nfWV+4crC/JXLN5Z73bnB67iHCTwFO3/0xz0SAAAAAAAAAAAA4KCexX8nGPccAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgONt8d1MP0iR9tylubK+udHplWlY3tlyKkkjSfHLpPhHcjWDlNZId8UXHee9T95a+Kx9/95OX1PD7Rv77Xcwd+uU2SQn6vyo+rv2xP0V2zMsA3ZhGDgYt/8HAAD//6ulC6Y=") r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000380)="08000700b07d5a6e", 0x8}], 0x1}, 0x4840) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000780)) flock(0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) rmdir(0x0) 0s ago: executing program 1 (id=811): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d000100000008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001040000", @ANYBLOB="000000000000000028001280"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x1561, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x2, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x2, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000300)={0x0, 0x8, 0x6, 0x1, 0xe4}) syz_emit_ethernet(0x32, &(0x7f00000004c0)=ANY=[@ANYBLOB="35ab2798d003aaaaaaaaaabb"], 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): 7779] [ 384.076530][ T7779] F2FS-fs (loop1): Failed to create workqueue [ 384.155183][ T7779] FAULT_INJECTION: forcing a failure. [ 384.155183][ T7779] name failslab, interval 1, probability 5, space 0, times 91 [ 384.155214][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.1.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.155239][ T7779] Tainted: [L]=SOFTLOCKUP [ 384.155245][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 384.155256][ T7779] Call Trace: [ 384.155263][ T7779] [ 384.155270][ T7779] dump_stack_lvl+0xe8/0x150 [ 384.155306][ T7779] should_fail_ex+0x3eb/0x540 [ 384.155330][ T7779] should_failslab+0xa8/0x100 [ 384.155353][ T7779] ? security_file_alloc+0x34/0x310 [ 384.155375][ T7779] kmem_cache_alloc_noprof+0x9c/0x600 [ 384.155402][ T7779] ? rcu_is_watching+0x16/0xb0 [ 384.155421][ T7779] ? security_file_alloc+0x34/0x310 [ 384.155448][ T7779] security_file_alloc+0x34/0x310 [ 384.155471][ T7779] init_file+0x90/0x2b0 [ 384.155499][ T7779] alloc_empty_file+0x74/0x1d0 [ 384.155525][ T7779] alloc_file_pseudo+0x110/0x1e0 [ 384.155555][ T7779] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 384.155591][ T7779] __shmem_file_setup+0x2e9/0x370 [ 384.155623][ T7779] ? __pfx___shmem_file_setup+0x10/0x10 [ 384.155661][ T7779] memfd_alloc_file+0x99/0x4c0 [ 384.155690][ T7779] ? __pfx_memfd_alloc_file+0x10/0x10 [ 384.155729][ T7779] __se_sys_memfd_create+0x31f/0x410 [ 384.155760][ T7779] do_syscall_64+0x171/0x540 [ 384.155784][ T7779] ? trace_irq_disable+0x3b/0x140 [ 384.155801][ T7779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.155819][ T7779] ? clear_bhb_loop+0x70/0xc0 [ 384.155843][ T7779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.155861][ T7779] RIP: 0033:0x00007fa5923a94d9 [ 384.155879][ T7779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.155894][ T7779] RSP: 002b:00007fa593260df8 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 384.155914][ T7779] RAX: ffffffffffffffda RBX: 000000000000550e RCX: 00007fa5923a94d9 [ 384.155927][ T7779] RDX: 00007fa593260ea0 RSI: 0000000000000000 RDI: 00007fa592438241 [ 384.155939][ T7779] RBP: 0000200000000100 R08: 000020000000cec0 R09: 00007fa5932619c8 [ 384.155952][ T7779] R10: 00007fa593260ee0 R11: 0000000000000206 R12: 00007fa593260ea0 [ 384.155964][ T7779] R13: 0000000000000000 R14: 000020000000cec0 R15: 00007fa593260ee0 [ 384.155992][ T7779] [ 384.170299][ T7779] FAULT_INJECTION: forcing a failure. [ 384.170299][ T7779] name failslab, interval 1, probability 5, space 0, times 90 [ 384.170328][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.1.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.170353][ T7779] Tainted: [L]=SOFTLOCKUP [ 384.170359][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 384.170369][ T7779] Call Trace: [ 384.170377][ T7779] [ 384.170384][ T7779] dump_stack_lvl+0xe8/0x150 [ 384.170418][ T7779] should_fail_ex+0x3eb/0x540 [ 384.170440][ T7779] ? __pfx_sock_alloc_inode+0x10/0x10 [ 384.170462][ T7779] should_failslab+0xa8/0x100 [ 384.170488][ T7779] ? __pfx_sock_alloc_inode+0x10/0x10 [ 384.170508][ T7779] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 384.170539][ T7779] ? sock_alloc_inode+0x2c/0x1a0 [ 384.170559][ T7779] ? sock_alloc_inode+0x2c/0x1a0 [ 384.170585][ T7779] ? __pfx_sock_alloc_inode+0x10/0x10 [ 384.170606][ T7779] sock_alloc_inode+0x2c/0x1a0 [ 384.170629][ T7779] ? __pfx_sock_alloc_inode+0x10/0x10 [ 384.170649][ T7779] alloc_inode+0x6a/0x1b0 [ 384.170678][ T7779] __sock_create+0x127/0xac0 [ 384.170710][ T7779] __sys_socket+0xd6/0x1b0 [ 384.170737][ T7779] __x64_sys_socket+0x7a/0x90 [ 384.170762][ T7779] do_syscall_64+0x171/0x540 [ 384.170787][ T7779] ? trace_irq_disable+0x3b/0x140 [ 384.170804][ T7779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.170822][ T7779] ? clear_bhb_loop+0x70/0xc0 [ 384.170844][ T7779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.170861][ T7779] RIP: 0033:0x00007fa5923a94d9 [ 384.170880][ T7779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.170895][ T7779] RSP: 002b:00007fa593261028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 384.170914][ T7779] RAX: ffffffffffffffda RBX: 00007fa592625fa0 RCX: 00007fa5923a94d9 [ 384.170927][ T7779] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 384.170938][ T7779] RBP: 00007fa59243804e R08: 0000000000000000 R09: 0000000000000000 [ 384.170946][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.170955][ T7779] R13: 00007fa592626038 R14: 00007fa592625fa0 R15: 00007fffc6918b48 [ 384.170981][ T7779] [ 384.170990][ T7779] socket: no more sockets [ 385.626941][ T7779] FAULT_INJECTION: forcing a failure. [ 385.626941][ T7779] name failslab, interval 1, probability 5, space 0, times 88 [ 385.626970][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.1.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.627004][ T7779] Tainted: [L]=SOFTLOCKUP [ 385.627011][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 385.627021][ T7779] Call Trace: [ 385.627028][ T7779] [ 385.627034][ T7779] dump_stack_lvl+0xe8/0x150 [ 385.627068][ T7779] should_fail_ex+0x3eb/0x540 [ 385.627092][ T7779] should_failslab+0xa8/0x100 [ 385.627114][ T7779] ? __send_signal_locked+0x313/0x1010 [ 385.627135][ T7779] kmem_cache_alloc_noprof+0x9c/0x600 [ 385.627160][ T7779] ? sig_get_ucounts+0x26/0x450 [ 385.627183][ T7779] ? __send_signal_locked+0x313/0x1010 [ 385.627204][ T7779] ? sig_get_ucounts+0x3e4/0x450 [ 385.627230][ T7779] __send_signal_locked+0x313/0x1010 [ 385.627259][ T7779] do_notify_parent+0xbe9/0xe20 [ 385.627292][ T7779] ? __pfx_do_notify_parent+0x10/0x10 [ 385.627339][ T7779] release_task+0x13c4/0x1730 [ 385.627365][ T7779] ? do_exit+0x1667/0x2360 [ 385.627386][ T7779] ? __pfx_release_task+0x10/0x10 [ 385.627418][ T7779] ? _raw_write_unlock_irq+0x23/0x50 [ 385.627445][ T7779] do_exit+0x1667/0x2360 [ 385.627473][ T7779] ? __pfx_do_exit+0x10/0x10 [ 385.627495][ T7779] ? do_raw_spin_lock+0x12b/0x2f0 [ 385.627526][ T7779] do_group_exit+0x22d/0x2f0 [ 385.627544][ T7779] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.627569][ T7779] get_signal+0x136a/0x1430 [ 385.627613][ T7779] arch_do_signal_or_restart+0xbb/0x860 [ 385.627635][ T7779] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 385.627661][ T7779] ? ksys_write+0x242/0x270 [ 385.627690][ T7779] exit_to_user_mode_loop+0x10e/0x770 [ 385.627715][ T7779] ? rcu_is_watching+0x16/0xb0 [ 385.627737][ T7779] do_syscall_64+0x336/0x540 [ 385.627760][ T7779] ? trace_irq_disable+0x3b/0x140 [ 385.627776][ T7779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.627794][ T7779] ? clear_bhb_loop+0x70/0xc0 [ 385.627816][ T7779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.627834][ T7779] RIP: 0033:0x00007fa5923a94d9 [ 385.627852][ T7779] Code: Unable to access opcode bytes at 0x7fa5923a94af. [ 385.627861][ T7779] RSP: 002b:00007fa5932610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 385.627880][ T7779] RAX: fffffffffffffe00 RBX: 00007fa592625fa8 RCX: 00007fa5923a94d9 [ 385.627892][ T7779] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa592625fa8 [ 385.627903][ T7779] RBP: 00007fa592625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 385.627914][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.627925][ T7779] R13: 00007fa592626038 R14: 00007fffc6918a60 R15: 00007fffc6918b48 [ 385.627955][ T7779] [ 386.220667][ T7795] tmpfs: Bad value for 'mpol' [ 386.330296][ T7795] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 386.330316][ T7795] block device autoloading is deprecated and will be removed. [ 393.178594][ T7828] jffs2: notice: (7828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 396.232945][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 398.760897][ T7864] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 399.563977][ T7872] siw: device registration error -23 [ 400.094238][ T7874] md: could not open device unknown-block(1,5). [ 400.904555][ T7864] md/raid1:md2: not clean -- starting background reconstruction [ 400.904572][ T7864] md/raid1:md2: active with 2 out of 2 mirrors [ 400.933426][ T7864] md2: detected capacity change from 0 to 1024 [ 401.017735][ T7874] md2: detected capacity change from 1024 to 0 [ 401.017754][ T7874] md: md2 stopped. [ 402.876438][ T7898] loop2: detected capacity change from 0 to 33280 [ 403.157404][ T7898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 403.157713][ T7898] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.715913][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 405.774788][ T7916] siw: device registration error -23 [ 406.715072][ T7923] syzkaller0: entered promiscuous mode [ 406.715095][ T7923] syzkaller0: entered allmulticast mode [ 406.719111][ T7923] tipc: Started in network mode [ 406.719136][ T7923] tipc: Node identity 02517c02133a, cluster identity 4711 [ 406.720677][ T7923] tipc: Enabled bearer , priority 0 [ 406.755394][ T7923] tipc: Resetting bearer [ 406.769351][ T7921] tipc: Resetting bearer [ 407.520355][ T7921] tipc: Disabling bearer [ 408.842635][ T33] audit: type=1800 audit(1794621235.536:11): pid=7911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.452" name="bus" dev="ramfs" ino=18032 res=0 errno=-4 [ 409.012741][ T7932] netlink: 64 bytes leftover after parsing attributes in process `syz.1.445'. [ 410.504239][ T7939] netlink: 'syz.2.462': attribute type 10 has an invalid length. [ 410.538518][ T7939] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 410.583335][ T7939] ip_tables: iptables: counters copy to user failed while replacing table [ 410.597100][ T7939] ip_tables: iptables: counters copy to user failed while replacing table [ 411.573217][ T7946] FAULT_INJECTION: forcing a failure. [ 411.573217][ T7946] name failslab, interval 1, probability 5, space 0, times 87 [ 411.573265][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.2.464 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.573291][ T7946] Tainted: [L]=SOFTLOCKUP [ 411.573298][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 411.573309][ T7946] Call Trace: [ 411.573319][ T7946] [ 411.573327][ T7946] dump_stack_lvl+0xe8/0x150 [ 411.573364][ T7946] should_fail_ex+0x3eb/0x540 [ 411.573389][ T7946] ? __alloc_skb+0x1db/0x7a0 [ 411.573417][ T7946] should_failslab+0xa8/0x100 [ 411.573443][ T7946] ? __alloc_skb+0x1db/0x7a0 [ 411.573469][ T7946] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 411.573505][ T7946] ? __alloc_skb+0x18d/0x7a0 [ 411.573533][ T7946] ? __alloc_skb+0x1db/0x7a0 [ 411.573567][ T7946] __alloc_skb+0x1db/0x7a0 [ 411.573600][ T7946] netlink_sendmsg+0x5cd/0xb20 [ 411.573637][ T7946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.573681][ T7946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.573709][ T7946] sock_sendmsg_nosec+0x14e/0x190 [ 411.573735][ T7946] ____sys_sendmsg+0x49f/0x790 [ 411.573762][ T7946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.573790][ T7946] ? import_iovec+0x73/0xa0 [ 411.573814][ T7946] ___sys_sendmsg+0x2f8/0x3d0 [ 411.573831][ T7946] ? __lock_acquire+0x747/0x2de0 [ 411.573862][ T7946] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.573886][ T7946] ? __schedule+0x1bbb/0x5f70 [ 411.573939][ T7946] ? __fget_files+0x37a/0x3f0 [ 411.573960][ T7946] ? __fget_files+0x29/0x3f0 [ 411.573987][ T7946] __x64_sys_sendmsg+0x1b1/0x290 [ 411.574009][ T7946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.574050][ T7946] do_syscall_64+0x171/0x540 [ 411.574077][ T7946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.574097][ T7946] ? clear_bhb_loop+0x70/0xc0 [ 411.574120][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.574140][ T7946] RIP: 0033:0x00007fc3739a94d9 [ 411.574160][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.574177][ T7946] RSP: 002b:00007fc3747ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.574198][ T7946] RAX: ffffffffffffffda RBX: 00007fc373c25fa0 RCX: 00007fc3739a94d9 [ 411.574213][ T7946] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000007 [ 411.574226][ T7946] RBP: 00007fc373a3804e R08: 0000000000000000 R09: 0000000000000000 [ 411.574238][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.574249][ T7946] R13: 00007fc373c26038 R14: 00007fc373c25fa0 R15: 00007fff6b59bf08 [ 411.574280][ T7946] [ 412.843966][ T7952] siw: device registration error -23 [ 417.120372][ T7975] loop5: detected capacity change from 0 to 128 [ 417.135605][ T7975] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 417.135632][ T7975] FAT-fs (loop5): data area starts beyond volume (36 > 11) [ 417.135648][ T7975] FAT-fs (loop5): Can't find a valid FAT filesystem [ 418.039104][ T7979] FAULT_INJECTION: forcing a failure. [ 418.039104][ T7979] name failslab, interval 1, probability 5, space 0, times 100 [ 418.039140][ T7979] CPU: 1 UID: 0 PID: 7979 Comm: syz.4.