last executing test programs: 13m59.553864532s ago: executing program 32 (id=43): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x40002001}) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) 13m41.497448338s ago: executing program 33 (id=155): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x2) 13m28.682291258s ago: executing program 34 (id=243): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @multicast2, 0x15, 0x3, 'sed\x00', 0x28, 0x5, 0x72}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 13m19.744265217s ago: executing program 35 (id=300): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff, {0x2c}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 12m43.197009536s ago: executing program 36 (id=560): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x80, 0x1, 0x5, 0x3, 0x2, "bb38ecf584c39dff58d344af88de2f41831267", 0xa, 0x1}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000140), 0x0, 0x0) 12m36.72805196s ago: executing program 37 (id=598): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="54000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r3], 0x54}, 0x1, 0xba01}, 0x810) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) 12m27.382331767s ago: executing program 38 (id=647): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) syz_usb_connect(0x0, 0x4c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8890) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sync() 12m19.591460119s ago: executing program 39 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 11m44.163275893s ago: executing program 40 (id=890): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x20) 10m37.649643067s ago: executing program 41 (id=1429): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x5) landlock_restrict_self(r1, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x401, 0x0) 10m18.455894665s ago: executing program 42 (id=1575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001cc0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, '?5\b', 0xd47, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0xb, 0x6, "821276", 0x5, 0x2c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, [], "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"}}}}}}}, 0x0) 10m16.350137012s ago: executing program 43 (id=1588): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x10000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffff7) 9m47.216656682s ago: executing program 44 (id=1797): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2cc, &(0x7f00000006c0)="$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") ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 8m30.799642988s ago: executing program 45 (id=2302): r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$snddsp(r1, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) read$FUSE(r1, &(0x7f00000012c0)={0x2020}, 0x2020) 7m57.009896296s ago: executing program 46 (id=2522): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 7m23.696155516s ago: executing program 47 (id=2765): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f47000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x10, 0x3, 0x801, 0x0, &(0x7f0000000080), 0x2) 6m42.902476347s ago: executing program 48 (id=3069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xfffffff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 6m32.574783953s ago: executing program 49 (id=3126): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000400), &(0x7f0000000300)=r4}, 0x20) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x94854) 5m11.622329835s ago: executing program 50 (id=3612): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = dup(r1) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) 4m46.890365276s ago: executing program 0 (id=3734): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 4m46.465852941s ago: executing program 0 (id=3738): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_team\x00', 0x400}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x0, 0x3aa, 0x7, 0x1, 0x7, 0x40000000009, 0x40000000080a8c, 0x9], 0x6000, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m46.261672666s ago: executing program 0 (id=3741): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0xd, @empty, 0x9}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4m46.074836463s ago: executing program 0 (id=3745): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 4m45.890164531s ago: executing program 0 (id=3747): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 4m45.527386152s ago: executing program 0 (id=3749): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) 4m44.775059969s ago: executing program 51 (id=3749): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) 3m36.548417538s ago: executing program 9 (id=4241): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = io_uring_setup(0x5501, &(0x7f0000000080)={0x0, 0x4178, 0x400, 0x0, 0x110}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r2) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r2, r0, 0x0, 0x578410ed) 3m35.364136952s ago: executing program 9 (id=4251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m34.594074752s ago: executing program 9 (id=4253): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) r2 = fanotify_init(0x0, 0x0) r3 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x8, r4, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m34.21534985s ago: executing program 9 (id=4259): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 3m33.754369634s ago: executing program 9 (id=4261): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x9032, 0xffffffffffffffff, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 3m32.059126837s ago: executing program 9 (id=4272): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x444, &(0x7f0000000940)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909210000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX=0x0], 0xfe, 0x672, &(0x7f0000000a80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3m31.50126284s ago: executing program 52 (id=4272): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x444, &(0x7f0000000940)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909210000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX=0x0], 0xfe, 0x672, &(0x7f0000000a80)="$eJzs3Utv29jdx/EfZdmW/QDBg7YYBEEmPpN0AAdIFUmeeGCki6oUZXMqiQJJF/ZqkE7sQRA50yYp0Hgz9aYXoH0D3c1mFn0RBbruum+gywKDdlegGxUkRV0pyfdMO9+PkeiI50+ePy/RCS3yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJZdK5XKlhpua3fPTGfXfK85oz5Z2qLuJ4X7c9uVrOiPCgXdTCbd/M6g+p3or7u6nby7rUL0UtDx/73z/4+/nc+l889I6Dx01gW+enP8/Emnc/DyfK11rfPMdyUmMlHuFHNtOy038NxmddsxbuCZrc3N0sOdemDqbsMJ9oPQaRrbd3Kh55t1+74pb21tGKe47+22tmvVhpNO/PB7lVJp03y03Nv9Dz8qBvaO22i4re04JqqOYpb7R4hTbRpz+KxzsDEvySiofJqgyrygSqlSKZcrlfLmo61HH5ZK+YkJpTGaiBgctF+fnY8rtDg+4ZI+uYGLy0X9/98sqaGCWtrVnkzmj62afHlqTqnvSfv/9x86M9sd7v/TXv7moPqW4v7/TvLuzrT+f0ouRiaeIavGmjL9fD+v9EbHeq4n6qijA728nOWuXV6GV/uzLeUlV4E8uWqqqm05Mr0pRlva1KZK+lg7qiuQUV2uGnIUaF+BQjlqxvvEl6OqQnnyZbQuW/dlVNaWtrQhI0dF7cvTrlraVk1V/avb7R7qWbzdN2bkqDSofJqgfP8YnAya1v//5PNkjrP1//jf0z92ThEDvHXd3vn/dAtZE9euLiMAAAAAAHDZrPi371b83f27krqquw2n9LbTAgAAAAAAlyj+5v929LIYld6VNeX8v3v9uQEAAAAAgMthxffYWZJW44v6rcGdUKe5CCDz5gAAAAAAAPD1En//f2dJ6sZDq63JOtP5PwAAAAAA+C/wm6Ex9vPpGLvd9Gv9nKSgvWz96R/L8hetk/bed62jalRTPerFTFwBENZvWXklA/XG4/UuSYrf2c5tqzc+cG8QTCsZ2Ff66nDeWP+WP5bA0kL664uMBG4cDyWwme+90+/0XhLzXq/dp8c5xTVJK6t1t+EUba/xuKxq9UYudPbCn7949gvJ76/n4bPOQfGTzzpP41xOokknR1Een4+kk5uXy+t4vIX4nousNV5RPW3yt63mqhW3W0rXf0HVo9xwQ6db/1/pbhJzdzV5XT1O94CsX/YK5WK8ywZrH48OYQ2yKI+vedaOmJJFIc7iXhJzb/1e8pLmFy0nnxxUleLkPvCHs6gMZzF/W1j/nNgWs7KQVYiOhY0oiz9HC5qSxcbZspjYIwDwthwOeqF4EPPJMfbH+93zfMrN791/MNrK6z90kxsOF6R877uJ5CbEaf2Kok/09SRsKRnFPX8r4xO91OtXCpryiV66QO8WtfXHwTOQemn3avL9LP7d7XYfl+N2fz/Wq34RzfDF1HaDRmUh2oQPXx/9NB4AP/LpwacHLyqVjc3SB6XSo4oW49XovdD3AAAyzH/GzmhEYdCf9fvuD/pn1U///n5SGul3v9W/pKCoT/SZOnqqB+kjBNay210dugzhweRZaxS7Io3HlvVg6lld3JcOxVb6sYtKZxn9/8IgduOqdwMAANfq7px+eLz/zzp3f5Ced6/fyjzvHu3Lx58QPC22fM1bAgCAbw7H/8paDX9t+b7b/ri8tVWuhjuO8T37R8Z3a9uOcVuh49s71da2Y9q+F3q21zBtX8tuzQlMsNtue35o6p5v2l7g7sVPfje9R78HTrPaCl07aDecauAY22uFVTs0NTewTXv3hw032HH8eOag7dhu3bWroeu1TOCtyHaKxgSOMxTo1pxW6NbdqNgybd9tVv1982Ovsdt0TM0JbN9th16ywLQtt1X3/Ga82KK6sx50CADAN8arN8fPn3Q6By9nFE6UFNLr0WYEL2Ut8C2vIgAAGHPWXrowKC5fWVIAAAAAAAAAAAAAAAAAAAAAAGDEae7/m1lIbwpMpywqI1jqT/nZjVMt2dJgypd/vVCG5yjkxqf0Rtrtzp/9L0khnxWzEhWWJHXSzT8cc3Kpa7F2qmAlhfzlb8MVKetIuLLC9w9Hj8OJmKgys2q5vy/yF//nkFV48eWUqvlH1PLoNlyatYKjhbykl0sX2AXX/1kE4Hr9JwAA//9coT0w") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3m10.096530085s ago: executing program 6 (id=4407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4c000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x48d0) 3m9.835200541s ago: executing program 6 (id=4411): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 3m9.097199004s ago: executing program 6 (id=4424): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) 3m8.983980424s ago: executing program 6 (id=4416): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)={[{@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@shortname_mixed}, {@utf8}, {@fat=@flush}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}]}, 0x0, 0x2c7, &(0x7f0000002b80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) stat(0x0, &(0x7f0000000180)) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 3m8.635582735s ago: executing program 6 (id=4420): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) 3m6.906073074s ago: executing program 6 (id=4428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffce, 0x6, 0x3, 0x10001}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m6.573590048s ago: executing program 53 (id=4428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffce, 0x6, 0x3, 0x10001}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m51.258725445s ago: executing program 2 (id=4517): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x10) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x495}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 2m50.041061546s ago: executing program 2 (id=4521): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x3c7100, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 2m49.813382366s ago: executing program 2 (id=4522): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 2m48.839152348s ago: executing program 2 (id=4526): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 2m48.634698907s ago: executing program 2 (id=4527): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffd}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 2m48.18773761s ago: executing program 2 (id=4532): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 2m47.502599947s ago: executing program 54 (id=4532): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 1m6.276998924s ago: executing program 3 (id=5252): r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendfile(r3, r0, 0x0, 0x1000009) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x1000c8b0) 1m5.454733395s ago: executing program 3 (id=5262): setgroups(0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) getgroups(0x1, &(0x7f0000000280)=[0xee00]) setregid(r2, r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 1m5.255594712s ago: executing program 3 (id=5264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) r2 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f0000000180)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r1, 0x6a, 0x1, 0x0, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}}, 0x18) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="88", 0x1}], 0x1}, 0x200480c1) 1m5.043877096s ago: executing program 3 (id=5266): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18f) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 1m4.843415196s ago: executing program 3 (id=5271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) accept(r0, 0x0, 0x0) 1m4.434175911s ago: executing program 3 (id=5275): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000300), 0x1, 0x408, &(0x7f0000000e40)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) io_setup(0x2, &(0x7f00000005c0)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x60) 1m3.818735676s ago: executing program 55 (id=5275): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000300), 0x1, 0x408, &(0x7f0000000e40)="$eJzs3c9PHFUcAPDvDFBaWrs08eCPC1ETSYxQaKs20UTixUN7sgePblhaSZdiABPbEH9E400TjX+AHtQ/waMe/B/0rB60CTEcpN7WzO7MMgWWAl1csnw+ycu+NzPse7Nv3+zs2/ceARxbYxHxakQMRMT5iKjk29M8xIetkB23sb46++/66mwSjcYbfyeR5NuK50ryx9P5E4ynEeknSTy5Q77Lt+/crNbrc0t5enJl4Z3J5dt3np9fqN6YuzF3a/qFCxcvXXrp8vSLXTvXtYXks2e+u/LHF5/Wvvzlrx9Hs/KeyfeVz6NbxmKs/ZpsdbnbmfXYyVI8GexhQQAA2FWa3/sPNu//KzEQmzdvlfj8554WDgAAAOiKRqN4BAAAAPpX4rs/AAAA9LliHMDG+upsETpOWqXvrM1ExGir/u/lobVnsD2nd2jL/N5uGouI109enc5CHNI8bAAAAIDj7KeZ1sJ/9/X/NaXxWOm4UxExUqzt10VjW9Lb+3/Su13OkpK1mYiXI+Letv6/tDhkdCBPPdLsKhxKrs/X585HxNmIGI+h4Sw9tUse7z918/tO+8r9f1///uZUln/2uHlEendw+P6/qVVXqg9zzmxa+yjiicGd6j9p9/mW18k8iLfmN17ptC+r/6y+i7C9/jlMjW8int2x/W/+CJTsvj7rZPN6MJlfFYa35/HbmW8/7pR/uf1nIcu/+C2Aw5e1/5Hd67+5Tm57vd7l/efxwz9Xf+2078H1v/P1/0RyrVnAE/m296orK0tTESeSK9u3eze1Fa9H8Xpl9T/+9M6f/8X9X5J/9p8trQ+9H699cO5ap33l+m9UWuXQ/v8/Wf3X9tX+9x95e+Tx8U757639X2wWpniSWjXc/z3AXiuo1+UEAAAAAAAAoDvS5ti+JJ1ox9N0YqI1zvfRGEnri8srz11ffPdWrTUGcDSG0mL8Z6U0HnSqNY28nZ7ekr4QEeci4qvKqWZ6YnaxXuv1yQMAAMAxcbrD9//MnweZ7AEAAAAcTaO9LgAAAABw6Hz/BwAAgL72MOv61+eWin8RdMA/F9lbZCgijkAxjlBkIH/jHZXy9F+khxclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOK/AAAA///B2Low") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) io_setup(0x2, &(0x7f00000005c0)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x60) 3.725449129s ago: executing program 1 (id=5799): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}], 0x1, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090) write(r0, &(0x7f0000001e00)="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", 0x2fc) 3.519136427s ago: executing program 1 (id=5805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 3.257745642s ago: executing program 4 (id=5807): socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 2.965089026s ago: executing program 1 (id=5812): syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2.092567116s ago: executing program 5 (id=5820): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x800, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 1.877852282s ago: executing program 1 (id=5821): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @private=0xa010101, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x8, 0x4, 0x5f4a, 0x100, 0x6}}}, {{@ip={@empty, @empty, 0xff000000, 0xff000000, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) 1.75361319s ago: executing program 5 (id=5822): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000ffec00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048045}, 0x20000000) 1.599556376s ago: executing program 5 (id=5823): socket$netlink(0x10, 0x3, 0x10) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x4e23, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3c, 0xfffffffffff7fffd, 0x50}, {0x5, 0x0, 0x100000001, 0x3}, 0xbec, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x20028800) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a00", @ANYRESHEX], 0xb8}}, 0x4000) 1.368179436s ago: executing program 5 (id=5825): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r1) read$FUSE(r1, &(0x7f0000006280)={0x2020}, 0x2020) 1.156944811s ago: executing program 4 (id=5827): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x1, 0x0, 0x4, 0x4}}, 0x2e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0xd07, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1.114750425s ago: executing program 8 (id=5828): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 1.030281548s ago: executing program 7 (id=5829): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000000c0)=0x7f, 0x4) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x143406, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x8000004, "ab3d88cb1a001900000a7a610000eaff0a00e78000000000000010ff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001080)=[{}]}) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@data_ordered}, {@mblk_io_submit}, {@quota}, {@init_itable}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$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") 1.028227298s ago: executing program 1 (id=5830): getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000500)=@assoc_value, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="ffff807007c50f7eb23344550806000108000604000243054305123400000000ff4305029afe00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0xee, r1, 0x1, 0x3, 0x6, @broadcast}, 0x14) 968.295612ms ago: executing program 8 (id=5831): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x24, 0x2) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) 890.94217ms ago: executing program 7 (id=5832): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f00000040c0), 0xa, 0x2, 0x0, 0x0, 0x0) 795.594037ms ago: executing program 8 (id=5833): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x2, 0x7}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) 649.998662ms ago: executing program 8 (id=5834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x2, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x7, 