last executing test programs: 11.607998329s ago: executing program 4 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000002000000732ac0ff00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffcc03000040000000b704000000000000850000004500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$video(&(0x7f0000000140), 0x2, 0x40) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x1, 0x0, 0x3432564e, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x0, 0x2}}) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x0, @void}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x60}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001300010029bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="86ee0100090400000c002b8008000100", @ANYRES32=r5, @ANYBLOB="d3bab44f3f1e9b38f1e63a246c"], 0x2c}}, 0x24008844) close(r5) fcntl$setstatus(r4, 0x4, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 11.517866359s ago: executing program 4 (id=317): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000020000000000000000000001801000020646c2500000000002020207a0af8ff000000002fa000000000000007010000f8ffffffb702000008000000b703000000000000850000000601030095"], &(0x7f00000006c0)='syzkaller\x00', 0xa, 0xfda6, &(0x7f0000000700)=""/149, 0x41000}, 0x94) 11.517612141s ago: executing program 4 (id=318): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x8910, 0xfffffffdfffffffb) 11.499097886s ago: executing program 4 (id=321): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000740), 0x6, 0x408040) ioctl$FE_READ_SIGNAL_STRENGTH(r0, 0x80026f47, &(0x7f0000000780)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4010, &(0x7f0000000200)={[{@nodelalloc}]}, 0x2, 0xbd8, &(0x7f0000001180)="$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") r1 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x400000000000, 0xa41) r2 = syz_io_uring_setup(0x5e4a, &(0x7f0000000040)={0x0, 0xd40e, 0x1, 0x2, 0x243}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2bed, &(0x7f0000000240)={0x0, 0x1c56, 0x1000, 0x2, 0x1fb, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x5d) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a2) capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000440)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$FITHAW(r1, 0xc0045878) syz_mount_image$fuse(0x0, &(0x7f0000001dc0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1000, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004040)={0x50, 0x0, r4, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000040c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006180)={0x20, 0x0, 0x68cc, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000061c0)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000006200)=[{&(0x7f0000006240)="c6", 0x1}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006280)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) close(r3) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000540)={@private1, 0x3, 0x1, 0xff, 0x4, 0x3, 0x7}, &(0x7f0000000580)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000001ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000001fc0)='./file1\x00', 0x2) 11.392187055s ago: executing program 4 (id=322): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/12], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000007000000bf0920000000000035090100000000009500000000000000b7020000000000007b9af8ff000000006509f8fffdffffff7babf0ff00000000ad99f8ff0000000007080000f8ffffffbfa400000000000007040000f0f1ffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf982000000000005608f1ff000000008500000019000000b70000000000000095"], &(0x7f0000000a00)='GPL\x00', 0x2, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.478515541s ago: executing program 4 (id=344): r0 = syz_open_dev$cec(&(0x7f0000001bc0), 0xffffffffffffffff, 0x4ae60) r1 = landlock_create_ruleset(&(0x7f0000000140)={0xe000, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x8040480) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0xffffffffffffffff, 0xff87) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0x101, 0xe, "009df100020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c010000000000400", "0000000000000400", "190038000000003c0300", "ffe9ff00"]}) 10.397559169s ago: executing program 32 (id=344): r0 = syz_open_dev$cec(&(0x7f0000001bc0), 0xffffffffffffffff, 0x4ae60) r1 = landlock_create_ruleset(&(0x7f0000000140)={0xe000, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x8040480) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0xffffffffffffffff, 0xff87) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0x101, 0xe, "009df100020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c010000000000400", "0000000000000400", "190038000000003c0300", "ffe9ff00"]}) 1.965183044s ago: executing program 5 (id=580): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000100)={0x1, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000180)={r2, 0xbb02}, 0x8) fadvise64(r1, 0x5, 0x202, 0x0) write(r1, &(0x7f00000001c0)="aeb84898d6814e868bc3762513d595f92083992769bc8a2548d5c4cc556527ffd1094177959f5f6d296fea6b9a18bf2eb53ff189c227ecd4805e50c4", 0x3c) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x8010, r1, 0x40800000000) mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x300000, &(0x7f00000002c0)={'trans=unix,', {[{@version_9p2000}, {@access_any}, {@cache_readahead}, {@cachetag={'cachetag', 0x3d, '*'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x66, 0x62, 0x38, 0x65, 0x30, 0x0, 0x33], 0x2d, [0x66, 0x33, 0x65, 0x30], 0x2d, [0x39, 0x34, 0x35, 0x39], 0x2d, [0x32, 0x36, 0x36, 0x61], 0x2d, [0xdbc0eac18a44df2c, 0x36, 0x31, 0x32, 0x30, 0x31, 0x33, 0x37]}}}, {@subj_type={'subj_type', 0x3d, '$'}}]}}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000340)={r0}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000380)=@generic={0x2, 0x81, 0x3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x1}, @can={0x1d, r3}, @isdn={0x22, 0x5, 0x5, 0x2, 0xf1}, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffff000, 0x2}) fcntl$getflags(r1, 0x401) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000004c0)=@add_del={0x2, &(0x7f0000000480)}) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000500)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf0, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4080}, 0x5000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x349}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf0}]}, 0x4c}}, 0x20040000) bind$unix(r1, &(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000900), 0x2100, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000940)=@generic={0x1, 0x0, 0x7a6}) syz_io_uring_setup(0x3510, &(0x7f0000000980)={0x0, 0x3545, 0x40, 0x3, 0x3d7, 0x0, r1}, &(0x7f0000000a00)=0x0, &(0x7f0000000a40), &(0x7f0000000a80)) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000ac0)={0x0, 0x2cb, 0x2, 0x3, 0x2d3, 0x0, r7}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb000, 0x4000, 0x3, 0x114}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8bb, 0x300f, 0x1, 0x188, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeec1, 0x42, 0x2, 0x30f}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5aeb, 0x0, 0x3, 0x1c3, 0x0, r1}, 0xffffffffffffffff, 0x0, 0x0}], 0x4, &(0x7f0000001dc0)={0x2e, 0x20, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xb93, 0x0, &(0x7f0000000dc0)=@buf_512="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"}}, &(0x7f0000001e40)) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000001e80)={0x0, 0x3218, 0x0, 0x0, 0x123, 0x0, r1}, &(0x7f0000001f00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd40b, 0x0, 0x0, 0x370, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x859c, 0x200, 0x0, 0x3c6, 0x0, r7}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d36, 0x20000, 0x1, 0x95, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e36, 0x400, 0x3, 0x2a9, 0x0, r7}}], 0x4, &(0x7f0000003180)={0x2e, 0x38, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x1, 0xd35, 0x0, &(0x7f0000002180)=@buf_4k="bd05760e5a35a05b67ec9dc1e3c2a574ea34f58a3f51bb8f31079bf052ae9ce48eedfd99fe8c6bf41fab5140233f1528a601f5139c46d9c12e28c87d3bcc6657b39fe76ab20c298ca5cd73266681264af5fbb7138a2acf40859be383c09e236ced92ae68e44a77e46ff0d2c2c88f918ecf3dd3428e3e48c737015fbcc52c961dd4a6bfa8bf5e8f5d285f1e2f2acfd2997c418a9f6a71da875780ccfb4b4c4e3831c419842d670e383258961404a6012b677263f587a03c7cfdfd1abf7d2d551d4734173079e50462fa1682ee15c61a270fc2c1b55a594fa11e06d80e1e7f027b1def90ddc9b35606c6a8523bea97096c5903f060be42d35cca22c6b541126f441d65f4b3aed4dda3e006030702dcad1678d4b19c27d2be0d9e4f004203a7c412aed4b13263a745e0cf1523bbc602893798083a94f0b1fe47d8087428fee7d7844e02874b9d5e0576bef58fd87ed96312f2fe8af222f510609be4ddef86fdee71944cd1e7c043ce1097c2db9d26b44d47600204fe83761ebb4c636b53ec92c4ad8f544cd0abca4083503e95d28e7d6023520c0874e0c16b3c496a44ac9506c3cc6adc9bf0e561a05c4d8797cf67eab6e9255940d00e3071f588cc1961b1f9dd849888ac98e47942806dbf94347a1affad0374c43275e3a81a97216b15fb2e27c7ea77e0d4ec4bd06efabd2762ccc9457e8251ddca8011573a7a3245817ee4f25ee96ea44b23b5b35e74ee2f408c77de711f5834ceb5b18228cee027255e53df71f63e25b4fdb7ea1df891e7adcbdf7ea9f04802b126f14292abefe475aa81a4ef22ff265062c5d29e1038670a2418caad099a9bf7246994b34482299d2f588a2117690de527c350774c38a6c0b12b72d8a58ad711397bd2ff1732b22d4cc399db345d9c038bee6a3e679ea38f9301bb6aae8567e916858b6fac18bbd19ff5d514c23976ba81094e1009bd91aa2ebb50b8c822ef261ab5a225f8310b586e8a56a47cd4c2241b8614e0e65b8ee1f04388adc16bca3ad62c417982cd7b5a611038d353c31c84910541d079b55096e4cec8a40874174b45c6d227eec7b872af1b0176429cd60b328f4a899311464927801059d04c642beb5f31b05b8eadad6de29526a63689aeb4ba147d3e50ce3dec797bee34b8f37f0e4d590824d09f052cce5a9b998126cc647df7093afd2acf0db3eefdf3125fe59236229dc0d6eda81d935de813fd4e4acb010d74b947892c7adc6e03f5c80534b7e6d1efc74d7aa967763e20ac56bd3ab87f5ba2153bee782fd6fa32e46ff28cb48a354246dbc6a2766a85096c35d005481cfc4a643bf139ab0307c7124d2c99af916ae9f4e6ac17a81c2de5059909b069e8c53ae7d3cf310dbbd2b7a680d2459a3a41614352af7a74b4f118010e3c760517b091b8189f0ad7c2348adf5c37fd46fc418b3bbe62e59ca79a3280a365fcace52220af8696205d660427d0836de43ba385d355ac72f8430404a8e17de448a52ee09e6ff0c327c76d8f999a6b69ff915cd4ab9eaa65c96c13406566148ce0cadebc53c64b336ccf714dddec764ba6debbb7723b807ea9b4ff11d76c985e829a4695978bef177a20fc057c4147cc03fb4e2adb54e16ce880594e64411b7d03eca103c980affa4689e61f2e69af08e42bfa110791fab199fad4c61d310bc055528728467baee6ebbb41188fa4082df56fdcd040cc8ed9209135241f311f33545c0009b7229aa75e431af5d270dcaa432b3ce8dd6c99001cf4a797061443845e330578a9ffe7e1427b2f1ea09d69f853fc91865caa73ea3fffadd6f6c45617b807950c4b48cd6991a1ec6062546fc97fb14f0b1b52badf05abb30a80fb92a7886b50846b2ee38e633ccbb2c614acb8bb75e6a8626ceb4a24380040e35cb7effa04d32d4e61ee40499834b748da7d5fd1a69d06aa1a7fbee288d1e8907ac3817e3529444b8481caa529c459e223d0c44ae1ccf6f026399c845db622abb3caf580be0fcb682c221e5961fb48821c359b8b5146aa279a20b42714e382b8af8f7b6c6223044c04bbc9be4ce8d1b93091f0538c7424e91d6857037e182a2b8cf252f8f77d508a8756ba53fd003919e83754ea3a2defd0049d440fd4823ba2292d1762c287defe185b1230f2efd97c7607cf39e86948bf84c68958ac01398bd66e6e406ff8dbea979bad95420775e844f0efc64a717e0132f5e511adcfd165fc5e1f33687789f2ee21ececc17d6ab101cdd742c2adb1c7bedd5e02172de4b4d45023bdd22577607b0bf522e66c8a204094b536f7465e680cc4d4dcf1326638ec3f790cb7c9bdb531b19f1b488df8b813e7a7bd21bafc9af7f77a0eaa2e6c3b5f07186978c16b66e0e96164f1ed4fbd161cc987dc92bb691291ec8a6ca161ae96a81666690d997173cd8c849862c16f2efb36592819953fcd83647dbe5ebf3d528f148b99210cafd834e377ff83946b7259f64e472159a46bf43e3aad4b647b34653a418c3ef7707ffee3cdf6f4b1a4513112435dd48e6ff8caf40c04b90d0b87365d22c011b0c36d6ab14499c490dd930363de1c4038a77871bc3fcb6626a60877454cc75328a09cda53282ba3a24242a6a24b6f5154f68cee3de19359847ff4862c0b483b56b0afa01fd93236cd811dcca41f4f598122d3664bf5cfbc634f77574cbccb0491a635765576c95195bba8b6bf2b5bc2e40f7010b74acf520ef34aba70130da6262a7e855ab6d95df581e718c38d4f2024d7512b0e9a6532d0ac750617cd5b09e11c5853db84be24ea3b2bf67abd0370b8b4f031af155581f23b32b0796c826d651ac197298e421741e30e16d9f657901132e975b9402e222e483568d9b45e128985c7894d9f35f5cd81b0d0f08b87376691903425f8b178ac6034cd9e74666120922bc18841f5d5733e9c7889e997e4facd2cc46e2f5dc3ef1dd0e5fc5a5b6dcac0fe33c5b93f04800edd5d627f7ab6232c3de0e928ab6645cb6f5a0965d24d506d519f1e30d06dd5fa87c4bf157590fbdb7638f8ccdb6bc2a3ef8c0d14182a4319be81fc8dfc44a5a840661e962d4a05c49c1a8703459bb7911ac7e928a3e4b5d3315cfd78c73a0310c122fd33c0be6de508dc8871e4be11c9d20ad595b3c780a0e3474df507f05311402a3c0f14b972eee12d2fcdb7255cd77ba5023287c125e9668f4cf8a24e390523da6e9b277f075c113ba5d4bdaf52a1eb277f51b8c3f7f21b4bdaab2d7edf4565fff0b547197c9c17b414ba4197a4642ac7365a9921a9d95f1db8be5a73e7db5c6b26c68efca1ed16903f46a0b413c5cdb103230ba394d3020f3c6db3f22f6276c633437cb41235b43d6d7205a480b573189eefbe7126a32a21aedf1c5c0b97fd829d673960bd483745ab22e9de785c31e4e67f2625546846287d92916c4955a7536a295451d2bc8a7ac1c8f322ebae2085b3e5ea55eba29ef043b2a6e7ddfa38bc13597af8da42c16e3e91d14bbaf896ee2d456e176f1c8528b6baa8b13f2e96762a25ef34e954072e3c1db16b3fca688de60813a560a86436a3f91f4de1058d3bd15ef46cd096fa1dda1c4bb04283c093ed7b414da985e26bf27f31b3303ab9aeb4cf72dd9a481d2ae53fddfe2a554b7dcd4bbf2936d5eff239d2de2bd3cf5aa58439cb51d6990a0e320e3f4dae198cd6d7a934f31662853f1f825ee19722dba6a75bb31dd57e48bb506b8fe23a65cb4f7b9156063ad9bf01dca368d325318564a426272403b6d7501a6058c9bd40649cf604c959f3e90ac087a0f85c1c15d5bace7d6321f3802db458da5681891a3ba3adc6961e11d1ef4f3401cd7331c80b83052d9b0d8128838718ee19ecb34d544221e5a7ca652ce1df9f0fffa74641bc5503a2d66af2e5557df591266a552ebaa38a424f324ea7d604bb386257137f31862313521969fcc3eb3ae994d6dffbcc77647442aa3f02f3f896a2564fc004a5bec6ae3aaf33b2626addd63d427c02458f436896f37d7d906b1fed2f310f6a80888ce105321717021fc0f1f83b024f745dd70bfaf03b3c295707d45c7852d1f4fa71fe283b50289e2a13dd31b18383495bf85f1eaa0ff1c922667de96f279f64bc05c2abd3a2518ed3bb1e3a0c374ff8bbbf3d47d0fd62d48f0e75d33fa419ab8b6384016a4709794a0727550c21e9c7d8ded921f8f4f5906a220bcd85e300e06fe62a7aa854c50e5dc239a64d28a5e1aa72c39fc2b0ac4a3167354b2583b1cff1aa5b4664139c718d0288ed78047726a2d52ac82bd2380ed30f86fe6fc0fc8125cdde9422efd92297ccaf5b4d063405e46b0d693dbb07ec079ee0d171d018b8e0d0df6c1dec0071318a68ed104757f2d30335c5a9ccb8db182585887d7113786fb4329d804785abcc89d1586efb77f76690a08666db7c4ea618df3ed940908a45bbcc77cb863559047352859ffc1265e175b34cd2c1329391aa459061eb3c31fe2a6a3cb9f32d1baf62447c13c5731d3108c5ebe1a89244c8a69a4a0ddc92f47cf48a8e1d690771069e4ec2825930ef8235977817cdcc4998cc6509ed2efc8f6e3491f6f6763db1e1d5b2ee08eaaf505c013d30b58213c7eb002b0ccb7ead0a85d099e7a37988fc6592c0fe0865e84ec5f573b5394d1d5cf92efbe4098dd932f520394bbbac00ed66ae66078889fb9f2feb63fca5f3df29569999228d1611b70a12071bea663f8f05f5b8cd84be245adac577aad149cee01040890f345203acf576da9fb88f2135d0aa4bf0ddab2cb702b20465eb281e896705eb286cee2cfe1b7ae3b9f0629e68888facb51ed50d07efbafe76b6cd792ef0a6c9a146a3a2d02c8faf627f85249d7068e8870c6330cb7566c05dba3683993a9c91758b7e45fba9120df803f9abb104b99ed64d5c50efcc88ef7bc95a935e78dbfbc714544d2a61805dd3c8406bf75c75fd168c70785887ce533b06e83f60185fbe2215a74f6b561eac10d20711e782093b38441b7669cac2186ae4054d170bda6500a2211073b14af7defc43c7686320830806f255b210ce413140b13c6a0f717bebeb886a6b8659660c516b023cec903fe74b32f7bb29cdb2cacc96b170f73a40dd51368e1604350cdcbd6ebb5ce3982d0114ab78a681203e0572f19df44557a8bbb0da2d5184e1462755c44ab6561661392ea0f3116929e32175f84fa50769601e86368deed8ce271b63b73eabb85894dae89d9576d46155592f37603cc3f6f065f920dca080a80341a53fe250220cf400700376ac8c499973d37f4751cae4f87817dde796ab98ffba02ffb497d2cb609ac327b92fa014cd3095fbd3fda2a1055f02c8a17682f20a0c2f3303eec25cdbd2e789c480731c0a8eb8654bd98d1d544914d710f35e545136d4eb7753b6599ce859d21193a849c20fabc98c5f34c92971370382c3e6a2c538a77d621d40c16083d69bd9c66cc38a1b8f6432ed3d179d0b66f93c7c8cc3b4554354931603b73849433984540c78ea4629dbcbb48adf7d378fedde6dc7bb6bf9b172de03a2ab5e3145ab795d3ce8deec1b34eda14ff038ee504058fe237145ce87b487549bbf36e5ddab9168b34f79f96532974eeb4168c82cec4a8becaf010de8506d30e70ee6ce1125d7df53840eee69c3c949560e3461ef9d0292266f028ad671e8cfe0779a164d25e5d751a90fb6887c2da43e9c6ca73d66f8e5bf4f774cb5b99844658a2912c3339417dc434fc542b3cc3e8b53d267512c846e9381140e88631750922cf3a1a665c7dc7b4dd01b90674aef2fb120b13ca7fd7214061c8a4f17c1e9d532dfb5e2af5b"}}, &(0x7f0000003200)) syz_io_uring_submit(r8, r10, r11, &(0x7f0000003280)=@IORING_OP_FILES_UPDATE={0x14, 0x12, 0x0, 0x0, 0x8, &(0x7f0000003240)=[r1, r1, r7, r7, r7, r7, r6, r7, r6], 0x9, 0x0, 0x1}) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff7000/0x4000)=nil) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000003300)={@mcast1, 0x4d, r4}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000003400)={'wlan0\x00', &(0x7f0000003340)=@ethtool_perm_addr={0x20, 0xae, "6bbb0a9078822617ef384096204ddb13bda678c5726dc627e5fcd2765545d2dccd4714a8a78416f65c3a56f023339fd314bfdf84f4052403ef4a8054436bc7d810b72df4e78ecfb5e1348ba40a7f8dfc72757b08d21a44ff1dbb8f4be4d9f6d79d87e136b2852214638bdb91e17e8325ddfc9c460dff24d69fd758d1cbfef0a57a4bf0a88cc26e79dad14bc164b937d0c05b90db0184d2e522f88d5011ad7be7557f611202b0165077f7ff7f1f87"}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000003440)={0x0, 0xc37a, 0x1, [0x8000, 0x8, 0x1, 0xf, 0x3], [0x0, 0x4, 0x8, 0x1, 0x2, 0x9, 0xb73, 0x4, 0x3f, 0x5, 0x6, 0x7, 0x7, 0x2, 0x10, 0x80, 0x0, 0xe82, 0x7, 0x7, 0xffffffffffff0001, 0x7, 0x2, 0x4, 0x6, 0x3, 0x401, 0x5, 0x1, 0x5, 0x40, 0xb3c, 0x6, 0xa46, 0xc1, 0x5, 0x5, 0x31c9800000, 0x3, 0x4, 0x6, 0xe, 0x3, 0x7, 0x1, 0x7fffffffffffffff, 0x7, 0x3ff, 0x2, 0x1d4, 0x8, 0xff, 0xc9e, 0x1, 0x5, 0x1, 0x6, 0x0, 0x9c5, 0xcf5, 0x2, 0x9, 0x2, 0xff, 0x3, 0x10000, 0x4, 0x6, 0x2, 0x4724, 0x7, 0x34, 0x2, 0xa1, 0x3, 0x5, 0x5, 0x200, 0x401, 0x73a7, 0x2, 0x1ff, 0x3, 0xff, 0x80, 0x1, 0x1e9f, 0x1, 0x0, 0xc2, 0x80, 0x1, 0x8, 0x1, 0x9, 0x1200000000, 0x2, 0x227, 0x8, 0x73, 0x2, 0x9a, 0x0, 0x6, 0xbe80, 0x40004000000000, 0xe, 0x5, 0x1, 0x8, 0x3, 0x10, 0x3, 0x400, 0x8, 0x917, 0x8bb7, 0xfff, 0x4, 0xdc22, 0x101]}) 1.921272841s ago: executing program 5 (id=582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x7}, 0x94) 1.920933508s ago: executing program 2 (id=583): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e29004218030018258000000000001f0280000c0012", 0x2e}], 0x1}, 0x0) 1.920672778s ago: executing program 2 (id=584): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mlock(&(0x7f00006f2000/0x3000)=nil, 0x3000) 1.920492817s ago: executing program 5 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1a, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}, @IFLA_BR_STP_STATE={0x8, 0x32, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x100000) 1.891191698s ago: executing program 5 (id=586): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f0000000140)="$eJzs3M9rHHUbAPBnpknTH+m7eeE9vLynFypWqN2kqdqTEPFcKPQPqGEzCSGTbMhuahMDbT14EAQVwR+96H/gRRG8lP4PiuBNwYOgNY0HwUNkNpvEbnfT1CadGj8fmOzz/c7uPM+THb7swM4G8I/1/+JPEjEYERcjotKeTyPicCs6EnF943l3V1dqa6srtSTW1y/dSYqXteY2j5W0H49H6yXx34i43R9x+vX78zaWlmfG8zxbaI+Hm7Pzw42l5TPTs+NT2VQ2Nzoycu7cC6PPPzeyZ72+9dqnP7/5xctffXR+9vcX7zw7kcRYq+/o6GMvbfxP+mOsY35uP5KVKCm7AAAAdqX4nH8oIvpan1IrcagVAQAAAAfJ+sA6AAAAcOAlUXYFAAAAwP7a/B7A3dWV2ub2OL9/8NNLETG0fW/x2lb+vtY9xBFHoj8ijq0l99yZkGy8DB7J9RsRcWusy/mftM+/hzSwHXbeue4e6SfPrWL9Geu2/qVb6090WX/6Nn874RFtrn9r961/2/kP9Vj/Lu4mwfWIgYVTX/fMfyPif33d8idb+ZMe+V/ZZY+fDX77Xa99659EnIru+f+ca4ffhxienM6z9t+uOU5+fu30Tv0f65U/2bn/+V32//3N0alea0mR/5mTO7//3fIX58Tb7TrSiHin/ViM3+3I8fTtkQ936n+iR/8Pev8/7nXQa/cOv3xj+YdeTwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu0ogYjCStbsVpWq1GHI+I/8SxNK83mqcn64tzE8W+iKHoTyen82wkIiob46QYn23F2+PRjvG5iPh3RLxXOdoaV2v1fKLs5gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhyPCIGI0mrEZFGxK+VNK1Wy64KAAAA2HNDZRcAAAAA7DvX/wAAAHDwPcz1/419rAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40C5euFBs62urK7ViPHFlaXGmfuXMRNaYqc4u1qq1+sJ8dapen8qzaq0++6Dj5fX6/PmYW7w63MwazeHG0vLl2friXPPy9Oz4VHY5638sXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCwBltbklYjIm3FaVqtRpyIiKHoTyan82wkIv4VEd9U+geK8dmyiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDPNZaWZ8bzPFu4NzjR3t1l1wEJjrY7fFLqEQieqKDERQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNI0lpZnxvM8W2iUXQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlSn9MIqLYTlWeGuzcezj5rdJ6jIhXb156/+p4s7lwtpj/ZWu++UF7frSM+gEAAIBOm9fp7ev4tOx6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv4/G0vLMeJ5nC/sYlN0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw1/wRAAD//4hJxgU=") mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./mnt\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x4000000000602, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000940)=0x1, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000980)=""/30, 0x0) r2 = landlock_create_ruleset(&(0x7f00000009c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x1fe000) r4 = openat(0xffffffffffffff9c, &(0x7f0000004700)='./file2\x00', 0x10d40, 0x0) io_setup(0x7, &(0x7f0000004740)=0x0) io_submit(r5, 0x2000022a, &(0x7f0000004780)=[&(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000004800)='`', 0x8200, 0x600}]) 1.883689825s ago: executing program 2 (id=587): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = io_uring_setup(0x66a5, &(0x7f0000000340)={0x0, 0xbfb7, 0x800, 0xfffffffc, 0x87}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000400)=[{0x0}], &(0x7f0000000440)=[0x7]}, 0x20) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async) syz_emit_ethernet(0x8e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60000000005806fffe800000000000000000000000000000000000aa4e224e22000000000000000000000000bb73bb3a9b4e0e5f7a151d7336d934c039bebb45ca70df6988744ff4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6008100090780000080a000000e100000006051200000008000000020000000800000001080a0000000800010001080afffffa760000f3b7fe0df989459bba3648866803fefe04f989000000"], 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x365343, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04081020"], 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x62, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000300)=0x10) (async) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x57, 0x3}) 1.78625172s ago: executing program 5 (id=589): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) userfaultfd(0x801) r0 = socket$inet6(0xa, 0x2, 0xfffffffc) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f00000000c0)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x80) mknodat$md(0xffffffffffffff9c, &(0x7f0000000800)='./md0\x00', 0x6180, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000840)=0x1) r4 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000880)='./md0\x00', 0x2, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f00000008c0)={0x3, 0x0, 0x98, &(0x7f0000000900)={0x3, 0x2, 0x3}}) ioctl$SET_ARRAY_INFO(r4, 0x40480923, &(0x7f00000009c0)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6000}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ADD_NEW_DISK(r4, 0x40140921, &(0x7f0000000a40)={0x0, {0x1, 0x0}, 0x0, 0x40408}) ioctl$ADD_NEW_DISK(r4, 0x40140921, &(0x7f0000000a80)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r4, 0x400c0930, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) ioctl$STOP_ARRAY_RO(r4, 0x933, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000003c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0x400042c8, 0x10, 0x1, 0x251}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x80, 0x3, 0x8}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000700)={0xc0000000, 0x240, "136d0259f779f8a6f31fc72b4ae6a58a477c823a326d9b2d7e01cc39191fbbb3", 0x1, 0x3, 0x800, 0x66a, 0x3, 0x7, 0x54, 0x1, [0x7, 0x5, 0x400, 0x2]}) 1.545536354s ago: executing program 3 (id=596): syz_read_part_table(0x40a2, &(0x7f0000000000)="$eJzsz7tNA0EYBODx+Z7C1rkMQkJHdOFuEKIWQge0g0QHRBCSINCesQ8K4CV9XzD773i9pw2/qj4OfRZZzv3wsS6+Hi8nntZlajL0n8r5qqZEN41VkrexrKskF7dVssl4/ORZstt/z6sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/pimxKNGWeLnKodikO3RjkpvS1SXO75L7ZPoxyev1ZbartGX/sD1dVawzJKnaueuT5+l/j1km1W7/w08FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6hesrutH9nf45NEAiCMIz+d3LiIoa2Y2QBtmAnC9uJkS0arbAsigWYvZd8wTAMs8zeZp/JlrIm2SW9nZL0YUlq8jikXT7L1+PI9nNhna25n5P9d/Aq/3kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3O3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgpQAAAP//wMEbTw==") syz_genetlink_get_family_id$ethtool(&(0x7f0000004100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004140)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000004180)) prlimit64(0x0, 0xe, &(0x7f0000004b00)={0x8, 0x8b}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000004bc0)={0xa, 0x4e21, 0x4, @loopback, 0xc0}, 0x1c, 0x0}}, {{&(0x7f0000004c00)={0xa, 0x4e22, 0x7, @mcast1, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000004f00)=ANY=[], 0x478}}], 0x2, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000004f40)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000004f80)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000004fc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000005040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000052c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005300), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005340)='./file1\x00', 0x1c0) syz_mount_image$vfat(&(0x7f00000040c0), &(0x7f00000053c0)='./file1\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f0000005400)) syz_mount_image$fuse(0x0, &(0x7f0000005440)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000005480)='./file0\x00', &(0x7f00000054c0), 0x0, &(0x7f0000005500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000005540)='./file0/file1\x00', &(0x7f0000005580)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) r4 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000004a80)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000004ac0)={'#! ', './cgroup.cpu/memory.force_empty/file0', [{0x20, 'batadv_slave_1\x00'}]}, 0x39) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000041c0)={'vxcan0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000004200), &(0x7f0000004240)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004dc0)={0xe, 0x4, &(0x7f0000004e80)=ANY=[@ANYBLOB="18000000ecffffff400000000000000071109b0000000000950008005e31ef84"], &(0x7f0000004ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xfde755a8675d35fa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004280)={0x0, @rand_addr, @broadcast}, &(0x7f00000042c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000045c0)={r5, 0xe0, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000004300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000004340)=[0x0, 0x0, 0x0], &(0x7f0000004380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f00000043c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000004400), &(0x7f0000004440), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000004480)}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 1.407546814s ago: executing program 0 (id=601): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) 1.380771674s ago: executing program 0 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000010200000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb7030000080000547d03000000000000850000003300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.303683077s ago: executing program 2 (id=604): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x13, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x64}, [@generic={0x66, 0x8, 0x0, 0xfffd}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000540)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000580)=""/229, 0x41000, 0x8}, 0x94) 1.302788383s ago: executing program 2 (id=605): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f00000001c0)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fchown(0xffffffffffffffff, 0x0, 0xee01) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000050000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) unlinkat(0xffffffffffffff9c, 0x0, 0x200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000006c0)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000780)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000007c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) shutdown(r5, 0x1) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000840)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r4, &(0x7f0000000340)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000640)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.296681058s ago: executing program 1 (id=606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000240a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000a8000000060a01040000000000000000020000000900010073797a3000581d000900020073797a30000000007c0004802c0001800e000100696d6d6564696174650080001800028008000140000000010c00028008000100616263644c0001800c0001007061796c6f6164003c0002800800054000000001080002400000000208000340000000000800044000000002080006400000000208000740000000080800084000000001"], 0x130}}, 0x0) 1.267352606s ago: executing program 0 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x88}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000640)=0x5, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000680)={'bridge0\x00', &(0x7f00000006c0)=@ethtool_drvinfo={0x3, "92cce1cc6df035b1ad27714704091c49fc88d078501aee12707f4b471aad9703", "447d18c23e580881aa79f394b39fab6ef6fbe8899ad18f95cc797c7c46c7f7b2", "6272a5225df692c2436b569df8bd95709851136e84dd8915a79a00", "0251247ed15a16992c8a58cf5c4345c3583becc64af800", "5918e1ff8f60428fc34ab1b80ee703fcc15ad378ee09ccc8e1fd90dedc962584", "28e9f0d73f0c874a0016979e", 0x3, 0x7, 0xffff, 0x9a, 0xb}}) sendmsg$inet6(r4, &(0x7f00000007c0)={&(0x7f0000000800)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x18, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000029000000040000005e000000180000000000000029000000370000003a00"/48], 0x30}, 0xc4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd7000e703000004000000040012200c000980", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 656.107967ms ago: executing program 3 (id=608): syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x14, r1, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r0) (rerun: 32) 595.620796ms ago: executing program 1 (id=609): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x224, 0x52030}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x48}}, 0x8000) (fail_nth: 71) 594.82023ms ago: executing program 5 (id=610): r0 = syz_mount_image$ext4(&(0x7f00000027c0)='ext4\x00', &(0x7f0000000340)='./mnt\x00', 0x0, &(0x7f00000009c0), 0x1, 0x27a6, &(0x7f000000f6c0)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000880)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000008c0)=0x400000001, 0x4) connect$inet6(r1, &(0x7f0000000900)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x50) syz_open_dev$usbfs(&(0x7f0000000940), 0x11, 0x80001) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000980)={0x1, &(0x7f0000000a00)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x2763, &(0x7f0000002800)="$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") truncate(&(0x7f0000004f80)='./file2\x00', 0x6002) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000800}, 0x4004080) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="080200006c96f24bf167bd865a6593ce6bb4bd7eed292c28e3e725cd40d72f15d932ad648153f29b3c63a2d45c3e101f7c1cb37d24fbd6a91a15b8", @ANYRES16=r3, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x4000014}, 0xc000) renameat2(0xffffffffffffff9c, &(0x7f00000012c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./file0/file0\x00', 0x2) 573.991641ms ago: executing program 3 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (fail_nth: 2) 525.041806ms ago: executing program 1 (id=612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000070000007a0af0ff0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b80)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 451.565189ms ago: executing program 3 (id=613): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000001030004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 450.751092ms ago: executing program 3 (id=614): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000000100)={[{@auto_da_alloc_val}, {@init_itable}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x7) 448.714359ms ago: executing program 1 (id=615): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x2a0471a, &(0x7f0000000900)={[{@bh}]}, 0x82, 0x4ad, &(0x7f0000000b40)="$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") setxattr$security_ima(&(0x7f0000001080)='./file1\x00', &(0x7f00000010c0), &(0x7f0000001100)=ANY=[], 0x700, 0x80ffffffff) 385.213999ms ago: executing program 0 (id=616): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000fc7fbf160000000000007961a80000000000150102000000000085000000b2000000b70000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 373.646403ms ago: executing program 1 (id=617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x24040011}, 0x200480c0) 367.277979ms ago: executing program 3 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r2, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) 311.523876ms ago: executing program 0 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r3, 0x301}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004940)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004a00)={&(0x7f0000004a40)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x738b3a525a77fb8e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) 311.152534ms ago: executing program 2 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000080)=0x28) 297.472083ms ago: executing program 1 (id=621): add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="000000000000000463656c6c00000002000000440000000600000000000000000200fe0000000000020000000000000000000000000000000000000000000000000000000000000000000004000000000000400000000000000000140000000200"/112, 0x70, 0xffffffffffffffff) 0s ago: executing program 0 (id=622): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x34b8, &(0x7f00000000c0)={0x0, 0x69ed, 0xc00, 0x1, 0x11}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00005a4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000020000000000000099aa000018180000", @ANYRES32, @ANYBLOB="00000000000000009500050000000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000800)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000030c0)=ANY=[], 0x8) bind$inet6(r5, &(0x7f0000003100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000003140)=0x1, 0x4) recvmmsg(r5, &(0x7f0000003180), 0x400000000000284, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000031c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@in6={0xa, 0x4e20, 0x4, @loopback, 0x5}}) io_uring_enter(r1, 0x5, 0x1, 0x1, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth/file0\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x81, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r6) r7 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'dummy0\x00', 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000440)='270', 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000380)='./sys\x00', 0x92, &(0x7f0000000480)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x4c3}}, {@data_journal}, {@i_version}]}, 0x1, 0x27a6, &(0x7f00000008c0)="$eJzs3WuMXGX9B/DfmZm2S3fKf1vgrxKKSwhQY7rbC5Triy0xIiJFxYIKBBd2QcpCyW41bI1QTAmiCRhJwy1NrCHcYnhhwMTYKr7yBjFCSMQQMaZqIHZrshhTMVnzzGWZsrvd2m3Pgc7nk0z3Oc+ZM8/vzLNzvjPndDMBtK8sIroiXoiIrZ0RYy3d6RaV+q2v0X/ZA+MbIiYmLt+b1dbXl9/ZJulM/5QiqksiXtpdjvK8qcOOjG6+uX9oaHD4CO9eR0v7jd7t65Ysv3B4y8vPnbz+kd0bsqwvqo11aT8Wjpdqu9u0uxxxUsvP4yuzjdb9rqXuyedkP1nEg4e4P+815cavyKWV+vyn5ewAz9MJg/fvarbT/as51clUv9m+7ZxSyxxG9ES50Xp74JRXeuLBfTNtu+3ZncvTz1IlolyJqFQiniqno0T9xX7JcDpmrH18pu07xpuNiKwjotQRMVbbfsHkffpifOls+5BVI0rViHI1Yk/L+E9cmbZ/9NWZtlt68WyPDABHrwkAoA2VvQ8AgDbTPA9w2QPjG5q3vM49PLk+r5GYyZ619WswU+e/0rgSVL+CunA82+/aaBYRx89x7Ns/FtEdS0db+/L8/SNiy10R8cHp5j+rXZvtmmH+06eGFbNeDz+ws3em+X/20tY+85+vucz/6jnO//C5af7v/U5rn/lvHyd+pugKKNJvv1l0BRTp5T1FV0At/6N72vyPrmh5/z/X/xs51Y6ONPLfvtTaJ//bx7o1RVdAkR7dW3QFPL82Is6Z7vNfqXZcn+n8z4KIOGGOYy//fTr+732itW/q8b/05hyH4QDq+Z9Nm/9baj+nn//uiFgzx8//v3wzPc6xZ7b2yf987bkrYmDa8/+Tf7lSexc4+fc6h9CYaewf/zTN/zNPt/ZN9/qvLDizVsyyRs9A/6b+w/kcHI0OdoL2rI24YNr5LzUfqqu59H+1hXnZDTcNDa5orFgW8xak5ZWHUONXP5vm/2s/bO2bfv6v3u/PqMz/4ZNe/ydWpn/9z3b954o5Hv/vOCvN/9g3Wvvkf74mdkScceDjf03vpltu6x0Z3bz8plv6bxy8cfDW1WevWXH2qlVnrTy3t3Y86G0eFQ7eH95K83/qfa198j9f6fW/8H/K/8M39k/G0vzfsqu172CP//Ozz9X65jf6bu/ftGl4ZcT87FNT+1cdvprf75rPR/P5SvO/7NTZ8/9IWPzpNP+L17X2yX8AAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P2qFBHVyEo9k+1SqacnorP2/e4LS0MbRzZ99IaNX7l1IGJRre+Y2ve/9Fy/cWggIo6tfydMqfntD4tbviNmZUQsaVle1VjeuqC+vLronQeANlON+OObvT/b1zlD/ievLSi6SgDgcEr5/6dTjnsstd+S8wDQFlL+X3v79m0h/wGgbch/AGg/8h8A2o/8B4D2I/8BoP008//58899KCIq9d6OZjNr3A7Gwd4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjURYRXREvRMTWzoixlu50i0r91tfov+yB8Q0RExOX762vry+/s03Smf4pZVFdEvHS7nKU500ddmR08839Q0ODw0d49zpa2m/0bl+3ZPmFw1tefu7k9Y/s3pBlfVFtrEv7sXC8VNvdpt3liJNafh5fmW207nctdU8+J/vJIjYf4v6815QbvyKXVurzn5azAzxPJwzev6vZTvev5lQnU5128a77i64BKE6p5Rge0RPlRuvtgVNe6YkH98203bZndy6vbV+JKFciKpWIp8rpXUI97C8ZTu8Z1j4+0/Yd481GRNYRUeqIGKttv2DyPn0xvnS2+rNqRKkaUa5G7GkZ/4kr0/aPvjrTdksvnu2RAeDoNTHpzoLHBwDyUkjoAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBRZ/+PlXs4jYct4xtVsyv7FuXqGVAUdaqegCgMKUiy4AKEyl6AKAwviMD2SzrO+YacUnDn8tQD7O+JDz/9CunP+H9uX8P7Qv5/+hffmMDzj/DwAAR6/Kr7s6f3DPoheKrgMAyE/K/2Vj15xfdB0AQH5S/u84btWVRdcBAOQn5f9pm6/7XtF1AAD5Sfn/+R/dsbPoOgCA/KT8f+31nkuKrgMAyE/K/+/3XLS16DoAgPyk/D/9og+MFF0HAJCflP9XfbtzY9F1AAD5Sfn/+p+veqjoOgCA/KT8//fA6HlF1wEA5Cfl/x2LPvJi0XUAAPlJ+V/++Vm/K7oOACA/Kf/veXLw9KLrAADyk/J/3xeqbxRdBwCQn5T/X19x9clF1wEA5Cflf/ynr1R0HQBAflL+b93W9c+i6wAA8pPyf9GX73y46DoAgPyk/L8367216DoAgPyk/H/rxdXDRdcBAOQn5f9tj11/d9F1AAD5Sfl/7PqFnyy6DgAgPyn/v3XBF3cVXQcAkJ+U///6x8d3FF0HAJCflP8jD///FUXXAQDkJ+X/XzofHi26DgAgPyn/+6/71X1F1wEA5Cfl/0nPvPLdousAAPKT8v+hX9w9WHQdAEB+Uv7/dc3fny66DgAgPyn/r7t25zUjo5tv7h8aGhzW0NDQmGwUfYQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/steHas0D0UBAD5p+vOL7aBFJ0X6AuIrFHd1EB/AoUvtVCc7Obg7uAk+hqNv4KSrYxcXHTo4RmJarRYUBBuR74Ob3HNvwrnnJnABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT0giYiHiOiJOahEPE8N5i2rRWqPxnbNhJyLLdh+L+SJ+eydXyy+VNOqNiJtBGum/6bSHR/2D/W633fvh8uYm+vcbF9uN9c3e8e3l2t75oJMkraiP5vI65oeVl3LHBmnE6sR9qfpVtuaHqPm6J+8kEf1v1vPbpKNfZKtafP88Tj7Zp+X26dW4nz9fn9E6mbZy97RY9hqA8mTZ/5LzAwCzVurhDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDMDhwIAAAAAAjyt15hgAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAoAAP//MlDRJw==") openat(0xffffffffffffff9c, &(0x7f0000003080)='./file1\x00', 