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.039166][ T7979] Tainted: [L]=SOFTLOCKUP [ 418.039174][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 418.039185][ T7979] Call Trace: [ 418.039193][ T7979] [ 418.039202][ T7979] dump_stack_lvl+0xe8/0x150 [ 418.039238][ T7979] should_fail_ex+0x3eb/0x540 [ 418.039264][ T7979] should_failslab+0xa8/0x100 [ 418.039288][ T7979] ? vm_area_alloc+0x24/0x140 [ 418.039315][ T7979] kmem_cache_alloc_noprof+0x9c/0x600 [ 418.039345][ T7979] ? vma_merge_new_range+0x556/0x810 [ 418.039365][ T7979] ? vm_area_alloc+0x24/0x140 [ 418.039396][ T7979] vm_area_alloc+0x24/0x140 [ 418.039431][ T7979] mmap_region+0x18e8/0x2820 [ 418.039463][ T7979] ? __lock_acquire+0x747/0x2de0 [ 418.039499][ T7979] ? __pfx_mmap_region+0x10/0x10 [ 418.039519][ T7979] ? lock_acquire+0x115/0x350 [ 418.039545][ T7979] ? lock_acquire+0x115/0x350 [ 418.039629][ T7979] ? vm_unmapped_area+0xde/0x230 [ 418.039660][ T7979] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 418.039694][ T7979] ? thp_get_unmapped_area_vmaflags+0x25b/0x2d0 [ 418.039713][ T7979] ? cap_mmap_addr+0xaa/0xf0 [ 418.039732][ T7979] ? bpf_lsm_mmap_addr+0x9/0x50 [ 418.039747][ T7979] ? security_mmap_addr+0x71/0x240 [ 418.039772][ T7979] do_mmap+0xe0a/0x1300 [ 418.039789][ T7979] ? kasan_save_track+0x3f/0x90 [ 418.039803][ T7979] ? kasan_save_free_info+0x40/0x50 [ 418.039831][ T7979] ? __pfx_do_mmap+0x10/0x10 [ 418.039858][ T7979] ? vm_mmap_pgoff+0x1ed/0x520 [ 418.039881][ T7979] ? down_write_killable+0x179/0x230 [ 418.039910][ T7979] ? __pfx_down_write_killable+0x10/0x10 [ 418.039935][ T7979] ? apparmor_mmap_file+0x1cc/0x390 [ 418.039953][ T7979] ? security_mmap_file+0xf9/0xa20 [ 418.039974][ T7979] vm_mmap_pgoff+0x27a/0x520 [ 418.040003][ T7979] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 418.040028][ T7979] ? kfree+0x1c7/0x650 [ 418.040047][ T7979] ? __se_sys_memfd_create+0x2e6/0x410 [ 418.040072][ T7979] ? ksys_mmap_pgoff+0xf3/0x760 [ 418.040091][ T7979] ? __x64_sys_mmap+0x7f/0x140 [ 418.040112][ T7979] do_syscall_64+0x171/0x540 [ 418.040133][ T7979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.040148][ T7979] ? clear_bhb_loop+0x70/0xc0 [ 418.040167][ T7979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.040182][ T7979] RIP: 0033:0x00007fd6fa9a9242 [ 418.040198][ T7979] Code: 81 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 418.040212][ T7979] RSP: 002b:00007fd6fb83fde8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 418.040229][ T7979] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6fa9a9242 [ 418.040240][ T7979] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 418.040249][ T7979] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 418.040258][ T7979] R10: 0000000000000022 R11: 0000000000000246 R12: 00007fd6fb83fea0 [ 418.040268][ T7979] R13: 0000000000000000 R14: 00002000000006c0 R15: 00007fd6fb83fee0 [ 418.040294][ T7979] [ 418.176908][ T7979] FAULT_INJECTION: forcing a failure. [ 418.176908][ T7979] name failslab, interval 1, probability 5, space 0, times 99 [ 418.176942][ T7979] CPU: 0 UID: 0 PID: 7979 Comm: syz.4.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.176967][ T7979] Tainted: [L]=SOFTLOCKUP [ 418.176974][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 418.176985][ T7979] Call Trace: [ 418.176992][ T7979] [ 418.177000][ T7979] dump_stack_lvl+0xe8/0x150 [ 418.177037][ T7979] should_fail_ex+0x3eb/0x540 [ 418.177062][ T7979] should_failslab+0xa8/0x100 [ 418.177086][ T7979] ? __anon_vma_prepare+0x109/0x4a0 [ 418.177112][ T7979] kmem_cache_alloc_noprof+0x9c/0x600 [ 418.177140][ T7979] ? __anon_vma_prepare+0xbe/0x4a0 [ 418.177163][ T7979] ? kmem_cache_alloc_noprof+0x151/0x600 [ 418.177189][ T7979] ? __anon_vma_prepare+0x109/0x4a0 [ 418.177225][ T7979] __anon_vma_prepare+0x109/0x4a0 [ 418.177256][ T7979] do_wp_page+0x2b2b/0x4c40 [ 418.177294][ T7979] ? __pfx_do_wp_page+0x10/0x10 [ 418.177314][ T7979] ? do_raw_spin_lock+0x12b/0x2f0 [ 418.177338][ T7979] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 418.177370][ T7979] handle_mm_fault+0x19c9/0x2f80 [ 418.177405][ T7979] ? handle_mm_fault+0xee/0x2f80 [ 418.177439][ T7979] ? __pfx_handle_mm_fault+0x10/0x10 [ 418.177460][ T7979] ? lock_vma_under_rcu+0x45a/0x500 [ 418.177508][ T7979] do_user_addr_fault+0xb35/0x1480 [ 418.177543][ T7979] ? trace_page_fault_user+0x84/0x1e0 [ 418.177569][ T7979] exc_page_fault+0x6a/0xc0 [ 418.177595][ T7979] asm_exc_page_fault+0x26/0x30 [ 418.177613][ T7979] RIP: 0033:0x00007fd6fa856863 [ 418.177633][ T7979] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 418.177649][ T7979] RSP: 002b:00007fd6fb83f460 EFLAGS: 00010202 [ 418.177666][ T7979] RAX: 0000000000000400 RBX: 00007fd6fb83f520 RCX: 00007fd6f0600000 [ 418.177679][ T7979] RDX: 00007fd6fb83f6c0 RSI: 0000000000000009 RDI: 00007fd6fb83f5c0 [ 418.177692][ T7979] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000b9 [ 418.177702][ T7979] R10: 00000000000000ce R11: 00007fd6fb83f520 R12: 0000000000000001 [ 418.177714][ T7979] R13: 00007fd6faa589c0 R14: 0000000000000010 R15: 00007fd6fb83f5c0 [ 418.177745][ T7979] [ 418.181453][ T7979] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 419.745376][ T7985] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 431.840700][ T8042] siw: device registration error -23 [ 436.007328][ T8066] FAULT_INJECTION: forcing a failure. [ 436.007328][ T8066] name failslab, interval 1, probability 5, space 0, times 100 [ 436.007374][ T8066] CPU: 1 UID: 0 PID: 8066 Comm: syz.1.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.007401][ T8066] Tainted: [L]=SOFTLOCKUP [ 436.007408][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 436.007424][ T8066] Call Trace: [ 436.007432][ T8066] [ 436.007440][ T8066] dump_stack_lvl+0xe8/0x150 [ 436.007476][ T8066] should_fail_ex+0x3eb/0x540 [ 436.007502][ T8066] should_failslab+0xa8/0x100 [ 436.007527][ T8066] ? __anon_vma_prepare+0x109/0x4a0 [ 436.007553][ T8066] kmem_cache_alloc_noprof+0x9c/0x600 [ 436.007582][ T8066] ? __anon_vma_prepare+0xbe/0x4a0 [ 436.007606][ T8066] ? kmem_cache_alloc_noprof+0x151/0x600 [ 436.007634][ T8066] ? __anon_vma_prepare+0x109/0x4a0 [ 436.007673][ T8066] __anon_vma_prepare+0x109/0x4a0 [ 436.007706][ T8066] do_wp_page+0x2b2b/0x4c40 [ 436.007750][ T8066] ? __pfx_do_wp_page+0x10/0x10 [ 436.007772][ T8066] ? do_raw_spin_lock+0x12b/0x2f0 [ 436.007797][ T8066] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 436.007831][ T8066] handle_mm_fault+0x19c9/0x2f80 [ 436.007869][ T8066] ? handle_mm_fault+0xee/0x2f80 [ 436.007903][ T8066] ? __pfx_handle_mm_fault+0x10/0x10 [ 436.007926][ T8066] ? lock_vma_under_rcu+0x45a/0x500 [ 436.007977][ T8066] do_user_addr_fault+0xb35/0x1480 [ 436.008012][ T8066] ? trace_page_fault_user+0x84/0x1e0 [ 436.008035][ T8066] exc_page_fault+0x6a/0xc0 [ 436.008061][ T8066] asm_exc_page_fault+0x26/0x30 [ 436.008085][ T8066] RIP: 0033:0x00007fa592256863 [ 436.008105][ T8066] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 436.008122][ T8066] RSP: 002b:00007fa593260460 EFLAGS: 00010202 [ 436.008139][ T8066] RAX: 0000000000000400 RBX: 00007fa593260520 RCX: 00007fa588000000 [ 436.008153][ T8066] RDX: 00007fa5932606c0 RSI: 0000000000000001 RDI: 00007fa5932605c0 [ 436.008165][ T8066] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000be [ 436.008177][ T8066] R10: 00000000000000ce R11: 00007fa593260520 R12: 0000000000000001 [ 436.008187][ T8066] R13: 00007fa5924589c0 R14: 0000000000000010 R15: 00007fa5932605c0 [ 436.008217][ T8066] [ 436.008245][ T8066] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 436.969715][ T8066] FAULT_INJECTION: forcing a failure. [ 436.969715][ T8066] name failslab, interval 1, probability 5, space 0, times 99 [ 436.969748][ T8066] CPU: 1 UID: 0 PID: 8066 Comm: syz.1.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.969774][ T8066] Tainted: [L]=SOFTLOCKUP [ 436.969780][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 436.969792][ T8066] Call Trace: [ 436.969799][ T8066] [ 436.969807][ T8066] dump_stack_lvl+0xe8/0x150 [ 436.969842][ T8066] should_fail_ex+0x3eb/0x540 [ 436.969866][ T8066] should_failslab+0xa8/0x100 [ 436.969890][ T8066] ? ptlock_alloc+0x20/0x70 [ 436.969914][ T8066] kmem_cache_alloc_noprof+0x9c/0x600 [ 436.969945][ T8066] ? ptlock_alloc+0x20/0x70 [ 436.969977][ T8066] ptlock_alloc+0x20/0x70 [ 436.970000][ T8066] pte_alloc_one+0x7a/0x2a0 [ 436.970029][ T8066] __pte_alloc+0x25/0x1a0 [ 436.970060][ T8066] do_pte_missing+0x2d74/0x3520 [ 436.970084][ T8066] ? __lock_acquire+0x747/0x2de0 [ 436.970125][ T8066] handle_mm_fault+0x1807/0x2f80 [ 436.970158][ T8066] ? handle_mm_fault+0xee/0x2f80 [ 436.970191][ T8066] ? __pfx_handle_mm_fault+0x10/0x10 [ 436.970212][ T8066] ? lock_vma_under_rcu+0x45a/0x500 [ 436.970235][ T8066] ? irqentry_exit+0x2a0/0x9b0 [ 436.970259][ T8066] ? trace_irq_disable+0x3b/0x140 [ 436.970299][ T8066] do_user_addr_fault+0xb35/0x1480 [ 436.970332][ T8066] ? trace_page_fault_user+0x84/0x1e0 [ 436.970358][ T8066] exc_page_fault+0x6a/0xc0 [ 436.970383][ T8066] asm_exc_page_fault+0x26/0x30 [ 436.970402][ T8066] RIP: 0033:0x00007fa592256863 [ 436.970419][ T8066] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 436.970436][ T8066] RSP: 002b:00007fa593260460 EFLAGS: 00010202 [ 436.970453][ T8066] RAX: 0000000000200000 RBX: 00007fa593260520 RCX: 00007fa588000000 [ 436.970467][ T8066] RDX: 00007fa5932606c0 RSI: 0000000000000000 RDI: 00007fa5932605c0 [ 436.970479][ T8066] RBP: 0000000000000071 R08: 000000000000000a R09: 00000000000003c2 [ 436.970491][ T8066] R10: 00000000000003ce R11: 00007fa593260520 R12: 0000000000000001 [ 436.970503][ T8066] R13: 00007fa5924589c0 R14: 00000000000000e5 R15: 00007fa5932605c0 [ 436.970533][ T8066] [ 436.984329][ T8066] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 437.098482][ T8074] tipc: New replicast peer: 255.255.255.255 [ 437.120290][ T8074] tipc: Enabled bearer , priority 10 [ 437.131927][ T8069] jffs2: notice: (8069) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 437.325515][ T8076] loop3: detected capacity change from 0 to 33792 [ 437.485335][ T8076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.731754][ T5643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.939777][ T972] tipc: Node number set to 292256770 [ 440.236174][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.236225][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.309263][ T8092] netlink: 104 bytes leftover after parsing attributes in process `syz.5.498'. [ 440.414796][ T56] Bluetooth: hci4: command 0x0406 tx timeout [ 440.653837][ T8095] siw: device registration error -23 [ 441.281584][ T8101] loop1: detected capacity change from 0 to 16 [ 441.915426][ T8101] erofs (device loop1): mounted with root inode @ nid 36. [ 442.261496][ T8105] ubi0: attaching mtd0 [ 442.312830][ T8105] ubi0: scanning is finished [ 442.313216][ T8105] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 442.515485][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 442.692997][ T8105] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 444.432868][ T8108] jffs2: notice: (8108) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 446.229708][ T8125] netlink: 'syz.4.508': attribute type 2 has an invalid length. [ 447.091884][ T8127] FAULT_INJECTION: forcing a failure. [ 447.091884][ T8127] name failslab, interval 1, probability 5, space 0, times 100 [ 447.091908][ T8127] CPU: 0 UID: 0 PID: 8127 Comm: syz.4.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.091922][ T8127] Tainted: [L]=SOFTLOCKUP [ 447.091926][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 447.091933][ T8127] Call Trace: [ 447.091937][ T8127] [ 447.091942][ T8127] dump_stack_lvl+0xe8/0x150 [ 447.091970][ T8127] should_fail_ex+0x3eb/0x540 [ 447.091985][ T8127] should_failslab+0xa8/0x100 [ 447.091998][ T8127] ? skb_clone+0x212/0x3a0 [ 447.092011][ T8127] kmem_cache_alloc_noprof+0x9c/0x600 [ 447.092028][ T8127] ? skb_clone+0x212/0x3a0 [ 447.092043][ T8127] skb_clone+0x212/0x3a0 [ 447.092056][ T8127] __netlink_deliver_tap+0x355/0x6e0 [ 447.092078][ T8127] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.092094][ T8127] netlink_deliver_tap+0x19c/0x1b0 [ 447.092110][ T8127] netlink_sendskb+0x68/0x140 [ 447.092125][ T8127] nfnetlink_rcv+0x260c/0x28c0 [ 447.092157][ T8127] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 447.092194][ T8127] ? skb_clone+0x246/0x3a0 [ 447.092212][ T8127] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.092226][ T8127] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.092244][ T8127] netlink_unicast+0x8ef/0xa80 [ 447.092266][ T8127] netlink_sendmsg+0x7f0/0xb20 [ 447.092285][ T8127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.092299][ T8127] ? __lock_acquire+0x747/0x2de0 [ 447.092314][ T8127] ? aa_sock_msg_perm+0x144/0x210 [ 447.092332][ T8127] ? apparmor_socket_sendmsg+0x18b/0x360 [ 447.092346][ T8127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.092360][ T8127] sock_sendmsg_nosec+0x14e/0x190 [ 447.092375][ T8127] ____sys_sendmsg+0x49f/0x790 [ 447.092389][ T8127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.092404][ T8127] ? import_iovec+0x73/0xa0 [ 447.092417][ T8127] ___sys_sendmsg+0x2f8/0x3d0 [ 447.092426][ T8127] ? __lock_acquire+0x747/0x2de0 [ 447.092442][ T8127] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.092454][ T8127] ? futex_wait+0x2a2/0x390 [ 447.092486][ T8127] ? __fget_files+0x37a/0x3f0 [ 447.092498][ T8127] ? __fget_files+0x29/0x3f0 [ 447.092512][ T8127] __x64_sys_sendmsg+0x1b1/0x290 [ 447.092523][ T8127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.092545][ T8127] do_syscall_64+0x171/0x540 [ 447.092558][ T8127] ? trace_irq_disable+0x3b/0x140 [ 447.092568][ T8127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.092578][ T8127] ? clear_bhb_loop+0x70/0xc0 [ 447.092591][ T8127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.092601][ T8127] RIP: 0033:0x00007fd6fa9a94d9 [ 447.092613][ T8127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.092622][ T8127] RSP: 002b:00007fd6fb840028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.092634][ T8127] RAX: ffffffffffffffda RBX: 00007fd6fac25fa0 RCX: 00007fd6fa9a94d9 [ 447.092641][ T8127] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000008 [ 447.092648][ T8127] RBP: 00007fd6faa3804e R08: 0000000000000000 R09: 0000000000000000 [ 447.092655][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.092661][ T8127] R13: 00007fd6fac26038 R14: 00007fd6fac25fa0 R15: 00007fff99ecdea8 [ 447.092678][ T8127] [ 447.854344][ T33] audit: type=1800 audit(1794621274.556:12): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.505" name="bus" dev="ramfs" ino=18316 res=0 errno=-4 [ 449.756889][ T8140] loop1: detected capacity change from 0 to 16 [ 449.783881][ T8140] erofs (device loop1): mounted with root inode @ nid 36. [ 454.709758][ T8167] FAULT_INJECTION: forcing a failure. [ 454.709758][ T8167] name failslab, interval 1, probability 5, space 0, times 94 [ 454.709816][ T8167] CPU: 1 UID: 0 PID: 8167 Comm: syz.4.