0xfffd}, {0x7, 0xffff}, {0x3, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4024012}, 0x4008050) 589.035359ms ago: executing program 7 (id=5835): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 505.224354ms ago: executing program 4 (id=5836): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x1002, 0x6, 0x732}, 0x37, [0x8000, 0xc95a, 0xf, 0xc, 0x7ad6, 0x2, 0x3, 0x7f, 0x20000006, 0x5, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40001, 0x3, 0xe, 0x0, 0x4, 0x7, 0x17, 0x1, 0x407, 0xa9, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0x2, 0x40], [0x10000007, 0xf0000000, 0x8800012f, 0x40008004, 0x5, 0x6, 0x129432e2, 0xc8, 0xf9, 0xb, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x2, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x0, 0xb, 0x15c, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xff, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x7, 0x408, 0x8004, 0x6, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x1, 0x4, 0x6d01, 0x5, 0xffffffff, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x40, 0x5, 0x9, 0xac6, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0xfffffff9, 0xffff, 0x2000a620, 0x2, 0x5, 0x4, 0x1, 0x8001, 0xe7, 0x6, 0x16, 0xbeb, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0x20000af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x31e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 504.824073ms ago: executing program 8 (id=5837): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 393.754047ms ago: executing program 5 (id=5838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x8001}, {0xfff4, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) 393.10572ms ago: executing program 4 (id=5839): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$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") sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 342.123382ms ago: executing program 7 (id=5840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x880) 269.551248ms ago: executing program 7 (id=5841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) 243.115727ms ago: executing program 4 (id=5842): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r4, r5, 0x0) 161.726825ms ago: executing program 7 (id=5843): mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x32, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp862,discard=0x0000000000002004,iocharset=iso8859-9,discard,iocharset=macroman,errors=remount-ro,integrity,usrquota,errors=continue,nodiscard,iocharset=cp936,\x00'], 0x2c, 0x62d7, &(0x7f0000021240)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 113.049769ms ago: executing program 5 (id=5844): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4e142, 0x2e) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendfile(r0, r0, 0x0, 0xe3aa6ea) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) 111.004184ms ago: executing program 8 (id=5845): syz_emit_ethernet(0x22, 0x0, 0x0) unshare(0x22020400) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000001dc0)=""/4096, 0x1000) 72.772008ms ago: executing program 1 (id=5846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000080)={r2, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000200)={r3, 0x1, r0, 0x3, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r3, 0x5, 0x4000003}) 0s ago: executing program 4 (id=5847): eventfd(0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) kernel console output (not intermixed with test programs): ile:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 796.905150][T26233] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.905225][T26233] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 796.905262][T26233] Node 0 DMA32 free:850772kB boost:0kB min:34388kB low:42984kB high:51580kB reserved_highatomic:0kB free_highatomic:0kB active_anon:216532kB inactive_anon:80412kB active_file:1228kB inactive_file:248076kB unevictable:0kB writepending:1132kB zspages:1704kB present:3129332kB managed:2546536kB mlocked:0kB bounce:0kB free_pcp:40668kB local_pcp:11460kB free_cma:0kB [ 796.905326][T26233] lowmem_reserve[]: 0 0 0 0 0 [ 796.905360][T26233] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.905431][T26233] lowmem_reserve[]: 0 0 0 0 0 [ 796.905465][T26233] Node 1 Normal free:3938532kB boost:0kB min:55516kB low:69392kB high:83268kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.905525][T26233] lowmem_reserve[]: 0 0 0 0 0 [ 796.905559][T26233] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 796.910976][T26233] Node 0 DMA32: 964*4kB (UE) 1011*8kB (UE) 588*16kB (UME) 2*32kB (ME) 179*64kB (UE) 217*128kB (UME) 164*256kB (UM) 87*512kB (UME) 57*1024kB (UM) 7*2048kB (UM) 154*4096kB (UM) = 850664kB [ 796.912780][T26233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 796.912881][T26233] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 11*16kB (UM) 4*32kB (UM) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 4*2048kB (UM) 958*4096kB (UM) = 3938532kB [ 796.913039][T26233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.913058][T26233] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 796.913075][T26233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.913092][T26233] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 796.913109][T26233] 125067 total pagecache pages [ 796.913117][T26233] 18 pages in swap cache [ 796.913125][T26233] Free swap = 124136kB [ 796.913133][T26233] Total swap = 124996kB [ 796.913142][T26233] 2097051 pages RAM [ 796.913149][T26233] 0 pages HighMem/MovableOnly [ 796.913157][T26233] 428801 pages reserved [ 796.913165][T26233] 0 pages cma reserved [ 798.128870][T26248] FAULT_INJECTION: forcing a failure. [ 798.128870][T26248] name failslab, interval 1, probability 0, space 0, times 0 [ 798.128906][T26248] CPU: 0 UID: 0 PID: 26248 Comm: syz.4.4809 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.128936][T26248] Tainted: [L]=SOFTLOCKUP [ 798.128944][T26248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 798.128957][T26248] Call Trace: [ 798.128967][T26248] [ 798.128975][T26248] dump_stack_lvl+0xe8/0x150 [ 798.129011][T26248] should_fail_ex+0x3eb/0x540 [ 798.129048][T26248] should_failslab+0xa8/0x100 [ 798.129081][T26248] __kmalloc_cache_noprof+0x9e/0x600 [ 798.129108][T26248] ? userfaultfd_unmap_prep+0x1db/0x3e0 [ 798.129131][T26248] ? userfaultfd_unmap_prep+0x1db/0x3e0 [ 798.129165][T26248] userfaultfd_unmap_prep+0x1db/0x3e0 [ 798.129193][T26248] vms_gather_munmap_vmas+0x936/0x1370 [ 798.129238][T26248] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 798.129274][T26248] ? mas_walk+0x37e/0x490 [ 798.129317][T26248] mmap_region+0x94b/0x2c60 [ 798.129352][T26248] ? ktime_get+0x45/0x220 [ 798.129379][T26248] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 798.129408][T26248] ? ktime_get+0x1f5/0x220 [ 798.129436][T26248] ? clockevents_program_event+0x491/0x630 [ 798.129460][T26248] ? __pfx_mmap_region+0x10/0x10 [ 798.129502][T26248] ? irqentry_exit+0x218/0x910 [ 798.129529][T26248] ? lockdep_hardirqs_on+0x7b/0x110 [ 798.129556][T26248] ? irqentry_exit+0x218/0x910 [ 798.129581][T26248] ? trace_irq_disable+0x3b/0x140 [ 798.129626][T26248] ? finish_task_switch+0x413/0xc60 [ 798.129705][T26248] ? futex_unqueue+0x22/0x240 [ 798.129735][T26248] ? futex_unqueue+0x22/0x240 [ 798.129761][T26248] ? futex_unqueue+0x22/0x240 [ 798.129810][T26248] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 798.129840][T26248] ? __lock_acquire+0x747/0x2de0 [ 798.129867][T26248] ? cap_mmap_addr+0xaa/0xf0 [ 798.129887][T26248] ? bpf_lsm_mmap_addr+0x9/0x50 [ 798.129915][T26248] ? security_mmap_addr+0x71/0x240 [ 798.129955][T26248] do_mmap+0xe0a/0x1300 [ 798.129994][T26248] ? __pfx_do_mmap+0x10/0x10 [ 798.130036][T26248] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 798.130060][T26248] ? down_write_killable+0x179/0x230 [ 798.130093][T26248] ? __pfx_down_write_killable+0x10/0x10 [ 798.130124][T26248] ? apparmor_mmap_file+0x1cc/0x390 [ 798.130153][T26248] ? security_mmap_file+0x4df/0xa20 [ 798.130194][T26248] vm_mmap_pgoff+0x272/0x4e0 [ 798.130227][T26248] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 798.130255][T26248] ? rcu_is_watching+0x16/0xb0 [ 798.130288][T26248] ? ksys_mmap_pgoff+0xf3/0x760 [ 798.130309][T26248] ? __x64_sys_mmap+0x7f/0x140 [ 798.130336][T26248] do_syscall_64+0x166/0x520 [ 798.130364][T26248] ? trace_irq_disable+0x3b/0x140 [ 798.130389][T26248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.130410][T26248] ? clear_bhb_loop+0x70/0xc0 [ 798.130436][T26248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.130456][T26248] RIP: 0033:0x7fee1a19e159 [ 798.130475][T26248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.130493][T26248] RSP: 002b:00007fee1b00e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 798.130516][T26248] RAX: ffffffffffffffda RBX: 00007fee1a425fa0 RCX: 00007fee1a19e159 [ 798.130532][T26248] RDX: 0000000000000000 RSI: 0000000000fff002 RDI: 0000200000000000 [ 798.130546][T26248] RBP: 00007fee1a23506b R08: ffffffffffffffff R09: 0000000000000000 [ 798.130561][T26248] R10: 0002000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 798.130575][T26248] R13: 00007fee1a426038 R14: 00007fee1a425fa0 R15: 00007fff21a4a5b8 [ 798.130607][T26248] [ 798.345332][T26242] fuse: fd is not a fuse device [ 798.727124][T26257] netlink: 2036 bytes leftover after parsing attributes in process `syz.8.4811'. [ 798.727147][T26257] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4811'. [ 799.382969][T26279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4815'. [ 799.583875][T26279] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4815'. [ 799.916507][T26304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4824'. [ 799.998029][T26307] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 800.575727][T26322] FAULT_INJECTION: forcing a failure. [ 800.575727][T26322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 800.575765][T26322] CPU: 1 UID: 0 PID: 26322 Comm: syz.8.4830 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.575796][T26322] Tainted: [L]=SOFTLOCKUP [ 800.575804][T26322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 800.575818][T26322] Call Trace: [ 800.575826][T26322] [ 800.575836][T26322] dump_stack_lvl+0xe8/0x150 [ 800.575872][T26322] should_fail_ex+0x3eb/0x540 [ 800.575909][T26322] prepare_alloc_pages+0x21e/0x5f0 [ 800.575941][T26322] __alloc_frozen_pages_noprof+0x17a/0x400 [ 800.575980][T26322] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 800.576023][T26322] alloc_pages_mpol+0x21e/0x390 [ 800.576059][T26322] alloc_pages_noprof+0xb1/0x2b0 [ 800.576089][T26322] kimage_alloc_pages+0xbe/0x3c0 [ 800.576120][T26322] kimage_alloc_page+0xa6/0x880 [ 800.576152][T26322] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 800.576188][T26322] kimage_load_segment+0xa38/0x1220 [ 800.576227][T26322] do_kexec_load+0x637/0x7c0 [ 800.576259][T26322] ? __pfx_do_kexec_load+0x10/0x10 [ 800.576290][T26322] ? _copy_from_user+0x94/0xb0 [ 800.576316][T26322] __se_sys_kexec_load+0x134/0x160 [ 800.576344][T26322] do_syscall_64+0x166/0x520 [ 800.576367][T26322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.576385][T26322] ? clear_bhb_loop+0x70/0xc0 [ 800.576405][T26322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.576422][T26322] RIP: 0033:0x7f97d359e159 [ 800.576439][T26322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.576454][T26322] RSP: 002b:00007f97d43fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 800.576475][T26322] RAX: ffffffffffffffda RBX: 00007f97d3825fa0 RCX: 00007f97d359e159 [ 800.576489][T26322] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 800.576501][T26322] RBP: 00007f97d363506b R08: 0000000000000000 R09: 0000000000000000 [ 800.576512][T26322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.576523][T26322] R13: 00007f97d3826038 R14: 00007f97d3825fa0 R15: 00007ffff76c18a8 [ 800.576550][T26322] [ 801.925803][T26361] loop5: detected capacity change from 0 to 7 [ 801.935222][T26361] loop5: [ 801.935249][T26361] loop5: partition table partially beyond EOD, truncated [ 802.289080][T26372] loop3: detected capacity change from 0 to 4096 [ 802.476464][T26381] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 802.816760][T26388] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 803.170026][T26410] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 803.893890][T26447] fuse: fd is not a fuse device [ 804.132889][T26453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4868'. [ 806.201403][T26524] input: syz1 as /devices/virtual/input/input43 [ 806.646544][T26532] loop4: detected capacity change from 0 to 32768 [ 806.659973][T26532] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4897 (26532) [ 806.673842][T26532] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 806.673875][T26532] BTRFS info (device loop4): using sha256 checksum algorithm [ 806.879537][T26532] BTRFS info (device loop4): rebuilding free space tree [ 807.117875][T26532] BTRFS info (device loop4): disabling free space tree [ 807.117941][T26532] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 807.117964][T26532] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 807.143151][T26532] BTRFS info (device loop4): checking UUID tree [ 807.148064][T26532] BTRFS info (device loop4): turning off barriers [ 807.148088][T26532] BTRFS info (device loop4): force clearing of disk cache [ 807.148108][T26532] BTRFS info (device loop4): use lzo compression, level 1 [ 807.376338][T26576] loop3: detected capacity change from 0 to 512 [ 807.385412][T26576] EXT4-fs: Ignoring removed orlov option [ 807.385444][T26576] EXT4-fs: Ignoring removed mblk_io_submit option [ 807.461226][T26576] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.4902: corrupted in-inode xattr: e_value size too large [ 807.461264][T26576] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 807.461985][T26576] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.4902: couldn't read orphan inode 15 (err -117) [ 807.462016][T26576] loop3: lost filesystem error report for type 5 error -117 [ 807.464208][T26576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.916547][T25067] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.095108][T21962] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 808.430071][T26598] loop8: detected capacity change from 0 to 32768 [ 808.446627][T26598] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 808.468070][T26598] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4910 (26598) [ 808.496197][T26598] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 808.496230][T26598] BTRFS info (device loop8): using crc32c checksum algorithm [ 808.643507][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.643565][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.644016][ T1313] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 808.732082][T26598] BTRFS info (device loop8): rebuilding free space tree [ 809.173658][T26598] BTRFS info (device loop8): disabling free space tree [ 809.173724][T26598] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 809.173748][T26598] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 809.248404][T26598] BTRFS info (device loop8): enabling ssd optimizations [ 809.248433][T26598] BTRFS info (device loop8): turning on async discard [ 809.248451][T26598] BTRFS info (device loop8): force clearing of disk cache [ 809.248471][T26598] BTRFS info (device loop8): use zstd compression, level 3 [ 810.536863][T24975] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 812.942785][T15309] IPVS: starting estimator thread 0... [ 813.028930][T26737] IPVS: using max 28 ests per chain, 67200 per kthread [ 814.371618][T26805] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 814.880204][T26832] loop3: detected capacity change from 0 to 4096 [ 814.915476][T26832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.955906][T26832] Quota error (device loop3): do_check_range: Getting block 3573547013 out of range 1-5 [ 814.956016][T26832] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 814.956038][T26832] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.4973: Failed to acquire dquot type 1 [ 815.010590][T26841] Quota error (device loop3): do_check_range: Getting block 3573547013 out of range 1-5 [ 815.010761][T26841] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 815.010782][T26841] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.4973: Failed to acquire dquot type 1 [ 815.104038][T26834] loop4: detected capacity change from 0 to 8192 [ 815.201290][T25067] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.279476][T26896] fuse: fd is not a fuse device [ 816.317479][ T5722] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 816.580330][T26910] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 817.005995][T26926] FAULT_INJECTION: forcing a failure. [ 817.005995][T26926] name failslab, interval 1, probability 0, space 0, times 0 [ 817.006027][T26926] CPU: 0 UID: 0 PID: 26926 Comm: syz.4.4999 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.006057][T26926] Tainted: [L]=SOFTLOCKUP [ 817.006066][T26926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.006080][T26926] Call Trace: [ 817.006089][T26926] [ 817.006098][T26926] dump_stack_lvl+0xe8/0x150 [ 817.006136][T26926] should_fail_ex+0x3eb/0x540 [ 