0x143241, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$binderfs_log(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 00000000000000ÿÿÿÿÿÿÿÿ' [ 29.349397][ T5311] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 29.373769][ T5311] evm: overlay not supported [ 29.462531][ T5331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.486169][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.538397][ T5343] FAULT_INJECTION: forcing a failure. [ 29.538397][ T5343] name failslab, interval 1, probability 0, space 0, times 0 [ 29.538415][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.3.115 Not tainted syzkaller #0 PREEMPT [ 29.538424][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 29.538429][ T5343] Call trace: [ 29.538432][ T5343] show_stack+0x2c/0x3c (C) [ 29.538445][ T5343] __dump_stack+0x30/0x40 [ 29.538453][ T5343] dump_stack_lvl+0xd8/0x12c [ 29.538460][ T5343] dump_stack+0x1c/0x28 [ 29.538467][ T5343] should_fail_ex+0x3fc/0x570 [ 29.538479][ T5343] should_failslab+0xc4/0x120 [ 29.538486][ T5343] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 29.538495][ T5343] krealloc_node_align_noprof+0x1b4/0x3d0 [ 29.538503][ T5343] kvrealloc_node_align_noprof+0x8c/0x100 [ 29.538511][ T5343] add_expr+0x2a8/0x5d0 [ 29.538519][ T5343] bpf_init_scev+0x190/0x3c0 [ 29.538528][ T5343] bpf_check+0x24e8/0x2948 [ 29.538536][ T5343] bpf_prog_load+0xf6c/0x15a4 [ 29.538545][ T5343] __sys_bpf+0x7e8/0x840 [ 29.538553][ T5343] __arm64_sys_bpf+0xd0/0xec [ 29.538561][ T5343] invoke_syscall+0x98/0x244 [ 29.538569][ T5343] el0_svc_common+0xec/0x23c [ 29.538576][ T5343] do_el0_svc+0x4c/0x5c [ 29.538582][ T5343] el0_svc+0x60/0x1d8 [ 29.538591][ T5343] el0t_64_sync_handler+0x44/0x104 [ 29.538599][ T5343] el0t_64_sync+0x198/0x19c [ 29.756112][ T5374] debugfs: Bad value for 'mode' [ 29.788733][ T5378] FAULT_INJECTION: forcing a failure. [ 29.788733][ T5378] name failslab, interval 1, probability 0, space 0, times 0 [ 29.788753][ T5378] CPU: 0 UID: 0 PID: 5378 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT [ 29.788766][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 29.788771][ T5378] Call trace: [ 29.788775][ T5378] show_stack+0x2c/0x3c (C) [ 29.788789][ T5378] __dump_stack+0x30/0x40 [ 29.788798][ T5378] dump_stack_lvl+0xd8/0x12c [ 29.788805][ T5378] dump_stack+0x1c/0x28 [ 29.788812][ T5378] should_fail_ex+0x3fc/0x570 [ 29.788826][ T5378] should_failslab+0xc4/0x120 [ 29.788834][ T5378] kmem_cache_alloc_noprof+0x94/0x5d4 [ 29.788843][ T5378] security_inode_alloc+0x40/0x304 [ 29.788852][ T5378] inode_init_always_gfp+0x704/0xb20 [ 29.788863][ T5378] alloc_inode+0x9c/0x198 [ 29.788872][ T5378] new_inode+0x20/0x50 [ 29.788882][ T5378] rpc_get_inode+0x28/0x124 [ 29.788893][ T5378] rpc_new_dir+0x94/0x250 [ 29.788902][ T5378] rpc_populate+0xb0/0x1b8 [ 29.788911][ T5378] rpc_fill_super+0x168/0x344 [ 29.788920][ T5378] get_tree_super+0xb8/0x148 [ 29.788930][ T5378] get_tree_keyed+0x5c/0x70 [ 29.788939][ T5378] rpc_fs_get_tree+0x160/0x228 [ 29.788948][ T5378] vfs_get_tree+0x90/0x28c [ 29.788957][ T5378] fc_mount+0x24/0xac [ 29.788967][ T5378] do_new_mount+0x2a4/0x538 [ 29.788977][ T5378] path_mount+0x5f0/0xa88 [ 29.788987][ T5378] do_mount+0xe8/0x148 [ 29.788996][ T5378] __arm64_sys_mount+0x33c/0x388 [ 29.789006][ T5378] invoke_syscall+0x98/0x244 [ 29.789014][ T5378] el0_svc_common+0xec/0x23c [ 29.789021][ T5378] do_el0_svc+0x4c/0x5c [ 29.789028][ T5378] el0_svc+0x60/0x1d8 [ 29.789037][ T5378] el0t_64_sync_handler+0x44/0x104 [ 29.789045][ T5378] el0t_64_sync+0x198/0x19c [ 29.789156][ T5378] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 29.882280][ T5391] __nla_validate_parse: 12 callbacks suppressed [ 29.882295][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 29.882313][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 29.983149][ T5406] debugfs: Bad value for 'mode' [ 30.045487][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 30.063939][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 30.064730][ T5417] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 30.126940][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.153454][ T4831] hid-generic 0000:0000:8000.0001: unknown main item tag 0x0 [ 30.153470][ T4831] hid-generic 0000:0000:8000.0001: unknown main item tag 0x0 [ 30.153479][ T4831] hid-generic 0000:0000:8000.0001: unknown main item tag 0x0 [ 30.153487][ T4831] hid-generic 0000:0000:8000.0001: unknown main item tag 0x0 [ 30.153495][ T4831] hid-generic 0000:0000:8000.0001: unknown main item tag 0x0 [ 30.153503][ T4831] hid-generic 0000:0000:8000.0001: unknown main item tag 0x0 [ 30.153511][ T4831] hid-generic 0000:0000:8000.0001: unknown main item tag 0x0 [ 30.153519][ T4831] hid-generic 0000:0000:8000.0001: unknown main item tag 0x0 [ 30.153527][ T4831] hid-generic 0000:0000:8000.0001: unknown main item tag 0x0 [ 30.153535][ T4831] hid-generic 0000:0000:8000.0001: unknown main item tag 0x0 [ 30.158675][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 30.158698][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 30.164218][ T4831] hid-generic 0000:0000:8000.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 30.185566][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.194660][ T5438] Illegal XDP return value 4294967274 on prog (id 5) dev N/A, expect packet loss! [ 30.267535][ T5450] debugfs: Bad value for 'mode' [ 30.290874][ T5455] set_capacity_and_notify: 3 callbacks suppressed [ 30.290885][ T5455] loop3: detected capacity change from 0 to 33280 [ 30.291308][ T5455] ext3: Unknown parameter 'dont_hash' [ 30.319120][ T5462] fuse: Bad value for 'group_id' [ 30.319131][ T5462] fuse: Bad value for 'group_id' [ 30.329011][ T5455] input: syz1 as /devices/virtual/input/input4 [ 30.373316][ T5465] FAULT_INJECTION: forcing a failure. [ 30.373316][ T5465] name failslab, interval 1, probability 0, space 0, times 0 [ 30.373333][ T5465] CPU: 0 UID: 0 PID: 5465 Comm: syz.2.151 Not tainted syzkaller #0 PREEMPT [ 30.373343][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 30.373348][ T5465] Call trace: [ 30.373351][ T5465] show_stack+0x2c/0x3c (C) [ 30.373365][ T5465] __dump_stack+0x30/0x40 [ 30.373373][ T5465] dump_stack_lvl+0xd8/0x12c [ 30.373380][ T5465] dump_stack+0x1c/0x28 [ 30.373387][ T5465] should_fail_ex+0x3fc/0x570 [ 30.373399][ T5465] should_failslab+0xc4/0x120 [ 30.373407][ T5465] __kmalloc_cache_noprof+0x94/0x5fc [ 30.373415][ T5465] alloc_vfsmnt+0x84/0x48c [ 30.373425][ T5465] clone_mnt+0x5c/0x6c0 [ 30.373434][ T5465] clone_private_mount+0x1dc/0x298 [ 30.373444][ T5465] ovl_fill_super+0xe78/0x3398 [ 30.373452][ T5465] get_tree_super+0xb8/0x148 [ 30.373462][ T5465] get_tree_nodev+0x2c/0x3c [ 30.373471][ T5465] ovl_get_tree+0x28/0x38 [ 30.373479][ T5465] vfs_get_tree+0x90/0x28c [ 30.373487][ T5465] fc_mount+0x24/0xac [ 30.373496][ T5465] do_new_mount+0x2a4/0x538 [ 30.373506][ T5465] path_mount+0x5f0/0xa88 [ 30.373515][ T5465] do_mount+0xe8/0x148 [ 30.373524][ T5465] __arm64_sys_mount+0x33c/0x388 [ 30.373534][ T5465] invoke_syscall+0x98/0x244 [ 30.373542][ T5465] el0_svc_common+0xec/0x23c [ 30.373549][ T5465] do_el0_svc+0x4c/0x5c [ 30.373556][ T5465] el0_svc+0x60/0x1d8 [ 30.373565][ T5465] el0t_64_sync_handler+0x44/0x104 [ 30.373573][ T5465] el0t_64_sync+0x198/0x19c [ 30.373600][ T5465] overlayfs: failed to clone upperpath [ 30.457348][ T5478] loop2: detected capacity change from 0 to 34816 [ 30.459983][ T5478] EXT4-fs: Ignoring removed i_version option [ 30.484484][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 30.484510][ T5482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 30.489465][ T5478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.498274][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 30.498305][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 30.498321][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 30.498336][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 30.504955][ T5484] loop3: detected capacity change from 0 to 34816 [ 30.505328][ T5484] EXT4-fs: Ignoring removed i_version option [ 30.550978][ T5484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.581719][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.583251][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.583405][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.585030][ T5484] bridge0: entered allmulticast mode [ 30.603476][ T5484] bridge_slave_1: left allmulticast mode [ 30.603495][ T5484] bridge_slave_1: left promiscuous mode [ 30.603575][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.607841][ T5484] bridge_slave_0: left allmulticast mode [ 30.607857][ T5484] bridge_slave_0: left promiscuous mode [ 30.608066][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.632048][ T5505] debugfs: Bad value for 'mode' [ 30.704458][ T5519] ip_tables: iptables: counters copy to user failed while replacing table [ 30.726607][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.736037][ T5519] loop1: detected capacity change from 0 to 8192 [ 30.745775][ T5525] loop4: detected capacity change from 0 to 33280 [ 30.746104][ T5525] ext4: Unknown parameter 'mask' [ 30.753783][ T5525] loop4: detected capacity change from 0 to 33280 [ 30.753972][ T5525] ext4: Unknown parameter 'mask' [ 30.762152][ T5525] loop4: detected capacity change from 0 to 33280 [ 30.763536][ T5525] ext4: Unknown parameter 'mask' [ 30.770515][ T5525] loop4: detected capacity change from 0 to 33280 [ 30.770739][ T5525] ext4: Unknown parameter 'mask' [ 30.779756][ T5525] loop4: detected capacity change from 0 to 33280 [ 30.779949][ T5525] ext4: Unknown parameter 'mask' [ 30.785469][ T5525] loop4: detected capacity change from 0 to 33280 [ 30.785668][ T5525] ext4: Unknown parameter 'mask' [ 30.792147][ T5525] ext4: Unknown parameter 'mask' [ 30.796474][ T5525] ext4: Unknown parameter 'mask' [ 30.801213][ T5525] ext4: Unknown parameter 'mask' [ 30.812134][ T5525] ext4: Unknown parameter 'mask' [ 30.816461][ T5525] ext4: Unknown parameter 'mask' [ 30.820684][ T5525] ext4: Unknown parameter 'mask' [ 30.824726][ T5525] ext4: Unknown parameter 'mask' [ 30.828702][ T5525] ext4: Unknown parameter 'mask' [ 30.834158][ T5525] ext4: Unknown parameter 'mask' [ 30.838183][ T5525] ext4: Unknown parameter 'mask' [ 30.842209][ T5525] ext4: Unknown parameter 'mask' [ 30.846100][ T5525] ext4: Unknown parameter 'mask' [ 30.852415][ T5525] ext4: Unknown parameter 'mask' [ 30.967281][ T4719] Bluetooth: hci1: command tx timeout [ 30.967306][ T4719] Bluetooth: hci3: command tx timeout [ 30.967321][ T4719] Bluetooth: hci2: command tx timeout [ 30.967336][ T4719] Bluetooth: hci0: command tx timeout [ 30.986448][ T5525] ext4: Unknown parameter 'mask' [ 30.994227][ T5525] ext4: Unknown parameter 'mask' [ 31.000286][ T5525] ext4: Unknown parameter 'mask' [ 31.004988][ T5525] ext4: Unknown parameter 'mask' [ 31.048485][ T4729] Bluetooth: hci4: command tx timeout [ 31.055568][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 31.055590][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 31.059172][ T5556] EXT4-fs: Ignoring removed i_version option [ 31.074937][ T5556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.083425][ T5562] debugfs: Bad value for 'mode' [ 31.119137][ T5565] ext4: Unknown parameter 'euid' [ 31.143944][ T5569] EXT4-fs: Ignoring removed i_version option [ 31.165256][ T5569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.243952][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.291290][ T5588] FAULT_INJECTION: forcing a failure. [ 31.291290][ T5588] name failslab, interval 1, probability 0, space 0, times 0 [ 31.291307][ T5588] CPU: 1 UID: 0 PID: 5588 Comm: syz.1.178 Not tainted syzkaller #0 PREEMPT [ 31.291316][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 31.291321][ T5588] Call trace: [ 31.291324][ T5588] show_stack+0x2c/0x3c (C) [ 31.291337][ T5588] __dump_stack+0x30/0x40 [ 31.291345][ T5588] dump_stack_lvl+0xd8/0x12c [ 31.291352][ T5588] dump_stack+0x1c/0x28 [ 31.291359][ T5588] should_fail_ex+0x3fc/0x570 [ 31.291371][ T5588] should_failslab+0xc4/0x120 [ 31.291379][ T5588] kmem_cache_alloc_noprof+0x94/0x5d4 [ 31.291386][ T5588] mempool_alloc_slab+0x58/0x74 [ 31.291397][ T5588] mempool_init_node+0x1c0/0x484 [ 31.291406][ T5588] mempool_init_noprof+0x50/0x68 [ 31.291416][ T5588] bioset_init+0x4bc/0x67c [ 31.291424][ T5588] dm_io_client_create+0xc0/0x10c [ 31.291436][ T5588] dm_integrity_ctr+0x1810/0x4688 [ 31.291446][ T5588] dm_table_add_target+0x44c/0xb18 [ 31.291454][ T5588] table_load+0x27c/0x764 [ 31.291463][ T5588] dm_ctl_ioctl+0x884/0xbbc [ 31.291473][ T5588] __arm64_sys_ioctl+0x154/0x1cc [ 31.291480][ T5588] invoke_syscall+0x98/0x244 [ 31.291488][ T5588] el0_svc_common+0xec/0x23c [ 31.291495][ T5588] do_el0_svc+0x4c/0x5c [ 31.291501][ T5588] el0_svc+0x60/0x1d8 [ 31.291510][ T5588] el0t_64_sync_handler+0x44/0x104 [ 31.291518][ T5588] el0t_64_sync+0x198/0x19c [ 31.291765][ T5588] device-mapper: table: 248:1: integrity: Cannot allocate dm io (-ENOMEM) [ 31.291774][ T5588] device-mapper: ioctl: error adding target to table [ 31.352587][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.384096][ T5596] syz_tun: entered allmulticast mode [ 31.386195][ T5596] syzkaller0: entered promiscuous mode [ 31.386207][ T5596] syzkaller0: entered allmulticast mode [ 31.418348][ T5597] ubi0: attaching mtd0 [ 31.419547][ T5597] ubi0: scanning is finished [ 31.419556][ T5597] ubi0: empty MTD device detected [ 31.534543][ T5610] syzkaller0: left promiscuous mode [ 31.534560][ T5610] syzkaller0: left allmulticast mode [ 31.605815][ T5617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 31.614713][ T5617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 31.618145][ T5597] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 31.618163][ T5597] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 31.618174][ T5597] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 31.618181][ T5597] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 31.618188][ T5597] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 31.618195][ T5597] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 31.618201][ T5597] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1321301070 [ 31.618209][ T5597] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 31.618569][ T5618] ubi0: background thread "ubi_bgt0d" started, PID 5618 [ 31.620339][ T5605] ubi0: detaching mtd0 [ 31.628498][ T5605] ubi0: mtd0 is detached [ 31.630096][ T5617] bond0 (unregistering): Released all slaves [ 31.704964][ T5621] EXT4-fs: Ignoring removed i_version option [ 31.729382][ T5621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.738323][ T5624] EXT4-fs: Ignoring removed i_version option [ 31.782866][ T5624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.872777][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.893494][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.945599][ T5655] FAULT_INJECTION: forcing a failure. [ 31.945599][ T5655] name failslab, interval 1, probability 0, space 0, times 0 [ 31.945615][ T5655] CPU: 1 UID: 0 PID: 5655 Comm: syz.2.195 Not tainted syzkaller #0 PREEMPT [ 31.945625][ T5655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 31.945629][ T5655] Call trace: [ 31.945632][ T5655] show_stack+0x2c/0x3c (C) [ 31.945647][ T5655] __dump_stack+0x30/0x40 [ 31.945655][ T5655] dump_stack_lvl+0xd8/0x12c [ 31.945662][ T5655] dump_stack+0x1c/0x28 [ 31.945668][ T5655] should_fail_ex+0x3fc/0x570 [ 31.945680][ T5655] should_failslab+0xc4/0x120 [ 31.945688][ T5655] kmem_cache_alloc_noprof+0x94/0x5d4 [ 31.945696][ T5655] vm_area_dup+0x34/0x5c4 [ 31.945705][ T5655] __split_vma+0x1a8/0x85c [ 31.945720][ T5655] vma_modify+0x8e8/0x1d78 [ 31.945729][ T5655] vma_modify_flags+0x228/0x33c [ 31.945739][ T5655] mlock_fixup+0x434/0x8fc [ 31.945746][ T5655] apply_vma_lock_flags+0x2e4/0x404 [ 31.945754][ T5655] do_mlock+0x464/0x65c [ 31.945762][ T5655] __arm64_sys_mlock+0x80/0xb4 [ 31.945769][ T5655] invoke_syscall+0x98/0x244 [ 31.945777][ T5655] el0_svc_common+0xec/0x23c [ 31.945784][ T5655] do_el0_svc+0x4c/0x5c [ 31.945790][ T5655] el0_svc+0x60/0x1d8 [ 31.945799][ T5655] el0t_64_sync_handler+0x44/0x104 [ 31.945807][ T5655] el0t_64_sync+0x198/0x19c [ 32.041822][ T5663] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.189189][ T5693] EXT4-fs: Ignoring removed i_version option [ 32.200906][ T5693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.204859][ T5695] EXT4-fs: Ignoring removed i_version option [ 32.285417][ T5695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.321189][ T5695] bridge0: entered allmulticast mode [ 32.366849][ T5721] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 32.380613][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.394736][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.410766][ T5725] ublkb0: truncate capacity from 36028797018963968 to 18014398509481983 [ 32.418774][ T5721] bond1: (slave veth0_to_bond): making interface the new active one [ 32.419190][ T5721] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 32.446450][ T5721] macvlan2: entered promiscuous mode [ 32.446474][ T5721] macvlan2: entered allmulticast mode [ 32.446804][ T5721] bond1: entered promiscuous mode [ 32.446813][ T5721] veth0_to_bond: entered promiscuous mode [ 32.452621][ T5721] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 32.452974][ T5721] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 32.453075][ T5721] bond1: left promiscuous mode [ 32.453084][ T5721] veth0_to_bond: left promiscuous mode [ 32.514859][ T5744] FAULT_INJECTION: forcing a failure. [ 32.514859][ T5744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.514876][ T5744] CPU: 1 UID: 0 PID: 5744 Comm: syz.1.221 Not tainted syzkaller #0 PREEMPT [ 32.514885][ T5744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 32.514890][ T5744] Call trace: [ 32.514893][ T5744] show_stack+0x2c/0x3c (C) [ 32.514906][ T5744] __dump_stack+0x30/0x40 [ 32.514914][ T5744] dump_stack_lvl+0xd8/0x12c [ 32.514921][ T5744] dump_stack+0x1c/0x28 [ 32.514928][ T5744] should_fail_ex+0x3fc/0x570 [ 32.514940][ T5744] should_fail+0x14/0x24 [ 32.514949][ T5744] should_fail_usercopy+0x20/0x30 [ 32.514957][ T5744] _copy_from_iter+0x188/0x1050 [ 32.514965][ T5744] netlink_sendmsg+0x560/0x98c [ 32.514975][ T5744] __sock_sendmsg+0xc8/0x188 [ 32.514983][ T5744] __sys_sendto+0x250/0x328 [ 32.514991][ T5744] __arm64_sys_sendto+0xec/0x10c [ 32.515000][ T5744] invoke_syscall+0x98/0x244 [ 32.515007][ T5744] el0_svc_common+0xec/0x23c [ 32.515014][ T5744] do_el0_svc+0x4c/0x5c [ 32.515021][ T5744] el0_svc+0x60/0x1d8 [ 32.515030][ T5744] el0t_64_sync_handler+0x44/0x104 [ 32.515038][ T5744] el0t_64_sync+0x198/0x19c [ 32.589196][ T5765] EXT4-fs: Ignoring removed i_version option [ 32.601407][ T5765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.624501][ T5772] device-mapper: table: 248:2: too large device [ 32.624514][ T5772] device-mapper: ioctl: error adding target to table [ 32.630581][ T5771] EXT4-fs: Ignoring removed i_version option [ 32.649129][ T5771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.800770][ T5790] netlink: 'syz.2.229': attribute type 9 has an invalid length. [ 32.985634][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.019319][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.228555][ T5819] bond0: entered promiscuous mode [ 33.228758][ T5819] bond_slave_0: entered promiscuous mode [ 33.229302][ T5819] bond_slave_1: entered promiscuous mode [ 33.234113][ T5819] batadv0: entered promiscuous mode [ 33.238523][ T5819] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 33.406183][ T5819] bond0: left promiscuous mode [ 33.406200][ T5819] bond_slave_0: left promiscuous mode [ 33.406285][ T5819] bond_slave_1: left promiscuous mode [ 33.412058][ T5819] batadv0: left promiscuous mode [ 33.432378][ T5822] EXT4-fs: Ignoring removed i_version option [ 33.441784][ T5822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.466939][ T4819] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 33.466967][ T4819] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 33.467404][ T4842] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 33.467423][ T4842] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 33.467461][ T4842] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 33.467472][ T4842] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 33.467492][ T4842] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 33.467502][ T4842] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 33.467521][ T4842] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 33.467530][ T4842] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 33.474218][ T4842] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 33.474238][ T4842] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 33.474269][ T4842] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 33.474279][ T4842] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 33.474298][ T4842] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 33.474307][ T4842] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 33.474316][ T4842] ldm_validate_partition_table(): Disk read failed. [ 33.474331][ T4842] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 33.474340][ T4842] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 33.474357][ T4842] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 33.474366][ T4842] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 33.474400][ T4842] Dev ublkb0: unable to read RDB block 0 [ 33.474596][ T4842] ublkb0: unable to read partition table [ 33.553575][ T5829] EXT4-fs: Ignoring removed i_version option [ 33.570782][ T5829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.616056][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.651933][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.684569][ T5848] FAULT_INJECTION: forcing a failure. [ 33.684569][ T5848] name failslab, interval 1, probability 0, space 0, times 0 [ 33.684585][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz.2.248 Not tainted syzkaller #0 PREEMPT [ 33.684595][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 33.684599][ T5848] Call trace: [ 33.684602][ T5848] show_stack+0x2c/0x3c (C) [ 33.684616][ T5848] __dump_stack+0x30/0x40 [ 33.684624][ T5848] dump_stack_lvl+0xd8/0x12c [ 33.684631][ T5848] dump_stack+0x1c/0x28 [ 33.684638][ T5848] should_fail_ex+0x3fc/0x570 [ 33.684649][ T5848] should_failslab+0xc4/0x120 [ 33.684657][ T5848] kmem_cache_alloc_noprof+0x94/0x5d4 [ 33.684665][ T5848] __kernfs_new_node+0xf0/0x7d8 [ 33.684676][ T5848] kernfs_new_node+0xf4/0x148 [ 33.684685][ T5848] __kernfs_create_file+0x60/0x2e0 [ 33.684692][ T5848] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 33.684700][ T5848] internal_create_group+0x550/0xb30 [ 33.684708][ T5848] internal_create_groups+0x64/0x138 [ 33.684723][ T5848] sysfs_create_groups+0x2c/0x3c [ 33.684732][ T5848] device_add_attrs+0x17c/0x4e4 [ 33.684741][ T5848] device_add+0x420/0x9e0 [ 33.684748][ T5848] netdev_register_kobject+0x184/0x328 [ 33.684759][ T5848] register_netdevice+0xee0/0x16d0 [ 33.684769][ T5848] ip_tunnel_newlink+0x20c/0x560 [ 33.684777][ T5848] erspan_newlink+0x1a0/0x208 [ 33.684784][ T5848] rtnl_newlink_create+0x294/0x6b8 [ 33.684793][ T5848] rtnl_newlink+0xfe8/0x1390 [ 33.684800][ T5848] rtnetlink_rcv_msg+0x66c/0x9bc [ 33.684807][ T5848] netlink_rcv_skb+0x238/0x414 [ 33.684816][ T5848] rtnetlink_rcv+0x28/0x38 [ 33.684824][ T5848] netlink_unicast+0x73c/0x934 [ 33.684832][ T5848] netlink_sendmsg+0x670/0x98c [ 33.684840][ T5848] __sock_sendmsg+0xc8/0x188 [ 33.684849][ T5848] ____sys_sendmsg+0x3d0/0x6c8 [ 33.684857][ T5848] ___sys_sendmsg+0x198/0x224 [ 33.684865][ T5848] __sys_sendmsg+0x158/0x204 [ 33.684874][ T5848] __arm64_sys_sendmsg+0x88/0x9c [ 33.684882][ T5848] invoke_syscall+0x98/0x244 [ 33.684890][ T5848] el0_svc_common+0xec/0x23c [ 33.684897][ T5848] do_el0_svc+0x4c/0x5c [ 33.684904][ T5848] el0_svc+0x60/0x1d8 [ 33.684913][ T5848] el0t_64_sync_handler+0x44/0x104 [ 33.684921][ T5848] el0t_64_sync+0x198/0x19c [ 33.780970][ T5862] FAULT_INJECTION: forcing a failure. [ 33.780970][ T5862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.780986][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz.4.256 Not tainted syzkaller #0 PREEMPT [ 33.780996][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 33.781000][ T5862] Call trace: [ 33.781003][ T5862] show_stack+0x2c/0x3c (C) [ 33.781016][ T5862] __dump_stack+0x30/0x40 [ 33.781024][ T5862] dump_stack_lvl+0xd8/0x12c [ 33.781031][ T5862] dump_stack+0x1c/0x28 [ 33.781038][ T5862] should_fail_ex+0x3fc/0x570 [ 33.781049][ T5862] should_fail+0x14/0x24 [ 33.781059][ T5862] should_fail_usercopy+0x20/0x30 [ 33.781066][ T5862] _inline_copy_from_user+0x3c/0x174 [ 33.781077][ T5862] copy_msghdr_from_user+0xb8/0x194 [ 33.781090][ T5862] ___sys_sendmsg+0x14c/0x224 [ 33.781098][ T5862] __sys_sendmsg+0x158/0x204 [ 33.781107][ T5862] __arm64_sys_sendmsg+0x88/0x9c [ 33.781115][ T5862] invoke_syscall+0x98/0x244 [ 33.781123][ T5862] el0_svc_common+0xec/0x23c [ 33.781130][ T5862] do_el0_svc+0x4c/0x5c [ 33.781137][ T5862] el0_svc+0x60/0x1d8 [ 33.781146][ T5862] el0t_64_sync_handler+0x44/0x104 [ 33.781154][ T5862] el0t_64_sync+0x198/0x19c [ 33.819047][ T5866] EXT4-fs: Ignoring removed i_version option [ 33.829815][ T5866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.884712][ T5874] EXT4-fs: Ignoring removed i_version option [ 33.904801][ T5874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.951988][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.965062][ T5867] loop3: p1 p3 < > [ 34.029649][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.058622][ T5889] FAULT_INJECTION: forcing a failure. [ 34.058622][ T5889] name failslab, interval 1, probability 0, space 0, times 0 [ 34.058639][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: syz.1.264 Not tainted syzkaller #0 PREEMPT [ 34.058648][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 34.058653][ T5889] Call trace: [ 34.058656][ T5889] show_stack+0x2c/0x3c (C) [ 34.058670][ T5889] __dump_stack+0x30/0x40 [ 34.058677][ T5889] dump_stack_lvl+0xd8/0x12c [ 34.058684][ T5889] dump_stack+0x1c/0x28 [ 34.058691][ T5889] should_fail_ex+0x3fc/0x570 [ 34.058703][ T5889] should_failslab+0xc4/0x120 [ 34.058711][ T5889] __kvmalloc_node_noprof+0x160/0x7fc [ 34.058727][ T5889] call_instance+0xf0/0x3a0 [ 34.058737][ T5889] bpf_compute_subprog_arg_access+0x260/0xef8 [ 34.058746][ T5889] bpf_compute_live_registers+0xcb4/0x14a0 [ 34.058755][ T5889] bpf_check+0x22e8/0x2948 [ 34.058763][ T5889] bpf_prog_load+0xf6c/0x15a4 [ 34.058772][ T5889] __sys_bpf+0x7e8/0x840 [ 34.058781][ T5889] __arm64_sys_bpf+0xd0/0xec [ 34.058789][ T5889] invoke_syscall+0x98/0x244 [ 34.058796][ T5889] el0_svc_common+0xec/0x23c [ 34.058803][ T5889] do_el0_svc+0x4c/0x5c [ 34.058810][ T5889] el0_svc+0x60/0x1d8 [ 34.058820][ T5889] el0t_64_sync_handler+0x44/0x104 [ 34.058828][ T5889] el0t_64_sync+0x198/0x19c [ 34.105950][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 34.107914][ T4737] udevd[4737]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 34.121473][ T5896] syz.1.268 uses obsolete (PF_INET,SOCK_PACKET) [ 34.160295][ T5904] EXT4-fs: Ignoring removed bh option [ 34.163006][ T5904] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 34.165480][ T5904] EXT4-fs (loop3): 1 truncate cleaned up [ 34.165851][ T5904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.172571][ T5904] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.270: bg 0: block 465: padding at end of block bitmap is not set [ 34.188247][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.246797][ T5912] EXT4-fs: Ignoring removed i_version option [ 34.256160][ T5913] EXT4-fs: Ignoring removed i_version option [ 34.260679][ T5912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.281953][ T5913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.333046][ T5921] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 34.357151][ T4907] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.359158][ T4705] udevd[4705]: incorrect ext4 checksum on /dev/loop1 [ 34.395345][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.401818][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.587525][ T5961] ebt_among: dst integrity fail: 102 [ 34.605095][ T5965] EXT4-fs: Ignoring removed i_version option [ 34.620185][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.636586][ T5971] EXT4-fs: Ignoring removed i_version option [ 34.657873][ T5971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.715787][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.751587][ T5986] ip_tables: iptables: counters copy to user failed while replacing table [ 34.761022][ T5989] FAULT_INJECTION: forcing a failure. [ 34.761022][ T5989] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 34.761036][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: syz.2.294 Not tainted syzkaller #0 PREEMPT [ 34.761046][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 34.761050][ T5989] Call trace: [ 34.761053][ T5989] show_stack+0x2c/0x3c (C) [ 34.761067][ T5989] __dump_stack+0x30/0x40 [ 34.761074][ T5989] dump_stack_lvl+0xd8/0x12c [ 34.761081][ T5989] dump_stack+0x1c/0x28 [ 34.761088][ T5989] should_fail_ex+0x3fc/0x570 [ 34.761099][ T5989] should_fail_alloc_page+0xec/0x10c [ 34.761107][ T5989] prepare_alloc_pages+0x194/0x484 [ 34.761115][ T5989] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 34.761123][ T5989] alloc_pages_mpol+0x1fc/0x3d0 [ 34.761132][ T5989] folio_alloc_mpol_noprof+0x4c/0x248 [ 34.761140][ T5989] shmem_alloc_folio+0xa0/0x150 [ 34.761150][ T5989] shmem_alloc_and_add_folio+0x28c/0xb30 [ 34.761159][ T5989] shmem_get_folio_gfp+0x4c4/0x1108 [ 34.761168][ T5989] shmem_write_begin+0x160/0x448 [ 34.761177][ T5989] generic_perform_write+0x23c/0x7a4 [ 34.761187][ T5989] shmem_file_write_iter+0x10c/0x134 [ 34.761197][ T5989] vfs_write+0x51c/0xa0c [ 34.761205][ T5989] ksys_write+0x12c/0x228 [ 34.761214][ T5989] __arm64_sys_write+0x84/0x98 [ 34.761223][ T5989] invoke_syscall+0x98/0x244 [ 34.761231][ T5989] el0_svc_common+0xec/0x23c [ 34.761238][ T5989] do_el0_svc+0x4c/0x5c [ 34.761245][ T5989] el0_svc+0x60/0x1d8 [ 34.761254][ T5989] el0t_64_sync_handler+0x44/0x104 [ 34.761262][ T5989] el0t_64_sync+0x198/0x19c [ 34.829085][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.831188][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.851868][ T4713] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 34.879969][ T5995] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 34.879978][ T5995] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 34.879984][ T5995] overlayfs: missing 'lowerdir' [ 34.905606][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.964727][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.972211][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.133113][ T6000] vxlan0: entered promiscuous mode [ 35.133128][ T6000] vxlan0: entered allmulticast mode [ 35.144298][ T6005] syzkaller1: entered promiscuous mode [ 35.144313][ T6005] syzkaller1: entered allmulticast mode [ 35.147399][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.147421][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.148170][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.148188][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.148289][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.148300][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.148314][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.148324][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.179688][ T6013] FAULT_INJECTION: forcing a failure. [ 35.179688][ T6013] name failslab, interval 1, probability 0, space 0, times 0 [ 35.179708][ T6013] CPU: 0 UID: 0 PID: 6013 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT [ 35.179719][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 35.179725][ T6013] Call trace: [ 35.179728][ T6013] show_stack+0x2c/0x3c (C) [ 35.179744][ T6013] __dump_stack+0x30/0x40 [ 35.179753][ T6013] dump_stack_lvl+0xd8/0x12c [ 35.179761][ T6013] dump_stack+0x1c/0x28 [ 35.179769][ T6013] should_fail_ex+0x3fc/0x570 [ 35.179783][ T6013] should_failslab+0xc4/0x120 [ 35.179791][ T6013] kmem_cache_alloc_noprof+0x94/0x5d4 [ 35.179800][ T6013] __send_signal_locked+0x2f4/0xda4 [ 35.179813][ T6013] send_signal_locked+0x6b4/0x7a4 [ 35.179824][ T6013] do_send_sig_info+0x64/0xd4 [ 35.179836][ T6013] group_send_sig_info+0x1d4/0x200 [ 35.179848][ T6013] kill_pid_info_type+0x11c/0x210 [ 35.179860][ T6013] kill_proc_info+0xf4/0x1b0 [ 35.179869][ T6013] do_rt_sigqueueinfo+0xb4/0xe0 [ 35.179878][ T6013] __arm64_sys_rt_sigqueueinfo+0x120/0x188 [ 35.179887][ T6013] invoke_syscall+0x98/0x244 [ 35.179896][ T6013] el0_svc_common+0xec/0x23c [ 35.179904][ T6013] do_el0_svc+0x4c/0x5c [ 35.179911][ T6013] el0_svc+0x60/0x1d8 [ 35.179921][ T6013] el0t_64_sync_handler+0x44/0x104 [ 35.179931][ T6013] el0t_64_sync+0x198/0x19c [ 35.220670][ T6015] EXT4-fs: Ignoring removed i_version option [ 35.230124][ T6015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.271888][ T6023] EXT4-fs: Ignoring removed i_version option [ 35.284118][ T6023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.326381][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.641627][ T6031] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 35.663517][ T6031] bond1: option mode: invalid value (10) [ 35.670498][ T6031] bond1 (unregistering): Released all slaves [ 35.680116][ T6043] set_capacity_and_notify: 43 callbacks suppressed [ 35.680128][ T6043] loop2: detected capacity change from 0 to 33792 [ 35.683971][ T6043] ext4: Bad value for 'sb' [ 35.705169][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.711075][ T6045] input: syz0 as /devices/virtual/input/input5 [ 35.909680][ T6064] syzkaller1: entered promiscuous mode [ 35.909698][ T6064] syzkaller1: entered allmulticast mode [ 35.912900][ T6066] loop1: detected capacity change from 0 to 34816 [ 35.924282][ T6066] EXT4-fs: Ignoring removed i_version option [ 35.937813][ T6067] loop4: detected capacity change from 0 to 36864 [ 35.942096][ T6066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.954628][ T6067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.974996][ T6067] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 36.032200][ T4718] EXT4-fs error (device loop4): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /81/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 36.038275][ T4718] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 36.046285][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 36.049895][ T4718] EXT4-fs error (device loop4): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /81/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 36.053747][ T4718] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 36.056314][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 36.056491][ T4718] EXT4-fs error (device loop4): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /81/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 36.059527][ T4718] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 36.060990][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 36.064887][ T4718] EXT4-fs error (device loop4): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /81/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 36.065348][ T4718] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 36.065695][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 36.065874][ T4718] EXT4-fs error (device loop4): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /81/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 36.068622][ T4718] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 36.069255][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 36.073828][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 36.078137][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 36.081483][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 36.083864][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 36.085860][ T4718] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 36.098288][ T6075] loop2: detected capacity change from 0 to 34816 [ 36.098623][ T6075] EXT4-fs: Ignoring removed i_version option [ 36.121646][ T6075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.188453][ T6081] FAULT_INJECTION: forcing a failure. [ 36.188453][ T6081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.188472][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: syz.0.324 Not tainted syzkaller #0 PREEMPT [ 36.188483][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 36.188489][ T6081] Call trace: [ 36.188492][ T6081] show_stack+0x2c/0x3c (C) [ 36.188507][ T6081] __dump_stack+0x30/0x40 [ 36.188515][ T6081] dump_stack_lvl+0xd8/0x12c [ 36.188522][ T6081] dump_stack+0x1c/0x28 [ 36.188529][ T6081] should_fail_ex+0x3fc/0x570 [ 36.188541][ T6081] should_fail+0x14/0x24 [ 36.188551][ T6081] should_fail_usercopy+0x20/0x30 [ 36.188558][ T6081] simple_read_from_buffer+0xc4/0x238 [ 36.188569][ T6081] proc_fail_nth_read+0x1a8/0x248 [ 36.188579][ T6081] vfs_read+0x230/0x8c8 [ 36.188587][ T6081] ksys_read+0x12c/0x228 [ 36.188594][ T6081] __arm64_sys_read+0x84/0x98 [ 36.188601][ T6081] invoke_syscall+0x98/0x244 [ 36.188609][ T6081] el0_svc_common+0xec/0x23c [ 36.188616][ T6081] do_el0_svc+0x4c/0x5c [ 36.188622][ T6081] el0_svc+0x60/0x1d8 [ 36.188632][ T6081] el0t_64_sync_handler+0x44/0x104 [ 36.188640][ T6081] el0t_64_sync+0x198/0x19c [ 36.224265][ T6085] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [403c!