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.709844][ T8167] Tainted: [L]=SOFTLOCKUP [ 454.709851][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 454.709864][ T8167] Call Trace: [ 454.709872][ T8167] [ 454.709881][ T8167] dump_stack_lvl+0xe8/0x150 [ 454.709919][ T8167] should_fail_ex+0x3eb/0x540 [ 454.709946][ T8167] should_failslab+0xa8/0x100 [ 454.709970][ T8167] ? ipmr_mfc_add+0x56a/0x2660 [ 454.709999][ T8167] kmem_cache_alloc_noprof+0x9c/0x600 [ 454.710030][ T8167] ? ipmr_mfc_add+0x56a/0x2660 [ 454.710066][ T8167] ipmr_mfc_add+0x56a/0x2660 [ 454.710101][ T8167] ? ipmr_mfc_add+0x10b/0x2660 [ 454.710133][ T8167] ? lock_acquire+0x115/0x350 [ 454.710163][ T8167] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 454.710191][ T8167] ? __pfx___mutex_lock+0x10/0x10 [ 454.710226][ T8167] ? __might_fault+0xaf/0x130 [ 454.710264][ T8167] ip_mroute_setsockopt+0xe56/0x10d0 [ 454.710312][ T8167] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 454.710370][ T8167] do_ip_setsockopt+0xeba/0x2e30 [ 454.710403][ T8167] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 454.710427][ T8167] ? do_futex+0x458/0x4e0 [ 454.710455][ T8167] ? lock_acquire+0x115/0x350 [ 454.710493][ T8167] ? aa_sock_opt_perm+0xe8/0x1e0 [ 454.710526][ T8167] ip_setsockopt+0x66/0x110 [ 454.710550][ T8167] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 454.710580][ T8167] do_sock_setsockopt+0x17c/0x1b0 [ 454.710615][ T8167] __x64_sys_setsockopt+0x13d/0x1b0 [ 454.710651][ T8167] do_syscall_64+0x171/0x540 [ 454.710676][ T8167] ? trace_irq_disable+0x3b/0x140 [ 454.710694][ T8167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.710714][ T8167] ? clear_bhb_loop+0x70/0xc0 [ 454.710739][ T8167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.710758][ T8167] RIP: 0033:0x00007fd6fa9a94d9 [ 454.710779][ T8167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.710797][ T8167] RSP: 002b:00007fd6fb7fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 454.710819][ T8167] RAX: ffffffffffffffda RBX: 00007fd6fac26180 RCX: 00007fd6fa9a94d9 [ 454.710833][ T8167] RDX: 00000000000000cc RSI: 0000000000000000 RDI: 0000000000000003 [ 454.710846][ T8167] RBP: 00007fd6faa3804e R08: 000000000000003c R09: 0000000000000000 [ 454.710858][ T8167] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000000 [ 454.710870][ T8167] R13: 00007fd6fac26218 R14: 00007fd6fac26180 R15: 00007fff99ecdea8 [ 454.710904][ T8167] [ 457.221861][ T8177] ceph: No mds server is up or the cluster is laggy [ 457.337080][ T10] libceph: connect (1)[c::]:6789 error -101 [ 457.338088][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 459.464314][ T8189] netlink: 104 bytes leftover after parsing attributes in process `syz.5.511'. [ 461.848284][ T8201] FAULT_INJECTION: forcing a failure. [ 461.848284][ T8201] name failslab, interval 1, probability 5, space 0, times 100 [ 461.848318][ T8201] CPU: 0 UID: 0 PID: 8201 Comm: syz.5.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.848344][ T8201] Tainted: [L]=SOFTLOCKUP [ 461.848351][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 461.848363][ T8201] Call Trace: [ 461.848370][ T8201] [ 461.848378][ T8201] dump_stack_lvl+0xe8/0x150 [ 461.848415][ T8201] should_fail_ex+0x3eb/0x540 [ 461.848440][ T8201] ? __pfx_sock_alloc_inode+0x10/0x10 [ 461.848465][ T8201] should_failslab+0xa8/0x100 [ 461.848497][ T8201] ? __pfx_sock_alloc_inode+0x10/0x10 [ 461.848520][ T8201] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 461.848552][ T8201] ? sock_alloc_inode+0x2c/0x1a0 [ 461.848574][ T8201] ? sock_alloc_inode+0x2c/0x1a0 [ 461.848598][ T8201] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 461.848629][ T8201] ? __pfx_sock_alloc_inode+0x10/0x10 [ 461.848652][ T8201] sock_alloc_inode+0x2c/0x1a0 [ 461.848676][ T8201] ? __pfx_sock_alloc_inode+0x10/0x10 [ 461.848697][ T8201] alloc_inode+0x6a/0x1b0 [ 461.848727][ T8201] __sock_create+0x127/0xac0 [ 461.848752][ T8201] ? ksys_write+0x242/0x270 [ 461.848773][ T8201] ? __pfx___se_sys_futex+0x10/0x10 [ 461.848799][ T8201] __sys_socket+0xd6/0x1b0 [ 461.848828][ T8201] __x64_sys_socket+0x7a/0x90 [ 461.848854][ T8201] do_syscall_64+0x171/0x540 [ 461.848880][ T8201] ? trace_irq_disable+0x3b/0x140 [ 461.848897][ T8201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.848916][ T8201] ? clear_bhb_loop+0x70/0xc0 [ 461.848940][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.848959][ T8201] RIP: 0033:0x00007fd19b5a94d9 [ 461.848978][ T8201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.848995][ T8201] RSP: 002b:00007fd1997f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 461.849016][ T8201] RAX: ffffffffffffffda RBX: 00007fd19b825fa0 RCX: 00007fd19b5a94d9 [ 461.849030][ T8201] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 461.849042][ T8201] RBP: 00007fd19b63804e R08: 0000000000000000 R09: 0000000000000000 [ 461.849055][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.849066][ T8201] R13: 00007fd19b826038 R14: 00007fd19b825fa0 R15: 00007fff58555888 [ 461.849099][ T8201] [ 461.849108][ T8201] socket: no more sockets [ 461.876046][ T8201] FAULT_INJECTION: forcing a failure. [ 461.876046][ T8201] name failslab, interval 1, probability 5, space 0, times 99 [ 461.876077][ T8201] CPU: 0 UID: 0 PID: 8201 Comm: syz.5.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.876103][ T8201] Tainted: [L]=SOFTLOCKUP [ 461.876110][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 461.876122][ T8201] Call Trace: [ 461.876129][ T8201] [ 461.876136][ T8201] dump_stack_lvl+0xe8/0x150 [ 461.876171][ T8201] should_fail_ex+0x3eb/0x540 [ 461.876196][ T8201] should_failslab+0xa8/0x100 [ 461.876219][ T8201] ? ptlock_alloc+0x20/0x70 [ 461.876245][ T8201] kmem_cache_alloc_noprof+0x9c/0x600 [ 461.876275][ T8201] ? ptlock_alloc+0x20/0x70 [ 461.876305][ T8201] ptlock_alloc+0x20/0x70 [ 461.876329][ T8201] pte_alloc_one+0x7a/0x2a0 [ 461.876358][ T8201] __pte_alloc+0x25/0x1a0 [ 461.876390][ T8201] do_pte_missing+0x2d74/0x3520 [ 461.876415][ T8201] ? __lock_acquire+0x747/0x2de0 [ 461.876458][ T8201] handle_mm_fault+0x1807/0x2f80 [ 461.876501][ T8201] ? handle_mm_fault+0xee/0x2f80 [ 461.876534][ T8201] ? __pfx_handle_mm_fault+0x10/0x10 [ 461.876555][ T8201] ? lock_vma_under_rcu+0x45a/0x500 [ 461.876604][ T8201] do_user_addr_fault+0xb35/0x1480 [ 461.876638][ T8201] ? trace_page_fault_user+0x84/0x1e0 [ 461.876664][ T8201] exc_page_fault+0x6a/0xc0 [ 461.876690][ T8201] asm_exc_page_fault+0x26/0x30 [ 461.876708][ T8201] RIP: 0033:0x00007fd19b456863 [ 461.876726][ T8201] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 461.876742][ T8201] RSP: 002b:00007fd1997f5460 EFLAGS: 00010202 [ 461.876760][ T8201] RAX: 0000000000200000 RBX: 00007fd1997f5520 RCX: 00007fd191200000 [ 461.876773][ T8201] RDX: 00007fd1997f56c0 RSI: 0000000000000000 RDI: 00007fd1997f55c0 [ 461.876785][ T8201] RBP: 0000000000000071 R08: 000000000000000a R09: 00000000000003c2 [ 461.876797][ T8201] R10: 00000000000003ce R11: 00007fd1997f5520 R12: 0000000000000001 [ 461.876809][ T8201] R13: 00007fd19b6589c0 R14: 00000000000000e5 R15: 00007fd1997f55c0 [ 461.876840][ T8201] [ 461.876870][ T8201] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 462.357240][ T8203] loop4: detected capacity change from 0 to 4096 [ 462.373850][ T8205] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 463.104366][ T8201] FAULT_INJECTION: forcing a failure. [ 463.104366][ T8201] name failslab, interval 1, probability 5, space 0, times 96 [ 463.104403][ T8201] CPU: 1 UID: 0 PID: 8201 Comm: syz.5.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.104430][ T8201] Tainted: [L]=SOFTLOCKUP [ 463.104437][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 463.104449][ T8201] Call Trace: [ 463.104456][ T8201] [ 463.104464][ T8201] dump_stack_lvl+0xe8/0x150 [ 463.104503][ T8201] should_fail_ex+0x3eb/0x540 [ 463.104530][ T8201] should_failslab+0xa8/0x100 [ 463.104557][ T8201] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 463.104590][ T8201] ? xas_nomem+0x14a/0x1f0 [ 463.104616][ T8201] ? xas_nomem+0x14a/0x1f0 [ 463.104650][ T8201] xas_nomem+0x14a/0x1f0 [ 463.104681][ T8201] shmem_add_to_page_cache+0xa68/0xd40 [ 463.104724][ T8201] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 463.104773][ T8201] shmem_alloc_and_add_folio+0x854/0xf60 [ 463.104795][ T8201] ? filemap_get_entry+0xcd/0x3f0 [ 463.104826][ T8201] ? __pfx_filemap_get_entry+0x10/0x10 [ 463.104847][ T8201] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 463.104876][ T8201] ? copy_folio_from_iter_atomic+0x19c6/0x1a80 [ 463.104921][ T8201] shmem_get_folio_gfp+0x594/0x1330 [ 463.104972][ T8201] shmem_write_begin+0x16c/0x330 [ 463.105002][ T8201] generic_perform_write+0x359/0x9e0 [ 463.105024][ T8201] ? __mark_inode_dirty+0x705/0x13b0 [ 463.105068][ T8201] ? __pfx_generic_perform_write+0x10/0x10 [ 463.105091][ T8201] ? preempt_count_add+0x6a/0x140 [ 463.105114][ T8201] ? mnt_put_write_access_file+0xbc/0x100 [ 463.105142][ T8201] ? file_update_time_flags+0x3ab/0x440 [ 463.105173][ T8201] shmem_file_write_iter+0xf8/0x120 [ 463.105198][ T8201] vfs_write+0x612/0xba0 [ 463.105230][ T8201] ? __pfx_vfs_write+0x10/0x10 [ 463.105257][ T8201] ? __fget_files+0x37a/0x3f0 [ 463.105283][ T8201] ? fdget+0x1ac/0x250 [ 463.105311][ T8201] ksys_write+0x150/0x270 [ 463.105336][ T8201] ? __pfx_ksys_write+0x10/0x10 [ 463.105371][ T8201] do_syscall_64+0x171/0x540 [ 463.105397][ T8201] ? trace_irq_disable+0x3b/0x140 [ 463.105415][ T8201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.105435][ T8201] ? clear_bhb_loop+0x70/0xc0 [ 463.105460][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.105480][ T8201] RIP: 0033:0x00007fd19b569d0e [ 463.105500][ T8201] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 463.105517][ T8201] RSP: 002b:00007fd1997f5d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 463.105537][ T8201] RAX: ffffffffffffffda RBX: 00007fd1997f66c0 RCX: 00007fd19b569d0e [ 463.105551][ T8201] RDX: 00000000013bd7ef RSI: 00007fd191200000 RDI: 0000000000000007 [ 463.105563][ T8201] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 463.105574][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1997f5ea0 [ 463.105587][ T8201] R13: 0000000000000000 R14: 00007fd191200000 R15: 00007fd1997f5ee0 [ 463.105619][ T8201] [ 463.780990][ T8213] trusted_key: encrypted_key: insufficient parameters specified [ 464.502949][ T8201] FAULT_INJECTION: forcing a failure. [ 464.502949][ T8201] name failslab, interval 1, probability 5, space 0, times 95 [ 464.502984][ T8201] CPU: 0 UID: 0 PID: 8201 Comm: syz.5.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.503010][ T8201] Tainted: [L]=SOFTLOCKUP [ 464.503017][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 464.503028][ T8201] Call Trace: [ 464.503035][ T8201] [ 464.503043][ T8201] dump_stack_lvl+0xe8/0x150 [ 464.503079][ T8201] should_fail_ex+0x3eb/0x540 [ 464.503106][ T8201] should_failslab+0xa8/0x100 [ 464.503130][ T8201] ? ptlock_alloc+0x20/0x70 [ 464.503155][ T8201] kmem_cache_alloc_noprof+0x9c/0x600 [ 464.503186][ T8201] ? ptlock_alloc+0x20/0x70 [ 464.503224][ T8201] ptlock_alloc+0x20/0x70 [ 464.503250][ T8201] pte_alloc_one+0x7a/0x2a0 [ 464.503280][ T8201] __pte_alloc+0x25/0x1a0 [ 464.503313][ T8201] do_pte_missing+0x2d74/0x3520 [ 464.503339][ T8201] ? __lock_acquire+0x747/0x2de0 [ 464.503383][ T8201] handle_mm_fault+0x1807/0x2f80 [ 464.503421][ T8201] ? handle_mm_fault+0xee/0x2f80 [ 464.503456][ T8201] ? __pfx_handle_mm_fault+0x10/0x10 [ 464.503479][ T8201] ? lock_vma_under_rcu+0x45a/0x500 [ 464.503529][ T8201] do_user_addr_fault+0xb35/0x1480 [ 464.503566][ T8201] ? trace_page_fault_user+0x84/0x1e0 [ 464.503594][ T8201] exc_page_fault+0x6a/0xc0 [ 464.503622][ T8201] asm_exc_page_fault+0x26/0x30 [ 464.503640][ T8201] RIP: 0033:0x00007fd19b45690e [ 464.503659][ T8201] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 464.503676][ T8201] RSP: 002b:00007fd1997f5460 EFLAGS: 00010206 [ 464.503695][ T8201] RAX: 0000000001000001 RBX: 00007fd1997f5520 RCX: 00000000000000d8 [ 464.503708][ T8201] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fd1997f55c0 [ 464.503720][ T8201] RBP: 0000000000000102 R08: 00007fd191200000 R09: 0000000001000000 [ 464.503733][ T8201] R10: 0000000000000000 R11: 00007fd1997f5530 R12: 0000000000000001 [ 464.503744][ T8201] R13: 00007fd19b6589c0 R14: 0000000000000000 R15: 00007fd1997f55c0 [ 464.503776][ T8201] [ 464.576042][ T8201] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 464.781113][ T8219] FAULT_INJECTION: forcing a failure. [ 464.781113][ T8219] name failslab, interval 1, probability 5, space 0, times 94 [ 464.781146][ T8219] CPU: 0 UID: 0 PID: 8219 Comm: syz.2.533 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.781171][ T8219] Tainted: [L]=SOFTLOCKUP [ 464.781178][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 464.781190][ T8219] Call Trace: [ 464.781207][ T8219] [ 464.781215][ T8219] dump_stack_lvl+0xe8/0x150 [ 464.781251][ T8219] should_fail_ex+0x3eb/0x540 [ 464.781276][ T8219] should_failslab+0xa8/0x100 [ 464.781299][ T8219] ? security_file_alloc+0x34/0x310 [ 464.781321][ T8219] kmem_cache_alloc_noprof+0x9c/0x600 [ 464.781347][ T8219] ? rcu_is_watching+0x16/0xb0 [ 464.781367][ T8219] ? security_file_alloc+0x34/0x310 [ 464.781395][ T8219] security_file_alloc+0x34/0x310 [ 464.781416][ T8219] init_file+0x90/0x2b0 [ 464.781444][ T8219] alloc_empty_file+0x74/0x1d0 [ 464.781471][ T8219] alloc_file_pseudo+0x110/0x1e0 [ 464.781502][ T8219] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 464.781533][ T8219] ? _raw_spin_unlock+0x28/0x50 [ 464.781562][ T8219] sock_alloc_file+0xb8/0x2e0 [ 464.781583][ T8219] ? __sys_socket+0x12b/0x1b0 [ 464.781610][ T8219] __sys_socket+0x13f/0x1b0 [ 464.781639][ T8219] __x64_sys_socket+0x7a/0x90 [ 464.781670][ T8219] do_syscall_64+0x171/0x540 [ 464.781695][ T8219] ? trace_irq_disable+0x3b/0x140 [ 464.781712][ T8219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.781734][ T8219] ? clear_bhb_loop+0x70/0xc0 [ 464.781758][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.781778][ T8219] RIP: 0033:0x00007fc3739a94d9 [ 464.781800][ T8219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.781817][ T8219] RSP: 002b:00007fc3747ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 464.781838][ T8219] RAX: ffffffffffffffda RBX: 00007fc373c25fa0 RCX: 00007fc3739a94d9 [ 464.781852][ T8219] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 464.781865][ T8219] RBP: 00007fc373a3804e R08: 0000000000000000 R09: 0000000000000000 [ 464.781877][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.781888][ T8219] R13: 00007fc373c26038 R14: 00007fc373c25fa0 R15: 00007fff6b59bf08 [ 464.781920][ T8219] [ 466.163983][ T5641] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 466.164012][ T5641] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 466.237928][ T5641] Remounting filesystem read-only [ 466.237940][ T5641] NILFS (loop4): error -5 truncating bmap (ino=12) [ 466.256397][ T5641] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 466.753640][ T8227] loop4: detected capacity change from 0 to 33280 [ 467.198914][ T8227] EXT4-fs (loop4): 1 truncate cleaned up [ 467.199911][ T8227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.017472][ T8232] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 469.589721][ T5641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.138617][ T8273] loop5: detected capacity change from 0 to 33280 [ 475.153834][ T8273] EXT4-fs (loop5): Test dummy encryption mode enabled [ 475.153854][ T8273] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 475.153865][ T8273] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 475.192085][ T8273] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.548: bad orphan inode 131083 [ 475.192115][ T8273] loop5: lost filesystem error report for type 5 error -117 [ 475.193760][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 475.193778][ C1] EXT4-fs (loop5): initial error at time 1794621301: ext4_orphan_get:1430 [ 475.193808][ C1] EXT4-fs (loop5): last error at time 1794621301: ext4_orphan_get:1430 [ 475.246748][ T8273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.453269][ T8281] loop4: detected capacity change from 0 to 512 [ 477.740468][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.091377][ T8297] FAULT_INJECTION: forcing a failure. [ 479.091377][ T8297] name failslab, interval 1, probability 5, space 0, times 92 [ 479.091418][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.1.