last executing test programs: 10.282357928s ago: executing program 4 (id=1374): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x4) 7.553042605s ago: executing program 4 (id=1380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe2(&(0x7f0000000400), 0x80000) unshare(0x2c020400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2038, 0x4}, 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x2, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xfffffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0x1, 0xe, 0x2b12, 0x1100, 0x6, 0x1c00, 0xb, 0x40, 0x4, 0x1, 0x3, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x5, 0x7f, 0x7, 0xa, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x400, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x20006, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x80003b, 0x2, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0xc59, 0xffffffff]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x6, 0x2002) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./file1\x00', 0x1008800, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001f40)="$eJzs3U9LW1kUAPDzYkRHGCLMgCgD8wb3QR1mrwwKMoGBkSxmViNjZAbjCApCu9B01XVX3bSbfoB2U+i20EXptl+gFIotdKNduSikxKRGY1L/lJhSf7+NB+8579773iMvWeTk7x9WV5bWNpb39nYiM5j0Z6fj4dh+EsORib6oqwQA8DXZr1Zjt1rX67UAAJfD8x8Arp7m8z858fxPKo33BN/dGx/txeIAgK7w+R8Arp6FP//6baZQmP1jNx2MWL25Wdws1v/Wx2eW478oRykmIhfvI6qH6vHt+cLsRFrzejiKq9uN+u3NYt/x+snIxfDJ+rn5wuxkWne8vj+GGvUvhqIUU5GL79vXT7Wr74+I8SPz5yMXz/+JtSjHUtRqm/Vbk2n66++FlvkHDvIAAAAAAAAAAAAAAAAAAAAAAKAb8pmD1jnVgTRt278nn08/ahmv1x/tD/RNm/5Ac4f9gVr7+2RjLNvbvQMAAAAAAAAAAAAAAAAAAMCXYuPa9ZXFcrm0/qng/2f3n5yWc8YgaczbNmcgIj5/ijMG3/706k7nnBvnOT8XCKY7Dz3+set7Px7UTvt5q57u/Dv688bIL51yItu1NWdOuSjZdtt5m+twazVuyMrF1/Pg8Jq+OzX51sJl3eF9rf8ZuTu9+Gjr5ZuzHqdXr0gAAAAAAAAAAAAAAAAAAHB1Nb/02+uVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvNH//v0OQRC3IRkTnnHJpPYnk4Hhthiq93iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwIAAD//7QZm14=") openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/vm/watermark_scale_factor\x00', 0x2, 0x0) chdir(&(0x7f0000000240)='./file0\x00') statfs(&(0x7f0000000ac0)='.\x00', 0x0) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) syz_ublk_setup_io_uring(0x6464, &(0x7f00000000c0)={0x0, 0x92dd, 0x16, 0x2, 0x82}, &(0x7f0000000040), &(0x7f0000001840), &(0x7f0000000140)) 7.262456412s ago: executing program 4 (id=1382): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000400000000100000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x4000, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x26, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x1b, 0x0, @thr={&(0x7f0000000000)="cd21f616d18a6a9e2b75f502e4b5872a6ee917c82dc9705c0363c37c04d0cc930b24504615bc047bb2fd683cf93645437cda13", &(0x7f0000000040)="335e1541af86edf287e976e7d51bf12f3f7a2c938d102a28fc7fa5ef85ab"}}, &(0x7f00000000c0)) 6.410913343s ago: executing program 4 (id=1386): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xfffffe01, 0x800) r2 = socket(0x1e, 0x1, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r5 = dup(r4) preadv2(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0xfffffffffffff37, 0x2000, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000003c0), 0x8000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYRES16=r3, @ANYRESHEX=r10]) timer_create(0xfffffffc, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x7f, 0x0, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$unix(r8, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="001000"/12], 0x18, 0x8001}}], 0x2, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0xaa3a}}}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000818) r11 = syz_clone(0x800080, &(0x7f00000001c0)="8f2b8b67996cf6873737e5ab2ce1e8821439d03cf77e01cc153401a1fc60c961cce38942c942ef6b138fa0cfb26a4f761625c6188178b75ff0f1982b380b041f023d57c7091c6001c6949841ad5eb33eddc89e361ede7c88d988cf89a8953946b794a4ebfae431ae72c2b1cd6cc7f80f00433ce0eb79be35851593bbac849d0fcabb9a4566c34c60850d2bec34155faa8646d7d540c3eca77110da438209f136bda97134221ae200c2708ca9d30ddd4a90875387f5096b807169", 0xba, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000540)="3d75469e11d5cac6e07c382a188008d8fd376633d093907afd8af8936091dbaa0bb75306563c9939ea832545a53e65c32cc9796c02c792cb54aed108f9d783541c35d559d73896c24c58ed66c2d8de7f3e4463c1a108d8107a2ef019ef7660f251841fa51909c9a339c68be152f8ca0ba59db071518871ada88ce9ee68b78b90f98e480e18d8ab65d2ce94a27ecc269a5781b3d4cc41c3d1466cd9f67c73d9638fcab371438ab6ccb82cb6763ec3d42ed1727f80e0ca4c5829d56a390d60692e411040e45ce3caad615b8d2220921fd4683069cfa04b40504b8388a5ca8df6ba0eae3969d7d48dffb77aa7") syz_open_procfs(r11, &(0x7f0000000640)='io\x00') connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) r12 = accept4(r0, &(0x7f0000000040)=@sco={0x1f, @none}, &(0x7f00000000c0)=0x80, 0x0) listen(r12, 0x40) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x3, 0x4) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x63, 0x2) accept4$x25(r0, 0x0, 0x0, 0x80000) 6.387082173s ago: executing program 3 (id=1388): r0 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd7000", @ANYBLOB="0000000004"], 0x3c}}, 0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095", @ANYBLOB="a4c80cdd1df1463864c48dab0f303cbf3f786a615b49e017d38c437364231a096763ea446fa019c9c297d14c5dda4f64ee3dc7f3343ec13f2e201b8edd75b2357e8c101588610de3f374b680", @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'dvmrp0\x00', 0x2}) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @local, 0x5}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r3, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="1000"], &(0x7f00000002c0), 0x400) ioctl$BLKGETZONESZ(r3, 0x80041284, &(0x7f00000004c0)=0x7) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @empty}, 0x2, 0x1, 0x4, 0x2}}, 0x2e) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000003c0)={r6, &(0x7f0000000100)='ns\x00', 0x8000, &(0x7f00000001c0)={@align=0x5, {0x999, 0xc6, 0x6, 0xb}}, 0x26, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x3}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x1c, @void}, 0x10) 3.560044863s ago: executing program 4 (id=1390): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x4) 3.539883653s ago: executing program 3 (id=1393): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000025008101040000000000009f1ba1f848430000005e1406ca000000ffffffff", 0x23}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x445, 0x0, &(0x7f0000000880)="82ade89121a5686134b670cf882eb96d071d854353d03beb6cfa58e26246dbab13a222d955274c2bd3f59613f13251d7292bd7a25381dbba2962e1eaac8d00c78f7f5fe73e63d48493597cd2eecf21d0d49beac16df9a6fa1f342c200c114411e50b226fc7af47769f239273452ad69bce84461445ad16a6420cd8c100e08b746c74111bb058fe8421457ea1c7fdb49d6f183e67ea80b3eeebe8d297731a4a7c48abc39d856713a57fd88c9537c0a3599c122ecc2a5d9f395efa490e0437951a76638decb895c6232a11a448d1e266ac9e45f5c1ddb877182cf4e5467cf39383ab7b641c4f335a1a80d6c2ec41c6b39841a98b70aab0c0e10c27e813cfc813305d31bef48ca2c9c64737fcd1e8b9e2df38e87296cd04508a1c9c86aef76b6514be23c6dcd85bfb48aeb955233a3fa7218a77c1c759187d84348904a0de76499d5bf9b9ab6bcf55a6fda36c0a1adb323594780f1f25f76b39bbb5cc7d158985a65c5ec5750dfafb45cac42fb4d630459ae8188f5658d4817ceb4f9b491865ac0a8f543355b8828113d74b2353522a50eea2f0912a17188f04e3a1a24f6dcee87011a1b8e75442ae5029258b7bc42e7d9625a3724e397a96ddc21f90250662fc3ee2e836f305713bc8fd260ceeb2ca9f509cbec7d45f3fafb6d675178903b8bd3047407f3fbddc52d4af0aead35c527f6fc19b416afebc579372c3495c3fe9fb3a78ed27cb5154abd3523c10880a18b2eb1392c8015f20c7881dced81c01ca137f1d7d3dd45e4499913febdb29f038a7883094079503a26651293db6d4b4253bcb92d6b82c37ec1227b36b99746b000ecb965c578f2fb7719fed81b6a4f52262b5e37d0931c48e59a0f02c8554accff78cc4e1a2194549e5674023a792fab2dc593d0af2e57da500557281628d7c6a3cd53666f786d7933dab76b835d0e053f2e06e01d8d08eec9c225e5f74911e8e9fbd0cfc6325e1fa3cce855645978c094063a2471339fe80f035015593d64fdcfdcbc329fc7ba01c177dd4d5e70cce3e3e0cc4adda782d5ec4d0fb5417de87b7562c4986a869c071ca3ebc82a25deda7cfc71a8438c6d21262d76bfe59801de343984da6b95128f08e09ce9b4b14c0a033284ea07e81962544f29ac216a9ff6776b2c4123f1b8cd65cc5862431571d83bc530495b157c95dbce727ec2af79b67be7d741e4763ddf8cd1e4e9c7e683d7f316bfd5551e431f97eb8d6e9539f5dd7019a9d5513d7361418753c76da7dc012e3b6b08abe7a75419294219547e1d1a1d466d1fed24cfdfb2935df76214103c60798cfef1263562c3a3a4ee2c250ac138887597e20fec8f92657d82add891aa335fb1cd2717120dc400792b40a1bc8d2a3287c319d6b0e80fddb849c9eab3bfce68c20f67eb5fd222feec8f8283a371f2de0fd56d7f290bc62a8729ea384ad702868ce026efdab6ec1f46348fd668c6b3df46a8cd3714168ef24f7fb245fe21a212680839abfc263b98b2fda89fede60f0cfe71675ddc145db1a68b14c1a62bc98bef24352fcf7", 0x0, 0x3ff, 0x0, 0x95, 0x11, &(0x7f0000001980)="100d3ed3c2e94a82021a46c55272ea983b8ad8479baba0a68e1ffcbdbcd2850bf14cd4076eb529edaf1633cbdc8f439a21d0e62552984f5c045cb4943f676a825ca5e30113becb3e4f47e3e2a3be3d94f0c13671f67d5a4957fbdcc0a2f3a9673d48fb69416edfad40a51db8d7098df20cb1fe3c5bd370514eff5b2e23e2b50697d01aea251ef1f4f36ba37a08fabb4eadbc8efc77", &(0x7f0000001a40)="b292847ba0b07610ad15deb2aaec03906f", 0x5, 0x0, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r1}, 0x38) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002f00)={0x53, 0xfffffffffffffffb, 0xb2, 0x10, @scatter={0xa, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/135, 0x87}, {&(0x7f0000002c00)=""/95, 0x5f}, {&(0x7f0000002c80)=""/104, 0x68}]}, &(0x7f0000002dc0)="d7d573e9a63eee7960de3cac65a232fc495f7b73b5949276990189c46a474ed2a334f9fb54b2baf6fba16a1b4e9d306fde4508d08347b266608623e702847f2667b7f8aef1b239c7b20e999e0d1cbabfe006027a68b8b43eff142fb351de24053895f0c56c95bf9f3af80aca9f7d28b2a6610f6d898d9d14648376d76106ac4a5523acb352891ff8c809a6645b4c0c8de1835762e59d1bfabffc6d026a3183cedb197cbad5422fbd7c7b05ee4e667ba2e4b3", &(0x7f0000002e80)=""/54, 0xff, 0x10002, 0x3, &(0x7f0000002ec0)}) fallocate(r3, 0x10, 0x10007, 0x10001) 3.535671313s ago: executing program 1 (id=1394): r0 = semget(0x3, 0x2, 0x426) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x3, 0x8]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000000a00)="c7", 0x1) sendfile(r3, r2, 0x0, 0x2fffe) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000340), &(0x7f0000000240)=r1}, 0x20) 3.448918175s ago: executing program 0 (id=1395): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', 'd', ':', '6', ':', '1e', '.', '1e'}}, 0x15) 3.26895021s ago: executing program 2 (id=1396): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000010102b00fc020000000000000000000000000001fe8000000000000000000000000000aa670000000000000021"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.26475284s ago: executing program 3 (id=1397): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x84e8, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES16, @ANYRES16], 0x9, 0x260, &(0x7f0000000a80)="$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") process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) mlockall(0x7) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair(0x23, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f8, &(0x7f0000000080)) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 3.201393341s ago: executing program 0 (id=1398): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) write(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000") 3.193504812s ago: executing program 2 (id=1399): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r2, 0x0) r5 = semget(0x3, 0x2, 0x426) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000081b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000000a00)="c7", 0x1) sendfile(r8, r7, 0x0, 0x2fffe) sendfile(r8, r7, 0x0, 0x7ffff000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000340), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.084777794s ago: executing program 0 (id=1400): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write(r0, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") r1 = syz_io_uring_complete(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000540)=0x4) preadv(r3, &(0x7f0000000680)=[{&(0x7f0000000080)=""/51, 0x33}, {0x0}], 0x2, 0x3, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x204801, 0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x500, 0x8, 0x8, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r8, 0x4) sendmsg$NFT_MSG_GETGEN(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 2.755976562s ago: executing program 3 (id=1401): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000010102b00fc020000000000000000000000000001fe8000000000000000000000000000aa670000000000000021"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a", 0x5, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_read_part_table(0x407f, &(0x7f0000000140)="$eJzsz7FK82AUBuC37d+/UQJF0EkQi4ObxM0pd9FdehkOKuZOHMUL8D68B0e9hErUVGPnQpHnGQ7fd96ckyRsteFbdypWvUGSp8VjkvJ4lqaqPsN/Xb7zPV6dZ7xbDFMmGa1vnz9s9OMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDtMfiokx+dYS+/SdI8X51296It/9uyOExzXeeiTIqDaXI3yrg+GmQ/mZ21DzRFb9Moefl64WuS+XSj/wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/BmXvdvkd7zXHW7XR+9P0tTjVbpcvrM7h1YAgDAMBVvHgizJksHzHqb6TsbkJ7+X7mdYVfuMggEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKQAAAD//x4/FmE=") r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 2.611785216s ago: executing program 1 (id=1402): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) 1.913837563s ago: executing program 2 (id=1403): r0 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd7000", @ANYBLOB="0000000004"], 0x3c}}, 0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095", @ANYBLOB="a4c80cdd1df1463864c48dab0f303cbf3f786a615b49e017d38c437364231a096763ea446fa019c9c297d14c5dda4f64ee3dc7f3343ec13f2e201b8edd75b2357e8c101588610de3f374b680", @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000600)=0x60, 0x81000) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000640)={'dvmrp0\x00', 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @local, 0x5}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r3, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="1000"], &(0x7f00000002c0), 0x400) ioctl$BLKGETZONESZ(r3, 0x80041284, &(0x7f00000004c0)=0x7) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @empty}, 0x2, 0x1, 0x4, 0x2}}, 0x2e) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000003c0)={r6, &(0x7f0000000100)='ns\x00', 0x8000, &(0x7f00000001c0)={@align=0x5, {0x999, 0xc6, 0x6, 0xb}}, 0x26, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x3}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x1c, @void}, 0x10) 522.117397ms ago: executing program 4 (id=1404): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sync() sync() sync() r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x20000400) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a40000000002010400000000000000000a000007180001802f000280050001009800000006000340200200003c0003800c00028004000100890000002c00018014000300fe80000000000000000000000000002a140004"], 0xa4}}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) syz_io_uring_setup(0x2d6d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xdf3, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r5, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) 514.911657ms ago: executing program 2 (id=1405): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x2c, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x4, 0x14b}]}]}, 0x2c}}, 0x4000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000240), 0x4) 505.863327ms ago: executing program 1 (id=1406): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000010102b00fc020000000000000000000000000001fe8000000000000000000000000000aa670000000000000021"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a", 0x5, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 494.598978ms ago: executing program 0 (id=1407): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000025008101040000000000009f1ba1f848430000005e1406ca000000ffffffff", 0x23}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x445, 0x0, &(0x7f0000000880)="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", 0x0, 0x3ff, 0x0, 0x95, 0x11, &(0x7f0000001980)="100d3ed3c2e94a82021a46c55272ea983b8ad8479baba0a68e1ffcbdbcd2850bf14cd4076eb529edaf1633cbdc8f439a21d0e62552984f5c045cb4943f676a825ca5e30113becb3e4f47e3e2a3be3d94f0c13671f67d5a4957fbdcc0a2f3a9673d48fb69416edfad40a51db8d7098df20cb1fe3c5bd370514eff5b2e23e2b50697d01aea251ef1f4f36ba37a08fabb4eadbc8efc77", &(0x7f0000001a40)="b292847ba0b07610ad15deb2aaec03906f", 0x5, 0x0, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r1}, 0x38) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002f00)={0x53, 0xfffffffffffffffb, 0xb2, 0x10, @scatter={0xa, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/135, 