817.006175][T26926] should_failslab+0xa8/0x100 [ 817.006208][T26926] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 817.006240][T26926] ? ovl_parse_param+0x6c1/0xf40 [ 817.006390][T26926] ? ovl_parse_param+0x6c1/0xf40 [ 817.006426][T26926] kstrdup+0x42/0x100 [ 817.006453][T26926] ovl_parse_param+0x6c1/0xf40 [ 817.006489][T26926] ? __pfx_ovl_parse_param+0x10/0x10 [ 817.006530][T26926] ? static_key_count+0x41/0x70 [ 817.006557][T26926] vfs_parse_fs_param+0x1a9/0x420 [ 817.006591][T26926] vfs_parse_monolithic_sep+0x281/0x360 [ 817.006622][T26926] ? __pfx_ovl_next_opt+0x10/0x10 [ 817.006653][T26926] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 817.006687][T26926] ? mutex_init_lockdep+0xdf/0x110 [ 817.006721][T26926] ? alloc_fs_context+0x9b2/0xd00 [ 817.006767][T26926] do_new_mount+0x2e2/0xdc0 [ 817.006800][T26926] ? __pfx_do_new_mount+0x10/0x10 [ 817.006828][T26926] ? ns_capable+0x84/0xe0 [ 817.006859][T26926] ? path_mount+0x647/0x1050 [ 817.006886][T26926] ? user_path_at+0xd4/0x160 [ 817.006913][T26926] __se_sys_mount+0x31d/0x420 [ 817.006943][T26926] ? __pfx___se_sys_mount+0x10/0x10 [ 817.006975][T26926] ? __x64_sys_mount+0x20/0xc0 [ 817.007002][T26926] do_syscall_64+0x166/0x520 [ 817.007031][T26926] ? trace_irq_disable+0x3b/0x140 [ 817.007059][T26926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.007081][T26926] ? clear_bhb_loop+0x70/0xc0 [ 817.007104][T26926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.007125][T26926] RIP: 0033:0x7fee1a19e159 [ 817.007145][T26926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.007163][T26926] RSP: 002b:00007fee1b00e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 817.007187][T26926] RAX: ffffffffffffffda RBX: 00007fee1a425fa0 RCX: 00007fee1a19e159 [ 817.007204][T26926] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 817.007219][T26926] RBP: 00007fee1a23506b R08: 0000200000000280 R09: 0000000000000000 [ 817.007234][T26926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.007247][T26926] R13: 00007fee1a426038 R14: 00007fee1a425fa0 R15: 00007fff21a4a5b8 [ 817.007279][T26926] [ 817.577653][T26940] bond6: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 817.577686][T26940] bond6: entered allmulticast mode [ 817.578464][T26946] bond6: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 818.531468][T26973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.653493][T26977] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 819.234141][ T45] Bluetooth: hci5: Frame reassembly failed (-84) [ 819.699072][ T6053] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.699110][ T6053] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.783993][T27014] netlink: 'syz.8.5023': attribute type 11 has an invalid length. [ 819.881900][T27018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5024'. [ 819.976771][ T6053] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.976808][ T6053] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.083804][T27018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5024'. [ 820.104482][T27019] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 820.460569][ T6053] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.460606][ T6053] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.741863][ T6053] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.741900][ T6053] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.838187][T15335] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.838534][T15335] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.838568][T15335] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.907084][ T7531] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.277291][T15170] Bluetooth: hci5: command 0x1003 tx timeout [ 821.277840][ T5611] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 821.508068][T15309] netdevsim netdevsim6 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.857769][T15335] netdevsim netdevsim6 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.977361][ T7531] netdevsim netdevsim6 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.997697][ T6053] bridge_slave_1: left allmulticast mode [ 821.997723][ T6053] bridge_slave_1: left promiscuous mode [ 821.997918][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.011632][ T6053] bridge_slave_0: left allmulticast mode [ 822.012401][ T6053] bridge_slave_0: left promiscuous mode [ 822.012612][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.025616][T27091] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5042'. [ 822.144449][T27096] ip_tables: iptables: counters copy to user failed while replacing table [ 822.491510][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.493370][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.494511][ T6053] bond0 (unregistering): Released all slaves [ 822.525045][ T6053] bond1 (unregistering): Released all slaves [ 822.637858][ T45] netdevsim netdevsim6 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.753309][ T6053] rxrpc: Leaked peer 52f {1} 127.0.0.1:7003 [ 823.183405][ T6053] hsr_slave_0: left promiscuous mode [ 823.184682][ T6053] hsr_slave_1: left promiscuous mode [ 823.185565][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.185586][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.209724][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.209745][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.300899][ T6053] veth1_macvtap: left promiscuous mode [ 823.300939][ T6053] veth0_macvtap: left promiscuous mode [ 823.301043][ T6053] veth1_vlan: left promiscuous mode [ 823.301108][ T6053] veth0_vlan: left promiscuous mode [ 823.361199][ T5793] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 823.902624][ T5611] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 823.990563][ T6053] team0 (unregistering): Port device team_slave_1 removed [ 824.015963][ T6053] team0 (unregistering): Port device team_slave_0 removed [ 826.126411][ T6053] IPVS: stop unused estimator thread 0... [ 826.303523][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 826.310581][ T33] audit: type=1800 audit(1790716434.442:451): pid=27175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5069" name="file1" dev="overlay" ino=472 res=0 errno=-22 [ 827.133337][T27210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 827.403651][T27220] loop2: detected capacity change from 0 to 7 [ 827.410087][T27220] Dev loop2: unable to read RDB block 7 [ 827.410131][T27220] loop2: unable to read partition table [ 827.410313][T27220] loop2: partition table beyond EOD, truncated [ 827.410343][T27220] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 828.051155][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12 [ 829.090345][T27288] Device name not specified. [ 829.090345][T27288] [ 829.604616][ T5271] 8021q: adding VLAN 0 to HW filter on device eth14 [ 830.126980][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 830.321887][ T10] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 830.324583][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.324610][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 830.326591][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.326616][ T10] usb 4-1: Product: syz [ 830.326633][ T10] usb 4-1: Manufacturer: syz [ 830.326648][ T10] usb 4-1: SerialNumber: syz [ 830.346591][ T10] usb 4-1: 0:2 : does not exist [ 830.417418][ T5793] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 831.626089][ T5271] 8021q: adding VLAN 0 to HW filter on device eth15 [ 831.703727][T27357] loop8: detected capacity change from 0 to 1024 [ 831.719665][T27357] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 831.730483][T27357] JBD2: no valid journal superblock found [ 831.768810][T27357] EXT4-fs (loop8): Could not load journal inode [ 832.126625][ T10] usb 4-1: USB disconnect, device number 10 [ 832.217161][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 832.367256][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 832.368076][ T9] usb 9-1: New USB device found: idVendor=046d, idProduct=08f3, bcdDevice=b.28 [ 832.371360][T27371] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 832.372044][ T9] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 832.372069][ T9] usb 9-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 832.372089][ T9] usb 9-1: config 0 has no interface number 0 [ 832.379145][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.379170][ T9] usb 9-1: Product: syz [ 832.379184][ T9] usb 9-1: Manufacturer: syz [ 832.379199][ T9] usb 9-1: SerialNumber: syz [ 832.383336][ T9] usb 9-1: config 0 descriptor?? [ 832.383715][T26552] udevd[26552]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.413953][ T9] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 832.413985][ T9] uvcvideo 9-1:0.105: No valid video chain found. [ 832.621460][T27375] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5120'. [ 832.627581][ T10] usb 9-1: USB disconnect, device number 20 [ 832.932853][T27392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5124'. [ 832.958717][T27392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5124'. [ 832.968042][ T7525] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.969614][T15309] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.969651][T15309] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.969683][T15309] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.052676][T27388] loop3: detected capacity change from 0 to 32768 [ 833.064551][T27388] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5123 (27388) [ 833.080759][T27388] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 833.080791][T27388] BTRFS info (device loop3): using sha256 checksum algorithm [ 833.132390][T27407] overlayfs: failed to resolve './proc/thread-self/fail-nth': -2 [ 833.247126][T27388] BTRFS info (device loop3): rebuilding free space tree [ 833.347707][T27388] BTRFS info (device loop3): disabling free space tree [ 833.347773][T27388] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 833.347796][T27388] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 833.389880][T27388] BTRFS info (device loop3): checking UUID tree [ 833.390355][T27388] BTRFS info (device loop3): turning off barriers [ 833.390387][T27388] BTRFS info (device loop3): force clearing of disk cache [ 833.390405][T27388] BTRFS info (device loop3): use lzo compression, level 1 [ 834.046785][T27440] netlink: 'syz.7.5132': attribute type 11 has an invalid length. [ 834.192846][T27440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.205439][T27440] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.244837][T27440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.416646][T27440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.425091][T27440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.435275][T25067] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 834.455390][T27440] veth1_vlan: left promiscuous mode [ 834.491290][T27440] veth0_vlan: left promiscuous mode [ 834.506478][T27440] veth0_vlan: entered promiscuous mode [ 834.513529][T27440] veth1_vlan: entered promiscuous mode [ 834.557330][ T32] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 834.578343][T27440] veth1_macvtap: left promiscuous mode [ 834.579597][T27440] veth0_macvtap: left promiscuous mode [ 834.611701][T27440] veth0_macvtap: entered promiscuous mode [ 834.620187][T27440] veth1_macvtap: entered promiscuous mode [ 834.638799][T27440] veth0_to_team: entered promiscuous mode [ 834.644207][T27440] 8021q: adding VLAN 0 to HW filter on device eth0 [ 834.688067][T27440] 8021q: adding VLAN 0 to HW filter on device eth1 [ 834.712167][T27440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 834.714317][T27440] 8021q: adding VLAN 0 to HW filter on device eth3 [ 834.714438][T27445] overlayfs: failed to clone upperpath [ 834.742854][ T32] usb 9-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 834.745031][T27440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 834.747101][ T32] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.747130][ T32] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.747167][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.753259][ T32] usb 9-1: config 0 descriptor?? [ 834.814836][T27440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 834.824782][T27440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 834.842795][T27440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 834.845734][T27440] 8021q: adding VLAN 0 to HW filter on device bond6 [ 834.921086][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.921203][ T7525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.193187][ T32] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 835.193225][ T32] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 835.193252][ T32] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 835.193280][ T32] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 835.193308][ T32] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 835.193335][ T32] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 835.193362][ T32] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 835.202495][ T32] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 835.244858][ T6053] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.244890][ T6053] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.244941][ T6053] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.244961][ T6053] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.244991][ T6053] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.245011][ T6053] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.245040][ T6053] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.245060][ T6053] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.304953][T27441] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 835.384631][ T32] cp2112 0003:10C4:EA90.001B: Part Number: 0x00 Device Version: 0x00 [ 835.947975][T27467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.956686][T27467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.022823][T27465] loop3: detected capacity change from 0 to 40427 [ 836.027482][ T32] cp2112 0003:10C4:EA90.001B: error reading lock byte: -71 [ 836.036876][ T32] usb 9-1: USB disconnect, device number 21 [ 836.058357][T27465] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 836.058384][T27465] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 836.119380][T27465] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 836.144738][T27465] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 836.144768][T27465] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 836.529325][T27465] syz.3.5147: attempt to access beyond end of device [ 836.529325][T27465] loop3: rw=2049, sector=45096, nr_sectors = 2056 limit=40427 [ 836.539066][T27465] syz.3.5147: attempt to access beyond end of device [ 836.539066][T27465] loop3: rw=2049, sector=47152, nr_sectors = 2048 limit=40427 [ 836.548289][T27465] syz.3.5147: attempt to access beyond end of device [ 836.548289][T27465] loop3: rw=2049, sector=49200, nr_sectors = 2048 limit=40427 [ 836.557507][T27465] syz.3.5147: attempt to access beyond end of device [ 836.557507][T27465] loop3: rw=2049, sector=51248, nr_sectors = 2000 limit=40427 [ 836.558659][T27465] syz.3.5147: attempt to access beyond end of device [ 836.558659][T27465] loop3: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 836.566877][T27465] syz.3.5147: attempt to access beyond end of device [ 836.566877][T27465] loop3: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 836.576405][T27465] syz.3.5147: attempt to access beyond end of device [ 836.576405][T27465] loop3: rw=2049, sector=59392, nr_sectors = 2048 limit=40427 [ 836.585749][T27465] syz.3.5147: attempt to access beyond end of device [ 836.585749][T27465] loop3: rw=2049, sector=61440, nr_sectors = 2048 limit=40427 [ 836.595142][T27465] syz.3.5147: attempt to access beyond end of device [ 836.595142][T27465] loop3: rw=2049, sector=63488, nr_sectors = 2048 limit=40427 [ 836.604620][T27465] syz.3.5147: attempt to access beyond end of device [ 836.604620][T27465] loop3: rw=2049, sector=65536, nr_sectors = 2048 limit=40427 [ 837.274388][T27484] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5141'. [ 837.308671][T25067] CPU: 0 UID: 0 PID: 25067 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 837.308734][T25067] Tainted: [L]=SOFTLOCKUP [ 837.308749][T25067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.308774][T25067] Call Trace: [ 837.308783][T25067] [ 837.308792][T25067] dump_stack_lvl+0xe8/0x150 [ 837.308827][T25067] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 837.308857][T25067] ? __submit_merged_bio+0x258/0x6a0 [ 837.308881][T25067] f2fs_cache_write_end_io+0x2a5/0x6e0 [ 837.308915][T25067] ? bio_endio+0x984/0xac0 [ 837.308946][T25067] __submit_merged_bio+0x258/0x6a0 [ 837.308968][T25067] ? rcu_is_watching+0x16/0xb0 [ 837.309003][T25067] f2fs_submit_merged_write+0x2cc/0x610 [ 837.309032][T25067] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 837.309066][T25067] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 837.309092][T25067] ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0 [ 837.309124][T25067] f2fs_writeback_node_caches+0xf85/0x1120 [ 837.309169][T25067] ? __pfx_f2fs_writeback_node_caches+0x10/0x10 [ 