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.091445][ T8297] Tainted: [L]=SOFTLOCKUP [ 479.091453][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 479.091464][ T8297] Call Trace: [ 479.091472][ T8297] [ 479.091480][ T8297] dump_stack_lvl+0xe8/0x150 [ 479.091519][ T8297] should_fail_ex+0x3eb/0x540 [ 479.091550][ T8297] should_failslab+0xa8/0x100 [ 479.091579][ T8297] ? ptlock_alloc+0x20/0x70 [ 479.091606][ T8297] kmem_cache_alloc_noprof+0x9c/0x600 [ 479.091638][ T8297] ? ptlock_alloc+0x20/0x70 [ 479.091670][ T8297] ptlock_alloc+0x20/0x70 [ 479.091695][ T8297] pte_alloc_one+0x7a/0x2a0 [ 479.091725][ T8297] __pte_alloc+0x25/0x1a0 [ 479.091758][ T8297] do_pte_missing+0x2d74/0x3520 [ 479.091786][ T8297] ? __lock_acquire+0x747/0x2de0 [ 479.091834][ T8297] handle_mm_fault+0x1807/0x2f80 [ 479.091875][ T8297] ? handle_mm_fault+0xee/0x2f80 [ 479.091910][ T8297] ? __pfx_handle_mm_fault+0x10/0x10 [ 479.091932][ T8297] ? lock_vma_under_rcu+0x45a/0x500 [ 479.091988][ T8297] do_user_addr_fault+0xb35/0x1480 [ 479.092024][ T8297] ? trace_page_fault_user+0x84/0x1e0 [ 479.092050][ T8297] exc_page_fault+0x6a/0xc0 [ 479.092078][ T8297] asm_exc_page_fault+0x26/0x30 [ 479.092097][ T8297] RIP: 0033:0x00007fa59225690e [ 479.092117][ T8297] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 479.092135][ T8297] RSP: 002b:00007fa59323f460 EFLAGS: 00010206 [ 479.092153][ T8297] RAX: 0000000000800001 RBX: 00007fa59323f520 RCX: 0000000000000070 [ 479.092168][ T8297] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fa59323f5c0 [ 479.092181][ T8297] RBP: 0000000000000102 R08: 00007fa588000000 R09: 0000000000800000 [ 479.092194][ T8297] R10: 0000000000000000 R11: 00007fa59323f530 R12: 0000000000000001 [ 479.092207][ T8297] R13: 00007fa5924589c0 R14: 0000000000000000 R15: 00007fa59323f5c0 [ 479.092248][ T8297] [ 479.092279][ T8297] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 479.109869][ T8297] FAULT_INJECTION: forcing a failure. [ 479.109869][ T8297] name failslab, interval 1, probability 5, space 0, times 91 [ 479.109899][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.1.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.109924][ T8297] Tainted: [L]=SOFTLOCKUP [ 479.109932][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 479.109943][ T8297] Call Trace: [ 479.109950][ T8297] [ 479.109957][ T8297] dump_stack_lvl+0xe8/0x150 [ 479.109991][ T8297] should_fail_ex+0x3eb/0x540 [ 479.110016][ T8297] should_failslab+0xa8/0x100 [ 479.110040][ T8297] ? ptlock_alloc+0x20/0x70 [ 479.110064][ T8297] kmem_cache_alloc_noprof+0x9c/0x600 [ 479.110098][ T8297] ? ptlock_alloc+0x20/0x70 [ 479.110128][ T8297] ptlock_alloc+0x20/0x70 [ 479.110151][ T8297] pte_alloc_one+0x7a/0x2a0 [ 479.110180][ T8297] __pte_alloc+0x25/0x1a0 [ 479.110211][ T8297] do_pte_missing+0x2d74/0x3520 [ 479.110237][ T8297] ? __lock_acquire+0x747/0x2de0 [ 479.110279][ T8297] handle_mm_fault+0x1807/0x2f80 [ 479.110322][ T8297] ? handle_mm_fault+0xee/0x2f80 [ 479.110354][ T8297] ? __pfx_handle_mm_fault+0x10/0x10 [ 479.110375][ T8297] ? lock_vma_under_rcu+0x45a/0x500 [ 479.110398][ T8297] ? irqentry_exit+0x2a0/0x9b0 [ 479.110447][ T8297] do_user_addr_fault+0xb35/0x1480 [ 479.110482][ T8297] ? trace_page_fault_user+0x84/0x1e0 [ 479.110507][ T8297] exc_page_fault+0x6a/0xc0 [ 479.110532][ T8297] asm_exc_page_fault+0x26/0x30 [ 479.110550][ T8297] RIP: 0033:0x00007fa59225690e [ 479.110569][ T8297] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 479.110585][ T8297] RSP: 002b:00007fa59323f460 EFLAGS: 00010206 [ 479.110601][ T8297] RAX: 0000000000c00001 RBX: 00007fa59323f520 RCX: 0000000000000008 [ 479.110614][ T8297] RDX: 000000000000003f RSI: 0000000000000001 RDI: 00007fa59323f5c0 [ 479.110626][ T8297] RBP: 00000000000000b4 R08: 00007fa588000000 R09: 0000000000c00000 [ 479.110637][ T8297] R10: 0000000000000000 R11: 00007fa59323f530 R12: 0000000000000001 [ 479.110649][ T8297] R13: 00007fa5924589c0 R14: 0000000000000000 R15: 00007fa59323f5c0 [ 479.110679][ T8297] [ 479.110720][ T8297] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 484.957121][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.957176][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.244946][ T8334] loop3: detected capacity change from 0 to 33280 [ 486.298739][ T8334] EXT4-fs (loop3): Test dummy encryption mode enabled [ 486.298761][ T8334] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 486.298772][ T8334] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 486.345396][ T8334] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.564: bad orphan inode 131083 [ 486.345423][ T8334] loop3: lost filesystem error report for type 5 error -117 [ 486.353717][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 486.353738][ C1] EXT4-fs (loop3): initial error at time 1794621313: ext4_orphan_get:1430 [ 486.353759][ C1] EXT4-fs (loop3): last error at time 1794621313: ext4_orphan_get:1430 [ 486.761905][ T8334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.246422][ T8348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.564'. [ 488.114036][ T8354] ubi0: attaching mtd0 [ 488.855594][ T8354] ubi0: scanning is finished [ 488.855680][ T8354] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 488.875592][ T5643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.996775][ T8354] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 489.288829][ T8358] siw: device registration error -23 [ 491.310493][ T33] audit: type=1800 audit(1794621317.376:13): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.575" name="file2" dev="sda1" ino=2051 res=0 errno=-22 [ 492.752351][ T8380] loop2: detected capacity change from 0 to 33280 [ 492.825325][ T8380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.825438][ T8380] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 493.163346][ T8389] EXT4-fs error (device loop2): ext4_do_update_inode:6679: inode #2: comm syz.2.577: corrupted inode contents [ 493.733315][ T8389] EXT4-fs (loop2): Remounting filesystem read-only [ 494.370981][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.832686][ T8402] FAULT_INJECTION: forcing a failure. [ 495.832686][ T8402] name failslab, interval 1, probability 5, space 0, times 100 [ 495.832719][ T8402] CPU: 0 UID: 0 PID: 8402 Comm: syz.1.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.832746][ T8402] Tainted: [L]=SOFTLOCKUP [ 495.832753][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 495.832764][ T8402] Call Trace: [ 495.832770][ T8402] [ 495.832780][ T8402] dump_stack_lvl+0xe8/0x150 [ 495.832816][ T8402] should_fail_ex+0x3eb/0x540 [ 495.832838][ T8402] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 495.832862][ T8402] should_failslab+0xa8/0x100 [ 495.832887][ T8402] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 495.832908][ T8402] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 495.832938][ T8402] ? shmem_alloc_inode+0x28/0x40 [ 495.832957][ T8402] ? shmem_alloc_inode+0x28/0x40 [ 495.832977][ T8402] ? stack_depot_save_flags+0x33/0x840 [ 495.832993][ T8402] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 495.833005][ T8402] shmem_alloc_inode+0x28/0x40 [ 495.833017][ T8402] alloc_inode+0x6a/0x1b0 [ 495.833033][ T8402] new_inode+0x1f/0x170 [ 495.833042][ T8402] ? shmem_get_inode+0x29a/0x10b0 [ 495.833055][ T8402] shmem_get_inode+0x3a4/0x10b0 [ 495.833072][ T8402] ? __pfx_shmem_get_inode+0x10/0x10 [ 495.833089][ T8402] __shmem_file_setup+0x20b/0x370 [ 495.833114][ T8402] ? __pfx___shmem_file_setup+0x10/0x10 [ 495.833136][ T8402] memfd_alloc_file+0x99/0x4c0 [ 495.833153][ T8402] ? __pfx_memfd_alloc_file+0x10/0x10 [ 495.833175][ T8402] __se_sys_memfd_create+0x31f/0x410 [ 495.833192][ T8402] do_syscall_64+0x171/0x540 [ 495.833206][ T8402] ? trace_irq_disable+0x3b/0x140 [ 495.833217][ T8402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.833227][ T8402] ? clear_bhb_loop+0x70/0xc0 [ 495.833240][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.833250][ T8402] RIP: 0033:0x00007fa5923a94d9 [ 495.833263][ T8402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.833272][ T8402] RSP: 002b:00007fa593260df8 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 495.833284][ T8402] RAX: ffffffffffffffda RBX: 00000000000055a8 RCX: 00007fa5923a94d9 [ 495.833291][ T8402] RDX: 00007fa593260ea0 RSI: 0000000000000000 RDI: 00007fa592438241 [ 495.833299][ T8402] RBP: 0000200000000400 R08: 00002000000006c0 R09: 0000000000000000 [ 495.833306][ T8402] R10: 00007fa593260ee0 R11: 0000000000000206 R12: 00007fa593260ea0 [ 495.833313][ T8402] R13: 0000000000000000 R14: 00002000000006c0 R15: 00007fa593260ee0 [ 495.833330][ T8402] [ 495.846719][ T8402] FAULT_INJECTION: forcing a failure. [ 495.846719][ T8402] name failslab, interval 1, probability 5, space 0, times 99 [ 495.846749][ T8402] CPU: 1 UID: 0 PID: 8402 Comm: syz.1.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.846775][ T8402] Tainted: [L]=SOFTLOCKUP [ 495.846782][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 495.846793][ T8402] Call Trace: [ 495.846800][ T8402] [ 495.846807][ T8402] dump_stack_lvl+0xe8/0x150 [ 495.846841][ T8402] should_fail_ex+0x3eb/0x540 [ 495.846866][ T8402] should_failslab+0xa8/0x100 [ 495.846892][ T8402] __kmalloc_cache_noprof+0x9e/0x600 [ 495.846922][ T8402] ? __se_sys_memfd_create+0x21d/0x410 [ 495.846948][ T8402] ? __se_sys_memfd_create+0x21d/0x410 [ 495.846983][ T8402] __se_sys_memfd_create+0x21d/0x410 [ 495.847013][ T8402] do_syscall_64+0x171/0x540 [ 495.847038][ T8402] ? trace_irq_disable+0x3b/0x140 [ 495.847055][ T8402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.847073][ T8402] ? clear_bhb_loop+0x70/0xc0 [ 495.847096][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.847113][ T8402] RIP: 0033:0x00007fa5923a94d9 [ 495.847132][ T8402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.847148][ T8402] RSP: 002b:00007fa593260df8 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 495.847167][ T8402] RAX: ffffffffffffffda RBX: 000000000000550e RCX: 00007fa5923a94d9 [ 495.847180][ T8402] RDX: 00007fa593260ea0 RSI: 0000000000000000 RDI: 00007fa592438241 [ 495.847193][ T8402] RBP: 0000200000000100 R08: 000020000000cec0 R09: 0000000000000000 [ 495.847205][ T8402] R10: 00007fa593260ee0 R11: 0000000000000206 R12: 00007fa593260ea0 [ 495.847217][ T8402] R13: 0000000000000000 R14: 000020000000cec0 R15: 00007fa593260ee0 [ 495.847246][ T8402] [ 495.878077][ T8402] FAULT_INJECTION: forcing a failure. [ 495.878077][ T8402] name failslab, interval 1, probability 5, space 0, times 98 [ 495.878107][ T8402] CPU: 1 UID: 0 PID: 8402 Comm: syz.1.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.878132][ T8402] Tainted: [L]=SOFTLOCKUP [ 495.878139][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 495.878150][ T8402] Call Trace: [ 495.878157][ T8402] [ 495.878165][ T8402] dump_stack_lvl+0xe8/0x150 [ 495.878200][ T8402] should_fail_ex+0x3eb/0x540 [ 495.878224][ T8402] should_failslab+0xa8/0x100 [ 495.878247][ T8402] ? prepare_creds+0x30/0x820 [ 495.878273][ T8402] kmem_cache_alloc_noprof+0x9c/0x600 [ 495.878299][ T8402] ? __pfx_futex_wait+0x10/0x10 [ 495.878326][ T8402] ? prepare_creds+0x30/0x820 [ 495.878356][ T8402] prepare_creds+0x30/0x820 [ 495.878385][ T8402] __se_sys_keyctl+0x6c1/0xbc0 [ 495.878411][ T8402] ? __pfx___se_sys_keyctl+0x10/0x10 [ 495.878437][ T8402] ? __pfx_do_futex+0x10/0x10 [ 495.878466][ T8402] ? __se_sys_futex+0x3a8/0x450 [ 495.878496][ T8402] ? rcu_is_watching+0x16/0xb0 [ 495.878521][ T8402] ? __x64_sys_keyctl+0x20/0xc0 [ 495.878545][ T8402] do_syscall_64+0x171/0x540 [ 495.878570][ T8402] ? trace_irq_disable+0x3b/0x140 [ 495.878587][ T8402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.878612][ T8402] ? clear_bhb_loop+0x70/0xc0 [ 495.878634][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.878652][ T8402] RIP: 0033:0x00007fa5923a94d9 [ 495.878671][ T8402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.878688][ T8402] RSP: 002b:00007fa593261028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 495.878708][ T8402] RAX: ffffffffffffffda RBX: 00007fa592625fa0 RCX: 00007fa5923a94d9 [ 495.878722][ T8402] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000e [ 495.878732][ T8402] RBP: 00007fa59243804e R08: 0000000000000000 R09: 0000000000000000 [ 495.878744][ T8402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.878754][ T8402] R13: 00007fa592626038 R14: 00007fa592625fa0 R15: 00007fffc6918b48 [ 495.878785][ T8402] [ 496.535972][ T8416] FAULT_INJECTION: forcing a failure. [ 496.535972][ T8416] name failslab, interval 1, probability 5, space 0, times 97 [ 496.536007][ T8416] CPU: 0 UID: 0 PID: 8416 Comm: syz.1.583 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.536034][ T8416] Tainted: [L]=SOFTLOCKUP [ 496.536042][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 496.536053][ T8416] Call Trace: [ 496.536060][ T8416] [ 496.536068][ T8416] dump_stack_lvl+0xe8/0x150 [ 496.536105][ T8416] should_fail_ex+0x3eb/0x540 [ 496.536132][ T8416] should_failslab+0xa8/0x100 [ 496.536157][ T8416] ? security_inode_alloc+0x39/0x310 [ 496.536187][ T8416] kmem_cache_alloc_noprof+0x9c/0x600 [ 496.536214][ T8416] ? make_kgid+0x1d1/0x6a0 [ 496.536240][ T8416] ? rcu_is_watching+0x16/0xb0 [ 496.536258][ T8416] ? security_inode_alloc+0x39/0x310 [ 496.536293][ T8416] security_inode_alloc+0x39/0x310 [ 496.536324][ T8416] inode_init_always_gfp+0x97e/0xd30 [ 496.536359][ T8416] ? __pfx_sock_alloc_inode+0x10/0x10 [ 496.536382][ T8416] alloc_inode+0x82/0x1b0 [ 496.536411][ T8416] __sock_create+0x127/0xac0 [ 496.536438][ T8416] ? __pfx___se_sys_futex+0x10/0x10 [ 496.536465][ T8416] __sys_socket+0xd6/0x1b0 [ 496.536494][ T8416] __x64_sys_socket+0x7a/0x90 [ 496.536520][ T8416] do_syscall_64+0x171/0x540 [ 496.536552][ T8416] ? trace_irq_disable+0x3b/0x140 [ 496.536570][ T8416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.536590][ T8416] ? clear_bhb_loop+0x70/0xc0 [ 496.536615][ T8416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.536634][ T8416] RIP: 0033:0x00007fa5923a94d9 [ 496.536654][ T8416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.536670][ T8416] RSP: 002b:00007fa593261028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 496.536691][ T8416] RAX: ffffffffffffffda RBX: 00007fa592625fa0 RCX: 00007fa5923a94d9 [ 496.536706][ T8416] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 496.536718][ T8416] RBP: 00007fa59243804e R08: 0000000000000000 R09: 0000000000000000 [ 496.536730][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.536742][ T8416] R13: 00007fa592626038 R14: 00007fa592625fa0 R15: 00007fffc6918b48 [ 496.536774][ T8416] [ 496.536802][ T8416] socket: no more sockets [ 502.266005][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.266041][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.394340][ T8436] siw: device registration error -23 [ 504.129338][ T8448] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 504.896335][ T8450] FAULT_INJECTION: forcing a failure. [ 504.896335][ T8450] name failslab, interval 1, probability 5, space 0, times 10 [ 504.896357][ T8450] CPU: 1 UID: 0 PID: 8450 Comm: syz.2.