last executing test programs: 11.251291579s ago: executing program 1 (id=2196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x8, 0x8, 0x2, '\x00', 0x3}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x2, 0x8, '\x00', 0xb4}, {0x0, 0x2, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xd}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0x4, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0x89, 0x3, 0x8, '\x00', 0x6}, {0xf, 0x3, 0x5, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x4, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 10.83383963s ago: executing program 2 (id=2199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r3, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf, 0x4000}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}}, 0x24040084) sendfile(r8, r8, 0x0, 0x800000009) 10.806264133s ago: executing program 1 (id=2200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r3, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) r9 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4000}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}}, 0x24040084) sendfile(r8, r8, 0x0, 0x800000009) 8.228982937s ago: executing program 2 (id=2202): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="98"], 0x298) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) utimes(&(0x7f00000003c0)='./file0\x00', 0x0) 8.144340696s ago: executing program 0 (id=2203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r3, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf, 0x4000}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}}, 0x24040084) sendfile(r8, r8, 0x0, 0x800000009) 7.864672113s ago: executing program 1 (id=2204): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYRES8=r0], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x246}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r7}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') read$FUSE(r8, &(0x7f0000004380)={0x2020}, 0x2020) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r10 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendfile(r10, r9, &(0x7f0000000000)=0x7ff, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r9}, 0x10) 6.898434938s ago: executing program 3 (id=2205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_access(r2, 0x0, 0x68) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xc, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008008000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xb, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0100001700010000000000fedbdf2500000000000000000000ffffac1414bb0000000000000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa00"/98, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000b86b6e000000000000000000feffffff000000000000000000000000440008005b00"], 0x16c}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) 6.844436024s ago: executing program 3 (id=2206): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 6.800270888s ago: executing program 0 (id=2207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) (fail_nth: 3) 6.712347707s ago: executing program 4 (id=2209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r3, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) r9 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4000}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}}, 0x24040084) sendfile(r8, r8, 0x0, 0x800000009) 6.67946677s ago: executing program 2 (id=2210): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@delchain={0x24, 0x2c, 0xe31, 0x40000, 0x2000, {0x0, 0x0, 0x0, r5, {0x9}, {0x0, 0xffff}, {0x6, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4048094) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2010000, &(0x7f0000000540)={[{@numtail}, {@fat=@check_strict}, {@numtail}, {@shortname_win95}, {@rodir}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_win95}, {@uni_xlate}]}, 0x1, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r6, 0x0, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdc5, 0x12, 0xffffffffffffffff, 0x20000) 6.314805316s ago: executing program 0 (id=2211): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x4e}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) (fail_nth: 3) 6.07245588s ago: executing program 2 (id=2212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) select(0xff00, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100}, 0x0, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x6, 0xfffff00c}, {0x6}]}, 0x10) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r2 = epoll_create1(0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) listen(r1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) read$FUSE(r5, &(0x7f0000000000)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) 5.536891463s ago: executing program 4 (id=2213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(r5) 5.535786163s ago: executing program 1 (id=2214): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) fcntl$getownex(r3, 0x10, &(0x7f0000000440)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r1, @ANYRES8=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2a, 0x21dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000014}, 0x240c4040) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000006b80)=@newsa={0x12d0, 0x10, 0x20, 0x70bd2a, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in=@multicast1, 0x4e21, 0x7, 0x4e22, 0x4, 0xa, 0x0, 0x20, 0x3b}, {@in6=@loopback, 0x4d6, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x39}, {0x3, 0x200, 0xff, 0x5, 0x8000000000000001, 0x8, 0x80000000, 0x3}, {0x0, 0x0, 0x8000000000000000, 0xfff}, {0xb, 0xfffffff2, 0x7f}, 0x70bd25, 0x0, 0xa, 0x0, 0xb, 0x40}, [@algo_crypt={0x1048, 0x2, {{'pcbc(aes-aesni)\x00'}, 0x8000, "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"}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x1ff, 0x4e21, 0x2, 0xa, 0x20, 0x0, 0x89}, {0x3, 0x3ff, 0x1, 0x6f97, 0x1800000000000000, 0x0, 0x7, 0xba}, {0x9, 0xffffffff, 0x7d081e98, 0x7}, 0x400, 0x0, 0x2, 0x0, 0x3, 0x1}}, @policy_type={0xa}, @policy={0xac, 0x7, {{@in=@multicast1, @in=@multicast1, 0x4e22, 0x401, 0x4e24, 0x0, 0x2, 0x40, 0x0, 0x73, r8, r9}, {0xfffffffffffff8ca, 0x10, 0x9, 0x7, 0x3, 0xb308, 0x2, 0x8}, {0x9, 0x9, 0x7, 0x2}, 0x3, 0x0, 0x1, 0x1, 0x2, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @user_kmaddress={0x2c, 0x13, {@in=@local, @in=@broadcast, 0x0, 0xa}}]}, 0x12d0}}, 0x880) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x25, 0x0, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f626172726965722c646973636172645f756e69743d73656374696f6e2c616c6c6f635f6d6f64653d72657573652c636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f6e2c6163746976655f6c6f67733d342c646973636172645f750200743d73656374696f6e2c696e6c696e655f646174612c66617374626f6f742c757365725f78617474722c6a71666d743d7666736f6c642c6e6f696e6c696e655f64656e7472792c00ce3114"], 0x1, 0x550f, &(0x7f000000cf00)="$eJzs3E1vG1UXAODjpGn69faNEAt2HalCSqTaivNRwS5AKz5EqqjAghU4tmO5tT1R7DghKxYsEQv+CQKJFUt+AwvW7BALEDskkGcm0FAQlXBskj6PND5zr6/PnGtVlc5M5ACeWgvJzz+W4npcjojZiLgWkZ2XiiOzkYfnIuJGRMw8cpSK+d8nLkbElYi4Pkqe5ywVb316a3hz/Yc3fvrqm/kLVz/78tvp7RqYtucjorubnx9085i28vigmK8N21nsrg2LmL/RfViM0zweNLezDAe143W1LK628vXp7n5/FHc6tfootto72fxuL79gf9g6zpN94EFtLxs3mttZbPfTLLaO8roOj/L/2476gzxPo8j3QZY+BoPjmM83D5v5fnYfZrHeGxTzed600TwcxWERi8tFPe00sjq2/803/d/2Zru3f5gMm3v9dtpL1ivVFyrV2+XqXtpoDppr5Vq3cXstWWx1RsvKg2atu9FK01anWamn3aVksVWvl6vVZPFOc7td6yXVamW1slxeXyrObiWv3nsn6TSSxVF8ud3bH7Q7/WQn3UvyTywlK5XVF5eSm9Xkrc2tZOv+3bubW2+/d+fdey9tvv5KseixspLFleWVlXJ1ubxSXXp8T/Pndf8fFUX/w/5hYkrTLgDg7NH/A9Nwev3/3v2I0+//Q/8/Fmeq/33C/t/+YUL0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT63v5j5/LTtZyMdXi/n/FVPPFONSRMxExK9/YTYunsg5W+SZ+5v1c3+q4etSZBlG15gvjisRsVEcv/z/tL8FAAAAOL+++PDGJ3m3nr8sTLsgJim/aTNz7f0x5StFxNzC92PKNjN6eXZMybJ/3xficEzZshtYl8aUbD675XZhTNmezOyJcOmRUMrDzETLAQAAJuJkJzDZLgQAAIBJ+njaBTAdpTh+lHn8LDj7y/s/HghePjECAAAAzqDStAsAAAAATl3W//v9PwAAADjf8t//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnbnKWBuI4AP9b3r7gVyTGvVdxB8fwCC5dGg7gJTiAC7yCF+AMuPMIBgydEUG6MOm0jeZ5kjJMW37MELqYmWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSN+a3frLxzef+uYcT/2U6Q0AAADQ5dDs1u2bZao/y+df5FOvcr2KiDoiusbus3i8yZzlnOb3/Z+v72/+aMPXiDbh/B3zfDyNiLf5+PFy6F8BAAAA/l/7zXaVRuvpZTl1gxhTmrSpn78rlFdFRLP8XiitPue9LhTW/r8f4kOhtHYCa1EoLE25PZRK+yvt436ZtVtcFVUq6s6PXRpZrO8AAMCIZjfFuKMQAAAAxvR+6gYwjSp+LWVelgLnqcjLe09uagAAAMA/qJq6AQAAAMDg2vH/SPv/nez/BwAAANNI+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwpEOzW+8321XfnOPp3mO+1nHpTv+eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2Z93FAiBMAiDves7k7n/YaVBY0OTKhA+/sZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBif15SIASCIArmjP+d9P0PKwl6BhEioOFRRS0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBi535e46jiAIB/Z2Zna6pijJJDRBQ86MWm29ram3hQggf/BCGk2xq79Uebgy1FzMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnstM24PprZpt8PvDmfXcY5n3fBEK+814WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnsaZ8VhcRKn1blb969tFP3th/rCjZ07K0Ur4qTNpB8PLzY/JMvdJQIAAMDhkdX1fUTczXfXij5dLOv/vL6mqPm/fXoS1/X8w3V/3de1f9F++fne83sDLU7GKW56bnM0PP5oKr3/b5bz7Zm/vKJXPvny3UsWC5FG+t72c+O8fJ7J1zdvvtMvwyNtZAsA/BPH6r4K6r+Hin7QZWIAHBq9RuFd1//ZYrc5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALRhvB1P1nESESu9aVy4ff/axn79jZ07K3U7ff36Tnw5vWdxizwizm2Ohsdbnc18u3zl6oX10Wh4qf3gpYjoavS3qulf+GCGiyM6eT6C/yhIqx/2vOTzeAQd/lICAOBAyqtW1PV389214lyyFPHHdw/W/6824pix/r/34elbzbGa9f+gtRnOv9Wti5+uXr5y9fXNi+vnh+eHH79xYvDm4OSZU6fOrJbvSla9MQEAAODf6VetWf+nS4+u/x9txDFj/f/ZN4MvmmNl6v99TRf9us4EAADgcHv25d9/S/Y5n/T78fn61talweS49/nE5NhBqn/bkao16/9sqeusAAAAgDaMt5MH1v/PNuKYcf3/qe9f+LF5zywiFqr1/2Mbn4zOtjedudbGvxN3PUcAAAC6tVC15vp/Xu7/T/e2PKQR8dork7j6GsCZ6v/s3a9+aI7V3P9/sr0pzqV0efI8yn45orfcdUYAAAAcZE9UrSj2f8131z766ej7ffv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANr2ZwAAAP//uCM2tw==") syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000040), 0x208e24b) fdatasync(r12) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r11, 0x1, 0x70bd29}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008012) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x80) recvfrom$inet6(r4, &(0x7f0000000080)=""/106, 0x6a, 0x100, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @empty, 0xffff0000}, 0x1c) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x12121) 5.478412579s ago: executing program 4 (id=2215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x400}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @exit]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x1000, &(0x7f0000000c00)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000300)=[{0x5, 0x1, 0x7, 0x8}, {0x2, 0x5, 0x2, 0x1}, {0x2, 0x5, 0x8, 0x5}, {0x1, 0x4, 0x7, 0x6}, {0x5, 0x1, 0xc, 0x8}, {0x1, 0x5, 0x1, 0x8}, {0x5, 0x2, 0xc}, {0x3, 0x4, 0x7}, {0x1, 0x1, 0xa, 0x3}, {0x5, 0x5, 0x5, 0x7}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x9e, 0xca, &(0x7f0000000480)="edf6219e990512b30e76892f885ae17a354b2bc142b6d64e44de0cbb19cc1350fc670ea615c338b9f8587cd9e0add186a2d94ec39aef0099b98ed649c95c04bbecac7f2377e71b6c463ba665a1375c7eeb10fd9ee8908d68457f7151f4671a182a0060c6298fa30e72126b0c2289bc8135b88f7f3cf5106627ea8477025973403cbfc73521feb72df6bf632732783bdb9c23705cad14cd35e73a1b33ab87", &(0x7f00000007c0)=""/202, 0x800, 0x0, 0x6, 0xd4, &(0x7f0000000540)="85c69339e497", &(0x7f0000000900)="214ef7e53f4017f632e1ea8c3fc7826428b4714fd1f72d60da31384cd560232a9d1da8086eeeacb5824a86526ba64f1f8215b9da1f5724b9c073dbbffde2ee18ce894d384e8e8ab7bbaf24df5535e38c5b6727d6605bc0f5fec73491f44d7892bb7e52d9f11252e02a731535efcf2c9442f85b1507142b5ac55e45d119bae69217353329435e647b997c1c1f4dddde9c98df6ecb964dbca1537a4577cca42c6f28db121c24beaab9203943ac0cfeb0f7cd600dc72d946893eef5f9cd372b3e9855d6b6e4a21fa81c1ae33d0c4a4e9d62842eb5e3", 0x1, 0x0, 0x80000001}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) syz_io_uring_setup(0x3fb4, &(0x7f0000000580)={0x0, 0xf2e, 0x1, 0x3}, &(0x7f0000000000), &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) 5.436985933s ago: executing program 0 (id=2216): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x400}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @exit]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x1000, &(0x7f0000000c00)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000300)=[{0x5, 0x1, 0x7, 0x8}, {0x2, 0x5, 0x2, 0x1}, {0x2, 0x5, 0x8, 0x5}, {0x1, 0x4, 0x7, 0x6}, {0x5, 0x1, 0xc, 0x8}, {0x1, 0x5, 0x1, 0x8}, {0x5, 0x2, 0xc}, {0x3, 0x4, 0x7}, {0x1, 0x1, 0xa, 0x3}, {0x5, 0x5, 0x5, 0x7}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x9e, 0xca, &(0x7f0000000480)="edf6219e990512b30e76892f885ae17a354b2bc142b6d64e44de0cbb19cc1350fc670ea615c338b9f8587cd9e0add186a2d94ec39aef0099b98ed649c95c04bbecac7f2377e71b6c463ba665a1375c7eeb10fd9ee8908d68457f7151f4671a182a0060c6298fa30e72126b0c2289bc8135b88f7f3cf5106627ea8477025973403cbfc73521feb72df6bf632732783bdb9c23705cad14cd35e73a1b33ab87", &(0x7f00000007c0)=""/202, 0x800, 0x0, 0x6, 0xd4, &(0x7f0000000540)="85c69339e497", &(0x7f0000000900)="214ef7e53f4017f632e1ea8c3fc7826428b4714fd1f72d60da31384cd560232a9d1da8086eeeacb5824a86526ba64f1f8215b9da1f5724b9c073dbbffde2ee18ce894d384e8e8ab7bbaf24df5535e38c5b6727d6605bc0f5fec73491f44d7892bb7e52d9f11252e02a731535efcf2c9442f85b1507142b5ac55e45d119bae69217353329435e647b997c1c1f4dddde9c98df6ecb964dbca1537a4577cca42c6f28db121c24beaab9203943ac0cfeb0f7cd600dc72d946893eef5f9cd372b3e9855d6b6e4a21fa81c1ae33d0c4a4e9d62842eb5e3", 0x1, 0x0, 0x80000001}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) syz_io_uring_setup(0x3fb4, &(0x7f0000000580)={0x0, 0xf2e, 0x1, 0x3}, &(0x7f0000000000), &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r7, 0x43403d0e, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) r10 = fcntl$dupfd(r9, 0x0, 0xffffffffffffffff) sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x404c880}, 0x84) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 5.434235173s ago: executing program 2 (id=2217): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000ec00030000000000000008000a000000000078a63afa76127188860000000000000000000000287c5021f9fb553a2c104bdc49d1b794c2d8479e46c608b3a34ce8b70a512f08000000000000000aa741eb54c2d7bc50d37d4fb9e3400f4b402809103751d922db97090bbe617948860e5da889869ae895f70614859d6cbdfcd02dd442d5f5139c4b6bf68ff3e52fd4e50eb396f356f3a891480ae29f1278449b1045d365ce24a5b39bb1c7752e78b6be779c"], 0x20}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 5.010190085s ago: executing program 3 (id=2218): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x106, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$incfs(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x603, &(0x7f0000000700)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000dc0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @echo={0x8, 0x0, 0x0, 0x1, 0x9}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.764234289s ago: executing program 4 (id=2219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x400}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @exit]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x1000, &(0x7f0000000c00)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000300)=[{0x5, 0x1, 0x7, 0x8}, {0x2, 0x5, 0x2, 0x1}, {0x2, 0x5, 0x8, 0x5}, {0x1, 0x4, 0x7, 0x6}, {0x5, 0x1, 0xc, 0x8}, {0x1, 0x5, 0x1, 0x8}, {0x5, 0x2, 0xc}, {0x3, 0x4, 0x7}, {0x1, 0x1, 0xa, 0x3}, {0x5, 0x5, 0x5, 0x7}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x9e, 0xca, &(0x7f0000000480)="edf6219e990512b30e76892f885ae17a354b2bc142b6d64e44de0cbb19cc1350fc670ea615c338b9f8587cd9e0add186a2d94ec39aef0099b98ed649c95c04bbecac7f2377e71b6c463ba665a1375c7eeb10fd9ee8908d68457f7151f4671a182a0060c6298fa30e72126b0c2289bc8135b88f7f3cf5106627ea8477025973403cbfc73521feb72df6bf632732783bdb9c23705cad14cd35e73a1b33ab87", &(0x7f00000007c0)=""/202, 0x800, 0x0, 0x6, 0xd4, &(0x7f0000000540)="85c69339e497", &(0x7f0000000900)="214ef7e53f4017f632e1ea8c3fc7826428b4714fd1f72d60da31384cd560232a9d1da8086eeeacb5824a86526ba64f1f8215b9da1f5724b9c073dbbffde2ee18ce894d384e8e8ab7bbaf24df5535e38c5b6727d6605bc0f5fec73491f44d7892bb7e52d9f11252e02a731535efcf2c9442f85b1507142b5ac55e45d119bae69217353329435e647b997c1c1f4dddde9c98df6ecb964dbca1537a4577cca42c6f28db121c24beaab9203943ac0cfeb0f7cd600dc72d946893eef5f9cd372b3e9855d6b6e4a21fa81c1ae33d0c4a4e9d62842eb5e3", 