837.309222][T25067] ? f2fs_write_checkpoint+0xe1e/0x24d0 [ 837.309255][T25067] ? up_write+0x19d/0x4a0 [ 837.309278][T25067] f2fs_write_checkpoint+0xe51/0x24d0 [ 837.309344][T25067] kill_f2fs_super+0x2dc/0x700 [ 837.309377][T25067] ? rcu_do_enqueue+0x616/0x870 [ 837.309401][T25067] ? lockdep_hardirqs_on+0x7b/0x110 [ 837.309428][T25067] ? __pfx_kill_f2fs_super+0x10/0x10 [ 837.309479][T25067] ? __pfx_call_rcu+0x10/0x10 [ 837.309515][T25067] ? shrinker_free+0x2a7/0x3b0 [ 837.309542][T25067] deactivate_locked_super+0xbe/0x110 [ 837.309569][T25067] cleanup_mnt+0x3d3/0x460 [ 837.309603][T25067] task_work_run+0x1d9/0x260 [ 837.309631][T25067] ? __pfx_task_work_run+0x10/0x10 [ 837.309667][T25067] exit_to_user_mode_loop+0x204/0x770 [ 837.309694][T25067] ? rcu_is_watching+0x16/0xb0 [ 837.309727][T25067] do_syscall_64+0x328/0x520 [ 837.309752][T25067] ? trace_irq_disable+0x3b/0x140 [ 837.309778][T25067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.309799][T25067] ? clear_bhb_loop+0x70/0xc0 [ 837.309823][T25067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.309844][T25067] RIP: 0033:0x7fde3b59f397 [ 837.309864][T25067] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 837.309881][T25067] RSP: 002b:00007ffeff0a3198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 837.309903][T25067] RAX: 0000000000000000 RBX: 00007fde3b6344bb RCX: 00007fde3b59f397 [ 837.309918][T25067] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeff0a3250 [ 837.309931][T25067] RBP: 00007ffeff0a3250 R08: 00007ffeff0a4250 R09: 00000000ffffffff [ 837.309945][T25067] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeff0a42e0 [ 837.309958][T25067] R13: 00007fde3b6344bb R14: 00000000000cc5fa R15: 00007ffeff0a4320 [ 837.309992][T25067] [ 837.310092][T25067] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 837.625994][ T5723] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 837.999610][T27487] loop8: detected capacity change from 0 to 32768 [ 838.034806][T27487] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5142 (27487) [ 838.120847][T27487] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 838.120881][T27487] BTRFS info (device loop8): using sha256 checksum algorithm [ 838.495104][T27487] BTRFS info (device loop8): rebuilding free space tree [ 838.982104][T27487] BTRFS info (device loop8): disabling free space tree [ 838.982172][T27487] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 838.982194][T27487] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 839.156117][T27487] BTRFS info (device loop8): checking UUID tree [ 839.166212][T27487] BTRFS info (device loop8): turning off barriers [ 839.166239][T27487] BTRFS info (device loop8): force clearing of disk cache [ 839.166266][T27487] BTRFS info (device loop8): use lzo compression, level 1 [ 841.020997][T27567] ip_tables: iptables: counters copy to user failed while replacing table [ 841.324141][T27571] overlayfs: failed to clone upperpath [ 841.391365][T24975] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 841.409863][T27576] netlink: 'syz.4.5150': attribute type 11 has an invalid length. [ 841.437281][T15170] Bluetooth: hci3: command 0x0406 tx timeout [ 841.722467][ T1221] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 841.835273][T27581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.840314][T27581] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.888824][T27581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.898340][ T1221] usb 4-1: Using ep0 maxpacket: 16 [ 841.899268][ T1221] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 841.903364][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.903394][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.903429][ T1221] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 841.903476][ T1221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.911742][ T1221] usb 4-1: config 0 descriptor?? [ 842.064668][T27581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.074718][T27581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.091136][T27581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 842.091162][T27581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 842.151138][T27581] veth1_vlan: left promiscuous mode [ 842.151664][T27591] FAULT_INJECTION: forcing a failure. [ 842.151664][T27591] name failslab, interval 1, probability 0, space 0, times 0 [ 842.151696][T27591] CPU: 0 UID: 0 PID: 27591 Comm: syz.8.5152 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.151728][T27591] Tainted: [L]=SOFTLOCKUP [ 842.151736][T27591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 842.151750][T27591] Call Trace: [ 842.151762][T27591] [ 842.151772][T27591] dump_stack_lvl+0xe8/0x150 [ 842.151809][T27591] should_fail_ex+0x3eb/0x540 [ 842.151848][T27591] should_failslab+0xa8/0x100 [ 842.151884][T27591] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 842.151910][T27591] ? percpu_ref_tryget+0x15/0x180 [ 842.151933][T27591] ? xas_split_alloc+0x19c/0x4c0 [ 842.151962][T27591] ? xas_split_alloc+0x19c/0x4c0 [ 842.151998][T27591] xas_split_alloc+0x19c/0x4c0 [ 842.152041][T27591] __folio_split+0xc2e/0x2250 [ 842.152085][T27591] ? __pfx___folio_split+0x10/0x10 [ 842.152112][T27591] ? __up_read+0x29c/0x930 [ 842.152136][T27591] ? folio_alloc_swap+0x2cc/0x12e0 [ 842.152165][T27591] shmem_writeout+0x571/0x17a0 [ 842.152198][T27591] ? lock_acquire+0x115/0x350 [ 842.152226][T27591] ? __pfx_shmem_writeout+0x10/0x10 [ 842.152255][T27591] ? folio_mapping+0x16f/0x1f0 [ 842.152283][T27591] ? folio_clear_dirty_for_io+0x162/0x820 [ 842.152310][T27591] ? try_to_unmap_flush_dirty+0x96/0x100 [ 842.152338][T27591] shrink_folio_list+0x2f65/0x4d90 [ 842.152393][T27591] ? __pfx_shrink_folio_list+0x10/0x10 [ 842.152415][T27591] ? __lock_acquire+0x747/0x2de0 [ 842.152492][T27591] ? __lock_acquire+0x747/0x2de0 [ 842.152530][T27591] ? __pfx___css_rstat_updated+0x10/0x10 [ 842.152569][T27591] reclaim_folio_list+0x100/0x430 [ 842.152609][T27591] ? __pfx_reclaim_folio_list+0x10/0x10 [ 842.152650][T27591] reclaim_pages+0x452/0x530 [ 842.152682][T27591] ? __pfx_reclaim_pages+0x10/0x10 [ 842.152710][T27591] ? do_raw_spin_unlock+0xf5/0x200 [ 842.152736][T27591] madvise_cold_or_pageout_pte_range+0x18ef/0x2400 [ 842.152786][T27591] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 842.152827][T27591] ? lock_acquire+0x115/0x350 [ 842.152858][T27591] walk_pgd_range+0x102d/0x1dc0 [ 842.152925][T27591] ? __pfx_walk_pgd_range+0x10/0x10 [ 842.152956][T27591] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 842.152994][T27591] __walk_page_range+0x16d/0x720 [ 842.153045][T27591] walk_page_range_vma_unsafe+0x309/0x410 [ 842.153083][T27591] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 842.153120][T27591] ? mlock_drain_local+0x79/0x490 [ 842.153153][T27591] ? walk_page_range_vma+0x6b/0x90 [ 842.153186][T27591] madvise_vma_behavior+0x2f63/0x5180 [ 842.153227][T27591] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 842.153264][T27591] ? do_raw_spin_lock+0x12b/0x2f0 [ 842.153293][T27591] ? irqentry_exit+0x218/0x910 [ 842.153322][T27591] ? lockdep_hardirqs_on+0x7b/0x110 [ 842.153349][T27591] ? irqentry_exit+0x218/0x910 [ 842.153375][T27591] ? trace_irq_disable+0x3b/0x140 [ 842.153422][T27591] ? finish_task_switch+0x413/0xc60 [ 842.153465][T27591] ? rcu_is_watching+0x16/0xb0 [ 842.153497][T27591] ? trace_sched_exit_tp+0x3a/0x130 [ 842.153531][T27591] ? __lock_acquire+0x747/0x2de0 [ 842.153578][T27591] ? mas_prev_slot+0xb76/0xbf0 [ 842.153622][T27591] ? find_vma_prev+0x123/0x1b0 [ 842.153653][T27591] ? __pfx_find_vma_prev+0x10/0x10 [ 842.153686][T27591] ? __pfx___futex_wait+0x10/0x10 [ 842.153716][T27591] madvise_walk_vmas+0x57d/0xb70 [ 842.153759][T27591] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 842.153794][T27591] ? blk_start_plug+0x6e/0x1b0 [ 842.153819][T27591] madvise_do_behavior+0x385/0x540 [ 842.153854][T27591] ? __pfx_madvise_do_behavior+0x10/0x10 [ 842.153892][T27591] ? down_read+0x2b9/0x320 [ 842.153930][T27591] do_madvise+0x26f/0x330 [ 842.153967][T27591] ? __pfx_do_madvise+0x10/0x10 [ 842.154006][T27591] ? rcu_is_watching+0x16/0xb0 [ 842.154045][T27591] __x64_sys_madvise+0xa6/0xc0 [ 842.154076][T27591] do_syscall_64+0x166/0x520 [ 842.154104][T27591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.154125][T27591] ? clear_bhb_loop+0x70/0xc0 [ 842.154151][T27591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.154172][T27591] RIP: 0033:0x7f97d359e159 [ 842.154193][T27591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.154212][T27591] RSP: 002b:00007f97d43fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 842.154236][T27591] RAX: ffffffffffffffda RBX: 00007f97d3825fa0 RCX: 00007f97d359e159 [ 842.154252][T27591] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 842.154268][T27591] RBP: 00007f97d363506b R08: 0000000000000000 R09: 0000000000000000 [ 842.154283][T27591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.154298][T27591] R13: 00007f97d3826038 R14: 00007f97d3825fa0 R15: 00007ffff76c18a8 [ 842.154331][T27591] [ 842.160420][T27581] veth0_vlan: left promiscuous mode [ 842.177807][T27581] veth0_vlan: entered promiscuous mode [ 842.181563][T27581] veth1_vlan: entered promiscuous mode [ 842.250068][T27581] veth1_macvtap: left promiscuous mode [ 842.259171][T27581] veth0_macvtap: left promiscuous mode [ 842.272852][T27581] veth0_macvtap: entered promiscuous mode [ 842.326246][T27581] veth1_macvtap: entered promiscuous mode [ 842.467252][T27581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 842.485176][T27581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 842.512637][T27581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 842.519626][ T1221] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001C/input/input44 [ 842.529272][T27581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.656529][ T1221] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 842.673547][T27584] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 842.697242][T15335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.697302][T15335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.697338][T15335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.697382][T15335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.723956][ T1221] usb 4-1: USB disconnect, device number 11 [ 843.090534][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.090639][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.093437][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.093538][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.111289][T27596] fido_id[27596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 844.139567][ T6053] IPVS: starting estimator thread 0... [ 844.228485][T27641] IPVS: using max 27 ests per chain, 64800 per kthread [ 845.036568][T27663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5175'. [ 845.120091][ T5723] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 845.419223][T27670] loop3: detected capacity change from 0 to 4096 [ 845.570878][T27670] ntfs3(loop3): Failed to load $Extend (-22). [ 845.570907][T27670] ntfs3(loop3): Failed to initialize $Extend. [ 845.771462][T27679] loop8: detected capacity change from 0 to 256 [ 846.362746][T27694] netlink: 'syz.5.5186': attribute type 11 has an invalid length. [ 846.444555][T27697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5187'. [ 846.445099][T27689] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 846.633128][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880354bc400: rx timeout, send abort [ 846.723578][T27711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5193'. [ 846.802229][T27699] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode [ 846.828527][T27715] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5193'. [ 847.281379][T27729] tipc: Resetting bearer [ 847.416603][T27729] tipc: Disabling bearer [ 847.925036][T27755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5207'. [ 848.304624][T27776] loop4: detected capacity change from 0 to 1024 [ 849.303126][T15170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 849.330024][T15170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 849.331381][T15170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 849.354760][T15170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 849.367165][T15170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 850.140687][T27842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5223'. [ 850.141699][T27837] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 850.553300][T27853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5226'. [ 850.615163][T27855] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 850.615189][T27855] overlayfs: failed to set xattr on upper [ 850.615199][T27855] overlayfs: ...falling back to redirect_dir=nofollow. [ 850.615208][T27855] overlayfs: ...falling back to index=off. [ 850.615217][T27855] overlayfs: ...falling back to uuid=null. [ 850.677891][T27856] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 850.677916][T27856] overlayfs: failed to set xattr on upper [ 850.677925][T27856] overlayfs: ...falling back to redirect_dir=nofollow. [ 850.677934][T27856] overlayfs: ...falling back to index=off. [ 850.677942][T27856] overlayfs: ...falling back to uuid=null. [ 851.000136][T27814] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.000304][T27814] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.000428][T27814] bridge_slave_0: entered allmulticast mode [ 851.005256][T27814] bridge_slave_0: entered promiscuous mode [ 851.034700][T27814] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.034863][T27814] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.035066][T27814] bridge_slave_1: entered allmulticast mode [ 851.036649][T27814] bridge_slave_1: entered promiscuous mode [ 851.093424][T27814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.095810][T27814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.152946][T27814] team0: Port device team_slave_0 added [ 851.155744][T27814] team0: Port device team_slave_1 added [ 851.199713][T27814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.199732][T27814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.199758][T27814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.201563][T27814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.201577][T27814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.201604][T27814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.317974][T27814] hsr_slave_0: entered promiscuous mode [ 851.319011][T27814] hsr_slave_1: entered promiscuous mode [ 851.322385][T27814] debugfs: 'hsr0' already exists in 'hsr' [ 851.322407][T27814] Cannot create hsr debugfs directory [ 851.517215][ T5611] Bluetooth: hci1: command tx timeout [ 851.969411][T27814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.969435][T27814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.057989][T27814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.058013][T27814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.134380][T27814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.134404][T27814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.159338][T20151] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 852.238214][T27814] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.238237][T27814] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.389798][T27814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 852.392475][T27814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 852.393242][T27814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 852.395205][T27814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 852.395948][T27814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 852.398753][T27814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 852.399566][T27814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 852.440492][T27814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.501191][T27814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.513086][T27814] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.523987][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.524046][ T7525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.546152][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.546215][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.845416][T27814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.880478][T27814] veth0_vlan: entered promiscuous mode [ 852.886083][T27814] veth1_vlan: entered promiscuous mode [ 852.915967][T27814] veth0_macvtap: entered promiscuous mode [ 852.920610][T27814] veth1_macvtap: entered promiscuous mode [ 852.937542][T27814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.943559][T27814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.979555][T15309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.979600][T15309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.979627][T15309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.979658][T15309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.068701][ T7531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.068721][ T7531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.185583][ T7531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.185605][ T7531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.607296][ T5611] Bluetooth: hci1: command tx timeout [ 854.189653][T27912] loop4: detected capacity change from 0 to 8 [ 854.196659][T27912] SQUASHFS error: zlib decompression failed, data probably corrupt [ 854.196691][T27912] SQUASHFS error: Failed to read block 0x9b: -5 [ 854.196715][T27912] SQUASHFS error: Unable to read metadata cache entry [99] [ 854.196729][T27912] SQUASHFS error: Unable to read inode 0x127 [ 854.282811][T27919] netlink: 'syz.3.5228': attribute type 11 has an invalid length. [ 854.416344][ T33] audit: type=1326 audit(1790716462.542:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27914 comm="syz.8.5231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97d359e159 code=0x0 [ 854.490725][T27921] fuse: fd is not a fuse device [ 854.614498][T27924] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 854.929685][T27942] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5239'. [ 855.013517][T27939] loop3: detected capacity change from 0 to 32768 [ 855.030911][T27939] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5236 (27939) [ 855.068845][T27939] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 855.068881][T27939] BTRFS info (device loop3): using blake2b checksum algorithm [ 855.249922][T27939] BTRFS info (device loop3): enabling ssd optimizations [ 855.249951][T27939] BTRFS info (device loop3): turning on async discard [ 855.249967][T27939] BTRFS info (device loop3): enabling free space tree [ 855.249986][T27939] BTRFS info (device loop3): use zstd compression, level 3 [ 855.689143][ T5611] Bluetooth: hci1: command tx timeout [ 855.980897][T27975] fuse: fd is not a fuse device [ 857.908453][ T5611] Bluetooth: hci1: command tx timeout [ 858.868433][T27987] netlink: 'syz.4.5247': attribute type 11 has an invalid length. [ 858.965114][T27993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5246'. [ 859.067302][T27814] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 859.208538][T20151] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 859.722240][T27984] syz.8.5244 (27984): drop_caches: 2 [ 859.831393][ T33] audit: type=1326 audit(2000000000.349:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28003 comm="syz.4.5261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a19e159 code=0x7ffc0000 [ 859.831471][ T33] audit: type=1326 audit(2000000000.349:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28003 comm="syz.4.5261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a19e159 code=0x7ffc0000 [ 859.833060][ T33] audit: type=1326 audit(2000000000.349:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28003 comm="syz.4.5261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a19e159 code=0x7ffc0000 [ 859.833110][ T33] audit: type=1326 audit(2000000000.349:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28003 comm="syz.4.5261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a19e159 code=0x7ffc0000 [ 859.833154][ T33] audit: type=1326 audit(2000000000.349:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28003 comm="syz.4.5261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fee1a19e159 code=0x7ffc0000 [ 859.833193][ T33] audit: type=1326 audit(2000000000.349:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28003 comm="syz.4.5261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a19e159 code=0x7ffc0000 [ 859.833230][ T33] audit: type=1326 audit(2000000000.349:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28003 comm="syz.4.5261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a19e159 code=0x7ffc0000 [ 859.833270][ T33] audit: type=1326 audit(2000000000.349:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28003 comm="syz.4.5261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a19e159 code=0x7ffc0000 [ 859.833311][ T33] audit: type=1326 audit(2000000000.349:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28003 comm="syz.4.5261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1a19e159 code=0x7ffc0000 [ 859.833832][ T33] audit: type=1326 audit(2000000000.349:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28003 comm="syz.4.5261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee1a19e159 code=0x7ffc0000 [ 861.000316][T28032] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 861.411782][T28053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5270'. [ 861.562520][T28059] cgroup: fork rejected by pids controller in /syz4 [ 862.260190][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.631833][T15170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 862.661419][T15170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 862.664048][T15170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 862.683095][T15170] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 862.691641][T15170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 862.888319][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.985007][T28087] fuse: fd is not a fuse device [ 863.038381][T15170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 863.052140][T15170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 863.059395][T15170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 863.096497][T15170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 863.106595][T15170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 863.219932][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.315805][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.999170][ T45] netdevsim netdevsim3 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.999240][ T45] netdevsim netdevsim3 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.082625][ T52] bridge_slave_1: left allmulticast mode [ 864.082651][ T52] bridge_slave_1: left promiscuous mode [ 864.082854][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.108004][ T52] bridge_slave_0: left allmulticast mode [ 864.108022][ T52] bridge_slave_0: left promiscuous mode [ 864.108178][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.422662][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.426759][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.440017][ T52] bond0 (unregistering): Released all slaves [ 864.654630][T28138] netlink: 'syz.5.5293': attribute type 1 has an invalid length. [ 864.763992][T28140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5293'. [ 864.878910][ T5611] Bluetooth: hci0: command tx timeout [ 864.982290][T28139] bond1: (slave veth0_to_bond): making interface the new active one [ 864.983464][T28139] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 864.997928][T28140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 865.136438][T27435] netdevsim netdevsim3 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.139020][ T45] netdevsim netdevsim3 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.278310][ T5611] Bluetooth: hci1: command tx timeout [ 866.235508][ T52] hsr_slave_0: left promiscuous mode [ 866.240294][T27489] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 866.262407][ T52] hsr_slave_1: left promiscuous mode [ 866.263303][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.263324][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.266334][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.266353][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.361252][ T52] veth1_macvtap: left promiscuous mode [ 866.361293][ T52] veth0_macvtap: left promiscuous mode [ 866.361426][ T52] veth1_vlan: left promiscuous mode [ 866.361491][ T52] veth0_vlan: left promiscuous mode [ 866.936203][ T52] team0 (unregistering): Port device team_slave_1 removed [ 866.958028][ T5611] Bluetooth: hci0: command tx timeout [ 866.960620][ T52] team0 (unregistering): Port device team_slave_0 removed [ 867.166257][ T5271] 8021q: adding VLAN 0 to HW filter on device eth19 [ 867.357062][ T5611] Bluetooth: hci1: command tx timeout [ 867.980805][T28088] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.980904][T28088] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.981037][T28088] bridge_slave_0: entered allmulticast mode [ 867.982781][T28088] bridge_slave_0: entered promiscuous mode [ 868.047159][T28088] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.047263][T28088] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.047386][T28088] bridge_slave_1: entered allmulticast mode [ 868.049011][T28088] bridge_slave_1: entered promiscuous mode [ 868.108462][T28081] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.108642][T28081] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.108784][T28081] bridge_slave_0: entered allmulticast mode [ 868.110469][T28081] bridge_slave_0: entered promiscuous mode [ 868.146204][T28088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.151181][T28081] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.151276][T28081] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.151407][T28081] bridge_slave_1: entered allmulticast mode [ 868.155941][T28081] bridge_slave_1: entered promiscuous mode [ 868.193920][T28088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.252949][T28081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.261752][T28088] team0: Port device team_slave_0 added [ 868.273790][T28081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.293269][T28088] team0: Port device team_slave_1 added [ 868.294461][ T5271] 8021q: adding VLAN 0 to HW filter on device eth20 [ 868.328890][T28081] team0: Port device team_slave_0 added [ 868.344059][T28081] team0: Port device team_slave_1 added [ 868.355130][T28088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.355146][T28088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.355167][T28088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.392306][T28081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.392323][T28081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.392348][T28081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.395742][T28088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.395756][T28088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.395781][T28088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.412559][T28081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.412575][T28081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.412601][T28081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.526712][T28088] hsr_slave_0: entered promiscuous mode [ 868.532043][T28088] hsr_slave_1: entered promiscuous mode [ 868.535748][T28088] debugfs: 'hsr0' already exists in 'hsr' [ 868.535770][T28088] Cannot create hsr debugfs directory [ 868.560122][T28081] hsr_slave_0: entered promiscuous mode [ 868.560779][T28081] hsr_slave_1: entered promiscuous mode [ 868.561178][T28081] debugfs: 'hsr0' already exists in 'hsr' [ 868.561197][T28081] Cannot create hsr debugfs directory [ 868.995805][T28088] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.037345][ T5611] Bluetooth: hci0: command tx timeout [ 869.053497][ T5271] 8021q: adding VLAN 0 to HW filter on device eth23 [ 869.140381][T28088] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.237258][T28088] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.336572][T28088] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.447774][ T5611] Bluetooth: hci1: command tx timeout [ 869.590098][T28081] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.626088][ T5271] 8021q: adding VLAN 0 to HW filter on device eth24 [ 869.756488][T28081] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.864709][T28081] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.956268][T28081] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.108181][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.108239][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.108705][ T1313] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 870.272672][T28088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 870.290908][T28088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.291908][T28088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 870.295708][T28088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.297157][T28088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 870.310622][T28088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.311523][T28088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 870.320832][T28088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 870.614530][T28081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 870.620808][T28081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.625239][T28081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 870.631614][T28081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.634910][T28081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 870.652289][T28081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.653160][T28081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 870.664189][T28081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 870.675258][T28088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.719350][T28088] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.751436][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.751564][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.764785][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.764885][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.936868][T28081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.954304][T28081] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.962798][T27883] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.962902][T27883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.975152][T27871] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.975268][T27871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.119413][T15170] Bluetooth: hci0: command tx timeout [ 871.517349][T15170] Bluetooth: hci1: command tx timeout [ 871.605202][T28088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.786816][T28081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.890132][T28081] veth0_vlan: entered promiscuous mode [ 871.910847][T28081] veth1_vlan: entered promiscuous mode [ 871.993978][T28081] veth0_macvtap: entered promiscuous mode [ 872.016518][T28081] veth1_macvtap: entered promiscuous mode [ 872.055242][T28081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.072582][T28081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.108078][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.154114][T27883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.159503][T27871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.187263][T15309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.414489][T28088] veth0_vlan: entered promiscuous mode [ 872.453938][T27870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.453961][T27870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.493835][T28088] veth1_vlan: entered promiscuous mode [ 872.533242][T27871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.533265][T27871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.611443][T28088] veth0_macvtap: entered promiscuous mode [ 872.620800][T28088] veth1_macvtap: entered promiscuous mode [ 872.656319][T28088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.679327][T28088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.710861][ T7525] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.711183][ T7525] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.711317][ T7525] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.748941][ T7525] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.973012][T28346] overlayfs: failed to clone upperpath [ 873.179156][T27870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.179178][T27870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.288799][ T32] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 873.312543][T27870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.312573][T27870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.052673][ T10] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 874.064247][ T10] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 874.335785][T28398] loop4: detected capacity change from 0 to 4096 [ 874.349093][T28398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 874.349117][T28398] EXT4-fs (loop4): Test dummy encryption mode enabled [ 874.375810][T28398] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 874.375927][T28398] System zones: 0-5 [ 874.394403][T28398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.476256][ T33] kauditd_printk_skb: 24 callbacks suppressed [ 874.476277][ T33] audit: type=1800 audit(2000000014.989:487): pid=28398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5311" name="file1" dev="overlay" ino=15 res=0 errno=-22 [ 874.482930][T28392] fido_id[28392]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 874.576009][T28405] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5315'. [ 875.002784][T28088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.062135][T28473] ptp ptp0: new virtual clock ptp1 [ 876.062161][T28473] ptp ptp0: guarantee physical clock free running [ 876.062872][T28477] ptp ptp0: delete virtual clock ptp1 [ 876.165565][T28477] ptp ptp0: only physical clock in use now [ 877.277112][T15170] Bluetooth: hci2: command 0x0406 tx timeout [ 