last executing test programs: 4m41.196740828s ago: executing program 3 (id=7): mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x303, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x8000) 4m41.051614081s ago: executing program 3 (id=12): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0xfffc, 0xfffffff9, 0x6}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x2, 0xf, 0x80, 0x0, 0x4, 0x0, 0x0, 0xfe, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 4m40.968563825s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 4m40.918055336s ago: executing program 3 (id=17): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400), 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m40.790891618s ago: executing program 3 (id=22): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x38, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x10, 0x40, 0x0, 0xe7, {[@sack={0x5, 0xa, [0x2020000, 0x1000]}, @mss={0x2, 0x4, 0xe51}]}}}}}}}, 0x0) 4m39.115037427s ago: executing program 3 (id=77): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x614b, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xfffffffb, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) 4m39.114941611s ago: executing program 32 (id=77): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x614b, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xfffffffb, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) 3m19.23386547s ago: executing program 5 (id=937): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x1, 0x7ff, 0x4f, 0x8009}, 'syz0\x00', 0x8}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000000c0)) 3m18.535042379s ago: executing program 5 (id=942): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) eventfd2(0x3, 0x800) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000017c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000000140)=[{&(0x7f0000002080)=""/4096, 0x1000}, {0x0}], 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 3m17.957575955s ago: executing program 5 (id=946): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000940000/0x1000)=nil, 0x1000}, 0x1}) 3m16.775158753s ago: executing program 5 (id=952): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000280)={[{@auto_da_alloc}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@abort}, {@bh}, {@init_itable}]}, 0xfc, 0x57e, &(0x7f00000003c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x8000, 0x13c) getdents64(r0, 0x0, 0x0) 3m15.847702232s ago: executing program 5 (id=958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff2, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 3m11.570096824s ago: executing program 5 (id=984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) ioctl$int_in(r0, 0x5452, 0x0) 3m10.798494213s ago: executing program 33 (id=984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) ioctl$int_in(r0, 0x5452, 0x0) 2m54.697027402s ago: executing program 1 (id=1061): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x3, 0x91c, 0x218b}, 'syz0\x00', 0x13}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x14a) ioctl$UI_DEV_CREATE(r0, 0x5501) 2m54.606941002s ago: executing program 6 (id=1063): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007c, 0x80001) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 2m54.068599976s ago: executing program 6 (id=1065): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) munlockall() syz_clone3(&(0x7f00000004c0)={0x84004400, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 2m53.966489084s ago: executing program 1 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffd, 0x80, 0x2, 0x27e}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x120, 0x1, {0x2}}) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x15}}}, 0x0) 2m53.749353103s ago: executing program 0 (id=1069): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001840)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) read(r0, &(0x7f00000005c0)=""/1015, 0xffb5) pread64(r0, &(0x7f0000003900)=""/4118, 0x1016, 0x1000000000001) read$FUSE(r0, &(0x7f00000018c0)={0x2020}, 0x2020) 2m53.29162922s ago: executing program 0 (id=1070): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2m53.045056554s ago: executing program 4 (id=1071): socket$unix(0x1, 0x1, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x1, 0xfffffffffffffffc, 0x802, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x4000000002, 0x15e, 0x6, 0x40004, 0xfffffffffffffffe, 0x6a6}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 2m52.7550965s ago: executing program 1 (id=1073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa020800450000243ffde000032f907800001fe1e0b176000001a0"], 0x36) 2m52.461466643s ago: executing program 0 (id=1075): r0 = syz_clone(0x20804000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x407b, &(0x7f0000000180)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000004200)='ns/mnt\x00') 2m52.267578925s ago: executing program 4 (id=1076): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x48}}, 0x4000020) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r1, @ANYBLOB="14000600ff"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x24008000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2m52.204097033s ago: executing program 6 (id=1077): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) 2m50.738122629s ago: executing program 0 (id=1080): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 2m50.151360461s ago: executing program 2 (id=1082): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200), &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd589, 0x80, 0x2, 0x1e1}, &(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r3, r1, r2, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x100000001, 0x0, 0x82}], 0x1, 0x0, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00', 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m49.761086946s ago: executing program 2 (id=1083): bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffff7feffff7fff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r1, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0)={[0x1]}, 0x8}) 2m49.265110928s ago: executing program 2 (id=1084): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x7, 0x280000000}) 2m49.194956972s ago: executing program 4 (id=1085): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc40) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x30}, 0x0) 2m49.129784705s ago: executing program 1 (id=1086): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast2, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) close(0x4) 2m48.760522429s ago: executing program 6 (id=1087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000034c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m48.682945642s ago: executing program 2 (id=1088): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x12b, 0x0, 0x0}, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000180001"], 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x79b1, 0x2, 0x0, 0xfe94) 2m48.588914342s ago: executing program 4 (id=1089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", "fdf5ef00", "066580001e00"}, 0x38) writev(r0, &(0x7f00000007c0)=[{&(0x7f00000003c0)="817d4410fd2068200d2d4706a2702b0c", 0x10}], 0x1) 2m48.187762927s ago: executing program 6 (id=1090): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) socket$inet_smc(0x2b, 0x1, 0x0) 2m47.987735853s ago: executing program 0 (id=1091): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0xfb, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000580)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x77, 0x2143040, 0x7f7f, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x78, 0x0, 0x9, {0x9, 0x1, 0x0, {0x4, 0x7fffffffffffffff, 0x408, 0x201, 0x3, 0x6d6d, 0x9, 0x200207, 0xe000, 0x601d824b499141fd, 0xcd35, 0xffffffffffffffff, 0x0, 0xe9, 0x808003}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000010880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f00000000c0)={0x130, 0x0, r1, {0xf, 0x9, 0x0, '\x00', {0x8000, 0xcad7, 0xb, 0xff, r2, r3, 0xc000, '\x00', 0x7f, 0x6, 0x568, 0x3, {0x400, 0x4}, {0x7, 0x5}, {0x8, 0x5749}, {0x38, 0x60000000}, 0xbd, 0x1, 0x1, 0x461}}}, 0x130) 2m47.955959739s ago: executing program 2 (id=1092): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r1, 0x800}}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m47.65833608s ago: executing program 1 (id=1093): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x2, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa00", 0x48, 0x11, 0x1, @local, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5ffcb2a0131c9b44000"}}}}}}}, 0x0) 2m47.51059779s ago: executing program 6 (id=1094): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mlock2(&(0x7f0000108000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m47.467911962s ago: executing program 4 (id=1095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x5, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 2m47.323403193s ago: executing program 2 (id=1096): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x6f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0x91) 2m47.144609628s ago: executing program 0 (id=1097): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) unshare(0x2c020400) r0 = msgget$private(0x0, 0x240) msgsnd(r0, &(0x7f0000000880)={0x2}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) 2m47.069811278s ago: executing program 1 (id=1098): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) sendmmsg$sock(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003100)="0100000003000000640000000000000000000000000000000000000000000000000000000000000001000000000000000800000001000000", 0x38}], 0x1}}], 0x2, 0x0) 2m46.781251909s ago: executing program 4 (id=1099): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x84401, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 0s ago: executing program 34 (id=1097): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) unshare(0x2c020400) r0 = msgget$private(0x0, 0x240) msgsnd(r0, &(0x7f0000000880)={0x2}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) kernel console output (not intermixed with test programs): om eth2 [ 29.648606][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.654332][ T4708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.657017][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.668553][ T4709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.671342][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.673373][ T4709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.676293][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.678282][ T4709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.680510][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.686883][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.690259][ T4709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.692874][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.712331][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.713958][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.715532][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.717121][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.728248][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.734180][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.734236][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.739713][ T4721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.742603][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.749912][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.750244][ T4721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.752644][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.752938][ T4721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.753800][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.763305][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.763351][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.768602][ T4721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.772647][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.801660][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.812113][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.828393][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.840062][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.840110][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.840478][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.840505][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.842598][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.842619][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.842984][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.843002][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.853795][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.857113][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.870642][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.873365][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.877539][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.892800][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.892854][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.893310][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.893329][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.912290][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.939077][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.939126][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.939632][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.939665][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.964785][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.970393][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.021515][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.128062][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.176018][ T4709] veth0_vlan: entered promiscuous mode [ 30.187197][ T4710] veth0_vlan: entered promiscuous mode [ 30.192008][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.200307][ T4710] veth1_vlan: entered promiscuous mode [ 30.203364][ T4709] veth1_vlan: entered promiscuous mode [ 30.208655][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.218470][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.224206][ T4721] veth0_vlan: entered promiscuous mode [ 30.225902][ T4721] veth1_vlan: entered promiscuous mode [ 30.235775][ T4709] veth0_macvtap: entered promiscuous mode [ 30.238751][ T4709] veth1_macvtap: entered promiscuous mode [ 30.244797][ T4721] veth0_macvtap: entered promiscuous mode [ 30.245941][ T4721] veth1_macvtap: entered promiscuous mode [ 30.257028][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.260306][ T4710] veth0_macvtap: entered promiscuous mode [ 30.263785][ T4710] veth1_macvtap: entered promiscuous mode [ 30.266211][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.267287][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.271274][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.298375][ T4718] veth0_vlan: entered promiscuous mode [ 30.302136][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.303391][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.309218][ T4708] veth0_vlan: entered promiscuous mode [ 30.312247][ T4708] veth1_vlan: entered promiscuous mode [ 30.322844][ T322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.342557][ T4718] veth1_vlan: entered promiscuous mode [ 30.358760][ T4708] veth0_macvtap: entered promiscuous mode [ 30.373255][ T4708] veth1_macvtap: entered promiscuous mode [ 30.376669][ T322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.376696][ T322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.383051][ T4718] veth0_macvtap: entered promiscuous mode [ 30.384234][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.390335][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.393643][ T209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.393655][ T209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.404083][ T4718] veth1_macvtap: entered promiscuous mode [ 30.410027][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.425401][ T322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.425433][ T322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.440571][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.441451][ T582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.441704][ T582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.441735][ T582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.441743][ T582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.441829][ T582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.441900][ T582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.441917][ T582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.441933][ T582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.441950][ T582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.441966][ T582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.441981][ T582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.441996][ T582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.442011][ T582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.477212][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.477250][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.489360][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.489395][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.492005][ T582] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.492303][ T582] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.492370][ T582] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.492439][ T582] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.492565][ T582] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.492696][ T582] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.492877][ T582] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.492894][ T582] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.520302][ T4721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.523138][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.523151][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.562191][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.562219][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.599062][ T209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.599096][ T209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.619072][ T300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.619102][ T300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.714478][ T4908] loop2: detected capacity change from 0 to 1024 [ 30.728946][ T4909] Illegal XDP return value 4909 on prog (id 2) dev syz_tun, expect packet loss! [ 30.731619][ T4715] Bluetooth: hci3: command tx timeout [ 30.731756][ T4715] Bluetooth: hci1: command tx timeout [ 30.731822][ T4715] Bluetooth: hci2: command tx timeout [ 30.731884][ T4715] Bluetooth: hci0: command tx timeout [ 30.731944][ T4715] Bluetooth: hci4: command tx timeout [ 30.752868][ T4908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.778556][ T4908] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.9: Freeing blocks not in datazone - block = 0, count = 16 [ 30.801515][ T4908] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.9: bg 0: block 112: padding at end of block bitmap is not set [ 30.806263][ T4916] FAULT_INJECTION: forcing a failure. [ 30.806263][ T4916] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.806299][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: syz.1.11 Not tainted syzkaller #0 PREEMPT [ 30.806318][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.806325][ T4916] Call trace: [ 30.806329][ T4916] show_stack+0x2c/0x3c (C) [ 30.806353][ T4916] __dump_stack+0x30/0x40 [ 30.806366][ T4916] dump_stack_lvl+0xd8/0x12c [ 30.806378][ T4916] dump_stack+0x1c/0x28 [ 30.806390][ T4916] should_fail_ex+0x41c/0x590 [ 30.806403][ T4916] should_fail+0x14/0x24 [ 30.806414][ T4916] should_fail_usercopy+0x20/0x30 [ 30.806426][ T4916] _inline_copy_from_user+0x3c/0x174 [ 30.806436][ T4916] __arm64_sys_timer_create+0x108/0x1ac [ 30.806444][ T4916] invoke_syscall+0x98/0x244 [ 30.806456][ T4916] el0_svc_common+0xec/0x23c [ 30.806468][ T4916] do_el0_svc+0x4c/0x5c [ 30.806479][ T4916] el0_svc+0x64/0x260 [ 30.806498][ T4916] el0t_64_sync_handler+0x44/0x104 [ 30.806509][ T4916] el0t_64_sync+0x198/0x19c [ 30.863927][ T4922] FAULT_INJECTION: forcing a failure. [ 30.863927][ T4922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 30.866885][ T4922] CPU: 0 UID: 0 PID: 4922 Comm: syz.3.15 Not tainted syzkaller #0 PREEMPT [ 30.866906][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.866912][ T4922] Call trace: [ 30.866916][ T4922] show_stack+0x2c/0x3c (C) [ 30.866940][ T4922] __dump_stack+0x30/0x40 [ 30.866954][ T4922] dump_stack_lvl+0xd8/0x12c [ 30.866966][ T4922] dump_stack+0x1c/0x28 [ 30.866978][ T4922] should_fail_ex+0x41c/0x590 [ 30.866991][ T4922] should_fail+0x14/0x24 [ 30.867002][ T4922] should_fail_usercopy+0x20/0x30 [ 30.867014][ T4922] _inline_copy_from_user+0x3c/0x174 [ 30.867027][ T4922] do_fcntl+0x5f4/0x1568 [ 30.867039][ T4922] __arm64_sys_fcntl+0x118/0x1ac [ 30.867051][ T4922] invoke_syscall+0x98/0x244 [ 30.867063][ T4922] el0_svc_common+0xec/0x23c [ 30.867074][ T4922] do_el0_svc+0x4c/0x5c [ 30.867086][ T4922] el0_svc+0x64/0x260 [ 30.867096][ T4922] el0t_64_sync_handler+0x44/0x104 [ 30.867106][ T4922] el0t_64_sync+0x198/0x19c [ 30.920161][ T4926] loop3: detected capacity change from 0 to 1024 [ 30.921075][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.947168][ T4926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.978557][ T4933] loop2: detected capacity change from 0 to 512 [ 30.985880][ T4933] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.993518][ T4926] EXT4-fs error (device loop3): ext4_check_all_de:675: inode #12: block 7: comm syz.3.17: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 31.001351][ T4934] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET) [ 31.027503][ T4721] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 31.035773][ T4721] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 31.044540][ T4933] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 31.044771][ T4933] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 31.044799][ T4933] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 31.045029][ T4721] EXT4-fs error (device loop3): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 31.048864][ T4721] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 31.049035][ T4721] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 31.053313][ T4721] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 31.068030][ T4721] EXT4-fs error (device loop3): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 31.068545][ T4721] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 31.071404][ T4721] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 31.071904][ T4721] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 31.072750][ T4721] EXT4-fs error (device loop3): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 31.073011][ T4721] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 