0x1, 0x0, 0x80000001}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) syz_io_uring_setup(0x3fb4, &(0x7f0000000580)={0x0, 0xf2e, 0x1, 0x3}, &(0x7f0000000000), &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r8 = dup(r7) ioctl$PTP_EXTTS_REQUEST2(r8, 0x43403d0e, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = fcntl$dupfd(r10, 0x0, 0xffffffffffffffff) sendmsg$NFQNL_MSG_VERDICT_BATCH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x404c880}, 0x84) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 2.274418055s ago: executing program 3 (id=2220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r3, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf, 0x4000}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}}, 0x24040084) sendfile(r8, r8, 0x0, 0x800000009) 2.149370108s ago: executing program 0 (id=2221): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="98"], 0x298) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) utimes(&(0x7f00000003c0)='./file0\x00', 0x0) 2.148332768s ago: executing program 4 (id=2222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r3, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf, 0x4000}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}}, 0x24040084) sendfile(r8, r8, 0x0, 0x800000009) 2.12412697s ago: executing program 2 (id=2223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x400}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @exit]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x1000, &(0x7f0000000c00)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000300)=[{0x5, 0x1, 0x7, 0x8}, {0x2, 0x5, 0x2, 0x1}, {0x2, 0x5, 0x8, 0x5}, {0x1, 0x4, 0x7, 0x6}, {0x5, 0x1, 0xc, 0x8}, {0x1, 0x5, 0x1, 0x8}, {0x5, 0x2, 0xc}, {0x3, 0x4, 0x7}, {0x1, 0x1, 0xa, 0x3}, {0x5, 0x5, 0x5, 0x7}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x9e, 0xca, &(0x7f0000000480)="edf6219e990512b30e76892f885ae17a354b2bc142b6d64e44de0cbb19cc1350fc670ea615c338b9f8587cd9e0add186a2d94ec39aef0099b98ed649c95c04bbecac7f2377e71b6c463ba665a1375c7eeb10fd9ee8908d68457f7151f4671a182a0060c6298fa30e72126b0c2289bc8135b88f7f3cf5106627ea8477025973403cbfc73521feb72df6bf632732783bdb9c23705cad14cd35e73a1b33ab87", &(0x7f00000007c0)=""/202, 0x800, 0x0, 0x6, 0xd4, &(0x7f0000000540)="85c69339e497", &(0x7f0000000900)="214ef7e53f4017f632e1ea8c3fc7826428b4714fd1f72d60da31384cd560232a9d1da8086eeeacb5824a86526ba64f1f8215b9da1f5724b9c073dbbffde2ee18ce894d384e8e8ab7bbaf24df5535e38c5b6727d6605bc0f5fec73491f44d7892bb7e52d9f11252e02a731535efcf2c9442f85b1507142b5ac55e45d119bae69217353329435e647b997c1c1f4dddde9c98df6ecb964dbca1537a4577cca42c6f28db121c24beaab9203943ac0cfeb0f7cd600dc72d946893eef5f9cd372b3e9855d6b6e4a21fa81c1ae33d0c4a4e9d62842eb5e3", 0x1, 0x0, 0x80000001}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) syz_io_uring_setup(0x3fb4, &(0x7f0000000580)={0x0, 0xf2e, 0x1, 0x3}, &(0x7f0000000000), &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r8 = dup(r7) ioctl$PTP_EXTTS_REQUEST2(r8, 0x43403d0e, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) r11 = fcntl$dupfd(0xffffffffffffffff, 0x0, r10) sendmsg$NFQNL_MSG_VERDICT_BATCH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x404c880}, 0x84) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 2.12197743s ago: executing program 0 (id=2224): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYRES8=r0], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x246}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r7}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') read$FUSE(r8, &(0x7f0000004380)={0x2020}, 0x2020) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r10 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendfile(r10, r9, &(0x7f0000000000)=0x7ff, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r9}, 0x10) 630.860197ms ago: executing program 3 (id=2225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, r5, 0x1, 0x0, @val=@netfilter={0x0, 0x1, 0x2, 0x1}}, 0x20) syz_open_dev$loop(0x0, 0x5f, 0x8000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r5, 0x1, 0x1, 0x800007ff, &(0x7f00000002c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = dup(r3) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_any}]}}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0xe42, 0x1ff) 630.178517ms ago: executing program 3 (id=2226): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) setpriority(0x1, 0x0, 0x1000) syz_clone(0x180a00, &(0x7f00000000c0)="8ddda992e59f72", 0x7, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)="8c6d3e131471ac049d6959fe50135cabe8412f70bc6e774eb3e4e7edf879ec81330eed30c9c7d5af9283504850832b5c659c8c080c74870108d9ddaae2c4d1a5c8a4b5157b7207cb91f9e9966f965881dfc8b458c3ba1bef531be9cf78b9dd60") sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000ffffff0000000000003c9f02000000000000010000000000000000000000000000f3bc60b400000000000008002319410e0000000000000000000000000000000000000000000000000000000000003ec4991ec22c6329b2cf829d5cd9d76d00000000c30886e91be888d3998fd574cd48d011108bd9f06e31802a857de82737555d4db157d6ae8e2bc2f6a06ec82e7971f194aaff56d641a7af78067e"], 0xb8}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0x80, 0x1, 0x0, {{0x13, 0x4, 0x2, 0x35, 0x4c, 0x65, 0x0, 0xe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@cipso={0x86, 0x28, 0xffffffffffffffff, [{0x6, 0x12, "67db4dbf46f5171bd4e93fd1c0693ce2"}, {0x0, 0x2}, {0x1, 0xe, "8c1cb8e91cf6f17cffafe4e8"}]}, @ssrr={0x89, 0xf, 0x38, [@local, @multicast2, @broadcast]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x23}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x1, 0x7f, 0x7, 0x400, 0x3, 0x0, r7}) 629.669968ms ago: executing program 1 (id=2227): mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 582.772492ms ago: executing program 1 (id=2228): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="130000001a001f00030300f9002304000a04d6", 0xffffffffffffffbf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mb_release_group_pa\x00', r1, 0x0, 0xda}, 0x18) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 0s ago: executing program 4 (id=2229): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) kernel console output (not intermixed with test programs): : detected capacity change from 0 to 1024 [ 512.341068][ T7731] 9pnet: Insufficient options for proto=fd [ 512.354307][ T7723] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 512.368726][ T7723] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.669713][ T7739] loop2: detected capacity change from 0 to 1024 [ 512.831267][ T7739] EXT4-fs (loop2): Ignoring removed orlov option [ 513.562678][ T7739] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 514.295166][ T7758] loop1: detected capacity change from 0 to 128 [ 514.389962][ T7758] loop1: detected capacity change from 0 to 128 [ 514.469737][ T7758] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 514.517694][ T7758] ext4 filesystem being mounted at /377/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 514.599712][ T7769] loop0: detected capacity change from 0 to 16 [ 514.617580][ T7769] erofs: (device loop0): mounted with root inode @ nid 36. [ 514.682012][ T7769] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 514.692123][ T7769] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 514.703314][ T7769] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 514.758610][ T7775] 9pnet: Insufficient options for proto=fd [ 514.780595][ T7777] 9pnet: Insufficient options for proto=fd [ 515.222203][ T7785] loop0: detected capacity change from 0 to 512 [ 516.965644][ T7794] loop1: detected capacity change from 0 to 1024 [ 517.018781][ T7794] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 517.054447][ T7794] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.149408][ T7805] loop4: detected capacity change from 0 to 1024 [ 517.251715][ T7805] EXT4-fs (loop4): Ignoring removed orlov option [ 517.490900][ T7805] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 518.137378][ T7818] 9pnet: Insufficient options for proto=fd [ 518.845936][ T7835] loop0: detected capacity change from 0 to 128 [ 519.584434][ T7835] loop0: detected capacity change from 0 to 128 [ 519.742439][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 519.742483][ T30] audit: type=1326 audit(1761361337.292:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 519.811202][ T30] audit: type=1326 audit(1761361337.322:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 519.857089][ T7835] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 519.877751][ T30] audit: type=1326 audit(1761361337.332:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 519.901665][ T30] audit: type=1326 audit(1761361337.332:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 519.925159][ T30] audit: type=1326 audit(1761361337.332:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 519.948685][ T30] audit: type=1326 audit(1761361337.332:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 519.972416][ T7835] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 520.018573][ T30] audit: type=1326 audit(1761361337.332:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 520.108880][ T30] audit: type=1326 audit(1761361337.332:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 521.480700][ T30] audit: type=1326 audit(1761361337.332:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 521.506818][ T30] audit: type=1326 audit(1761361337.332:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 521.533786][ T7860] 9pnet: Insufficient options for proto=fd [ 521.750338][ T7876] loop2: detected capacity change from 0 to 1024 [ 521.829187][ T7876] EXT4-fs (loop2): Ignoring removed orlov option [ 521.877413][ T7877] 9pnet: Insufficient options for proto=fd [ 521.938010][ T7876] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 522.919162][ T7899] 9pnet: Insufficient options for proto=fd [ 524.494113][ T7911] FAULT_INJECTION: forcing a failure. [ 524.494113][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 524.526874][ T7911] CPU: 1 PID: 7911 Comm: syz.0.1906 Not tainted syzkaller #0 [ 524.534305][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 524.544390][ T7911] Call Trace: [ 524.547686][ T7911] [ 524.550635][ T7911] __dump_stack+0x21/0x30 [ 524.554996][ T7911] dump_stack_lvl+0xee/0x150 [ 524.559610][ T7911] ? show_regs_print_info+0x20/0x20 [ 524.564833][ T7911] ? security_inode_alloc+0x33/0x110 [ 524.570143][ T7911] ? new_inode_pseudo+0x91/0x210 [ 524.575117][ T7911] ? __sock_create+0x12c/0x7a0 [ 524.579903][ T7911] ? __sys_socketpair+0x1a1/0x590 [ 524.584950][ T7911] ? x64_sys_call+0x36/0x9a0 [ 524.589563][ T7911] ? do_syscall_64+0x4c/0xa0 [ 524.594185][ T7911] dump_stack+0x15/0x20 [ 524.598369][ T7911] should_fail+0x3c1/0x510 [ 524.602811][ T7911] __should_failslab+0xa4/0xe0 [ 524.607601][ T7911] should_failslab+0x9/0x20 [ 524.612141][ T7911] slab_pre_alloc_hook+0x3b/0xe0 [ 524.617109][ T7911] ? sk_prot_alloc+0x5f/0x320 [ 524.621812][ T7911] kmem_cache_alloc+0x44/0x260 [ 524.626597][ T7911] sk_prot_alloc+0x5f/0x320 [ 524.631145][ T7911] sk_alloc+0x38/0x430 [ 524.635243][ T7911] tipc_sk_create+0xe6/0x1df0 [ 524.639954][ T7911] ? __kasan_check_write+0x14/0x20 [ 524.645202][ T7911] ? _raw_spin_lock+0x8e/0xe0 [ 524.649914][ T7911] ? _raw_spin_trylock_bh+0x130/0x130 [ 524.655331][ T7911] ? security_inode_alloc+0xc0/0x110 [ 524.660637][ T7911] ? inode_init_always+0x729/0x990 [ 524.665779][ T7911] __sock_create+0x38d/0x7a0 [ 524.670391][ T7911] __sys_socketpair+0x1a1/0x590 [ 524.675266][ T7911] __x64_sys_socketpair+0x9b/0xb0 [ 524.680311][ T7911] x64_sys_call+0x36/0x9a0 [ 524.684753][ T7911] do_syscall_64+0x4c/0xa0 [ 524.689188][ T7911] ? clear_bhb_loop+0x50/0xa0 [ 524.693887][ T7911] ? clear_bhb_loop+0x50/0xa0 [ 524.698584][ T7911] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 524.704502][ T7911] RIP: 0033:0x7f7ef3e81fc9 [ 524.708942][ T7911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.728570][ T7911] RSP: 002b:00007f7ef28ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 524.737017][ T7911] RAX: ffffffffffffffda RBX: 00007f7ef40d8fa0 RCX: 00007f7ef3e81fc9 [ 524.745017][ T7911] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 524.753014][ T7911] RBP: 00007f7ef28ea090 R08: 0000000000000000 R09: 0000000000000000 [ 524.761027][ T7911] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 524.769026][ T7911] R13: 00007f7ef40d9038 R14: 00007f7ef40d8fa0 R15: 00007ffdcca34388 [ 524.777032][ T7911] [ 525.055555][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 525.055570][ T30] audit: type=1326 audit(1761361342.602:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 525.087262][ T7924] 9pnet: Insufficient options for proto=fd [ 525.118678][ T30] audit: type=1326 audit(1761361342.642:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 525.189293][ T30] audit: type=1326 audit(1761361342.642:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 525.231805][ T30] audit: type=1326 audit(1761361342.642:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 525.321546][ T7933] loop1: detected capacity change from 0 to 1024 [ 525.592547][ T7933] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.051859][ T30] audit: type=1326 audit(1761361342.642:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 526.075715][ T30] audit: type=1326 audit(1761361342.642:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 526.122662][ T30] audit: type=1326 audit(1761361342.642:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 526.211541][ T30] audit: type=1326 audit(1761361342.642:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 526.246912][ T30] audit: type=1326 audit(1761361342.642:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 526.270377][ T30] audit: type=1326 audit(1761361342.642:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 526.319276][ T7948] 9pnet: Insufficient options for proto=fd [ 526.487983][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 527.814638][ T7970] 9pnet: Insufficient options for proto=fd [ 527.915400][ T7980] 9pnet: Insufficient options for proto=fd [ 528.340044][ T7974] FAULT_INJECTION: forcing a failure. [ 528.340044][ T7974] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 528.458623][ T7974] CPU: 0 PID: 7974 Comm: syz.0.1927 Not tainted syzkaller #0 [ 528.466054][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 528.476129][ T7974] Call Trace: [ 528.479412][ T7974] [ 528.482348][ T7974] __dump_stack+0x21/0x30 [ 528.486685][ T7974] dump_stack_lvl+0xee/0x150 [ 528.491276][ T7974] ? show_regs_print_info+0x20/0x20 [ 528.496483][ T7974] dump_stack+0x15/0x20 [ 528.500644][ T7974] should_fail+0x3c1/0x510 [ 528.505089][ T7974] should_fail_alloc_page+0x55/0x80 [ 528.510293][ T7974] prepare_alloc_pages+0x156/0x600 [ 528.515428][ T7974] ? __alloc_pages_bulk+0xab0/0xab0 [ 528.520632][ T7974] ? fault_around_bytes_set+0xc0/0xc0 [ 528.526006][ T7974] __alloc_pages+0x10a/0x440 [ 528.530596][ T7974] ? prep_new_page+0x110/0x110 [ 528.535367][ T7974] shmem_alloc_and_acct_page+0x42b/0x870 [ 528.541006][ T7974] ? shmem_swapin_page+0x14c0/0x14c0 [ 528.546294][ T7974] ? xas_load+0x2dc/0x300 [ 528.550646][ T7974] ? pagecache_get_page+0xcbd/0xda0 [ 528.555846][ T7974] ? page_cache_prev_miss+0x270/0x270 [ 528.561221][ T7974] ? __kasan_check_read+0x11/0x20 [ 528.566250][ T7974] ? preempt_schedule_irq+0xbb/0x110 [ 528.571539][ T7974] ? __cond_resched+0xb0/0xb0 [ 528.576230][ T7974] shmem_getpage_gfp+0xfe5/0x2310 [ 528.581286][ T7974] shmem_write_begin+0xce/0x1b0 [ 528.586141][ T7974] generic_perform_write+0x2ad/0x670 [ 528.591434][ T7974] ? grab_cache_page_write_begin+0xb0/0xb0 [ 528.597247][ T7974] ? file_remove_privs+0x590/0x590 [ 528.602360][ T7974] ? rwsem_write_trylock+0x130/0x300 [ 528.607650][ T7974] ? clear_nonspinnable+0x60/0x60 [ 528.612677][ T7974] __generic_file_write_iter+0x268/0x480 [ 528.618402][ T7974] generic_file_write_iter+0xa9/0x1d0 [ 528.623787][ T7974] vfs_write+0x802/0xf70 [ 528.628033][ T7974] ? file_end_write+0x1b0/0x1b0 [ 528.632886][ T7974] ? wait_for_completion_killable_timeout+0x10/0x10 [ 528.639586][ T7974] ? __fget_files+0x2c4/0x320 [ 528.644266][ T7974] ? __fdget_pos+0x2d2/0x380 [ 528.648860][ T7974] ? ksys_write+0x71/0x240 [ 528.653282][ T7974] ksys_write+0x140/0x240 [ 528.657612][ T7974] ? __ia32_sys_read+0x90/0x90 [ 528.662378][ T7974] ? __kasan_check_write+0x14/0x20 [ 528.667491][ T7974] __x64_sys_write+0x7b/0x90 [ 528.672081][ T7974] x64_sys_call+0x8ef/0x9a0 [ 528.676588][ T7974] do_syscall_64+0x4c/0xa0 [ 528.681120][ T7974] ? clear_bhb_loop+0x50/0xa0 [ 528.685806][ T7974] ? clear_bhb_loop+0x50/0xa0 [ 528.690484][ T7974] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 528.696386][ T7974] RIP: 0033:0x7f7ef3e81fc9 [ 528.700814][ T7974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.720533][ T7974] RSP: 002b:00007f7ef28ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 528.728956][ T7974] RAX: ffffffffffffffda RBX: 00007f7ef40d8fa0 RCX: 00007f7ef3e81fc9 [ 528.737020][ T7974] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000007 [ 528.745004][ T7974] RBP: 00007f7ef28ea090 R08: 0000000000000000 R09: 0000000000000000 [ 528.752979][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.761050][ T7974] R13: 00007f7ef40d9038 R14: 00007f7ef40d8fa0 R15: 00007ffdcca34388 [ 528.769030][ T7974] [ 528.814786][ T7985] 9pnet: Insufficient options for proto=fd [ 529.705598][ T8011] 9pnet: Insufficient options for proto=fd [ 529.712680][ T8009] device pim6reg1 entered promiscuous mode [ 530.981931][ T8025] loop2: detected capacity change from 0 to 1024 [ 531.184431][ T8025] EXT4-fs (loop2): Ignoring removed orlov option [ 531.361275][ T8025] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 531.583374][ T8033] 9pnet: Insufficient options for proto=fd [ 532.256392][ T8043] FAULT_INJECTION: forcing a failure. [ 532.256392][ T8043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.269702][ T8043] CPU: 1 PID: 8043 Comm: syz.4.1949 Not tainted syzkaller #0 [ 532.277096][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.287156][ T8043] Call Trace: [ 532.290447][ T8043] [ 532.293399][ T8043] __dump_stack+0x21/0x30 [ 532.297731][ T8043] dump_stack_lvl+0xee/0x150 [ 532.302338][ T8043] ? show_regs_print_info+0x20/0x20 [ 532.307551][ T8043] ? stack_trace_save+0x98/0xe0 [ 532.312401][ T8043] dump_stack+0x15/0x20 [ 532.316566][ T8043] should_fail+0x3c1/0x510 [ 532.320981][ T8043] should_fail_usercopy+0x1a/0x20 [ 532.326008][ T8043] _copy_from_user+0x20/0xd0 [ 532.330608][ T8043] iovec_from_user+0x1bc/0x2f0 [ 532.335374][ T8043] ? __copy_msghdr_from_user+0x302/0x5e0 [ 532.341012][ T8043] ? _kstrtoull+0x3c0/0x4d0 [ 532.345536][ T8043] __import_iovec+0x71/0x400 [ 532.350134][ T8043] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 532.355420][ T8043] ? kstrtouint_from_user+0x1a0/0x200 [ 532.360796][ T8043] import_iovec+0x7c/0xb0 [ 532.365127][ T8043] ___sys_sendmsg+0x1b9/0x260 [ 532.369830][ T8043] ? __sys_sendmsg+0x250/0x250 [ 532.374606][ T8043] ? __fdget+0x1a1/0x230 [ 532.378853][ T8043] __x64_sys_sendmsg+0x1e2/0x2a0 [ 532.383792][ T8043] ? ___sys_sendmsg+0x260/0x260 [ 532.388648][ T8043] ? ksys_write+0x1eb/0x240 [ 532.393152][ T8043] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 532.399222][ T8043] x64_sys_call+0x4b/0x9a0 [ 532.403643][ T8043] do_syscall_64+0x4c/0xa0 [ 532.408057][ T8043] ? clear_bhb_loop+0x50/0xa0 [ 532.412734][ T8043] ? clear_bhb_loop+0x50/0xa0 [ 532.417415][ T8043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.423328][ T8043] RIP: 0033:0x7f3b4c74bfc9 [ 532.427755][ T8043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.447402][ T8043] RSP: 002b:00007f3b4b1b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.455824][ T8043] RAX: ffffffffffffffda RBX: 00007f3b4c9a2fa0 RCX: 00007f3b4c74bfc9 [ 532.463800][ T8043] RDX: 0000000000000000 RSI: 0000200000004440 RDI: 0000000000000009 [ 532.471774][ T8043] RBP: 00007f3b4b1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 532.479756][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.487732][ T8043] R13: 00007f3b4c9a3038 R14: 00007f3b4c9a2fa0 R15: 00007ffdb83017a8 [ 532.495722][ T8043] [ 532.525771][ T8041] loop0: detected capacity change from 0 to 1024 [ 532.534942][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 532.534959][ T30] audit: type=1326 audit(1761361350.082:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 532.579631][ T8048] 9pnet: Insufficient options for proto=fd [ 532.596200][ T8044] FAULT_INJECTION: forcing a failure. [ 532.596200][ T8044] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 532.615719][ T8041] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 532.657961][ T8044] CPU: 1 PID: 8044 Comm: syz.1.1950 Not tainted syzkaller #0 [ 532.665477][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.675552][ T8044] Call Trace: [ 532.678859][ T8044] [ 532.681804][ T8044] __dump_stack+0x21/0x30 [ 532.686164][ T8044] dump_stack_lvl+0xee/0x150 [ 532.690792][ T8044] ? show_regs_print_info+0x20/0x20 [ 532.696019][ T8044] ? load_balance+0x12eb/0x3ff0 [ 532.700895][ T8044] dump_stack+0x15/0x20 [ 532.705088][ T8044] should_fail+0x3c1/0x510 [ 532.709526][ T8044] should_fail_alloc_page+0x55/0x80 [ 532.710853][ T30] audit: type=1326 audit(1761361350.082:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 532.714746][ T8044] prepare_alloc_pages+0x156/0x600 [ 532.714775][ T8044] ? __alloc_pages_bulk+0xab0/0xab0 [ 532.748341][ T8044] __alloc_pages+0x10a/0x440 [ 532.752964][ T8044] ? prep_new_page+0x110/0x110 [ 532.757757][ T8044] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 532.763418][ T8044] handle_pte_fault+0xe89/0x2680 [ 532.768376][ T8044] ? fault_around_bytes_set+0xc0/0xc0 [ 532.773763][ T8044] do_handle_mm_fault+0x1a6d/0x1d50 [ 532.779031][ T8044] ? numa_migrate_prep+0xd0/0xd0 [ 532.784082][ T8044] ? bpf_send_signal_common+0x339/0x420 [ 532.789640][ T8044] ? __find_vma+0x30/0x150 [ 532.794061][ T8044] do_user_addr_fault+0x841/0x1180 [ 532.799213][ T8044] ? do_kern_addr_fault+0x80/0x80 [ 532.804245][ T8044] ? finish_task_switch+0x16b/0x780 [ 532.809449][ T8044] ? __kasan_check_write+0x14/0x20 [ 532.814583][ T8044] ? _raw_spin_lock_bh+0x8e/0xe0 [ 532.819646][ T8044] ? _raw_spin_lock_irq+0xe0/0xe0 [ 532.824686][ T8044] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 532.830521][ T8044] exc_page_fault+0x51/0xb0 [ 532.835035][ T8044] asm_exc_page_fault+0x27/0x30 [ 532.839890][ T8044] RIP: 0010:put_cmsg+0x221/0x610 [ 532.844837][ T8044] Code: e8 04 49 b2 fd 4c 89 f0 4c 01 e8 0f 82 ef 02 00 00 48 b9 00 f0 ff ff ff 7f 00 00 48 39 c8 0f 87 dc 02 00 00 0f 01 cb 0f ae e8 <4d> 89 75 00 8b 45 c4 41 89 45 08 49 bc 00 00 00 00 00 fc ff df 8b [ 532.864532][ T8044] RSP: 0018:ffffc900011df778 EFLAGS: 00050287 [ 532.870599][ T8044] RAX: 00002000000032d8 RBX: 0000000000000008 RCX: 00007ffffffff000 [ 532.878577][ T8044] RDX: 0000000000000000 RSI: 00002000000032d8 RDI: 00007ffffffff000 [ 532.886556][ T8044] RBP: ffffc900011df7f0 R08: ffff88811b26cf00 R09: 0000000000000002 [ 532.894538][ T8044] R10: 0000000000000001 R11: 0000000000000000 R12: 00002000000032d8 [ 532.902515][ T8044] R13: 00002000000032c0 R14: 0000000000000018 R15: ffffc900011df860 [ 532.910507][ T8044] ? put_cmsg+0x1fc/0x610 [ 532.914857][ T8044] tipc_sk_anc_data_recv+0x32f/0x6f0 [ 532.920155][ T8044] ? tsk_importance+0x150/0x150 [ 532.925061][ T8044] ? tipc_wait_for_rcvmsg+0x5e0/0x5e0 [ 532.930441][ T8044] ? kfree_skb+0xc1/0x2f0 [ 532.934774][ T8044] ? tsk_advance_rx_queue+0x106/0x240 [ 532.940149][ T8044] tipc_recvmsg+0x6e0/0x13a0 [ 532.944770][ T8044] ? tipc_send_packet+0xa0/0xa0 [ 532.949624][ T8044] ? security_socket_recvmsg+0x87/0xb0 [ 532.955084][ T8044] ? tipc_send_packet+0xa0/0xa0 [ 532.959950][ T8044] ____sys_recvmsg+0x291/0x580 [ 532.964725][ T8044] ? __sys_recvmsg_sock+0x50/0x50 [ 532.969755][ T8044] ? memset+0x35/0x40 [ 532.973746][ T8044] ? import_iovec+0x7c/0xb0 [ 532.978251][ T8044] ___sys_recvmsg+0x1af/0x4f0 [ 532.982934][ T8044] ? __sys_recvmsg+0x250/0x250 [ 532.987704][ T8044] ? vfs_write+0xc17/0xf70 [ 532.992132][ T8044] ? __fdget+0x1a1/0x230 [ 532.996380][ T8044] __x64_sys_recvmsg+0x1df/0x2a0 [ 533.001330][ T8044] ? ___sys_recvmsg+0x4f0/0x4f0 [ 533.006187][ T8044] ? ksys_write+0x1eb/0x240 [ 533.010692][ T8044] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 533.016768][ T8044] x64_sys_call+0x705/0x9a0 [ 533.021287][ T8044] do_syscall_64+0x4c/0xa0 [ 533.025725][ T8044] ? clear_bhb_loop+0x50/0xa0 [ 533.030401][ T8044] ? clear_bhb_loop+0x50/0xa0 [ 533.035099][ T8044] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 533.040995][ T8044] RIP: 0033:0x7f00001e2fc9 [ 533.045429][ T8044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.065039][ T8044] RSP: 002b:00007efffec4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 533.073456][ T8044] RAX: ffffffffffffffda RBX: 00007f0000439fa0 RCX: 00007f00001e2fc9 [ 533.081731][ T8044] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 533.089702][ T8044] RBP: 00007efffec4b090 R08: 0000000000000000 R09: 0000000000000000 [ 533.097690][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.105661][ T8044] R13: 00007f000043a038 R14: 00007f0000439fa0 R15: 00007ffd4e5c3cc8 [ 533.113642][ T8044] [ 533.160154][ T30] audit: type=1326 audit(1761361350.082:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 533.186888][ T30] audit: type=1326 audit(1761361350.082:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 533.219313][ T30] audit: type=1326 audit(1761361350.082:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 533.311299][ T30] audit: type=1326 audit(1761361350.082:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 533.917028][ T30] audit: type=1326 audit(1761361350.082:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 533.982637][ T8072] loop0: detected capacity change from 0 to 1024 [ 534.891035][ T8072] EXT4-fs (loop0): Ignoring removed orlov option [ 535.000446][ T8072] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 535.328609][ T30] audit: type=1326 audit(1761361350.082:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 535.373246][ T8078] loop4: detected capacity change from 0 to 128 [ 535.432858][ T30] audit: type=1326 audit(1761361350.082:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 535.528858][ T30] audit: type=1326 audit(1761361350.132:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 536.091175][ T8078] EXT4-fs (loop4): Test dummy encryption mode enabled [ 536.111507][ T8078] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inlinecrypt,,errors=continue. Quota mode: none. [ 536.125399][ T8078] ext4 filesystem being mounted at /378/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 536.436374][ T1970] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 536.457720][ T8095] FAULT_INJECTION: forcing a failure. [ 536.457720][ T8095] name failslab, interval 1, probability 0, space 0, times 0 [ 536.477546][ T8095] CPU: 0 PID: 8095 Comm: syz.0.1961 Not tainted syzkaller #0 [ 536.484972][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 536.495049][ T8095] Call Trace: [ 536.498333][ T8095] [ 536.501277][ T8095] __dump_stack+0x21/0x30 [ 536.505637][ T8095] dump_stack_lvl+0xee/0x150 [ 536.510232][ T8095] ? show_regs_print_info+0x20/0x20 [ 536.515442][ T8095] dump_stack+0x15/0x20 [ 536.519689][ T8095] should_fail+0x3c1/0x510 [ 536.524122][ T8095] __should_failslab+0xa4/0xe0 [ 536.528978][ T8095] should_failslab+0x9/0x20 [ 536.533498][ T8095] slab_pre_alloc_hook+0x3b/0xe0 [ 536.538439][ T8095] __kmalloc+0x6d/0x2c0 [ 536.542595][ T8095] ? bpf_map_area_alloc+0x49/0xe0 [ 536.547622][ T8095] bpf_map_area_alloc+0x49/0xe0 [ 536.552476][ T8095] htab_map_alloc+0x3c0/0x14f0 [ 536.557254][ T8095] ? security_capable+0x87/0xb0 [ 536.562104][ T8095] ? capable+0x8a/0xe0 [ 536.566173][ T8095] map_create+0x455/0x21b0 [ 536.570588][ T8095] __sys_bpf+0x2cf/0x730 [ 536.574832][ T8095] ? bpf_link_show_fdinfo+0x310/0x310 [ 536.580212][ T8095] ? debug_smp_processor_id+0x17/0x20 [ 536.585585][ T8095] __x64_sys_bpf+0x7c/0x90 [ 536.590002][ T8095] x64_sys_call+0x4b9/0x9a0 [ 536.594527][ T8095] do_syscall_64+0x4c/0xa0 [ 536.598945][ T8095] ? clear_bhb_loop+0x50/0xa0 [ 536.603617][ T8095] ? clear_bhb_loop+0x50/0xa0 [ 536.608289][ T8095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 536.614186][ T8095] RIP: 0033:0x7f7ef3e81fc9 [ 536.618605][ T8095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.638214][ T8095] RSP: 002b:00007f7ef28ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 536.646658][ T8095] RAX: ffffffffffffffda RBX: 00007f7ef40d8fa0 RCX: 00007f7ef3e81fc9 [ 536.654643][ T8095] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 0000000000000000 [ 536.662612][ T8095] RBP: 00007f7ef28ea090 R08: 0000000000000000 R09: 0000000000000000 [ 536.670582][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.678555][ T8095] R13: 00007f7ef40d9038 R14: 00007f7ef40d8fa0 R15: 00007ffdcca34388 [ 536.686538][ T8095] [ 536.694152][ T8099] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8099 comm=syz.4.1957 [ 536.709470][ T8099] netlink: 'syz.4.1957': attribute type 12 has an invalid length. [ 536.717435][ T8099] netlink: 'syz.4.1957': attribute type 29 has an invalid length. [ 536.750703][ T8099] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1957'. [ 536.821211][ T8103] 9pnet: Insufficient options for proto=fd [ 536.853813][ T8109] loop1: detected capacity change from 0 to 1024 [ 536.947699][ T8109] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 536.976174][ T1970] usb 3-1: Using ep0 maxpacket: 32 [ 536.982118][ T8109] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.463437][ T8116] loop0: detected capacity change from 0 to 1024 [ 537.588739][ T1970] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 537.636682][ T1970] usb 3-1: config 0 has no interface number 0 [ 537.663544][ T8116] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 537.968002][ T1970] usb 3-1: config 0 interface 196 has no altsetting 0 [ 538.188613][ T1970] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 538.208039][ T1970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.247808][ T1970] usb 3-1: Product: syz [ 538.267072][ T1970] usb 3-1: Manufacturer: syz [ 538.290401][ T1970] usb 3-1: SerialNumber: syz [ 538.335175][ T1970] usb 3-1: config 0 descriptor?? [ 538.534199][ T8134] FAULT_INJECTION: forcing a failure. [ 538.534199][ T8134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.552462][ T8134] CPU: 0 PID: 8134 Comm: syz.0.1973 Not tainted syzkaller #0 [ 538.559958][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 538.570020][ T8134] Call Trace: [ 538.573317][ T8134] [ 538.576249][ T8134] __dump_stack+0x21/0x30 [ 538.580588][ T8134] dump_stack_lvl+0xee/0x150 [ 538.585180][ T8134] ? show_regs_print_info+0x20/0x20 [ 538.590382][ T8134] dump_stack+0x15/0x20 [ 538.594538][ T8134] should_fail+0x3c1/0x510 [ 538.598962][ T8134] should_fail_usercopy+0x1a/0x20 [ 538.603990][ T8134] _copy_to_user+0x20/0x90 [ 538.608403][ T8134] simple_read_from_buffer+0xe9/0x160 [ 538.613790][ T8134] proc_fail_nth_read+0x19a/0x210 [ 538.618819][ T8134] ? proc_fault_inject_write+0x2f0/0x2f0 [ 538.624452][ T8134] ? security_file_permission+0x83/0xa0 [ 538.630012][ T8134] ? proc_fault_inject_write+0x2f0/0x2f0 [ 538.635738][ T8134] vfs_read+0x282/0xbe0 [ 538.639924][ T8134] ? __kasan_check_write+0x14/0x20 [ 538.645037][ T8134] ? kernel_read+0x1f0/0x1f0 [ 538.649626][ T8134] ? __kasan_check_write+0x14/0x20 [ 538.654735][ T8134] ? mutex_lock+0x95/0x1a0 [ 538.659158][ T8134] ? wait_for_completion_killable_timeout+0x10/0x10 [ 538.665754][ T8134] ? __fget_files+0x2c4/0x320 [ 538.670441][ T8134] ? __fdget_pos+0x2d2/0x380 [ 538.675033][ T8134] ? ksys_read+0x71/0x240 [ 538.679361][ T8134] ksys_read+0x140/0x240 [ 538.683605][ T8134] ? vfs_write+0xf70/0xf70 [ 538.688049][ T8134] ? debug_smp_processor_id+0x17/0x20 [ 538.693425][ T8134] __x64_sys_read+0x7b/0x90 [ 538.697931][ T8134] x64_sys_call+0x96d/0x9a0 [ 538.702438][ T8134] do_syscall_64+0x4c/0xa0 [ 538.706864][ T8134] ? clear_bhb_loop+0x50/0xa0 [ 538.711549][ T8134] ? clear_bhb_loop+0x50/0xa0 [ 538.716228][ T8134] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 538.722127][ T8134] RIP: 0033:0x7f7ef3e809dc [ 538.726545][ T8134] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 538.746154][ T8134] RSP: 002b:00007f7ef28ea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 538.754568][ T8134] RAX: ffffffffffffffda RBX: 00007f7ef40d8fa0 RCX: 00007f7ef3e809dc [ 538.762569][ T8134] RDX: 000000000000000f RSI: 00007f7ef28ea0a0 RDI: 0000000000000005 [ 538.770541][ T8134] RBP: 00007f7ef28ea090 R08: 0000000000000000 R09: 0000000000000000 [ 538.778511][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.786482][ T8134] R13: 00007f7ef40d9038 R14: 00007f7ef40d8fa0 R15: 00007ffdcca34388 [ 538.794463][ T8134] [ 538.848858][ T1970] ipheth 3-1:0.196: Unable to find endpoints [ 538.869646][ T1970] usb 3-1: USB disconnect, device number 10 [ 538.892512][ T8144] FAULT_INJECTION: forcing a failure. [ 538.892512][ T8144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.950729][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 538.950745][ T30] audit: type=1326 audit(1761361356.502:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 538.965439][ T8144] CPU: 1 PID: 8144 Comm: syz.1.1978 Not tainted syzkaller #0 [ 538.987590][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 538.991659][ T8147] 9pnet: Insufficient options for proto=fd [ 538.997664][ T8144] Call Trace: [ 538.997674][ T8144] [ 538.997682][ T8144] __dump_stack+0x21/0x30 [ 539.014044][ T8144] dump_stack_lvl+0xee/0x150 [ 539.018674][ T8144] ? show_regs_print_info+0x20/0x20 [ 539.023886][ T8144] ? stack_trace_save+0x98/0xe0 [ 539.028745][ T8144] ? __stack_depot_save+0x34/0x480 [ 539.033875][ T8144] dump_stack+0x15/0x20 [ 539.038054][ T8144] should_fail+0x3c1/0x510 [ 539.042485][ T8144] should_fail_usercopy+0x1a/0x20 [ 539.047535][ T8144] _copy_from_user+0x20/0xd0 [ 539.052142][ T8144] __copy_msghdr_from_user+0xaf/0x5e0 [ 539.057529][ T8144] ? _kstrtoull+0x3c0/0x4d0 [ 539.062042][ T8144] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 539.067339][ T8144] ? kstrtouint_from_user+0x1a0/0x200 [ 539.072720][ T8144] ___sys_sendmsg+0x156/0x260 [ 539.077408][ T8144] ? __sys_sendmsg+0x250/0x250 [ 539.082184][ T8144] ? __fdget+0x1a1/0x230 [ 539.086435][ T8144] __x64_sys_sendmsg+0x1e2/0x2a0 [ 539.091376][ T8144] ? ___sys_sendmsg+0x260/0x260 [ 539.096230][ T8144] ? ksys_write+0x1eb/0x240 [ 539.100740][ T8144] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 539.106816][ T8144] x64_sys_call+0x4b/0x9a0 [ 539.111242][ T8144] do_syscall_64+0x4c/0xa0 [ 539.115660][ T8144] ? clear_bhb_loop+0x50/0xa0 [ 539.120338][ T8144] ? clear_bhb_loop+0x50/0xa0 [ 539.125014][ T8144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 539.130909][ T8144] RIP: 0033:0x7f00001e2fc9 [ 539.135326][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.155138][ T8144] RSP: 002b:00007efffec4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.163554][ T8144] RAX: ffffffffffffffda RBX: 00007f0000439fa0 RCX: 00007f00001e2fc9 [ 539.171522][ T8144] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 539.179496][ T8144] RBP: 00007efffec4b090 R08: 0000000000000000 R09: 0000000000000000 [ 539.187464][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.195437][ T8144] R13: 00007f000043a038 R14: 00007f0000439fa0 R15: 00007ffd4e5c3cc8 [ 539.203424][ T8144] [ 539.240994][ T8154] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 539.338161][ T30] audit: type=1326 audit(1761361356.542:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 539.367344][ T30] audit: type=1326 audit(1761361356.542:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 539.396885][ T8160] loop4: detected capacity change from 0 to 1024 [ 539.423959][ T30] audit: type=1326 audit(1761361356.542:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 539.455527][ T30] audit: type=1326 audit(1761361356.542:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 539.489004][ T30] audit: type=1326 audit(1761361356.542:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 540.023415][ T8167] loop1: detected capacity change from 0 to 1024 [ 540.046917][ T8160] EXT4-fs (loop4): Ignoring removed orlov option [ 540.095323][ T30] audit: type=1326 audit(1761361356.542:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 540.224836][ T8167] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 540.270699][ T8160] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 540.537616][ T30] audit: type=1326 audit(1761361356.542:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 540.573454][ T8175] loop2: detected capacity change from 0 to 1024 [ 540.592736][ T8160] syz.4.1985 (8160) used greatest stack depth: 19584 bytes left [ 540.620773][ T30] audit: type=1326 audit(1761361356.542:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 540.647266][ T8175] EXT4-fs (loop2): Ignoring removed orlov option [ 540.685239][ T8177] FAULT_INJECTION: forcing a failure. [ 540.685239][ T8177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.699123][ T8177] CPU: 1 PID: 8177 Comm: syz.3.1987 Not tainted syzkaller #0 [ 540.706527][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 540.716594][ T8177] Call Trace: [ 540.719890][ T8177] [ 540.722837][ T8177] __dump_stack+0x21/0x30 [ 540.727188][ T8177] dump_stack_lvl+0xee/0x150 [ 540.731812][ T8177] ? show_regs_print_info+0x20/0x20 [ 540.737029][ T8177] dump_stack+0x15/0x20 [ 540.741199][ T8177] should_fail+0x3c1/0x510 [ 540.745636][ T8177] should_fail_usercopy+0x1a/0x20 [ 540.750675][ T8177] _copy_from_user+0x20/0xd0 [ 540.755280][ T8177] bpf_test_init+0x13d/0x1c0 [ 540.759887][ T8177] bpf_prog_test_run_skb+0x193/0x1150 [ 540.765293][ T8177] ? __kasan_check_write+0x14/0x20 [ 540.770415][ T8177] ? fput_many+0x15a/0x1a0 [ 540.774856][ T8177] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 540.780767][ T8177] bpf_prog_test_run+0x3d5/0x620 [ 540.785732][ T8177] ? bpf_prog_query+0x230/0x230 [ 540.790607][ T8177] ? selinux_bpf+0xce/0xf0 [ 540.795033][ T8177] ? security_bpf+0x82/0xa0 [ 540.799909][ T8177] __sys_bpf+0x52c/0x730 [ 540.804166][ T8177] ? bpf_link_show_fdinfo+0x310/0x310 [ 540.809563][ T8177] ? debug_smp_processor_id+0x17/0x20 [ 540.814954][ T8177] __x64_sys_bpf+0x7c/0x90 [ 540.819382][ T8177] x64_sys_call+0x4b9/0x9a0 [ 540.823897][ T8177] do_syscall_64+0x4c/0xa0 [ 540.828325][ T8177] ? clear_bhb_loop+0x50/0xa0 [ 540.833011][ T8177] ? clear_bhb_loop+0x50/0xa0 [ 540.837703][ T8177] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.843618][ T8177] RIP: 0033:0x7f430475dfc9 [ 540.848045][ T8177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.867667][ T8177] RSP: 002b:00007f43031c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 540.876094][ T8177] RAX: ffffffffffffffda RBX: 00007f43049b4fa0 RCX: 00007f430475dfc9 [ 540.884074][ T8177] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 540.892057][ T8177] RBP: 00007f43031c6090 R08: 0000000000000000 R09: 0000000000000000 [ 540.900116][ T8177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.908172][ T8177] R13: 00007f43049b5038 R14: 00007f43049b4fa0 R15: 00007ffc18a30a18 [ 540.916146][ T8177] [ 540.926957][ T30] audit: type=1326 audit(1761361356.542:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8146 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef3e81fc9 code=0x7ffc0000 [ 540.952447][ T8175] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 541.147076][ T8191] loop4: detected capacity change from 0 to 1024 [ 541.221266][ T8191] EXT4-fs (loop4): Ignoring removed orlov option [ 541.373119][ T8191] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 541.451936][ T7149] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 541.718788][ T7149] usb 2-1: Using ep0 maxpacket: 16 [ 541.838963][ T7149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.075702][ T7149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.085809][ T7149] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 542.095049][ T7149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.117436][ T7149] usb 2-1: config 0 descriptor?? [ 542.266416][ T8197] 9pnet: Insufficient options for proto=fd [ 542.598550][ T1970] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 542.599839][ T7149] ntrig 0003:1B96:0008.0009: unknown main item tag 0x0 [ 542.613448][ T7149] ntrig 0003:1B96:0008.0009: unknown main item tag 0x0 [ 542.620613][ T7149] ntrig 0003:1B96:0008.0009: unknown main item tag 0x0 [ 542.627604][ T7149] ntrig 0003:1B96:0008.0009: unknown main item tag 0x0 [ 542.640812][ T7149] ntrig 0003:1B96:0008.0009: unknown main item tag 0x0 [ 542.653053][ T7149] ntrig 0003:1B96:0008.0009: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0 [ 542.813600][ T7149] usb 2-1: USB disconnect, device number 8 [ 542.842885][ T8217] fido_id[8217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 543.038587][ T1970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.049516][ T1970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.059611][ T1970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.072742][ T1970] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.082029][ T1970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.091246][ T1970] usb 1-1: config 0 descriptor?? [ 543.168670][ T8222] loop2: detected capacity change from 0 to 1024 [ 543.245242][ T8226] loop4: detected capacity change from 0 to 256 [ 543.282488][ T8222] EXT4-fs (loop2): Ignoring removed orlov option [ 543.518603][ T8226] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 543.549376][ T8222] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 543.578705][ T8226] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 543.601042][ T8226] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 543.849427][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 543.856902][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 543.864356][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 543.871861][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 543.879323][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 543.886869][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 543.894395][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 543.902115][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 543.925917][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 544.186862][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 544.210794][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 544.218765][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 544.226299][ T1970] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 544.234551][ T1970] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 544.247447][ T1970] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 544.352375][ T8249] loop4: detected capacity change from 0 to 1024 [ 544.395463][ T8249] EXT4-fs (loop4): Ignoring removed orlov option [ 544.546746][ T8249] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 545.167584][ T1970] usb 1-1: USB disconnect, device number 7 [ 545.267518][ T8261] fido_id[8261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 545.387126][ T8265] loop1: detected capacity change from 0 to 512 [ 545.952768][ T8265] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 546.125260][ T8273] loop4: detected capacity change from 0 to 2048 [ 546.210919][ T8273] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 546.221642][ T8273] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.706901][ T8302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2020'. [ 547.856781][ T8314] loop0: detected capacity change from 0 to 1024 [ 547.888798][ T8314] EXT4-fs (loop0): Ignoring removed orlov option [ 548.725512][ T8314] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 549.116071][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 549.116088][ T30] audit: type=1326 audit(1761361366.662:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 549.190083][ T30] audit: type=1326 audit(1761361366.662:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 549.214035][ T30] audit: type=1326 audit(1761361366.662:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 549.344689][ T30] audit: type=1326 audit(1761361366.662:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 549.868574][ T30] audit: type=1326 audit(1761361366.662:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 549.924217][ T30] audit: type=1326 audit(1761361366.662:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 549.961101][ T30] audit: type=1326 audit(1761361366.662:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 549.995165][ T8339] 9pnet: Insufficient options for proto=fd [ 550.540696][ T8343] loop1: detected capacity change from 0 to 1024 [ 550.621785][ T8343] EXT4-fs (loop1): Ignoring removed orlov option [ 550.874086][ T8343] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 551.812040][ T30] audit: type=1326 audit(1761361366.662:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 551.889665][ T30] audit: type=1326 audit(1761361366.892:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 551.915866][ T30] audit: type=1326 audit(1761361366.892:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4c74bfc9 code=0x7ffc0000 [ 552.063996][ T8358] syz.3.2029[8358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.064074][ T8358] syz.3.2029[8358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.341166][ T8364] 9pnet: Insufficient options for proto=fd [ 552.599319][ T8373] loop1: detected capacity change from 0 to 1024 [ 552.640370][ T8373] EXT4-fs (loop1): Ignoring removed orlov option [ 552.722744][ T8373] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 553.737925][ T8384] loop0: detected capacity change from 0 to 1024 [ 554.403118][ T8384] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 554.756695][ T8389] loop1: detected capacity change from 0 to 1024 [ 554.869416][ T8389] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 554.880600][ T8389] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.892737][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 554.892753][ T30] audit: type=1326 audit(1761361372.442:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 554.934033][ T8391] 9pnet: Insufficient options for proto=fd [ 555.090318][ T30] audit: type=1326 audit(1761361372.482:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 555.131883][ T8404] loop0: detected capacity change from 0 to 1024 [ 555.175218][ T8404] EXT4-fs (loop0): Ignoring removed orlov option [ 555.234921][ T30] audit: type=1326 audit(1761361372.482:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 555.319061][ T8403] loop2: detected capacity change from 0 to 1024 [ 555.341084][ T8404] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 555.520915][ T30] audit: type=1326 audit(1761361372.482:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 555.710702][ T8403] EXT4-fs (loop2): Ignoring removed orlov option [ 556.283885][ T8403] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 556.323068][ T30] audit: type=1326 audit(1761361372.482:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 556.389662][ T30] audit: type=1326 audit(1761361372.482:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 556.413260][ T30] audit: type=1326 audit(1761361372.482:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 556.438252][ T30] audit: type=1326 audit(1761361372.482:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 556.480772][ T30] audit: type=1326 audit(1761361372.482:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 556.504405][ T30] audit: type=1326 audit(1761361372.482:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 556.535665][ T8416] loop4: detected capacity change from 0 to 1024 [ 556.622840][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 556.639717][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.649038][ T8416] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 556.760690][ T8422] loop0: detected capacity change from 0 to 1024 [ 556.791571][ T8416] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.877504][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 557.008134][ T8422] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 