=40, 4,4000] [ 36.280000][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.319274][ T6091] loop1: detected capacity change from 0 to 33280 [ 36.324279][ T6091] EXT4-fs (loop1): Test dummy encryption mode enabled [ 36.338760][ T6091] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.328: inode has both inline data and extents flags [ 36.338836][ T6091] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.339279][ T6091] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.328: couldn't read orphan inode 15 (err -117) [ 36.339317][ T6091] loop1: lost filesystem error report for type 5 error -117 [ 36.339915][ T6091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.342000][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.351780][ T6091] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 36.376954][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.379254][ T6098] loop2: detected capacity change from 0 to 33280 [ 36.381056][ T6098] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 36.387159][ T6098] EXT4-fs (loop2): 1 truncate cleaned up [ 36.387686][ T6098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.417925][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.451623][ T4718] syz_tun (unregistering): left allmulticast mode [ 36.464504][ T6103] syzkaller1: entered promiscuous mode [ 36.464520][ T6103] syzkaller1: entered allmulticast mode [ 36.514721][ T6115] loop3: detected capacity change from 0 to 34816 [ 36.528937][ T6115] EXT4-fs: Ignoring removed i_version option [ 36.550673][ T6119] loop2: detected capacity change from 0 to 34816 [ 36.551044][ T6119] EXT4-fs: Ignoring removed i_version option [ 36.597647][ T6119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.600367][ T6115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.841002][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.922294][ T6129] loop1: detected capacity change from 0 to 49152 [ 36.933583][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 36.933605][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.984612][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.994879][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.019872][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 37.019915][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.051424][ T6142] __nla_validate_parse: 12 callbacks suppressed [ 37.051440][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 37.051460][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 37.060574][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.065229][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.065740][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.066380][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.066599][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.084657][ T6147] syzkaller1: entered promiscuous mode [ 37.084671][ T6147] syzkaller1: entered allmulticast mode [ 37.099338][ T6150] FAULT_INJECTION: forcing a failure. [ 37.099338][ T6150] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 37.099355][ T6150] CPU: 1 UID: 0 PID: 6150 Comm: syz.2.350 Not tainted syzkaller #0 PREEMPT [ 37.099365][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 37.099370][ T6150] Call trace: [ 37.099373][ T6150] show_stack+0x2c/0x3c (C) [ 37.099388][ T6150] __dump_stack+0x30/0x40 [ 37.099397][ T6150] dump_stack_lvl+0xd8/0x12c [ 37.099405][ T6150] dump_stack+0x1c/0x28 [ 37.099412][ T6150] should_fail_ex+0x3fc/0x570 [ 37.099426][ T6150] should_fail_alloc_page+0xec/0x10c [ 37.099436][ T6150] prepare_alloc_pages+0x194/0x484 [ 37.099445][ T6150] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 37.099454][ T6150] alloc_pages_mpol+0x1fc/0x3d0 [ 37.099465][ T6150] folio_alloc_mpol_noprof+0x4c/0x248 [ 37.099475][ T6150] vma_alloc_folio_noprof+0x100/0x1dc [ 37.099485][ T6150] folio_prealloc+0x5c/0x1b0 [ 37.099493][ T6150] copy_pmd_range+0x4ee8/0x58b8 [ 37.099500][ T6150] copy_page_range+0x8ac/0x1078 [ 37.099512][ T6150] dup_mmap+0xd4c/0x1a04 [ 37.099522][ T6150] copy_mm+0xe8/0x328 [ 37.099530][ T6150] copy_process+0x1698/0x35a0 [ 37.099537][ T6150] kernel_clone+0x234/0x8e8 [ 37.099546][ T6150] __arm64_sys_clone+0x168/0x1d4 [ 37.099554][ T6150] invoke_syscall+0x98/0x244 [ 37.099563][ T6150] el0_svc_common+0xec/0x23c [ 37.099571][ T6150] do_el0_svc+0x4c/0x5c [ 37.099578][ T6150] el0_svc+0x60/0x1d8 [ 37.099589][ T6150] el0t_64_sync_handler+0x44/0x104 [ 37.099598][ T6150] el0t_64_sync+0x198/0x19c [ 37.120423][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 37.120447][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.167764][ T6157] FAULT_INJECTION: forcing a failure. [ 37.167764][ T6157] name failslab, interval 1, probability 0, space 0, times 0 [ 37.167784][ T6157] CPU: 1 UID: 0 PID: 6157 Comm: syz.2.351 Not tainted syzkaller #0 PREEMPT [ 37.167796][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 37.167801][ T6157] Call trace: [ 37.167804][ T6157] show_stack+0x2c/0x3c (C) [ 37.167819][ T6157] __dump_stack+0x30/0x40 [ 37.167828][ T6157] dump_stack_lvl+0xd8/0x12c [ 37.167836][ T6157] dump_stack+0x1c/0x28 [ 37.167844][ T6157] should_fail_ex+0x3fc/0x570 [ 37.167857][ T6157] should_failslab+0xc4/0x120 [ 37.167869][ T6157] __kmalloc_cache_noprof+0x94/0x5fc [ 37.167878][ T6157] vidtv_mux_create_pid_ctx_once+0x128/0x234 [ 37.167889][ T6157] vidtv_mux_init+0x4d8/0x7e4 [ 37.167897][ T6157] vidtv_start_feed+0x2e0/0x49c [ 37.167908][ T6157] dmx_section_feed_start_filtering+0x328/0x464 [ 37.167920][ T6157] dvb_dmxdev_filter_start+0x748/0xa8c [ 37.167928][ T6157] dvb_dmxdev_filter_set+0x158/0x288 [ 37.167937][ T6157] dvb_demux_do_ioctl+0x3f4/0x4bc [ 37.167945][ T6157] dvb_usercopy+0x2a4/0x4d4 [ 37.167953][ T6157] dvb_demux_ioctl+0x3c/0x54 [ 37.167961][ T6157] __arm64_sys_ioctl+0x154/0x1cc [ 37.167970][ T6157] invoke_syscall+0x98/0x244 [ 37.167978][ T6157] el0_svc_common+0xec/0x23c [ 37.167986][ T6157] do_el0_svc+0x4c/0x5c [ 37.167994][ T6157] el0_svc+0x60/0x1d8 [ 37.168004][ T6157] el0t_64_sync_handler+0x44/0x104 [ 37.168014][ T6157] el0t_64_sync+0x198/0x19c [ 37.203296][ T6144] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.212049][ T6161] debugfs: Bad value for 'mode' [ 37.250068][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 37.250093][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.274068][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 37.275074][ T6165] syzkaller1: entered promiscuous mode [ 37.275091][ T6165] syzkaller1: entered allmulticast mode [ 37.309746][ T6172] loop1: detected capacity change from 0 to 34816 [ 37.310120][ T6172] EXT4-fs: Ignoring removed i_version option [ 37.311820][ T6173] netlink: 14 bytes leftover after parsing attributes in process `syz.2.357'. [ 37.322584][ T6172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.398611][ T6184] EXT4-fs: Ignoring removed i_version option [ 37.404359][ T6186] FAULT_INJECTION: forcing a failure. [ 37.404359][ T6186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.404387][ T6186] CPU: 0 UID: 0 PID: 6186 Comm: syz.3.360 Not tainted syzkaller #0 PREEMPT [ 37.404398][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 37.404403][ T6186] Call trace: [ 37.404407][ T6186] show_stack+0x2c/0x3c (C) [ 37.404423][ T6186] __dump_stack+0x30/0x40 [ 37.404432][ T6186] dump_stack_lvl+0xd8/0x12c [ 37.404439][ T6186] dump_stack+0x1c/0x28 [ 37.404446][ T6186] should_fail_ex+0x3fc/0x570 [ 37.404458][ T6186] should_fail+0x14/0x24 [ 37.404467][ T6186] should_fail_usercopy+0x20/0x30 [ 37.404475][ T6186] _inline_copy_from_user+0x3c/0x174 [ 37.404482][ T6186] kstrtouint_from_user+0xcc/0x174 [ 37.404490][ T6186] proc_fail_nth_write+0x9c/0x234 [ 37.404500][ T6186] vfs_write+0x2a4/0xa0c [ 37.404508][ T6186] ksys_write+0x12c/0x228 [ 37.404515][ T6186] __arm64_sys_write+0x84/0x98 [ 37.404523][ T6186] invoke_syscall+0x98/0x244 [ 37.404530][ T6186] el0_svc_common+0xec/0x23c [ 37.404537][ T6186] do_el0_svc+0x4c/0x5c [ 37.404544][ T6186] el0_svc+0x60/0x1d8 [ 37.404553][ T6186] el0t_64_sync_handler+0x44/0x104 [ 37.404561][ T6186] el0t_64_sync+0x198/0x19c [ 37.477266][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 37.477312][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 37.493515][ T6184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.502242][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.559559][ T6203] debugfs: Bad value for 'mode' [ 37.579016][ T6199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.595882][ T6199] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 37.595954][ T6199] Cannot find del_set index 4 as target [ 37.621352][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.661650][ T6218] FAULT_INJECTION: forcing a failure. [ 37.661650][ T6218] name failslab, interval 1, probability 0, space 0, times 0 [ 37.661670][ T6218] CPU: 0 UID: 0 PID: 6218 Comm: syz.0.366 Not tainted syzkaller #0 PREEMPT [ 37.661683][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 37.661688][ T6218] Call trace: [ 37.661691][ T6218] show_stack+0x2c/0x3c (C) [ 37.661712][ T6218] __dump_stack+0x30/0x40 [ 37.661720][ T6218] dump_stack_lvl+0xd8/0x12c [ 37.661728][ T6218] dump_stack+0x1c/0x28 [ 37.661736][ T6218] should_fail_ex+0x3fc/0x570 [ 37.661749][ T6218] should_failslab+0xc4/0x120 [ 37.661757][ T6218] kmem_cache_alloc_noprof+0x94/0x5d4 [ 37.661765][ T6218] sk_prot_alloc+0x60/0x1e8 [ 37.661777][ T6218] sk_alloc+0x44/0x320 [ 37.661787][ T6218] inet6_create+0x620/0xfc8 [ 37.661797][ T6218] __sock_create+0x31c/0x670 [ 37.661805][ T6218] __sys_socket_create+0xc0/0x11c [ 37.661813][ T6218] __sys_socket+0x44/0xec [ 37.661821][ T6218] __arm64_sys_socket+0x84/0x9c [ 37.661828][ T6218] invoke_syscall+0x98/0x244 [ 37.661836][ T6218] el0_svc_common+0xec/0x23c [ 37.661843][ T6218] do_el0_svc+0x4c/0x5c [ 37.661850][ T6218] el0_svc+0x60/0x1d8 [ 37.661859][ T6218] el0t_64_sync_handler+0x44/0x104 [ 37.661867][ T6218] el0t_64_sync+0x198/0x19c [ 37.662637][ T6216] nvme nvme0: using deprecated NVME_IOCTL_IO_CMD ioctl on the char device! [ 37.663540][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.672032][ T6222] FAULT_INJECTION: forcing a failure. [ 37.672032][ T6222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.672045][ T6222] CPU: 1 UID: 0 PID: 6222 Comm: syz.1.368 Not tainted syzkaller #0 PREEMPT [ 37.672054][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 37.672058][ T6222] Call trace: [ 37.672061][ T6222] show_stack+0x2c/0x3c (C) [ 37.672071][ T6222] __dump_stack+0x30/0x40 [ 37.672079][ T6222] dump_stack_lvl+0xd8/0x12c [ 37.672086][ T6222] dump_stack+0x1c/0x28 [ 37.672092][ T6222] should_fail_ex+0x3fc/0x570 [ 37.672103][ T6222] should_fail+0x14/0x24 [ 37.672113][ T6222] should_fail_usercopy+0x20/0x30 [ 37.672120][ T6222] _inline_copy_from_user+0x3c/0x174 [ 37.672129][ T6222] copy_msghdr_from_user+0xb8/0x194 [ 37.672139][ T6222] ___sys_recvmsg+0x11c/0x1f4 [ 37.672147][ T6222] do_recvmmsg+0x288/0x7d4 [ 37.672156][ T6222] __sys_recvmmsg+0x1e0/0x270 [ 37.672164][ T6222] __arm64_sys_recvmmsg+0xe0/0x108 [ 37.672176][ T6222] invoke_syscall+0x98/0x244 [ 37.672184][ T6222] el0_svc_common+0xec/0x23c [ 37.672191][ T6222] do_el0_svc+0x4c/0x5c [ 37.672199][ T6222] el0_svc+0x60/0x1d8 [ 37.672207][ T6222] el0t_64_sync_handler+0x44/0x104 [ 37.672216][ T6222] el0t_64_sync+0x198/0x19c [ 37.698198][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.718594][ T13] bond0 (unregistering): Released all slaves [ 37.723441][ T13] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 37.729027][ T13] bond1 (unregistering): Released all slaves [ 37.742951][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.745101][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.745177][ T6144] bridge_slave_0: entered allmulticast mode [ 37.746821][ T6144] bridge_slave_0: entered promiscuous mode [ 37.747639][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.747663][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.747719][ T6144] bridge_slave_1: entered allmulticast mode [ 37.748063][ T6144] bridge_slave_1: entered promiscuous mode [ 37.777697][ T6144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.778555][ T6144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.800686][ T6144] team0: Port device team_slave_0 added [ 37.801390][ T6144] team0: Port device team_slave_1 added [ 37.806455][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.806463][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.806477][ T6144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.806822][ T6230] syzkaller1: entered promiscuous mode [ 37.806833][ T6230] syzkaller1: entered allmulticast mode [ 37.815156][ T6237] ip_tables: iptables: counters copy to user failed while replacing table [ 37.834476][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.877891][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.877903][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.877916][ T6144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.881573][ T6243] EXT4-fs: Ignoring removed i_version option [ 37.914260][ T6250] debugfs: Bad value for 'mode' [ 37.924558][ T6243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.935147][ T6144] hsr_slave_0: entered promiscuous mode [ 37.935422][ T6144] hsr_slave_1: entered promiscuous mode [ 37.935598][ T6144] debugfs: 'hsr0' already exists in 'hsr' [ 37.935606][ T6144] Cannot create hsr debugfs directory [ 37.958159][ T3173] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.013347][ T6144] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.021391][ T6144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.022786][ T6144] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.031370][ T6144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.083291][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.092938][ T6144] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.100775][ T6144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.101116][ T6144] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.110586][ T6144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.127396][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 38.127419][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 38.146953][ T3173] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.147017][ T3173] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.147035][ T3173] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.179080][ T6144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.204695][ T6144] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.222449][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.222486][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.223033][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.223054][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.231373][ T6288] EXT4-fs: Ignoring removed i_version option [ 38.234794][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.259169][ T6288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.302111][ T13] hsr_slave_0: left promiscuous mode [ 38.310519][ T13] hsr_slave_1: left promiscuous mode [ 38.310876][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.310896][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.318777][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.318791][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.325888][ T13] veth1_macvtap: left promiscuous mode [ 38.325923][ T13] veth0_macvtap: left promiscuous mode [ 38.326031][ T13] veth1_vlan: left promiscuous mode [ 38.326076][ T13] veth0_vlan: left promiscuous mode [ 38.370758][ T6309] debugfs: Bad value for 'mode' [ 38.420646][ T6314] fuse: Unknown parameter 'g' [ 38.475072][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 38.475090][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 38.511034][ T13] team0 (unregistering): Port device team_slave_1 removed [ 38.516037][ T13] team0 (unregistering): Port device team_slave_0 removed [ 38.564536][ T6331] xt_IDLETIMER: timeout value is too big [ 38.632713][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.634492][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.653007][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.681946][ T6340] netlink: 'syz.0.392': attribute type 32 has an invalid length. [ 38.799036][ T6314] batman_adv: batadv0: Interface deactivated: gretap1 [ 38.800299][ T6318] syzkaller1: entered promiscuous mode [ 38.800314][ T6318] syzkaller1: entered allmulticast mode [ 38.802023][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 38.806448][ T3173] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.806467][ T3173] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.809347][ T3173] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.809364][ T3173] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.809471][ T3173] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.809483][ T3173] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.809618][ T3173] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.809628][ T3173] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.854969][ T6349] EXT4-fs: Ignoring removed i_version option [ 38.887516][ T6349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.973463][ T6360] overlay: Unknown parameter 'euid>00000000004294967295' [ 38.981613][ T6363] debugfs: Bad value for 'mode' [ 39.031954][ T6378] Bluetooth: MGMT ver 1.23 [ 39.093460][ T6390] EXT4-fs: Ignoring removed i_version option [ 39.103570][ T6393] tls_set_device_offload: netdev not found [ 39.110561][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.111121][ T6390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.126272][ T4729] Bluetooth: hci4: command tx timeout [ 39.151120][ T6144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.174462][ T4403] 8021q: adding VLAN 0 to HW filter on device eth3 [ 39.246700][ T6420] syzkaller1: entered promiscuous mode [ 39.246726][ T6420] syzkaller1: entered allmulticast mode [ 39.389410][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.397746][ T6144] veth0_vlan: entered promiscuous mode [ 39.415244][ T6144] veth1_vlan: entered promiscuous mode [ 39.416994][ T6442] FAULT_INJECTION: forcing a failure. [ 39.416994][ T6442] name failslab, interval 1, probability 0, space 0, times 0 [ 39.417007][ T6442] CPU: 1 UID: 0 PID: 6442 Comm: syz.0.409 Not tainted syzkaller #0 PREEMPT [ 39.417017][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 39.417022][ T6442] Call trace: [ 39.417025][ T6442] show_stack+0x2c/0x3c (C) [ 39.417040][ T6442] __dump_stack+0x30/0x40 [ 39.417048][ T6442] dump_stack_lvl+0xd8/0x12c [ 39.417056][ T6442] dump_stack+0x1c/0x28 [ 39.417064][ T6442] should_fail_ex+0x3fc/0x570 [ 39.417078][ T6442] should_failslab+0xc4/0x120 [ 39.417086][ T6442] kmem_cache_alloc_noprof+0x94/0x5d4 [ 39.417095][ T6442] key_alloc+0x288/0xd30 [ 39.417108][ T6442] keyring_alloc+0x68/0xe0 [ 39.417116][ T6442] call_sbin_request_key+0x2b0/0x9c4 [ 39.417126][ T6442] request_key_and_link+0xfa0/0x1118 [ 39.417136][ T6442] __arm64_sys_request_key+0x2d4/0x37c [ 39.417145][ T6442] invoke_syscall+0x98/0x244 [ 39.417153][ T6442] el0_svc_common+0xec/0x23c [ 39.417161][ T6442] do_el0_svc+0x4c/0x5c [ 39.417169][ T6442] el0_svc+0x60/0x1d8 [ 39.417179][ T6442] el0t_64_sync_handler+0x44/0x104 [ 39.417189][ T6442] el0t_64_sync+0x198/0x19c [ 39.442281][ T4403] 8021q: adding VLAN 0 to HW filter on device eth2 [ 39.467583][ T6144] veth0_macvtap: entered promiscuous mode [ 39.475562][ T6144] veth1_macvtap: entered promiscuous mode [ 39.479889][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.480855][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.499651][ T6448] debugfs: Bad value for 'mode' [ 39.517515][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.517663][ T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.517691][ T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.517705][ T42] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.582227][ T6449] EXT4-fs: Ignoring removed i_version option [ 39.586122][ T6449] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 39.586142][ T6449] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 39.586150][ T6449] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.586155][ T6449] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.593242][ T3415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.593253][ T3415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.614806][ T6449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with journalled data mode. Quota mode: journalled. [ 39.626063][ T6449] FAULT_INJECTION: forcing a failure. [ 39.626063][ T6449] name failslab, interval 1, probability 0, space 0, times 0 [ 39.626078][ T6449] CPU: 1 UID: 0 PID: 6449 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT [ 39.626088][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 39.626093][ T6449] Call trace: [ 39.626096][ T6449] show_stack+0x2c/0x3c (C) [ 39.626111][ T6449] __dump_stack+0x30/0x40 [ 39.626121][ T6449] dump_stack_lvl+0xd8/0x12c [ 39.626129][ T6449] dump_stack+0x1c/0x28 [ 39.626136][ T6449] should_fail_ex+0x3fc/0x570 [ 39.626148][ T6449] should_failslab+0xc4/0x120 [ 39.626155][ T6449] __kmalloc_cache_noprof+0x94/0x5fc [ 39.626163][ T6449] ext4_getfsmap_datadev+0xa50/0x1b0c [ 39.626173][ T6449] ext4_getfsmap+0x570/0x7a0 [ 39.626180][ T6449] ext4_ioctl+0x3524/0x4430 [ 39.626189][ T6449] __arm64_sys_ioctl+0x154/0x1cc [ 39.626197][ T6449] invoke_syscall+0x98/0x244 [ 39.626204][ T6449] el0_svc_common+0xec/0x23c [ 39.626211][ T6449] do_el0_svc+0x4c/0x5c [ 39.626218][ T6449] el0_svc+0x60/0x1d8 [ 39.626227][ T6449] el0t_64_sync_handler+0x44/0x104 [ 39.626235][ T6449] el0t_64_sync+0x198/0x19c [ 39.632318][ T6460] EXT4-fs: Ignoring removed i_version option [ 39.636886][ T3415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.636897][ T3415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.679871][ T6460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.685592][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.815031][ T6475] ip6tnl1: entered allmulticast mode [ 39.818937][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 39.819063][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 39.832980][ T6476] EXT4-fs: Ignoring removed i_version option [ 39.846265][ T4907] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 39.857279][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.864601][ T6476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.914567][ T6488] syzkaller1: entered promiscuous mode [ 39.914584][ T6488] syzkaller1: entered allmulticast mode [ 39.916669][ T4831] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 39.919652][ T42] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.919689][ T42] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.919711][ T42] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.919728][ T42] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.024240][ T6504] FAULT_INJECTION: forcing a failure. [ 40.024240][ T6504] name failslab, interval 1, probability 0, space 0, times 0 [ 40.024257][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.1.425 Not tainted syzkaller #0 PREEMPT [ 40.024266][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.024271][ T6504] Call trace: [ 40.024274][ T6504] show_stack+0x2c/0x3c (C) [ 40.024291][ T6504] __dump_stack+0x30/0x40 [ 40.024300][ T6504] dump_stack_lvl+0xd8/0x12c [ 40.024308][ T6504] dump_stack+0x1c/0x28 [ 40.024316][ T6504] should_fail_ex+0x3fc/0x570 [ 40.024329][ T6504] should_failslab+0xc4/0x120 [ 40.024332][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.024337][ T6504] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 40.024347][ T6504] krealloc_node_align_noprof+0x1b4/0x3d0 [ 40.024356][ T6504] kvrealloc_node_align_noprof+0x8c/0x100 [ 40.024364][ T6504] add_expr+0x2a8/0x5d0 [ 40.024371][ T6504] bpf_init_scev+0x190/0x3c0 [ 40.024381][ T6504] bpf_check+0x24e8/0x2948 [ 40.024389][ T6504] bpf_prog_load+0xf6c/0x15a4 [ 40.024399][ T6504] __sys_bpf+0x7e8/0x840 [ 40.024407][ T6504] __arm64_sys_bpf+0xd0/0xec [ 40.024415][ T6504] invoke_syscall+0x98/0x244 [ 40.024423][ T6504] el0_svc_common+0xec/0x23c [ 40.024430][ T6504] do_el0_svc+0x4c/0x5c [ 40.024437][ T6504] el0_svc+0x60/0x1d8 [ 40.024446][ T6504] el0t_64_sync_handler+0x44/0x104 [ 40.024454][ T6504] el0t_64_sync+0x198/0x19c [ 40.030272][ T6500] syzkaller1: entered promiscuous mode [ 40.030285][ T6500] syzkaller1: entered allmulticast mode [ 40.049212][ T6503] EXT4-fs error (device loop2): ext4_get_journal_inode:5971: comm syz.2.426: inode #1024: comm syz.2.426: iget: illegal inode # [ 40.049233][ T6503] loop2: lost filesystem error report for type 5 error -117 [ 40.050038][ T6503] EXT4-fs (loop2): Remounting filesystem read-only [ 40.050053][ T6503] EXT4-fs (loop2): no journal found [ 40.050059][ T6503] EXT4-fs (loop2): can't get journal size [ 40.053662][ T6503] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 40.054792][ T6503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c1a8, mo2=0003] [ 40.054857][ T6503] EXT4-fs (loop2): failed to initialize system zone (-22) [ 40.055038][ T6503] EXT4-fs (loop2): mount failed [ 40.055588][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 40.055599][ C1] EXT4-fs (loop2): initial error at time 40: ext4_get_journal_inode:5971 [ 40.055612][ C1] EXT4-fs (loop2): last error at time 40: ext4_get_journal_inode:5971 [ 40.108296][ T6510] FAULT_INJECTION: forcing a failure. [ 40.108296][ T6510] name failslab, interval 1, probability 0, space 0, times 0 [ 40.108314][ T6510] CPU: 1 UID: 0 PID: 6510 Comm: syz.1.428 Not tainted syzkaller #0 PREEMPT [ 40.108336][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.108341][ T6510] Call trace: [ 40.108344][ T6510] show_stack+0x2c/0x3c (C) [ 40.108359][ T6510] __dump_stack+0x30/0x40 [ 40.108368][ T6510] dump_stack_lvl+0xd8/0x12c [ 40.108375][ T6510] dump_stack+0x1c/0x28 [ 40.108382][ T6510] should_fail_ex+0x3fc/0x570 [ 40.108394][ T6510] should_failslab+0xc4/0x120 [ 40.108402][ T6510] __kvmalloc_node_noprof+0x160/0x7fc [ 40.108410][ T6510] bpf_init_scev+0x138/0x3c0 [ 40.108421][ T6510] bpf_check+0x24e8/0x2948 [ 40.108429][ T6510] bpf_prog_load+0xf6c/0x15a4 [ 40.108438][ T6510] __sys_bpf+0x7e8/0x840 [ 40.108446][ T6510] __arm64_sys_bpf+0xd0/0xec [ 40.108454][ T6510] invoke_syscall+0x98/0x244 [ 40.108462][ T6510] el0_svc_common+0xec/0x23c [ 40.108469][ T6510] do_el0_svc+0x4c/0x5c [ 40.108476][ T6510] el0_svc+0x60/0x1d8 [ 40.108484][ T6510] el0t_64_sync_handler+0x44/0x104 [ 40.108493][ T6510] el0t_64_sync+0x198/0x19c [ 40.171809][ T6517] EXT4-fs: Ignoring removed i_version option [ 40.215346][ T6517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.395095][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.420519][ T6534] syzkaller1: entered promiscuous mode [ 40.420533][ T6534] syzkaller1: entered allmulticast mode [ 40.426630][ T4907] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 40.579851][ T6538] EXT4-fs: Ignoring removed i_version option [ 40.588689][ T6538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.614393][ T6545] FAULT_INJECTION: forcing a failure. [ 40.614393][ T6545] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 40.614411][ T6545] CPU: 0 UID: 0 PID: 6545 Comm: syz.0.440 Not tainted syzkaller #0 PREEMPT [ 40.614427][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.614433][ T6545] Call trace: [ 40.614437][ T6545] show_stack+0x2c/0x3c (C) [ 40.614455][ T6545] __dump_stack+0x30/0x40 [ 40.614464][ T6545] dump_stack_lvl+0xd8/0x12c [ 40.614472][ T6545] dump_stack+0x1c/0x28 [ 40.614479][ T6545] should_fail_ex+0x3fc/0x570 [ 40.614491][ T6545] should_fail_alloc_page+0xec/0x10c [ 40.614500][ T6545] prepare_alloc_pages+0x194/0x484 [ 40.614508][ T6545] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 40.614516][ T6545] alloc_pages_mpol+0x1fc/0x3d0 [ 40.614524][ T6545] folio_alloc_mpol_noprof+0x4c/0x248 [ 40.614533][ T6545] shmem_alloc_folio+0xa0/0x150 [ 40.614543][ T6545] shmem_alloc_and_add_folio+0x28c/0xb30 [ 40.614552][ T6545] shmem_get_folio_gfp+0x4c4/0x1108 [ 40.614562][ T6545] shmem_write_begin+0x160/0x448 [ 40.614571][ T6545] generic_perform_write+0x23c/0x7a4 [ 40.614581][ T6545] shmem_file_write_iter+0x10c/0x134 [ 40.614590][ T6545] vfs_write+0x51c/0xa0c [ 40.614598][ T6545] ksys_write+0x12c/0x228 [ 40.614605][ T6545] __arm64_sys_write+0x84/0x98 [ 40.614613][ T6545] invoke_syscall+0x98/0x244 [ 40.614621][ T6545] el0_svc_common+0xec/0x23c [ 40.614627][ T6545] do_el0_svc+0x4c/0x5c [ 40.614634][ T6545] el0_svc+0x60/0x1d8 [ 40.614643][ T6545] el0t_64_sync_handler+0x44/0x104 [ 40.614652][ T6545] el0t_64_sync+0x198/0x19c [ 40.727156][ T6556] FAULT_INJECTION: forcing a failure. [ 40.727156][ T6556] name failslab, interval 1, probability 0, space 0, times 0 [ 40.727176][ T6556] CPU: 0 UID: 0 PID: 6556 Comm: syz.0.444 Not tainted syzkaller #0 PREEMPT [ 40.727187][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.727192][ T6556] Call trace: [ 40.727195][ T6556] show_stack+0x2c/0x3c (C) [ 40.727210][ T6556] __dump_stack+0x30/0x40 [ 40.727218][ T6556] dump_stack_lvl+0xd8/0x12c [ 40.727225][ T6556] dump_stack+0x1c/0x28 [ 40.727232][ T6556] should_fail_ex+0x3fc/0x570 [ 40.727244][ T6556] should_failslab+0xc4/0x120 [ 40.727252][ T6556] __kvmalloc_node_noprof+0x160/0x7fc [ 40.727261][ T6556] bpf_compute_scc+0x11c/0xaa0 [ 40.727272][ T6556] bpf_check+0x2260/0x2948 [ 40.727279][ T6556] bpf_prog_load+0xf6c/0x15a4 [ 40.727288][ T6556] __sys_bpf+0x7e8/0x840 [ 40.727297][ T6556] __arm64_sys_bpf+0xd0/0xec [ 40.727305][ T6556] invoke_syscall+0x98/0x244 [ 40.727312][ T6556] el0_svc_common+0xec/0x23c [ 40.727319][ T6556] do_el0_svc+0x4c/0x5c [ 40.727326][ T6556] el0_svc+0x60/0x1d8 [ 40.727335][ T6556] el0t_64_sync_handler+0x44/0x104 [ 40.727343][ T6556] el0t_64_sync+0x198/0x19c [ 40.727395][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.816692][ T6568] set_capacity_and_notify: 13 callbacks suppressed [ 40.816711][ T6568] loop0: detected capacity change from 0 to 34816 [ 40.817143][ T6568] EXT4-fs: Ignoring removed i_version option [ 40.842064][ T6568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.883881][ T6574] syzkaller1: entered promiscuous mode [ 40.883898][ T6574] syzkaller1: entered allmulticast mode [ 40.934401][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.953476][ T6577] loop1: detected capacity change from 0 to 256 [ 41.018622][ T6583] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 41.056728][ T6588] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.091530][ T6593] loop0: detected capacity change from 0 to 34816 [ 41.098345][ T6593] EXT4-fs: Ignoring removed i_version option [ 41.117361][ T6593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.147943][ T6591] loop2: detected capacity change from 0 to 256 [ 41.197314][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.205226][ T4729] Bluetooth: hci4: command tx timeout [ 41.223651][ T6609] FAULT_INJECTION: forcing a failure. [ 41.223651][ T6609] name failslab, interval 1, probability 0, space 0, times 0 [ 41.223669][ T6609] CPU: 1 UID: 0 PID: 6609 Comm: syz.5.462 Not tainted syzkaller #0 PREEMPT [ 41.223681][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.223686][ T6609] Call trace: [ 41.223689][ T6609] show_stack+0x2c/0x3c (C) [ 41.223705][ T6609] __dump_stack+0x30/0x40 [ 41.223719][ T6609] dump_stack_lvl+0xd8/0x12c [ 41.223727][ T6609] dump_stack+0x1c/0x28 [ 41.223734][ T6609] should_fail_ex+0x3fc/0x570 [ 41.223747][ T6609] should_failslab+0xc4/0x120 [ 41.223755][ T6609] __kmalloc_cache_node_noprof+0x98/0x618 [ 41.223764][ T6609] __get_vm_area_node+0x188/0x32c [ 41.223773][ T6609] __vmalloc_node_range_noprof+0x2e0/0xeec [ 41.223782][ T6609] __vmalloc_node_noprof+0xec/0x14c [ 41.223790][ T6609] __vmalloc_noprof+0x64/0x8c [ 41.223798][ T6609] vmalloc_array_noprof+0x3c/0x58 [ 41.223806][ T6609] do_replace_finish+0x88/0x10b4 [ 41.223817][ T6609] do_replace+0x358/0x404 [ 41.223824][ T6609] do_ebt_set_ctl+0x280/0xa04 [ 41.223833][ T6609] nf_setsockopt+0xa0/0xe4 [ 41.223841][ T6609] ip_setsockopt+0x118/0x128 [ 41.223851][ T6609] sctp_setsockopt+0x148/0xe70 [ 41.223860][ T6609] sock_common_setsockopt+0xb0/0xcc [ 41.223868][ T6609] do_sock_setsockopt+0x1f0/0x330 [ 41.223877][ T6609] __sys_setsockopt+0x104/0x170 [ 41.223885][ T6609] __arm64_sys_setsockopt+0xc8/0xe4 [ 41.223894][ T6609] invoke_syscall+0x98/0x244 [ 41.223901][ T6609] el0_svc_common+0xec/0x23c [ 41.223908][ T6609] do_el0_svc+0x4c/0x5c [ 41.223915][ T6609] el0_svc+0x60/0x1d8 [ 41.223923][ T6609] el0t_64_sync_handler+0x44/0x104 [ 41.223931][ T6609] el0t_64_sync+0x198/0x19c [ 41.223998][ T6609] syz.5.462: vmalloc error: size 2112, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 41.224055][ T6609] CPU: 1 UID: 0 PID: 6609 Comm: syz.5.462 Not tainted syzkaller #0 PREEMPT [ 41.224063][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.224067][ T6609] Call trace: [ 41.224069][ T6609] show_stack+0x2c/0x3c (C) [ 41.224078][ T6609] __dump_stack+0x30/0x40 [ 41.224085][ T6609] dump_stack_lvl+0xd8/0x12c [ 41.224092][ T6609] dump_stack+0x1c/0x28 [ 41.224099][ T6609] warn_alloc+0x1c4/0x1d8 [ 41.224106][ T6609] __vmalloc_node_range_noprof+0x304/0xeec [ 41.224117][ T6609] __vmalloc_node_noprof+0xec/0x14c [ 41.224125][ T6609] __vmalloc_noprof+0x64/0x8c [ 41.224134][ T6609] vmalloc_array_noprof+0x3c/0x58 [ 41.224141][ T6609] do_replace_finish+0x88/0x10b4 [ 41.224150][ T6609] do_replace+0x358/0x404 [ 41.224158][ T6609] do_ebt_set_ctl+0x280/0xa04 [ 41.224166][ T6609] nf_setsockopt+0xa0/0xe4 [ 41.224174][ T6609] ip_setsockopt+0x118/0x128 [ 41.224184][ T6609] sctp_setsockopt+0x148/0xe70 [ 41.224194][ T6609] sock_common_setsockopt+0xb0/0xcc [ 41.224202][ T6609] do_sock_setsockopt+0x1f0/0x330 [ 41.224212][ T6609] __sys_setsockopt+0x104/0x170 [ 41.224220][ T6609] __arm64_sys_setsockopt+0xc8/0xe4 [ 41.224228][ T6609] invoke_syscall+0x98/0x244 [ 41.224236][ T6609] el0_svc_common+0xec/0x23c [ 41.224242][ T6609] do_el0_svc+0x4c/0x5c [ 41.224249][ T6609] el0_svc+0x60/0x1d8 [ 41.224257][ T6609] el0t_64_sync_handler+0x44/0x104 [ 41.224265][ T6609] el0t_64_sync+0x198/0x19c [ 41.224274][ T6609] Mem-Info: [ 41.224278][ T6609] active_anon:22 inactive_anon:5756 isolated_anon:0 [ 41.224278][ T6609] active_file:2985 inactive_file:14022 isolated_file:0 [ 41.224278][ T6609] unevictable:768 dirty:2080 writeback:0 [ 41.224278][ T6609] slab_reclaimable:9912 slab_unreclaimable:89610 [ 41.224278][ T6609] mapped:29450 shmem:993 pagetables:1077 [ 41.224278][ T6609] sec_pagetables:0 bounce:0 [ 41.224278][ T6609] kernel_misc_reclaimable:0 [ 41.224278][ T6609] free:1464908 free_pcp:16890 free_cma:7616 [ 41.224298][ T6609] Node 0 active_anon:88kB inactive_anon:23024kB active_file:11940kB inactive_file:56088kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:117800kB dirty:8320kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9116kB pagetables:4308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 41.224318][ T6609] Node 0 DMA free:3077888kB boost:0kB min:20404kB low:25504kB high:30604kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 41.224341][ T6609] lowmem_reserve[]: 0 0 3636 3636 3636 [ 41.224359][ T6609] Node 0 Normal free:2781744kB boost:0kB min:24648kB low:30808kB high:36968kB reserved_highatomic:0kB free_highatomic:0kB active_anon:88kB inactive_anon:22924kB active_file:11940kB inactive_file:56088kB unevictable:3072kB writepending:8320kB zspages:0kB present:5242880kB managed:3723372kB mlocked:0kB bounce:0kB free_pcp:67696kB local_pcp:38888kB free_cma:0kB [ 41.224381][ T6609] lowmem_reserve[]: 0 0 0 0 0 [ 41.224397][ T6609] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 41.224453][ T6609] Node 0 Normal: 187*4kB (UME) 278*8kB (UM) 374*16kB (UME) 326*32kB (UME) 183*64kB (UM) 22*128kB (UME) 2*256kB (ME) 4*512kB (UME) 3*1024kB (ME) 7*2048kB (UME) 666*4096kB (M) = 2781820kB [ 41.224526][ T6609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 41.224533][ T6609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 41.224539][ T6609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 41.224545][ T6609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 41.224551][ T6609] 17954 total pagecache pages [ 41.224554][ T6609] 0 pages in swap cache [ 41.224558][ T6609] Free swap = 124996kB [ 41.224561][ T6609] Total swap = 124996kB [ 41.224564][ T6609] 2097152 pages RAM [ 41.224567][ T6609] 0 pages HighMem/MovableOnly [ 41.224570][ T6609] 396261 pages reserved [ 41.224573][ T6609] 8192 pages cma reserved [ 41.224576][ T6609] 0 pages hwpoisoned [ 41.259284][ T6613] loop5: detected capacity change from 0 to 33280 [ 41.269795][ T6613] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.286792][ T6613] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 41.286902][ T6613] EXT4-fs (loop5): orphan cleanup on readonly fs [ 41.288538][ T6613] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 41.288601][ T6613] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 41.288611][ T6613] EXT4-fs error (device loop5): ext4_acquire_dquot:7120: comm syz.5.463: Failed to acquire dquot type 1 [ 41.288622][ T6613] loop5: lost filesystem error report for type 5 error -5 [ 41.294929][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 41.294942][ C1] EXT4-fs (loop5): initial error at time 41: ext4_acquire_dquot:7120 [ 41.294958][ C1] EXT4-fs (loop5): last error at time 41: ext4_acquire_dquot:7120 [ 41.326825][ T6613] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.463: bg 0: block 40: padding at end of block bitmap is not set [ 41.326856][ T6613] loop5: lost filesystem error report for type 5 error -117 [ 41.345475][ T6613] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 41.345503][ T6613] loop5: lost filesystem error report for type 5 error -117 [ 41.347693][ T6613] EXT4-fs warning (device loop5): ext4_evict_inode:261: inode #16: comm syz.5.463: data will be lost [ 41.347890][ T6613] EXT4-fs (loop5): 1 truncate cleaned up [ 41.380152][ T6618] nfs4: Bad value for 'minorversion' [ 41.396170][ T6611] netlink: 'syz.0.461': attribute type 32 has an invalid length. [ 41.460277][ T6639] FAULT_INJECTION: forcing a failure. [ 41.460277][ T6639] name failslab, interval 1, probability 0, space 0, times 0 [ 41.460294][ T6639] CPU: 0 UID: 0 PID: 6639 Comm: syz.0.469 Not tainted syzkaller #0 PREEMPT [ 41.460304][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.460309][ T6639] Call trace: [ 41.460311][ T6639] show_stack+0x2c/0x3c (C) [ 41.460325][ T6639] __dump_stack+0x30/0x40 [ 41.460333][ T6639] dump_stack_lvl+0xd8/0x12c [ 41.460340][ T6639] dump_stack+0x1c/0x28 [ 41.460347][ T6639] should_fail_ex+0x3fc/0x570 [ 41.460358][ T6639] should_failslab+0xc4/0x120 [ 41.460366][ T6639] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 41.460375][ T6639] krealloc_node_align_noprof+0x1b4/0x3d0 [ 41.460383][ T6639] kvrealloc_node_align_noprof+0x8c/0x100 [ 41.460391][ T6639] add_expr+0x2a8/0x5d0 [ 41.460398][ T6639] bpf_compute_scev+0x9c0/0x51cc [ 41.460409][ T6639] bpf_check+0x2508/0x2948 [ 41.460416][ T6639] bpf_prog_load+0xf6c/0x15a4 [ 41.460425][ T6639] __sys_bpf+0x7e8/0x840 [ 41.460434][ T6639] __arm64_sys_bpf+0xd0/0xec [ 41.460442][ T6639] invoke_syscall+0x98/0x244 [ 41.460449][ T6639] el0_svc_common+0xec/0x23c [ 41.460456][ T6639] do_el0_svc+0x4c/0x5c [ 41.460463][ T6639] el0_svc+0x60/0x1d8 [ 41.460472][ T6639] el0t_64_sync_handler+0x44/0x104 [ 41.460480][ T6639] el0t_64_sync+0x198/0x19c [ 41.475374][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.475403][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.475418][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.475433][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.527986][ T6646] loop0: detected capacity change from 0 to 34816 [ 41.528788][ T6646] EXT4-fs: Ignoring removed i_version option [ 41.572419][ T6653] loop5: detected capacity change from 0 to 32896 [ 41.592408][ T6657] FAULT_INJECTION: forcing a failure. [ 41.592408][ T6657] name failslab, interval 1, probability 0, space 0, times 0 [ 41.592423][ T6657] CPU: 1 UID: 0 PID: 6657 Comm: syz.1.475 Not tainted syzkaller #0 PREEMPT [ 41.592432][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.592437][ T6657] Call trace: [ 41.592440][ T6657] show_stack+0x2c/0x3c (C) [ 41.592453][ T6657] __dump_stack+0x30/0x40 [ 41.592461][ T6657] dump_stack_lvl+0xd8/0x12c [ 41.592468][ T6657] dump_stack+0x1c/0x28 [ 41.592475][ T6657] should_fail_ex+0x3fc/0x570 [ 41.592487][ T6657] should_failslab+0xc4/0x120 [ 41.592495][ T6657] __kvmalloc_node_noprof+0x160/0x7fc [ 41.592504][ T6657] bpf_compute_idoms+0xb4/0xe04 [ 41.592514][ T6657] bpf_check+0x22a8/0x2948 [ 41.592522][ T6657] bpf_prog_load+0xf6c/0x15a4 [ 41.592531][ T6657] __sys_bpf+0x7e8/0x840 [ 41.592539][ T6657] __arm64_sys_bpf+0xd0/0xec [ 41.592547][ T6657] invoke_syscall+0x98/0x244 [ 41.592555][ T6657] el0_svc_common+0xec/0x23c [ 41.592561][ T6657] do_el0_svc+0x4c/0x5c [ 41.592568][ T6657] el0_svc+0x60/0x1d8 [ 41.592577][ T6657] el0t_64_sync_handler+0x44/0x104 [ 41.592585][ T6657] el0t_64_sync+0x198/0x19c [ 41.652896][ T6663] FAULT_INJECTION: forcing a failure. [ 41.652896][ T6663] name failslab, interval 1, probability 0, space 0, times 0 [ 41.652914][ T6663] CPU: 0 UID: 0 PID: 6663 Comm: syz.3.479 Not tainted syzkaller #0 PREEMPT [ 41.652924][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.652929][ T6663] Call trace: [ 41.652932][ T6663] show_stack+0x2c/0x3c (C) [ 41.652947][ T6663] __dump_stack+0x30/0x40 [ 41.652956][ T6663] dump_stack_lvl+0xd8/0x12c [ 41.652964][ T6663] dump_stack+0x1c/0x28 [ 41.652971][ T6663] should_fail_ex+0x3fc/0x570 [ 41.652985][ T6663] should_failslab+0xc4/0x120 [ 41.652994][ T6663] __kmalloc_cache_node_noprof+0x98/0x618 [ 41.653003][ T6663] alloc_cpumask_var_node+0x90/0x138 [ 41.653013][ T6663] group_cpus_evenly+0xd0/0x694 [ 41.653025][ T6663] blk_mq_map_queues+0xa8/0x3bc [ 41.653037][ T6663] blk_mq_update_queue_map+0x2f4/0x380 [ 41.653046][ T6663] blk_mq_alloc_tag_set+0x694/0xb90 [ 41.653054][ T6663] loop_add+0x31c/0x8e4 [ 41.653067][ T6663] loop_control_ioctl+0x138/0x510 [ 41.653079][ T6663] __arm64_sys_ioctl+0x154/0x1cc [ 41.653088][ T6663] invoke_syscall+0x98/0x244 [ 41.653097][ T6663] el0_svc_common+0xec/0x23c [ 41.653105][ T6663] do_el0_svc+0x4c/0x5c [ 41.653112][ T6663] el0_svc+0x60/0x1d8 [ 41.653122][ T6663] el0t_64_sync_handler+0x44/0x104 [ 41.653132][ T6663] el0t_64_sync+0x198/0x19c [ 41.653141][ T6663] => alloc_cpumask_var: failed! [ 41.653145][ T6663] CPU: 0 UID: 0 PID: 6663 Comm: syz.3.479 Not tainted syzkaller #0 PREEMPT [ 41.653154][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.653158][ T6663] Call trace: [ 41.653160][ T6663] show_stack+0x2c/0x3c (C) [ 41.653168][ T6663] __dump_stack+0x30/0x40 [ 41.653176][ T6663] dump_stack_lvl+0xd8/0x12c [ 41.653184][ T6663] dump_stack+0x1c/0x28 [ 41.653191][ T6663] alloc_cpumask_var_node+0xfc/0x138 [ 41.653199][ T6663] group_cpus_evenly+0xd0/0x694 [ 41.653211][ T6663] blk_mq_map_queues+0xa8/0x3bc [ 41.653221][ T6663] blk_mq_update_queue_map+0x2f4/0x380 [ 41.653230][ T6663] blk_mq_alloc_tag_set+0x694/0xb90 [ 41.653238][ T6663] loop_add+0x31c/0x8e4 [ 41.653250][ T6663] loop_control_ioctl+0x138/0x510 [ 41.653261][ T6663] __arm64_sys_ioctl+0x154/0x1cc [ 41.653270][ T6663] invoke_syscall+0x98/0x244 [ 41.653277][ T6663] el0_svc_common+0xec/0x23c [ 41.653285][ T6663] do_el0_svc+0x4c/0x5c [ 41.653293][ T6663] el0_svc+0x60/0x1d8 [ 41.653302][ T6663] el0t_64_sync_handler+0x44/0x104 [ 41.653311][ T6663] el0t_64_sync+0x198/0x19c [ 41.677898][ T6665] fuse: Unknown parameter 'fsuuid' [ 41.752773][ T6671] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.778262][ T6676] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 41.778277][ T6676] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 41.778325][ T6676] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 42.079237][ T6684] loop1: detected capacity change from 0 to 8192 [ 42.090062][ T6684] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.799446][ T6688] xt_IDLETIMER: timeout value is zero [ 42.805413][ T6690] Cannot find add_set index 0 as target [ 42.883648][ T6697] loop5: detected capacity change from 0 to 33792 [ 42.889638][ T6697] EXT4-fs: Ignoring removed oldalloc option [ 42.975621][ T6706] fuse: Bad value for 'fd' [ 43.131658][ T6719] __nla_validate_parse: 62 callbacks suppressed [ 43.131676][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 43.140436][ T6719] bond1: option ad_user_port_key: invalid value (65286) [ 43.140449][ T6719] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 43.141348][ T6719] bond1 (unregistering): Released all slaves [ 43.181956][ T6728] batman_adv: batadv0: Adding interface: gretap1 [ 43.181968][ T6728] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.181984][ T6728] batman_adv: batadv0: Interface activated: gretap1 [ 43.227518][ T6736] x_tables: ip6_tables: socket.2 match: invalid size 8 (kernel) != (user) 48 [ 43.264226][ T6742] loop5: detected capacity change from 0 to 33280 [ 43.275704][ T6742] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 43.275725][ T6742] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 43.282257][ T6742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 43.282297][ T6742] System zones: 1-12 [ 43.284173][ T4729] Bluetooth: hci4: command tx timeout [ 43.287533][ T6742] EXT4-fs (loop5): 1 truncate cleaned up [ 43.297297][ T6747] EXT4-fs (loop1): Encoding requested by superblock is unknown [ 43.347402][ T6755] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 43.452546][ T6769] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.453576][ T6769] ip_tables: iptables: counters copy to user failed while replacing table [ 43.519469][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 43.520630][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 43.566248][ T6778] FAULT_INJECTION: forcing a failure. [ 43.566248][ T6778] name fail_futex, interval 1, probability 0, space 0, times 1 [ 43.566274][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.5.523 Not tainted syzkaller #0 PREEMPT [ 43.566290][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 43.566297][ T6778] Call trace: [ 43.566300][ T6778] show_stack+0x2c/0x3c (C) [ 43.566315][ T6778] __dump_stack+0x30/0x40 [ 43.566324][ T6778] dump_stack_lvl+0xd8/0x12c [ 43.566332][ T6778] dump_stack+0x1c/0x28 [ 43.566339][ T6778] should_fail_ex+0x3fc/0x570 [ 43.566353][ T6778] should_fail+0x14/0x24 [ 43.566365][ T6778] get_futex_key+0x1e0/0x118c [ 43.566376][ T6778] futex_wake+0x10c/0x594 [ 43.566387][ T6778] do_futex+0x2c4/0x378 [ 43.566398][ T6778] __arm64_sys_futex+0x2e4/0x418 [ 43.566409][ T6778] invoke_syscall+0x98/0x244 [ 43.566417][ T6778] el0_svc_common+0xec/0x23c [ 43.566425][ T6778] do_el0_svc+0x4c/0x5c [ 43.566432][ T6778] el0_svc+0x60/0x1d8 [ 43.566443][ T6778] el0t_64_sync_handler+0x44/0x104 [ 43.566452][ T6778] el0t_64_sync+0x198/0x19c [ 43.680286][ T6787] FAULT_INJECTION: forcing a failure. [ 43.680286][ T6787] name fail_futex, interval 1, probability 0, space 0, times 0 [ 43.680306][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: syz.5.527 Not tainted syzkaller #0 PREEMPT [ 43.680318][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 43.680324][ T6787] Call trace: [ 43.680327][ T6787] show_stack+0x2c/0x3c (C) [ 43.680342][ T6787] __dump_stack+0x30/0x40 [ 43.680350][ T6787] dump_stack_lvl+0xd8/0x12c [ 43.680358][ T6787] dump_stack+0x1c/0x28 [ 43.680365][ T6787] should_fail_ex+0x3fc/0x570 [ 43.680379][ T6787] should_fail+0x14/0x24 [ 43.680391][ T6787] get_futex_key+0x1e0/0x118c [ 43.680402][ T6787] futex_wake+0x10c/0x594 [ 43.680413][ T6787] do_futex+0x2c4/0x378 [ 43.680423][ T6787] __arm64_sys_futex+0x2e4/0x418 [ 43.680434][ T6787] invoke_syscall+0x98/0x244 [ 43.680447][ T6787] el0_svc_common+0xec/0x23c [ 43.680455][ T6787] do_el0_svc+0x4c/0x5c [ 43.680463][ T6787] el0_svc+0x60/0x1d8 [ 43.680473][ T6787] el0t_64_sync_handler+0x44/0x104 [ 43.680483][ T6787] el0t_64_sync+0x198/0x19c [ 43.890109][ T6808] netlink: 'syz.0.531': attribute type 15 has an invalid length. [ 43.890168][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.531'. [ 44.025371][ T6808] EXT4-fs error (device loop0): ext4_readdir:226: inode #2: comm syz.0.531: path /100/file0: directory fails checksum at offset 0 [ 44.026388][ T6808] EXT4-fs (loop0): Remounting filesystem read-only [ 44.083734][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 44.093327][ T6813] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 44.097277][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'. [ 44.200459][ T6819] FAULT_INJECTION: forcing a failure. [ 44.200459][ T6819] name failslab, interval 1, probability 0, space 0, times 0 [ 44.200477][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.1.540 Not tainted syzkaller #0 PREEMPT [ 44.200487][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 44.200492][ T6819] Call trace: [ 44.200494][ T6819] show_stack+0x2c/0x3c (C) [ 44.200513][ T6819] __dump_stack+0x30/0x40 [ 44.200522][ T6819] dump_stack_lvl+0xd8/0x12c [ 44.200530][ T6819] dump_stack+0x1c/0x28 [ 44.200537][ T6819] should_fail_ex+0x3fc/0x570 [ 44.200550][ T6819] should_failslab+0xc4/0x120 [ 44.200558][ T6819] __kmalloc_cache_node_noprof+0x98/0x618 [ 44.200567][ T6819] __get_vm_area_node+0x188/0x32c [ 44.200575][ T6819] __vmalloc_node_range_noprof+0x2e0/0xeec [ 44.200584][ T6819] __vmalloc_node_noprof+0xec/0x14c [ 44.200593][ T6819] __vmalloc_noprof+0x64/0x8c [ 44.200601][ T6819] bpf_check+0x1040/0x2948 [ 44.200609][ T6819] bpf_prog_load+0xf6c/0x15a4 [ 44.200618][ T6819] __sys_bpf+0x7e8/0x840 [ 44.200627][ T6819] __arm64_sys_bpf+0xd0/0xec [ 44.200635][ T6819] invoke_syscall+0x98/0x244 [ 44.200642][ T6819] el0_svc_common+0xec/0x23c [ 44.200649][ T6819] do_el0_svc+0x4c/0x5c [ 44.200656][ T6819] el0_svc+0x60/0x1d8 [ 44.200665][ T6819] el0t_64_sync_handler+0x44/0x104 [ 44.200673][ T6819] el0t_64_sync+0x198/0x19c [ 44.250656][ T6821] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 44.268087][ T6821] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 44.268129][ T6821] System zones: 0-2, 18-18, 34-34 [ 44.272273][ T6821] EXT4-fs (loop1): 1 orphan inode deleted [ 44.284200][ T3274] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 44.284255][ T3274] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:8: Failed to release dquot type 1 [ 44.300838][ T6829] dummy0: entered promiscuous mode [ 44.301619][ T6829] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 44.301922][ T6829] debugfs: 'hsr1' already exists in 'hsr' [ 44.301929][ T6829] Cannot create hsr debugfs directory [ 44.301961][ T6829] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 44.301970][ T6829] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 44.302033][ T6829] hsr1: entered allmulticast mode [ 44.302040][ T6829] dummy0: entered allmulticast mode [ 44.302050][ T6829] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 44.461188][ T6841] capability: warning: `syz.3.547' uses 32-bit capabilities (legacy support in use) [ 44.509681][ T6843] bio_check_eod: 1 callbacks suppressed [ 44.509694][ T6843] syz.1.549: attempt to access beyond end of device [ 44.509694][ T6843] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 44.509707][ T6843] buffer_io_error: 7 callbacks suppressed [ 44.509712][ T6843] Buffer I/O error on dev loop1, logical block 57847, async page read [ 44.511183][ T6843] syz.1.549: attempt to access beyond end of device [ 44.511183][ T6843] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 44.511199][ T6843] Buffer I/O error on dev loop1, logical block 57847, async page read [ 44.511221][ T6843] syz.1.549: attempt to access beyond end of device [ 44.511221][ T6843] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 44.511233][ T6843] Buffer I/O error on dev loop1, logical block 57847, async page read [ 44.511251][ T6843] syz.1.549: attempt to access beyond end of device [ 44.511251][ T6843] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 44.511261][ T6843] Buffer I/O error on dev loop1, logical block 57847, async page read [ 44.511279][ T6843] syz.1.549: attempt to access beyond end of device [ 44.511279][ T6843] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 44.511289][ T6843] Buffer I/O error on dev loop1, logical block 57847, async page read [ 44.511306][ T6843] syz.1.549: attempt to access beyond end of device [ 44.511306][ T6843] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 44.511315][ T6843] Buffer I/O error on dev loop1, logical block 57847, async page read [ 44.511332][ T6843] syz.1.549: attempt to access beyond end of device [ 44.511332][ T6843] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 44.511341][ T6843] Buffer I/O error on dev loop1, logical block 57847, async page read [ 44.511358][ T6843] syz.1.549: attempt to access beyond end of device [ 44.511358][ T6843] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 44.511367][ T6843] Buffer I/O error on dev loop1, logical block 57847, async page read [ 44.511383][ T6843] syz.1.549: attempt to access beyond end of device [ 44.511383][ T6843] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 44.511393][ T6843] Buffer I/O error on dev loop1, logical block 57847, async page read [ 44.511462][ T6843] syz.1.549: attempt to access beyond end of device [ 44.511462][ T6843] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 44.511473][ T6843] Buffer I/O error on dev loop1, logical block 57847, async page read [ 44.559844][ T6847] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 44.671080][ T6864] FAULT_INJECTION: forcing a failure. [ 44.671080][ T6864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.671097][ T6864] CPU: 1 UID: 0 PID: 6864 Comm: syz.1.556 Not tainted syzkaller #0 PREEMPT [ 44.671106][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 44.671111][ T6864] Call trace: [ 44.671114][ T6864] show_stack+0x2c/0x3c (C) [ 44.671129][ T6864] __dump_stack+0x30/0x40 [ 44.671138][ T6864] dump_stack_lvl+0xd8/0x12c [ 44.671145][ T6864] dump_stack+0x1c/0x28 [ 44.671152][ T6864] should_fail_ex+0x3fc/0x570 [ 44.671164][ T6864] should_fail+0x14/0x24 [ 44.671174][ T6864] should_fail_usercopy+0x20/0x30 [ 44.671181][ T6864] bpf_log_attr_finalize+0x12c/0x28c [ 44.671190][ T6864] bpf_check+0x1994/0x2948 [ 44.671198][ T6864] bpf_prog_load+0xf6c/0x15a4 [ 44.671207][ T6864] __sys_bpf+0x7e8/0x840 [ 44.671215][ T6864] __arm64_sys_bpf+0xd0/0xec [ 44.671223][ T6864] invoke_syscall+0x98/0x244 [ 44.671231][ T6864] el0_svc_common+0xec/0x23c [ 44.671238][ T6864] do_el0_svc+0x4c/0x5c [ 44.671245][ T6864] el0_svc+0x60/0x1d8 [ 44.671254][ T6864] el0t_64_sync_handler+0x44/0x104 [ 44.671262][ T6864] el0t_64_sync+0x198/0x19c [ 44.674426][ T6859] EXT4-fs: Ignoring removed i_version option [ 44.775302][ T6871] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #12: block 7: comm syz.2.551: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 44.782198][ T6871] EXT4-fs (loop2): Remounting filesystem read-only [ 44.837666][ T6887] netlink: 'syz.1.561': attribute type 39 has an invalid length. [ 44.837689][ T6887] macvlan1: entered promiscuous mode [ 44.837698][ T6887] macvlan1: entered allmulticast mode [ 44.865237][ T6884] netlink: 64 bytes leftover after parsing attributes in process `syz.5.562'. [ 44.871321][ T6891] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 44.871390][ T6885] syzkaller1: entered promiscuous mode [ 44.871402][ T6885] syzkaller1: entered allmulticast mode [ 44.879214][ T5820] IPVS: starting estimator thread 0... [ 44.963780][ T6892] IPVS: using max 59 ests per chain, 141600 per kthread [ 44.974179][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.568'. [ 44.974371][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.568'. [ 44.998398][ T6908] tipc: Started in network mode [ 44.998414][ T6908] tipc: Node identity fa562fbdeb94, cluster identity 4711 [ 44.999793][ T6908] tipc: Enabled bearer , priority 0 [ 44.999821][ T6909] syzkaller0: entered promiscuous mode [ 44.999830][ T6909] syzkaller0: entered allmulticast mode [ 