0x87}, {&(0x7f0000002c00)=""/95, 0x5f}, {&(0x7f0000002c80)=""/104, 0x68}]}, &(0x7f0000002dc0)="d7d573e9a63eee7960de3cac65a232fc495f7b73b5949276990189c46a474ed2a334f9fb54b2baf6fba16a1b4e9d306fde4508d08347b266608623e702847f2667b7f8aef1b239c7b20e999e0d1cbabfe006027a68b8b43eff142fb351de24053895f0c56c95bf9f3af80aca9f7d28b2a6610f6d898d9d14648376d76106ac4a5523acb352891ff8c809a6645b4c0c8de1835762e59d1bfabffc6d026a3183cedb197cbad5422fbd7c7b05ee4e667ba2e4b3", &(0x7f0000002e80)=""/54, 0xff, 0x10002, 0x3, &(0x7f0000002ec0)}) fallocate(r3, 0x10, 0x10007, 0x10001) 493.981398ms ago: executing program 3 (id=1408): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', 'd', ':', '6', ':', '1e', '.', '1e'}}, 0x15) 437.602959ms ago: executing program 2 (id=1409): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000010102b00fc020000000000000000000000000001fe8000000000000000000000000000aa670000000000000021"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 436.218469ms ago: executing program 1 (id=1410): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000") 396.47999ms ago: executing program 1 (id=1411): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x84e8, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES16, @ANYRES16], 0x9, 0x260, &(0x7f0000000a80)="$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") process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) mlockall(0x7) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair(0x23, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f8, &(0x7f0000000080)) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 377.8935ms ago: executing program 2 (id=1412): r0 = semget(0x3, 0x2, 0x426) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x3, 0x8]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000000a00)="c7", 0x1) sendfile(r3, r2, 0x0, 0x2fffe) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000340), &(0x7f0000000240)=r1}, 0x20) 377.65642ms ago: executing program 0 (id=1413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x7}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x38}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffff0d0}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24004885}, 0x44004c00) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40500c0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 311.112892ms ago: executing program 0 (id=1414): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='AF', @ANYRES32=r2], 0x4) 20.507559ms ago: executing program 3 (id=1415): r0 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd7000", @ANYBLOB="0000000004"], 0x3c}}, 0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095", @ANYBLOB="a4c80cdd1df1463864c48dab0f303cbf3f786a615b49e017d38c437364231a096763ea446fa019c9c297d14c5dda4f64ee3dc7f3343ec13f2e201b8edd75b2357e8c101588610de3f374b680", @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000600)=0x60, 0x81000) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000640)={'dvmrp0\x00', 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @local, 0x5}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r3, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="1000"], &(0x7f00000002c0), 0x400) ioctl$BLKGETZONESZ(r3, 0x80041284, &(0x7f00000004c0)=0x7) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @empty}, 0x2, 0x1, 0x4, 0x2}}, 0x2e) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000003c0)={r6, &(0x7f0000000100)='ns\x00', 0x8000, &(0x7f00000001c0)={@align=0x5, {0x999, 0xc6, 0x6, 0xb}}, 0x26, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x3}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x1c, @void}, 0x10) 0s ago: executing program 1 (id=1416): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) kernel console output (not intermixed with test programs): ][ T6873] RAX: ffffffffffffffda RBX: 00007fce276e5fa0 RCX: 00007fce2745e159 [ 166.953813][ T6873] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 166.953830][ T6873] RBP: 00007fce274f5024 R08: 0000000000000000 R09: 0000000000000000 [ 166.953846][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.953929][ T6873] R13: 00007fce276e6038 R14: 00007fce276e5fa0 R15: 00007ffd0b486338 [ 166.954005][ T6873] [ 167.088792][ T6857] loop4: detected capacity change from 0 to 8192 [ 167.153134][ T6875] loop1: detected capacity change from 0 to 512 [ 167.605016][ T6884] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 167.626989][ T6876] loop3: detected capacity change from 0 to 32768 [ 167.842197][ T6888] loop4: detected capacity change from 0 to 8192 [ 167.948213][ T6902] FAULT_INJECTION: forcing a failure. [ 167.948213][ T6902] name failslab, interval 1, probability 0, space 0, times 0 [ 167.948262][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.1.1064 Not tainted syzkaller #0 PREEMPT(lazy) [ 167.948293][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.948330][ T6902] Call Trace: [ 167.948338][ T6902] [ 167.948422][ T6902] __dump_stack+0x1d/0x30 [ 167.948485][ T6902] dump_stack_lvl+0x95/0xd0 [ 167.948515][ T6902] dump_stack+0x15/0x1b [ 167.948562][ T6902] should_fail_ex+0x262/0x280 [ 167.948587][ T6902] ? alloc_tty_struct+0x4b/0x3b0 [ 167.948618][ T6902] should_failslab+0x8c/0xb0 [ 167.948651][ T6902] __kmalloc_cache_noprof+0x7a/0x400 [ 167.948718][ T6902] ? alloc_tty_struct+0x4b/0x3b0 [ 167.948748][ T6902] alloc_tty_struct+0x4b/0x3b0 [ 167.948774][ T6902] pty_unix98_install+0xf0/0x380 [ 167.948801][ T6902] tty_init_dev+0x7c/0x320 [ 167.948865][ T6902] ptmx_open+0xda/0x240 [ 167.948886][ T6902] chrdev_open+0x2eb/0x3a0 [ 167.948994][ T6902] do_dentry_open+0x49f/0xa60 [ 167.949018][ T6902] ? __pfx_chrdev_open+0x10/0x10 [ 167.949049][ T6902] ? may_open+0x1ee/0x350 [ 167.949139][ T6902] vfs_open+0x37/0x1e0 [ 167.949162][ T6902] path_openat+0xc01/0x10d0 [ 167.949196][ T6902] do_file_open+0x16c/0x290 [ 167.949234][ T6902] do_sys_openat2+0xa0/0x130 [ 167.949313][ T6902] __x64_sys_openat+0xf2/0x120 [ 167.949338][ T6902] x64_sys_call+0x1f72/0x2550 [ 167.949369][ T6902] do_syscall_64+0x112/0x360 [ 167.949403][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.949442][ T6902] RIP: 0033:0x7fe85cc9e159 [ 167.949458][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.949475][ T6902] RSP: 002b:00007fe85b6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 167.949496][ T6902] RAX: ffffffffffffffda RBX: 00007fe85cf25fa0 RCX: 00007fe85cc9e159 [ 167.949515][ T6902] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 167.949582][ T6902] RBP: 00007fe85cd35024 R08: 0000000000000000 R09: 0000000000000000 [ 167.949598][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.949612][ T6902] R13: 00007fe85cf26038 R14: 00007fe85cf25fa0 R15: 00007fff26ae0308 [ 167.949631][ T6902] [ 168.336555][ T6917] FAULT_INJECTION: forcing a failure. [ 168.336555][ T6917] name failslab, interval 1, probability 0, space 0, times 0 [ 168.336695][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.4.1067 Not tainted syzkaller #0 PREEMPT(lazy) [ 168.336722][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.336737][ T6917] Call Trace: [ 168.336745][ T6917] [ 168.336753][ T6917] __dump_stack+0x1d/0x30 [ 168.336856][ T6917] dump_stack_lvl+0x95/0xd0 [ 168.336877][ T6917] dump_stack+0x15/0x1b [ 168.336897][ T6917] should_fail_ex+0x262/0x280 [ 168.336941][ T6917] ? alloc_tty_struct+0x4b/0x3b0 [ 168.336969][ T6917] should_failslab+0x8c/0xb0 [ 168.336996][ T6917] __kmalloc_cache_noprof+0x7a/0x400 [ 168.337099][ T6917] ? alloc_tty_struct+0x4b/0x3b0 [ 168.337157][ T6917] alloc_tty_struct+0x4b/0x3b0 [ 168.337186][ T6917] pty_unix98_install+0xf0/0x380 [ 168.337208][ T6917] tty_init_dev+0x7c/0x320 [ 168.337297][ T6917] ptmx_open+0xda/0x240 [ 168.337320][ T6917] chrdev_open+0x2eb/0x3a0 [ 168.337410][ T6917] do_dentry_open+0x49f/0xa60 [ 168.337433][ T6917] ? __pfx_chrdev_open+0x10/0x10 [ 168.337479][ T6917] ? may_open+0x1ee/0x350 [ 168.337509][ T6917] vfs_open+0x37/0x1e0 [ 168.337549][ T6917] path_openat+0xc01/0x10d0 [ 168.337618][ T6917] do_file_open+0x16c/0x290 [ 168.337685][ T6917] do_sys_openat2+0xa0/0x130 [ 168.337705][ T6917] __x64_sys_openat+0xf2/0x120 [ 168.337730][ T6917] x64_sys_call+0x1f72/0x2550 [ 168.337761][ T6917] do_syscall_64+0x112/0x360 [ 168.337796][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.337885][ T6917] RIP: 0033:0x7fd33dc8e159 [ 168.337904][ T6917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.337926][ T6917] RSP: 002b:00007fd33c6e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 168.337949][ T6917] RAX: ffffffffffffffda RBX: 00007fd33df15fa0 RCX: 00007fd33dc8e159 [ 168.337963][ T6917] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 168.337985][ T6917] RBP: 00007fd33dd25024 R08: 0000000000000000 R09: 0000000000000000 [ 168.337998][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.338013][ T6917] R13: 00007fd33df16038 R14: 00007fd33df15fa0 R15: 00007ffeae75adf8 [ 168.338033][ T6917] [ 169.767769][ T6938] loop3: detected capacity change from 0 to 512 [ 169.920038][ T6940] loop2: detected capacity change from 0 to 8192 [ 170.146020][ T6951] loop1: detected capacity change from 0 to 512 [ 170.155913][ T6951] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1079: bg 0: block 5: invalid block bitmap [ 170.155947][ T6951] loop1: lost filesystem error report for type 5 error -117 [ 170.156230][ T6951] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 170.156250][ T6951] loop1: lost filesystem error report for type 5 error -117 [ 170.156407][ T6951] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1079: invalid indirect mapped block 3 (level 2) [ 170.156438][ T6951] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.156688][ T6951] EXT4-fs (loop1): 1 orphan inode deleted [ 170.156705][ T6951] EXT4-fs (loop1): 1 truncate cleaned up [ 170.157198][ T6951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.205021][ T29] audit: type=1400 audit(1788328602.075:1336): avc: denied { write } for pid=6949 comm="syz.1.1079" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.229550][ T6952] loop2: detected capacity change from 0 to 128 [ 170.264852][ T6952] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.265122][ T6952] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.277775][ T6952] SELinux: syz.2.1078 (6952) wrote to user. This is no longer supported. [ 170.333417][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.392695][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.727158][ T29] audit: type=1400 audit(1788328602.585:1337): avc: denied { allowed } for pid=6972 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 170.751112][ T6986] loop4: detected capacity change from 0 to 512 [ 170.982977][ T6988] loop3: detected capacity change from 0 to 8192 [ 171.283094][ T6995] FAULT_INJECTION: forcing a failure. [ 171.283094][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 171.283127][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.3.1089 Not tainted syzkaller #0 PREEMPT(lazy) [ 171.283156][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.283194][ T6995] Call Trace: [ 171.283255][ T6995] [ 171.283264][ T6995] __dump_stack+0x1d/0x30 [ 171.283295][ T6995] dump_stack_lvl+0x95/0xd0 [ 171.283318][ T6995] dump_stack+0x15/0x1b [ 171.283411][ T6995] should_fail_ex+0x262/0x280 [ 171.283432][ T6995] ? alloc_tty_struct+0x4b/0x3b0 [ 171.283488][ T6995] should_failslab+0x8c/0xb0 [ 171.283517][ T6995] __kmalloc_cache_noprof+0x7a/0x400 [ 171.283550][ T6995] ? alloc_tty_struct+0x4b/0x3b0 [ 171.283718][ T6995] alloc_tty_struct+0x4b/0x3b0 [ 171.283745][ T6995] pty_unix98_install+0xf0/0x380 [ 171.283771][ T6995] tty_init_dev+0x7c/0x320 [ 171.283805][ T6995] ptmx_open+0xda/0x240 [ 171.283823][ T6995] chrdev_open+0x2eb/0x3a0 [ 171.283927][ T6995] do_dentry_open+0x49f/0xa60 [ 171.283953][ T6995] ? __pfx_chrdev_open+0x10/0x10 [ 171.283989][ T6995] ? may_open+0x1ee/0x350 [ 171.284041][ T6995] vfs_open+0x37/0x1e0 [ 171.284064][ T6995] path_openat+0xc01/0x10d0 [ 171.284158][ T6995] do_file_open+0x16c/0x290 [ 171.284236][ T6995] do_sys_openat2+0xa0/0x130 [ 171.284262][ T6995] __x64_sys_openat+0xf2/0x120 [ 171.284284][ T6995] x64_sys_call+0x1f72/0x2550 [ 171.284321][ T6995] do_syscall_64+0x112/0x360 [ 171.284430][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.284454][ T6995] RIP: 0033:0x7fce2745e159 [ 171.284469][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.284492][ T6995] RSP: 002b:00007fce25eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.284585][ T6995] RAX: ffffffffffffffda RBX: 00007fce276e5fa0 RCX: 00007fce2745e159 [ 171.284679][ T6995] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 171.284693][ T6995] RBP: 00007fce274f5024 R08: 0000000000000000 R09: 0000000000000000 [ 171.284706][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.284721][ T6995] R13: 00007fce276e6038 R14: 00007fce276e5fa0 R15: 00007ffd0b486338 [ 171.284744][ T6995] [ 171.699649][ T6996] loop3: detected capacity change from 0 to 32768 [ 171.734552][ T29] audit: type=1400 audit(1788328603.605:1338): avc: denied { read write } for pid=7004 comm="syz.0.1092" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 171.758535][ T29] audit: type=1400 audit(1788328603.625:1339): avc: denied { open } for pid=7004 comm="syz.0.1092" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 172.770323][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.410210][ T7038] loop2: detected capacity change from 0 to 512 [ 173.518779][ T7042] FAULT_INJECTION: forcing a failure. [ 173.518779][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 173.518814][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.0.1102 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.518916][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.518930][ T7042] Call Trace: [ 173.518937][ T7042] [ 173.518945][ T7042] __dump_stack+0x1d/0x30 [ 173.518973][ T7042] dump_stack_lvl+0x95/0xd0 [ 173.519054][ T7042] dump_stack+0x15/0x1b [ 173.519075][ T7042] should_fail_ex+0x262/0x280 [ 173.519096][ T7042] ? nci_hci_allocate+0x33/0x180 [ 173.519135][ T7042] should_failslab+0x8c/0xb0 [ 173.519223][ T7042] __kmalloc_cache_noprof+0x7a/0x400 [ 173.519252][ T7042] ? pm_runtime_init+0x166/0x170 [ 173.519275][ T7042] ? nci_hci_allocate+0x33/0x180 [ 173.519307][ T7042] ? mutex_init_generic+0x3e/0x50 [ 173.519360][ T7042] nci_hci_allocate+0x33/0x180 [ 173.519446][ T7042] nci_allocate_device+0x156/0x200 [ 173.519520][ T7042] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 173.519551][ T7042] virtual_ncidev_open+0x55/0x130 [ 173.519595][ T7042] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 173.519655][ T7042] misc_open+0x1df/0x220 [ 173.519680][ T7042] chrdev_open+0x2eb/0x3a0 [ 173.519797][ T7042] do_dentry_open+0x49f/0xa60 [ 173.519819][ T7042] ? __pfx_chrdev_open+0x10/0x10 [ 173.519878][ T7042] vfs_open+0x37/0x1e0 [ 173.519899][ T7042] path_openat+0xc01/0x10d0 [ 173.519930][ T7042] do_file_open+0x16c/0x290 [ 173.520006][ T7042] do_sys_openat2+0xa0/0x130 [ 173.520027][ T7042] __x64_sys_openat+0xf2/0x120 [ 173.520048][ T7042] x64_sys_call+0x1f72/0x2550 [ 173.520077][ T7042] do_syscall_64+0x112/0x360 [ 173.520185][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.520208][ T7042] RIP: 0033:0x7fc78afce159 [ 173.520224][ T7042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.520277][ T7042] RSP: 002b:00007fc789a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.520317][ T7042] RAX: ffffffffffffffda RBX: 00007fc78b255fa0 RCX: 00007fc78afce159 [ 173.520334][ T7042] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 173.520365][ T7042] RBP: 00007fc78b065024 R08: 0000000000000000 R09: 0000000000000000 [ 173.520389][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.520463][ T7042] R13: 00007fc78b256038 R14: 00007fc78b255fa0 R15: 00007ffd16e90c18 [ 173.520483][ T7042] [ 173.548046][ T7044] loop3: detected capacity change from 0 to 512 [ 173.601118][ T7044] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1103: bg 0: block 5: invalid block bitmap [ 173.601151][ T7044] loop3: lost filesystem error report for type 5 error -117 [ 173.601298][ T7044] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 173.601315][ T7044] loop3: lost filesystem error report for type 5 error -117 [ 173.601413][ T7044] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1103: invalid indirect mapped block 3 (level 2) [ 173.601454][ T7044] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 173.601654][ T7044] EXT4-fs (loop3): 1 orphan inode deleted [ 173.601671][ T7044] EXT4-fs (loop3): 1 truncate cleaned up [ 173.602054][ T7044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.643918][ T29] audit: type=1400 audit(1788328605.505:1340): avc: denied { ioctl } for pid=7043 comm="syz.3.1103" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 