557.483245][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 557.493109][ T8430] 9pnet: Insufficient options for proto=fd [ 557.607839][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 557.639331][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 557.672106][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 557.683258][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 557.726146][ T8433] loop1: detected capacity change from 0 to 1024 [ 557.780988][ T8433] EXT4-fs (loop1): Ignoring removed orlov option [ 557.945051][ T8433] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 558.452513][ T8439] loop0: detected capacity change from 0 to 1024 [ 561.458570][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.423730][ T8439] EXT4-fs: failed to create workqueue [ 562.429352][ T8439] EXT4-fs (loop0): mount failed [ 562.510601][ T8445] 9pnet: Insufficient options for proto=fd [ 562.558568][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 562.558585][ T30] audit: type=1326 audit(1761361380.052:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 562.627721][ T30] audit: type=1326 audit(1761361380.052:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 562.652578][ T30] audit: type=1326 audit(1761361380.062:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 562.678296][ T30] audit: type=1326 audit(1761361380.062:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 562.702091][ T30] audit: type=1326 audit(1761361380.062:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 562.725773][ T30] audit: type=1326 audit(1761361380.062:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 562.749293][ T30] audit: type=1326 audit(1761361380.062:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 562.772828][ T30] audit: type=1326 audit(1761361380.062:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 562.797379][ T30] audit: type=1326 audit(1761361380.062:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 562.858460][ T8456] loop2: detected capacity change from 0 to 1024 [ 562.867933][ T30] audit: type=1326 audit(1761361380.062:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f16e8ceffc9 code=0x7ffc0000 [ 562.971275][ T8456] EXT4-fs (loop2): Ignoring removed orlov option [ 563.091112][ T8456] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 563.977679][ T8464] loop1: detected capacity change from 0 to 1024 [ 564.040885][ T8464] EXT4-fs (loop1): Ignoring removed bh option [ 564.053387][ T8464] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 564.093292][ T8464] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 564.107519][ T8472] loop2: detected capacity change from 0 to 1024 [ 564.159634][ T8472] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 564.184467][ T8472] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.234863][ T8476] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2060'. [ 565.361063][ T8487] 9pnet: Insufficient options for proto=fd [ 565.911940][ T8494] 9pnet: Insufficient options for proto=fd [ 565.987354][ T8498] loop1: detected capacity change from 0 to 1024 [ 566.069054][ T8498] EXT4-fs (loop1): Ignoring removed orlov option [ 566.080094][ T8498] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 566.802814][ T8511] loop1: detected capacity change from 0 to 256 [ 566.810062][ T8511] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 566.822369][ T8511] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 566.832780][ T8511] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 566.989736][ T8518] loop2: detected capacity change from 0 to 1024 [ 567.189816][ T8520] xt_CT: No such helper "pptp" [ 567.334102][ T8518] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 567.347532][ T8518] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.280219][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 568.280236][ T30] audit: type=1326 audit(1761361385.832:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.1.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 568.314715][ T8536] 9pnet: Insufficient options for proto=fd [ 568.393548][ T8541] loop0: detected capacity change from 0 to 1024 [ 568.426925][ T30] audit: type=1326 audit(1761361385.862:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.1.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 568.462963][ T8541] EXT4-fs (loop0): Ignoring removed orlov option [ 568.576677][ T30] audit: type=1326 audit(1761361385.862:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.1.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 568.657513][ T8541] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 569.242844][ T30] audit: type=1326 audit(1761361385.862:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.1.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 569.277188][ T101] udevd[101]: worker [753] terminated by signal 33 (Unknown signal 33) [ 569.292633][ T101] udevd[101]: worker [753] failed while handling '/devices/virtual/block/loop1' [ 569.364669][ T30] audit: type=1326 audit(1761361385.862:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.1.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 569.388182][ T30] audit: type=1326 audit(1761361385.862:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.1.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 569.412160][ T30] audit: type=1326 audit(1761361385.862:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.1.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 569.435866][ T30] audit: type=1326 audit(1761361385.862:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.1.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 569.462922][ T30] audit: type=1326 audit(1761361385.862:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.1.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 569.494802][ T30] audit: type=1326 audit(1761361385.862:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.1.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 569.541145][ T8553] FAULT_INJECTION: forcing a failure. [ 569.541145][ T8553] name failslab, interval 1, probability 0, space 0, times 0 [ 569.557723][ T8553] CPU: 0 PID: 8553 Comm: syz.1.2085 Not tainted syzkaller #0 [ 569.557751][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 569.557765][ T8553] Call Trace: [ 569.557772][ T8553] [ 569.557780][ T8553] __dump_stack+0x21/0x30 [ 569.557809][ T8553] dump_stack_lvl+0xee/0x150 [ 569.590346][ T8553] ? show_regs_print_info+0x20/0x20 [ 569.595553][ T8553] ? 0xffffffffa002a000 [ 569.599707][ T8553] ? is_bpf_text_address+0x177/0x190 [ 569.604996][ T8553] dump_stack+0x15/0x20 [ 569.609164][ T8553] should_fail+0x3c1/0x510 [ 569.613583][ T8553] __should_failslab+0xa4/0xe0 [ 569.618347][ T8553] should_failslab+0x9/0x20 [ 569.622848][ T8553] slab_pre_alloc_hook+0x3b/0xe0 [ 569.627781][ T8553] kmem_cache_alloc_trace+0x48/0x270 [ 569.633068][ T8553] ? __get_vm_area_node+0x11d/0x350 [ 569.638268][ T8553] __get_vm_area_node+0x11d/0x350 [ 569.643292][ T8553] __vmalloc_node_range+0xdf/0xaf0 [ 569.648405][ T8553] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 569.653955][ T8553] ? selinux_capset+0xf0/0xf0 [ 569.658633][ T8553] ? _kstrtoull+0x3c0/0x4d0 [ 569.663135][ T8553] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 569.668771][ T8553] __vmalloc+0x79/0x90 [ 569.672841][ T8553] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 569.678384][ T8553] bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 569.683763][ T8553] bpf_prog_alloc+0x1f/0x1e0 [ 569.688354][ T8553] bpf_prog_load+0x7c3/0x1550 [ 569.693028][ T8553] ? __kasan_check_write+0x14/0x20 [ 569.698146][ T8553] ? map_freeze+0x360/0x360 [ 569.702654][ T8553] ? selinux_bpf+0xc7/0xf0 [ 569.707070][ T8553] ? security_bpf+0x82/0xa0 [ 569.711572][ T8553] __sys_bpf+0x4c3/0x730 [ 569.715813][ T8553] ? bpf_link_show_fdinfo+0x310/0x310 [ 569.721186][ T8553] ? debug_smp_processor_id+0x17/0x20 [ 569.726565][ T8553] __x64_sys_bpf+0x7c/0x90 [ 569.731010][ T8553] x64_sys_call+0x4b9/0x9a0 [ 569.735615][ T8553] do_syscall_64+0x4c/0xa0 [ 569.740030][ T8553] ? clear_bhb_loop+0x50/0xa0 [ 569.744796][ T8553] ? clear_bhb_loop+0x50/0xa0 [ 569.749477][ T8553] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 569.755372][ T8553] RIP: 0033:0x7f00001e2fc9 [ 569.759787][ T8553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.779395][ T8553] RSP: 002b:00007efffec4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 569.787826][ T8553] RAX: ffffffffffffffda RBX: 00007f0000439fa0 RCX: 00007f00001e2fc9 [ 569.795800][ T8553] RDX: 0000000000000080 RSI: 0000200000000700 RDI: 0000000000000005 [ 569.803788][ T8553] RBP: 00007efffec4b090 R08: 0000000000000000 R09: 0000000000000000 [ 569.811757][ T8553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.819726][ T8553] R13: 00007f000043a038 R14: 00007f0000439fa0 R15: 00007ffd4e5c3cc8 [ 569.827705][ T8553] [ 569.838874][ T8553] syz.1.2085: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 569.856161][ T8553] CPU: 0 PID: 8553 Comm: syz.1.2085 Not tainted syzkaller #0 [ 569.863578][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 569.873653][ T8553] Call Trace: [ 569.876958][ T8553] [ 569.878826][ T8563] loop4: detected capacity change from 0 to 1024 [ 569.879900][ T8553] __dump_stack+0x21/0x30 [ 569.890549][ T8553] dump_stack_lvl+0xee/0x150 [ 569.895149][ T8553] ? show_regs_print_info+0x20/0x20 [ 569.900354][ T8553] ? pr_cont_kernfs_name+0xe3/0xf0 [ 569.905473][ T8553] dump_stack+0x15/0x20 [ 569.909633][ T8553] warn_alloc+0x1b0/0x1d0 [ 569.914140][ T8553] ? __should_failslab+0xa4/0xe0 [ 569.919086][ T8553] ? zone_watermark_ok_safe+0x270/0x270 [ 569.924636][ T8553] ? __get_vm_area_node+0x11d/0x350 [ 569.929841][ T8553] ? __get_vm_area_node+0x33e/0x350 [ 569.935131][ T8553] __vmalloc_node_range+0x152/0xaf0 [ 569.940335][ T8553] ? selinux_capset+0xf0/0xf0 [ 569.945015][ T8553] ? _kstrtoull+0x3c0/0x4d0 [ 569.949519][ T8553] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 569.955075][ T8553] __vmalloc+0x79/0x90 [ 569.959155][ T8553] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 569.964714][ T8553] bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 569.970087][ T8553] bpf_prog_alloc+0x1f/0x1e0 [ 569.974765][ T8553] bpf_prog_load+0x7c3/0x1550 [ 569.979440][ T8553] ? __kasan_check_write+0x14/0x20 [ 569.984556][ T8553] ? map_freeze+0x360/0x360 [ 569.989062][ T8553] ? selinux_bpf+0xc7/0xf0 [ 569.993655][ T8553] ? security_bpf+0x82/0xa0 [ 569.998157][ T8553] __sys_bpf+0x4c3/0x730 [ 570.002397][ T8553] ? bpf_link_show_fdinfo+0x310/0x310 [ 570.007768][ T8553] ? debug_smp_processor_id+0x17/0x20 [ 570.013141][ T8553] __x64_sys_bpf+0x7c/0x90 [ 570.017557][ T8553] x64_sys_call+0x4b9/0x9a0 [ 570.022061][ T8553] do_syscall_64+0x4c/0xa0 [ 570.026478][ T8553] ? clear_bhb_loop+0x50/0xa0 [ 570.031170][ T8553] ? clear_bhb_loop+0x50/0xa0 [ 570.035845][ T8553] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.041739][ T8553] RIP: 0033:0x7f00001e2fc9 [ 570.046153][ T8553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.065759][ T8553] RSP: 002b:00007efffec4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 570.074179][ T8553] RAX: ffffffffffffffda RBX: 00007f0000439fa0 RCX: 00007f00001e2fc9 [ 570.082383][ T8553] RDX: 0000000000000080 RSI: 0000200000000700 RDI: 0000000000000005 [ 570.090385][ T8553] RBP: 00007efffec4b090 R08: 0000000000000000 R09: 0000000000000000 [ 570.098364][ T8553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.106341][ T8553] R13: 00007f000043a038 R14: 00007f0000439fa0 R15: 00007ffd4e5c3cc8 [ 570.114330][ T8553] [ 570.119894][ T8553] Mem-Info: [ 570.123230][ T8553] active_anon:62 inactive_anon:43725 isolated_anon:0 [ 570.123230][ T8553] active_file:16099 inactive_file:6167 isolated_file:0 [ 570.123230][ T8553] unevictable:0 dirty:277 writeback:0 [ 570.123230][ T8553] slab_reclaimable:7383 slab_unreclaimable:24573 [ 570.123230][ T8553] mapped:30100 shmem:19583 pagetables:584 bounce:0 [ 570.123230][ T8553] kernel_misc_reclaimable:0 [ 570.123230][ T8553] free:1547562 free_pcp:27285 free_cma:0 [ 570.172139][ T8553] Node 0 active_anon:248kB inactive_anon:174900kB active_file:64396kB inactive_file:24668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120500kB dirty:1108kB writeback:0kB shmem:78332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5620kB pagetables:2336kB all_unreclaimable? no [ 570.198160][ T8565] loop0: detected capacity change from 0 to 8192 [ 570.204907][ T8553] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982948kB mlocked:0kB bounce:0kB free_pcp:4176kB local_pcp:0kB free_cma:0kB [ 570.248092][ T8553] lowmem_reserve[]: 0 3941 3941 [ 570.253315][ T8553] Normal free:3211252kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:248kB inactive_anon:178900kB active_file:64496kB inactive_file:24668kB unevictable:0kB writepending:1108kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:101012kB local_pcp:49064kB free_cma:0kB [ 570.254451][ T8563] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 570.293495][ T8553] lowmem_reserve[]: 0 0 0 [ 570.294390][ T8563] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.303086][ T8553] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 570.339292][ T8553] Normal: 3289*4kB (UME) 878*8kB (UME) 302*16kB (UME) 284*32kB (UME) 77*64kB (UME) 117*128kB (UME) 117*256kB (UME) 60*512kB (UME) 36*1024kB (UME) 18*2048kB (UE) 738*4096kB (UM) = 3211252kB [ 570.370176][ T8564] device veth1_macvtap entered promiscuous mode [ 570.376845][ T8553] 45423 total pagecache pages [ 570.386268][ T2078] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 570.391855][ T8553] 306 pages in swap cache [ 570.396263][ T2078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 570.443975][ T8553] Swap cache stats: add 103665, delete 103359, find 26419/26419 [ 570.460082][ T8553] Free swap = 123496kB [ 570.467394][ T8553] Total swap = 124996kB [ 570.468805][ T2078] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 570.480218][ T2078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 570.488705][ T2078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 570.497039][ T2078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 570.505629][ T2078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 570.510888][ T8553] 2097051 pages RAM [ 570.514471][ T2078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 570.517806][ T8553] 0 pages HighMem/MovableOnly [ 570.526028][ T2078] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 570.530399][ T8553] 342290 pages reserved [ 570.541915][ T8553] 0 pages cma reserved [ 571.113773][ T8525] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 571.586015][ T8582] loop1: detected capacity change from 0 to 512 [ 571.593394][ T6663] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 36 with max blocks 716 with error 28 [ 571.606258][ T6663] EXT4-fs (loop4): This should not happen!! Data will be lost [ 571.606258][ T6663] [ 571.616716][ T6663] EXT4-fs (loop4): Total free blocks count 0 [ 571.622929][ T6663] EXT4-fs (loop4): Free/Dirty block details [ 571.632592][ T6663] EXT4-fs (loop4): free_blocks=4293918720 [ 571.638354][ T6663] EXT4-fs (loop4): dirty_blocks=720 [ 571.643627][ T6663] EXT4-fs (loop4): Block reservation details [ 571.650013][ T6663] EXT4-fs (loop4): i_reserved_data_blocks=45 [ 571.686595][ T8582] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 571.700150][ T8582] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 571.710100][ T8582] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 571.717938][ T8582] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 572.381351][ T8587] 9pnet: Insufficient options for proto=fd [ 572.457371][ T8582] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.2092: Allocating blocks 41-42 which overlap fs metadata [ 572.511690][ T8582] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.2092: Allocating blocks 41-42 which overlap fs metadata [ 572.890049][ T8582] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.2092: Failed to acquire dquot type 1 [ 572.902364][ T8582] EXT4-fs error (device loop1): mb_free_blocks:1860: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 572.917865][ T8582] EXT4-fs