31.074888][ T4721] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 31.079260][ T4721] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 31.082451][ T4721] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 31.103657][ T4721] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 31.107843][ T4721] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 31.112572][ T4721] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 31.116924][ T4721] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 31.183655][ T4940] IPVS: Error connecting to the multicast addr [ 31.214356][ T4942] device-mapper: ioctl: device name cannot contain '/' [ 31.293960][ T4953] Bluetooth: MGMT ver 1.23 [ 31.393459][ T4962] netlink: 64 bytes leftover after parsing attributes in process `syz.0.34'. [ 31.399601][ T4964] loop2: detected capacity change from 0 to 128 [ 31.402339][ T4964] FAT-fs (loop2): bogus number of FAT sectors [ 31.403770][ T4964] FAT-fs (loop2): Can't find a valid FAT filesystem [ 31.408319][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 31.496712][ T4970] loop4: detected capacity change from 0 to 512 [ 31.506158][ T4970] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.526801][ T4970] EXT4-fs (loop4): 1 orphan inode deleted [ 31.528537][ T4970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.600216][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.614653][ T4980] capability: warning: `syz.2.42' uses deprecated v2 capabilities in a way that may be insecure [ 31.738635][ T4993] loop2: detected capacity change from 0 to 2048 [ 31.756344][ T4993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.798523][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.800106][ T4999] loop4: detected capacity change from 0 to 4096 [ 31.825763][ T4999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.882352][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.904802][ T5004] FAULT_INJECTION: forcing a failure. [ 31.904802][ T5004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.904844][ T5004] CPU: 0 UID: 0 PID: 5004 Comm: syz.2.52 Not tainted syzkaller #0 PREEMPT [ 31.904860][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 31.904867][ T5004] Call trace: [ 31.904870][ T5004] show_stack+0x2c/0x3c (C) [ 31.904890][ T5004] __dump_stack+0x30/0x40 [ 31.904902][ T5004] dump_stack_lvl+0xd8/0x12c [ 31.904913][ T5004] dump_stack+0x1c/0x28 [ 31.904924][ T5004] should_fail_ex+0x41c/0x590 [ 31.904937][ T5004] should_fail+0x14/0x24 [ 31.904948][ T5004] should_fail_usercopy+0x20/0x30 [ 31.904959][ T5004] _inline_copy_from_user+0x3c/0x174 [ 31.904972][ T5004] do_seccomp+0x2f8/0xbfc [ 31.904982][ T5004] __arm64_sys_seccomp+0x84/0x98 [ 31.904992][ T5004] invoke_syscall+0x98/0x244 [ 31.905004][ T5004] el0_svc_common+0xec/0x23c [ 31.905016][ T5004] do_el0_svc+0x4c/0x5c [ 31.905027][ T5004] el0_svc+0x64/0x260 [ 31.905037][ T5004] el0t_64_sync_handler+0x44/0x104 [ 31.905047][ T5004] el0t_64_sync+0x198/0x19c [ 31.955979][ T5008] FAULT_INJECTION: forcing a failure. [ 31.955979][ T5008] name failslab, interval 1, probability 0, space 0, times 1 [ 31.958972][ T5008] CPU: 1 UID: 0 PID: 5008 Comm: syz.4.53 Not tainted syzkaller #0 PREEMPT [ 31.958994][ T5008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 31.959002][ T5008] Call trace: [ 31.959006][ T5008] show_stack+0x2c/0x3c (C) [ 31.959032][ T5008] __dump_stack+0x30/0x40 [ 31.959046][ T5008] dump_stack_lvl+0xd8/0x12c [ 31.959058][ T5008] dump_stack+0x1c/0x28 [ 31.959070][ T5008] should_fail_ex+0x41c/0x590 [ 31.959084][ T5008] should_failslab+0xc4/0x120 [ 31.959097][ T5008] __kmalloc_cache_noprof+0x94/0x5fc [ 31.959106][ T5008] proc_self_get_link+0xe4/0x17c [ 31.959119][ T5008] pick_link+0x5cc/0xcf4 [ 31.959131][ T5008] step_into_slowpath+0x468/0x670 [ 31.959143][ T5008] link_path_walk+0xb34/0x1584 [ 31.959154][ T5008] path_openat+0x160/0x18f4 [ 31.959163][ T5008] do_file_open+0x1c8/0x2e8 [ 31.959173][ T5008] do_sys_openat2+0x114/0x1e8 [ 31.959185][ T5008] do_sys_open+0xb0/0xe0 [ 31.959196][ T5008] __arm64_sys_openat+0xa8/0xc4 [ 31.959207][ T5008] invoke_syscall+0x98/0x244 [ 31.959219][ T5008] el0_svc_common+0xec/0x23c [ 31.959231][ T5008] do_el0_svc+0x4c/0x5c [ 31.959242][ T5008] el0_svc+0x64/0x260 [ 31.959253][ T5008] el0t_64_sync_handler+0x44/0x104 [ 31.959262][ T5008] el0t_64_sync+0x198/0x19c [ 32.038353][ T5016] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 32.048005][ T5018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.57'. [ 32.169176][ T5031] loop2: detected capacity change from 0 to 512 [ 32.198027][ T5031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.218987][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.399851][ T5051] ======================================================= [ 32.399851][ T5051] WARNING: The mand mount option has been deprecated and [ 32.399851][ T5051] and is ignored by this kernel. Remove the mand [ 32.399851][ T5051] option from the mount to silence this warning. [ 32.399851][ T5051] ======================================================= [ 32.507357][ T5057] ptp ptp0: max value is 20 [ 32.634424][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.688105][ T209] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.775353][ T4715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.777338][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.779123][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.786314][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.786642][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.811987][ T4717] Bluetooth: hci2: command tx timeout [ 32.812007][ T4724] Bluetooth: hci1: command tx timeout [ 32.812028][ T4717] Bluetooth: hci3: command tx timeout [ 32.812090][ T4715] Bluetooth: hci0: command tx timeout [ 32.848792][ T5072] FAULT_INJECTION: forcing a failure. [ 32.848792][ T5072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.848839][ T5072] CPU: 0 UID: 0 PID: 5072 Comm: syz.2.80 Not tainted syzkaller #0 PREEMPT [ 32.848851][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.848859][ T5072] Call trace: [ 32.848862][ T5072] show_stack+0x2c/0x3c (C) [ 32.848883][ T5072] __dump_stack+0x30/0x40 [ 32.848899][ T5072] dump_stack_lvl+0xd8/0x12c [ 32.848911][ T5072] dump_stack+0x1c/0x28 [ 32.848922][ T5072] should_fail_ex+0x41c/0x590 [ 32.848935][ T5072] should_fail+0x14/0x24 [ 32.848946][ T5072] should_fail_usercopy+0x20/0x30 [ 32.848958][ T5072] _inline_copy_from_user+0x3c/0x174 [ 32.848969][ T5072] __sys_bpf+0x1b4/0x82c [ 32.848978][ T5072] __arm64_sys_bpf+0xd0/0xec [ 32.848986][ T5072] invoke_syscall+0x98/0x244 [ 32.848998][ T5072] el0_svc_common+0xec/0x23c [ 32.849010][ T5072] do_el0_svc+0x4c/0x5c [ 32.849021][ T5072] el0_svc+0x64/0x260 [ 32.849032][ T5072] el0t_64_sync_handler+0x44/0x104 [ 32.849042][ T5072] el0t_64_sync+0x198/0x19c [ 33.539910][ T5101] loop4: detected capacity change from 0 to 512 [ 33.559770][ T5101] EXT4-fs: Ignoring removed orlov option [ 33.611788][ T5101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.638817][ T5065] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.678681][ T5065] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.680623][ T5065] bridge_slave_0: entered allmulticast mode [ 33.682869][ T5065] bridge_slave_0: entered promiscuous mode [ 33.685550][ T5065] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.693526][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.703919][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.704037][ T5065] bridge_slave_1: entered allmulticast mode [ 33.704531][ T5065] bridge_slave_1: entered promiscuous mode [ 33.742747][ T5065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.751229][ T5065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.769551][ T5065] team0: Port device team_slave_0 added [ 33.770321][ T5065] team0: Port device team_slave_1 added [ 33.826071][ T5115] Zero length message leads to an empty skb [ 33.827969][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.827996][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.828011][ T5065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.831132][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.831140][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.831151][ T5065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.898148][ T5065] hsr_slave_0: entered promiscuous mode [ 33.901849][ T5065] hsr_slave_1: entered promiscuous mode [ 33.902993][ T5065] debugfs: 'hsr0' already exists in 'hsr' [ 33.903009][ T5065] Cannot create hsr debugfs directory [ 33.920002][ T5124] loop2: detected capacity change from 0 to 512 [ 33.940135][ T5124] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 33.966638][ T5124] EXT4-fs (loop2): 1 truncate cleaned up [ 33.967318][ T5124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.012386][ T5127] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.034552][ T5124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'. [ 34.042192][ T5124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'. [ 34.049579][ T5127] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.99: corrupted in-inode xattr: e_value size too large [ 34.049657][ T5127] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.052849][ T5127] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.99: couldn't read orphan inode 15 (err -117) [ 34.052907][ T5127] loop4: lost filesystem error report for type 5 error -117 [ 34.055131][ T5127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.059531][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.156578][ T5065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 34.164777][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.182096][ T5065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.184851][ T5065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 34.189702][ T5065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.192255][ T5065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 34.206934][ T5065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.208523][ T5065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 34.219616][ T5065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.305841][ T5149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.320181][ T5149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.384098][ T5151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.418473][ T5151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.496775][ T209] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.512621][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.555639][ T5065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.558528][ T5065] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.594984][ T582] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.595034][ T582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.599876][ T5157] block nbd1: NBD_DISCONNECT [ 34.607362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.607413][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.677705][ T209] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.736761][ T5065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.736803][ T5065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.778130][ T5161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.785691][ T5164] faux_driver vgem: [drm] Unknown color mode 135162; guessing buffer size. [ 34.821861][ T4715] Bluetooth: hci4: command tx timeout [ 34.837960][ T209] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.888422][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.890846][ T4715] Bluetooth: hci3: command tx timeout [ 34.891220][ T4715] Bluetooth: hci2: command tx timeout [ 34.907239][ T4714] Bluetooth: hci0: command tx timeout [ 34.907277][ T4714] Bluetooth: hci1: command tx timeout [ 34.980522][ T5176] netlink: 'syz.0.114': attribute type 39 has an invalid length. [ 35.021520][ T5180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.062966][ T5180] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 35.067063][ T5180] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 35.069855][ T5180] EXT4-fs (loop1): This should not happen!! Data will be lost [ 35.069855][ T5180] [ 35.073028][ T5180] EXT4-fs (loop1): Total free blocks count 0 [ 35.074445][ T5180] EXT4-fs (loop1): Free/Dirty block details [ 35.075793][ T5180] EXT4-fs (loop1): free_blocks=65280 [ 35.076972][ T5180] EXT4-fs (loop1): dirty_blocks=33 [ 35.077002][ T5180] EXT4-fs (loop1): Block reservation details [ 35.077017][ T5180] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 35.180579][ T209] bridge_slave_1: left allmulticast mode [ 35.180628][ T209] bridge_slave_1: left promiscuous mode [ 35.185981][ T209] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.200493][ T209] bridge_slave_0: left allmulticast mode [ 35.200535][ T209] bridge_slave_0: left promiscuous mode [ 35.200627][ T209] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.416818][ T5198] syz.0.120: attempt to access beyond end of device [ 35.416818][ T5198] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 35.416881][ T5198] Buffer I/O error on dev loop0, logical block 57847, async page read [ 35.417468][ T5198] syz.0.120: attempt to access beyond end of device [ 35.417468][ T5198] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 35.417493][ T5198] Buffer I/O error on dev loop0, logical block 57847, async page read [ 35.417516][ T5198] syz.0.120: attempt to access beyond end of device [ 35.417516][ T5198] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 35.417528][ T5198] Buffer I/O error on dev loop0, logical block 57847, async page read [ 35.417547][ T5198] syz.0.120: attempt to access beyond end of device [ 35.417547][ T5198] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 35.417558][ T5198] Buffer I/O error on dev loop0, logical block 57847, async page read [ 35.417576][ T5198] syz.0.120: attempt to access beyond end of device [ 35.417576][ T5198] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 35.417586][ T5198] Buffer I/O error on dev loop0, logical block 57847, async page read [ 35.417604][ T5198] syz.0.120: attempt to access beyond end of device [ 35.417604][ T5198] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 35.417614][ T5198] Buffer I/O error on dev loop0, logical block 57847, async page read [ 35.417631][ T5198] syz.0.120: attempt to access beyond end of device [ 35.417631][ T5198] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 35.417641][ T5198] Buffer I/O error on dev loop0, logical block 57847, async page read [ 35.417657][ T5198] syz.0.120: attempt to access beyond end of device [ 35.417657][ T5198] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 35.417667][ T5198] Buffer I/O error on dev loop0, logical block 57847, async page read [ 35.417684][ T5198] syz.0.120: attempt to access beyond end of device [ 35.417684][ T5198] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 35.417694][ T5198] Buffer I/O error on dev loop0, logical block 57847, async page read [ 35.417710][ T5198] syz.0.120: attempt to access beyond end of device [ 35.417710][ T5198] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 35.417720][ T5198] Buffer I/O error on dev loop0, logical block 57847, async page read [ 35.424284][ T5200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.455113][ T5200] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 35.455424][ T5200] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 35.455437][ T5200] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.455437][ T5200] [ 35.455445][ T5200] EXT4-fs (loop4): Total free blocks count 0 [ 35.455452][ T5200] EXT4-fs (loop4): Free/Dirty block details [ 35.455460][ T5200] EXT4-fs (loop4): free_blocks=65280 [ 35.455469][ T5200] EXT4-fs (loop4): dirty_blocks=1 [ 35.455475][ T5200] EXT4-fs (loop4): Block reservation details [ 35.455490][ T5200] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 35.509691][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.521603][ T209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.550327][ T209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.591677][ T209] bond0 (unregistering): Released all slaves [ 35.606689][ T5065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.615649][ T5191] syzkaller1: entered promiscuous mode [ 35.615686][ T5191] syzkaller1: entered allmulticast mode [ 35.627962][ T5205] netlink: 52 bytes leftover after parsing attributes in process `syz.4.122'. [ 35.748374][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 35.869025][ T4708] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 35.917749][ T5065] veth0_vlan: entered promiscuous mode [ 35.927449][ T5065] veth1_vlan: entered promiscuous mode [ 35.995215][ T5065] veth0_macvtap: entered promiscuous mode [ 36.005282][ T5065] veth1_macvtap: entered promiscuous mode [ 36.063701][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.085108][ T209] hsr_slave_0: left promiscuous mode [ 36.087354][ T209] hsr_slave_1: left promiscuous mode [ 36.087732][ T209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.087759][ T209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.104362][ T209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.104393][ T209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.115788][ T209] veth1_macvtap: left promiscuous mode [ 36.118251][ T209] veth0_macvtap: left promiscuous mode [ 36.119616][ T209] veth1_vlan: left promiscuous mode [ 36.121327][ T209] veth0_vlan: left promiscuous mode [ 36.349162][ T5249] set_capacity_and_notify: 7 callbacks suppressed [ 36.349205][ T5249] loop2: detected capacity change from 0 to 1024 [ 36.383590][ T209] team0 (unregistering): Port device team_slave_1 removed [ 36.392255][ T5249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.399257][ T209] team0 (unregistering): Port device team_slave_0 removed [ 36.571629][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.731233][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.732120][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 36.850946][ T300] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.853188][ T582] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.855299][ T582] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.857345][ T582] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.864330][ T582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.865985][ T582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.877630][ T582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.877666][ T582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.890850][ T4715] Bluetooth: hci4: command tx timeout [ 36.980926][ T4714] Bluetooth: hci0: command tx timeout [ 36.980966][ T4714] Bluetooth: hci2: command tx timeout [ 36.980996][ T4714] Bluetooth: hci3: command tx timeout [ 36.984450][ T4715] Bluetooth: hci1: command tx timeout [ 36.988747][ T5299] loop5: detected capacity change from 0 to 512 [ 37.030394][ T5299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.071339][ T5305] FAULT_INJECTION: forcing a failure. [ 37.071339][ T5305] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 37.071373][ T5305] CPU: 0 UID: 0 PID: 5305 Comm: syz.0.153 Not tainted syzkaller #0 PREEMPT [ 37.071388][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.071395][ T5305] Call trace: [ 37.071399][ T5305] show_stack+0x2c/0x3c (C) [ 37.071421][ T5305] __dump_stack+0x30/0x40 [ 37.071434][ T5305] dump_stack_lvl+0xd8/0x12c [ 37.071446][ T5305] dump_stack+0x1c/0x28 [ 37.071457][ T5305] should_fail_ex+0x41c/0x590 [ 37.071470][ T5305] should_fail_alloc_page+0xec/0x10c [ 37.071489][ T5305] prepare_alloc_pages+0x194/0x484 [ 37.071498][ T5305] __alloc_frozen_pages_noprof+0x180/0x648 [ 37.071507][ T5305] alloc_pages_mpol+0x1fc/0x3d0 [ 37.071517][ T5305] folio_alloc_mpol_noprof+0x4c/0x248 [ 37.071526][ T5305] vma_alloc_folio_noprof+0x100/0x1dc [ 37.071536][ T5305] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 37.071548][ T5305] folio_prealloc+0x3c/0x1b0 [ 37.071560][ T5305] do_pte_missing+0x1bd0/0x2a28 [ 37.071573][ T5305] handle_mm_fault+0x1534/0x2bec [ 37.071585][ T5305] do_page_fault+0x77c/0xb88 [ 37.071596][ T5305] do_translation_fault+0xc4/0x114 [ 37.071607][ T5305] do_mem_abort+0x70/0x194 [ 37.071617][ T5305] el0_da+0x78/0x254 [ 37.071628][ T5305] el0t_64_sync_handler+0xd8/0x104 [ 37.071638][ T5305] el0t_64_sync+0x198/0x19c [ 37.071705][ T5305] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 37.127294][ T5309] loop4: detected capacity change from 0 to 256 [ 37.145278][ T5309] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 37.145324][ T5309] FAT-fs (loop4): Can't find a valid FAT filesystem [ 37.154372][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 37.164872][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.179919][ T5311] vlan2: entered allmulticast mode [ 37.179957][ T5311] dummy0: entered allmulticast mode [ 37.180408][ T5311] bridge0: port 3(vlan2) entered blocking state [ 37.180442][ T5311] bridge0: port 3(vlan2) entered disabled state [ 37.186465][ T5311] vlan2: entered promiscuous mode [ 37.186503][ T5311] dummy0: entered promiscuous mode [ 37.236305][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.348530][ T5335] warning: `syz.1.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 37.490073][ T5361] loop4: detected capacity change from 0 to 2048 [ 37.514395][ T5361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.588619][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.651562][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 37.855158][ T5394] psci: CPU1 killed (polled 0 ms) [ 38.048279][ T5413] loop1: detected capacity change from 0 to 1024 [ 38.056827][ T5413] EXT4-fs: Ignoring removed orlov option [ 38.080391][ T5413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.167571][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.282667][ T5427] bond0: option mode: unable to set because the bond device is up [ 38.357906][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 38.375991][ T5434] netlink: 52 bytes leftover after parsing attributes in process `syz.5.193'. [ 38.575243][ T5443] loop5: detected capacity change from 0 to 2048 [ 38.603662][ T5443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.806449][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.972019][ T4715] Bluetooth: hci4: command tx timeout [ 39.115210][ T5467] netlink: 36 bytes leftover after parsing attributes in process `syz.5.203'. [ 39.355078][ T5486] loop5: detected capacity change from 0 to 512 [ 39.364411][ T5486] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 39.376697][ T5486] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.212: bg 0: block 104: invalid block bitmap [ 39.379593][ T5486] loop5: lost filesystem error report for type 5 error -117 [ 39.380750][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 39.380778][ C0] EXT4-fs (loop5): initial error at time 39: ext4_validate_block_bitmap:436 [ 39.380808][ C0] EXT4-fs (loop5): last error at time 39: ext4_validate_block_bitmap:436 [ 39.390856][ T5486] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 39.390890][ T5486] loop5: lost filesystem error report for type 5 error -117 [ 39.393604][ T5486] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.212: invalid indirect mapped block 1 (level 1) [ 39.393636][ T5486] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.399045][ T5486] EXT4-fs (loop5): 1 truncate cleaned up [ 39.399927][ T5486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.464621][ T5486] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 39.468094][ T5486] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 39.493201][ T5486] overlayfs: inode number too big (/, ino=4611686018427387906, xinobits=3) [ 39.493436][ T5486] overlayfs: d_ino too big (., ino=4611686018427387916, xinobits=3) [ 39.493468][ T5486] overlayfs: d_ino too big (file0, ino=4611686018427387917, xinobits=3) [ 39.493492][ T5486] overlayfs: d_ino too big (file1, ino=4611686018427387918, xinobits=3) [ 39.566958][ T4795] kernel write not supported for file /input/event0 (pid: 4795 comm: kworker/0:4) [ 39.586743][ T5494] loop2: detected capacity change from 0 to 256 [ 39.617674][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.687962][ T5502] loop4: detected capacity change from 0 to 256 [ 39.742796][ T5505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 39.842079][ T322] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 39.842113][ T322] FAT-fs (loop4): Filesystem has been set read-only [ 39.842155][ T322] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 39.856846][ T5502] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 39.856882][ T5502] FAT-fs (loop4): Filesystem has been set read-only [ 40.025549][ T5520] loop2: detected capacity change from 0 to 2048 [ 40.042217][ T5520] EXT4-fs: Ignoring removed i_version option [ 40.061035][ T5520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.150111][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.051187][ T4715] Bluetooth: hci4: command tx timeout [ 41.374499][ T4803] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.389461][ T4803] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.497100][ T30] audit: type=1400 audit(41.470:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=5603 comm="syz.1.264" saddr=172.20.20.187 daddr=172.20.20.170 netif=wpan0 [ 41.707254][ T5621] set_capacity_and_notify: 1 callbacks suppressed [ 41.717615][ T5621] loop2: detected capacity change from 0 to 1024 [ 41.721202][ T5621] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 41.723850][ T5621] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 41.731043][ T5621] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 41.733537][ T5621] EXT4-fs error (device loop2): ext4_get_journal_inode:5927: inode #32: comm syz.2.270: iget: special inode unallocated [ 41.733572][ T5621] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 41.737090][ T5621] EXT4-fs (loop2): no journal found [ 41.737114][ T5621] EXT4-fs (loop2): can't get journal size [ 41.741951][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 41.741964][ C0] EXT4-fs (loop2): initial error at time 41: ext4_get_journal_inode:5927: inode 32 [ 41.741980][ C0] EXT4-fs (loop2): last error at time 41: ext4_get_journal_inode:5927: inode 32 [ 41.751113][ T5621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.776113][ T5621] EXT4-fs (loop2): shut down requested (2) [ 41.828743][ T5611] fido_id[5611]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.838173][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.888370][ T5624] loop1: detected capacity change from 0 to 512 [ 41.900547][ T5624] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.281: iget: bad i_size value: 38620345925642 [ 41.906667][ T5624] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.907116][ T5624] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.281: couldn't read orphan inode 15 (err -117) [ 41.911836][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 41.911849][ C0] EXT4-fs (loop1): initial error at time 41: ext4_orphan_get:1403: inode 15 [ 41.911864][ C0] EXT4-fs (loop1): last error at time 41: ext4_orphan_get:1403: inode 15 [ 41.917509][ T5624] loop1: lost filesystem error report for type 5 error -117 [ 41.923052][ T5624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.952558][ T5624] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.281: bg 0: block 5: invalid block bitmap [ 41.962273][ T5624] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 41.965233][ T5624] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.965233][ T5624] [ 41.967724][ T5624] EXT4-fs (loop1): Total free blocks count 0 [ 41.970202][ T5624] EXT4-fs (loop1): Free/Dirty block details [ 41.970264][ T5624] EXT4-fs (loop1): free_blocks=0 [ 41.970289][ T5624] EXT4-fs (loop1): dirty_blocks=2 [ 41.970303][ T5624] EXT4-fs (loop1): Block reservation details [ 41.970317][ T5624] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 42.039156][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.115300][ T5634] process 'syz.1.274' launched './file0' with NULL argv: empty string added [ 42.432278][ T5649] FAULT_INJECTION: forcing a failure. [ 42.432278][ T5649] name failslab, interval 1, probability 0, space 0, times 0 [ 42.432322][ T5649] CPU: 0 UID: 0 PID: 5649 Comm: syz.5.280 Not tainted syzkaller #0 PREEMPT [ 42.432341][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.432349][ T5649] Call trace: [ 42.432353][ T5649] show_stack+0x2c/0x3c (C) [ 42.432375][ T5649] __dump_stack+0x30/0x40 [ 42.432389][ T5649] dump_stack_lvl+0xd8/0x12c [ 42.432400][ T5649] dump_stack+0x1c/0x28 [ 42.432412][ T5649] should_fail_ex+0x41c/0x590 [ 42.432424][ T5649] should_failslab+0xc4/0x120 [ 42.432437][ T5649] __kmalloc_noprof+0x108/0x6c8 [ 42.432445][ T5649] security_sk_alloc+0x60/0x35c [ 42.432457][ T5649] sk_prot_alloc+0xe0/0x1e8 [ 42.432470][ T5649] sk_alloc+0x44/0x3ac [ 42.432485][ T5649] __netlink_create+0x78/0x23c [ 42.432495][ T5649] netlink_create+0x3b4/0x6a0 [ 42.432505][ T5649] __sock_create+0x31c/0x670 [ 42.432514][ T5649] __sys_socket_create+0xc0/0x11c [ 42.432523][ T5649] __sys_socket+0x44/0xec [ 42.432531][ T5649] __arm64_sys_socket+0x84/0x9c [ 42.432540][ T5649] invoke_syscall+0x98/0x244 [ 42.432552][ T5649] el0_svc_common+0xec/0x23c [ 42.432563][ T5649] do_el0_svc+0x4c/0x5c [ 42.432574][ T5649] el0_svc+0x64/0x260 [ 42.432585][ T5649] el0t_64_sync_handler+0x44/0x104 [ 42.432595][ T5649] el0t_64_sync+0x198/0x19c [ 42.964818][ T5672] FAULT_INJECTION: forcing a failure. [ 42.964818][ T5672] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 42.964864][ T5672] CPU: 0 UID: 0 PID: 5672 Comm: syz.4.290 Not tainted syzkaller #0 PREEMPT [ 42.964880][ T5672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.964888][ T5672] Call trace: [ 42.964892][ T5672] show_stack+0x2c/0x3c (C) [ 42.964912][ T5672] __dump_stack+0x30/0x40 [ 42.964927][ T5672] dump_stack_lvl+0xd8/0x12c [ 42.964938][ T5672] dump_stack+0x1c/0x28 [ 42.964949][ T5672] should_fail_ex+0x41c/0x590 [ 42.964962][ T5672] should_fail_alloc_page+0xec/0x10c [ 42.964975][ T5672] prepare_alloc_pages+0x194/0x484 [ 42.964984][ T5672] __alloc_frozen_pages_noprof+0x180/0x648 [ 42.964992][ T5672] alloc_pages_mpol+0x1fc/0x3d0 [ 42.965002][ T5672] alloc_frozen_pages_noprof+0xc4/0x10c [ 42.965011][ T5672] alloc_pages_noprof+0x30/0x148 [ 42.965020][ T5672] get_free_pages_noprof+0x1c/0xbc [ 42.965028][ T5672] __kasan_populate_vmalloc+0x48/0x1d0 [ 42.965039][ T5672] alloc_vmap_area+0xdf4/0x13e8 [ 42.965048][ T5672] __get_vm_area_node+0x210/0x32c [ 42.965058][ T5672] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 42.965067][ T5672] __vmalloc_node_noprof+0xec/0x14c [ 42.965077][ T5672] __vmalloc_noprof+0x64/0x8c [ 42.965085][ T5672] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 42.965096][ T5672] bpf_prog_alloc+0x48/0x110 [ 42.965107][ T5672] bpf_prog_create_from_user+0xa0/0x26c [ 42.965118][ T5672] do_seccomp+0x6fc/0xbfc [ 42.965129][ T5672] __arm64_sys_seccomp+0x84/0x98 [ 42.965140][ T5672] invoke_syscall+0x98/0x244 [ 42.965151][ T5672] el0_svc_common+0xec/0x23c [ 42.965163][ T5672] do_el0_svc+0x4c/0x5c [ 42.965174][ T5672] el0_svc+0x64/0x260 [ 42.965184][ T5672] el0t_64_sync_handler+0x44/0x104 [ 42.965194][ T5672] el0t_64_sync+0x198/0x19c [ 42.977909][ T5672] syz.4.290: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 42.977991][ T5672] CPU: 0 UID: 0 PID: 5672 Comm: syz.4.290 Not tainted syzkaller #0 PREEMPT [ 42.978003][ T5672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.978009][ T5672] Call trace: [ 42.978013][ T5672] show_stack+0x2c/0x3c (C) [ 42.978030][ T5672] __dump_stack+0x30/0x40 [ 42.978045][ T5672] dump_stack_lvl+0xd8/0x12c [ 42.978057][ T5672] dump_stack+0x1c/0x28 [ 42.978068][ T5672] warn_alloc+0x1c4/0x1d8 [ 42.978082][ T5672] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 42.978092][ T5672] __vmalloc_node_noprof+0xec/0x14c [ 42.978102][ T5672] __vmalloc_noprof+0x64/0x8c [ 42.978111][ T5672] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 42.978122][ T5672] bpf_prog_alloc+0x48/0x110 [ 42.978131][ T5672] bpf_prog_create_from_user+0xa0/0x26c [ 42.978143][ T5672] do_seccomp+0x6fc/0xbfc [ 42.978154][ T5672] __arm64_sys_seccomp+0x84/0x98 [ 42.978164][ T5672] invoke_syscall+0x98/0x244 [ 42.978177][ T5672] el0_svc_common+0xec/0x23c [ 42.978188][ T5672] do_el0_svc+0x4c/0x5c [ 42.978199][ T5672] el0_svc+0x64/0x260 [ 42.978210][ T5672] el0t_64_sync_handler+0x44/0x104 [ 42.978220][ T5672] el0t_64_sync+0x198/0x19c [ 42.978231][ T5672] Mem-Info: [ 42.978236][ T5672] active_anon:48 inactive_anon:7122 isolated_anon:0 [ 42.978236][ T5672] active_file:2363 inactive_file:14623 isolated_file:0 [ 42.978236][ T5672] unevictable:768 dirty:1767 writeback:0 [ 42.978236][ T5672] slab_reclaimable:8793 slab_unreclaimable:88594 [ 42.978236][ T5672] mapped:29062 shmem:1071 pagetables:3417 [ 42.978236][ T5672] sec_pagetables:0 bounce:0 [ 42.978236][ T5672] kernel_misc_reclaimable:0 [ 42.978236][ T5672] free:1458437 free_pcp:22855 free_cma:7616 [ 42.978258][ T5672] Node 0 active_anon:192kB inactive_anon:28488kB active_file:9452kB inactive_file:58492kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:116248kB dirty:7068kB writeback:0kB shmem:4284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9056kB pagetables:13668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 42.978279][ T5672] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 42.978304][ T5672] lowmem_reserve[]: 0 0 3650 3650 3650 [ 42.978323][ T5672] Node 0 Normal free:2755860kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:192kB inactive_anon:28488kB active_file:9452kB inactive_file:58492kB unevictable:3072kB writepending:7068kB zspages:0kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:91420kB local_pcp:91420kB free_cma:0kB [ 42.978348][ T5672] lowmem_reserve[]: 0 0 0 0 0 [ 42.978366][ T5672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 42.978429][ T5672] Node 0 Normal: 1799*4kB (UME) 1319*8kB (UME) 880*16kB (UM) 494*32kB (UME) 518*64kB (UME) 299*128kB (UME) 274*256kB (UM) 243*512kB (UME) 211*1024kB (U) 3*2048kB (UE) 542*4096kB (UM) = 2755860kB [ 42.978528][ T5672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 42.978536][ T5672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 42.978542][ T5672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 42.978549][ T5672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 42.978556][ T5672] 18053 total pagecache pages [ 42.978560][ T5672] 0 pages in swap cache [ 42.978563][ T5672] Free swap = 124996kB [ 42.978567][ T5672] Total swap = 124996kB [ 42.978571][ T5672] 2097152 pages RAM [ 42.978574][ T5672] 0 pages HighMem/MovableOnly [ 42.978577][ T5672] 392568 pages reserved [ 42.978581][ T5672] 8192 pages cma reserved [ 42.978584][ T5672] 0 pages hwpoisoned [ 43.684156][ T4715] Bluetooth: hci3: connection err: -111 [ 43.843814][ T5695] loop0: detected capacity change from 0 to 512 [ 43.855021][ T5695] EXT4-fs: Ignoring removed bh option [ 43.878832][ T5695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.922328][ T5695] EXT4-fs (loop0): shut down requested (1) [ 44.344900][ T5712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 44.499477][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.626734][ T5720] loop2: detected capacity change from 0 to 1024 [ 44.634462][ T5720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.647204][ T5719] loop5: detected capacity change from 0 to 8192 [ 44.705229][ T5720] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.311: missing EA_INODE flag [ 44.716052][ T5720] EXT4-fs (loop2): Remounting filesystem read-only [ 44.717694][ T5720] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.815113][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.829815][ T5730] loop4: detected capacity change from 0 to 128 [ 44.849863][ T5730] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.885287][ T5735] loop5: detected capacity change from 0 to 512 [ 44.888475][ T5735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.918413][ T5735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.953649][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.032511][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.170377][ T5751] loop0: detected capacity change from 0 to 2048 [ 45.226657][ T5751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.328308][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.363120][ T5763] netlink: 'syz.5.329': attribute type 6 has an invalid length. [ 45.634143][ T5782] tun0: tun_chr_ioctl cmd 1074025675 [ 45.634172][ T5782] tun0: persist enabled [ 45.634445][ T5782] tun0: tun_chr_ioctl cmd 1074025675 [ 45.634460][ T5782] tun0: persist disabled [ 45.944142][ T5810] input: syz1 as /devices/virtual/input/input4 [ 46.378853][ T5827] syzkaller1: entered promiscuous mode [ 46.378887][ T5827] syzkaller1: entered allmulticast mode [ 46.427404][ T5829] FAULT_INJECTION: forcing a failure. [ 46.427404][ T5829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.427453][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz.1.356 Not tainted syzkaller #0 PREEMPT [ 46.427473][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.427484][ T5829] Call trace: [ 46.427488][ T5829] show_stack+0x2c/0x3c (C) [ 46.427514][ T5829] __dump_stack+0x30/0x40 [ 46.427528][ T5829] dump_stack_lvl+0xd8/0x12c [ 46.427540][ T5829] dump_stack+0x1c/0x28 [ 46.427551][ T5829] should_fail_ex+0x41c/0x590 [ 46.427565][ T5829] should_fail+0x14/0x24 [ 46.427576][ T5829] should_fail_usercopy+0x20/0x30 [ 46.427588][ T5829] _inline_copy_from_user+0x3c/0x174 [ 46.427601][ T5829] __arm64_sys_mq_notify+0xf0/0x180 [ 46.427613][ T5829] invoke_syscall+0x98/0x244 [ 46.427625][ T5829] el0_svc_common+0xec/0x23c [ 46.427637][ T5829] do_el0_svc+0x4c/0x5c [ 46.427648][ T5829] el0_svc+0x64/0x260 [ 46.427659][ T5829] el0t_64_sync_handler+0x44/0x104 [ 46.427669][ T5829] el0t_64_sync+0x198/0x19c [ 46.702660][ T5834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'. [ 46.934820][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 46.939118][ T5848] loop1: detected capacity change from 0 to 512 [ 47.205351][ T5865] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 47.251864][ T4803] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 47.335834][ T5874] loop2: detected capacity change from 0 to 4096 [ 47.348841][ T5874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.396129][ T5874] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.377: corrupted inode contents [ 47.409737][ T5874] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #15: comm syz.2.377: mark_inode_dirty error [ 47.412883][ T5874] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.377: corrupted inode contents [ 47.415735][ T5874] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.377: mark_inode_dirty error [ 47.418696][ T5874] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.377: corrupted inode contents [ 47.421953][ T5874] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.377: mark_inode_dirty error [ 47.425133][ T5874] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.377: corrupted inode contents [ 47.434001][ T5874] EXT4-fs error (device loop2): ext4_truncate:4721: inode #15: comm syz.2.377: mark_inode_dirty error [ 47.447758][ T5874] EXT4-fs error (device loop2) in ext4_setattr:6247: Corrupt filesystem [ 47.459240][ T5888] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.377: corrupted inode contents [ 47.510321][ T5889] ieee802154 phy0 wpan0: encryption failed: -22 [ 47.559070][ T4709] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.560466][ T4709] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.563386][ T4709] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 47.577132][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.619112][ T5891] loop5: detected capacity change from 0 to 512 [ 47.782813][ T5904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.387'. [ 47.861081][ T5907] input: syz0 as /devices/virtual/input/input6 [ 48.007780][ T5914] fido_id[5914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.042502][ T5918] ip6gretap1: entered allmulticast mode [ 48.069840][ T5918] batman_adv: batadv0: Adding interface: ip6gretap1 [ 48.076571][ T5918] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.082998][ T5918] batman_adv: batadv0: Interface activated: ip6gretap1 [ 48.143088][ T5921] loop5: detected capacity change from 0 to 512 [ 48.196421][ T5921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.366668][ T5934] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 48.384137][ T5921] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #18: comm syz.5.395: corrupted inode contents [ 48.387631][ T5921] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 48.400404][ T5921] EXT4-fs error (device loop5): ext4_dirty_inode:6731: inode #18: comm syz.5.395: mark_inode_dirty error [ 48.400466][ T5921] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 48.406370][ T5921] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #18: comm syz.5.395: corrupted inode contents [ 48.406412][ T5921] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 48.425829][ T5921] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #18: comm syz.5.395: mark_inode_dirty error [ 48.425893][ T5921] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 48.428475][ T5921] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2965: inode #18: comm syz.5.395: mark inode dirty (error -117) [ 48.428509][ T5921] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 48.428625][ T5921] EXT4-fs warning (device loop5): ext4_evict_inode:288: xattr delete (err -117) [ 48.486521][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.525112][ T5940] loop4: detected capacity change from 0 to 512 [ 48.545049][ T5940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 48.589019][ T5944] loop5: detected capacity change from 0 to 1024 [ 48.594089][ T5944] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 48.594123][ T5944] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 48.594187][ T5944] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 48.604044][ T5944] EXT4-fs error (device loop5): ext4_get_journal_inode:5927: inode #32: comm syz.5.404: iget: special inode unallocated [ 48.604083][ T5944] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 48.607149][ T5944] EXT4-fs (loop5): no journal found [ 48.607173][ T5944] EXT4-fs (loop5): can't get journal size [ 48.611957][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 48.611970][ C0] EXT4-fs (loop5): initial error at time 48: ext4_get_journal_inode:5927: inode 32 [ 48.611990][ C0] EXT4-fs (loop5): last error at time 48: ext4_get_journal_inode:5927: inode 32 [ 48.620156][ T5944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.655767][ T5944] EXT4-fs (loop5): shut down requested (2) [ 48.694406][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.729627][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 48.823783][ T5953] loop8: detected capacity change from 0 to 8 [ 48.835332][ T5953] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 48.837199][ T5953] loop8: partition table partially beyond EOD, truncated [ 48.839933][ T5953] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 49.047340][ T5192] udevd[5192]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 49.154854][ T5969] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 49.454748][ T5987] FAULT_INJECTION: forcing a failure. [ 49.454748][ T5987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.454792][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.4.418 Not tainted syzkaller #0 PREEMPT [ 49.454811][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 49.454818][ T5987] Call trace: [ 49.454821][ T5987] show_stack+0x2c/0x3c (C) [ 49.454842][ T5987] __dump_stack+0x30/0x40 [ 49.454855][ T5987] dump_stack_lvl+0xd8/0x12c [ 49.454867][ T5987] dump_stack+0x1c/0x28 [ 49.454878][ T5987] should_fail_ex+0x41c/0x590 [ 49.454891][ T5987] should_fail+0x14/0x24 [ 49.454902][ T5987] should_fail_usercopy+0x20/0x30 [ 49.454914][ T5987] _inline_copy_from_user+0x3c/0x174 [ 49.454924][ T5987] __arm64_sys_io_uring_setup+0x1c0/0x290 [ 49.454933][ T5987] invoke_syscall+0x98/0x244 [ 49.454945][ T5987] el0_svc_common+0xec/0x23c [ 49.454957][ T5987] do_el0_svc+0x4c/0x5c [ 49.454968][ T5987] el0_svc+0x64/0x260 [ 49.454979][ T5987] el0t_64_sync_handler+0x44/0x104 [ 49.454989][ T5987] el0t_64_sync+0x198/0x19c [ 49.589356][ T5992] loop0: detected capacity change from 0 to 2048 [ 49.618788][ T5992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.730312][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.788861][ T6011] input: syz1 as /devices/virtual/input/input7 [ 49.917584][ T6022] input: syz1 as /devices/virtual/input/input8 [ 50.004679][ T6024] loop0: detected capacity change from 0 to 1024 [ 50.041362][ T6024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.068239][ T6032] loop2: detected capacity change from 0 to 256 [ 50.076825][ T6032] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.080381][ T6024] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.087806][ T6032] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.096799][ T6024] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.119384][ T6024] overlayfs: inode number too big (/file0, ino=4611686018427387917, xinobits=3) [ 50.205097][ T6034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.226270][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.264697][ T30] audit: type=1400 audit(50.240:3): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="l" requested=r pid=6035 comm="syz.2.438" path="/115/file1" dev="tmpfs" ino=625 [ 50.336589][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.534279][ T6056] EXT4-fs: Ignoring removed oldalloc option [ 50.537961][ T6056] EXT4-fs: Ignoring removed orlov option [ 50.569118][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.635209][ T6056] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.445: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.650930][ T6056] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 50.650981][ T6056] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.650981][ T6056] [ 50.822323][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.123316][ T6092] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.236017][ T6106] EXT4-fs: Ignoring removed orlov option [ 51.247421][ T6106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.367688][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.890996][ T6144] netlink: 44 bytes leftover after parsing attributes in process `syz.4.477'. [ 51.964886][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.479'. [ 51.974344][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.997536][ T6151] bridge_slave_1 (unregistering): left allmulticast mode [ 52.004371][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.113633][ T6159] FAULT_INJECTION: forcing a failure. [ 52.113633][ T6159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.113683][ T6159] CPU: 0 UID: 0 PID: 6159 Comm: syz.4.480 Tainted: G L syzkaller #0 PREEMPT [ 52.113701][ T6159] Tainted: [L]=SOFTLOCKUP [ 52.113704][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 52.113710][ T6159] Call trace: [ 52.113713][ T6159] show_stack+0x2c/0x3c (C) [ 52.113732][ T6159] __dump_stack+0x30/0x40 [ 52.113745][ T6159] dump_stack_lvl+0xd8/0x12c [ 52.113757][ T6159] dump_stack+0x1c/0x28 [ 52.113768][ T6159] should_fail_ex+0x41c/0x590 [ 52.113781][ T6159] should_fail_alloc_page+0xec/0x10c [ 52.113794][ T6159] prepare_alloc_pages+0x194/0x484 [ 52.113803][ T6159] __alloc_frozen_pages_noprof+0x180/0x648 [ 52.113811][ T6159] alloc_pages_mpol+0x1fc/0x3d0 [ 52.113821][ T6159] alloc_frozen_pages_noprof+0xc4/0x10c [ 52.113830][ T6159] alloc_pages_noprof+0x30/0x148 [ 52.113839][ T6159] __pte_alloc+0x40/0x1c4 [ 52.113849][ T6159] walk_pgd_range+0xa8c/0x1850 [ 52.113861][ T6159] __walk_page_range+0x150/0x60c [ 52.113872][ T6159] walk_page_range_vma_unsafe+0x2c0/0x368 [ 52.113884][ T6159] madvise_vma_behavior+0x28d8/0x3370 [ 52.113896][ T6159] madvise_walk_vmas+0x7e0/0x9bc [ 52.113907][ T6159] madvise_do_behavior+0x5f0/0x7c0 [ 52.113918][ T6159] do_madvise+0x28c/0x2f0 [ 52.113929][ T6159] __arm64_sys_madvise+0xac/0xc8 [ 52.113940][ T6159] invoke_syscall+0x98/0x244 [ 52.113952][ T6159] el0_svc_common+0xec/0x23c [ 52.113964][ T6159] do_el0_svc+0x4c/0x5c [ 52.113975][ T6159] el0_svc+0x64/0x260 [ 52.113985][ T6159] el0t_64_sync_handler+0x44/0x104 [ 52.113995][ T6159] el0t_64_sync+0x198/0x19c [ 52.427028][ T6176] syzkaller1: entered promiscuous mode [ 52.427064][ T6176] syzkaller1: entered allmulticast mode [ 53.067021][ T6217] FAULT_INJECTION: forcing a failure. [ 53.067021][ T6217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.067064][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.1.497 Tainted: G L syzkaller #0 PREEMPT [ 53.067083][ T6217] Tainted: [L]=SOFTLOCKUP [ 53.067086][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 53.067092][ T6217] Call trace: [ 53.067095][ T6217] show_stack+0x2c/0x3c (C) [ 53.067115][ T6217] __dump_stack+0x30/0x40 [ 53.067127][ T6217] dump_stack_lvl+0xd8/0x12c [ 53.067139][ T6217] dump_stack+0x1c/0x28 [ 53.067150][ T6217] should_fail_ex+0x41c/0x590 [ 53.067163][ T6217] should_fail+0x14/0x24 [ 53.067174][ T6217] should_fail_usercopy+0x20/0x30 [ 53.067186][ T6217] _inline_copy_from_user+0x3c/0x174 [ 53.067199][ T6217] kstrtouint_from_user+0xcc/0x174 [ 53.067211][ T6217] proc_fail_nth_write+0x9c/0x234 [ 53.067221][ T6217] vfs_write+0x2a4/0xa0c [ 53.067234][ T6217] ksys_pwrite64+0x118/0x1ac [ 53.067246][ T6217] __arm64_sys_pwrite64+0xa8/0xc0 [ 53.067259][ T6217] invoke_syscall+0x98/0x244 [ 53.067271][ T6217] el0_svc_common+0xec/0x23c [ 53.067282][ T6217] do_el0_svc+0x4c/0x5c [ 53.067293][ T6217] el0_svc+0x64/0x260 [ 53.067304][ T6217] el0t_64_sync_handler+0x44/0x104 [ 53.067314][ T6217] el0t_64_sync+0x198/0x19c [ 53.123329][ T6218] comedi comedi0: comedi_config --init_data is deprecated [ 53.188406][ T6224] set_capacity_and_notify: 4 callbacks suppressed [ 53.195021][ T6224] loop5: detected capacity change from 0 to 512 [ 53.236617][ T6224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.253732][ T6224] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.500: corrupted xattr block 33: overlapping e_value [ 53.265338][ T6224] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.500: corrupted xattr block 33: overlapping e_value [ 53.269662][ T6224] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.500: corrupted xattr block 33: overlapping e_value [ 53.285776][ T6224] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.500: corrupted xattr block 33: overlapping e_value [ 53.400157][ T6242] ieee802154 phy0 wpan0: encryption failed: -22 [ 53.509991][ T6247] FAULT_INJECTION: forcing a failure. [ 53.509991][ T6247] name failslab, interval 1, probability 0, space 0, times 0 [ 53.510032][ T6247] CPU: 0 UID: 0 PID: 6247 Comm: syz.4.507 Tainted: G L syzkaller #0 PREEMPT [ 53.510053][ T6247] Tainted: [L]=SOFTLOCKUP [ 53.510057][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 53.510062][ T6247] Call trace: [ 53.510065][ T6247] show_stack+0x2c/0x3c (C) [ 53.510084][ T6247] __dump_stack+0x30/0x40 [ 53.510097][ T6247] dump_stack_lvl+0xd8/0x12c [ 53.510108][ T6247] dump_stack+0x1c/0x28 [ 53.510120][ T6247] should_fail_ex+0x41c/0x590 [ 53.510132][ T6247] should_failslab+0xc4/0x120 [ 53.510145][ T6247] kmem_cache_alloc_noprof+0x94/0x5d4 [ 53.510158][ T6247] security_inode_alloc+0x40/0x304 [ 53.510167][ T6247] inode_init_always_gfp+0x704/0xbac [ 53.510179][ T6247] alloc_inode+0x9c/0x198 [ 53.510189][ T6247] alloc_anon_inode+0x28/0x31c [ 53.510200][ T6247] aio_setup_ring+0xe0/0xad4 [ 53.510209][ T6247] ioctx_alloc+0x2ec/0x780 [ 53.510217][ T6247] __arm64_sys_io_setup+0x14c/0x2f4 [ 53.510226][ T6247] invoke_syscall+0x98/0x244 [ 53.510238][ T6247] el0_svc_common+0xec/0x23c [ 53.510250][ T6247] do_el0_svc+0x4c/0x5c [ 53.510261][ T6247] el0_svc+0x64/0x260 [ 53.510272][ T6247] el0t_64_sync_handler+0x44/0x104 [ 53.510282][ T6247] el0t_64_sync+0x198/0x19c [ 53.572992][ T6253] loop1: detected capacity change from 0 to 512 [ 53.580200][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.584643][ T6253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.669370][ T4887] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.673102][ T4887] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.723879][ T6261] FAULT_INJECTION: forcing a failure. [ 53.723879][ T6261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.723924][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.5.511 Tainted: G L syzkaller #0 PREEMPT [ 53.723944][ T6261] Tainted: [L]=SOFTLOCKUP [ 53.723948][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 53.723954][ T6261] Call trace: [ 53.723957][ T6261] show_stack+0x2c/0x3c (C) [ 53.723976][ T6261] __dump_stack+0x30/0x40 [ 53.723989][ T6261] dump_stack_lvl+0xd8/0x12c [ 53.724000][ T6261] dump_stack+0x1c/0x28 [ 53.724011][ T6261] should_fail_ex+0x41c/0x590 [ 53.724024][ T6261] should_fail+0x14/0x24 [ 53.724035][ T6261] should_fail_usercopy+0x20/0x30 [ 53.724047][ T6261] bpf_verifier_vlog+0x2f0/0xbc0 [ 53.724061][ T6261] btf_verifier_log+0x120/0x1a0 [ 53.724069][ T6261] btf_parse_hdr+0x48c/0x71c [ 53.724078][ T6261] btf_new_fd+0x288/0xa24 [ 53.724090][ T6261] bpf_btf_load+0x144/0x190 [ 53.724100][ T6261] __sys_bpf+0x7f0/0x82c [ 53.724109][ T6261] __arm64_sys_bpf+0xd0/0xec [ 53.724118][ T6261] invoke_syscall+0x98/0x244 [ 53.724130][ T6261] el0_svc_common+0xec/0x23c [ 53.724142][ T6261] do_el0_svc+0x4c/0x5c [ 53.724153][ T6261] el0_svc+0x64/0x260 [ 53.724164][ T6261] el0t_64_sync_handler+0x44/0x104 [ 53.724174][ T6261] el0t_64_sync+0x198/0x19c [ 53.785202][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.893802][ T6267] loop5: detected capacity change from 0 to 2048 [ 53.903379][ T6269] FAULT_INJECTION: forcing a failure. [ 53.903379][ T6269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.903414][ T6269] CPU: 0 UID: 0 PID: 6269 Comm: syz.0.517 Tainted: G L syzkaller #0 PREEMPT [ 53.903430][ T6269] Tainted: [L]=SOFTLOCKUP [ 53.903434][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 53.903440][ T6269] Call trace: [ 53.903443][ T6269] show_stack+0x2c/0x3c (C) [ 53.903463][ T6269] __dump_stack+0x30/0x40 [ 53.903475][ T6269] dump_stack_lvl+0xd8/0x12c [ 53.903494][ T6269] dump_stack+0x1c/0x28 [ 53.903507][ T6269] should_fail_ex+0x41c/0x590 [ 53.903521][ T6269] should_fail+0x14/0x24 [ 53.903532][ T6269] should_fail_usercopy+0x20/0x30 [ 53.903544][ T6269] _inline_copy_from_user+0x3c/0x174 [ 53.903554][ T6269] __arm64_sys_add_key+0x300/0x43c [ 53.903564][ T6269] invoke_syscall+0x98/0x244 [ 53.903576][ T6269] el0_svc_common+0xec/0x23c [ 53.903587][ T6269] do_el0_svc+0x4c/0x5c [ 53.903598][ T6269] el0_svc+0x64/0x260 [ 53.903609][ T6269] el0t_64_sync_handler+0x44/0x104 [ 53.903619][ T6269] el0t_64_sync+0x198/0x19c [ 53.993288][ T6267] loop5: p1 p4 [ 53.993288][ T6267] p1: [ 54.003031][ T6267] loop5: p4 size 589824 extends beyond EOD, truncated [ 54.038789][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.516'. [ 54.059833][ T6267] veth0_macvtap: left promiscuous mode [ 54.064669][ T6267] netlink: 'syz.5.516': attribute type 1 has an invalid length. [ 54.064682][ T6267] netlink: 'syz.5.516': attribute type 2 has an invalid length. [ 54.461746][ T6285] fido_id[6285]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.565421][ T5188] udevd[5188]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 54.582835][ T5930] udevd[5930]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 54.799670][ T6316] loop2: detected capacity change from 0 to 512 [ 54.807326][ T6316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.807378][ T6316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.819892][ T6316] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 54.842658][ T6316] EXT4-fs (loop2): 1 truncate cleaned up [ 54.870792][ T4887] kernel read not supported for file /dummy_udc (pid: 4887 comm: kworker/0:10) [ 54.991877][ T6328] loop1: detected capacity change from 0 to 256 [ 55.013671][ T4887] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 55.015960][ T4887] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.021429][ T6328] bio_check_eod: 11313 callbacks suppressed [ 55.024058][ T6328] syz.1.541: attempt to access beyond end of device [ 55.024058][ T6328] loop1: rw=8912896, sector=1768, nr_sectors = 4 limit=256 [ 55.024108][ T6328] syz.1.541: attempt to access beyond end of device [ 55.024108][ T6328] loop1: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 55.024209][ T6328] syz.1.541: attempt to access beyond end of device [ 55.024209][ T6328] loop1: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 55.024250][ T6328] syz.1.541: attempt to access beyond end of device [ 55.024250][ T6328] loop1: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 55.024289][ T6328] syz.1.541: attempt to access beyond end of device [ 55.024289][ T6328] loop1: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 55.024326][ T6328] syz.1.541: attempt to access beyond end of device [ 55.024326][ T6328] loop1: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 55.024361][ T6328] syz.1.541: attempt to access beyond end of device [ 55.024361][ T6328] loop1: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 55.024394][ T6328] syz.1.541: attempt to access beyond end of device [ 55.024394][ T6328] loop1: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 55.024428][ T6328] syz.1.541: attempt to access beyond end of device [ 55.024428][ T6328] loop1: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 55.024460][ T6328] syz.1.541: attempt to access beyond end of device [ 55.024460][ T6328] loop1: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 55.519147][ T6349] loop5: detected capacity change from 0 to 128 [ 55.569823][ T6342] fido_id[6342]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.799667][ T6361] loop4: detected capacity change from 0 to 512 [ 