173.700018][ T29] audit: type=1400 audit(1788328605.565:1341): avc: denied { write } for pid=7043 comm="syz.3.1103" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.501356][ T7016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.545633][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.551674][ T7057] FAULT_INJECTION: forcing a failure. [ 175.551674][ T7057] name failslab, interval 1, probability 0, space 0, times 0 [ 175.551711][ T7057] CPU: 1 UID: 0 PID: 7057 Comm: syz.0.1107 Not tainted syzkaller #0 PREEMPT(lazy) [ 175.551812][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.551827][ T7057] Call Trace: [ 175.551833][ T7057] [ 175.551841][ T7057] __dump_stack+0x1d/0x30 [ 175.551916][ T7057] dump_stack_lvl+0x95/0xd0 [ 175.551943][ T7057] dump_stack+0x15/0x1b [ 175.551966][ T7057] should_fail_ex+0x262/0x280 [ 175.551994][ T7057] ? alloc_tty_struct+0x4b/0x3b0 [ 175.552022][ T7057] should_failslab+0x8c/0xb0 [ 175.552053][ T7057] __kmalloc_cache_noprof+0x7a/0x400 [ 175.552086][ T7057] ? alloc_tty_struct+0x4b/0x3b0 [ 175.552142][ T7057] alloc_tty_struct+0x4b/0x3b0 [ 175.552170][ T7057] pty_unix98_install+0xf0/0x380 [ 175.552195][ T7057] tty_init_dev+0x7c/0x320 [ 175.552222][ T7057] ptmx_open+0xda/0x240 [ 175.552245][ T7057] chrdev_open+0x2eb/0x3a0 [ 175.552349][ T7057] do_dentry_open+0x49f/0xa60 [ 175.552495][ T7057] ? __pfx_chrdev_open+0x10/0x10 [ 175.552526][ T7057] ? may_open+0x1ee/0x350 [ 175.552601][ T7057] vfs_open+0x37/0x1e0 [ 175.552627][ T7057] path_openat+0xc01/0x10d0 [ 175.552706][ T7057] do_file_open+0x16c/0x290 [ 175.552759][ T7057] do_sys_openat2+0xa0/0x130 [ 175.552790][ T7057] __x64_sys_openat+0xf2/0x120 [ 175.552814][ T7057] x64_sys_call+0x1f72/0x2550 [ 175.552904][ T7057] do_syscall_64+0x112/0x360 [ 175.552936][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.552962][ T7057] RIP: 0033:0x7fc78afce159 [ 175.552979][ T7057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.553035][ T7057] RSP: 002b:00007fc789a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 175.553098][ T7057] RAX: ffffffffffffffda RBX: 00007fc78b255fa0 RCX: 00007fc78afce159 [ 175.553114][ T7057] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 175.553129][ T7057] RBP: 00007fc78b065024 R08: 0000000000000000 R09: 0000000000000000 [ 175.553144][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.553159][ T7057] R13: 00007fc78b256038 R14: 00007fc78b255fa0 R15: 00007ffd16e90c18 [ 175.553307][ T7057] [ 175.807341][ T7070] loop3: detected capacity change from 0 to 128 [ 175.833099][ T7070] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.835181][ T7070] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.859680][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.100269][ T558] Bluetooth: hci0: Frame reassembly failed (-84) [ 176.638461][ T7088] loop4: detected capacity change from 0 to 1024 [ 176.641355][ T7088] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.653984][ T7088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.668375][ T29] audit: type=1400 audit(1788328608.535:1342): avc: denied { write } for pid=7087 comm="syz.4.1116" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.768715][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.908470][ T7076] loop3: detected capacity change from 0 to 8192 [ 176.935706][ T7102] loop4: detected capacity change from 0 to 512 [ 176.955621][ T7102] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1119: bg 0: block 5: invalid block bitmap [ 176.955731][ T7102] loop4: lost filesystem error report for type 5 error -117 [ 176.968174][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 176.968196][ C0] EXT4-fs (loop4): initial error at time 1788328608: ext4_validate_block_bitmap:436 [ 176.968218][ C0] EXT4-fs (loop4): last error at time 1788328608: ext4_validate_block_bitmap:436 [ 177.004526][ T7102] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 177.004558][ T7102] loop4: lost filesystem error report for type 5 error -117 [ 177.013709][ T7102] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1119: invalid indirect mapped block 3 (level 2) [ 177.013752][ T7102] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.034728][ T7102] EXT4-fs (loop4): 1 orphan inode deleted [ 177.034790][ T7102] EXT4-fs (loop4): 1 truncate cleaned up [ 177.035261][ T7102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.116559][ T29] audit: type=1400 audit(1788328608.985:1343): avc: denied { write } for pid=7101 comm="syz.4.1119" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.213525][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.480345][ T7124] program syz.4.1123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.797010][ T7135] loop4: detected capacity change from 0 to 1024 [ 177.816947][ T7135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.831840][ T7135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.857747][ T29] audit: type=1400 audit(1788328609.725:1344): avc: denied { write } for pid=7134 comm="syz.4.1128" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.955814][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.131891][ T3569] Bluetooth: hci0: command 0x1003 tx timeout [ 178.138112][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.191414][ T7145] loop1: detected capacity change from 0 to 512 [ 178.851268][ T7153] loop2: detected capacity change from 0 to 512 [ 178.858651][ T7153] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1133: bg 0: block 5: invalid block bitmap [ 178.858691][ T7153] loop2: lost filesystem error report for type 5 error -117 [ 178.858950][ T7153] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 178.858968][ T7153] loop2: lost filesystem error report for type 5 error -117 [ 178.859102][ T7153] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1133: invalid indirect mapped block 3 (level 2) [ 178.859133][ T7153] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 178.859368][ T7153] EXT4-fs (loop2): 1 orphan inode deleted [ 178.859418][ T7153] EXT4-fs (loop2): 1 truncate cleaned up [ 178.859764][ T7153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.941634][ T29] audit: type=1400 audit(1788328610.825:1345): avc: denied { write } for pid=7152 comm="syz.2.1133" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.114021][ T7108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.149817][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.184478][ T29] audit: type=1400 audit(1788328612.055:1346): avc: denied { setopt } for pid=7157 comm="syz.4.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 180.208030][ T29] audit: type=1400 audit(1788328612.085:1347): avc: denied { ioctl } for pid=7157 comm="syz.4.1134" path="socket:[18939]" dev="sockfs" ino=18939 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 180.669156][ T29] audit: type=1400 audit(1788328612.525:1348): avc: denied { create } for pid=7168 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.297131][ T7182] FAULT_INJECTION: forcing a failure. [ 181.297131][ T7182] name failslab, interval 1, probability 0, space 0, times 0 [ 181.297177][ T7182] CPU: 0 UID: 0 PID: 7182 Comm: syz.2.1142 Not tainted syzkaller #0 PREEMPT(lazy) [ 181.297209][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.297224][ T7182] Call Trace: [ 181.297230][ T7182] [ 181.297238][ T7182] __dump_stack+0x1d/0x30 [ 181.297263][ T7182] dump_stack_lvl+0x95/0xd0 [ 181.297327][ T7182] dump_stack+0x15/0x1b [ 181.297347][ T7182] should_fail_ex+0x262/0x280 [ 181.297393][ T7182] ? nci_allocate_device+0x95/0x200 [ 181.297426][ T7182] should_failslab+0x8c/0xb0 [ 181.297465][ T7182] __kmalloc_cache_noprof+0x7a/0x400 [ 181.297495][ T7182] ? nci_allocate_device+0x95/0x200 [ 181.297524][ T7182] ? __pfx_virtual_nci_send+0x10/0x10 [ 181.297623][ T7182] nci_allocate_device+0x95/0x200 [ 181.297649][ T7182] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 181.297683][ T7182] virtual_ncidev_open+0x55/0x130 [ 181.297777][ T7182] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 181.297825][ T7182] misc_open+0x1df/0x220 [ 181.297852][ T7182] chrdev_open+0x2eb/0x3a0 [ 181.297903][ T7182] do_dentry_open+0x49f/0xa60 [ 181.298001][ T7182] ? __pfx_chrdev_open+0x10/0x10 [ 181.298061][ T7182] vfs_open+0x37/0x1e0 [ 181.298081][ T7182] path_openat+0xc01/0x10d0 [ 181.298109][ T7182] do_file_open+0x16c/0x290 [ 181.298184][ T7182] do_sys_openat2+0xa0/0x130 [ 181.298233][ T7182] __x64_sys_openat+0xf2/0x120 [ 181.298324][ T7182] x64_sys_call+0x1f72/0x2550 [ 181.298348][ T7182] do_syscall_64+0x112/0x360 [ 181.298472][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.298494][ T7182] RIP: 0033:0x7f2868f8e159 [ 181.298585][ T7182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.298607][ T7182] RSP: 002b:00007f28679e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.298632][ T7182] RAX: ffffffffffffffda RBX: 00007f2869215fa0 RCX: 00007f2868f8e159 [ 181.298648][ T7182] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 181.298666][ T7182] RBP: 00007f2869025024 R08: 0000000000000000 R09: 0000000000000000 [ 181.298723][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.298735][ T7182] R13: 00007f2869216038 R14: 00007f2869215fa0 R15: 00007ffc1aff4c28 [ 181.298797][ T7182] [ 181.773573][ T116] Bluetooth: hci0: Frame reassembly failed (-84) [ 182.153785][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.153935][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.289410][ T7215] loop1: detected capacity change from 0 to 512 [ 182.443148][ T7222] FAULT_INJECTION: forcing a failure. [ 182.443148][ T7222] name failslab, interval 1, probability 0, space 0, times 0 [ 182.443204][ T7222] CPU: 0 UID: 0 PID: 7222 Comm: syz.1.1153 Not tainted syzkaller #0 PREEMPT(lazy) [ 182.443230][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.443243][ T7222] Call Trace: [ 182.443249][ T7222] [ 182.443258][ T7222] __dump_stack+0x1d/0x30 [ 182.443288][ T7222] dump_stack_lvl+0x95/0xd0 [ 182.443370][ T7222] dump_stack+0x15/0x1b [ 182.443442][ T7222] should_fail_ex+0x262/0x280 [ 182.443467][ T7222] ? nci_hci_allocate+0x33/0x180 [ 182.443506][ T7222] should_failslab+0x8c/0xb0 [ 182.443576][ T7222] __kmalloc_cache_noprof+0x7a/0x400 [ 182.443616][ T7222] ? pm_runtime_init+0x166/0x170 [ 182.443647][ T7222] ? nci_hci_allocate+0x33/0x180 [ 182.443727][ T7222] ? mutex_init_generic+0x3e/0x50 [ 182.443760][ T7222] nci_hci_allocate+0x33/0x180 [ 182.443829][ T7222] nci_allocate_device+0x156/0x200 [ 182.443859][ T7222] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 182.443887][ T7222] virtual_ncidev_open+0x55/0x130 [ 182.443939][ T7222] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 182.443970][ T7222] misc_open+0x1df/0x220 [ 182.444000][ T7222] chrdev_open+0x2eb/0x3a0 [ 182.444054][ T7222] do_dentry_open+0x49f/0xa60 [ 182.444081][ T7222] ? __pfx_chrdev_open+0x10/0x10 [ 182.444116][ T7222] vfs_open+0x37/0x1e0 [ 182.444213][ T7222] path_openat+0xc01/0x10d0 [ 182.444245][ T7222] do_file_open+0x16c/0x290 [ 182.444320][ T7222] do_sys_openat2+0xa0/0x130 [ 182.444367][ T7222] __x64_sys_openat+0xf2/0x120 [ 182.444395][ T7222] x64_sys_call+0x1f72/0x2550 [ 182.444421][ T7222] do_syscall_64+0x112/0x360 [ 182.444449][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.444518][ T7222] RIP: 0033:0x7fe85cc9e159 [ 182.444538][ T7222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.444613][ T7222] RSP: 002b:00007fe85b6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.444634][ T7222] RAX: ffffffffffffffda RBX: 00007fe85cf25fa0 RCX: 00007fe85cc9e159 [ 182.444657][ T7222] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 182.444675][ T7222] RBP: 00007fe85cd35024 R08: 0000000000000000 R09: 0000000000000000 [ 182.444691][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.444707][ T7222] R13: 00007fe85cf26038 R14: 00007fe85cf25fa0 R15: 00007fff26ae0308 [ 182.444731][ T7222] [ 182.561234][ T7225] loop1: detected capacity change from 0 to 1024 [ 182.574734][ T7225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.602486][ T7225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.605507][ T29] audit: type=1400 audit(1788328614.485:1349): avc: denied { write } for pid=7224 comm="syz.1.1154" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.694952][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.800275][ T3569] Bluetooth: hci0: command 0x1003 tx timeout [ 183.800283][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.835813][ T7249] loop4: detected capacity change from 0 to 512 [ 183.918767][ T7251] loop4: detected capacity change from 0 to 1024 [ 183.921646][ T7251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.942470][ T7251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.947525][ T29] audit: type=1400 audit(1788328615.815:1350): avc: denied { write } for pid=7250 comm="syz.4.1164" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.985129][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.955816][ T7270] loop4: detected capacity change from 0 to 128 [ 184.963109][ T7270] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.963310][ T7270] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.963986][ T7270] FAULT_INJECTION: forcing a failure. [ 184.963986][ T7270] name failslab, interval 1, probability 0, space 0, times 0 [ 184.964030][ T7270] CPU: 1 UID: 0 PID: 7270 Comm: syz.4.1170 Not tainted syzkaller #0 PREEMPT(lazy) [ 184.964136][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.964150][ T7270] Call Trace: [ 184.964158][ T7270] [ 184.964167][ T7270] __dump_stack+0x1d/0x30 [ 184.964194][ T7270] dump_stack_lvl+0x95/0xd0 [ 184.964218][ T7270] dump_stack+0x15/0x1b [ 184.964240][ T7270] should_fail_ex+0x262/0x280 [ 184.964332][ T7270] ? simple_transaction_get+0x64/0x130 [ 184.964368][ T7270] should_failslab+0x8c/0xb0 [ 184.964399][ T7270] __kmalloc_cache_noprof+0x7a/0x400 [ 184.964441][ T7270] ? should_fail_ex+0xdb/0x280 [ 184.964462][ T7270] ? simple_transaction_get+0x64/0x130 [ 184.964498][ T7270] simple_transaction_get+0x64/0x130 [ 184.964532][ T7270] selinux_transaction_write+0x9d/0x110 [ 184.964616][ T7270] vfs_writev+0x420/0x8c0 [ 184.964650][ T7270] ? __pfx_selinux_transaction_write+0x10/0x10 [ 184.964764][ T7270] do_writev+0xe9/0x210 [ 184.964799][ T7270] __x64_sys_writev+0x45/0x50 [ 184.964887][ T7270] x64_sys_call+0x23c9/0x2550 [ 184.964914][ T7270] do_syscall_64+0x112/0x360 [ 184.964946][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.964971][ T7270] RIP: 0033:0x7fd33dc8e159 [ 184.964988][ T7270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.965086][ T7270] RSP: 002b:00007fd33c6e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 184.965106][ T7270] RAX: ffffffffffffffda RBX: 00007fd33df15fa0 RCX: 00007fd33dc8e159 [ 184.965121][ T7270] RDX: 0000000000000002 RSI: 0000200000003ac0 RDI: 0000000000000005 [ 184.965136][ T7270] RBP: 00007fd33c6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.965150][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.965169][ T7270] R13: 00007fd33df16038 R14: 00007fd33df15fa0 R15: 00007ffeae75adf8 [ 184.965190][ T7270] [ 185.029403][ T7202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.173933][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.256915][ T7287] loop1: detected capacity change from 0 to 512 [ 185.386176][ T42] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.442128][ T7300] FAULT_INJECTION: forcing a failure. [ 185.442128][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 185.442232][ T7300] CPU: 1 UID: 0 PID: 7300 Comm: syz.0.1179 Not tainted syzkaller #0 PREEMPT(lazy) [ 185.442320][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.442335][ T7300] Call Trace: [ 185.442342][ T7300] [ 185.442351][ T7300] __dump_stack+0x1d/0x30 [ 185.442381][ T7300] dump_stack_lvl+0x95/0xd0 [ 185.442458][ T7300] dump_stack+0x15/0x1b [ 185.442483][ T7300] should_fail_ex+0x262/0x280 [ 185.442509][ T7300] should_failslab+0x8c/0xb0 [ 185.442619][ T7300] __kmalloc_node_noprof+0xdb/0x500 [ 185.442654][ T7300] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 185.442691][ T7300] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 185.442763][ T7300] __vmalloc_node_range_noprof+0x3ef/0x1000 [ 185.442804][ T7300] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 185.442850][ T7300] ? n_tty_open+0x1d/0xd0 [ 185.442928][ T7300] vzalloc_noprof+0x82/0xb0 [ 185.442962][ T7300] ? n_tty_open+0x1d/0xd0 [ 185.443051][ T7300] n_tty_open+0x1d/0xd0 [ 185.443088][ T7300] tty_ldisc_setup+0x83/0x220 [ 185.443119][ T7300] tty_init_dev+0x183/0x320 [ 185.443148][ T7300] ptmx_open+0xda/0x240 [ 185.443172][ T7300] chrdev_open+0x2eb/0x3a0 [ 185.443305][ T7300] do_dentry_open+0x49f/0xa60 [ 185.443328][ T7300] ? __pfx_chrdev_open+0x10/0x10 [ 185.443364][ T7300] ? may_open+0x1ee/0x350 [ 185.443394][ T7300] vfs_open+0x37/0x1e0 [ 185.443457][ T7300] path_openat+0xc01/0x10d0 [ 185.443490][ T7300] do_file_open+0x16c/0x290 [ 185.443530][ T7300] do_sys_openat2+0xa0/0x130 [ 185.443556][ T7300] __x64_sys_openat+0xf2/0x120 [ 185.443587][ T7300] x64_sys_call+0x1f72/0x2550 [ 185.443618][ T7300] do_syscall_64+0x112/0x360 [ 185.443678][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.443698][ T7300] RIP: 0033:0x7fc78afce159 [ 185.443715][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.443876][ T7300] RSP: 002b:00007fc789a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.443899][ T7300] RAX: ffffffffffffffda RBX: 00007fc78b255fa0 RCX: 00007fc78afce159 [ 185.443915][ T7300] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 185.443930][ T7300] RBP: 00007fc78b065024 R08: 0000000000000000 R09: 0000000000000000 [ 185.443945][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.443961][ T7300] R13: 00007fc78b256038 R14: 00007fc78b255fa0 R15: 00007ffd16e90c18 [ 185.444013][ T7300] [ 185.450298][ T7300] warn_alloc: 1 callbacks suppressed [ 185.450324][ T7300] syz.0.1179: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 185.450458][ T7300] CPU: 1 UID: 0 PID: 7300 Comm: syz.0.1179 Not tainted syzkaller #0 PREEMPT(lazy) [ 185.450486][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.450500][ T7300] Call Trace: [ 185.450507][ T7300] [ 185.450515][ T7300] __dump_stack+0x1d/0x30 [ 185.450542][ T7300] dump_stack_lvl+0x95/0xd0 [ 185.450644][ T7300] dump_stack+0x15/0x1b [ 185.450668][ T7300] warn_alloc+0x146/0x1c0 [ 185.450703][ T7300] ? should_failslab+0x8c/0xb0 [ 185.450738][ T7300] __vmalloc_node_range_noprof+0x70d/0x1000 [ 185.450853][ T7300] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 185.450894][ T7300] ? n_tty_open+0x1d/0xd0 [ 185.450927][ T7300] vzalloc_noprof+0x82/0xb0 [ 185.451018][ T7300] ? n_tty_open+0x1d/0xd0 [ 185.451061][ T7300] n_tty_open+0x1d/0xd0 [ 185.451094][ T7300] tty_ldisc_setup+0x83/0x220 [ 185.451122][ T7300] tty_init_dev+0x183/0x320 [ 185.451149][ T7300] ptmx_open+0xda/0x240 [ 185.451220][ T7300] chrdev_open+0x2eb/0x3a0 [ 185.451254][ T7300] do_dentry_open+0x49f/0xa60 [ 185.451277][ T7300] ? __pfx_chrdev_open+0x10/0x10 [ 185.451367][ T7300] ? may_open+0x1ee/0x350 [ 185.451394][ T7300] vfs_open+0x37/0x1e0 [ 185.451477][ T7300] path_openat+0xc01/0x10d0 [ 185.451507][ T7300] do_file_open+0x16c/0x290 [ 185.451548][ T7300] do_sys_openat2+0xa0/0x130 [ 185.451572][ T7300] __x64_sys_openat+0xf2/0x120 [ 185.451596][ T7300] x64_sys_call+0x1f72/0x2550 [ 185.451697][ T7300] do_syscall_64+0x112/0x360 [ 185.451778][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.451803][ T7300] RIP: 0033:0x7fc78afce159 [ 185.451820][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.451841][ T7300] RSP: 002b:00007fc789a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.451902][ T7300] RAX: ffffffffffffffda RBX: 00007fc78b255fa0 RCX: 00007fc78afce159 [ 185.451918][ T7300] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 185.451934][ T7300] RBP: 00007fc78b065024 R08: 0000000000000000 R09: 0000000000000000 [ 185.451995][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.452013][ T7300] R13: 00007fc78b256038 R14: 00007fc78b255fa0 R15: 00007ffd16e90c18 [ 185.452034][ T7300] [ 185.453970][ T7300] Mem-Info: [ 185.453978][ T7300] active_anon:6895 inactive_anon:9 isolated_anon:0 [ 185.453978][ T7300] active_file:0 inactive_file:14345 isolated_file:0 [ 185.453978][ T7300] unevictable:820 dirty:4 writeback:29 [ 185.453978][ T7300] slab_reclaimable:3232 slab_unreclaimable:17111 [ 185.453978][ T7300] mapped:29460 shmem:204 pagetables:1131 [ 185.453978][ T7300] sec_pagetables:0 bounce:0 [ 185.453978][ T7300] kernel_misc_reclaimable:0 [ 185.453978][ T7300] free:1880854 free_pcp:14771 free_cma:0 [ 185.454050][ T7300] Node 0 active_anon:27580kB inactive_anon:36kB active_file:0kB inactive_file:57380kB unevictable:3280kB isolated(anon):0kB isolated(file):0kB mapped:117840kB dirty:16kB writeback:116kB shmem:816kB kernel_stack:3648kB pagetables:4524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 185.454242][ T7300] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.454404][ T7300] lowmem_reserve[]: 0 2877 7856 7856 [ 185.454437][ T7300] Node 0 DMA32 free:2943396kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946920kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 185.454738][ T7300] lowmem_reserve[]: 0 0 4978 4978 [ 185.454767][ T7300] Node 0 Normal free:4564660kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27580kB inactive_anon:36kB active_file:0kB inactive_file:57380kB unevictable:3280kB writepending:132kB zspages:0kB present:5242880kB managed:5098228kB mlocked:3280kB bounce:0kB free_pcp:55560kB local_pcp:17460kB free_cma:0kB [ 185.454896][ T7300] lowmem_reserve[]: 0 0 0 0 [ 185.454985][ T7300] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 185.455202][ T7300] Node 0 DMA32: 1*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943396kB [ 185.456306][ T7300] Node 0 Normal: 995*4kB (UM) 338*8kB (UME) 344*16kB (UM) 289*32kB (UM) 177*64kB (ME) 87*128kB (UME) 36*256kB (ME) 20*512kB (ME) 10*1024kB (UM) 5*2048kB (UME) 1094*4096kB (UM) = 4564860kB [ 185.456573][ T7300] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 185.456592][ T7300] 15009 total pagecache pages [ 185.456601][ T7300] 29 pages in swap cache [ 185.456608][ T7300] Free swap = 124864kB [ 185.456615][ T7300] Total swap = 124996kB [ 185.456628][ T7300] 2097051 pages RAM [ 185.456636][ T7300] 0 pages HighMem/MovableOnly [ 185.456643][ T7300] 81924 pages reserved [ 185.456660][ T7300] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 185.680268][ T7302] loop3: detected capacity change from 0 to 8192 [ 187.263034][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.263139][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.400276][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.400288][ T3569] Bluetooth: hci0: command 0x1003 tx timeout [ 188.121650][ T7353] loop4: detected capacity change from 0 to 1024 [ 188.124884][ T7353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.142555][ T7353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.146731][ T29] audit: type=1400 audit(1788328620.015:1351): avc: denied { write } for pid=7352 comm="syz.4.1193" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.185182][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.208476][ T29] audit: type=1400 audit(1788328620.075:1352): avc: denied { connect } for pid=7357 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.228394][ T29] audit: type=1400 audit(1788328620.075:1353): avc: denied { write } for pid=7357 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.272726][ T29] audit: type=1400 audit(1788328620.145:1354): avc: denied { map } for pid=7357 comm="syz.4.1194" path="socket:[19373]" dev="sockfs" ino=19373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.275578][ T7358] SELinux: policydb magic number 0x34343831 does not match expected magic number 0xf97cff8c [ 188.275757][ T7358] SELinux: failed to load policy [ 188.280874][ T29] audit: type=1400 audit(1788328620.145:1355): avc: denied { read } for pid=7357 comm="syz.4.1194" path="socket:[19373]" dev="sockfs" ino=19373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.280906][ T29] audit: type=1400 audit(1788328620.145:1356): avc: denied { load_policy } for pid=7357 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 189.063119][ T7313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.238047][ T7365] loop1: detected capacity change from 0 to 8192 [ 189.450547][ T116] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.709211][ T7387] FAULT_INJECTION: forcing a failure. [ 189.709211][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 189.709244][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.4.1204 Not tainted syzkaller #0 PREEMPT(lazy) [ 189.709349][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.709365][ T7387] Call Trace: [ 189.709373][ T7387] [ 189.709382][ T7387] __dump_stack+0x1d/0x30 [ 189.709469][ T7387] dump_stack_lvl+0x95/0xd0 [ 189.709537][ T7387] dump_stack+0x15/0x1b [ 189.709562][ T7387] should_fail_ex+0x262/0x280 [ 189.709586][ T7387] ? alloc_workqueue_va+0x133/0x1630 [ 189.709611][ T7387] should_failslab+0x8c/0xb0 [ 189.709645][ T7387] __kmalloc_cache_noprof+0x7a/0x400 [ 189.709767][ T7387] ? alloc_workqueue_va+0x133/0x1630 [ 189.709863][ T7387] alloc_workqueue_va+0x133/0x1630 [ 189.709898][ T7387] alloc_workqueue_noprof+0x84/0xb0 [ 189.709974][ T7387] ? nci_hci_allocate+0x33/0x180 [ 189.710016][ T7387] nci_register_device+0x20c/0x510 [ 189.710093][ T7387] virtual_ncidev_open+0xca/0x130 [ 189.710128][ T7387] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 189.710155][ T7387] misc_open+0x1df/0x220 [ 189.710237][ T7387] chrdev_open+0x2eb/0x3a0 [ 189.710271][ T7387] do_dentry_open+0x49f/0xa60 [ 189.710368][ T7387] ? __pfx_chrdev_open+0x10/0x10 [ 189.710402][ T7387] vfs_open+0x37/0x1e0 [ 189.710492][ T7387] path_openat+0xc01/0x10d0 [ 189.710526][ T7387] do_file_open+0x16c/0x290 [ 189.710564][ T7387] do_sys_openat2+0xa0/0x130 [ 189.710591][ T7387] __x64_sys_openat+0xf2/0x120 [ 189.710635][ T7387] x64_sys_call+0x1f72/0x2550 [ 189.710664][ T7387] do_syscall_64+0x112/0x360 [ 189.710749][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.710777][ T7387] RIP: 0033:0x7fd33dc8e159 [ 189.710803][ T7387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.710826][ T7387] RSP: 002b:00007fd33c6e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.710846][ T7387] RAX: ffffffffffffffda RBX: 00007fd33df15fa0 RCX: 00007fd33dc8e159 [ 189.710990][ T7387] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 189.711007][ T7387] RBP: 00007fd33dd25024 R08: 0000000000000000 R09: 0000000000000000 [ 189.711023][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.711039][ T7387] R13: 00007fd33df16038 R14: 00007fd33df15fa0 R15: 00007ffeae75adf8 [ 189.711062][ T7387] [ 189.859706][ T29] audit: type=1400 audit(1788328621.725:1357): avc: denied { setopt } for pid=7389 comm="syz.0.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.208436][ T7420] loop1: detected capacity change from 0 to 512 [ 191.208916][ T7420] ext4: Unknown parameter 'func' [ 191.501761][ T3569] Bluetooth: hci0: command 0x1003 tx timeout [ 191.501801][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.726982][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.727122][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.104488][ T7401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.874031][ T7461] loop1: detected capacity change from 0 to 512 [ 193.874383][ T7461] ext4: Unknown parameter 'func' [ 195.460710][ T7484] FAULT_INJECTION: forcing a failure. [ 195.460710][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 195.460760][ T7484] CPU: 1 UID: 0 PID: 7484 Comm: syz.3.1233 Not tainted syzkaller #0 PREEMPT(lazy) [ 195.460886][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.460899][ T7484] Call Trace: [ 195.460906][ T7484] [ 195.460914][ T7484] __dump_stack+0x1d/0x30 [ 195.460945][ T7484] dump_stack_lvl+0x95/0xd0 [ 195.461031][ T7484] dump_stack+0x15/0x1b [ 195.461056][ T7484] should_fail_ex+0x262/0x280 [ 195.461083][ T7484] ? alloc_tty_struct+0x4b/0x3b0 [ 195.461185][ T7484] should_failslab+0x8c/0xb0 [ 195.461224][ T7484] __kmalloc_cache_noprof+0x7a/0x400 [ 195.461253][ T7484] ? alloc_tty_struct+0x4b/0x3b0 [ 195.461374][ T7484] ? pty_unix98_install+0x93/0x380 [ 195.461396][ T7484] alloc_tty_struct+0x4b/0x3b0 [ 195.461464][ T7484] pty_unix98_install+0xf0/0x380 [ 195.461485][ T7484] tty_init_dev+0x7c/0x320 [ 195.461508][ T7484] ptmx_open+0xda/0x240 [ 195.461528][ T7484] chrdev_open+0x2eb/0x3a0 [ 195.461610][ T7484] do_dentry_open+0x49f/0xa60 [ 195.461629][ T7484] ? __pfx_chrdev_open+0x10/0x10 [ 195.461664][ T7484] ? may_open+0x1ee/0x350 [ 195.461696][ T7484] vfs_open+0x37/0x1e0 [ 195.461737][ T7484] path_openat+0xc01/0x10d0 [ 195.461770][ T7484] do_file_open+0x16c/0x290 [ 195.461806][ T7484] do_sys_openat2+0xa0/0x130 [ 195.461832][ T7484] __x64_sys_openat+0xf2/0x120 [ 195.461913][ T7484] x64_sys_call+0x1f72/0x2550 [ 195.461938][ T7484] do_syscall_64+0x112/0x360 [ 195.462032][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.462060][ T7484] RIP: 0033:0x7fce2745e159 [ 195.462079][ T7484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.462100][ T7484] RSP: 002b:00007fce25eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.462126][ T7484] RAX: ffffffffffffffda RBX: 00007fce276e5fa0 RCX: 00007fce2745e159 [ 195.462140][ T7484] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 195.462160][ T7484] RBP: 00007fce274f5024 R08: 0000000000000000 R09: 0000000000000000 [ 195.462173][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.462186][ T7484] R13: 00007fce276e6038 R14: 00007fce276e5fa0 R15: 00007ffd0b486338 [ 195.462215][ T7484] [ 195.857789][ T7503] FAULT_INJECTION: forcing a failure. [ 195.857789][ T7503] name failslab, interval 1, probability 0, space 0, times 0 [ 195.857830][ T7503] CPU: 0 UID: 0 PID: 7503 Comm: syz.0.1238 Not tainted syzkaller #0 PREEMPT(lazy) [ 195.857879][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.857894][ T7503] Call Trace: [ 195.857902][ T7503] [ 195.857911][ T7503] __dump_stack+0x1d/0x30 [ 195.857997][ T7503] dump_stack_lvl+0x95/0xd0 [ 195.858024][ T7503] dump_stack+0x15/0x1b [ 195.858060][ T7503] should_fail_ex+0x262/0x280 [ 195.858086][ T7503] should_failslab+0x8c/0xb0 [ 195.858188][ T7503] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 195.858306][ T7503] ? __kthread_create_on_node+0xd5/0x240 [ 195.858347][ T7503] ? __kthread_create_on_node+0xd5/0x240 [ 195.858389][ T7503] kvasprintf+0x8a/0x110 [ 195.858420][ T7503] ? __pfx_rescuer_thread+0x10/0x10 [ 195.858520][ T7503] __kthread_create_on_node+0xd5/0x240 [ 195.858562][ T7503] ? __pfx_rescuer_thread+0x10/0x10 [ 195.858640][ T7503] kthread_create_on_node+0x89/0xc0 [ 195.858820][ T7503] ? scnprintf+0xb2/0xf0 [ 195.858846][ T7503] init_rescuer+0x17c/0x290 [ 195.858878][ T7503] ? schedule_on_each_cpu+0x90/0x340 [ 195.858904][ T7503] alloc_workqueue_va+0x145b/0x1630 [ 195.858959][ T7503] alloc_workqueue_noprof+0x84/0xb0 [ 195.858992][ T7503] nci_register_device+0x11e/0x510 [ 195.859026][ T7503] virtual_ncidev_open+0xca/0x130 [ 195.859137][ T7503] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 195.859169][ T7503] misc_open+0x1df/0x220 [ 195.859195][ T7503] chrdev_open+0x2eb/0x3a0 [ 195.859248][ T7503] do_dentry_open+0x49f/0xa60 [ 195.859271][ T7503] ? __pfx_chrdev_open+0x10/0x10 [ 195.859365][ T7503] vfs_open+0x37/0x1e0 [ 195.859417][ T7503] path_openat+0xc01/0x10d0 [ 195.859452][ T7503] do_file_open+0x16c/0x290 [ 195.859493][ T7503] do_sys_openat2+0xa0/0x130 [ 195.859519][ T7503] __x64_sys_openat+0xf2/0x120 [ 195.859545][ T7503] x64_sys_call+0x1f72/0x2550 [ 195.859577][ T7503] do_syscall_64+0x112/0x360 [ 195.859662][ T7503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.859704][ T7503] RIP: 0033:0x7fc78afce159 [ 195.859719][ T7503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.859736][ T7503] RSP: 002b:00007fc789a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.859756][ T7503] RAX: ffffffffffffffda RBX: 00007fc78b255fa0 RCX: 00007fc78afce159 [ 195.859827][ T7503] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 195.859844][ T7503] RBP: 00007fc78b065024 R08: 0000000000000000 R09: 0000000000000000 [ 195.859860][ T7503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.859876][ T7503] R13: 00007fc78b256038 R14: 00007fc78b255fa0 R15: 00007ffd16e90c18 [ 195.859898][ T7503] [ 195.866381][ T7503] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -ENOMEM [ 196.327034][ T7495] loop3: detected capacity change from 0 to 32768 [ 196.612498][ T7514] loop2: detected capacity change from 0 to 512 [ 196.616641][ T7516] loop1: detected capacity change from 0 to 512 [ 196.616917][ T7516] ext4: Unknown parameter 'func' [ 197.345529][ T5519] Bluetooth: hci0: Frame reassembly failed (-84) [ 197.893282][ T7544] FAULT_INJECTION: forcing a failure. [ 197.893282][ T7544] name failslab, interval 1, probability 0, space 0, times 0 [ 197.893386][ T7544] CPU: 0 UID: 0 PID: 7544 Comm: syz.4.1249 Not tainted syzkaller #0 PREEMPT(lazy) [ 197.893415][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.893427][ T7544] Call Trace: [ 197.893433][ T7544] [ 197.893522][ T7544] __dump_stack+0x1d/0x30 [ 197.893565][ T7544] dump_stack_lvl+0x95/0xd0 [ 197.893592][ T7544] dump_stack+0x15/0x1b [ 197.893617][ T7544] should_fail_ex+0x262/0x280 [ 197.893657][ T7544] should_failslab+0x8c/0xb0 [ 197.893688][ T7544] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 197.893747][ T7544] ? __kthread_create_on_node+0xd5/0x240 [ 197.893785][ T7544] ? __kthread_create_on_node+0xd5/0x240 [ 197.893824][ T7544] kvasprintf+0x8a/0x110 [ 197.893863][ T7544] ? __pfx_rescuer_thread+0x10/0x10 [ 197.893887][ T7544] __kthread_create_on_node+0xd5/0x240 [ 197.893928][ T7544] ? __pfx_rescuer_thread+0x10/0x10 [ 197.894025][ T7544] kthread_create_on_node+0x89/0xc0 [ 197.894133][ T7544] ? scnprintf+0xb2/0xf0 [ 197.894154][ T7544] init_rescuer+0x17c/0x290 [ 197.894186][ T7544] ? schedule_on_each_cpu+0x90/0x340 [ 197.894256][ T7544] alloc_workqueue_va+0x145b/0x1630 [ 197.894286][ T7544] alloc_workqueue_noprof+0x84/0xb0 [ 197.894316][ T7544] ? nci_hci_allocate+0x33/0x180 [ 197.894356][ T7544] nci_register_device+0x11e/0x510 [ 197.894437][ T7544] virtual_ncidev_open+0xca/0x130 [ 197.894465][ T7544] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 197.894492][ T7544] misc_open+0x1df/0x220 [ 197.894594][ T7544] chrdev_open+0x2eb/0x3a0 [ 197.894703][ T7544] do_dentry_open+0x49f/0xa60 [ 197.894722][ T7544] ? __pfx_chrdev_open+0x10/0x10 [ 197.894757][ T7544] vfs_open+0x37/0x1e0 [ 197.894776][ T7544] path_openat+0xc01/0x10d0 [ 197.894851][ T7544] do_file_open+0x16c/0x290 [ 197.894887][ T7544] do_sys_openat2+0xa0/0x130 [ 197.894918][ T7544] __x64_sys_openat+0xf2/0x120 [ 197.894939][ T7544] x64_sys_call+0x1f72/0x2550 [ 197.894967][ T7544] do_syscall_64+0x112/0x360 [ 197.895054][ T7544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.895201][ T7544] RIP: 0033:0x7fd33dc8e159 [ 197.895219][ T7544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.895242][ T7544] RSP: 002b:00007fd33c6e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 197.895267][ T7544] RAX: ffffffffffffffda RBX: 00007fd33df15fa0 RCX: 00007fd33dc8e159 [ 197.895285][ T7544] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 197.895368][ T7544] RBP: 00007fd33dd25024 R08: 0000000000000000 R09: 0000000000000000 [ 197.895400][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.895416][ T7544] R13: 00007fd33df16038 R14: 00007fd33df15fa0 R15: 00007ffeae75adf8 [ 197.895485][ T7544] [ 197.934342][ T7544] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -ENOMEM [ 197.982820][ T29] audit: type=1400 audit(1788328629.855:1358): avc: denied { write } for pid=7545 comm="syz.4.