error (device loop1): ext4_do_update_inode:5241: inode #12: comm syz.1.2092: corrupted inode contents [ 573.313663][ T8611] loop4: detected capacity change from 0 to 1024 [ 573.329261][ T8582] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.2092: mark_inode_dirty error [ 573.352283][ T8582] EXT4-fs error (device loop1): ext4_do_update_inode:5241: inode #12: comm syz.1.2092: corrupted inode contents [ 573.398717][ T8582] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.2092: mark_inode_dirty error [ 573.419782][ T8611] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 573.419875][ T8611] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.422347][ T8611] 9pnet: Could not find request transport: Od [ 573.423277][ T8582] EXT4-fs error (device loop1): ext4_do_update_inode:5241: inode #12: comm syz.1.2092: corrupted inode contents [ 573.423445][ T8582] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 573.423581][ T8582] EXT4-fs error (device loop1): ext4_do_update_inode:5241: inode #12: comm syz.1.2092: corrupted inode contents [ 573.423753][ T8582] EXT4-fs error (device loop1): ext4_truncate:4310: inode #12: comm syz.1.2092: mark_inode_dirty error [ 573.423888][ T8582] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 573.424105][ T8582] EXT4-fs (loop1): 1 truncate cleaned up [ 573.424137][ T8582] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,noblock_validity,mblk_io_submit,jqfmt=vfsold,nodelalloc,nomblk_io_submit,usrjquota=,minixdf,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 574.083198][ T8629] FAULT_INJECTION: forcing a failure. [ 574.083198][ T8629] name failslab, interval 1, probability 0, space 0, times 0 [ 574.096799][ T8629] CPU: 1 PID: 8629 Comm: syz.2.2102 Not tainted syzkaller #0 [ 574.104205][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 574.114270][ T8629] Call Trace: [ 574.117579][ T8629] [ 574.120506][ T8629] __dump_stack+0x21/0x30 [ 574.124852][ T8629] dump_stack_lvl+0xee/0x150 [ 574.129469][ T8629] ? show_regs_print_info+0x20/0x20 [ 574.134668][ T8629] dump_stack+0x15/0x20 [ 574.138830][ T8629] should_fail+0x3c1/0x510 [ 574.143278][ T8629] ? alloc_skb_with_frags+0xa8/0x620 [ 574.148567][ T8629] __should_failslab+0xa4/0xe0 [ 574.153474][ T8629] should_failslab+0x9/0x20 [ 574.158030][ T8629] slab_pre_alloc_hook+0x3b/0xe0 [ 574.163070][ T8629] ? alloc_skb_with_frags+0xa8/0x620 [ 574.168372][ T8629] ? alloc_skb_with_frags+0xa8/0x620 [ 574.173665][ T8629] __kmalloc_track_caller+0x6c/0x2c0 [ 574.178952][ T8629] ? alloc_skb_with_frags+0xa8/0x620 [ 574.184245][ T8629] ? alloc_skb_with_frags+0xa8/0x620 [ 574.189549][ T8629] __alloc_skb+0x21a/0x740 [ 574.193992][ T8629] alloc_skb_with_frags+0xa8/0x620 [ 574.199110][ T8629] ? memcpy+0x56/0x70 [ 574.203090][ T8629] sock_alloc_send_pskb+0x853/0x980 [ 574.208284][ T8629] ? sock_kzfree_s+0x60/0x60 [ 574.212871][ T8629] ? __kasan_check_write+0x14/0x20 [ 574.218247][ T8629] ? _raw_spin_lock+0x8e/0xe0 [ 574.222950][ T8629] ? _raw_spin_trylock_bh+0x130/0x130 [ 574.228357][ T8629] ? security_socket_getpeersec_dgram+0xaa/0xc0 [ 574.234607][ T8629] unix_dgram_sendmsg+0x5ea/0x1880 [ 574.239742][ T8629] ? unix_dgram_poll+0x6b0/0x6b0 [ 574.244704][ T8629] ? security_socket_sendmsg+0x82/0xa0 [ 574.250168][ T8629] ? unix_dgram_poll+0x6b0/0x6b0 [ 574.255119][ T8629] ____sys_sendmsg+0x5a2/0x8c0 [ 574.259891][ T8629] ? __sys_sendmsg_sock+0x40/0x40 [ 574.264919][ T8629] ? kstrtouint_from_user+0x1a0/0x200 [ 574.270303][ T8629] ? import_iovec+0x7c/0xb0 [ 574.274924][ T8629] ___sys_sendmsg+0x1f0/0x260 [ 574.279606][ T8629] ? __sys_sendmsg+0x250/0x250 [ 574.284368][ T8629] ? __switch_to+0x51d/0xe20 [ 574.288963][ T8629] ? __this_cpu_preempt_check+0x13/0x20 [ 574.294517][ T8629] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 574.301214][ T8629] ? __fdget+0x1a1/0x230 [ 574.305750][ T8629] __x64_sys_sendmsg+0x1e2/0x2a0 [ 574.310706][ T8629] ? release_firmware_map_entry+0x190/0x190 [ 574.316609][ T8629] ? ___sys_sendmsg+0x260/0x260 [ 574.321474][ T8629] ? ksys_write+0x1eb/0x240 [ 574.325984][ T8629] ? __kasan_check_write+0x14/0x20 [ 574.331096][ T8629] ? switch_fpu_return+0x15d/0x2c0 [ 574.336211][ T8629] x64_sys_call+0x4b/0x9a0 [ 574.340629][ T8629] do_syscall_64+0x4c/0xa0 [ 574.345049][ T8629] ? clear_bhb_loop+0x50/0xa0 [ 574.349721][ T8629] ? clear_bhb_loop+0x50/0xa0 [ 574.354393][ T8629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 574.360301][ T8629] RIP: 0033:0x7f16e8ceffc9 [ 574.364721][ T8629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.384328][ T8629] RSP: 002b:00007f16e7758038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.392741][ T8629] RAX: ffffffffffffffda RBX: 00007f16e8f46fa0 RCX: 00007f16e8ceffc9 [ 574.400717][ T8629] RDX: 0000000004040086 RSI: 0000200000000440 RDI: 0000000000000003 [ 574.408690][ T8629] RBP: 00007f16e7758090 R08: 0000000000000000 R09: 0000000000000000 [ 574.416666][ T8629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.424636][ T8629] R13: 00007f16e8f47038 R14: 00007f16e8f46fa0 R15: 00007ffd7ae4c178 [ 574.432616][ T8629] [ 577.928437][ T8666] loop2: detected capacity change from 0 to 1024 [ 578.429087][ T8666] EXT4-fs (loop2): Ignoring removed orlov option [ 578.629256][ T8666] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 580.071782][ T8687] loop1: detected capacity change from 0 to 1024 [ 580.102509][ T8687] EXT4-fs (loop1): Ignoring removed orlov option [ 580.169088][ T8687] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 581.113484][ T8687] syz.1.2114 (8687) used greatest stack depth: 19360 bytes left [ 581.150721][ T8696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2118'. [ 582.922726][ T8698] loop2: detected capacity change from 0 to 1024 [ 583.001057][ T8698] EXT4-fs (loop2): Ignoring removed orlov option [ 583.011331][ T8698] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 583.075154][ T8708] 9pnet: Insufficient options for proto=fd [ 583.727612][ T8722] loop0: detected capacity change from 0 to 1024 [ 583.734542][ T6] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 583.937172][ T8722] EXT4-fs (loop0): Ignoring removed orlov option [ 584.333282][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 584.667833][ T8722] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 584.908893][ T6] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 584.941735][ T6] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 585.645344][ T8732] loop2: detected capacity change from 0 to 1024 [ 585.686006][ T6] usb 4-1: config 1 interface 0 has no altsetting 0 [ 585.730745][ T8732] EXT4-fs (loop2): Ignoring removed orlov option [ 585.775640][ T8732] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 585.808727][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 585.834186][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 585.876316][ T6] usb 4-1: SerialNumber: syz [ 586.008670][ T6] usb 4-1: can't set config #1, error -71 [ 586.016927][ T6] usb 4-1: USB disconnect, device number 15 [ 586.150921][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 586.150939][ T30] audit: type=1326 audit(1761361403.702:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 586.151135][ T30] audit: type=1326 audit(1761361403.702:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 586.151241][ T30] audit: type=1326 audit(1761361403.702:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 586.268978][ T30] audit: type=1326 audit(1761361403.702:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 586.269014][ T30] audit: type=1326 audit(1761361403.702:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 586.269041][ T30] audit: type=1326 audit(1761361403.702:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 586.269069][ T30] audit: type=1326 audit(1761361403.702:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 586.269097][ T30] audit: type=1326 audit(1761361403.702:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 586.269124][ T30] audit: type=1326 audit(1761361403.702:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 586.269151][ T30] audit: type=1326 audit(1761361403.702:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00001e2fc9 code=0x7ffc0000 [ 586.489224][ T8748] loop0: detected capacity change from 0 to 1024 [ 586.561176][ T8748] EXT4-fs (loop0): Ignoring removed orlov option [ 586.619505][ T8748] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 587.165627][ T8759] FAULT_INJECTION: forcing a failure. [ 587.165627][ T8759] name failslab, interval 1, probability 0, space 0, times 0 [ 587.279936][ T8759] CPU: 0 PID: 8759 Comm: syz.3.2134 Not tainted syzkaller #0 [ 587.287390][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 587.297465][ T8759] Call Trace: [ 587.300770][ T8759] [ 587.303727][ T8759] __dump_stack+0x21/0x30 [ 587.308084][ T8759] dump_stack_lvl+0xee/0x150 [ 587.312699][ T8759] ? show_regs_print_info+0x20/0x20 [ 587.317912][ T8759] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 587.324000][ T8759] dump_stack+0x15/0x20 [ 587.328176][ T8759] should_fail+0x3c1/0x510 [ 587.332612][ T8759] __should_failslab+0xa4/0xe0 [ 587.337394][ T8759] should_failslab+0x9/0x20 [ 587.341914][ T8759] slab_pre_alloc_hook+0x3b/0xe0 [ 587.347187][ T8759] __kmalloc+0x6d/0x2c0 [ 587.351381][ T8759] ? kvmalloc_node+0x206/0x300 [ 587.356187][ T8759] kvmalloc_node+0x206/0x300 [ 587.360802][ T8759] ? vm_mmap+0xb0/0xb0 [ 587.364901][ T8759] ? __kasan_check_write+0x14/0x20 [ 587.370040][ T8759] pfifo_fast_init+0x112/0x7a0 [ 587.374837][ T8759] qdisc_create_dflt+0x142/0x3a0 [ 587.379810][ T8759] dev_activate+0x2a0/0x1060 [ 587.384428][ T8759] __dev_open+0x3aa/0x4c0 [ 587.388786][ T8759] ? dev_open+0x230/0x230 [ 587.393140][ T8759] ? _raw_spin_unlock_bh+0x51/0x60 [ 587.398272][ T8759] ? dev_set_rx_mode+0x212/0x2c0 [ 587.403229][ T8759] ? __kasan_check_read+0x11/0x20 [ 587.408279][ T8759] __dev_change_flags+0x20a/0x6a0 [ 587.413329][ T8759] ? dev_get_flags+0x1e0/0x1e0 [ 587.418616][ T8759] ? __kasan_slab_free+0x11/0x20 [ 587.423591][ T8759] dev_change_flags+0x88/0x1a0 [ 587.428404][ T8759] dev_ifsioc+0x147/0xe70 [ 587.432764][ T8759] ? dev_ioctl+0xd10/0xd10 [ 587.437234][ T8759] ? __kasan_check_write+0x14/0x20 [ 587.442377][ T8759] ? mutex_lock+0x95/0x1a0 [ 587.446819][ T8759] ? wait_for_completion_killable_timeout+0x10/0x10 [ 587.453537][ T8759] ? dev_get_by_name_rcu+0xc8/0xf0 [ 587.458677][ T8759] dev_ioctl+0x560/0xd10 [ 587.462941][ T8759] sock_do_ioctl+0x22e/0x300 [ 587.467550][ T8759] ? sock_show_fdinfo+0xa0/0xa0 [ 587.472418][ T8759] ? selinux_file_ioctl+0x377/0x480 [ 587.477640][ T8759] sock_ioctl+0x4bc/0x6b0 [ 587.481988][ T8759] ? sock_poll+0x3d0/0x3d0 [ 587.486422][ T8759] ? __fget_files+0x2c4/0x320 [ 587.491126][ T8759] ? security_file_ioctl+0x84/0xa0 [ 587.496255][ T8759] ? sock_poll+0x3d0/0x3d0 [ 587.500684][ T8759] __se_sys_ioctl+0x121/0x1a0 [ 587.505384][ T8759] __x64_sys_ioctl+0x7b/0x90 [ 587.509997][ T8759] x64_sys_call+0x2f/0x9a0 [ 587.514438][ T8759] do_syscall_64+0x4c/0xa0 [ 587.518888][ T8759] ? clear_bhb_loop+0x50/0xa0 [ 587.523586][ T8759] ? clear_bhb_loop+0x50/0xa0 [ 587.528276][ T8759] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 587.534192][ T8759] RIP: 0033:0x7f430475dfc9 [ 587.538621][ T8759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.558241][ T8759] RSP: 002b:00007f43031c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.566670][ T8759] RAX: ffffffffffffffda RBX: 00007f43049b4fa0 RCX: 00007f430475dfc9 [ 587.574667][ T8759] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000008 [ 587.582645][ T8759] RBP: 00007f43031c6090 R08: 0000000000000000 R09: 0000000000000000 [ 587.590700][ T8759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.598679][ T8759] R13: 00007f43049b5038 R14: 00007f43049b4fa0 R15: 00007ffc18a30a18 [ 587.606786][ T8759] [ 587.620444][ T8759] device pim6reg1 entered promiscuous mode [ 587.660429][ T8766] loop1: detected capacity change from 0 to 1024 [ 587.704617][ T8772] loop0: detected capacity change from 0 to 1024 [ 587.715956][ T8774] device pim6reg1 entered promiscuous mode [ 587.723813][ T8766] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 587.735120][ T8766] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.749268][ T8772] EXT4-fs (loop0): Ignoring removed orlov option [ 588.020122][ T8772] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 589.836612][ T8795] loop2: detected capacity change from 0 to 1024 [ 589.956627][ T8795] EXT4-fs (loop2): Ignoring removed orlov option [ 590.569587][ T8795] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 590.937719][ T8801] 9pnet: Insufficient options for proto=fd [ 591.218636][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 591.218677][ T30] audit: type=1400 audit(1761361408.722:3170): avc: denied { create } for pid=8802 comm="syz.4.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 591.387146][ T429] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 591.400698][ T8818] loop2: detected capacity change from 0 to 16 [ 591.449157][ T8818] erofs: (device loop2): mounted with root inode @ nid 36. [ 591.668526][ T429] usb 1-1: device descriptor read/64, error -71 [ 591.788578][ T6] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 591.858411][ T8822] FAULT_INJECTION: forcing a failure. [ 591.858411][ T8822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.871692][ T8822] CPU: 1 PID: 8822 Comm: syz.3.2160 Not tainted syzkaller #0 [ 591.879189][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 591.889270][ T8822] Call Trace: [ 591.892593][ T8822] [ 591.895549][ T8822] __dump_stack+0x21/0x30 [ 591.899924][ T8822] dump_stack_lvl+0xee/0x150 [ 591.904543][ T8822] ? show_regs_print_info+0x20/0x20 [ 591.909874][ T8822] dump_stack+0x15/0x20 [ 591.914043][ T8822] should_fail+0x3c1/0x510 [ 591.918466][ T8822] should_fail_usercopy+0x1a/0x20 [ 591.923504][ T8822] _copy_from_user+0x20/0xd0 [ 591.928099][ T8822] bpf_test_init+0x13d/0x1c0 [ 591.932704][ T8822] bpf_prog_test_run_skb+0x193/0x1150 [ 591.938086][ T8822] ? __kasan_check_write+0x14/0x20 [ 591.943206][ T8822] ? fput_many+0x15a/0x1a0 [ 591.947629][ T8822] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 591.953535][ T8822] bpf_prog_test_run+0x3d5/0x620 [ 591.958486][ T8822] ? bpf_prog_query+0x230/0x230 [ 591.963344][ T8822] ? selinux_bpf+0xce/0xf0 [ 591.967765][ T8822] ? security_bpf+0x82/0xa0 [ 591.972296][ T8822] __sys_bpf+0x52c/0x730 [ 591.976547][ T8822] ? bpf_link_show_fdinfo+0x310/0x310 [ 591.981936][ T8822] ? debug_smp_processor_id+0x17/0x20 [ 591.987317][ T8822] __x64_sys_bpf+0x7c/0x90 [ 591.991737][ T8822] x64_sys_call+0x4b9/0x9a0 [ 591.996246][ T8822] do_syscall_64+0x4c/0xa0 [ 592.000673][ T8822] ? clear_bhb_loop+0x50/0xa0 [ 592.005527][ T8822] ? clear_bhb_loop+0x50/0xa0 [ 592.010302][ T8822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.016205][ T8822] RIP: 0033:0x7f430475dfc9 [ 592.020636][ T8822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.040304][ T8822] RSP: 002b:00007f43031c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.048726][ T8822] RAX: ffffffffffffffda RBX: 00007f43049b4fa0 RCX: 00007f430475dfc9 [ 592.056743][ T8822] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 592.064724][ T8822] RBP: 00007f43031c6090 R08: 0000000000000000 R09: 0000000000000000 [ 592.072699][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.080682][ T8822] R13: 00007f43049b5038 R14: 00007f43049b4fa0 R15: 00007ffc18a30a18 [ 592.088842][ T8822] [ 592.150255][ T8825] loop4: detected capacity change from 0 to 1024 [ 592.200862][ T8825] EXT4-fs (loop4): Ignoring removed orlov option [ 592.208859][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 592.303799][ T8825] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 593.623102][ T8834] Illegal XDP return value 393216, expect packet loss! [ 593.693889][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.714200][ T8838] loop1: detected capacity change from 0 to 1024 [ 593.721245][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 593.790413][ T8838] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 593.801218][ T8838] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.988658][ T429] usb 1-1: device descriptor read/64, error -71 [ 593.989449][ T6] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.004755][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.012895][ T6] usb 3-1: Product: syz [ 594.017111][ T6] usb 3-1: Manufacturer: syz [ 594.021786][ T6] usb 3-1: SerialNumber: syz [ 594.339000][ T6] usb 3-1: 0:2 : does not exist [ 594.344039][ T6] usb 3-1: unit 9 not found! [ 594.358583][ T6] usb 3-1: USB disconnect, device number 11 [ 595.057955][ T8864] loop1: detected capacity change from 0 to 1024 [ 595.181143][ T8864] EXT4-fs (loop1): Ignoring removed orlov option [ 595.387952][ T8864] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 596.265776][ T8876] loop2: detected capacity change from 0 to 1024 [ 596.324681][ T8876] EXT4-fs (loop2): Ignoring removed orlov option [ 596.406805][ T8876] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 597.770350][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 597.844750][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 597.845824][ T8895] FAULT_INJECTION: forcing a failure. [ 597.845824][ T8895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.867211][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.876586][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 597.888554][ T8895] CPU: 1 PID: 8895 Comm: syz.0.2169 Not tainted syzkaller #0 [ 597.893395][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 597.895967][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 597.895982][ T8895] Call Trace: [ 597.895988][ T8895] [ 597.895997][ T8895] __dump_stack+0x21/0x30 [ 597.904903][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 597.913971][ T8895] dump_stack_lvl+0xee/0x150 [ 597.914008][ T8895] ? show_regs_print_info+0x20/0x20 [ 597.918070][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 597.920242][ T8895] dump_stack+0x15/0x20 [ 597.920268][ T8895] should_fail+0x3c1/0x510 [ 597.925250][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 597.932387][ T8895] should_fail_usercopy+0x1a/0x20 [ 597.932415][ T8895] strncpy_from_user+0x24/0x2e0 [ 597.932436][ T8895] ? kmem_cache_alloc+0xf7/0x260 [ 597.937858][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 597.942212][ T8895] getname_flags+0xf4/0x500 [ 597.942238][ T8895] getname_uflags+0x26/0x30 [ 597.998218][ T8895] __x64_sys_execveat+0xb6/0xf0 [ 598.003081][ T8895] x64_sys_call+0x5c3/0x9a0 [ 598.007597][ T8895] do_syscall_64+0x4c/0xa0 [ 598.012018][ T8895] ? clear_bhb_loop+0x50/0xa0 [ 598.016700][ T8895] ? clear_bhb_loop+0x50/0xa0 [ 598.021377][ T8895] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 598.027283][ T8895] RIP: 0033:0x7f7ef3e81fc9 [ 598.031701][ T8895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.051337][ T8895] RSP: 002b:00007f7ef28ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 598.059766][ T8895] RAX: ffffffffffffffda RBX: 00007f7ef40d8fa0 RCX: 00007f7ef3e81fc9 [ 598.067747][ T8895] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 598.075732][ T8895] RBP: 00007f7ef28ea090 R08: 0000000000000000 R09: 0000000000000000 [ 598.083703][ T8895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.091691][ T8895] R13: 00007f7ef40d9038 R14: 00007f7ef40d8fa0 R15: 00007ffdcca34388 [ 598.099789][ T8895] [ 598.177601][ T8900] loop0: detected capacity change from 0 to 1024 [ 598.285910][ T8900] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 598.394212][ T8900] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.750831][ T8923] 9pnet: Insufficient options for proto=fd [ 599.470638][ T8928] loop0: detected capacity change from 0 to 40427 [ 599.571369][ T8928] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3) [ 599.579382][ T8928] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 599.588424][ T8928] F2FS-fs (loop0): Encrypt feature is off [ 599.645369][ T8940] loop2: detected capacity change from 0 to 1024 [ 599.679139][ T8940] EXT4-fs (loop2): Ignoring removed orlov option [ 599.709913][ T8946] FAULT_INJECTION: forcing a failure. [ 599.709913][ T8946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.717356][ T8940] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 599.742118][ T8946] CPU: 0 PID: 8946 Comm: syz.1.2183 Not tainted syzkaller #0 [ 599.749523][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 599.759591][ T8946] Call Trace: [ 599.762894][ T8946] [ 599.765836][ T8946] __dump_stack+0x21/0x30 [ 599.770189][ T8946] dump_stack_lvl+0xee/0x150 [ 599.774808][ T8946] ? show_regs_print_info+0x20/0x20 [ 599.780024][ T8946] dump_stack+0x15/0x20 [ 599.784198][ T8946] should_fail+0x3c1/0x510 [ 599.788652][ T8946] should_fail_usercopy+0x1a/0x20 [ 599.793702][ T8946] _copy_from_user+0x20/0xd0 [ 599.798327][ T8946] bpf_test_init+0x13d/0x1c0 [ 599.802938][ T8946] bpf_prog_test_run_skb+0x193/0x1150 [ 599.808331][ T8946] ? __kasan_check_write+0x14/0x20 [ 599.813463][ T8946] ? fput_many+0x15a/0x1a0 [ 599.817908][ T8946] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 599.823818][ T8946] bpf_prog_test_run+0x3d5/0x620 [ 599.828773][ T8946] ? bpf_prog_query+0x230/0x230 [ 599.833637][ T8946] ? selinux_bpf+0xce/0xf0 [ 599.838075][ T8946] ? security_bpf+0x82/0xa0 [ 599.842594][ T8946] __sys_bpf+0x52c/0x730 [ 599.846859][ T8946] ? bpf_link_show_fdinfo+0x310/0x310 [ 599.852253][ T8946] ? debug_smp_processor_id+0x17/0x20 [ 599.857662][ T8946] __x64_sys_bpf+0x7c/0x90 [ 599.862098][ T8946] x64_sys_call+0x4b9/0x9a0 [ 599.866619][ T8946] do_syscall_64+0x4c/0xa0 [ 599.871062][ T8946] ? clear_bhb_loop+0x50/0xa0 [ 599.875759][ T8946] ? clear_bhb_loop+0x50/0xa0 [ 599.880456][ T8946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 599.886366][ T8946] RIP: 0033:0x7f00001e2fc9 [ 599.890795][ T8946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.910414][ T8946] RSP: 002b:00007efffec4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 599.918852][ T8946] RAX: ffffffffffffffda RBX: 00007f0000439fa0 RCX: 00007f00001e2fc9 [ 599.926818][ T8946] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 599.934781][ T8946] RBP: 00007efffec4b090 R08: 0000000000000000 R09: 0000000000000000 [ 599.942742][ T8946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.950707][ T8946] R13: 00007f000043a038 R14: 00007f0000439fa0 R15: 00007ffd4e5c3cc8 [ 599.958765][ T8946] [ 600.007247][ T8959] loop0: detected capacity change from 0 to 1024 [ 600.080497][ T8959] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 600.091322][ T8959] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.864266][ T8974] loop1: detected capacity change from 0 to 512 [ 600.921488][ T8978] FAULT_INJECTION: forcing a failure. [ 600.921488][ T8978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.939699][ T8974] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 600.994708][ T8980] FAULT_INJECTION: forcing a failure. [ 600.994708][ T8980] name failslab, interval 1, probability 0, space 0, times 0 [ 601.007863][ T8978] CPU: 0 PID: 8978 Comm: syz.3.2192 Not tainted syzkaller #0 [ 601.015268][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 601.025342][ T8978] Call Trace: [ 601.028641][ T8978] [ 601.031593][ T8978] __dump_stack+0x21/0x30 [ 601.035959][ T8978] dump_stack_lvl+0xee/0x150 [ 601.040637][ T8978] ? show_regs_print_info+0x20/0x20 [ 601.045868][ T8978] ? vfs_write+0xc17/0xf70 [ 601.050317][ T8978] dump_stack+0x15/0x20 [ 601.054623][ T8978] should_fail+0x3c1/0x510 [ 601.059062][ T8978] should_fail_usercopy+0x1a/0x20 [ 601.064100][ T8978] _copy_from_user+0x20/0xd0 [ 601.068705][ T8978] __sys_bpf+0x233/0x730 [ 601.072962][ T8978] ? bpf_link_show_fdinfo+0x310/0x310 [ 601.078357][ T8978] ? debug_smp_processor_id+0x17/0x20 [ 601.083747][ T8978] __x64_sys_bpf+0x7c/0x90 [ 601.088182][ T8978] x64_sys_call+0x4b9/0x9a0 [ 601.092700][ T8978] do_syscall_64+0x4c/0xa0 [ 601.097152][ T8978] ? clear_bhb_loop+0x50/0xa0 [ 601.101848][ T8978] ? clear_bhb_loop+0x50/0xa0 [ 601.106548][ T8978] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 601.112462][ T8978] RIP: 0033:0x7f430475dfc9 [ 601.116903][ T8978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.136533][ T8978] RSP: 002b:00007f43031c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 601.144966][ T8978] RAX: ffffffffffffffda RBX: 00007f43049b4fa0 RCX: 00007f430475dfc9 [ 601.152946][ T8978] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000002 [ 601.160920][ T8978] RBP: 00007f43031c6090 R08: 0000000000000000 R09: 0000000000000000 [ 601.168895][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.176988][ T8978] R13: 00007f43049b5038 R14: 00007f43049b4fa0 R15: 00007ffc18a30a18 [ 601.184977][ T8978] [ 601.189252][ T8980] CPU: 0 PID: 8980 Comm: syz.0.2193 Not tainted syzkaller #0 [ 601.196655][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 601.206727][ T8980] Call Trace: [ 601.210034][ T8980] [ 601.212994][ T8980] __dump_stack+0x21/0x30 [ 601.217344][ T8980] dump_stack_lvl+0xee/0x150 [ 601.221957][ T8980] ? show_regs_print_info+0x20/0x20 [ 601.227202][ T8980] dump_stack+0x15/0x20 [ 601.231365][ T8980] should_fail+0x3c1/0x510 [ 601.235824][ T8980] __should_failslab+0xa4/0xe0 [ 601.240618][ T8980] should_failslab+0x9/0x20 [ 601.245128][ T8980] slab_pre_alloc_hook+0x3b/0xe0 [ 601.250072][ T8980] ? kvm_mmu_topup_memory_cache+0xe4/0x220 [ 601.255886][ T8980] kmem_cache_alloc+0x44/0x260 [ 601.260653][ T8980] kvm_mmu_topup_memory_cache+0xe4/0x220 [ 601.266292][ T8980] kvm_mmu_load+0x88/0x1fd0 [ 601.270797][ T8980] ? kvm_apic_accept_events+0x121/0x550 [ 601.276341][ T8980] ? __kasan_check_read+0x11/0x20 [ 601.281370][ T8980] ? kvm_apic_has_interrupt+0x4fb/0x7a0 [ 601.286921][ T8980] vcpu_enter_guest+0x4fdd/0x67a0 [ 601.291948][ T8980] ? local_bh_enable+0x30/0x30 [ 601.296714][ T8980] ? avc_has_perm+0x158/0x240 [ 601.301405][ T8980] ? 0xffffffffa0028044 [ 601.305566][ T8980] ? is_bpf_text_address+0x177/0x190 [ 601.310865][ T8980] ? __kernel_text_address+0xa0/0x100 [ 601.316258][ T8980] ? unwind_get_return_address+0x4d/0x90 [ 601.321911][ T8980] ? stack_trace_save+0xe0/0xe0 [ 601.326770][ T8980] ? arch_stack_walk+0xee/0x140 [ 601.331635][ T8980] ? stack_trace_save+0x98/0xe0 [ 601.336489][ T8980] ? __stack_depot_save+0x34/0x480 [ 601.341610][ T8980] ? __kasan_check_read+0x11/0x20 [ 601.346637][ T8980] ? vmx_vcpu_pi_load+0xab/0x390 [ 601.351582][ T8980] ? do_vfs_ioctl+0xc1a/0x1d00 [ 601.356358][ T8980] ? __kasan_check_write+0x14/0x20 [ 601.361469][ T8980] ? kvm_arch_vcpu_load+0x55a/0x740 [ 601.366724][ T8980] ? __local_bh_enable_ip+0x58/0x80 [ 601.371935][ T8980] ? local_bh_enable+0x1f/0x30 [ 601.376707][ T8980] ? kvm_load_guest_fpu+0x12a/0x240 [ 601.381907][ T8980] kvm_arch_vcpu_ioctl_run+0xfab/0x2010 [ 601.387479][ T8980] kvm_vcpu_ioctl+0x882/0xb80 [ 601.392170][ T8980] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 601.397804][ T8980] ? selinux_file_ioctl+0x377/0x480 [ 601.403022][ T8980] ? selinux_file_alloc_security+0x120/0x120 [ 601.409000][ T8980] ? mutex_unlock+0x89/0x220 [ 601.413590][ T8980] ? __mutex_lock_slowpath+0x10/0x10 [ 601.418888][ T8980] ? __fget_files+0x2c4/0x320 [ 601.423569][ T8980] ? security_file_ioctl+0x84/0xa0 [ 601.428684][ T8980] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 601.434319][ T8980] __se_sys_ioctl+0x121/0x1a0 [ 601.439000][ T8980] __x64_sys_ioctl+0x7b/0x90 [ 601.443661][ T8980] x64_sys_call+0x2f/0x9a0 [ 601.448077][ T8980] do_syscall_64+0x4c/0xa0 [ 601.452495][ T8980] ? clear_bhb_loop+0x50/0xa0 [ 601.457169][ T8980] ? clear_bhb_loop+0x50/0xa0 [ 601.461842][ T8980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 601.467757][ T8980] RIP: 0033:0x7f7ef3e81fc9 [ 601.472171][ T8980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.491777][ T8980] RSP: 002b:00007f7ef28ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.500195][ T8980] RAX: ffffffffffffffda RBX: 00007f7ef40d8fa0 RCX: 00007f7ef3e81fc9 [ 601.508167][ T8980] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 601.516133][ T8980] RBP: 00007f7ef28ea090 R08: 0000000000000000 R09: 0000000000000000 [ 601.524102][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.532069][ T8980] R13: 00007f7ef40d9038 R14: 00007f7ef40d8fa0 R15: 00007ffdcca34388 [ 601.540047][ T8980] [ 601.600976][ T8991] FAULT_INJECTION: forcing a failure. [ 601.600976][ T8991] name failslab, interval 1, probability 0, space 0, times 0 [ 601.613769][ T8991] CPU: 1 PID: 8991 Comm: syz.1.2196 Not tainted syzkaller #0 [ 601.621166][ T8991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 601.631233][ T8991] Call Trace: [ 601.634539][ T8991] [ 601.637478][ T8991] __dump_stack+0x21/0x30 [ 601.641822][ T8991] dump_stack_lvl+0xee/0x150 [ 601.646417][ T8991] ? show_regs_print_info+0x20/0x20 [ 601.651628][ T8991] dump_stack+0x15/0x20 [ 601.655785][ T8991] should_fail+0x3c1/0x510 [ 601.660205][ T8991] __should_failslab+0xa4/0xe0 [ 601.664987][ T8991] should_failslab+0x9/0x20 [ 601.669498][ T8991] slab_pre_alloc_hook+0x3b/0xe0 [ 601.674448][ T8991] ? kvm_mmu_topup_memory_cache+0xe4/0x220 [ 601.680274][ T8991] kmem_cache_alloc+0x44/0x260 [ 601.685049][ T8991] kvm_mmu_topup_memory_cache+0xe4/0x220 [ 601.690698][ T8991] kvm_mmu_load+0x88/0x1fd0 [ 601.695209][ T8991] ? kvm_apic_accept_events+0x121/0x550 [ 601.700757][ T8991] ? __kasan_check_read+0x11/0x20 [ 601.705795][ T8991] ? kvm_apic_has_interrupt+0x4fb/0x7a0 [ 601.711345][ T8991] vcpu_enter_guest+0x4fdd/0x67a0 [ 601.716374][ T8991] ? local_bh_enable+0x30/0x30 [ 601.721136][ T8991] ? avc_has_perm+0x158/0x240 [ 601.725823][ T8991] ? 0xffffffffa002a000 [ 601.729976][ T8991] ? is_bpf_text_address+0x177/0x190 [ 601.735266][ T8991] ? __kernel_text_address+0xa0/0x100 [ 601.740640][ T8991] ? unwind_get_return_address+0x4d/0x90 [ 601.746280][ T8991] ? stack_trace_save+0xe0/0xe0 [ 601.751150][ T8991] ? arch_stack_walk+0xee/0x140 [ 601.756007][ T8991] ? stack_trace_save+0x98/0xe0 [ 601.760858][ T8991] ? __stack_depot_save+0x34/0x480 [ 601.765980][ T8991] ? __kasan_check_read+0x11/0x20 [ 601.771004][ T8991] ? vmx_vcpu_pi_load+0xab/0x390 [ 601.775944][ T8991] ? do_vfs_ioctl+0xc1a/0x1d00 [ 601.780716][ T8991] ? __kasan_check_write+0x14/0x20 [ 601.785931][ T8991] ? kvm_arch_vcpu_load+0x55a/0x740 [ 601.791187][ T8991] ? __local_bh_enable_ip+0x58/0x80 [ 601.796407][ T8991] ? local_bh_enable+0x1f/0x30 [ 601.801375][ T8991] ? kvm_load_guest_fpu+0x12a/0x240 [ 601.806596][ T8991] kvm_arch_vcpu_ioctl_run+0xfab/0x2010 [ 601.812161][ T8991] kvm_vcpu_ioctl+0x882/0xb80 [ 601.816845][ T8991] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 601.822495][ T8991] ? selinux_file_ioctl+0x377/0x480 [ 601.827701][ T8991] ? selinux_file_alloc_security+0x120/0x120 [ 601.833694][ T8991] ? mutex_unlock+0x89/0x220 [ 601.838289][ T8991] ? __mutex_lock_slowpath+0x10/0x10 [ 601.843578][ T8991] ? __fget_files+0x2c4/0x320 [ 601.848292][ T8991] ? security_file_ioctl+0x84/0xa0 [ 601.853407][ T8991] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 601.859047][ T8991] __se_sys_ioctl+0x121/0x1a0 [ 601.863748][ T8991] __x64_sys_ioctl+0x7b/0x90 [ 601.868346][ T8991] x64_sys_call+0x2f/0x9a0 [ 601.872762][ T8991] do_syscall_64+0x4c/0xa0 [ 601.877183][ T8991] ? clear_bhb_loop+0x50/0xa0 [ 601.881858][ T8991] ? clear_bhb_loop+0x50/0xa0 [ 601.886533][ T8991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 601.892433][ T8991] RIP: 0033:0x7f00001e2fc9 [ 601.896853][ T8991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.916473][ T8991] RSP: 002b:00007efffec4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.924906][ T8991] RAX: ffffffffffffffda RBX: 00007f0000439fa0 RCX: 00007f00001e2fc9 [ 601.932886][ T8991] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 601.940864][ T8991] RBP: 00007efffec4b090 R08: 0000000000000000 R09: 0000000000000000 [ 601.948839][ T8991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.956816][ T8991] R13: 00007f000043a038 R14: 00007f0000439fa0 R15: 00007ffd4e5c3cc8 [ 601.964823][ T8991] [ 603.745806][ T9009] loop2: detected capacity change from 0 to 1024 [ 603.788977][ T9010] loop1: detected capacity change from 0 to 1024 [ 603.856861][ T9010] EXT4-fs (loop1): Ignoring removed orlov option [ 603.864657][ T9009] EXT4-fs (loop2): Ignoring removed orlov option [ 603.959731][ T9009] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 603.987778][ T9010] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 604.922682][ T9022] loop0: detected capacity change from 0 to 1024 [ 604.961280][ T9022] EXT4-fs (loop0): Ignoring removed orlov option [ 605.022243][ T9022] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 606.096906][ T9043] FAULT_INJECTION: forcing a failure. [ 606.096906][ T9043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.118228][ T9042] loop1: detected capacity change from 0 to 1024 [ 606.137263][ T9043] CPU: 0 PID: 9043 Comm: syz.0.2207 Not tainted syzkaller #0 [ 606.144690][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 606.154770][ T9043] Call Trace: [ 606.158069][ T9043] [ 606.161012][ T9043] __dump_stack+0x21/0x30 [ 606.165366][ T9043] dump_stack_lvl+0xee/0x150 [ 606.169977][ T9043] ? show_regs_print_info+0x20/0x20 [ 606.175200][ T9043] dump_stack+0x15/0x20 [ 606.179377][ T9043] should_fail+0x3c1/0x510 [ 606.183807][ T9043] should_fail_usercopy+0x1a/0x20 [ 606.188849][ T9043] _copy_from_user+0x20/0xd0 [ 606.193452][ T9043] bpf_test_init+0x13d/0x1c0 [ 606.198055][ T9043] bpf_prog_test_run_skb+0x193/0x1150 [ 606.203446][ T9043] ? __kasan_check_write+0x14/0x20 [ 606.208575][ T9043] ? fput_many+0x15a/0x1a0 [ 606.213006][ T9043] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 606.218921][ T9043] bpf_prog_test_run+0x3d5/0x620 [ 606.223870][ T9043] ? bpf_prog_query+0x230/0x230 [ 606.228817][ T9043] ? selinux_bpf+0xce/0xf0 [ 606.233253][ T9043] ? security_bpf+0x82/0xa0 [ 606.237858][ T9043] __sys_bpf+0x52c/0x730 [ 606.242119][ T9043] ? bpf_link_show_fdinfo+0x310/0x310 [ 606.247529][ T9043] ? debug_smp_processor_id+0x17/0x20 [ 606.252932][ T9043] __x64_sys_bpf+0x7c/0x90 [ 606.257362][ T9043] x64_sys_call+0x4b9/0x9a0 [ 606.261887][ T9043] do_syscall_64+0x4c/0xa0 [ 606.266324][ T9043] ? clear_bhb_loop+0x50/0xa0 [ 606.271011][ T9043] ? clear_bhb_loop+0x50/0xa0 [ 606.275705][ T9043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 606.281614][ T9043] RIP: 0033:0x7f7ef3e81fc9 [ 606.286045][ T9043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.305774][ T9043] RSP: 002b:00007f7ef28ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.314211][ T9043] RAX: ffffffffffffffda RBX: 00007f7ef40d8fa0 RCX: 00007f7ef3e81fc9 [ 606.322209][ T9043] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 606.330304][ T9043] RBP: 00007f7ef28ea090 R08: 0000000000000000 R09: 0000000000000000 [ 606.338288][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.346269][ T9043] R13: 00007f7ef40d9038 R14: 00007f7ef40d8fa0 R15: 00007ffdcca34388 [ 606.354265][ T9043] [ 606.581126][ T9042] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 606.646307][ T9042] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.677607][ T9057] FAULT_INJECTION: forcing a failure. [ 606.677607][ T9057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.981943][ T9057] CPU: 1 PID: 9057 Comm: syz.0.2211 Not tainted syzkaller #0 [ 606.989367][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 606.999440][ T9057] Call Trace: [ 607.002736][ T9057] [ 607.005803][ T9057] __dump_stack+0x21/0x30 [ 607.010164][ T9057] dump_stack_lvl+0xee/0x150 [ 607.014778][ T9057] ? show_regs_print_info+0x20/0x20 [ 607.020006][ T9057] dump_stack+0x15/0x20 [ 607.024183][ T9057] should_fail+0x3c1/0x510 [ 607.028615][ T9057] should_fail_usercopy+0x1a/0x20 [ 607.033659][ T9057] _copy_from_user+0x20/0xd0 [ 607.038262][ T9057] iovec_from_user+0x1bc/0x2f0 [ 607.043037][ T9057] ? __copy_msghdr_from_user+0x302/0x5e0 [ 607.048685][ T9057] ? _raw_spin_unlock+0x4d/0x70 [ 607.053554][ T9057] __import_iovec+0x71/0x400 [ 607.058156][ T9057] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 607.063472][ T9057] import_iovec+0x7c/0xb0 [ 607.067837][ T9057] ___sys_sendmsg+0x1b9/0x260 [ 607.072540][ T9057] ? __sys_sendmsg+0x250/0x250 [ 607.077327][ T9057] ? __switch_to+0x51d/0xe20 [ 607.081939][ T9057] ? sysvec_reschedule_ipi+0x78/0x80 [ 607.087252][ T9057] ? __fdget+0x1a1/0x230 [ 607.091514][ T9057] __x64_sys_sendmsg+0x1e2/0x2a0 [ 607.096468][ T9057] ? release_firmware_map_entry+0x190/0x190 [ 607.102383][ T9057] ? ___sys_sendmsg+0x260/0x260 [ 607.107257][ T9057] ? ksys_write+0x1eb/0x240 [ 607.111775][ T9057] ? __kasan_check_write+0x14/0x20 [ 607.116904][ T9057] ? switch_fpu_return+0x15d/0x2c0 [ 607.122041][ T9057] x64_sys_call+0x4b/0x9a0 [ 607.126470][ T9057] do_syscall_64+0x4c/0xa0 [ 607.130902][ T9057] ? clear_bhb_loop+0x50/0xa0 [ 607.135596][ T9057] ? clear_bhb_loop+0x50/0xa0 [ 607.140293][ T9057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 607.146208][ T9057] RIP: 0033:0x7f7ef3e81fc9 [ 607.150638][ T9057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.170258][ T9057] RSP: 002b:00007f7ef28c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.178692][ T9057] RAX: ffffffffffffffda RBX: 00007f7ef40d9090 RCX: 00007f7ef3e81fc9 [ 607.186679][ T9057] RDX: 0000000000020001 RSI: 0000200000000d40 RDI: 0000000000000006 [ 607.194665][ T9057] RBP: 00007f7ef28c9090 R08: 0000000000000000 R09: 0000000000000000 [ 607.202653][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.210636][ T9057] R13: 00007f7ef40d9128 R14: 00007f7ef40d9090 R15: 00007ffdcca34388 [ 607.218630][ T9057] [ 607.398028][ T9071] loop2: detected capacity change from 0 to 1024 [ 607.509406][ T9071] EXT4-fs (loop2): Ignoring removed orlov option [ 607.759826][ T9071] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 607.805571][ T9065] loop1: detected capacity change from 0 to 40427 [ 611.816199][ T9099] loop4: detected capacity change from 0 to 1024 [ 611.891819][ T9099] EXT4-fs (loop4): Ignoring removed orlov option [ 612.144997][ T9102] loop0: detected capacity change from 0 to 1024 [ 612.158215][ T9099] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 612.177766][ T30] audit: type=1400 audit(1761361429.702:3171): avc: denied { rename } for pid=9109 comm="syz.1.2227" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="incremental-fs" ino=2530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 612.381576][ T282] ------------[ cut here ]------------ [ 612.387074][ T282] WARNING: CPU: 1 PID: 282 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 612.398590][ T282] Modules linked in: [ 612.402736][ T282] CPU: 0 PID: 282 Comm: syz-executor Not tainted syzkaller #0 [ 612.418888][ T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 612.448549][ T282] RIP: 0010:drop_nlink+0xc5/0x110 [ 612.455246][ T282] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 23 37 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5b b4 b3 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 612.475229][ T282] RSP: 0018:ffffc90000a17ca8 EFLAGS: 00010293 [ 612.481338][ T282] RAX: ffffffff81b50a95 RBX: ffff888129762e88 RCX: ffff88811ec64f00 [ 612.489383][ T282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 612.497368][ T282] RBP: ffffc90000a17cd0 R08: 0000000000000004 R09: 0000000000000003 [ 612.505379][ T282] R10: fffff52000142f84 R11: 1ffff92000142f84 R12: dffffc0000000000 [ 612.513379][ T282] R13: 1ffff110252ec5da R14: ffff888129762ed0 R15: 0000000000000000 [ 612.521385][ T282] FS: 00005555728b5500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 612.531511][ T282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.538117][ T282] CR2: 000020000081b030 CR3: 0000000126190000 CR4: 00000000003506a0 [ 612.546371][ T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 612.554445][ T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 612.562548][ T282] Call Trace: [ 612.565856][ T282] [ 612.568816][ T282] shmem_rmdir+0x5b/0x90 [ 612.573168][ T282] vfs_rmdir+0x313/0x460 [ 612.577424][ T282] incfs_kill_sb+0x105/0x220 [ 612.582106][ T282] deactivate_locked_super+0xa0/0x100 [ 612.797092][ T282] deactivate_super+0xaf/0xe0 [ 612.803059][ T282] cleanup_mnt+0x446/0x500 [ 612.807776][ T282] __cleanup_mnt+0x19/0x20 [ 612.812809][ T282] task_work_run+0x127/0x190 [ 612.817448][ T282] exit_to_user_mode_loop+0xd0/0xe0 [ 612.822831][ T282] exit_to_user_mode_prepare+0x87/0xd0 [ 612.828357][ T282] syscall_exit_to_user_mode+0x1a/0x30 [ 612.836478][ T282] do_syscall_64+0x58/0xa0 [ 612.841410][ T282] ? clear_bhb_loop+0x50/0xa0 [ 612.846205][ T282] ? clear_bhb_loop+0x50/0xa0 [ 612.850960][ T282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 612.862196][ T282] RIP: 0033:0x7f00001e42f7 [ 612.866644][ T282] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 612.892228][ T9102] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 612.904298][ T9102] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.916348][ T282] RSP: 002b:00007ffd4e5c2f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 612.925264][ T282] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f00001e42f7 [ 612.933489][ T282] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4e5c3010 [ 612.941829][ T282] RBP: 00007ffd4e5c3010 R08: 0000000000000000 R09: 0000000000000000 [ 612.949994][ T6664] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 612.957710][ T282] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd4e5c40a0 [ 612.966031][ T282] R13: 00007f0000265d7d R14: 0000000000095921 R15: 00007ffd4e5c40e0 [ 612.974258][ T282] [ 612.977324][ T282] ---[ end trace 77de76a4b675adc7 ]--- [ 612.983172][ T282] ================================================================== [ 612.991255][ T282] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 612.997518][ T282] Write of size 4 at addr 0000000000000170 by task syz-executor/282 [ 613.005506][ T282] [ 613.007851][ T282] CPU: 0 PID: 282 Comm: syz-executor Tainted: G W syzkaller #0 [ 613.016732][ T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 613.026827][ T282] Call Trace: [ 613.030121][ T282] [ 613.033065][ T282] __dump_stack+0x21/0x30 [ 613.037408][ T282] dump_stack_lvl+0xee/0x150 [ 613.042020][ T282] ? show_regs_print_info+0x20/0x20 [ 613.047235][ T282] ? _raw_spin_lock+0x8e/0xe0 [ 613.051950][ T282] ? _raw_spin_trylock_bh+0x130/0x130 [ 613.057352][ T282] ? ihold+0x20/0x60 [ 613.061348][ T282] kasan_report+0xe7/0x140 [ 613.065794][ T282] ? ihold+0x20/0x60 [ 613.069723][ T282] kasan_check_range+0x280/0x290 [ 613.074686][ T282] __kasan_check_write+0x14/0x20 [ 613.080304][ T282] ihold+0x20/0x60 [ 613.084049][ T282] vfs_rmdir+0x1f0/0x460 [ 613.088310][ T282] incfs_kill_sb+0x105/0x220 [ 613.093006][ T282] deactivate_locked_super+0xa0/0x100 [ 613.098397][ T282] deactivate_super+0xaf/0xe0 [ 613.103095][ T282] cleanup_mnt+0x446/0x500 [ 613.107531][ T282] __cleanup_mnt+0x19/0x20 [ 613.111964][ T282] task_work_run+0x127/0x190 [ 613.116576][ T282] exit_to_user_mode_loop+0xd0/0xe0 [ 613.121787][ T282] exit_to_user_mode_prepare+0x87/0xd0 [ 613.127263][ T282] syscall_exit_to_user_mode+0x1a/0x30 [ 613.132738][ T282] do_syscall_64+0x58/0xa0 [ 613.137174][ T282] ? clear_bhb_loop+0x50/0xa0 [ 613.141861][ T282] ? clear_bhb_loop+0x50/0xa0 [ 613.146549][ T282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 613.152460][ T282] RIP: 0033:0x7f00001e42f7 [ 613.156886][ T282] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 613.176502][ T282] RSP: 002b:00007ffd4e5c2f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 613.184930][ T282] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f00001e42f7 [ 613.192919][ T282] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4e5c3010 [ 613.200931][ T282] RBP: 00007ffd4e5c3010 R08: 0000000000000000 R09: 0000000000000000 [ 613.208940][ T282] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd4e5c40a0 [ 613.216942][ T282] R13: 00007f0000265d7d R14: 0000000000095921 R15: 00007ffd4e5c40e0 [ 613.224963][ T282] [ 613.227992][ T282] ================================================================== [ 613.236146][ T282] Disabling lock debugging due to kernel taint [ 613.257012][ T282] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 613.264855][ T282] #PF: supervisor write access in kernel mode [ 613.270944][ T282] #PF: error_code(0x0002) - not-present page [ 613.276945][ T282] PGD 129e5a067 P4D 129e5a067 PUD 0 [ 613.282259][ T282] Oops: 0002 [#1] PREEMPT SMP KASAN [ 613.287472][ T282] CPU: 0 PID: 282 Comm: syz-executor Tainted: G B W syzkaller #0 [ 613.296328][ T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 613.306396][ T282] RIP: 0010:ihold+0x26/0x60 [ 613.311009][ T282] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 71 ac b3 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 2f f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 613.330630][ T282] RSP: 0018:ffffc90000a17ce8 EFLAGS: 00010246 [ 613.336714][ T282] RAX: ffff88811ec64f00 RBX: 0000000000000000 RCX: ffff88811ec64f00 [ 613.344695][ T282] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 613.352678][ T282] RBP: ffffc90000a17cf8 R08: 0000000000000004 R09: 0000000000000003 [ 613.360680][ T282] R10: fffffbfff0e1824c R11: 1ffffffff0e1824c R12: 1ffff1102233006c [ 613.368666][ T282] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 613.376652][ T282] FS: 00005555728b5500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 613.385592][ T282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.392188][ T282] CR2: 0000000000000170 CR3: 0000000126190000 CR4: 00000000003526b0 [ 613.400174][ T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 613.408160][ T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 613.416150][ T282] Call Trace: [ 613.419440][ T282] [ 613.422404][ T282] vfs_rmdir+0x1f0/0x460 [ 613.426683][ T282] incfs_kill_sb+0x105/0x220 [ 613.431328][ T282] deactivate_locked_super+0xa0/0x100 [ 613.436728][ T282] deactivate_super+0xaf/0xe0 [ 613.441426][ T282] cleanup_mnt+0x446/0x500 [ 613.445863][ T282] __cleanup_mnt+0x19/0x20 [ 613.450302][ T282] task_work_run+0x127/0x190 [ 613.454914][ T282] exit_to_user_mode_loop+0xd0/0xe0 [ 613.460132][ T282] exit_to_user_mode_prepare+0x87/0xd0 [ 613.465700][ T282] syscall_exit_to_user_mode+0x1a/0x30 [ 613.471182][ T282] do_syscall_64+0x58/0xa0 [ 613.475633][ T282] ? clear_bhb_loop+0x50/0xa0 [ 613.480320][ T282] ? clear_bhb_loop+0x50/0xa0 [ 613.485015][ T282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 613.490931][ T282] RIP: 0033:0x7f00001e42f7 [ 613.495360][ T282] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 613.514976][ T282] RSP: 002b:00007ffd4e5c2f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 613.523419][ T282] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f00001e42f7 [ 613.531405][ T282] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4e5c3010 [ 613.539391][ T282] RBP: 00007ffd4e5c3010 R08: 0000000000000000 R09: 0000000000000000 [ 613.547372][ T282] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd4e5c40a0 [ 613.555357][ T282] R13: 00007f0000265d7d R14: 0000000000095921 R15: 00007ffd4e5c40e0 [ 613.563352][ T282] [ 613.566382][ T282] Modules linked in: [ 613.570307][ T282] CR2: 0000000000000170 [ 613.574476][ T282] ---[ end trace 77de76a4b675adc8 ]--- [ 613.579959][ T282] RIP: 0010:ihold+0x26/0x60 [ 613.584483][ T282] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 71 ac b3 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 2f f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 613.604099][ T282] RSP: 0018:ffffc90000a17ce8 EFLAGS: 00010246 [ 613.610277][ T282] RAX: ffff88811ec64f00 RBX: 0000000000000000 RCX: ffff88811ec64f00 [ 613.618263][ T282] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 613.626246][ T282] RBP: ffffc90000a17cf8 R08: 0000000000000004 R09: 0000000000000003 [ 613.634227][ T282] R10: fffffbfff0e1824c R11: 1ffffffff0e1824c R12: 1ffff1102233006c [ 613.642207][ T282] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 613.650188][ T282] FS: 00005555728b5500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 613.659164][ T282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.665761][ T282] CR2: 0000000000000170 CR3: 0000000126190000 CR4: 00000000003526b0 [ 613.673848][ T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 613.681831][ T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 613.689822][ T282] Kernel panic - not syncing: Fatal exception [ 613.696177][ T282] Kernel Offset: disabled [ 613.700523][ T282] Rebooting in 86400 seconds..