877.898477][T28522] fuse: Bad value for 'fd' [ 878.709472][T28553] loop8: detected capacity change from 0 to 512 [ 878.710402][T28553] EXT4-fs: Ignoring removed bh option [ 878.735282][T28553] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 878.932232][T28565] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5359'. [ 878.985806][T28559] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5359'. [ 878.989259][T28562] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5359'. [ 879.271242][T28553] EXT4-fs (loop8): failed to open journal device unknown-block(0,0) -ENXIO [ 879.326006][T28553] loop8: detected capacity change from 0 to 8 [ 879.349812][T28553] SQUASHFS error: lzo decompression failed, data probably corrupt [ 879.349845][T28553] SQUASHFS error: Failed to read block 0x91: -5 [ 879.349860][T28553] SQUASHFS error: Unable to read metadata cache entry [8f] [ 879.349873][T28553] SQUASHFS error: Unable to read inode 0x11f [ 879.471366][T28579] afs: Bad value for 'source' [ 879.514348][T28553] loop8: detected capacity change from 0 to 1024 [ 879.534989][T28553] hfsplus: failed to load extents file [ 880.327953][ T5722] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 880.588519][T28612] overlayfs: failed to get inode (-116) [ 880.588851][T28612] overlayfs: failed to get inode (-116) [ 880.914119][T28621] loop1: detected capacity change from 0 to 4096 [ 880.981378][T28621] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 881.044297][T28628] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.044851][T28628] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.053797][T28628] bridge0: entered allmulticast mode [ 881.094317][T28628] bridge_slave_1: left allmulticast mode [ 881.094394][T28628] bridge_slave_1: left promiscuous mode [ 881.099650][T28628] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.125677][T28621] ntfs3(loop1): ino=1a, mi_enum_attr [ 881.125765][T28621] ntfs3(loop1): ino=1a, mi_enum_attr [ 881.125776][T28621] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 881.193427][T28628] bridge_slave_0: left allmulticast mode [ 881.193455][T28628] bridge_slave_0: left promiscuous mode [ 881.193660][T28628] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.601569][T28639] fuse: root generation should be zero [ 881.787994][T28648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5380'. [ 882.094568][T28658] input: syz0 as /devices/virtual/input/input46 [ 882.678711][T28680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5389'. [ 882.905458][T28680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.965011][T28680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.220153][T28691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5394'. [ 883.352013][T28695] 9p: Bad value for 'wfdno' [ 884.299595][T28702] syz.1.5396 (28702): drop_caches: 2 [ 885.052645][T28745] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.5412'. [ 885.484702][T28760] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.765584][T28771] loop8: detected capacity change from 0 to 1024 [ 885.925547][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880616da800: rx timeout, send abort [ 885.925749][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880616da800: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 886.370628][T28789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5432'. [ 886.371417][T28789] veth0_macvtap: Caught tx_queue_len zero misconfig [ 886.475151][T28793] bridge_slave_0: entered promiscuous mode [ 886.484034][T28793] team_slave_1: Caught tx_queue_len zero misconfig [ 886.646145][T28799] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5434'. [ 887.201685][T28814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5438'. [ 887.277231][ T1221] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 887.363965][ T27] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 887.377612][T28820] CIFS: Attempting to mount //127.0.0.1/share [ 887.431425][ T1221] usb 2-1: Using ep0 maxpacket: 8 [ 887.433645][ T1221] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 887.435657][ T1221] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 887.435689][ T1221] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 887.435715][ T1221] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 887.435738][ T1221] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.435777][ T1221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.447736][T28821] CIFS: VFS: \\127.0.0.1 SMB response too long (65600 bytes) [ 887.453709][T28820] CIFS: VFS: cifs_mount failed w/return code = -112 [ 887.668736][ T1221] usb 2-1: GET_CAPABILITIES returned 0 [ 887.668788][ T1221] usbtmc 2-1:16.0: can't read capabilities [ 887.736540][T28835] loop8: detected capacity change from 0 to 512 [ 887.749215][T28835] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 887.755233][T28835] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 887.755521][T28835] EXT4-fs (loop8): orphan cleanup on readonly fs [ 887.761870][T28835] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:521: comm syz.8.5443: Block bitmap for bg 0 marked uninitialized [ 887.764036][T28835] loop8: lost filesystem error report for type 5 error -117 [ 887.766924][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 887.766944][ C0] EXT4-fs (loop8): initial error at time 2000000028: ext4_read_block_bitmap_nowait:521 [ 887.766987][ C0] EXT4-fs (loop8): last error at time 2000000028: ext4_read_block_bitmap_nowait:521 [ 887.770018][T28835] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 887.770041][T28835] loop8: lost filesystem error report for type 5 error -117 [ 887.771497][T28835] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:521: comm syz.8.5443: Block bitmap for bg 0 marked uninitialized [ 887.771524][T28835] loop8: lost filesystem error report for type 5 error -117 [ 887.774474][T28835] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 887.774523][T28835] loop8: lost filesystem error report for type 5 error -117 [ 887.776460][T28835] EXT4-fs (loop8): 1 orphan inode deleted [ 887.782897][T28835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 887.925824][ T1221] kernel read not supported for file / (pid: 1221 comm: kworker/0:2) [ 887.955075][ T1221] usb 2-1: USB disconnect, device number 12 [ 888.600957][T24975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.820662][T28884] 9p: Bad value for 'wfdno' [ 888.904169][T28888] xt_hashlimit: size too large, truncated to 1048576 [ 889.033354][T28897] netlink: 'syz.5.5462': attribute type 1 has an invalid length. [ 889.033379][T28897] netlink: 64399 bytes leftover after parsing attributes in process `syz.5.5462'. [ 889.336511][T28906] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5465'. [ 890.041280][T28935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5473'. [ 890.369449][T28953] CIFS: Attempting to mount //127.0.0.1/share [ 890.417290][T28954] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5479'. [ 891.131027][T28976] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5485'. [ 891.256460][T28953] CIFS: VFS: Error connecting to socket. Aborting operation. [ 891.260372][T28953] CIFS: VFS: cifs_mount failed w/return code = -4 [ 891.435030][T28986] loop1: detected capacity change from 0 to 256 [ 892.039357][T27435] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.039474][T27435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.603770][T29013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5496'. [ 892.749470][T29018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5500'. [ 893.004172][T29024] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.004567][T29024] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.005025][T29024] bridge0: entered allmulticast mode [ 893.034682][T29024] bridge_slave_1: left allmulticast mode [ 893.034708][T29024] bridge_slave_1: left promiscuous mode [ 893.034912][T29024] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.063577][T29024] bridge_slave_0: left allmulticast mode [ 893.063782][T29024] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.408692][ T5722] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 894.493027][T29069] FAULT_INJECTION: forcing a failure. [ 894.493027][T29069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 894.493063][T29069] CPU: 0 UID: 0 PID: 29069 Comm: syz.8.5516 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.493093][T29069] Tainted: [L]=SOFTLOCKUP [ 894.493102][T29069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 894.493115][T29069] Call Trace: [ 894.493124][T29069] [ 894.493134][T29069] dump_stack_lvl+0xe8/0x150 [ 894.493175][T29069] should_fail_ex+0x3eb/0x540 [ 894.493214][T29069] prepare_alloc_pages+0x21e/0x5f0 [ 894.493250][T29069] __alloc_frozen_pages_noprof+0x17a/0x400 [ 894.493283][T29069] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 894.493311][T29069] ? __alloc_frozen_pages_noprof+0x24a/0x400 [ 894.493342][T29069] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 894.493381][T29069] __alloc_pages_noprof+0x10/0x100 [ 894.493410][T29069] alloc_pages_bulk_noprof+0x668/0x890 [ 894.493446][T29069] ? alloc_pages_noprof+0x140/0x2b0 [ 894.493482][T29069] __kasan_populate_vmalloc+0xb7/0x1c0 [ 894.493515][T29069] alloc_vmap_area+0xd10/0x1410 [ 894.493550][T29069] ? __pfx_alloc_vmap_area+0x10/0x10 [ 894.493570][T29069] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 894.493599][T29069] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 894.493625][T29069] ? __get_vm_area_node+0x155/0x2f0 [ 894.493651][T29069] __get_vm_area_node+0x200/0x2f0 [ 894.493680][T29069] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 894.493705][T29069] ? translate_table+0x1a2/0x2010 [ 894.493737][T29069] ? is_bpf_text_address+0x292/0x2b0 [ 894.493759][T29069] ? is_bpf_text_address+0x26/0x2b0 [ 894.493782][T29069] ? kernel_text_address+0xa5/0xe0 [ 894.493815][T29069] ? arch_stack_walk+0xfb/0x150 [ 894.493860][T29069] ? stack_trace_save+0xa9/0x100 [ 894.493891][T29069] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 894.493915][T29069] ? translate_table+0x1a2/0x2010 [ 894.493947][T29069] ? rcu_is_watching+0x16/0xb0 [ 894.493979][T29069] ? translate_table+0x1a2/0x2010 [ 894.494007][T29069] ? rcu_is_watching+0x16/0xb0 [ 894.494041][T29069] ? translate_table+0x1a2/0x2010 [ 894.494069][T29069] __kvmalloc_node_noprof+0x59c/0x820 [ 894.494099][T29069] ? translate_table+0x1a2/0x2010 [ 894.494126][T29069] ? do_syscall_64+0x166/0x520 [ 894.494159][T29069] ? translate_table+0x1a2/0x2010 [ 894.494195][T29069] translate_table+0x1a2/0x2010 [ 894.494246][T29069] ? __pfx_translate_table+0x10/0x10 [ 894.494282][T29069] ? __might_fault+0xaf/0x130 [ 894.494310][T29069] ? _copy_from_user+0x94/0xb0 [ 894.494338][T29069] do_arpt_set_ctl+0x81a/0xb50 [ 894.494368][T29069] ? trace_contention_end+0x3d/0x140 [ 894.494406][T29069] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 894.494436][T29069] ? nf_setsockopt+0x221/0x290 [ 894.494466][T29069] ? __mutex_unlock_slowpath+0x731/0x900 [ 894.494512][T29069] nf_setsockopt+0x26f/0x290 [ 894.494538][T29069] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 894.494563][T29069] do_sock_setsockopt+0x17c/0x1b0 [ 894.494594][T29069] __x64_sys_setsockopt+0x13d/0x1b0 [ 894.494625][T29069] do_syscall_64+0x166/0x520 [ 894.494652][T29069] ? trace_irq_disable+0x3b/0x140 [ 894.494681][T29069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.494705][T29069] ? clear_bhb_loop+0x70/0xc0 [ 894.494730][T29069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.494751][T29069] RIP: 0033:0x7f97d359e159 [ 894.494770][T29069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.494788][T29069] RSP: 002b:00007f97d43fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 894.494812][T29069] RAX: ffffffffffffffda RBX: 00007f97d3825fa0 RCX: 00007f97d359e159 [ 894.494828][T29069] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 894.494850][T29069] RBP: 00007f97d363506b R08: 0000000000000a50 R09: 0000000000000000 [ 894.494864][T29069] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 894.494879][T29069] R13: 00007f97d3826038 R14: 00007f97d3825fa0 R15: 00007ffff76c18a8 [ 894.494911][T29069] [ 894.514224][T29069] syz.8.5516: vmalloc error: size 7566732, align 0x200000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 894.514300][T29069] CPU: 0 UID: 0 PID: 29069 Comm: syz.8.5516 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.514329][T29069] Tainted: [L]=SOFTLOCKUP [ 894.514338][T29069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 894.514352][T29069] Call Trace: [ 894.514360][T29069] [ 894.514369][T29069] dump_stack_lvl+0xe8/0x150 [ 894.514404][T29069] warn_alloc+0x24d/0x270 [ 894.514431][T29069] ? lockdep_hardirqs_on+0x7b/0x110 [ 894.514462][T29069] ? __pfx_warn_alloc+0x10/0x10 [ 894.514486][T29069] ? kfree+0x1c5/0x650 [ 894.514513][T29069] ? __get_vm_area_node+0x219/0x2f0 [ 894.514542][T29069] __vmalloc_node_range_noprof+0x396/0x16f0 [ 894.514567][T29069] ? is_bpf_text_address+0x292/0x2b0 [ 894.514587][T29069] ? is_bpf_text_address+0x26/0x2b0 [ 894.514609][T29069] ? kernel_text_address+0xa5/0xe0 [ 894.514641][T29069] ? arch_stack_walk+0xfb/0x150 [ 894.514679][T29069] ? stack_trace_save+0xa9/0x100 [ 894.514706][T29069] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 894.514728][T29069] ? translate_table+0x1a2/0x2010 [ 894.514758][T29069] ? rcu_is_watching+0x16/0xb0 [ 894.514788][T29069] ? translate_table+0x1a2/0x2010 [ 894.514814][T29069] ? rcu_is_watching+0x16/0xb0 [ 894.514855][T29069] ? translate_table+0x1a2/0x2010 [ 894.514882][T29069] __kvmalloc_node_noprof+0x59c/0x820 [ 894.514910][T29069] ? translate_table+0x1a2/0x2010 [ 894.514936][T29069] ? do_syscall_64+0x166/0x520 [ 894.514967][T29069] ? translate_table+0x1a2/0x2010 [ 894.515000][T29069] translate_table+0x1a2/0x2010 [ 894.515050][T29069] ? __pfx_translate_table+0x10/0x10 [ 894.515087][T29069] ? __might_fault+0xaf/0x130 [ 894.515110][T29069] ? _copy_from_user+0x94/0xb0 [ 894.515139][T29069] do_arpt_set_ctl+0x81a/0xb50 [ 894.515167][T29069] ? trace_contention_end+0x3d/0x140 [ 894.515204][T29069] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 894.515233][T29069] ? nf_setsockopt+0x221/0x290 [ 894.515265][T29069] ? __mutex_unlock_slowpath+0x731/0x900 [ 894.515314][T29069] nf_setsockopt+0x26f/0x290 [ 894.515340][T29069] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 894.515364][T29069] do_sock_setsockopt+0x17c/0x1b0 [ 894.515394][T29069] __x64_sys_setsockopt+0x13d/0x1b0 [ 894.515424][T29069] do_syscall_64+0x166/0x520 [ 894.515450][T29069] ? trace_irq_disable+0x3b/0x140 [ 894.515477][T29069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.515499][T29069] ? clear_bhb_loop+0x70/0xc0 [ 894.515523][T29069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.515543][T29069] RIP: 0033:0x7f97d359e159 [ 894.515562][T29069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.515580][T29069] RSP: 002b:00007f97d43fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 894.515602][T29069] RAX: ffffffffffffffda RBX: 00007f97d3825fa0 RCX: 00007f97d359e159 [ 894.515617][T29069] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 894.515630][T29069] RBP: 00007f97d363506b R08: 0000000000000a50 R09: 0000000000000000 [ 894.515643][T29069] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 894.515657][T29069] R13: 00007f97d3826038 R14: 00007f97d3825fa0 R15: 00007ffff76c18a8 [ 894.515689][T29069] [ 894.530505][T29069] Mem-Info: [ 894.530521][T29069] active_anon:15910 inactive_anon:20101 isolated_anon:0 [ 894.530521][T29069] active_file:276 inactive_file:62211 isolated_file:0 [ 894.530521][T29069] unevictable:0 dirty:431 writeback:0 [ 894.530521][T29069] slab_reclaimable:10373 slab_unreclaimable:109034 [ 894.530521][T29069] mapped:31030 shmem:23589 pagetables:2059 [ 894.530521][T29069] sec_pagetables:0 bounce:0 [ 894.530521][T29069] kernel_misc_reclaimable:0 [ 894.530521][T29069] free:1234041 free_pcp:12374 free_cma:0 [ 894.530579][T29069] Node 0 active_anon:63640kB inactive_anon:80404kB active_file:1104kB inactive_file:248636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124120kB dirty:1720kB writeback:0kB shmem:94356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:15692kB pagetables:8084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 894.530638][T29069] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 894.530691][T29069] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 894.530752][T29069] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 894.530789][T29069] Node 0 DMA32 free:984356kB boost:0kB min:34388kB low:42984kB high:51580kB reserved_highatomic:0kB free_highatomic:0kB active_anon:63640kB inactive_anon:80404kB active_file:1104kB inactive_file:248636kB unevictable:0kB writepending:1720kB zspages:1612kB present:3129332kB managed:2546536kB mlocked:0kB bounce:0kB free_pcp:47448kB local_pcp:35268kB free_cma:0kB [ 894.530857][T29069] lowmem_reserve[]: 0 0 0 0 0 [ 894.530891][T29069] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 894.530947][T29069] lowmem_reserve[]: 0 0 0 0 0 [ 894.530994][T29069] Node 1 Normal free:3936448kB boost:0kB min:55516kB low:69392kB high:83268kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 894.531054][T29069] lowmem_reserve[]: 0 0 0 0 0 [ 894.531088][T29069] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 