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.983217][ T29] audit: type=1400 audit(1788328629.855:1359): avc: denied { getopt } for pid=7545 comm="syz.4.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.427186][ T7484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.552826][ T7562] loop2: detected capacity change from 0 to 512 [ 198.618075][ T7565] loop3: detected capacity change from 0 to 512 [ 198.630104][ T7565] ext4: Unknown parameter 'func' [ 199.251614][ T7584] vlan0: entered promiscuous mode [ 199.430502][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 199.485607][ T7593] FAULT_INJECTION: forcing a failure. [ 199.485607][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 199.485647][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.3.1261 Not tainted syzkaller #0 PREEMPT(lazy) [ 199.485676][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.485692][ T7593] Call Trace: [ 199.485701][ T7593] [ 199.485711][ T7593] __dump_stack+0x1d/0x30 [ 199.485761][ T7593] dump_stack_lvl+0x95/0xd0 [ 199.485789][ T7593] dump_stack+0x15/0x1b [ 199.485815][ T7593] should_fail_ex+0x262/0x280 [ 199.485841][ T7593] ? nfc_allocate_device+0xba/0x2e0 [ 199.485907][ T7593] should_failslab+0x8c/0xb0 [ 199.485935][ T7593] __kmalloc_cache_noprof+0x7a/0x400 [ 199.485967][ T7593] ? nfc_allocate_device+0xba/0x2e0 [ 199.485989][ T7593] ? __pfx_nci_transceive+0x10/0x10 [ 199.486021][ T7593] nfc_allocate_device+0xba/0x2e0 [ 199.486044][ T7593] nci_allocate_device+0x13b/0x200 [ 199.486074][ T7593] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 199.486159][ T7593] virtual_ncidev_open+0x55/0x130 [ 199.486223][ T7593] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 199.486257][ T7593] misc_open+0x1df/0x220 [ 199.486283][ T7593] chrdev_open+0x2eb/0x3a0 [ 199.486345][ T7593] do_dentry_open+0x49f/0xa60 [ 199.486367][ T7593] ? __pfx_chrdev_open+0x10/0x10 [ 199.486397][ T7593] vfs_open+0x37/0x1e0 [ 199.486417][ T7593] path_openat+0xc01/0x10d0 [ 199.486486][ T7593] do_file_open+0x16c/0x290 [ 199.486525][ T7593] do_sys_openat2+0xa0/0x130 [ 199.486608][ T7593] __x64_sys_openat+0xf2/0x120 [ 199.486634][ T7593] x64_sys_call+0x1f72/0x2550 [ 199.486826][ T7593] do_syscall_64+0x112/0x360 [ 199.486860][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.486885][ T7593] RIP: 0033:0x7fce2745e159 [ 199.486900][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.486919][ T7593] RSP: 002b:00007fce25eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 199.487010][ T7593] RAX: ffffffffffffffda RBX: 00007fce276e5fa0 RCX: 00007fce2745e159 [ 199.487027][ T7593] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 199.487044][ T7593] RBP: 00007fce274f5024 R08: 0000000000000000 R09: 0000000000000000 [ 199.487057][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.487073][ T7593] R13: 00007fce276e6038 R14: 00007fce276e5fa0 R15: 00007ffd0b486338 [ 199.487160][ T7593] [ 200.212100][ T7612] loop1: detected capacity change from 0 to 512 [ 200.904440][ T7619] loop3: detected capacity change from 0 to 512 [ 200.913948][ T7619] ext4: Unknown parameter 'func' [ 200.928058][ T7620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.928121][ T7620] IPv6: NLM_F_CREATE should be set when creating new route [ 201.629549][ T29] audit: type=1400 audit(1788328633.495:1360): avc: denied { append } for pid=7646 comm="syz.3.1278" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 201.641539][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 201.664220][ T29] audit: type=1400 audit(1788328633.535:1361): avc: denied { bind } for pid=7646 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.666623][ T29] audit: type=1400 audit(1788328633.535:1362): avc: denied { write } for pid=7646 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.029809][ T7655] FAULT_INJECTION: forcing a failure. [ 202.029809][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 202.029856][ T7655] CPU: 0 UID: 0 PID: 7655 Comm: syz.3.1281 Not tainted syzkaller #0 PREEMPT(lazy) [ 202.029882][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.029961][ T7655] Call Trace: [ 202.029969][ T7655] [ 202.029979][ T7655] __dump_stack+0x1d/0x30 [ 202.030006][ T7655] dump_stack_lvl+0x95/0xd0 [ 202.030032][ T7655] dump_stack+0x15/0x1b [ 202.030109][ T7655] should_fail_ex+0x262/0x280 [ 202.030135][ T7655] ? __d_alloc+0x8c/0x320 [ 202.030182][ T7655] should_failslab+0x8c/0xb0 [ 202.030217][ T7655] __kmalloc_noprof+0xd0/0x4d0 [ 202.030244][ T7655] ? __d_alloc+0x34/0x320 [ 202.030268][ T7655] ? __d_alloc+0x8c/0x320 [ 202.030361][ T7655] __d_alloc+0x8c/0x320 [ 202.030388][ T7655] d_alloc_parallel+0x4f/0xce0 [ 202.030417][ T7655] ? __rcu_read_unlock+0x4e/0x70 [ 202.030466][ T7655] ? __rcu_read_unlock+0x4e/0x70 [ 202.030498][ T7655] ? __d_lookup+0x30c/0x340 [ 202.030555][ T7655] lookup_open+0x214/0x10d0 [ 202.030585][ T7655] ? __rcu_read_unlock+0x4e/0x70 [ 202.030619][ T7655] ? try_to_unlazy+0x39b/0x580 [ 202.030709][ T7655] path_openat+0x415/0x10d0 [ 202.030740][ T7655] ? kstrtouint+0x76/0xc0 [ 202.030769][ T7655] do_file_open+0x16c/0x290 [ 202.030818][ T7655] do_sys_openat2+0xa0/0x130 [ 202.030842][ T7655] __x64_sys_creat+0x65/0x90 [ 202.030866][ T7655] x64_sys_call+0xea6/0x2550 [ 202.030894][ T7655] do_syscall_64+0x112/0x360 [ 202.030966][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.031038][ T7655] RIP: 0033:0x7fce2745e159 [ 202.031054][ T7655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.031072][ T7655] RSP: 002b:00007fce25eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 202.031094][ T7655] RAX: ffffffffffffffda RBX: 00007fce276e5fa0 RCX: 00007fce2745e159 [ 202.031187][ T7655] RDX: 0000000000000000 RSI: 00000000000000e9 RDI: 0000200000001340 [ 202.031203][ T7655] RBP: 00007fce25eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 202.031218][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.031260][ T7655] R13: 00007fce276e6038 R14: 00007fce276e5fa0 R15: 00007ffd0b486338 [ 202.031279][ T7655] [ 202.131421][ T7657] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1282'. [ 202.454745][ T29] audit: type=1400 audit(1788328634.325:1363): avc: denied { ioctl } for pid=7656 comm="syz.4.1282" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 203.178941][ T7657] loop4: detected capacity change from 0 to 512 [ 203.187827][ T7657] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 203.296492][ T7673] loop3: detected capacity change from 0 to 512 [ 203.322937][ T7673] ext4: Unknown parameter 'func' [ 203.456194][ T7678] loop3: detected capacity change from 0 to 512 [ 203.473572][ T7678] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1290: bg 0: block 5: invalid block bitmap [ 203.473614][ T7678] loop3: lost filesystem error report for type 5 error -117 [ 203.486303][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 203.486327][ C0] EXT4-fs (loop3): initial error at time 1788328635: ext4_validate_block_bitmap:436 [ 203.486348][ C0] EXT4-fs (loop3): last error at time 1788328635: ext4_validate_block_bitmap:436 [ 203.502329][ T7678] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 203.502425][ T7678] loop3: lost filesystem error report for type 5 error -117 [ 203.513860][ T7678] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1290: invalid indirect mapped block 3 (level 2) [ 203.513895][ T7678] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.554109][ T7678] EXT4-fs (loop3): 1 orphan inode deleted [ 203.554130][ T7678] EXT4-fs (loop3): 1 truncate cleaned up [ 203.554564][ T7678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.634771][ T29] audit: type=1400 audit(1788328635.505:1364): avc: denied { write } for pid=7677 comm="syz.3.1290" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.640328][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.830472][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.889163][ T7693] loop2: detected capacity change from 0 to 1024 [ 203.897596][ T7697] loop3: detected capacity change from 0 to 512 [ 203.909903][ T7693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.941585][ T7693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.955684][ T29] audit: type=1400 audit(1788328635.815:1365): avc: denied { write } for pid=7692 comm="syz.2.1294" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.037154][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.187378][ T7708] loop1: detected capacity change from 0 to 512 [ 204.187715][ T7708] ext4: Unknown parameter 'func' [ 204.511114][ T7711] loop2: detected capacity change from 0 to 1764 [ 206.245377][ T7722] FAULT_INJECTION: forcing a failure. [ 206.245377][ T7722] name failslab, interval 1, probability 0, space 0, times 0 [ 206.245429][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.0.1305 Not tainted syzkaller #0 PREEMPT(lazy) [ 206.245456][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.245470][ T7722] Call Trace: [ 206.245476][ T7722] [ 206.245494][ T7722] __dump_stack+0x1d/0x30 [ 206.245523][ T7722] dump_stack_lvl+0x95/0xd0 [ 206.245548][ T7722] dump_stack+0x15/0x1b [ 206.245573][ T7722] should_fail_ex+0x262/0x280 [ 206.245626][ T7722] ? alloc_tty_struct+0x4b/0x3b0 [ 206.245676][ T7722] should_failslab+0x8c/0xb0 [ 206.245711][ T7722] __kmalloc_cache_noprof+0x7a/0x400 [ 206.245789][ T7722] ? alloc_tty_struct+0x4b/0x3b0 [ 206.245815][ T7722] alloc_tty_struct+0x4b/0x3b0 [ 206.245894][ T7722] pty_unix98_install+0xf0/0x380 [ 206.245933][ T7722] tty_init_dev+0x7c/0x320 [ 206.245963][ T7722] ptmx_open+0xda/0x240 [ 206.246041][ T7722] chrdev_open+0x2eb/0x3a0 [ 206.246077][ T7722] do_dentry_open+0x49f/0xa60 [ 206.246100][ T7722] ? __pfx_chrdev_open+0x10/0x10 [ 206.246192][ T7722] ? may_open+0x1ee/0x350 [ 206.246217][ T7722] vfs_open+0x37/0x1e0 [ 206.246239][ T7722] path_openat+0xc01/0x10d0 [ 206.246323][ T7722] do_file_open+0x16c/0x290 [ 206.246355][ T7722] do_sys_openat2+0xa0/0x130 [ 206.246378][ T7722] __x64_sys_openat+0xf2/0x120 [ 206.246405][ T7722] x64_sys_call+0x1f72/0x2550 [ 206.246521][ T7722] do_syscall_64+0x112/0x360 [ 206.246554][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.246576][ T7722] RIP: 0033:0x7fc78afce159 [ 206.246662][ T7722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.246726][ T7722] RSP: 002b:00007fc789a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 206.246751][ T7722] RAX: ffffffffffffffda RBX: 00007fc78b255fa0 RCX: 00007fc78afce159 [ 206.246769][ T7722] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 206.246785][ T7722] RBP: 00007fc78b065024 R08: 0000000000000000 R09: 0000000000000000 [ 206.246800][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.246839][ T7722] R13: 00007fc78b256038 R14: 00007fc78b255fa0 R15: 00007ffd16e90c18 [ 206.246861][ T7722] [ 206.323027][ T7715] loop3: detected capacity change from 0 to 136 [ 206.416036][ T7715] Attempt to read inode for relocated directory [ 206.504239][ T7715] syz.3.1303: attempt to access beyond end of device [ 206.504239][ T7715] loop3: rw=8912896, sector=335544428, nr_sectors = 4 limit=136 [ 206.513823][ T7715] syz.3.1303: attempt to access beyond end of device [ 206.513823][ T7715] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 206.519587][ T7715] syz.3.1303: attempt to access beyond end of device [ 206.519587][ T7715] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 206.595892][ T7714] syz.3.1303: attempt to access beyond end of device [ 206.595892][ T7714] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 206.596035][ T7714] syz.3.1303: attempt to access beyond end of device [ 206.596035][ T7714] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 206.596083][ T7714] syz.3.1303: attempt to access beyond end of device [ 206.596083][ T7714] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 206.599591][ T7715] syz.3.1303: attempt to access beyond end of device [ 206.599591][ T7715] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 206.600191][ T7715] syz.3.1303: attempt to access beyond end of device [ 206.600191][ T7715] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 206.608641][ T7715] syz.3.1303: attempt to access beyond end of device [ 206.608641][ T7715] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 206.613615][ T7715] syz.3.1303: attempt to access beyond end of device [ 206.613615][ T7715] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 207.069023][ T7739] loop4: detected capacity change from 0 to 1024 [ 207.079689][ T7739] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.106203][ T7739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.119978][ T29] audit: type=1400 audit(1788328638.985:1366): avc: denied { write } for pid=7738 comm="syz.4.1309" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.227513][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.243893][ T7748] loop1: detected capacity change from 0 to 512 [ 207.251633][ T7748] ext4: Unknown parameter 'func' [ 207.389597][ T7750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.450948][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.505148][ T558] Bluetooth: hci0: Frame reassembly failed (-84) [ 207.926110][ T7773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.014904][ T7773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.051209][ T29] audit: type=1400 audit(1788328639.925:1367): avc: denied { write } for pid=7766 comm="syz.3.1317" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.197956][ T7780] FAULT_INJECTION: forcing a failure. [ 208.197956][ T7780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.197997][ T7780] CPU: 0 UID: 0 PID: 7780 Comm: syz.2.1321 Not tainted syzkaller #0 PREEMPT(lazy) [ 208.198069][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.198084][ T7780] Call Trace: [ 208.198091][ T7780] [ 208.198100][ T7780] __dump_stack+0x1d/0x30 [ 208.198171][ T7780] dump_stack_lvl+0x95/0xd0 [ 208.198252][ T7780] dump_stack+0x15/0x1b [ 208.198282][ T7780] should_fail_ex+0x262/0x280 [ 208.198305][ T7780] should_fail+0xb/0x20 [ 208.198326][ T7780] should_fail_usercopy+0x1a/0x20 [ 208.198422][ T7780] _copy_from_iter+0xcc/0xe70 [ 208.198448][ T7780] ? __alloc_skb+0x516/0x6f0 [ 208.198474][ T7780] ? __alloc_skb+0x209/0x6f0 [ 208.198503][ T7780] netlink_sendmsg+0x4a4/0x6f0 [ 208.198533][ T7780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.198561][ T7780] ____sys_sendmsg+0x532/0x580 [ 208.198597][ T7780] ___sys_sendmsg+0x195/0x1e0 [ 208.198674][ T7780] __x64_sys_sendmsg+0xd4/0x160 [ 208.198756][ T7780] x64_sys_call+0x22ab/0x2550 [ 208.198784][ T7780] do_syscall_64+0x112/0x360 [ 208.198877][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.198956][ T7780] RIP: 0033:0x7f2868f8e159 [ 208.198975][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.198997][ T7780] RSP: 002b:00007f28679e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.199060][ T7780] RAX: ffffffffffffffda RBX: 00007f2869215fa0 RCX: 00007f2868f8e159 [ 208.199078][ T7780] RDX: 00000000000000c0 RSI: 0000200000000300 RDI: 0000000000000003 [ 208.199093][ T7780] RBP: 00007f28679e7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.199106][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.199122][ T7780] R13: 00007f2869216038 R14: 00007f2869215fa0 R15: 00007ffc1aff4c28 [ 208.199141][ T7780] [ 208.564909][ T7785] set_capacity_and_notify: 3 callbacks suppressed [ 208.564944][ T7785] loop2: detected capacity change from 0 to 1024 [ 208.591287][ T7785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.604463][ T7785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.606944][ T29] audit: type=1400 audit(1788328640.475:1368): avc: denied { write } for pid=7783 comm="syz.2.1323" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.707269][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.812190][ T7793] loop1: detected capacity change from 0 to 512 [ 208.818877][ T7793] ext4: Unknown parameter 'func' [ 208.863267][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.899756][ T7796] FAULT_INJECTION: forcing a failure. [ 208.899756][ T7796] name failslab, interval 1, probability 0, space 0, times 0 [ 208.899800][ T7796] CPU: 1 UID: 0 PID: 7796 Comm: syz.3.1327 Not tainted syzkaller #0 PREEMPT(lazy) [ 208.899877][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.899890][ T7796] Call Trace: [ 208.899897][ T7796] [ 208.899905][ T7796] __dump_stack+0x1d/0x30 [ 208.899929][ T7796] dump_stack_lvl+0x95/0xd0 [ 208.899954][ T7796] dump_stack+0x15/0x1b [ 208.900054][ T7796] should_fail_ex+0x262/0x280 [ 208.900075][ T7796] ? alloc_tty_struct+0x4b/0x3b0 [ 208.900195][ T7796] should_failslab+0x8c/0xb0 [ 208.900229][ T7796] __kmalloc_cache_noprof+0x7a/0x400 [ 208.900260][ T7796] ? alloc_tty_struct+0x4b/0x3b0 [ 208.900288][ T7796] alloc_tty_struct+0x4b/0x3b0 [ 208.900311][ T7796] pty_unix98_install+0xf0/0x380 [ 208.900404][ T7796] tty_init_dev+0x7c/0x320 [ 208.900430][ T7796] ptmx_open+0xda/0x240 [ 208.900449][ T7796] chrdev_open+0x2eb/0x3a0 [ 208.900484][ T7796] do_dentry_open+0x49f/0xa60 [ 208.900508][ T7796] ? __pfx_chrdev_open+0x10/0x10 [ 208.900541][ T7796] ? may_open+0x1ee/0x350 [ 208.900569][ T7796] vfs_open+0x37/0x1e0 [ 208.900589][ T7796] path_openat+0xc01/0x10d0 [ 208.900668][ T7796] do_file_open+0x16c/0x290 [ 208.900778][ T7796] do_sys_openat2+0xa0/0x130 [ 208.900802][ T7796] __x64_sys_openat+0xf2/0x120 [ 208.900827][ T7796] x64_sys_call+0x1f72/0x2550 [ 208.900860][ T7796] do_syscall_64+0x112/0x360 [ 208.900903][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.900929][ T7796] RIP: 0033:0x7fce2745e159 [ 208.901018][ T7796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.901038][ T7796] RSP: 002b:00007fce25eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.901131][ T7796] RAX: ffffffffffffffda RBX: 00007fce276e5fa0 RCX: 00007fce2745e159 [ 208.901146][ T7796] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 208.901166][ T7796] RBP: 00007fce274f5024 R08: 0000000000000000 R09: 0000000000000000 [ 208.901181][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.901194][ T7796] R13: 00007fce276e6038 R14: 00007fce276e5fa0 R15: 00007ffd0b486338 [ 208.901215][ T7796] [ 209.259175][ T7812] FAULT_INJECTION: forcing a failure. [ 209.259175][ T7812] name failslab, interval 1, probability 0, space 0, times 0 [ 209.259225][ T7812] CPU: 1 UID: 0 PID: 7812 Comm: syz.2.1330 Not tainted syzkaller #0 PREEMPT(lazy) [ 209.259256][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.259269][ T7812] Call Trace: [ 209.259276][ T7812] [ 209.259284][ T7812] __dump_stack+0x1d/0x30 [ 209.259313][ T7812] dump_stack_lvl+0x95/0xd0 [ 209.259387][ T7812] dump_stack+0x15/0x1b [ 209.259413][ T7812] should_fail_ex+0x262/0x280 [ 209.259492][ T7812] ? __kthread_create_on_node+0x80/0x240 [ 209.259528][ T7812] should_failslab+0x8c/0xb0 [ 209.259628][ T7812] __kmalloc_cache_noprof+0x7a/0x400 [ 209.259664][ T7812] ? __kthread_create_on_node+0x80/0x240 [ 209.259775][ T7812] ? __pfx_rescuer_thread+0x10/0x10 [ 209.259798][ T7812] __kthread_create_on_node+0x80/0x240 [ 209.259836][ T7812] ? __pfx_rescuer_thread+0x10/0x10 [ 209.259860][ T7812] kthread_create_on_node+0x89/0xc0 [ 209.259897][ T7812] ? scnprintf+0xb2/0xf0 [ 209.259920][ T7812] init_rescuer+0x17c/0x290 [ 209.260013][ T7812] ? schedule_on_each_cpu+0x90/0x340 [ 209.260056][ T7812] alloc_workqueue_va+0x145b/0x1630 [ 209.260088][ T7812] alloc_workqueue_noprof+0x84/0xb0 [ 209.260123][ T7812] ? nci_hci_allocate+0x33/0x180 [ 209.260164][ T7812] nci_register_device+0x20c/0x510 [ 209.260209][ T7812] virtual_ncidev_open+0xca/0x130 [ 209.260238][ T7812] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 209.260329][ T7812] misc_open+0x1df/0x220 [ 209.260354][ T7812] chrdev_open+0x2eb/0x3a0 [ 209.260474][ T7812] do_dentry_open+0x49f/0xa60 [ 209.260550][ T7812] ? __pfx_chrdev_open+0x10/0x10 [ 209.260584][ T7812] vfs_open+0x37/0x1e0 [ 209.260641][ T7812] path_openat+0xc01/0x10d0 [ 209.260672][ T7812] do_file_open+0x16c/0x290 [ 209.260757][ T7812] do_sys_openat2+0xa0/0x130 [ 209.260782][ T7812] __x64_sys_openat+0xf2/0x120 [ 209.260994][ T7812] x64_sys_call+0x1f72/0x2550 [ 209.261022][ T7812] do_syscall_64+0x112/0x360 [ 209.261096][ T7812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.261121][ T7812] RIP: 0033:0x7f2868f8e159 [ 209.261139][ T7812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.261160][ T7812] RSP: 002b:00007f28679e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 209.261223][ T7812] RAX: ffffffffffffffda RBX: 00007f2869215fa0 RCX: 00007f2868f8e159 [ 209.261239][ T7812] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 209.261256][ T7812] RBP: 00007f2869025024 R08: 0000000000000000 R09: 0000000000000000 [ 209.261271][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.261323][ T7812] R13: 00007f2869216038 R14: 00007f2869215fa0 R15: 00007ffc1aff4c28 [ 209.261349][ T7812] [ 209.268775][ T7812] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -ENOMEM [ 209.533649][ T7815] loop2: detected capacity change from 0 to 512 [ 209.560920][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 209.789798][ T7817] loop4: detected capacity change from 0 to 8192 [ 209.856983][ T7822] FAULT_INJECTION: forcing a failure. [ 209.856983][ T7822] name failslab, interval 1, probability 0, space 0, times 0 [ 209.857017][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: syz.2.1334 Not tainted syzkaller #0 PREEMPT(lazy) [ 209.857105][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.857119][ T7822] Call Trace: [ 209.857125][ T7822] [ 209.857132][ T7822] __dump_stack+0x1d/0x30 [ 209.857158][ T7822] dump_stack_lvl+0x95/0xd0 [ 209.857183][ T7822] dump_stack+0x15/0x1b [ 209.857290][ T7822] should_fail_ex+0x262/0x280 [ 209.857386][ T7822] ? alloc_workqueue_va+0x500/0x1630 [ 209.857466][ T7822] should_failslab+0x8c/0xb0 [ 209.857494][ T7822] __kmalloc_cache_node_noprof+0x81/0x420 [ 209.857529][ T7822] ? alloc_workqueue_va+0x500/0x1630 [ 209.857593][ T7822] alloc_workqueue_va+0x500/0x1630 [ 209.857622][ T7822] alloc_workqueue_noprof+0x84/0xb0 [ 209.857662][ T7822] nci_register_device+0x11e/0x510 [ 209.857713][ T7822] virtual_ncidev_open+0xca/0x130 [ 209.857741][ T7822] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 209.857803][ T7822] misc_open+0x1df/0x220 [ 209.857829][ T7822] chrdev_open+0x2eb/0x3a0 [ 209.857867][ T7822] do_dentry_open+0x49f/0xa60 [ 209.858009][ T7822] ? __pfx_chrdev_open+0x10/0x10 [ 209.858045][ T7822] vfs_open+0x37/0x1e0 [ 209.858070][ T7822] path_openat+0xc01/0x10d0 [ 209.858104][ T7822] do_file_open+0x16c/0x290 [ 209.858149][ T7822] do_sys_openat2+0xa0/0x130 [ 209.858172][ T7822] __x64_sys_openat+0xf2/0x120 [ 209.858196][ T7822] x64_sys_call+0x1f72/0x2550 [ 209.858227][ T7822] do_syscall_64+0x112/0x360 [ 209.858303][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.858327][ T7822] RIP: 0033:0x7f2868f8e159 [ 209.858343][ T7822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.858417][ T7822] RSP: 002b:00007f28679e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 209.858439][ T7822] RAX: ffffffffffffffda RBX: 00007f2869215fa0 RCX: 00007f2868f8e159 [ 209.858456][ T7822] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 209.858524][ T7822] RBP: 00007f2869025024 R08: 0000000000000000 R09: 0000000000000000 [ 209.858537][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.858549][ T7822] R13: 00007f2869216038 R14: 00007f2869215fa0 R15: 00007ffc1aff4c28 [ 209.858567][ T7822] [ 210.021612][ T7826] FAULT_INJECTION: forcing a failure. [ 210.021612][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 210.021642][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.1.1335 Not tainted syzkaller #0 PREEMPT(lazy) [ 210.021671][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.021687][ T7826] Call Trace: [ 210.021694][ T7826] [ 210.021765][ T7826] __dump_stack+0x1d/0x30 [ 210.021800][ T7826] dump_stack_lvl+0x95/0xd0 [ 210.021825][ T7826] dump_stack+0x15/0x1b [ 210.021848][ T7826] should_fail_ex+0x262/0x280 [ 210.021872][ T7826] ? nci_hci_allocate+0x33/0x180 [ 210.021952][ T7826] should_failslab+0x8c/0xb0 [ 210.021983][ T7826] __kmalloc_cache_noprof+0x7a/0x400 [ 210.022016][ T7826] ? pm_runtime_init+0x166/0x170 [ 210.022101][ T7826] ? nci_hci_allocate+0x33/0x180 [ 210.022144][ T7826] ? mutex_init_generic+0x3e/0x50 [ 210.022178][ T7826] nci_hci_allocate+0x33/0x180 [ 210.022219][ T7826] nci_allocate_device+0x156/0x200 [ 210.022248][ T7826] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 210.022280][ T7826] virtual_ncidev_open+0x55/0x130 [ 210.022314][ T7826] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 210.022345][ T7826] misc_open+0x1df/0x220 [ 210.022389][ T7826] chrdev_open+0x2eb/0x3a0 [ 210.022456][ T7826] do_dentry_open+0x49f/0xa60 [ 210.022556][ T7826] ? __pfx_chrdev_open+0x10/0x10 [ 210.022590][ T7826] vfs_open+0x37/0x1e0 [ 210.022611][ T7826] path_openat+0xc01/0x10d0 [ 210.022642][ T7826] do_file_open+0x16c/0x290 [ 210.022755][ T7826] do_sys_openat2+0xa0/0x130 [ 210.022785][ T7826] __x64_sys_openat+0xf2/0x120 [ 210.022810][ T7826] x64_sys_call+0x1f72/0x2550 [ 210.022865][ T7826] do_syscall_64+0x112/0x360 [ 210.022903][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.022929][ T7826] RIP: 0033:0x7fe85cc9e159 [ 210.023018][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.023039][ T7826] RSP: 002b:00007fe85b6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 210.023130][ T7826] RAX: ffffffffffffffda RBX: 00007fe85cf25fa0 RCX: 00007fe85cc9e159 [ 210.023146][ T7826] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 210.023162][ T7826] RBP: 00007fe85cd35024 R08: 0000000000000000 R09: 0000000000000000 [ 210.023177][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.023191][ T7826] R13: 00007fe85cf26038 R14: 00007fe85cf25fa0 R15: 00007fff26ae0308 [ 210.023214][ T7826] [ 210.301590][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 210.361919][ T7832] loop3: detected capacity change from 0 to 1024 [ 210.362547][ T7832] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.386311][ T7832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.396653][ T29] audit: type=1400 audit(1788328642.265:1369): avc: denied { write } for pid=7831 comm="syz.3.1338" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.526628][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.661208][ T7852] loop2: detected capacity change from 0 to 512 [ 210.839870][ T7860] FAULT_INJECTION: forcing a failure. [ 210.839870][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 210.839912][ T7860] CPU: 1 UID: 0 PID: 7860 Comm: syz.2.1346 Not tainted syzkaller #0 PREEMPT(lazy) [ 210.839938][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.839995][ T7860] Call Trace: [ 210.840002][ T7860] [ 210.840009][ T7860] __dump_stack+0x1d/0x30 [ 210.840035][ T7860] dump_stack_lvl+0x95/0xd0 [ 210.840061][ T7860] dump_stack+0x15/0x1b [ 210.840085][ T7860] should_fail_ex+0x262/0x280 [ 210.840144][ T7860] ? security_inode_alloc+0x37/0x100 [ 210.840171][ T7860] should_failslab+0x8c/0xb0 [ 210.840209][ T7860] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 210.840239][ T7860] ? security_inode_alloc+0x37/0x100 [ 210.840266][ T7860] security_inode_alloc+0x37/0x100 [ 210.840339][ T7860] inode_init_always_gfp+0x495/0x4e0 [ 210.840387][ T7860] alloc_inode+0x58/0x170 [ 210.840422][ T7860] new_inode+0x1d/0xe0 [ 210.840490][ T7860] devpts_pty_new+0x60/0x320 [ 210.840518][ T7860] ? __list_add_valid_or_report+0x38/0xe0 [ 210.840558][ T7860] ptmx_open+0x17e/0x240 [ 210.840586][ T7860] chrdev_open+0x2eb/0x3a0 [ 210.840649][ T7860] do_dentry_open+0x49f/0xa60 [ 210.840671][ T7860] ? __pfx_chrdev_open+0x10/0x10 [ 210.840704][ T7860] ? may_open+0x1ee/0x350 [ 210.840805][ T7860] vfs_open+0x37/0x1e0 [ 210.840826][ T7860] path_openat+0xc01/0x10d0 [ 210.840857][ T7860] do_file_open+0x16c/0x290 [ 210.840954][ T7860] do_sys_openat2+0xa0/0x130 [ 210.840978][ T7860] __x64_sys_openat+0xf2/0x120 [ 210.841022][ T7860] x64_sys_call+0x1f72/0x2550 [ 210.841058][ T7860] do_syscall_64+0x112/0x360 [ 210.841090][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.841157][ T7860] RIP: 0033:0x7f2868f8e159 [ 210.841176][ T7860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.841197][ T7860] RSP: 002b:00007f28679e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 210.841224][ T7860] RAX: ffffffffffffffda RBX: 00007f2869215fa0 RCX: 00007f2868f8e159 [ 210.841241][ T7860] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 210.841337][ T7860] RBP: 00007f2869025024 R08: 0000000000000000 R09: 0000000000000000 [ 210.841352][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.841366][ T7860] R13: 00007f2869216038 R14: 00007f2869215fa0 R15: 00007ffc1aff4c28 [ 210.841388][ T7860] [ 211.184622][ T7866] FAULT_INJECTION: forcing a failure. [ 211.184622][ T7866] name failslab, interval 1, probability 0, space 0, times 0 [ 211.184659][ T7866] CPU: 1 UID: 0 PID: 7866 Comm: syz.2.1348 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.184684][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.184697][ T7866] Call Trace: [ 211.184704][ T7866] [ 211.184712][ T7866] __dump_stack+0x1d/0x30 [ 211.184816][ T7866] dump_stack_lvl+0x95/0xd0 [ 211.184840][ T7866] dump_stack+0x15/0x1b [ 211.184864][ T7866] should_fail_ex+0x262/0x280 [ 211.184889][ T7866] ? alloc_tty_struct+0x4b/0x3b0 [ 211.184959][ T7866] should_failslab+0x8c/0xb0 [ 211.184993][ T7866] __kmalloc_cache_noprof+0x7a/0x400 [ 211.185103][ T7866] ? alloc_tty_struct+0x4b/0x3b0 [ 211.185129][ T7866] alloc_tty_struct+0x4b/0x3b0 [ 211.185155][ T7866] pty_unix98_install+0xf0/0x380 [ 211.185177][ T7866] tty_init_dev+0x7c/0x320 [ 211.185258][ T7866] ptmx_open+0xda/0x240 [ 211.185278][ T7866] chrdev_open+0x2eb/0x3a0 [ 211.185355][ T7866] do_dentry_open+0x49f/0xa60 [ 211.185378][ T7866] ? __pfx_chrdev_open+0x10/0x10 [ 211.185427][ T7866] ? may_open+0x1ee/0x350 [ 211.185510][ T7866] vfs_open+0x37/0x1e0 [ 211.185532][ T7866] path_openat+0xc01/0x10d0 [ 211.185563][ T7866] do_file_open+0x16c/0x290 [ 211.185599][ T7866] do_sys_openat2+0xa0/0x130 [ 211.185669][ T7866] __x64_sys_openat+0xf2/0x120 [ 211.185693][ T7866] x64_sys_call+0x1f72/0x2550 [ 211.185729][ T7866] do_syscall_64+0x112/0x360 [ 211.185797][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.185823][ T7866] RIP: 0033:0x7f2868f8e159 [ 211.185842][ T7866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.185888][ T7866] RSP: 002b:00007f28679e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.185910][ T7866] RAX: ffffffffffffffda RBX: 00007f2869215fa0 RCX: 00007f2868f8e159 [ 211.185927][ T7866] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 211.185943][ T7866] RBP: 00007f2869025024 R08: 0000000000000000 R09: 0000000000000000 [ 211.186022][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.186036][ T7866] R13: 00007f2869216038 R14: 00007f2869215fa0 R15: 00007ffc1aff4c28 [ 211.186057][ T7866] [ 211.549087][ T7866] loop2: detected capacity change from 0 to 32768 [ 211.567578][ T7879] FAULT_INJECTION: forcing a failure. [ 211.567578][ T7879] name failslab, interval 1, probability 0, space 0, times 0 [ 211.567689][ T7879] CPU: 1 UID: 0 PID: 7879 Comm: syz.1.1349 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.567776][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.567791][ T7879] Call Trace: [ 211.567806][ T7879] [ 211.567815][ T7879] __dump_stack+0x1d/0x30 [ 211.567842][ T7879] dump_stack_lvl+0x95/0xd0 [ 211.567924][ T7879] dump_stack+0x15/0x1b [ 211.567947][ T7879] should_fail_ex+0x262/0x280 [ 211.568052][ T7879] ? __kthread_create_on_node+0x80/0x240 [ 211.568133][ T7879] should_failslab+0x8c/0xb0 [ 211.568242][ T7879] __kmalloc_cache_noprof+0x7a/0x400 [ 211.568271][ T7879] ? __kthread_create_on_node+0x80/0x240 [ 211.568369][ T7879] ? __pfx_rescuer_thread+0x10/0x10 [ 211.568392][ T7879] __kthread_create_on_node+0x80/0x240 [ 211.568523][ T7879] ? __pfx_rescuer_thread+0x10/0x10 [ 211.568543][ T7879] kthread_create_on_node+0x89/0xc0 [ 211.568623][ T7879] ? scnprintf+0xb2/0xf0 [ 211.568646][ T7879] init_rescuer+0x17c/0x290 [ 211.568675][ T7879] ? schedule_on_each_cpu+0x90/0x340 [ 211.568770][ T7879] alloc_workqueue_va+0x145b/0x1630 [ 211.568855][ T7879] alloc_workqueue_noprof+0x84/0xb0 [ 211.568883][ T7879] ? nci_hci_allocate+0x33/0x180 [ 211.568968][ T7879] nci_register_device+0x20c/0x510 [ 211.568999][ T7879] virtual_ncidev_open+0xca/0x130 [ 211.569097][ T7879] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 211.569129][ T7879] misc_open+0x1df/0x220 [ 211.569154][ T7879] chrdev_open+0x2eb/0x3a0 [ 211.569189][ T7879] do_dentry_open+0x49f/0xa60 [ 211.569285][ T7879] ? __pfx_chrdev_open+0x10/0x10 [ 211.569319][ T7879] vfs_open+0x37/0x1e0 [ 211.569340][ T7879] path_openat+0xc01/0x10d0 [ 211.569371][ T7879] do_file_open+0x16c/0x290 [ 211.569415][ T7879] do_sys_openat2+0xa0/0x130 [ 211.569494][ T7879] __x64_sys_openat+0xf2/0x120 [ 211.569577][ T7879] x64_sys_call+0x1f72/0x2550 [ 211.569607][ T7879] do_syscall_64+0x112/0x360 [ 211.569639][ T7879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.569730][ T7879] RIP: 0033:0x7fe85cc9e159 [ 211.569748][ T7879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.569768][ T7879] RSP: 002b:00007fe85b6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.569791][ T7879] RAX: ffffffffffffffda RBX: 00007fe85cf25fa0 RCX: 00007fe85cc9e159 [ 211.569856][ T7879] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 211.569871][ T7879] RBP: 00007fe85cd35024 R08: 0000000000000000 R09: 0000000000000000 [ 211.569916][ T7879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.569929][ T7879] R13: 00007fe85cf26038 R14: 00007fe85cf25fa0 R15: 00007fff26ae0308 [ 211.569949][ T7879] [ 211.581449][ T7879] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -ENOMEM [ 211.736819][ T558] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.875226][ T7888] loop1: detected capacity change from 0 to 1024 [ 211.877435][ T7888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.897461][ T7888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.909830][ T29] audit: type=1400 audit(1788328643.775:1370): avc: denied { write } for pid=7886 comm="syz.1.1353" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.958134][ T7892] FAULT_INJECTION: forcing a failure. [ 211.958134][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 211.958173][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.2.1354 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.958198][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.958211][ T7892] Call Trace: [ 211.958217][ T7892] [ 211.958305][ T7892] __dump_stack+0x1d/0x30 [ 211.958336][ T7892] dump_stack_lvl+0x95/0xd0 [ 211.958428][ T7892] dump_stack+0x15/0x1b [ 211.958452][ T7892] should_fail_ex+0x262/0x280 [ 211.958478][ T7892] should_failslab+0x8c/0xb0 [ 211.958511][ T7892] __kmalloc_node_noprof+0xdb/0x500 [ 211.958557][ T7892] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 211.958594][ T7892] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 211.958675][ T7892] __vmalloc_node_range_noprof+0x3ef/0x1000 [ 211.958707][ T7892] ? __d_rehash+0x124/0x1d0 [ 211.958741][ T7892] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 211.958791][ T7892] __vmalloc_noprof+0xa4/0xf0 [ 211.958825][ T7892] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 211.958849][ T7892] bpf_prog_alloc_no_stats+0x47/0x390 [ 211.958917][ T7892] ? bpf_prog_alloc+0x2a/0x150 [ 211.958941][ T7892] bpf_prog_alloc+0x3c/0x150 [ 211.958966][ T7892] bpf_prog_load+0x54b/0x1060 [ 211.959045][ T7892] ? avc_has_perm_noaudit+0xa3/0x120 [ 211.959075][ T7892] ? vfs_write+0x7b0/0x9a0 [ 211.959178][ T7892] __sys_bpf+0xbae/0xc30 [ 211.959205][ T7892] ? vfs_write+0x7b0/0x9a0 [ 211.959234][ T7892] ? vfs_write+0x7b0/0x9a0 [ 211.959316][ T7892] __x64_sys_bpf+0x69/0x80 [ 211.959341][ T7892] x64_sys_call+0xf26/0x2550 [ 211.959449][ T7892] do_syscall_64+0x112/0x360 [ 211.959492][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.959516][ T7892] RIP: 0033:0x7f2868f8e159 [ 211.959533][ T7892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.959555][ T7892] RSP: 002b:00007f28679e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.959647][ T7892] RAX: ffffffffffffffda RBX: 00007f2869215fa0 RCX: 00007f2868f8e159 [ 211.959665][ T7892] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 211.959681][ T7892] RBP: 00007f28679e7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.959696][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.959709][ T7892] R13: 00007f2869216038 R14: 00007f2869215fa0 R15: 00007ffc1aff4c28 [ 211.959730][ T7892] [ 212.017438][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.076525][ T7892] syz.2.1354: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 212.076629][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.2.1354 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.076724][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.076737][ T7892] Call Trace: [ 212.076745][ T7892] [ 212.076752][ T7892] __dump_stack+0x1d/0x30 [ 212.076783][ T7892] dump_stack_lvl+0x95/0xd0 [ 212.076849][ T7892] dump_stack+0x15/0x1b [ 212.076871][ T7892] warn_alloc+0x146/0x1c0 [ 212.076986][ T7892] ? should_failslab+0x8c/0xb0 [ 212.077015][ T7892] ? __kmalloc_node_noprof+0xdb/0x500 [ 212.077076][ T7892] __vmalloc_node_range_noprof+0x70d/0x1000 [ 212.077198][ T7892] ? __d_rehash+0x124/0x1d0 [ 212.077277][ T7892] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 212.077300][ T7892] __vmalloc_noprof+0xa4/0xf0 [ 212.077331][ T7892] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 212.077375][ T7892] bpf_prog_alloc_no_stats+0x47/0x390 [ 212.077440][ T7892] ? bpf_prog_alloc+0x2a/0x150 [ 212.077462][ T7892] bpf_prog_alloc+0x3c/0x150 [ 212.077500][ T7892] bpf_prog_load+0x54b/0x1060 [ 212.077527][ T7892] ? avc_has_perm_noaudit+0xa3/0x120 [ 212.077564][ T7892] ? vfs_write+0x7b0/0x9a0 [ 212.077599][ T7892] __sys_bpf+0xbae/0xc30 [ 212.077662][ T7892] ? vfs_write+0x7b0/0x9a0 [ 212.077689][ T7892] ? vfs_write+0x7b0/0x9a0 [ 212.077748][ T7892] __x64_sys_bpf+0x69/0x80 [ 212.077771][ T7892] x64_sys_call+0xf26/0x2550 [ 212.077799][ T7892] do_syscall_64+0x112/0x360 [ 212.077830][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.077854][ T7892] RIP: 0033:0x7f2868f8e159 [ 212.077928][ T7892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.077949][ T7892] RSP: 002b:00007f28679e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.077970][ T7892] RAX: ffffffffffffffda RBX: 00007f2869215fa0 RCX: 00007f2868f8e159 [ 212.077987][ T7892] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 212.078014][ T7892] RBP: 00007f28679e7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.078029][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.078078][ T7892] R13: 00007f2869216038 R14: 00007f2869215fa0 R15: 00007ffc1aff4c28 [ 212.078099][ T7892] [ 212.097821][ T7892] Mem-Info: [ 212.097910][ T7892] active_anon:36738 inactive_anon:2 isolated_anon:0 [ 212.097910][ T7892] active_file:13 inactive_file:24905 isolated_file:0 [ 212.097910][ T7892] unevictable:0 dirty:8 writeback:22 [ 212.097910][ T7892] slab_reclaimable:3294 slab_unreclaimable:17091 [ 212.097910][ T7892] mapped:40126 shmem:29622 pagetables:1178 [ 212.097910][ T7892] sec_pagetables:0 bounce:0 [ 212.097910][ T7892] kernel_misc_reclaimable:0 [ 212.097910][ T7892] free:1841947 free_pcp:12576 free_cma:0 [ 212.098036][ T7892] Node 0 active_anon:146952kB inactive_anon:8kB active_file:52kB inactive_file:99620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160504kB dirty:32kB writeback:88kB shmem:118488kB kernel_stack:3568kB pagetables:4712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 212.098098][ T7892] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 212.098242][ T7892] lowmem_reserve[]: 0 2877 7856 7856 [ 212.098273][ T7892] Node 0 DMA32 free:2943396kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946920kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 212.098355][ T7892] lowmem_reserve[]: 0 0 4978 4978 [ 212.098385][ T7892] Node 0 Normal free:4409032kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:146952kB inactive_anon:8kB active_file:52kB inactive_file:99620kB unevictable:0kB writepending:120kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:46780kB local_pcp:12496kB free_cma:0kB [ 212.098571][ T7892] lowmem_reserve[]: 0 0 0 0 [ 212.098601][ T7892] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 212.098807][ T7892] Node 0 DMA32: 1*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943396kB [ 212.120431][ T7892] Node 0 Normal: 1019*4kB (UM) 111*8kB (UM) 177*16kB (UME) 238*32kB (M) 146*64kB (ME) 58*128kB (UME) 21*256kB (UM) 4*512kB (UME) 3*1024kB (M) 2*2048kB (UE) 1065*4096kB (UM) = 4409012kB [ 212.120806][ T7892] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 212.120824][ T7892] 54567 total pagecache pages [ 212.120832][ T7892] 2 pages in swap cache [ 212.120839][ T7892] Free swap = 124988kB [ 212.120847][ T7892] Total swap = 124996kB [ 212.120855][ T7892] 2097051 pages RAM [ 212.120863][ T7892] 0 pages HighMem/MovableOnly [ 212.120870][ T7892] 81924 pages reserved [ 212.360314][ T29] audit: type=1326 audit(1788328644.225:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.1.1355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85cc9e159 code=0x7ffc0000 [ 212.363249][ T29] audit: type=1326 audit(1788328644.235:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.1.1355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85cc9e159 code=0x7ffc0000 [ 212.363282][ T29] audit: type=1326 audit(1788328644.235:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.1.1355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85cc9e159 code=0x7ffc0000 [ 212.363491][ T29] audit: type=1326 audit(1788328644.235:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.1.1355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe85cc9e159 code=0x7ffc0000 [ 212.363816][ T29] audit: type=1326 audit(1788328644.235:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.1.1355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85cc9e159 code=0x7ffc0000 [ 212.364083][ T29] audit: type=1326 audit(1788328644.235:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.1.1355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85cc9e159 code=0x7ffc0000 [ 212.364113][ T29] audit: type=1326 audit(1788328644.235:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.1.1355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85cc9e159 code=0x7ffc0000 [ 212.364406][ T29] audit: type=1326 audit(1788328644.235:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.1.1355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe85cc9e159 code=0x7ffc0000 [ 212.377405][ T7896] loop2: detected capacity change from 0 to 512 [ 212.833700][ T7868] loop4: detected capacity change from 0 to 8192 [ 213.273970][ T7913] FAULT_INJECTION: forcing a failure. [ 213.273970][ T7913] name fail_futex, interval 1, probability 0, space 0, times 0 [ 213.274007][ T7913] CPU: 1 UID: 0 PID: 7913 Comm: syz.4.1358 Not tainted syzkaller #0 PREEMPT(lazy) [ 213.274096][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.274109][ T7913] Call Trace: [ 213.274115][ T7913] [ 213.274122][ T7913] __dump_stack+0x1d/0x30 [ 213.274149][ T7913] dump_stack_lvl+0x95/0xd0 [ 213.274176][ T7913] dump_stack+0x15/0x1b [ 213.274250][ T7913] should_fail_ex+0x262/0x280 [ 213.274283][ T7913] should_fail+0xb/0x20 [ 213.274303][ T7913] get_futex_key+0x12d/0xb10 [ 213.274358][ T7913] futex_wake+0x89/0x400 [ 213.274462][ T7913] do_futex+0x3f8/0x460 [ 213.274547][ T7913] ? kmem_cache_free+0x106/0x3b0 [ 213.274657][ T7913] __se_sys_futex+0x2f6/0x370 [ 213.274690][ T7913] __x64_sys_futex+0x78/0x90 [ 213.274721][ T7913] x64_sys_call+0x22e2/0x2550 [ 213.274754][ T7913] do_syscall_64+0x112/0x360 [ 213.274786][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.274808][ T7913] RIP: 0033:0x7fd33dc8e159 [ 213.274823][ T7913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.274869][ T7913] RSP: 002b:00007fd33c6e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 213.274893][ T7913] RAX: ffffffffffffffda RBX: 00007fd33df15fa8 RCX: 00007fd33dc8e159 [ 213.274911][ T7913] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd33df15fac [ 213.274927][ T7913] RBP: 00007fd33df15fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 213.274943][ T7913] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 213.274959][ T7913] R13: 00007fd33df16038 R14: 00007ffeae75ad10 R15: 00007ffeae75adf8 [ 213.274977][ T7913] [ 213.802575][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 213.802647][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 214.414901][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.414985][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.090107][ T7894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.127859][ T7936] FAULT_INJECTION: forcing a failure. [ 215.127859][ T7936] name failslab, interval 1, probability 0, space 0, times 0 [ 215.127978][ T7936] CPU: 0 UID: 0 PID: 7936 Comm: syz.2.1364 Not tainted syzkaller #0 PREEMPT(lazy) [ 215.128005][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.128057][ T7936] Call Trace: [ 215.128065][ T7936] [ 215.128074][ T7936] __dump_stack+0x1d/0x30 [ 215.128102][ T7936] dump_stack_lvl+0x95/0xd0 [ 215.128181][ T7936] dump_stack+0x15/0x1b [ 215.128202][ T7936] should_fail_ex+0x262/0x280 [ 215.128224][ T7936] ? alloc_tty_struct+0x4b/0x3b0 [ 215.128251][ T7936] should_failslab+0x8c/0xb0 [ 215.128348][ T7936] __kmalloc_cache_noprof+0x7a/0x400 [ 215.128381][ T7936] ? alloc_tty_struct+0x4b/0x3b0 [ 215.128494][ T7936] alloc_tty_struct+0x4b/0x3b0 [ 215.128572][ T7936] pty_unix98_install+0xf0/0x380 [ 215.128598][ T7936] tty_init_dev+0x7c/0x320 [ 215.128625][ T7936] ptmx_open+0xda/0x240 [ 215.128645][ T7936] chrdev_open+0x2eb/0x3a0 [ 215.128748][ T7936] do_dentry_open+0x49f/0xa60 [ 215.128842][ T7936] ? __pfx_chrdev_open+0x10/0x10 [ 215.128879][ T7936] ? may_open+0x1ee/0x350 [ 215.128904][ T7936] vfs_open+0x37/0x1e0 [ 215.128922][ T7936] path_openat+0xc01/0x10d0 [ 215.129010][ T7936] do_file_open+0x16c/0x290 [ 215.129049][ T7936] do_sys_openat2+0xa0/0x130 [ 215.129074][ T7936] __x64_sys_openat+0xf2/0x120 [ 215.129100][ T7936] x64_sys_call+0x1f72/0x2550 [ 215.129131][ T7936] do_syscall_64+0x112/0x360 [ 215.129162][ T7936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.129184][ T7936] RIP: 0033:0x7f2868f8e159 [ 215.129249][ T7936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.129267][ T7936] RSP: 002b:00007f28679e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.129353][ T7936] RAX: ffffffffffffffda RBX: 00007f2869215fa0 RCX: 00007f2868f8e159 [ 215.129371][ T7936] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 215.129385][ T7936] RBP: 00007f2869025024 R08: 0000000000000000 R09: 0000000000000000 [ 215.129398][ T7936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.129411][ T7936] R13: 00007f2869216038 R14: 00007f2869215fa0 R15: 00007ffc1aff4c28 [ 215.129429][ T7936] [ 215.188392][ T7942] set_capacity_and_notify: 1 callbacks suppressed [ 215.188415][ T7942] loop4: detected capacity change from 0 to 512 [ 215.238654][ T7947] loop3: detected capacity change from 0 to 1024 [ 215.239156][ T7947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.253986][ T7947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.451105][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.488206][ T7943] loop2: detected capacity change from 0 to 32768 [ 215.498081][ T7963] loop3: detected capacity change from 0 to 256 [ 215.507276][ T7963] msdos: Unknown parameter 'ωag¡÷+&A?f‰IRä’ê†2ð' [ 215.516813][ T7963] netlink: 'syz.3.1371': attribute type 15 has an invalid length. [ 215.639764][ T7971] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 215.676613][ T116] Bluetooth: hci0: Frame reassembly failed (-84) [ 217.720321][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 217.720356][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.333091][ T7953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.350120][ T7982] loop3: detected capacity change from 0 to 8192 [ 218.399540][ T7987] loop4: detected capacity change from 0 to 256 [ 218.406542][ T7987] FAT-fs (loop4): Directory bread(block 1285) failed [ 218.406581][ T7987] FAT-fs (loop4): Directory bread(block 1286) failed [ 218.406604][ T7987] FAT-fs (loop4): Directory bread(block 1287) failed [ 218.406699][ T7987] FAT-fs (loop4): Directory bread(block 1288) failed [ 218.407564][ T7988] loop1: detected capacity change from 0 to 512 [ 218.429107][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 218.429123][ T29] audit: type=1400 audit(1788328650.295:1564): avc: denied { create } for pid=7983 comm="syz.0.