45.002335][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.002432][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.002509][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.002585][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.002958][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.003211][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.003299][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.003378][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.003477][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.003552][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.003627][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.003707][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.003808][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.003889][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.003964][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004043][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004119][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004193][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004267][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004342][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004416][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004489][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004578][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004651][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004740][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004818][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004911][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.004983][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005061][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005141][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005220][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005291][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005377][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005457][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005536][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005608][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005697][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005789][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005870][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.005942][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.006029][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.006106][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.006867][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.006949][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.007024][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.007097][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.007171][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.007253][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.007327][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.007400][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.008628][ T6910] tipc: Resetting bearer [ 45.009517][ T6909] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 45.010284][ T6909] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 45.010338][ T6909] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 45.010381][ T6909] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 45.010577][ T6909] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 45.011297][ T6909] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 45.011343][ T6909] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 45.011381][ T6909] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 45.011419][ T6909] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 45.011455][ T6909] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 45.011860][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.011974][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.012068][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.012896][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.012982][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.015141][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.015263][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.015349][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.020315][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.020405][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.020484][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.020559][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.020634][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.020741][ T6908] tipc: Enabling of bearer rejected, already enabled [ 45.185912][ T6922] EXT4-fs: Ignoring removed i_version option [ 45.351270][ T6929] FAULT_INJECTION: forcing a failure. [ 45.351270][ T6929] name failslab, interval 1, probability 0, space 0, times 0 [ 45.351287][ T6929] CPU: 0 UID: 0 PID: 6929 Comm: syz.5.576 Not tainted syzkaller #0 PREEMPT [ 45.351297][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 45.351302][ T6929] Call trace: [ 45.351305][ T6929] show_stack+0x2c/0x3c (C) [ 45.351319][ T6929] __dump_stack+0x30/0x40 [ 45.351327][ T6929] dump_stack_lvl+0xd8/0x12c [ 45.351334][ T6929] dump_stack+0x1c/0x28 [ 45.351340][ T6929] should_fail_ex+0x3fc/0x570 [ 45.351352][ T6929] should_failslab+0xc4/0x120 [ 45.351360][ T6929] kmem_cache_alloc_noprof+0x94/0x5d4 [ 45.351368][ T6929] security_inode_alloc+0x40/0x304 [ 45.351376][ T6929] inode_init_always_gfp+0x704/0xb20 [ 45.351387][ T6929] alloc_inode+0x9c/0x198 [ 45.351396][ T6929] iget5_locked+0x5c/0xc0 [ 45.351406][ T6929] ovl_get_trap_inode+0x84/0x198 [ 45.351416][ T6929] ovl_setup_trap+0x34/0xc8 [ 45.351424][ T6929] ovl_get_workdir+0x208/0x1338 [ 45.351431][ T6929] ovl_fill_super+0x2108/0x3398 [ 45.351439][ T6929] get_tree_super+0xb8/0x148 [ 45.351448][ T6929] get_tree_nodev+0x2c/0x3c [ 45.351457][ T6929] ovl_get_tree+0x28/0x38 [ 45.351464][ T6929] vfs_get_tree+0x90/0x28c [ 45.351473][ T6929] fc_mount+0x24/0xac [ 45.351483][ T6929] do_new_mount+0x2a4/0x538 [ 45.351492][ T6929] path_mount+0x5f0/0xa88 [ 45.351502][ T6929] do_mount+0xe8/0x148 [ 45.351511][ T6929] __arm64_sys_mount+0x33c/0x388 [ 45.351521][ T6929] invoke_syscall+0x98/0x244 [ 45.351528][ T6929] el0_svc_common+0xec/0x23c [ 45.351535][ T6929] do_el0_svc+0x4c/0x5c [ 45.351542][ T6929] el0_svc+0x60/0x1d8 [ 45.351551][ T6929] el0t_64_sync_handler+0x44/0x104 [ 45.351559][ T6929] el0t_64_sync+0x198/0x19c [ 45.363405][ T4729] Bluetooth: hci4: command tx timeout [ 45.402545][ T6932] netlink: 36 bytes leftover after parsing attributes in process `syz.2.577'. [ 45.467664][ T6944] netlink: 14 bytes leftover after parsing attributes in process `syz.2.583'. [ 45.513969][ T6951] EXT4-fs: Ignoring removed i_version option [ 45.704613][ T6969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.704649][ T6969] block device autoloading is deprecated and will be removed. [ 45.794834][ T6975] nvme_rdma: malformed address passed: 127.:4420 [ 45.831991][ T6969] md/raid1:md5: active with 1 out of 3 mirrors [ 45.832612][ T6969] set_capacity_and_notify: 14 callbacks suppressed [ 45.832621][ T6969] md5: detected capacity change from 0 to 4096 [ 45.883155][ T6987] netlink: 'syz.1.597': attribute type 1 has an invalid length. [ 45.898576][ T6987] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 45.900698][ T6987] macvlan2: entered promiscuous mode [ 45.900709][ T6987] macvlan2: entered allmulticast mode [ 45.900940][ T6987] bond1: entered promiscuous mode [ 45.901297][ T6987] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 45.901627][ T6987] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 45.901746][ T6987] bond1: left promiscuous mode [ 45.934513][ T6981] md_update_sb: can't update sb for read-only array md5 [ 45.939386][ T6983] loop3: detected capacity change from 0 to 32768 [ 45.965940][ T6995] FAULT_INJECTION: forcing a failure. [ 45.965940][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 45.965959][ T6995] CPU: 0 UID: 0 PID: 6995 Comm: syz.0.600 Not tainted syzkaller #0 PREEMPT [ 45.965971][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 45.965977][ T6995] Call trace: [ 45.965980][ T6995] show_stack+0x2c/0x3c (C) [ 45.965996][ T6995] __dump_stack+0x30/0x40 [ 45.966005][ T6995] dump_stack_lvl+0xd8/0x12c [ 45.966013][ T6995] dump_stack+0x1c/0x28 [ 45.966020][ T6995] should_fail_ex+0x3fc/0x570 [ 45.966034][ T6995] should_failslab+0xc4/0x120 [ 45.966043][ T6995] __kmalloc_cache_node_noprof+0x98/0x618 [ 45.966052][ T6995] alloc_cpumask_var_node+0x90/0x138 [ 45.966062][ T6995] alloc_workqueue_attrs_noprof+0x84/0x154 [ 45.966072][ T6995] __alloc_workqueue+0x16c/0x121c [ 45.966080][ T6995] alloc_workqueue_va+0x5c/0x138 [ 45.966088][ T6995] alloc_workqueue_noprof+0xe0/0x130 [ 45.966095][ T6995] dm_integrity_ctr+0x1c24/0x4688 [ 45.966108][ T6995] dm_table_add_target+0x44c/0xb18 [ 45.966119][ T6995] table_load+0x27c/0x764 [ 45.966130][ T6995] dm_ctl_ioctl+0x884/0xbbc [ 45.966142][ T6995] __arm64_sys_ioctl+0x154/0x1cc [ 45.966151][ T6995] invoke_syscall+0x98/0x244 [ 45.966159][ T6995] el0_svc_common+0xec/0x23c [ 45.966167][ T6995] do_el0_svc+0x4c/0x5c [ 45.966174][ T6995] el0_svc+0x60/0x1d8 [ 45.966184][ T6995] el0t_64_sync_handler+0x44/0x104 [ 45.966193][ T6995] el0t_64_sync+0x198/0x19c [ 45.966203][ T6995] => alloc_cpumask_var: failed! [ 45.966207][ T6995] CPU: 0 UID: 0 PID: 6995 Comm: syz.0.600 Not tainted syzkaller #0 PREEMPT [ 45.966216][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 45.966220][ T6995] Call trace: [ 45.966222][ T6995] show_stack+0x2c/0x3c (C) [ 45.966230][ T6995] __dump_stack+0x30/0x40 [ 45.966238][ T6995] dump_stack_lvl+0xd8/0x12c [ 45.966245][ T6995] dump_stack+0x1c/0x28 [ 45.966253][ T6995] alloc_cpumask_var_node+0xfc/0x138 [ 45.966261][ T6995] alloc_workqueue_attrs_noprof+0x84/0x154 [ 45.966269][ T6995] __alloc_workqueue+0x16c/0x121c [ 45.966277][ T6995] alloc_workqueue_va+0x5c/0x138 [ 45.966285][ T6995] alloc_workqueue_noprof+0xe0/0x130 [ 45.966293][ T6995] dm_integrity_ctr+0x1c24/0x4688 [ 45.966305][ T6995] dm_table_add_target+0x44c/0xb18 [ 45.966314][ T6995] table_load+0x27c/0x764 [ 45.966326][ T6995] dm_ctl_ioctl+0x884/0xbbc [ 45.966337][ T6995] __arm64_sys_ioctl+0x154/0x1cc [ 45.966345][ T6995] invoke_syscall+0x98/0x244 [ 45.966353][ T6995] el0_svc_common+0xec/0x23c [ 45.966361][ T6995] do_el0_svc+0x4c/0x5c [ 45.966368][ T6995] el0_svc+0x60/0x1d8 [ 45.966377][ T6995] el0t_64_sync_handler+0x44/0x104 [ 45.966387][ T6995] el0t_64_sync+0x198/0x19c [ 45.968507][ T6995] device-mapper: table: 248:5: integrity: Cannot allocate workqueue (-ENOMEM) [ 45.968520][ T6995] device-mapper: ioctl: error adding target to table [ 46.027903][ T6983] loop3: p1 p2 < > p3 < p5 p6 > p4 < p7 > [ 46.034095][ T6983] loop3: p5 start 100669496 is beyond EOD, truncated [ 46.035490][ T6983] loop3: p6 size 218103808 extends beyond EOD, truncated [ 46.065727][ T7000] pimreg3: entered allmulticast mode [ 46.123443][ T55] tipc: Node number set to 297938877 [ 46.252576][ T7019] overlay: ./file0 is not a directory [ 46.302810][ T7020] netlink: 'syz.0.607': attribute type 9 has an invalid length. [ 46.790010][ T7017] netlink: 'syz.2.605': attribute type 39 has an invalid length. [ 46.819176][ T7030] FAULT_INJECTION: forcing a failure. [ 46.819176][ T7030] name failslab, interval 1, probability 0, space 0, times 0 [ 46.819198][ T7030] CPU: 0 UID: 0 PID: 7030 Comm: syz.1.609 Not tainted syzkaller #0 PREEMPT [ 46.819209][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 46.819215][ T7030] Call trace: [ 46.819218][ T7030] show_stack+0x2c/0x3c (C) [ 46.819232][ T7030] __dump_stack+0x30/0x40 [ 46.819239][ T7030] dump_stack_lvl+0xd8/0x12c [ 46.819247][ T7030] dump_stack+0x1c/0x28 [ 46.819253][ T7030] should_fail_ex+0x3fc/0x570 [ 46.819265][ T7030] should_failslab+0xc4/0x120 [ 46.819273][ T7030] kmem_cache_alloc_noprof+0x94/0x5d4 [ 46.819281][ T7030] __kernfs_new_node+0xf0/0x7d8 [ 46.819291][ T7030] kernfs_new_node+0xf4/0x148 [ 46.819301][ T7030] __kernfs_create_file+0x60/0x2e0 [ 46.819308][ T7030] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 46.819316][ T7030] internal_create_group+0x550/0xb30 [ 46.819324][ T7030] internal_create_groups+0x64/0x138 [ 46.819332][ T7030] sysfs_create_groups+0x2c/0x3c [ 46.819340][ T7030] device_add_attrs+0x17c/0x4e4 [ 46.819348][ T7030] device_add+0x420/0x9e0 [ 46.819355][ T7030] netdev_register_kobject+0x184/0x328 [ 46.819365][ T7030] register_netdevice+0xee0/0x16d0 [ 46.819376][ T7030] ip_tunnel_newlink+0x20c/0x560 [ 46.819384][ T7030] erspan_newlink+0x1a0/0x208 [ 46.819392][ T7030] rtnl_newlink_create+0x294/0x6b8 [ 46.819400][ T7030] rtnl_newlink+0xfe8/0x1390 [ 46.819407][ T7030] rtnetlink_rcv_msg+0x66c/0x9bc [ 46.819415][ T7030] netlink_rcv_skb+0x238/0x414 [ 46.819424][ T7030] rtnetlink_rcv+0x28/0x38 [ 46.819431][ T7030] netlink_unicast+0x73c/0x934 [ 46.819439][ T7030] netlink_sendmsg+0x670/0x98c [ 46.819448][ T7030] __sock_sendmsg+0xc8/0x188 [ 46.819457][ T7030] ____sys_sendmsg+0x3d0/0x6c8 [ 46.819465][ T7030] ___sys_sendmsg+0x198/0x224 [ 46.819473][ T7030] __sys_sendmsg+0x158/0x204 [ 46.819482][ T7030] __arm64_sys_sendmsg+0x88/0x9c [ 46.819490][ T7030] invoke_syscall+0x98/0x244 [ 46.819498][ T7030] el0_svc_common+0xec/0x23c [ 46.819505][ T7030] do_el0_svc+0x4c/0x5c [ 46.819511][ T7030] el0_svc+0x60/0x1d8 [ 46.819520][ T7030] el0t_64_sync_handler+0x44/0x104 [ 46.819529][ T7030] el0t_64_sync+0x198/0x19c [ 46.828245][ T7028] loop5: detected capacity change from 0 to 49152 [ 46.877054][ T7028] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 46.882634][ T7032] FAULT_INJECTION: forcing a failure. [ 46.882634][ T7032] name failslab, interval 1, probability 0, space 0, times 0 [ 46.882649][ T7032] CPU: 0 UID: 0 PID: 7032 Comm: syz.3.611 Not tainted syzkaller #0 PREEMPT [ 46.882661][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 46.882667][ T7032] Call trace: [ 46.882670][ T7032] show_stack+0x2c/0x3c (C) [ 46.882689][ T7032] __dump_stack+0x30/0x40 [ 46.882698][ T7032] dump_stack_lvl+0xd8/0x12c [ 46.882714][ T7032] dump_stack+0x1c/0x28 [ 46.882723][ T7032] should_fail_ex+0x3fc/0x570 [ 46.882737][ T7032] should_failslab+0xc4/0x120 [ 46.882745][ T7032] kmem_cache_alloc_node_noprof+0x98/0x604 [ 46.882753][ T7032] __alloc_skb+0x1f0/0x610 [ 46.882762][ T7032] netlink_alloc_large_skb+0xd4/0x114 [ 46.882771][ T7032] netlink_sendmsg+0x4ac/0x98c [ 46.882780][ T7032] __sock_sendmsg+0xc8/0x188 [ 46.882788][ T7032] ____sys_sendmsg+0x3d0/0x6c8 [ 46.882797][ T7032] ___sys_sendmsg+0x198/0x224 [ 46.882805][ T7032] __sys_sendmsg+0x158/0x204 [ 46.882813][ T7032] __arm64_sys_sendmsg+0x88/0x9c [ 46.882822][ T7032] invoke_syscall+0x98/0x244 [ 46.882829][ T7032] el0_svc_common+0xec/0x23c [ 46.882836][ T7032] do_el0_svc+0x4c/0x5c [ 46.882843][ T7032] el0_svc+0x60/0x1d8 [ 46.882852][ T7032] el0t_64_sync_handler+0x44/0x104 [ 46.882860][ T7032] el0t_64_sync+0x198/0x19c [ 46.959203][ T7041] loop3: detected capacity change from 0 to 33280 [ 46.960428][ T7041] EXT4-fs: Ignoring removed nobh option [ 46.961038][ T7041] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 46.961046][ T7041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.964475][ T7041] EXT4-fs (loop3): 1 truncate cleaned up [ 46.971344][ T7041] EXT4-fs error (device loop3): __ext4_expand_extra_isize:7479: inode #15: comm syz.3.614: bad extra_isize 62 (inode size 256) [ 46.972591][ T7042] loop1: detected capacity change from 0 to 33280 [ 46.972915][ T7042] EXT4-fs: Ignoring removed bh option [ 46.986534][ T7042] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 46.991613][ T7042] EXT4-fs (loop1): 1 truncate cleaned up [ 47.012097][ T7041] EXT4-fs (loop3): Remounting filesystem read-only [ 47.125049][ T7057] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [403c!=40, 4,4000] [ 47.392870][ T7055] IPVS: Error connecting to the multicast addr [ 47.411143][ T7028] Unable to handle kernel paging request at virtual address dfff800000000005 [ 47.411155][ T7028] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 47.411162][ T7028] Mem abort info: [ 47.411165][ T7028] ESR = 0x0000000096000005 [ 47.411170][ T7028] EC = 0x25: DABT (current EL), IL = 32 bits [ 47.411176][ T7028] SET = 0, FnV = 0 [ 47.411180][ T7028] EA = 0, S1PTW = 0 [ 47.411184][ T7028] FSC = 0x05: level 1 translation fault [ 47.411189][ T7028] Data abort info: [ 47.411192][ T7028] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 47.411197][ T7028] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 47.411202][ T7028] GCS = 0, Overlay = 0, DirtyBit = 0 [ 47.411207][ T7028] [dfff800000000005] address between user and kernel address ranges [ 47.411286][ T7028] Internal error: Oops: 0000000096000005 [#1] SMP [ 47.427201][ T7028] Modules linked in: [ 47.428020][ T7028] CPU: 1 UID: 0 PID: 7028 Comm: syz.5.610 Not tainted syzkaller #0 PREEMPT [ 47.429752][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 47.431736][ T7028] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 47.433288][ T7028] pc : jbd2_journal_file_inode+0xe4/0x4c4 [ 47.434463][ T7028] lr : jbd2_journal_file_inode+0xdc/0x4c4 [ 47.435638][ T7028] sp : ffff800096d97560 [ 47.436463][ T7028] x29: ffff800096d97570 x28: ffff0000dab906e0 x27: ffff800096d977a8 [ 47.438125][ T7028] x26: 1fffe0001903ece0 x25: dfff800000000000 x24: 0000000000000006 [ 47.439754][ T7028] x23: 00000000000007ff x22: 0000000000000000 x21: ffff0000c81f6700 [ 47.441384][ T7028] x20: ffff0000d2c4a000 x19: 0000000000000000 x18: 00000000ffffffff [ 47.443090][ T7028] x17: ffff0001acebb394 x16: ffff0000cd15bb14 x15: ffff80008b586000 [ 47.444963][ T7028] x14: ffff80008bdbe7b0 x13: 0000000000000001 x12: 0000000000000004 [ 47.446579][ T7028] x11: ffff700012db2e94 x10: ffff700012db2e94 x9 : fa78f389bfaf2b00 [ 47.448188][ T7028] x8 : 0000000000000005 x7 : 0000000000000000 x6 : 0000000000000000 [ 47.449782][ T7028] x5 : ffff80008b873690 x4 : 0000000000000008 x3 : ffff80008047f3e8 [ 47.451480][ T7028] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000001 [ 47.453366][ T7028] Call trace: [ 47.454113][ T7028] jbd2_journal_file_inode+0xe4/0x4c4 (P) [ 47.455425][ T7028] jbd2_journal_inode_ranged_write+0x44/0x58 [ 47.456718][ T7028] ext4_map_blocks+0xca0/0xff8 [ 47.457704][ T7028] ext4_convert_inline_data_nolock+0x1ec/0x7dc [ 47.458983][ T7028] ext4_convert_inline_data+0x390/0x4e8 [ 47.460187][ T7028] ext4_setattr+0xc78/0x125c [ 47.461151][ T7028] notify_change+0x928/0xb7c [ 47.462140][ T7028] do_truncate+0x1a8/0x22c [ 47.463123][ T7028] vfs_truncate+0x3f4/0x458 [ 47.464116][ T7028] ksys_truncate+0xe8/0x190 [ 47.465146][ T7028] __arm64_sys_truncate+0x64/0x7c [ 47.466294][ T7028] invoke_syscall+0x98/0x244 [ 47.467334][ T7028] el0_svc_common+0xec/0x23c [ 47.468271][ T7028] do_el0_svc+0x4c/0x5c [ 47.469087][ T7028] el0_svc+0x60/0x1d8 [ 47.469907][ T7028] el0t_64_sync_handler+0x44/0x104 [ 47.471046][ T7028] el0t_64_sync+0x198/0x19c [ 47.471974][ T7028] Code: 911ca280 955f196e 9100a268 d343fd08 (38796908) [ 47.473381][ T7028] ---[ end trace 0000000000000000 ]--- [ 47.874331][ T7028] Kernel panic - not syncing: Oops: Fatal exception [ 47.875739][ T7028] SMP: stopping secondary CPUs [ 47.876720][ T7028] Kernel Offset: disabled [ 47.877587][ T7028] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 47.878961][ T7028] Memory Limit: none [ 48.277636][ T7028] Rebooting in 86400 seconds..