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.896371][ T8450] Tainted: [L]=SOFTLOCKUP [ 504.896375][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 504.896381][ T8450] Call Trace: [ 504.896386][ T8450] [ 504.896391][ T8450] dump_stack_lvl+0xe8/0x150 [ 504.896412][ T8450] should_fail_ex+0x3eb/0x540 [ 504.896427][ T8450] should_failslab+0xa8/0x100 [ 504.896441][ T8450] ? do_getname+0x2e/0x250 [ 504.896456][ T8450] kmem_cache_alloc_noprof+0x9c/0x600 [ 504.896472][ T8450] ? do_futex+0x3e7/0x4e0 [ 504.896484][ T8450] ? do_getname+0x2e/0x250 [ 504.896501][ T8450] do_getname+0x2e/0x250 [ 504.896514][ T8450] ? getname_flags+0x11/0x20 [ 504.896530][ T8450] do_sys_openat2+0xce/0x200 [ 504.896545][ T8450] ? __se_sys_futex+0x3a8/0x450 [ 504.896556][ T8450] ? __pfx_do_sys_openat2+0x10/0x10 [ 504.896574][ T8450] ? rcu_is_watching+0x16/0xb0 [ 504.896587][ T8450] __x64_sys_openat+0x138/0x170 [ 504.896605][ T8450] do_syscall_64+0x171/0x540 [ 504.896618][ T8450] ? trace_irq_disable+0x3b/0x140 [ 504.896628][ T8450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.896638][ T8450] ? clear_bhb_loop+0x70/0xc0 [ 504.896651][ T8450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.896661][ T8450] RIP: 0033:0x00007fc3739a94d9 [ 504.896673][ T8450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.896682][ T8450] RSP: 002b:00007fc3747ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.896693][ T8450] RAX: ffffffffffffffda RBX: 00007fc373c25fa0 RCX: 00007fc3739a94d9 [ 504.896701][ T8450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 504.896707][ T8450] RBP: 00007fc373a3804e R08: 0000000000000000 R09: 0000000000000000 [ 504.896715][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.896722][ T8450] R13: 00007fc373c26038 R14: 00007fc373c25fa0 R15: 00007fff6b59bf08 [ 504.896741][ T8450] [ 505.054499][ T8450] FAULT_INJECTION: forcing a failure. [ 505.054499][ T8450] name failslab, interval 1, probability 5, space 0, times 9 [ 505.054530][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: syz.2.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.054555][ T8450] Tainted: [L]=SOFTLOCKUP [ 505.054562][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 505.054573][ T8450] Call Trace: [ 505.054580][ T8450] [ 505.054588][ T8450] dump_stack_lvl+0xe8/0x150 [ 505.054626][ T8450] should_fail_ex+0x3eb/0x540 [ 505.054650][ T8450] should_failslab+0xa8/0x100 [ 505.054677][ T8450] __kmalloc_noprof+0xf9/0x710 [ 505.054715][ T8450] ? tomoyo_encode+0x2ad/0x570 [ 505.054742][ T8450] ? tomoyo_encode+0x2ad/0x570 [ 505.054777][ T8450] tomoyo_encode+0x2ad/0x570 [ 505.054811][ T8450] tomoyo_realpath_from_path+0x5fd/0x640 [ 505.054848][ T8450] ? tomoyo_path_number_perm+0x219/0x5f0 [ 505.054873][ T8450] tomoyo_path_number_perm+0x246/0x5f0 [ 505.054900][ T8450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.054922][ T8450] ? __lock_acquire+0x747/0x2de0 [ 505.054964][ T8450] ? do_futex+0x3e7/0x4e0 [ 505.055003][ T8450] ? __fget_files+0x29/0x3f0 [ 505.055030][ T8450] ? __fget_files+0x29/0x3f0 [ 505.055051][ T8450] security_file_ioctl+0xc3/0x2a0 [ 505.055076][ T8450] __se_sys_ioctl+0x47/0x170 [ 505.055102][ T8450] do_syscall_64+0x171/0x540 [ 505.055127][ T8450] ? trace_irq_disable+0x3b/0x140 [ 505.055144][ T8450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.055162][ T8450] ? clear_bhb_loop+0x70/0xc0 [ 505.055185][ T8450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.055204][ T8450] RIP: 0033:0x00007fc3739a94d9 [ 505.055223][ T8450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.055239][ T8450] RSP: 002b:00007fc3747ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.055258][ T8450] RAX: ffffffffffffffda RBX: 00007fc373c25fa0 RCX: 00007fc3739a94d9 [ 505.055271][ T8450] RDX: 0000000000000000 RSI: 00000000c138fd09 RDI: 0000000000000007 [ 505.055283][ T8450] RBP: 00007fc373a3804e R08: 0000000000000000 R09: 0000000000000000 [ 505.055295][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.055305][ T8450] R13: 00007fc373c26038 R14: 00007fc373c25fa0 R15: 00007fff6b59bf08 [ 505.055336][ T8450] [ 505.055356][ T8450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.089333][ T8450] FAULT_INJECTION: forcing a failure. [ 505.089333][ T8450] name failslab, interval 1, probability 5, space 0, times 8 [ 505.089364][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: syz.2.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.089389][ T8450] Tainted: [L]=SOFTLOCKUP [ 505.089396][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 505.089407][ T8450] Call Trace: [ 505.089414][ T8450] [ 505.089422][ T8450] dump_stack_lvl+0xe8/0x150 [ 505.089457][ T8450] should_fail_ex+0x3eb/0x540 [ 505.089482][ T8450] should_failslab+0xa8/0x100 [ 505.089506][ T8450] ? __anon_vma_prepare+0xbe/0x4a0 [ 505.089532][ T8450] kmem_cache_alloc_noprof+0x9c/0x600 [ 505.089563][ T8450] ? __anon_vma_prepare+0xbe/0x4a0 [ 505.089595][ T8450] __anon_vma_prepare+0xbe/0x4a0 [ 505.089626][ T8450] do_pte_missing+0x2f20/0x3520 [ 505.089652][ T8450] ? __lock_acquire+0x747/0x2de0 [ 505.089703][ T8450] handle_mm_fault+0x1807/0x2f80 [ 505.089740][ T8450] ? handle_mm_fault+0xee/0x2f80 [ 505.089774][ T8450] ? __pfx_handle_mm_fault+0x10/0x10 [ 505.089796][ T8450] ? lock_vma_under_rcu+0x45a/0x500 [ 505.089845][ T8450] do_user_addr_fault+0xb35/0x1480 [ 505.089880][ T8450] ? trace_page_fault_user+0x84/0x1e0 [ 505.089906][ T8450] exc_page_fault+0x6a/0xc0 [ 505.089932][ T8450] asm_exc_page_fault+0x26/0x30 [ 505.089950][ T8450] RIP: 0033:0x00007fc373856863 [ 505.089969][ T8450] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 505.089985][ T8450] RSP: 002b:00007fc3747fe460 EFLAGS: 00010202 [ 505.090005][ T8450] RAX: 0000000000000000 RBX: 00007fc3747fe520 RCX: 00007fc369600000 [ 505.090018][ T8450] RDX: 00007fc3747fe6c0 RSI: 0000000000000003 RDI: 00007fc3747fe5c0 [ 505.090030][ T8450] RBP: 0000000000000000 R08: 000000000000000a R09: 00000000000002cd [ 505.090041][ T8450] R10: 0000000000000334 R11: 00007fc3747fe520 R12: 000000000000011e [ 505.090053][ T8450] R13: 00007fc373a589c0 R14: 0000000000000058 R15: 00007fc3747fe5c0 [ 505.090084][ T8450] [ 505.090106][ T8450] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 505.090142][ T8450] FAULT_INJECTION: forcing a failure. [ 505.090142][ T8450] name failslab, interval 1, probability 5, space 0, times 7 [ 505.090165][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: syz.2.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.090189][ T8450] Tainted: [L]=SOFTLOCKUP [ 505.090196][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 505.090206][ T8450] Call Trace: [ 505.090212][ T8450] [ 505.090219][ T8450] dump_stack_lvl+0xe8/0x150 [ 505.090250][ T8450] should_fail_ex+0x3eb/0x540 [ 505.090273][ T8450] should_failslab+0xa8/0x100 [ 505.090295][ T8450] ? __anon_vma_prepare+0x109/0x4a0 [ 505.090320][ T8450] kmem_cache_alloc_noprof+0x9c/0x600 [ 505.090347][ T8450] ? kmem_cache_alloc_noprof+0x151/0x600 [ 505.090376][ T8450] ? __anon_vma_prepare+0x109/0x4a0 [ 505.090408][ T8450] __anon_vma_prepare+0x109/0x4a0 [ 505.090438][ T8450] do_pte_missing+0x2f20/0x3520 [ 505.090465][ T8450] ? __lock_acquire+0x747/0x2de0 [ 505.090507][ T8450] handle_mm_fault+0x1807/0x2f80 [ 505.090542][ T8450] ? handle_mm_fault+0xee/0x2f80 [ 505.090576][ T8450] ? __pfx_handle_mm_fault+0x10/0x10 [ 505.090597][ T8450] ? lock_vma_under_rcu+0x45a/0x500 [ 505.090645][ T8450] do_user_addr_fault+0xb35/0x1480 [ 505.090680][ T8450] ? trace_page_fault_user+0x84/0x1e0 [ 505.090712][ T8450] exc_page_fault+0x6a/0xc0 [ 505.090737][ T8450] asm_exc_page_fault+0x26/0x30 [ 505.090755][ T8450] RIP: 0033:0x00007fc373856863 [ 505.090772][ T8450] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 505.090788][ T8450] RSP: 002b:00007fc3747fe460 EFLAGS: 00010202 [ 505.090803][ T8450] RAX: 0000000000000000 RBX: 00007fc3747fe520 RCX: 00007fc369600000 [ 505.090816][ T8450] RDX: 00007fc3747fe6c0 RSI: 0000000000000003 RDI: 00007fc3747fe5c0 [ 505.090828][ T8450] RBP: 0000000000000000 R08: 000000000000000a R09: 00000000000002cd [ 505.090838][ T8450] R10: 0000000000000334 R11: 00007fc3747fe520 R12: 000000000000011e [ 505.090850][ T8450] R13: 00007fc373a589c0 R14: 0000000000000058 R15: 00007fc3747fe5c0 [ 505.090882][ T8450] [ 505.119208][ T8450] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 506.102059][ T8450] FAULT_INJECTION: forcing a failure. [ 506.102059][ T8450] name failslab, interval 1, probability 5, space 0, times 2 [ 506.102084][ T8450] CPU: 1 UID: 0 PID: 8450 Comm: syz.2.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.102104][ T8450] Tainted: [L]=SOFTLOCKUP [ 506.102108][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 506.102115][ T8450] Call Trace: [ 506.102120][ T8450] [ 506.102125][ T8450] dump_stack_lvl+0xe8/0x150 [ 506.102146][ T8450] should_fail_ex+0x3eb/0x540 [ 506.102161][ T8450] should_failslab+0xa8/0x100 [ 506.102174][ T8450] ? do_getname+0x2e/0x250 [ 506.102189][ T8450] kmem_cache_alloc_noprof+0x9c/0x600 [ 506.102206][ T8450] ? do_getname+0x2e/0x250 [ 506.102227][ T8450] do_getname+0x2e/0x250 [ 506.102240][ T8450] ? getname_flags+0x11/0x20 [ 506.102255][ T8450] do_sys_openat2+0xce/0x200 [ 506.102272][ T8450] ? __pfx_do_sys_openat2+0x10/0x10 [ 506.102290][ T8450] ? rcu_is_watching+0x16/0xb0 [ 506.102303][ T8450] __x64_sys_openat+0x138/0x170 [ 506.102321][ T8450] do_syscall_64+0x171/0x540 [ 506.102336][ T8450] ? trace_irq_disable+0x3b/0x140 [ 506.102345][ T8450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.102356][ T8450] ? clear_bhb_loop+0x70/0xc0 [ 506.102369][ T8450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.102379][ T8450] RIP: 0033:0x00007fc373969d0e [ 506.102391][ T8450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 506.102401][ T8450] RSP: 002b:00007fc3747fed48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.102412][ T8450] RAX: ffffffffffffffda RBX: 00007fc3747ff6c0 RCX: 00007fc373969d0e [ 506.102420][ T8450] RDX: 0000000000000002 RSI: 00007fc3747feea0 RDI: ffffffffffffff9c [ 506.102431][ T8450] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 506.102437][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc3747feea0 [ 506.102444][ T8450] R13: 0000000000000000 R14: 00007fc369600000 R15: 00007fc3747feee0 [ 506.102460][ T8450] [ 506.608089][ T8460] loop3: detected capacity change from 0 to 764 [ 510.816010][ T8479] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 510.986956][ T8478] loop2: detected capacity change from 0 to 33280 [ 510.999479][ T8478] ext4: Unknown parameter 'nomblk_io_submit.nouid32' [ 512.927866][ T8488] loop4: detected capacity change from 0 to 33280 [ 512.946670][ T8488] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 512.946682][ T8488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 513.020007][ T8488] EXT4-fs (loop4): 1 truncate cleaned up [ 513.023081][ T8488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.045002][ T5641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.249778][ T8505] loop1: detected capacity change from 0 to 128 [ 514.263849][ T8505] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 514.263867][ T8505] FAT-fs (loop1): data area starts beyond volume (36 > 11) [ 514.263876][ T8505] FAT-fs (loop1): Can't find a valid FAT filesystem [ 515.060625][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 520.061549][ T8529] FAULT_INJECTION: forcing a failure. [ 520.061549][ T8529] name failslab, interval 1, probability 5, space 0, times 0 [ 520.061702][ T8529] CPU: 0 UID: 0 PID: 8529 Comm: syz.5.613 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.061736][ T8529] Tainted: [L]=SOFTLOCKUP [ 520.061743][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 520.061754][ T8529] Call Trace: [ 520.061761][ T8529] [ 520.061770][ T8529] dump_stack_lvl+0xe8/0x150 [ 520.061807][ T8529] should_fail_ex+0x3eb/0x540 [ 520.061832][ T8529] should_failslab+0xa8/0x100 [ 520.061857][ T8529] ? alloc_empty_file+0x5b/0x1d0 [ 520.061884][ T8529] kmem_cache_alloc_noprof+0x9c/0x600 [ 520.061916][ T8529] ? alloc_empty_file+0x5b/0x1d0 [ 520.061949][ T8529] alloc_empty_file+0x5b/0x1d0 [ 520.061978][ T8529] alloc_file_pseudo+0x110/0x1e0 [ 520.062010][ T8529] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 520.062048][ T8529] __anon_inode_getfile+0x129/0x200 [ 520.062081][ T8529] new_userfaultfd+0x1fb/0x3b0 [ 520.062113][ T8529] __x64_sys_userfaultfd+0x81/0xa0 [ 520.062141][ T8529] do_syscall_64+0x171/0x540 [ 520.062168][ T8529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.062187][ T8529] ? clear_bhb_loop+0x70/0xc0 [ 520.062210][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.062238][ T8529] RIP: 0033:0x00007fd19b5a94d9 [ 520.062257][ T8529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.062274][ T8529] RSP: 002b:00007fd1997d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 520.062295][ T8529] RAX: ffffffffffffffda RBX: 00007fd19b826090 RCX: 00007fd19b5a94d9 [ 520.062310][ T8529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080801 [ 520.062322][ T8529] RBP: 00007fd19b63804e R08: 0000000000000000 R09: 0000000000000000 [ 520.062334][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.062345][ T8529] R13: 00007fd19b826128 R14: 00007fd19b826090 R15: 00007fff58555888 [ 520.062376][ T8529] [ 525.852250][ T161] IPVS: starting estimator thread 0... [ 525.943941][ T8568] IPVS: using max 30 ests per chain, 72000 per kthread [ 526.034726][ T8575] IPVS: Error connecting to the multicast addr [ 531.056029][ T8598] loop2: detected capacity change from 0 to 33280 [ 531.108870][ T8598] EXT4-fs (loop2): Test dummy encryption mode enabled [ 531.108892][ T8598] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 531.108903][ T8598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 531.119097][ T8598] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 531.119170][ T8598] EXT4-fs: failed to create workqueue [ 531.119180][ T8598] EXT4-fs (loop2): mount failed [ 532.606661][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 533.404017][ T33] audit: type=1800 audit(1794621359.766:14): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.628" name="file0" dev="overlay" ino=769 res=0 errno=-22 [ 534.939915][ T8630] netlink: 'syz.3.632': attribute type 3 has an invalid length. [ 534.939977][ T8630] netlink: 3 bytes leftover after parsing attributes in process `syz.3.632'. [ 536.953213][ T8637] loop1: detected capacity change from 0 to 40427 [ 536.992090][ T8637] F2FS-fs (loop1): invalid crc_offset: 4177530876 [ 537.007888][ T8637] F2FS-fs (loop1): Wrong journal entry on segno 65538 [ 537.009212][ T8637] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 537.352218][ T8643] xt_connbytes: Forcing CT accounting to be enabled [ 537.352354][ T8643] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 538.577957][ T8649] loop5: detected capacity change from 0 to 33280 [ 538.600353][ T8649] EXT4-fs (loop5): Test dummy encryption mode enabled [ 538.600372][ T8649] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 538.600383][ T8649] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 538.883137][ T8653] siw: device registration error -23 [ 539.837924][ T8649] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.623: bad orphan inode 131083 [ 539.837946][ T8649] loop5: lost filesystem error report for type 5 error -117 [ 539.850191][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 539.850205][ C1] EXT4-fs (loop5): initial error at time 1794621366: ext4_orphan_get:1430 [ 539.850218][ C1] EXT4-fs (loop5): last error at time 1794621366: ext4_orphan_get:1430 [ 539.858507][ T8649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.105640][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.5.623'. [ 540.317413][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.743621][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 548.748799][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 548.748823][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 548.748839][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 548.748855][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 548.748871][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 548.748892][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 548.748909][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 548.748925][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 548.748940][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 548.763845][ T8688] loop1: detected capacity change from 0 to 256 [ 548.766567][ T8688] exfat: Deprecated parameter 'namecase' [ 548.766601][ T8688] exfat: Deprecated parameter 'namecase' [ 548.818083][ T8688] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 548.900502][ T8688] exFAT-fs (loop1): start_clu is invalid cluster(0xff000008) [ 550.898651][ T8696] batman_adv: batadv0: Adding interface: dummy0 [ 550.898663][ T8696] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.898680][ T8696] batman_adv: batadv0: Interface activated: dummy0 [ 550.904069][ T8696] batadv0: mtu less than device minimum [ 550.904847][ T8696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 550.905567][ T8696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 550.906285][ T8696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 550.907000][ T8696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 550.907716][ T8696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 550.908445][ T8696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 550.909170][ T8696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 550.909893][ T8696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 550.910613][ T8696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 552.433914][ T8706] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 553.837095][ T8707] loop4: detected capacity change from 0 to 33280 [ 553.995650][ T8707] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.650: iget: bad i_size value: 38620345925642 [ 553.995717][ T8707] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 554.014126][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 554.014147][ C0] EXT4-fs (loop4): initial error at time 1794621380: ext4_orphan_get:1404: inode 15 [ 554.014174][ C0] EXT4-fs (loop4): last error at time 1794621380: ext4_orphan_get:1404: inode 15 [ 554.024220][ T8707] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.650: couldn't read orphan inode 15 (err -117) [ 554.024257][ T8707] loop4: lost filesystem error report for type 5 error -117 [ 554.124178][ T8707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.207362][ T8710] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.650: bg 0: block 5: invalid block bitmap [ 554.256039][ T8710] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 52 with error 28 [ 554.256060][ T8710] EXT4-fs (loop4): This should not happen!! Data will be lost [ 554.256060][ T8710] [ 554.256068][ T8710] EXT4-fs (loop4): Total free blocks count 0 [ 554.256075][ T8710] EXT4-fs (loop4): Free/Dirty block details [ 554.256082][ T8710] EXT4-fs (loop4): free_blocks=0 [ 554.256089][ T8710] EXT4-fs (loop4): dirty_blocks=52 [ 554.256095][ T8710] EXT4-fs (loop4): Block reservation details [ 554.256101][ T8710] EXT4-fs (loop4): i_reserved_data_blocks=52 [ 554.515156][ T8714] loop3: detected capacity change from 0 to 64 [ 554.549949][ T5641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.731228][ T8718] loop1: detected capacity change from 0 to 1024 [ 554.740128][ T8718] hfsplus: Unknown parameter '{<ԉ0Z Goᑲ;іPdwJ?'f^v}~3$_ɔD^>W|3JWzp8p.V#’k;' [ 556.978920][ T8714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.480686][ T8730] futex_wake_op: syz.1.655 tries to shift op by 144; fix this program [ 557.506205][ T8730] loop1: detected capacity change from 0 to 256 [ 557.606612][ T8730] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 557.646341][ T8730] exFAT-fs (loop1): valid_size(562949953421322) is greater than size(10) [ 557.703519][ T33] audit: type=1800 audit(1794621384.346:15): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.655" name="file1" dev="loop1" ino=166 res=0 errno=-22 [ 562.183523][ T8753] loop4: detected capacity change from 0 to 33280 [ 562.191291][ T8753] EXT4-fs (loop4): Test dummy encryption mode enabled [ 562.191310][ T8753] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 562.191321][ T8753] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 562.232294][ T8753] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.657: bad orphan inode 131083 [ 562.232324][ T8753] loop4: lost filesystem error report for type 5 error -117 [ 562.233742][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 562.233760][ C0] EXT4-fs (loop4): initial error at time 1794621388: ext4_orphan_get:1430 [ 562.233783][ C0] EXT4-fs (loop4): last error at time 1794621388: ext4_orphan_get:1430 [ 562.273821][ T8753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.659103][ T8762] __nla_validate_parse: 65 callbacks suppressed [ 562.659124][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.657'. [ 563.985151][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.985208][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.500319][ T5641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.508553][ T8819] loop2: detected capacity change from 0 to 1024 [ 578.515530][ T8819] hfsplus: Unknown parameter '{<ԉ0Z Goᑲ;іPdwJ?'f^v}~3$_ɔD^>W|3JWzp8p.V#’k;' [ 579.746419][ T8822] overlayfs: upper fs does not support file handles, falling back to index=off. [ 579.969814][ T8824] loop4: detected capacity change from 0 to 32768 [ 580.016004][ T8824] JBD2: Ignoring recovery information on journal [ 580.017838][ T8824] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 580.017862][ T8824] JBD2: bad block at offset 32 [ 580.047408][ T8824] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 581.324489][ T8832] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 581.324536][ T8832] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 581.324547][ T8832] OCFS2: File system is now read-only. [ 581.324585][ T8832] (syz.4.674,8832,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 581.324615][ T8832] (syz.4.674,8832,1):__ocfs2_claim_clusters:2579 ERROR: status = -30 [ 581.324636][ T8832] (syz.4.674,8832,1):__ocfs2_claim_clusters:2587 ERROR: status = -30 [ 581.324661][ T8832] (syz.4.674,8832,1):ocfs2_add_clusters_in_btree:4877 ERROR: status = -30 [ 581.324680][ T8832] (syz.4.674,8832,1):ocfs2_write_cluster:1134 ERROR: status = -30 [ 581.324698][ T8832] (syz.4.674,8832,1):ocfs2_write_cluster_by_desc:1228 ERROR: status = -30 [ 581.324717][ T8832] (syz.4.674,8832,1):ocfs2_write_begin_nolock:1800 ERROR: status = -30 [ 581.324895][ T8832] (syz.4.674,8832,1):ocfs2_write_begin:1888 ERROR: status = -30 [ 581.572786][ T5641] ocfs2: Unmounting device (7,4) on (node local) [ 581.636420][ T8835] loop1: detected capacity change from 0 to 33280 [ 581.661438][ T8835] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 581.749560][ T8835] EXT4-fs (loop1): 1 truncate cleaned up [ 581.826609][ T8835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.963211][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.312772][ T8845] loop5: detected capacity change from 0 to 1024 [ 583.323577][ T8845] hfsplus: Unknown parameter '{<ԉ0Z Goᑲ;іPdwJ?'f^v}~3$_ɔD^>W|3JWzp8p.V#’k;' [ 590.751028][ T8886] loop4: detected capacity change from 0 to 16 [ 590.760670][ T8886] erofs (device loop4): mounted with root inode @ nid 36. [ 594.204794][ T8911] loop5: detected capacity change from 0 to 33280 [ 595.013494][ T33] audit: type=1800 audit(1794621421.426:16): pid=8912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.697" name=08 dev="sda1" ino=2047 res=0 errno=-22 [ 595.411947][ T8911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 595.412018][ T8911] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.617351][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 595.709781][ T5736] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 598.477784][ T8937] loop5: detected capacity change from 0 to 16 [ 598.544210][ T8938] tmpfs: Bad value for 'mpol' [ 598.620592][ T8933] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 598.620613][ T8933] block device autoloading is deprecated and will be removed. [ 598.674187][ T8937] erofs (device loop5): mounted with root inode @ nid 36. [ 598.727465][ T5736] usb 4-1: device descriptor read/all, error -71 [ 598.774457][ T8938] md: could not open device unknown-block(1,9). [ 598.774507][ T8938] md: error, md_import_device() returned -16 [ 598.774691][ T8936] md: could not open device unknown-block(1,8). [ 598.774738][ T8936] md: error, md_import_device() returned -16 [ 598.814496][ T8933] md: md4 stopped. [ 598.851341][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 598.862315][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 598.863108][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 598.878182][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 598.885651][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.192588][ T8946] loop1: detected capacity change from 0 to 128 [ 599.211795][ T8946] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 599.211821][ T8946] FAT-fs (loop1): data area starts beyond volume (36 > 11) [ 599.211837][ T8946] FAT-fs (loop1): Can't find a valid FAT filesystem [ 600.950987][ T8960] loop5: detected capacity change from 0 to 16 [ 600.956165][ T8960] erofs (device loop5): mounted with root inode @ nid 36. [ 600.973763][ T5633] Bluetooth: hci3: command tx timeout [ 601.527835][ T8964] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 602.604258][ T6411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.218124][ T5633] Bluetooth: hci3: command tx timeout [ 603.786617][ T6411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.000381][ T33] audit: type=1800 audit(1794621430.576:17): pid=8977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.709" name=08 dev="sda1" ino=2047 res=0 errno=-22 [ 604.890550][ T6411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.700740][ T5633] Bluetooth: hci3: command tx timeout [ 605.757457][ T6411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.781501][ T8939] rxe_eth0 speed is unknown, defaulting to 1000 [ 606.272158][ T6411] bridge_slave_1: left allmulticast mode [ 606.272185][ T6411] bridge_slave_1: left promiscuous mode [ 606.272401][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.304473][ T6411] bridge_slave_0: left allmulticast mode [ 606.304490][ T6411] bridge_slave_0: left promiscuous mode [ 606.304615][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.779600][ T8991] tmpfs: Bad value for 'mpol' [ 606.830447][ T8991] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 606.831105][ T8991] block device autoloading is deprecated and will be removed. [ 607.046238][ T8992] md: invalid raid superblock magic on ram10 [ 607.046294][ T8992] md: ram10 does not have a valid v0.0 superblock, not importing! [ 607.046371][ T8992] md: md_import_device returned -22 [ 607.046980][ T8993] md: invalid raid superblock magic on ram11 [ 607.046994][ T8993] md: ram11 does not have a valid v0.0 superblock, not importing! [ 607.047062][ T8993] md: md_import_device returned -22 [ 607.047183][ T8994] md: md5 stopped. [ 608.690859][ T56] Bluetooth: hci3: command tx timeout [ 609.332147][ T6411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.458634][ T6411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.534725][ T6411] bond0 (unregistering): (slave vlan0): Releasing backup interface [ 609.622942][ T6411] bond0 (unregistering): Released all slaves [ 609.764528][ T8939] lo speed is unknown, defaulting to 1000 [ 609.879765][ T6411] tipc: Left network mode [ 613.932345][ T9036] loop3: detected capacity change from 0 to 33280 [ 613.936144][ T9036] ext4: Unknown parameter 'nomblk_io_submit.nouid32' [ 614.004031][ T32] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1072 jiffies old. [ 615.059383][ T6411] hsr_slave_0: left promiscuous mode [ 615.062942][ T6411] hsr_slave_1: left promiscuous mode [ 615.112397][ T6411] veth1_macvtap: left promiscuous mode [ 615.112474][ T6411] veth0_macvtap: left promiscuous mode [ 615.126643][ T6411] veth1_vlan: left promiscuous mode [ 615.126710][ T6411] veth0_vlan: left promiscuous mode [ 617.027656][ T6411] team0 (unregistering): Port device team_slave_1 removed [ 617.051612][ T6411] team0 (unregistering): Port device team_slave_0 removed [ 617.929891][ T68] smbdirect: ib_dev[syz0] removed [ 618.224341][ T4966] infiniband syz0: ib_query_port failed (-19) [ 618.247235][ T9061] tipc: Enabled bearer , priority 0 [ 618.251982][ T5299] 8021q: adding VLAN 0 to HW filter on device eth5 [ 618.257860][ T9062] syzkaller0: entered promiscuous mode [ 618.257915][ T9062] syzkaller0: entered allmulticast mode [ 619.627539][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.627651][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.627776][ T8939] bridge_slave_0: entered allmulticast mode [ 619.631105][ T8939] bridge_slave_0: entered promiscuous mode [ 619.635778][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.637493][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.637607][ T8939] bridge_slave_1: entered allmulticast mode [ 619.641638][ T8939] bridge_slave_1: entered promiscuous mode [ 620.127160][ T8939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.130202][ T9062] tipc: Resetting bearer [ 621.227008][ T9062] tipc: Disabling bearer [ 621.647579][ T8939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.871301][ T8939] team0: Port device team_slave_0 added [ 621.898298][ T8939] team0: Port device team_slave_1 added [ 624.385168][ T33] audit: type=1800 audit(1794621450.456:18): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.734" name="file2" dev="sda1" ino=2051 res=0 errno=-22 [ 624.385671][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.385719][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.400533][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.400546][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.400570][ T8939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.404483][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.404495][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.404520][ T8939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.226636][ T8939] hsr_slave_0: entered promiscuous mode [ 625.242908][ T8939] hsr_slave_1: entered promiscuous mode [ 625.243595][ T8939] debugfs: 'hsr0' already exists in 'hsr' [ 625.259144][ T8939] Cannot create hsr debugfs directory [ 626.938030][ T8939] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 626.956988][ T8939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 626.958153][ T8939] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 626.982402][ T8939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 626.983270][ T8939] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 627.009236][ T8939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 627.011853][ T8939] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 627.044036][ T8939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 627.063393][ T9129] loop3: detected capacity change from 0 to 1024 [ 627.091396][ T9129] hfsplus: failed to load extents file [ 627.189767][ T5299] 8021q: adding VLAN 0 to HW filter on device eth7 [ 627.340927][ T9129] loop3: detected capacity change from 0 to 2048 [ 627.345234][ T9129] udf: Unknown parameter '' [ 627.828058][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.991509][ T8939] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.095816][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.095917][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.097818][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.097901][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.272285][ T9150] jffs2: notice: (9150) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 633.156576][ T5827] libceph: connect (1)127.0.0.1:6789 error -101 [ 633.156803][ T5827] libceph: mon0 (1)127.0.0.1:6789 connect error [ 633.433038][ T5827] libceph: connect (1)127.0.0.1:6789 error -101 [ 633.437140][ T5827] libceph: mon0 (1)127.0.0.1:6789 connect error [ 633.823952][ T9181] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 633.823974][ T9181] block device autoloading is deprecated and will be removed. [ 633.870113][ T9185] ceph: No mds server is up or the cluster is laggy [ 634.655910][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.851469][ T5299] 8021q: adding VLAN 0 to HW filter on device eth6 [ 637.413760][ T33] audit: type=1800 audit(1794621462.956:19): pid=9217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.745" name="file2" dev="sda1" ino=2051 res=0 errno=-22 [ 640.452510][ T8939] veth0_vlan: entered promiscuous mode [ 640.562977][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 640.656542][ T8939] veth1_vlan: entered promiscuous mode [ 641.434477][ T8939] veth0_macvtap: entered promiscuous mode [ 641.438853][ T8939] veth1_macvtap: entered promiscuous mode [ 641.452045][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.459177][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.328589][ T1121] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.344466][ T5971] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.418575][ T5971] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.418622][ T5971] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.563943][ T9253] loop3: detected capacity change from 0 to 512 [ 644.310865][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.310886][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.649431][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.649451][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.945573][ T4966] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 647.175381][ T4966] usb 4-1: Using ep0 maxpacket: 8 [ 647.188622][ T4966] usb 4-1: New USB device found: idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 647.215181][ T4966] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 647.218258][ T5299] 8021q: adding VLAN 0 to HW filter on device eth8 [ 647.247545][ T4966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.247570][ T4966] usb 4-1: Product: syz [ 647.247583][ T4966] usb 4-1: Manufacturer: syz [ 647.247596][ T4966] usb 4-1: SerialNumber: syz [ 647.302251][ T4966] usb 4-1: config 0 descriptor?? [ 647.344826][ T4966] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 648.359887][ T4966] gspca_zc3xx: reg_w_i err -110 [ 648.818199][ T33] audit: type=1326 audit(1794621475.516:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.3.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc7a94d9 code=0x7ffc0000 [ 648.823360][ T33] audit: type=1326 audit(1794621475.516:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.3.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc7a94d9 code=0x7ffc0000 [ 648.828792][ T33] audit: type=1326 audit(1794621475.516:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.3.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc7a94d9 code=0x7ffc0000 [ 648.828999][ T33] audit: type=1326 audit(1794621475.516:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.3.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc7a94d9 code=0x7ffc0000 [ 648.830243][ T33] audit: type=1326 audit(1794621475.516:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.3.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59fc7a94d9 code=0x7ffc0000 [ 648.830588][ T33] audit: type=1326 audit(1794621475.516:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.3.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc7a94d9 code=0x7ffc0000 [ 648.831445][ T33] audit: type=1326 audit(1794621475.516:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.3.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc7a94d9 code=0x7ffc0000 [ 648.835026][ T33] audit: type=1326 audit(1794621475.516:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.3.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc7a94d9 code=0x7ffc0000 [ 648.835237][ T33] audit: type=1326 audit(1794621475.516:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.3.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fc7a94d9 code=0x7ffc0000 [ 648.836614][ T33] audit: type=1326 audit(1794621475.516:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.3.755" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f59fc7a94d9 code=0x7ffc0000 [ 648.836733][ T9286] netlink: 64 bytes leftover after parsing attributes in process `syz.3.755'. [ 648.954682][ T4966] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 648.954776][ T4966] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 649.021152][ T9288] netlink: 'syz.5.753': attribute type 39 has an invalid length. [ 650.788041][ T4966] usb 4-1: USB disconnect, device number 4 [ 650.908383][ T9307] loop5: detected capacity change from 0 to 33280 [ 651.114819][ T9307] EXT4-fs (loop5): Test dummy encryption mode enabled [ 651.114844][ T9307] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 651.114855][ T9307] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 651.365268][ T9310] tmpfs: Bad value for 'mpol' [ 651.378374][ T9310] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 651.378395][ T9310] block device autoloading is deprecated and will be removed. [ 651.457273][ T9307] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.769: bad orphan inode 131083 [ 651.457303][ T9307] loop5: lost filesystem error report for type 5 error -117 [ 651.468044][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 651.468064][ C1] EXT4-fs (loop5): initial error at time 1794621478: ext4_orphan_get:1430 [ 651.468085][ C1] EXT4-fs (loop5): last error at time 1794621478: ext4_orphan_get:1430 [ 651.520270][ T9307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.764327][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.769'. [ 652.333389][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.769502][ T9329] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 654.353195][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.353249][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.895033][ T9348] loop4: detected capacity change from 0 to 33280 [ 658.091335][ T9348] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 658.091355][ T9348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 658.115894][ T9348] EXT4-fs (loop4): 1 truncate cleaned up [ 658.181602][ T9348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.562911][ T5641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.663329][ T9402] loop1: detected capacity change from 0 to 33280 [ 665.691173][ T9402] EXT4-fs (loop1): Test dummy encryption mode enabled [ 665.691195][ T9402] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 665.691330][ T9402] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 665.734279][ T9402] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.775: bad orphan inode 131083 [ 665.734306][ T9402] loop1: lost filesystem error report for type 5 error -117 [ 665.748549][ T9402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.009944][ T9402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'. [ 666.462971][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.689446][ T9414] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 669.173473][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.780'. [ 671.019309][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 673.505317][ T33] kauditd_printk_skb: 186 callbacks suppressed [ 673.505492][ T33] audit: type=1800 audit(1794621499.516:216): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.782" name="file2" dev="sda1" ino=2051 res=0 errno=-22 [ 674.073299][ T9468] loop5: detected capacity change from 0 to 33280 [ 674.624958][ T9468] EXT4-fs (loop5): orphan cleanup on readonly fs [ 674.626071][ T9468] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 674.626201][ T9468] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 674.626219][ T9468] EXT4-fs error (device loop5): ext4_acquire_dquot:7120: comm syz.5.790: Failed to acquire dquot type 1 [ 674.626241][ T9468] loop5: lost filesystem error report for type 5 error -5 [ 674.649317][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 674.649337][ C0] EXT4-fs (loop5): last error at time 1794621501: ext4_acquire_dquot:7120 [ 674.661484][ T9468] EXT4-fs (loop5): 1 truncate cleaned up [ 674.697940][ T9468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 675.066232][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.557785][ T9492] netlink: 104 bytes leftover after parsing attributes in process `syz.1.793'. [ 677.110980][ T9501] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 677.112203][ T9501] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 677.112273][ T9501] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 677.112307][ T9501] UDF-fs: Scanning with blocksize 512 failed [ 677.117211][ T9501] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 677.117829][ T9501] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 677.117870][ T9501] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 677.117887][ T9501] UDF-fs: Scanning with blocksize 1024 failed [ 677.120325][ T9501] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 677.120755][ T9501] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 677.120801][ T9501] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 677.120835][ T9501] UDF-fs: Scanning with blocksize 2048 failed [ 677.122799][ T9501] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 677.123045][ T9501] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 677.123085][ T9501] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 677.123117][ T9501] UDF-fs: Scanning with blocksize 4096 failed [ 677.123147][ T9501] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 684.726898][ T9540] loop5: detected capacity change from 0 to 33280 [ 684.856097][ T9540] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 684.856156][ T9540] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 684.997267][ T9540] EXT4-fs (loop5): 1 truncate cleaned up [ 684.998214][ T9540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.775584][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.775621][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.910435][ T9549] EXT4-fs error (device loop5): __ext4_expand_extra_isize:7453: inode #12: comm syz.5.801: bad extra_isize 62 (inode size 256) [ 685.914418][ T9549] EXT4-fs (loop5): Remounting filesystem read-only [ 686.084197][ T11] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 686.244971][ T11] usb 7-1: Using ep0 maxpacket: 16 [ 686.327318][ T11] usb 7-1: unable to get BOS descriptor or descriptor too short [ 686.329677][ T11] usb 7-1: New USB device found: idVendor=0499, idProduct=103e, bcdDevice=0.40 [ 686.404691][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.544771][ T11] usb 7-1: string descriptor 0 read error: -22 [ 686.597549][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.852326][ T11] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 687.891015][ T11] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 687.924184][ T11] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 687.924868][ T11] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 687.974085][ T11] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 689.209536][ T9554] loop5: detected capacity change from 0 to 32768 [ 689.269045][ T9554] JBD2: Ignoring recovery information on journal [ 689.270722][ T9554] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 689.270743][ T9554] JBD2: bad block at offset 32 [ 689.295227][ T9554] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 689.860726][ T9568] OCFS2: ERROR (device loop5): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 689.860814][ T9568] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 689.860847][ T9568] OCFS2: File system is now read-only. [ 689.860901][ T9568] (syz.5.804,9568,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 689.860946][ T9568] (syz.5.804,9568,1):__ocfs2_claim_clusters:2579 ERROR: status = -30 [ 689.860988][ T9568] (syz.5.804,9568,1):__ocfs2_claim_clusters:2587 ERROR: status = -30 [ 689.861031][ T9568] (syz.5.804,9568,1):ocfs2_add_clusters_in_btree:4877 ERROR: status = -30 [ 689.861073][ T9568] (syz.5.804,9568,1):ocfs2_write_cluster:1134 ERROR: status = -30 [ 689.861115][ T9568] (syz.5.804,9568,1):ocfs2_write_cluster_by_desc:1228 ERROR: status = -30 [ 689.861157][ T9568] (syz.5.804,9568,1):ocfs2_write_begin_nolock:1800 ERROR: status = -30 [ 689.862904][ T9568] (syz.5.804,9568,1):ocfs2_write_begin:1888 ERROR: status = -30 [ 691.110056][ T11] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 691.112830][ T11] usb 7-1: USB disconnect, device number 2 [ 691.300703][ T6018] ocfs2: Unmounting device (7,5) on (node local) [ 691.316982][ T9572] FAULT_INJECTION: forcing a failure. [ 691.316982][ T9572] name failslab, interval 1, probability 5, space 0, times 100 [ 691.319053][ T9572] CPU: 0 UID: 0 PID: 9572 Comm: syz.6.809 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.319071][ T9572] Tainted: [L]=SOFTLOCKUP [ 691.319075][ T9572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 691.319082][ T9572] Call Trace: [ 691.319087][ T9572] [ 691.319092][ T9572] dump_stack_lvl+0xe8/0x150 [ 691.319114][ T9572] should_fail_ex+0x3eb/0x540 [ 691.319130][ T9572] should_failslab+0xa8/0x100 [ 691.319147][ T9572] ? ptlock_alloc+0x20/0x70 [ 691.319170][ T9572] kmem_cache_alloc_noprof+0x9c/0x600 [ 691.319197][ T9572] ? ptlock_alloc+0x20/0x70 [ 691.319214][ T9572] ptlock_alloc+0x20/0x70 [ 691.319226][ T9572] pte_alloc_one+0x7a/0x2a0 [ 691.319242][ T9572] __pte_alloc+0x25/0x1a0 [ 691.319259][ T9572] do_pte_missing+0x2d74/0x3520 [ 691.319274][ T9572] ? __lock_acquire+0x747/0x2de0 [ 691.319298][ T9572] handle_mm_fault+0x1807/0x2f80 [ 691.319320][ T9572] ? handle_mm_fault+0xee/0x2f80 [ 691.319337][ T9572] ? __pfx_handle_mm_fault+0x10/0x10 [ 691.319349][ T9572] ? lock_vma_under_rcu+0x45a/0x500 [ 691.319375][ T9572] do_user_addr_fault+0xb35/0x1480 [ 691.319393][ T9572] ? trace_page_fault_user+0x84/0x1e0 [ 691.319407][ T9572] exc_page_fault+0x6a/0xc0 [ 691.319422][ T9572] asm_exc_page_fault+0x26/0x30 [ 691.319433][ T9572] RIP: 0033:0x00007fbf5745690e [ 691.319445][ T9572] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 691.319454][ T9572] RSP: 002b:00007fbf584ac460 EFLAGS: 00010206 [ 691.319465][ T9572] RAX: 0000000000a00001 RBX: 00007fbf584ac520 RCX: 0000000000000008 [ 691.319472][ T9572] RDX: 000000000000003f RSI: 0000000000000001 RDI: 00007fbf584ac5c0 [ 691.319479][ T9572] RBP: 0000000000000018 R08: 00007fbf4d200000 R09: 0000000000a00000 [ 691.319486][ T9572] R10: 0000000000000000 R11: 00007fbf584ac530 R12: 0000000000000001 [ 691.319492][ T9572] R13: 00007fbf576589c0 R14: 0000000000000000 R15: 00007fbf584ac5c0 [ 691.319509][ T9572] [ 691.319531][ T9572] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 691.567133][ T9574] netlink: 288 bytes leftover after parsing attributes in process `syz.3.799'. [ 691.633355][ T9574] loop3: detected capacity change from 0 to 33280 [ 691.761082][ T9574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.761196][ T9574] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.174318][ T9591] loop1: detected capacity change from 0 to 1024 [ 692.185818][ T9591] hfsplus: Unknown parameter '{<ԉ0Z Goᑲ;іPdwJ?'f^v}~3$_ɔD^>W|3JWzp8p.V#’k;' [ 693.213078][ T5643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.373014][ T9597] loop5: detected capacity change from 0 to 8 [ 693.468222][ T9572] FAULT_INJECTION: forcing a failure. [ 693.468222][ T9572] name failslab, interval 1, probability 5, space 0, times 98 [ 693.468258][ T9572] CPU: 1 UID: 0 PID: 9572 Comm: syz.6.809 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.468286][ T9572] Tainted: [L]=SOFTLOCKUP [ 693.468293][ T9572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 693.468304][ T9572] Call Trace: [ 693.468312][ T9572] [ 693.468320][ T9572] dump_stack_lvl+0xe8/0x150 [ 693.468357][ T9572] should_fail_ex+0x3eb/0x540 [ 693.468383][ T9572] should_failslab+0xa8/0x100 [ 693.468411][ T9572] __kmalloc_noprof+0xf9/0x710 [ 693.468440][ T9572] ? __mutex_trylock_common+0x15f/0x270 [ 693.468460][ T9572] ? __alloc_workqueue+0x14f/0x2340 [ 693.468482][ T9572] ? __alloc_workqueue+0x14f/0x2340 [ 693.468511][ T9572] __alloc_workqueue+0x14f/0x2340 [ 693.468536][ T9572] ? trace_contention_end+0x3d/0x140 [ 693.468558][ T9572] ? __mutex_lock+0x305/0x15a0 [ 693.468590][ T9572] ? bd_prepare_to_claim+0x413/0x4a0 [ 693.468621][ T9572] alloc_workqueue_noprof+0xe3/0x210 [ 693.468644][ T9572] ? __pfx___mutex_lock+0x10/0x10 [ 693.468675][ T9572] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 693.468710][ T9572] ? __asan_memcpy+0x40/0x70 [ 693.468730][ T9572] ? loop_set_status_from_info+0x17b/0x240 [ 693.468753][ T9572] loop_configure+0xad1/0x1180 [ 693.468777][ T9572] ? __pfx_loop_configure+0x10/0x10 [ 693.468792][ T9572] ? __lock_acquire+0x747/0x2de0 [ 693.468835][ T9572] ? __lock_acquire+0x747/0x2de0 [ 693.468866][ T9572] lo_ioctl+0x471/0x1730 [ 693.468885][ T9572] ? lock_acquire+0x115/0x350 [ 693.468907][ T9572] ? __pfx_lo_ioctl+0x10/0x10 [ 693.468924][ T9572] ? lock_acquire+0x115/0x350 [ 693.468954][ T9572] ? is_bpf_text_address+0x26/0x2b0 [ 693.468981][ T9572] ? is_bpf_text_address+0x292/0x2b0 [ 693.469003][ T9572] ? is_bpf_text_address+0x26/0x2b0 [ 693.469025][ T9572] ? kernel_text_address+0xa5/0xe0 [ 693.469052][ T9572] ? __kernel_text_address+0xd/0x30 [ 693.469075][ T9572] ? unwind_get_return_address+0x4d/0x90 [ 693.469102][ T9572] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 693.469129][ T9572] ? arch_stack_walk+0xfb/0x150 [ 693.469157][ T9572] ? __lock_acquire+0x747/0x2de0 [ 693.469191][ T9572] ? __lock_acquire+0x747/0x2de0 [ 693.469227][ T9572] ? __lock_acquire+0x747/0x2de0 [ 693.469259][ T9572] ? __lock_acquire+0x747/0x2de0 [ 693.469300][ T9572] ? lock_acquire+0x115/0x350 [ 693.469333][ T9572] ? lock_acquire+0x115/0x350 [ 693.469367][ T9572] ? is_bpf_text_address+0x26/0x2b0 [ 693.469394][ T9572] ? is_bpf_text_address+0x292/0x2b0 [ 693.469417][ T9572] ? is_bpf_text_address+0x26/0x2b0 [ 693.469442][ T9572] ? kernel_text_address+0xa5/0xe0 [ 693.469467][ T9572] ? __kernel_text_address+0xd/0x30 [ 693.469491][ T9572] ? unwind_get_return_address+0x4d/0x90 [ 693.469518][ T9572] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 693.469544][ T9572] ? arch_stack_walk+0xfb/0x150 [ 693.469582][ T9572] ? stack_trace_save+0xa9/0x100 [ 693.469608][ T9572] ? __pfx_stack_trace_save+0x10/0x10 [ 693.469632][ T9572] ? kasan_save_track+0x51/0x90 [ 693.469655][ T9572] ? stack_depot_save_flags+0x33/0x840 [ 693.469676][ T9572] ? __lock_acquire+0x747/0x2de0 [ 693.469713][ T9572] ? kasan_save_track+0x51/0x90 [ 693.469731][ T9572] ? kasan_save_track+0x3f/0x90 [ 693.469748][ T9572] ? kasan_save_free_info+0x40/0x50 [ 693.469774][ T9572] ? __kasan_slab_free+0x70/0x90 [ 693.469793][ T9572] ? kfree+0x1c7/0x650 [ 693.469817][ T9572] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 693.469842][ T9572] ? security_file_ioctl+0xc3/0x2a0 [ 693.469863][ T9572] ? __se_sys_ioctl+0x47/0x170 [ 693.469886][ T9572] ? do_syscall_64+0x171/0x540 [ 693.469910][ T9572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.469936][ T9572] ? __asan_memset+0x22/0x50 [ 693.469965][ T9572] ? blk_get_meta_cap+0x19d/0x780 [ 693.469998][ T9572] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 693.470037][ T9572] ? blkdev_common_ioctl+0x14d4/0x3260 [ 693.470100][ T9572] ? do_vfs_ioctl+0x11d5/0x15a0 [ 693.470127][ T9572] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 693.470165][ T9572] ? kasan_quarantine_put+0xbb/0x1f0 [ 693.470202][ T9572] ? __pfx_lo_ioctl+0x10/0x10 [ 693.470224][ T9572] blkdev_ioctl+0x5e3/0x740 [ 693.470256][ T9572] ? __pfx_blkdev_ioctl+0x10/0x10 [ 693.470283][ T9572] ? __fget_files+0x29/0x3f0 [ 693.470305][ T9572] ? bpf_lsm_file_ioctl+0x9/0x20 [ 693.470327][ T9572] ? __pfx_blkdev_ioctl+0x10/0x10 [ 693.470352][ T9572] __se_sys_ioctl+0xfc/0x170 [ 693.470377][ T9572] do_syscall_64+0x171/0x540 [ 693.470402][ T9572] ? trace_irq_disable+0x3b/0x140 [ 693.470420][ T9572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.470440][ T9572] ? clear_bhb_loop+0x70/0xc0 [ 693.470462][ T9572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.470479][ T9572] RIP: 0033:0x00007fbf575a916b [ 693.470499][ T9572] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 693.470515][ T9572] RSP: 002b:00007fbf584acda0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.470535][ T9572] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007fbf575a916b [ 693.470548][ T9572] RDX: 0000000000000008 RSI: 0000000000004c00 RDI: 0000000000000009 [ 693.470560][ T9572] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 693.470572][ T9572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf584acea0 [ 693.470583][ T9572] R13: 0000000000000000 R14: 00007fbf4d200000 R15: 00007fbf584acee0 [ 693.470615][ T9572] [ 693.970601][ T9601] SQUASHFS error: Unable to read directory block [0:26] [ 693.971322][ T9601] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] SMP KASAN PTI [ 694.240541][ T9601] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 694.248932][ T9601] CPU: 0 UID: 0 PID: 9601 Comm: syz.5.808 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.259667][ T9601] Tainted: [L]=SOFTLOCKUP [ 694.263968][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 694.274014][ T9601] RIP: 0010:lookup_open+0x890/0x16e0 [ 694.279289][ T9601] Code: 09 00 00 e8 a2 60 68 ff 49 81 ff 01 f0 ff ff 0f 83 2a ff ff ff 4d 8d 77 68 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 92 54 e8 ff 49 83 3e 00 74 07 e8 67 [ 694.298871][ T9601] RSP: 0018:ffffc900037979c0 EFLAGS: 00010202 [ 694.304923][ T9601] RAX: 000000000000000e RBX: 0000000000000040 RCX: dffffc0000000000 [ 694.312893][ T9601] RDX: ffffc9001c811000 RSI: 0000000000001f5a RDI: 0000000000001f5b [ 694.320842][ T9601] RBP: 00000000ffffffe2 R08: ffff88807b9f543b R09: 1ffff1100f73ea87 [ 694.328791][ T9601] R10: dffffc0000000000 R11: ffffed100f73ea88 R12: 1ffff1100f0b25ac [ 694.336739][ T9601] R13: ffffc90003797e00 R14: 0000000000000070 R15: 0000000000000008 [ 694.344707][ T9601] FS: 00007fd1997b46c0(0000) GS:ffff8881233cd000(0000) knlGS:0000000000000000 [ 694.353618][ T9601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.360191][ T9601] CR2: 0000001b350fdff8 CR3: 000000002b338000 CR4: 00000000003526f0 [ 694.368142][ T9601] Call Trace: [ 694.371407][ T9601] [ 694.374338][ T9601] path_openat+0x7a5/0x20e0 [ 694.378837][ T9601] do_file_open+0x23e/0x4a0 [ 694.383321][ T9601] ? __pfx___schedule+0x10/0x10 [ 694.388153][ T9601] ? __pfx_do_file_open+0x10/0x10 [ 694.393160][ T9601] ? _raw_spin_unlock+0x41/0x50 [ 694.397988][ T9601] ? alloc_fd+0x6af/0x760 [ 694.402300][ T9601] do_sys_openat2+0x115/0x200 [ 694.406958][ T9601] ? lockdep_hardirqs_on+0x7b/0x110 [ 694.412135][ T9601] ? __pfx_do_sys_openat2+0x10/0x10 [ 694.417318][ T9601] __x64_sys_openat+0x138/0x170 [ 694.422152][ T9601] do_syscall_64+0x171/0x540 [ 694.426721][ T9601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.432763][ T9601] ? clear_bhb_loop+0x70/0xc0 [ 694.437421][ T9601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.443290][ T9601] RIP: 0033:0x00007fd19b5a94d9 [ 694.448038][ T9601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.467621][ T9601] RSP: 002b:00007fd1997b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 694.476011][ T9601] RAX: ffffffffffffffda RBX: 00007fd19b826180 RCX: 00007fd19b5a94d9 [ 694.483959][ T9601] RDX: 000000000000275a RSI: 0000200000001700 RDI: ffffffffffffff9c [ 694.491903][ T9601] RBP: 00007fd19b63804e R08: 0000000000000000 R09: 0000000000000000 [ 694.499846][ T9601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.507800][ T9601] R13: 00007fd19b826218 R14: 00007fd19b826180 R15: 00007fff58555888 [ 694.515753][ T9601] [ 694.518760][ T9601] Modules linked in: [ 694.522949][ T9601] ---[ end trace 0000000000000000 ]--- [ 694.528996][ T9601] RIP: 0010:lookup_open+0x890/0x16e0 [ 694.529023][ T9601] Code: 09 00 00 e8 a2 60 68 ff 49 81 ff 01 f0 ff ff 0f 83 2a ff ff ff 4d 8d 77 68 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 92 54 e8 ff 49 83 3e 00 74 07 e8 67 [ 694.529037][ T9601] RSP: 0018:ffffc900037979c0 EFLAGS: 00010202 [ 694.529051][ T9601] RAX: 000000000000000e RBX: 0000000000000040 RCX: dffffc0000000000 [ 694.529062][ T9601] RDX: ffffc9001c811000 RSI: 0000000000001f5a RDI: 0000000000001f5b [ 694.529073][ T9601] RBP: 00000000ffffffe2 R08: ffff88807b9f543b R09: 1ffff1100f73ea87 [ 694.529084][ T9601] R10: dffffc0000000000 R11: ffffed100f73ea88 R12: 1ffff1100f0b25ac [ 694.529097][ T9601] R13: ffffc90003797e00 R14: 0000000000000070 R15: 0000000000000008 [ 694.529108][ T9601] FS: 00007fd1997b46c0(0000) GS:ffff8881233cd000(0000) knlGS:0000000000000000 [ 694.529122][ T9601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.529133][ T9601] CR2: 0000001b350fdff8 CR3: 000000002b338000 CR4: 00000000003526f0 [ 694.529158][ T9601] Kernel panic - not syncing: Fatal exception [ 694.629445][ T9601] Kernel Offset: disabled [ 694.633758][ T9601] Rebooting in 86400 seconds..