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 218.442331][ T29] audit: type=1400 audit(1788328650.315:1565): avc: denied { kexec_image_load } for pid=7983 comm="syz.0.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 218.489866][ T7987] FAT-fs (loop4): Directory bread(block 1285) failed [ 218.489967][ T7987] FAT-fs (loop4): Directory bread(block 1286) failed [ 218.489994][ T7987] FAT-fs (loop4): Directory bread(block 1287) failed [ 218.490017][ T7987] FAT-fs (loop4): Directory bread(block 1288) failed [ 218.529920][ T29] audit: type=1400 audit(1788328650.395:1566): avc: denied { sqpoll } for pid=7986 comm="syz.4.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 218.939419][ T8001] loop2: detected capacity change from 0 to 1764 [ 219.518469][ T8016] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 219.531167][ T12] tipc: Subscription rejected, illegal request [ 219.576257][ T29] audit: type=1400 audit(1788328651.395:1567): avc: denied { connect } for pid=8011 comm="syz.4.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.662410][ T8020] 9p: Bad value for 'rfdno' [ 219.670863][ T29] audit: type=1400 audit(1788328651.545:1568): avc: denied { accept } for pid=8011 comm="syz.4.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.695805][ T558] tipc: Subscription rejected, illegal request [ 219.737681][ T558] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.175335][ T8025] FAULT_INJECTION: forcing a failure. [ 220.175335][ T8025] name failslab, interval 1, probability 0, space 0, times 0 [ 220.175369][ T8025] CPU: 0 UID: 0 PID: 8025 Comm: syz.2.1389 Not tainted syzkaller #0 PREEMPT(lazy) [ 220.175408][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.175421][ T8025] Call Trace: [ 220.175427][ T8025] [ 220.175467][ T8025] __dump_stack+0x1d/0x30 [ 220.175551][ T8025] dump_stack_lvl+0x95/0xd0 [ 220.175577][ T8025] dump_stack+0x15/0x1b [ 220.175637][ T8025] should_fail_ex+0x262/0x280 [ 220.175659][ T8025] ? alloc_tty_struct+0x4b/0x3b0 [ 220.175690][ T8025] should_failslab+0x8c/0xb0 [ 220.175723][ T8025] __kmalloc_cache_noprof+0x7a/0x400 [ 220.175771][ T8025] ? alloc_tty_struct+0x4b/0x3b0 [ 220.175797][ T8025] alloc_tty_struct+0x4b/0x3b0 [ 220.175838][ T8025] pty_unix98_install+0xf0/0x380 [ 220.175866][ T8025] tty_init_dev+0x7c/0x320 [ 220.175893][ T8025] ptmx_open+0xda/0x240 [ 220.175914][ T8025] chrdev_open+0x2eb/0x3a0 [ 220.176023][ T8025] do_dentry_open+0x49f/0xa60 [ 220.176042][ T8025] ? __pfx_chrdev_open+0x10/0x10 [ 220.176074][ T8025] ? may_open+0x1ee/0x350 [ 220.176176][ T8025] vfs_open+0x37/0x1e0 [ 220.176194][ T8025] path_openat+0xc01/0x10d0 [ 220.176221][ T8025] do_file_open+0x16c/0x290 [ 220.176298][ T8025] do_sys_openat2+0xa0/0x130 [ 220.176319][ T8025] __x64_sys_openat+0xf2/0x120 [ 220.176398][ T8025] x64_sys_call+0x1f72/0x2550 [ 220.176428][ T8025] do_syscall_64+0x112/0x360 [ 220.176469][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.176515][ T8025] RIP: 0033:0x7f2868f8e159 [ 220.176635][ T8025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.176654][ T8025] RSP: 002b:00007f28679e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 220.176727][ T8025] RAX: ffffffffffffffda RBX: 00007f2869215fa0 RCX: 00007f2868f8e159 [ 220.176789][ T8025] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 220.176802][ T8025] RBP: 00007f2869025024 R08: 0000000000000000 R09: 0000000000000000 [ 220.176844][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.176859][ T8025] R13: 00007f2869216038 R14: 00007f2869215fa0 R15: 00007ffc1aff4c28 [ 220.176892][ T8025] [ 220.319150][ T8025] loop2: detected capacity change from 0 to 32768 [ 221.800326][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 221.800407][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 222.354858][ T8007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.449459][ T8040] loop3: detected capacity change from 0 to 1024 [ 222.461204][ T8040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.481657][ T8036] loop1: detected capacity change from 0 to 8192 [ 222.495541][ T8040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.512130][ T29] audit: type=1400 audit(1788328654.385:1569): avc: denied { write } for pid=8039 comm="syz.3.1393" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.536596][ T29] audit: type=1400 audit(1788328654.415:1570): avc: denied { write } for pid=8044 comm="syz.2.1391" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 222.536768][ T29] audit: type=1400 audit(1788328654.415:1571): avc: denied { open } for pid=8044 comm="syz.2.1391" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 222.536816][ T8048] random: crng reseeded on system resumption [ 222.673075][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.717441][ T8060] loop3: detected capacity change from 0 to 512 [ 222.816794][ T8065] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 223.148265][ T8071] FAULT_INJECTION: forcing a failure. [ 223.148265][ T8071] name failslab, interval 1, probability 0, space 0, times 0 [ 223.148304][ T8071] CPU: 0 UID: 0 PID: 8071 Comm: syz.3.1401 Not tainted syzkaller #0 PREEMPT(lazy) [ 223.148415][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.148430][ T8071] Call Trace: [ 223.148437][ T8071] [ 223.148446][ T8071] __dump_stack+0x1d/0x30 [ 223.148474][ T8071] dump_stack_lvl+0x95/0xd0 [ 223.148577][ T8071] dump_stack+0x15/0x1b [ 223.148602][ T8071] should_fail_ex+0x262/0x280 [ 223.148625][ T8071] ? alloc_vmap_area+0x1b6/0xe40 [ 223.148683][ T8071] should_failslab+0x8c/0xb0 [ 223.148721][ T8071] kmem_cache_alloc_node_noprof+0x82/0x400 [ 223.148753][ T8071] ? alloc_vmap_area+0x1b6/0xe40 [ 223.148784][ T8071] alloc_vmap_area+0x1b6/0xe40 [ 223.148837][ T8071] ? should_fail_ex+0xdb/0x280 [ 223.148929][ T8071] ? __get_vm_area_node+0x125/0x1f0 [ 223.148959][ T8071] ? should_failslab+0x8c/0xb0 [ 223.148990][ T8071] ? __get_vm_area_node+0x125/0x1f0 [ 223.149058][ T8071] __get_vm_area_node+0x199/0x1f0 [ 223.149091][ T8071] __vmalloc_node_range_noprof+0x262/0x1000 [ 223.149124][ T8071] ? n_tty_open+0x1d/0xd0 [ 223.149179][ T8071] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 223.149276][ T8071] ? class_find_device+0x26e/0x2c0 [ 223.149309][ T8071] ? n_tty_open+0x1d/0xd0 [ 223.149362][ T8071] vzalloc_noprof+0x82/0xb0 [ 223.149389][ T8071] ? n_tty_open+0x1d/0xd0 [ 223.149417][ T8071] n_tty_open+0x1d/0xd0 [ 223.149446][ T8071] tty_ldisc_setup+0x83/0x220 [ 223.149519][ T8071] tty_init_dev+0x183/0x320 [ 223.149580][ T8071] ptmx_open+0xda/0x240 [ 223.149602][ T8071] chrdev_open+0x2eb/0x3a0 [ 223.149637][ T8071] do_dentry_open+0x49f/0xa60 [ 223.149658][ T8071] ? __pfx_chrdev_open+0x10/0x10 [ 223.149761][ T8071] ? may_open+0x1ee/0x350 [ 223.149789][ T8071] vfs_open+0x37/0x1e0 [ 223.149810][ T8071] path_openat+0xc01/0x10d0 [ 223.149974][ T8071] do_file_open+0x16c/0x290 [ 223.150058][ T8071] do_sys_openat2+0xa0/0x130 [ 223.150082][ T8071] __x64_sys_openat+0xf2/0x120 [ 223.150107][ T8071] x64_sys_call+0x1f72/0x2550 [ 223.150182][ T8071] do_syscall_64+0x112/0x360 [ 223.150280][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.150305][ T8071] RIP: 0033:0x7fce2745e159 [ 223.150323][ T8071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.150343][ T8071] RSP: 002b:00007fce25eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.150366][ T8071] RAX: ffffffffffffffda RBX: 00007fce276e5fa0 RCX: 00007fce2745e159 [ 223.150424][ T8071] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 223.150440][ T8071] RBP: 00007fce274f5024 R08: 0000000000000000 R09: 0000000000000000 [ 223.150455][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.150469][ T8071] R13: 00007fce276e6038 R14: 00007fce276e5fa0 R15: 00007ffd0b486338 [ 223.150553][ T8071] [ 223.153068][ T8071] syz.3.1401: vmalloc error: size 8888, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 223.153144][ T8071] CPU: 0 UID: 0 PID: 8071 Comm: syz.3.1401 Not tainted syzkaller #0 PREEMPT(lazy) [ 223.153171][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.153186][ T8071] Call Trace: [ 223.153193][ T8071] [ 223.153201][ T8071] __dump_stack+0x1d/0x30 [ 223.153278][ T8071] dump_stack_lvl+0x95/0xd0 [ 223.153360][ T8071] dump_stack+0x15/0x1b [ 223.153383][ T8071] warn_alloc+0x146/0x1c0 [ 223.153445][ T8071] __vmalloc_node_range_noprof+0x28a/0x1000 [ 223.153483][ T8071] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 223.153523][ T8071] ? class_find_device+0x26e/0x2c0 [ 223.153590][ T8071] ? n_tty_open+0x1d/0xd0 [ 223.153620][ T8071] vzalloc_noprof+0x82/0xb0 [ 223.153704][ T8071] ? n_tty_open+0x1d/0xd0 [ 223.153737][ T8071] n_tty_open+0x1d/0xd0 [ 223.153837][ T8071] tty_ldisc_setup+0x83/0x220 [ 223.153880][ T8071] tty_init_dev+0x183/0x320 [ 223.153907][ T8071] ptmx_open+0xda/0x240 [ 223.153960][ T8071] chrdev_open+0x2eb/0x3a0 [ 223.153996][ T8071] do_dentry_open+0x49f/0xa60 [ 223.154061][ T8071] ? __pfx_chrdev_open+0x10/0x10 [ 223.154094][ T8071] ? may_open+0x1ee/0x350 [ 223.154122][ T8071] vfs_open+0x37/0x1e0 [ 223.154143][ T8071] path_openat+0xc01/0x10d0 [ 223.154200][ T8071] do_file_open+0x16c/0x290 [ 223.154237][ T8071] do_sys_openat2+0xa0/0x130 [ 223.154266][ T8071] __x64_sys_openat+0xf2/0x120 [ 223.154291][ T8071] x64_sys_call+0x1f72/0x2550 [ 223.154357][ T8071] do_syscall_64+0x112/0x360 [ 223.154389][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.154414][ T8071] RIP: 0033:0x7fce2745e159 [ 223.154432][ T8071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.154520][ T8071] RSP: 002b:00007fce25eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.154560][ T8071] RAX: ffffffffffffffda RBX: 00007fce276e5fa0 RCX: 00007fce2745e159 [ 223.154577][ T8071] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 223.154592][ T8071] RBP: 00007fce274f5024 R08: 0000000000000000 R09: 0000000000000000 [ 223.154607][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.154702][ T8071] R13: 00007fce276e6038 R14: 00007fce276e5fa0 R15: 00007ffd0b486338 [ 223.154724][ T8071] [ 223.154780][ T8071] Mem-Info: [ 223.154788][ T8071] active_anon:8297 inactive_anon:2 isolated_anon:0 [ 223.154788][ T8071] active_file:13 inactive_file:26680 isolated_file:0 [ 223.154788][ T8071] unevictable:0 dirty:58 writeback:1 [ 223.154788][ T8071] slab_reclaimable:3294 slab_unreclaimable:17111 [ 223.154788][ T8071] mapped:29516 shmem:1212 pagetables:1151 [ 223.154788][ T8071] sec_pagetables:0 bounce:0 [ 223.154788][ T8071] kernel_misc_reclaimable:0 [ 223.154788][ T8071] free:1878789 free_pcp:4524 free_cma:0 [ 223.154884][ T8071] Node 0 active_anon:33188kB inactive_anon:8kB active_file:52kB inactive_file:106720kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118064kB dirty:232kB writeback:4kB shmem:4848kB kernel_stack:3680kB pagetables:4604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 223.155008][ T8071] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.155107][ T8071] lowmem_reserve[]: 0 2877 7856 7856 [ 223.155210][ T8071] Node 0 DMA32 free:2943396kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946920kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 223.155337][ T8071] lowmem_reserve[]: 0 0 4978 4978 [ 223.155372][ T8071] Node 0 Normal free:4556400kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33188kB inactive_anon:8kB active_file:52kB inactive_file:106720kB unevictable:0kB writepending:352kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:14572kB local_pcp:10692kB free_cma:0kB [ 223.155482][ T8071] lowmem_reserve[]: 0 0 0 0 [ 223.155528][ T8071] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 223.155728][ T8071] Node 0 DMA32: 1*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943396kB [ 223.156026][ T8071] Node 0 Normal: 1024*4kB (M) 614*8kB (UME) 1232*16kB (UME) 848*32kB (UME) 441*64kB (UME) 225*128kB (UME) 94*256kB (UM) 28*512kB (UME) 14*1024kB (M) 12*2048kB (UME) 1066*4096kB (UM) = 4556528kB [ 223.156288][ T8071] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 223.156308][ T8071] 27932 total pagecache pages [ 223.156317][ T8071] 2 pages in swap cache [ 223.156324][ T8071] Free swap = 124988kB [ 223.156332][ T8071] Total swap = 124996kB [ 223.156340][ T8071] 2097051 pages RAM [ 223.156350][ T8071] 0 pages HighMem/MovableOnly [ 223.156357][ T8071] 81924 pages reserved [ 223.156368][ T8071] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 223.467803][ T8063] loop2: detected capacity change from 0 to 8192 [ 223.686446][ T8071] loop3: detected capacity change from 0 to 32768 [ 225.392754][ T8031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.523022][ T8107] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 225.573574][ T8113] loop1: detected capacity change from 0 to 512 [ 225.634302][ T8114] loop2: detected capacity change from 0 to 8192 [ 225.697299][ T116] Bluetooth: hci0: Frame reassembly failed (-84) [ 226.374036][ T8114] ================================================================== [ 226.374078][ T8114] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 226.374119][ T8114] [ 226.374124][ T8114] write to 0xffff888100533c44 of 4 bytes by task 8123 on cpu 1: [ 226.374142][ T8114] xas_set_mark+0x12b/0x140 [ 226.374173][ T8114] __folio_start_writeback+0x16b/0x370 [ 226.374206][ T8114] __block_write_full_folio+0x526/0x8d0 [ 226.374236][ T8114] block_write_full_folio+0x2c1/0x2e0 [ 226.374268][ T8114] __mpage_writepages+0x722/0x1370 [ 226.374300][ T8114] fat_writepages+0x26/0x30 [ 226.374335][ T8114] do_writepages+0x1b9/0x300 [ 226.374364][ T8114] file_write_and_wait_range+0x178/0x2f0 [ 226.374398][ T8114] simple_fsync_noflush+0x42/0x120 [ 226.374437][ T8114] fat_file_fsync+0x7e/0x100 [ 226.374468][ T8114] vfs_fsync_range+0xc5/0xe0 [ 226.374491][ T8114] generic_file_write_iter+0x1a3/0x1f0 [ 226.374520][ T8114] iter_file_splice_write+0x6a0/0xa60 [ 226.374557][ T8114] direct_splice_actor+0x158/0x280 [ 226.374589][ T8114] splice_direct_to_actor+0x2f9/0x680 [ 226.374630][ T8114] do_splice_direct+0x119/0x1a0 [ 226.374666][ T8114] do_sendfile+0x37d/0x640 [ 226.374682][ T8114] __x64_sys_sendfile64+0x105/0x150 [ 226.374715][ T8114] x64_sys_call+0x1015/0x2550 [ 226.374745][ T8114] do_syscall_64+0x112/0x360 [ 226.374775][ T8114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.374800][ T8114] [ 226.374807][ T8114] read to 0xffff888100533c44 of 4 bytes by task 8114 on cpu 0: [ 226.374827][ T8114] xas_find_marked+0x602/0x650 [ 226.374857][ T8114] filemap_get_folios_tag+0xf7/0x400 [ 226.374880][ T8114] writeback_iter+0x48f/0x7c0 [ 226.374909][ T8114] __mpage_writepages+0x8a/0x1370 [ 226.374942][ T8114] fat_writepages+0x26/0x30 [ 226.374970][ T8114] do_writepages+0x1b9/0x300 [ 226.374997][ T8114] file_write_and_wait_range+0x178/0x2f0 [ 226.375031][ T8114] simple_fsync_noflush+0x42/0x120 [ 226.375069][ T8114] fat_file_fsync+0x7e/0x100 [ 226.375098][ T8114] vfs_fsync_range+0xc5/0xe0 [ 226.375121][ T8114] generic_file_write_iter+0x1a3/0x1f0 [ 226.375150][ T8114] iter_file_splice_write+0x6a0/0xa60 [ 226.375186][ T8114] direct_splice_actor+0x158/0x280 [ 226.375217][ T8114] splice_direct_to_actor+0x2f9/0x680 [ 226.375254][ T8114] do_splice_direct+0x119/0x1a0 [ 226.375290][ T8114] do_sendfile+0x37d/0x640 [ 226.375309][ T8114] __x64_sys_sendfile64+0x105/0x150 [ 226.375344][ T8114] x64_sys_call+0x1015/0x2550 [ 226.375373][ T8114] do_syscall_64+0x112/0x360 [ 226.375402][ T8114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.375423][ T8114] [ 226.375427][ T8114] value changed: 0x05000021 -> 0x02000021 [ 226.375438][ T8114] [ 226.375442][ T8114] Reported by Kernel Concurrency Sanitizer on: [ 226.375454][ T8114] CPU: 0 UID: 0 PID: 8114 Comm: syz.2.1412 Not tainted syzkaller #0 PREEMPT(lazy) [ 226.375482][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.375496][ T8114] ================================================================== [ 227.730270][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 227.730277][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 228.591884][ T8117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512