894.531207][T29069] Node 0 DMA32: 1229*4kB (UME) 618*8kB (UME) 1830*16kB (UME) 1348*32kB (UME) 992*64kB (UME) 463*128kB (UME) 188*256kB (UM) 78*512kB (UME) 59*1024kB (UM) 8*2048kB (UM) 150*4096kB (UM) = 984292kB [ 894.531364][T29069] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 894.531461][T29069] Node 1 Normal: 4*4kB (UM) 4*8kB (UM) 11*16kB (UM) 3*32kB (UM) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 5*2048kB (UM) 957*4096kB (M) = 3936448kB [ 894.531615][T29069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 894.531633][T29069] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 894.531649][T29069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 894.531665][T29069] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 894.531681][T29069] 85881 total pagecache pages [ 894.531690][T29069] 23 pages in swap cache [ 894.531697][T29069] Free swap = 122968kB [ 894.531705][T29069] Total swap = 124996kB [ 894.531713][T29069] 2097051 pages RAM [ 894.531721][T29069] 0 pages HighMem/MovableOnly [ 894.531729][T29069] 428801 pages reserved [ 894.531736][T29069] 0 pages cma reserved [ 895.064471][T27885] IPVS: starting estimator thread 0... [ 895.202454][T29077] IPVS: using max 35 ests per chain, 84000 per kthread [ 895.798509][T29087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5519'. [ 897.940990][T29117] netlink: 'syz.7.5529': attribute type 1 has an invalid length. [ 897.991798][T29118] netlink: 'syz.4.5527': attribute type 10 has an invalid length. [ 898.004097][T29119] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5529'. [ 898.004133][T29119] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5529'. [ 898.222714][T29116] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 898.324876][T29117] bond7: entered promiscuous mode [ 898.325302][T29117] 8021q: adding VLAN 0 to HW filter on device bond7 [ 898.364105][T29118] syz_tun: entered promiscuous mode [ 898.432566][T29118] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 898.495163][T29121] bond7: (slave bridge3): making interface the new active one [ 898.495189][T29121] bridge3: entered promiscuous mode [ 898.511323][T29121] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 898.994296][ T33] audit: type=1326 audit(2000000039.509:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29137 comm="syz.4.5545" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678439e159 code=0x7fc00000 [ 899.031731][ T33] audit: type=1326 audit(2000000039.549:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29137 comm="syz.4.5545" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f678439e159 code=0x7fc00000 [ 899.035229][ T33] audit: type=1326 audit(2000000039.549:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29137 comm="syz.4.5545" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678439e159 code=0x7fc00000 [ 900.562986][T29180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5544'. [ 900.563278][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5546'. [ 900.724838][T29186] fuse: fd is not a fuse device [ 900.732456][T29185] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5548'. [ 900.771652][T29180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5544'. [ 900.794533][T29189] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5548'. [ 900.855757][T27879] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.949636][T29185] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 900.958737][ T7525] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.959564][ T7525] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.959601][ T7525] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.994890][T29189] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 901.443851][T20151] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 901.508872][T29203] loop1: detected capacity change from 0 to 40427 [ 901.513608][T29203] f2fs: Unknown parameter 'whint_mode' [ 902.059285][T29224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5564'. [ 902.949439][T29274] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5575'. [ 903.236771][ T5611] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 903.780662][T29303] ip_tables: iptables: counters copy to user failed while replacing table [ 903.844195][T29303] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.971420][T29307] loop8: detected capacity change from 0 to 32768 [ 903.980955][T29307] (syz.8.5588,29307,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 903.981294][T29307] (syz.8.5588,29307,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 904.040406][T29307] JBD2: Ignoring recovery information on journal [ 904.073240][T29307] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 904.894642][T29303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.270613][T29303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 905.678825][T27435] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.678861][T27435] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.728998][T27869] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.729034][T27869] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.730640][T27869] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.730671][T27869] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.730705][T27869] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.730728][T27869] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.052285][T24975] ocfs2: Unmounting device (7,8) on (node local) [ 906.439900][T29368] netlink: 'syz.5.5612': attribute type 10 has an invalid length. [ 906.440931][T29368] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.441218][T29368] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.464514][T29368] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.464633][T29368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.468764][T29368] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.468889][T29368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.479247][T29368] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 906.640474][T29378] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5616'. [ 906.864061][T29385] batman_adv: batadv0: Adding interface: dummy0 [ 906.864079][T29385] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.864110][T29385] batman_adv: batadv0: Interface activated: dummy0 [ 906.938119][T29385] batadv0: mtu less than device minimum [ 906.940839][T29385] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 906.942157][T29385] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 906.943426][T29385] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 906.944730][T29385] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 906.946056][T29385] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 906.949274][T29385] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 906.950613][T29385] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 906.951835][T29385] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 906.953170][T29385] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 906.978660][T29388] netlink: 'syz.8.5619': attribute type 10 has an invalid length. [ 907.191186][T29388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.206851][T29388] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 907.803455][T29413] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5627'. [ 909.807829][ T1221] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 909.959831][ T1221] usb 2-1: New USB device found: idVendor=0e8d, idProduct=0608, bcdDevice=1.00 [ 909.960961][ T1221] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.960984][ T1221] usb 2-1: config 0 has no interfaces? [ 909.961013][ T1221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.965586][ T1221] usb 2-1: config 0 descriptor?? [ 910.476360][ T5723] usb 2-1: USB disconnect, device number 13 [ 910.569351][T29518] FAULT_INJECTION: forcing a failure. [ 910.569351][T29518] name failslab, interval 1, probability 0, space 0, times 0 [ 910.569385][T29518] CPU: 1 UID: 0 PID: 29518 Comm: syz.8.5667 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.569415][T29518] Tainted: [L]=SOFTLOCKUP [ 910.569424][T29518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 910.569437][T29518] Call Trace: [ 910.569445][T29518] [ 910.569455][T29518] dump_stack_lvl+0xe8/0x150 [ 910.569491][T29518] should_fail_ex+0x3eb/0x540 [ 910.569529][T29518] should_failslab+0xa8/0x100 [ 910.569565][T29518] __kvmalloc_node_noprof+0x171/0x820 [ 910.569596][T29518] ? alloc_netdev_mqs+0xaf7/0x12c0 [ 910.569637][T29518] ? alloc_netdev_mqs+0xaf7/0x12c0 [ 910.569676][T29518] alloc_netdev_mqs+0xaf7/0x12c0 [ 910.569714][T29518] rtnl_create_link+0x321/0xd70 [ 910.569744][T29518] rtnl_newlink_create+0x258/0x7b0 [ 910.569782][T29518] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 910.569814][T29518] ? __pfx___mutex_lock+0x10/0x10 [ 910.569856][T29518] ? ns_capable+0x84/0xe0 [ 910.569889][T29518] rtnl_newlink+0x167a/0x1c30 [ 910.569928][T29518] ? __pfx_rtnl_newlink+0x10/0x10 [ 910.569949][T29518] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 910.569977][T29518] ? netlink_deliver_tap+0x19c/0x1b0 [ 910.570006][T29518] ? netlink_unicast+0x781/0x940 [ 910.570031][T29518] ? netlink_sendmsg+0x7c3/0xae0 [ 910.570061][T29518] ? sock_sendmsg_nosec+0x13a/0x180 [ 910.570091][T29518] ? ____sys_sendmsg+0x54e/0x850 [ 910.570116][T29518] ? ___sys_sendmsg+0x2a5/0x360 [ 910.570140][T29518] ? __x64_sys_sendmsg+0x1b1/0x290 [ 910.570165][T29518] ? do_syscall_64+0x166/0x520 [ 910.570192][T29518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.570250][T29518] ? kasan_quarantine_put+0xbb/0x1f0 [ 910.570278][T29518] ? lockdep_hardirqs_on+0x7b/0x110 [ 910.570309][T29518] ? nlmon_xmit+0xb0/0x100 [ 910.570430][T29518] ? kmem_cache_free+0x182/0x650 [ 910.570466][T29518] ? __lock_acquire+0x747/0x2de0 [ 910.570502][T29518] ? __dev_queue_xmit+0x29b/0x3820 [ 910.570536][T29518] ? __local_bh_enable_ip+0xd6/0x140 [ 910.570565][T29518] ? lockdep_hardirqs_on+0x7b/0x110 [ 910.570626][T29518] ? __pfx_rtnl_newlink+0x10/0x10 [ 910.570651][T29518] rtnetlink_rcv_msg+0x802/0xc00 [ 910.570681][T29518] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 910.570706][T29518] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 910.570735][T29518] ? __copy_skb_header+0xa3/0x4a0 [ 910.570770][T29518] netlink_rcv_skb+0x226/0x4a0 [ 910.570802][T29518] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 910.570830][T29518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 910.570874][T29518] ? netlink_deliver_tap+0x2e/0x1b0 [ 910.570904][T29518] ? netlink_deliver_tap+0x2e/0x1b0 [ 910.570941][T29518] netlink_unicast+0x7bd/0x940 [ 910.570981][T29518] netlink_sendmsg+0x7c3/0xae0 [ 910.571019][T29518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 910.571059][T29518] ? apparmor_socket_sendmsg+0x98/0x360 [ 910.571085][T29518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 910.571116][T29518] sock_sendmsg_nosec+0x13a/0x180 [ 910.571152][T29518] ____sys_sendmsg+0x54e/0x850 [ 910.571185][T29518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 910.571220][T29518] ? import_iovec+0x73/0xa0 [ 910.571246][T29518] ___sys_sendmsg+0x2a5/0x360 [ 910.571271][T29518] ? __lock_acquire+0x747/0x2de0 [ 910.571300][T29518] ? __pfx____sys_sendmsg+0x10/0x10 [ 910.571330][T29518] ? futex_wait+0x2a2/0x390 [ 910.571389][T29518] ? __fget_files+0x3a2/0x420 [ 910.571415][T29518] ? __fget_files+0x2a/0x420 [ 910.571450][T29518] __x64_sys_sendmsg+0x1b1/0x290 [ 910.571480][T29518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 910.571529][T29518] do_syscall_64+0x166/0x520 [ 910.571556][T29518] ? trace_irq_disable+0x3b/0x140 [ 910.571583][T29518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.571605][T29518] ? clear_bhb_loop+0x70/0xc0 [ 910.571638][T29518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.571660][T29518] RIP: 0033:0x7f97d359e159 [ 910.571682][T29518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.571700][T29518] RSP: 002b:00007f97d43fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.571722][T29518] RAX: ffffffffffffffda RBX: 00007f97d3825fa0 RCX: 00007f97d359e159 [ 910.571739][T29518] RDX: 0000000000008010 RSI: 0000200000000280 RDI: 0000000000000004 [ 910.571754][T29518] RBP: 00007f97d363506b R08: 0000000000000000 R09: 0000000000000000 [ 910.571768][T29518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.571782][T29518] R13: 00007f97d3826038 R14: 00007f97d3825fa0 R15: 00007ffff76c18a8 [ 910.571815][T29518] [ 911.313284][T29536] loop8: detected capacity change from 0 to 4096 [ 911.321580][T29536] EXT4-fs: Ignoring removed bh option [ 911.350167][T29536] EXT4-fs (loop8): Test dummy encryption mode enabled [ 911.389341][T29536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.446500][T29544] FAULT_INJECTION: forcing a failure. [ 911.446500][T29544] name failslab, interval 1, probability 0, space 0, times 0 [ 911.446535][T29544] CPU: 1 UID: 0 PID: 29544 Comm: syz.1.5677 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.446566][T29544] Tainted: [L]=SOFTLOCKUP [ 911.446574][T29544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 911.446588][T29544] Call Trace: [ 911.446595][T29544] [ 911.446605][T29544] dump_stack_lvl+0xe8/0x150 [ 911.446643][T29544] should_fail_ex+0x3eb/0x540 [ 911.446681][T29544] should_failslab+0xa8/0x100 [ 911.446713][T29544] ? ceph_msg_new2+0x3b/0x4d0 [ 911.446845][T29544] kmem_cache_alloc_noprof+0x9c/0x600 [ 911.446874][T29544] ? rcu_is_watching+0x16/0xb0 [ 911.446904][T29544] ? ceph_msg_new2+0x3b/0x4d0 [ 911.446936][T29544] ceph_msg_new2+0x3b/0x4d0 [ 911.446964][T29544] ? __kmalloc_node_noprof+0x2eb/0x720 [ 911.446992][T29544] msgpool_alloc+0x80/0x210 [ 911.447024][T29544] ? __pfx_msgpool_alloc+0x10/0x10 [ 911.447054][T29544] mempool_init_node+0x1f4/0x510 [ 911.447082][T29544] ? __pfx_msgpool_alloc+0x10/0x10 [ 911.447121][T29544] mempool_create_node_noprof+0xb8/0x150 [ 911.447144][T29544] ? __pfx_msgpool_free+0x10/0x10 [ 911.447177][T29544] ceph_msgpool_init+0xb3/0x1c0 [ 911.447212][T29544] ceph_osdc_init+0x55b/0x900 [ 911.447251][T29544] ceph_create_client+0x246/0x310 [ 911.447279][T29544] ceph_get_tree+0x1ca/0x1a40 [ 911.447380][T29544] ? apparmor_capable+0x126/0x170 [ 911.447417][T29544] vfs_get_tree+0x92/0x2a0 [ 911.447450][T29544] vfs_cmd_create+0xa2/0x200 [ 911.447475][T29544] __se_sys_fsconfig+0x6b9/0x810 [ 911.447501][T29544] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 911.447526][T29544] ? rcu_is_watching+0x16/0xb0 [ 911.447563][T29544] ? __x64_sys_fsconfig+0x20/0xc0 [ 911.447586][T29544] do_syscall_64+0x166/0x520 [ 911.447614][T29544] ? trace_irq_disable+0x3b/0x140 [ 911.447642][T29544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.447664][T29544] ? clear_bhb_loop+0x70/0xc0 [ 911.447689][T29544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.447710][T29544] RIP: 0033:0x7f8011f9e159 [ 911.447730][T29544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.447749][T29544] RSP: 002b:00007f8012f43028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 911.447773][T29544] RAX: ffffffffffffffda RBX: 00007f8012225fa0 RCX: 00007f8011f9e159 [ 911.447790][T29544] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 911.447804][T29544] RBP: 00007f801203506b R08: 0000000000000000 R09: 0000000000000000 [ 911.447818][T29544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.447832][T29544] R13: 00007f8012226038 R14: 00007f8012225fa0 R15: 00007ffe3e3b6b08 [ 911.447866][T29544] [ 911.646592][T24975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.997363][T29564] loop8: detected capacity change from 0 to 4096 [ 912.011098][T29564] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 912.011120][T29564] EXT4-fs (loop8): Test dummy encryption mode enabled [ 912.028035][T29564] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 912.028139][T29564] System zones: 0-5 [ 912.048214][T29564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.115793][ T33] audit: type=1800 audit(2000000052.629:491): pid=29564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5682" name="file1" dev="overlay" ino=15 res=0 errno=-22 [ 912.126801][T29574] fuse: fd is not a fuse device [ 912.386826][T24975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.578517][T29594] input: syz0 as /devices/virtual/input/input47 [ 912.732370][T29597] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5699'. [ 912.860527][T29599] FAULT_INJECTION: forcing a failure. [ 912.860527][T29599] name fail_futex, interval 1, probability 0, space 0, times 1 [ 912.860563][T29599] CPU: 1 UID: 0 PID: 29599 Comm: syz.8.5700 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.860593][T29599] Tainted: [L]=SOFTLOCKUP [ 912.860602][T29599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 912.860616][T29599] Call Trace: [ 912.860624][T29599] [ 912.860634][T29599] dump_stack_lvl+0xe8/0x150 [ 912.860675][T29599] should_fail_ex+0x3eb/0x540 [ 912.860713][T29599] get_futex_key+0x1b4/0x1580 [ 912.860757][T29599] ? __pfx_get_futex_key+0x10/0x10 [ 912.860800][T29599] futex_wake+0x119/0x5f0 [ 912.860828][T29599] ? __lock_acquire+0x747/0x2de0 [ 912.860864][T29599] ? __pfx_futex_wake+0x10/0x10 [ 912.860902][T29599] ? __raw_spin_lock_init+0x45/0x100 [ 912.860928][T29599] do_futex+0x458/0x4e0 [ 912.860954][T29599] ? __pfx_do_futex+0x10/0x10 [ 912.860983][T29599] __se_sys_futex+0x3a8/0x450 [ 912.861010][T29599] ? fd_install+0x95/0x4e0 [ 912.861035][T29599] ? __pfx___se_sys_futex+0x10/0x10 [ 912.861059][T29599] ? anon_inode_getfd+0x1c1/0x1f0 [ 912.861088][T29599] ? __x64_sys_futex+0x21/0xf0 [ 912.861113][T29599] do_syscall_64+0x166/0x520 [ 912.861141][T29599] ? trace_irq_disable+0x3b/0x140 [ 912.861170][T29599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.861192][T29599] ? clear_bhb_loop+0x70/0xc0 [ 912.861218][T29599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.861239][T29599] RIP: 0033:0x7f97d359e159 [ 912.861259][T29599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.861278][T29599] RSP: 002b:00007f97d43fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 912.861302][T29599] RAX: ffffffffffffffda RBX: 00007f97d3825fa8 RCX: 00007f97d359e159 [ 912.861319][T29599] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f97d3825fac [ 912.861333][T29599] RBP: 00007f97d3825fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 912.861347][T29599] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 912.861360][T29599] R13: 00007f97d3826038 R14: 00007ffff76c17c0 R15: 00007ffff76c18a8 [ 912.861389][T29599] [ 913.112373][T15170] Bluetooth: hci1: hardware error 0x00 [ 913.324561][T29613] fuse: fd is not a fuse device [ 913.379066][T29615] fuse: fd is not a fuse device [ 914.436487][T29642] netlink: 'syz.8.5711': attribute type 1 has an invalid length. [ 914.475027][T29642] bond1: entered promiscuous mode [ 914.475416][T29642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 914.558125][T29642] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5711'. [ 914.558163][T29642] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5711'. [ 914.710181][T29642] bond1: (slave bridge2): making interface the new active one [ 914.710209][T29642] bridge2: entered promiscuous mode [ 914.737189][T29642] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 915.277326][T15170] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 915.519797][T20151] net_ratelimit: 12 callbacks suppressed [ 915.519819][T20151] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 916.015648][T29714] netlink: 'syz.5.5730': attribute type 1 has an invalid length. [ 916.079604][T29721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5730'. [ 916.079658][T29721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5730'. [ 916.167403][T29714] bond3: entered promiscuous mode [ 916.175384][T29714] 8021q: adding VLAN 0 to HW filter on device bond3 [ 916.277966][T29723] bond3: (slave bridge3): making interface the new active one [ 916.277990][T29723] bridge3: entered promiscuous mode [ 916.315345][T29723] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 916.665324][T29732] loop1: detected capacity change from 0 to 512 [ 916.694048][T29732] EXT4-fs warning (device loop1): read_mmp_block:110: Error -117 while reading MMP block 12 [ 917.059343][T29755] loop1: detected capacity change from 0 to 512 [ 917.120451][T29755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.120555][T29755] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.196666][T29755] Bluetooth: MGMT ver 1.23 [ 917.225141][T15170] Bluetooth: hci0: Opcode 0x0c56 failed: -38 [ 917.835800][T28081] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.109522][T29791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5752'. [ 919.000996][T29806] loop8: detected capacity change from 0 to 2048 [ 919.006327][T29806] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=2362, location=2362 [ 919.011825][T29806] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 919.012326][T29806] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 919.013923][T29806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 919.025457][ T33] audit: type=1800 audit(2000000059.539:492): pid=29806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5758" name=2E02 dev="loop8" ino=1367 res=0 errno=-22 [ 919.179658][T29813] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5759'. [ 919.211154][T29813] ip6erspan0: entered promiscuous mode [ 919.230907][T29813] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5759'. [ 919.317421][T29819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5762'. [ 919.541527][T29823] FAULT_INJECTION: forcing a failure. [ 919.541527][T29823] name fail_futex, interval 1, probability 0, space 0, times 0 [ 919.541563][T29823] CPU: 0 UID: 0 PID: 29823 Comm: syz.1.5763 Tainted: G L syzkaller #0 PREEMPT(full) [ 919.541593][T29823] Tainted: [L]=SOFTLOCKUP [ 919.541601][T29823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 919.541615][T29823] Call Trace: [ 919.541623][T29823] [ 919.541633][T29823] dump_stack_lvl+0xe8/0x150 [ 919.541670][T29823] should_fail_ex+0x3eb/0x540 [ 919.541709][T29823] get_futex_key+0x1b4/0x1580 [ 919.541741][T29823] ? look_up_lock_class+0x57/0x110 [ 919.541780][T29823] ? __pfx_get_futex_key+0x10/0x10 [ 919.541817][T29823] ? __lock_acquire+0x747/0x2de0 [ 919.541848][T29823] futex_wait_setup+0x4a/0x590 [ 919.541881][T29823] ? __futex_wait+0xdb/0x470 [ 919.541915][T29823] __futex_wait+0x175/0x470 [ 919.541950][T29823] ? __pfx___futex_wait+0x10/0x10 [ 919.541981][T29823] ? __pfx_futex_wake_mark+0x10/0x10 [ 919.542011][T29823] ? futex_hash+0x4e/0x2b0 [ 919.542041][T29823] ? futex_hash+0x4e/0x2b0 [ 919.542069][T29823] ? futex_hash+0x275/0x2b0 [ 919.542104][T29823] futex_wait+0x121/0x390 [ 919.542132][T29823] ? __pfx_futex_wait+0x10/0x10 [ 919.542170][T29823] ? inet_stream_connect+0x89/0xa0 [ 919.542195][T29823] do_futex+0x3e7/0x4e0 [ 919.542216][T29823] ? lockdep_hardirqs_on+0x7b/0x110 [ 919.542248][T29823] ? __pfx_do_futex+0x10/0x10 [ 919.542269][T29823] ? __sys_connect+0x3a1/0x450 [ 919.542300][T29823] __se_sys_futex+0x3a8/0x450 [ 919.542328][T29823] ? __pfx___se_sys_futex+0x10/0x10 [ 919.542349][T29823] ? rcu_is_watching+0x16/0xb0 [ 919.542385][T29823] ? __x64_sys_futex+0x21/0xf0 [ 919.542408][T29823] do_syscall_64+0x166/0x520 [ 919.542432][T29823] ? trace_irq_disable+0x3b/0x140 [ 919.542457][T29823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.542478][T29823] ? clear_bhb_loop+0x70/0xc0 [ 919.542505][T29823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.542533][T29823] RIP: 0033:0x7f8011f9e159 [ 919.542552][T29823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.542570][T29823] RSP: 002b:00007f8012f430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 919.542592][T29823] RAX: ffffffffffffffda RBX: 00007f8012225fa8 RCX: 00007f8011f9e159 [ 919.542609][T29823] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8012225fa8 [ 919.542623][T29823] RBP: 00007f8012225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 919.542634][T29823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.542645][T29823] R13: 00007f8012226038 R14: 00007ffe3e3b6a20 R15: 00007ffe3e3b6b08 [ 919.542671][T29823] [ 920.449142][T29860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5777'. [ 921.023996][T29868] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 921.187876][T29879] ublk1: read batch cmd buffer failed [ 921.187987][T29879] ublk1: read batch cmd buffer failed [ 921.221988][T29879] ublk1: read batch cmd buffer failed [ 921.222100][T29879] ublk1: read batch cmd buffer failed [ 921.889878][T29905] xt_hashlimit: size too large, truncated to 1048576 [ 922.562986][T27877] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 922.585462][T29920] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5801'. [ 922.614591][T29922] netlink: 'syz.5.5802': attribute type 4 has an invalid length. [ 922.670204][T29929] netlink: 'syz.5.5802': attribute type 4 has an invalid length. [ 923.181929][T29950] loop8: detected capacity change from 0 to 1024 [ 923.240507][T29950] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.264166][T29950] EXT4-fs (loop8): shut down requested (1) [ 923.399624][T24975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.673865][T29955] loop1: detected capacity change from 0 to 32768 [ 923.712250][T29955] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5812 (29955) [ 923.736626][T29955] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 923.736660][T29955] BTRFS info (device loop1): using sha256 checksum algorithm [ 923.931580][T29955] BTRFS info (device loop1): enabling ssd optimizations [ 923.931608][T29955] BTRFS info (device loop1): turning on sync discard [ 923.931624][T29955] BTRFS info (device loop1): enabling free space tree [ 923.931645][T29955] BTRFS info (device loop1): use zlib compression, level 3 [ 924.549176][T28081] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 925.456995][T30025] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5834'. [ 925.523984][T30027] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5835'. [ 925.524020][T30027] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5835'. [ 925.550134][T30027] erspan0: entered promiscuous mode [ 925.554787][T30027] erspan0: left promiscuous mode [ 925.578788][T30028] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5835'. [ 925.578810][T30028] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5835'. [ 925.593340][T30028] erspan0: entered promiscuous mode [ 925.604666][T30028] erspan0: left promiscuous mode [ 925.773874][T30040] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5840'. [ 925.893927][T30044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5841'. [ 926.114514][T30053] [ 926.116894][T30053] ====================================================== [ 926.123909][T30053] WARNING: possible circular locking dependency detected [ 926.130952][T30053] syzkaller #0 Tainted: G L [ 926.137022][T30053] ------------------------------------------------------ [ 926.144041][T30053] syz.8.5845/30053 is trying to acquire lock: [ 926.150110][T30053] ffff888052122280 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: iterate_dir+0x209/0x4d0 [ 926.159815][T30053] [ 926.159815][T30053] but task is already holding lock: [ 926.167181][T30053] ffff888057688c50 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0 [ 926.177997][T30053] [ 926.177997][T30053] which lock already depends on the new lock. [ 926.177997][T30053] [ 926.188400][T30053] [ 926.188400][T30053] the existing dependency chain (in reverse order) is: [ 926.197413][T30053] [ 926.197413][T30053] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 926.206118][T30053] down_read+0x45/0x320 [ 926.210814][T30053] lookup_slow+0x46/0x80 [ 926.215590][T30053] ovl_lookup_single+0x323/0xe90 [ 926.221088][T30053] ovl_lookup_layer+0x377/0x440 [ 926.226466][T30053] ovl_lookup+0x9ae/0x1c80 [ 926.231496][T30053] lookup_open+0x94b/0x1970 [ 926.236536][T30053] path_openat+0x673/0x1da0 [ 926.241572][T30053] do_file_open+0x23e/0x4a0 [ 926.246609][T30053] do_sys_openat2+0x115/0x200 [ 926.251813][T30053] __x64_sys_openat+0x138/0x170 [ 926.257194][T30053] do_syscall_64+0x166/0x520 [ 926.262320][T30053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.268743][T30053] [ 926.268743][T30053] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 926.276575][T30053] __d_alloc_parallel+0xc32/0x1700 [ 926.282230][T30053] __lookup_slow+0x82/0x2f0 [ 926.287270][T30053] lookup_slow+0x59/0x80 [ 926.292045][T30053] path_lookupat+0x3f5/0x8c0 [ 926.297165][T30053] filename_lookup+0x265/0x5d0 [ 926.302458][T30053] vfs_statx+0xfc/0x200 [ 926.307141][T30053] vfs_fstatat+0x11b/0x170 [ 926.312085][T30053] __se_sys_newfstatat+0x118/0x3a0 [ 926.317728][T30053] do_syscall_64+0x166/0x520 [ 926.320103][ T33] audit: type=1326 audit(2000000066.739:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30054 comm="syz.1.5846" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8011f9e159 code=0x7fc00000 [ 926.348435][T30053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.354859][T30053] [ 926.354859][T30053] -> #0 (&type->i_mutex_dir_key#4){++++}-{4:4}: [ 926.363301][T30053] __lock_acquire+0x164c/0x2de0 [ 926.368683][T30053] lock_acquire+0x115/0x350 [ 926.373722][T30053] down_read_killable+0x4b/0x3b0 [ 926.379200][T30053] iterate_dir+0x209/0x4d0 [ 926.384155][T30053] ovl_dir_read+0x141/0x4a0 [ 926.389192][T30053] ovl_dir_read_merged+0x2fb/0x520 [ 926.394823][T30053] ovl_iterate+0xd5a/0x2160 [ 926.399851][T30053] wrap_directory_iterator+0x96/0xe0 [ 926.405681][T30053] iterate_dir+0x2e2/0x4d0 [ 926.410630][T30053] __se_sys_getdents64+0xf1/0x280 [ 926.416177][T30053] do_syscall_64+0x166/0x520 [ 926.421300][T30053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.427728][T30053] [ 926.427728][T30053] other info that might help us debug this: [ 926.427728][T30053] [ 926.437952][T30053] Chain exists of: [ 926.437952][T30053] &type->i_mutex_dir_key#4 --> DCACHE_PAR_LOOKUP --> &ovl_i_mutex_dir_key[depth] [ 926.437952][T30053] [ 926.452991][T30053] Possible unsafe locking scenario: [ 926.452991][T30053] [ 926.460445][T30053] CPU0 CPU1 [ 926.465812][T30053] ---- ---- [ 926.471183][T30053] lock(&ovl_i_mutex_dir_key[depth]); [ 926.476647][T30053] lock(DCACHE_PAR_LOOKUP); [ 926.483763][T30053] lock(&ovl_i_mutex_dir_key[depth]); [ 926.491744][T30053] rlock(&type->i_mutex_dir_key#4); [ 926.497047][T30053] [ 926.497047][T30053] *** DEADLOCK *** [ 926.497047][T30053] [ 926.505183][T30053] locks held by syz.8.5845/30053: 2, last CPU#0: [ 926.511507][T30053] #0: ffff888079f77cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 926.520568][T30053] #1: ffff888057688c50 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0 [ 926.531822][T30053] [ 926.531822][T30053] stack backtrace: [ 926.537723][T30053] CPU: 0 UID: 0 PID: 30053 Comm: syz.8.5845 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.548748][T30053] Tainted: [L]=SOFTLOCKUP [ 926.553073][T30053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.563130][T30053] Call Trace: [ 926.566408][T30053] [ 926.569348][T30053] dump_stack_lvl+0xe8/0x150 [ 926.573959][T30053] print_circular_bug+0x2e2/0x300 [ 926.579002][T30053] check_noncircular+0x12f/0x150 [ 926.583951][T30053] __lock_acquire+0x164c/0x2de0 [ 926.588820][T30053] ? apparmor_file_open+0x523/0x6c0 [ 926.594024][T30053] ? __pfx_aa_file_perm+0x10/0x10 [ 926.599052][T30053] lock_acquire+0x115/0x350 [ 926.603556][T30053] ? iterate_dir+0x209/0x4d0 [ 926.608162][T30053] ? iterate_dir+0x209/0x4d0 [ 926.612768][T30053] down_read_killable+0x4b/0x3b0 [ 926.617716][T30053] ? iterate_dir+0x209/0x4d0 [ 926.622331][T30053] iterate_dir+0x209/0x4d0 [ 926.626758][T30053] ovl_dir_read+0x141/0x4a0 [ 926.631356][T30053] ? __pfx_ovl_dir_read+0x10/0x10 [ 926.636384][T30053] ? ovl_path_upper+0x105/0x170 [ 926.641239][T30053] ? ovl_path_next+0x21a/0x430 [ 926.646023][T30053] ovl_dir_read_merged+0x2fb/0x520 [ 926.651149][T30053] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 926.656786][T30053] ? __pfx_ovl_fill_merge+0x10/0x10 [ 926.661999][T30053] ? __kasan_kmalloc+0x93/0xb0 [ 926.666773][T30053] ? __kmalloc_cache_noprof+0x148/0x600 [ 926.672329][T30053] ? ovl_iterate+0xcbc/0x2160 [ 926.677011][T30053] ? ovl_iterate+0xcbc/0x2160 [ 926.681700][T30053] ovl_iterate+0xd5a/0x2160 [ 926.686215][T30053] ? lock_acquire+0x115/0x350 [ 926.690905][T30053] ? __pfx_ovl_iterate+0x10/0x10 [ 926.695849][T30053] ? __lock_acquire+0x747/0x2de0 [ 926.700798][T30053] ? __lock_acquire+0x747/0x2de0 [ 926.705748][T30053] ? lock_acquire+0x115/0x350 [ 926.710444][T30053] ? down_write+0x166/0x200 [ 926.714964][T30053] ? __pfx_down_write+0x10/0x10 [ 926.719831][T30053] ? wrap_directory_iterator+0x52/0xe0 [ 926.725311][T30053] ? __pfx_ovl_iterate+0x10/0x10 [ 926.730263][T30053] wrap_directory_iterator+0x96/0xe0 [ 926.735567][T30053] iterate_dir+0x2e2/0x4d0 [ 926.739995][T30053] __se_sys_getdents64+0xf1/0x280 [ 926.745025][T30053] ? __pfx___se_sys_getdents64+0x10/0x10 [ 926.750668][T30053] ? __pfx_filldir64+0x10/0x10 [ 926.755438][T30053] ? rcu_is_watching+0x16/0xb0 [ 926.760224][T30053] do_syscall_64+0x166/0x520 [ 926.764836][T30053] ? trace_irq_disable+0x3b/0x140 [ 926.769889][T30053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.775969][T30053] ? clear_bhb_loop+0x70/0xc0 [ 926.780670][T30053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.786572][T30053] RIP: 0033:0x7f97d359e159 [ 926.790991][T30053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.810607][T30053] RSP: 002b:00007f97d43fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 926.819050][T30053] RAX: ffffffffffffffda RBX: 00007f97d3825fa0 RCX: 00007f97d359e159 [ 926.827031][T30053] RDX: 0000000000001000 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 926.835015][T30053] RBP: 00007f97d363506b R08: 0000000000000000 R09: 0000000000000000 [ 926.842998][T30053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.850980][T30053] R13: 00007f97d3826038 R14: 00007f97d3825fa0 R15: 00007ffff76c18a8 [ 926.858970][T30053] [ 926.933577][ T33] audit: type=1326 audit(2000000067.449:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30054 comm="syz.1.5846" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8011f9e159 code=0x7fc00000 [ 927.678085][T29261] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 931.518052][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.518102][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.518374][ T1313] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 933.437816][T27435] IPVS: twos: UDP 127.0.0.1:20001 - no destination available