55.817367][ T6361] EXT4-fs: Ignoring removed bh option [ 55.825010][ T6361] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.825047][ T6361] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 55.860404][ T6364] loop5: detected capacity change from 0 to 1024 [ 55.946150][ T6364] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.557: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.949500][ T6364] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 55.949545][ T6364] EXT4-fs (loop5): This should not happen!! Data will be lost [ 55.949545][ T6364] [ 56.273542][ T6392] loop2: detected capacity change from 0 to 512 [ 56.276945][ T6392] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.570: iget: bad i_size value: 38620345925642 [ 56.276980][ T6392] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.280201][ T6392] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.570: couldn't read orphan inode 15 (err -117) [ 56.280236][ T6392] loop2: lost filesystem error report for type 5 error -117 [ 56.282372][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 56.282386][ C0] EXT4-fs (loop2): initial error at time 56: ext4_orphan_get:1403: inode 15 [ 56.282405][ C0] EXT4-fs (loop2): last error at time 56: ext4_orphan_get:1408 [ 56.365578][ T6392] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.570: bg 0: block 5: invalid block bitmap [ 56.369020][ T6392] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 64 with max blocks 6 with error 28 [ 56.369060][ T6392] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.369060][ T6392] [ 56.369076][ T6392] EXT4-fs (loop2): Total free blocks count 0 [ 56.369090][ T6392] EXT4-fs (loop2): Free/Dirty block details [ 56.369104][ T6392] EXT4-fs (loop2): free_blocks=0 [ 56.369118][ T6392] EXT4-fs (loop2): dirty_blocks=67 [ 56.369129][ T6392] EXT4-fs (loop2): Block reservation details [ 56.369140][ T6392] EXT4-fs (loop2): i_reserved_data_blocks=67 [ 56.431466][ T3617] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 61 with error 28 [ 56.431509][ T3617] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.431509][ T3617] [ 56.739155][ T6424] loop1: detected capacity change from 0 to 256 [ 57.496421][ T6436] syzkaller1: entered allmulticast mode [ 57.656778][ T6453] [ 57.897726][ T6472] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.922032][ T6474] batadv_slave_1: entered promiscuous mode [ 57.934006][ T6473] batadv_slave_1: left promiscuous mode [ 58.073813][ T6472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.118044][ T6472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.202119][ T6472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.307355][ T582] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.310859][ T3617] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.337562][ T3617] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.337852][ T3617] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.783303][ T6519] set_capacity_and_notify: 1 callbacks suppressed [ 58.785010][ T6519] loop0: detected capacity change from 0 to 128 [ 58.789137][ T6519] EXT4-fs (loop0): Test dummy encryption mode enabled [ 58.820217][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 58.837468][ T6519] fscrypt: AES-256-XTS using blk-crypto-fallback [ 59.159983][ T6545] loop5: detected capacity change from 0 to 512 [ 59.161947][ T6546] loop0: detected capacity change from 0 to 512 [ 59.162323][ T6546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.167198][ T6546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.171273][ T6546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 59.171339][ T6546] System zones: 1-12 [ 59.175869][ T6546] EXT4-fs (loop0): 1 truncate cleaned up [ 59.195419][ T6545] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 59.197846][ T6545] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.636: invalid indirect mapped block 2683928664 (level 1) [ 59.201796][ T6545] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.206029][ T6545] EXT4-fs (loop5): 1 truncate cleaned up [ 59.210748][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 59.210770][ C0] EXT4-fs (loop5): initial error at time 59: ext4_free_branches:1023: inode 13 [ 59.210810][ C0] EXT4-fs (loop5): last error at time 59: ext4_free_branches:1023: inode 13 [ 59.581372][ T6565] syzkaller1: entered promiscuous mode [ 59.581404][ T6565] syzkaller1: entered allmulticast mode [ 59.653979][ T6570] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 60.072653][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 60.709778][ T6604] loop0: detected capacity change from 0 to 512 [ 60.777427][ T6604] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.803198][ T6604] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.659: bad orphan inode 131083 [ 60.812207][ T6604] loop0: lost filesystem error report for type 5 error -117 [ 60.820783][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 60.820834][ C0] EXT4-fs (loop0): initial error at time 60: ext4_orphan_get:1429 [ 60.820885][ C0] EXT4-fs (loop0): last error at time 60: ext4_orphan_get:1429 [ 61.015527][ T6607] loop1: detected capacity change from 0 to 256 [ 61.179660][ T6607] bio_check_eod: 6475 callbacks suppressed [ 61.194647][ T6607] syz.1.660: attempt to access beyond end of device [ 61.194647][ T6607] loop1: rw=2049, sector=1800, nr_sectors = 8 limit=256 [ 61.211577][ T6607] loop4: detected capacity change from 0 to 7 [ 61.216519][ T6607] Dev loop4: unable to read RDB block 7 [ 61.216591][ T6607] loop4: AHDI p1 p2 p3 [ 61.216629][ T6607] loop4: partition table partially beyond EOD, truncated [ 61.216878][ T6607] loop4: p1 start 1601398130 is beyond EOD, truncated [ 61.216923][ T6607] loop4: p2 start 1702059890 is beyond EOD, truncated [ 61.350335][ T6609] loop5: detected capacity change from 0 to 128 [ 61.951665][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.951839][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 63.115664][ T6640] device-mapper: ioctl: Unable to rename non-existent device, to .2\´£«.j—DH [ 63.571232][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'. [ 63.571304][ T6645] block nbd0: Unsupported socket: should be TCP or UNIX. [ 64.479216][ T6660] binder: 6658:6660 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000001000000 != 0000000000000000 [ 64.479297][ T6660] binder: 6658:6660 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 64.479346][ T6660] binder: 6660 RLIMIT_NICE not set [ 64.538838][ T1008] cfg80211: failed to load regulatory.db [ 65.824366][ T6676] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 66.663014][ T6690] loop1: detected capacity change from 0 to 512 [ 66.747669][ T6690] EXT4-fs mount: 18 callbacks suppressed [ 66.755413][ T6690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.226674][ T6697] loop5: detected capacity change from 0 to 256 [ 67.228291][ T6697] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.251060][ T6697] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.946227][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.675150][ T6745] loop2: detected capacity change from 0 to 256 [ 74.088693][ T6777] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 74.088774][ T6777] vhci_hcd vhci_hcd.2: invalid port number 96 [ 74.088820][ T6777] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 74.193161][ T6782] loop0: detected capacity change from 0 to 512 [ 74.204072][ T6784] loop2: detected capacity change from 0 to 256 [ 74.341863][ T6782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.535489][ T6782] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 74.535795][ T6782] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 74.535832][ T6782] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.535832][ T6782] [ 74.535865][ T6782] EXT4-fs (loop0): Total free blocks count 0 [ 74.535893][ T6782] EXT4-fs (loop0): Free/Dirty block details [ 74.535923][ T6782] EXT4-fs (loop0): free_blocks=65280 [ 74.535953][ T6782] EXT4-fs (loop0): dirty_blocks=33 [ 74.535979][ T6782] EXT4-fs (loop0): Block reservation details [ 74.536004][ T6782] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 74.869283][ T6792] loop1: detected capacity change from 0 to 128 [ 75.041599][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.580369][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.581027][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.233698][ T6834] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 78.363814][ T6838] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 80.123978][ T6859] loop0: detected capacity change from 0 to 512 [ 80.142450][ T6859] EXT4-fs: Ignoring removed oldalloc option [ 80.191842][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.708137][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.784439][ T6882] loop4: detected capacity change from 0 to 256 [ 82.609495][ T4803] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 82.647537][ T4803] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.090355][ T6892] loop5: detected capacity change from 0 to 512 [ 83.157342][ T6892] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.778: corrupted in-inode xattr: invalid ea_ino [ 83.160313][ T6892] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.164872][ T6892] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.778: couldn't read orphan inode 15 (err -117) [ 83.171299][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 83.171315][ C0] EXT4-fs (loop5): initial error at time 83: ext4_iget_extra_inode:5210: inode 15 [ 83.171344][ C0] EXT4-fs (loop5): last error at time 83: ext4_iget_extra_inode:5210: inode 15 [ 83.179912][ T6892] loop5: lost filesystem error report for type 5 error -117 [ 83.195584][ T6892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.735933][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.741678][ T6897] loop0: detected capacity change from 0 to 256 [ 84.066812][ T6901] loop5: detected capacity change from 0 to 512 [ 84.110070][ T6901] EXT4-fs (loop5): Test dummy encryption mode enabled [ 84.163926][ T6901] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.781: inode has both inline data and extents flags [ 84.163992][ T6901] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.168203][ T6901] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.781: couldn't read orphan inode 15 (err -117) [ 84.168264][ T6901] loop5: lost filesystem error report for type 5 error -117 [ 84.170900][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 84.170916][ C0] EXT4-fs (loop5): initial error at time 84: ext4_orphan_get:1403: inode 15 [ 84.170943][ C0] EXT4-fs (loop5): last error at time 84: ext4_orphan_get:1403: inode 15 [ 84.223905][ T6901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.345584][ T6901] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 84.685101][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.043977][ T6914] FAULT_INJECTION: forcing a failure. [ 85.043977][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.047444][ T6914] CPU: 0 UID: 0 PID: 6914 Comm: syz.2.787 Tainted: G L syzkaller #0 PREEMPT [ 85.047467][ T6914] Tainted: [L]=SOFTLOCKUP [ 85.047473][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 85.047487][ T6914] Call trace: [ 85.047493][ T6914] show_stack+0x2c/0x3c (C) [ 85.047521][ T6914] __dump_stack+0x30/0x40 [ 85.047540][ T6914] dump_stack_lvl+0xd8/0x12c [ 85.047557][ T6914] dump_stack+0x1c/0x28 [ 85.047573][ T6914] should_fail_ex+0x41c/0x590 [ 85.047590][ T6914] should_fail+0x14/0x24 [ 85.047606][ T6914] should_fail_usercopy+0x20/0x30 [ 85.047623][ T6914] __arm64_sys_getrusage+0x12c/0x27c [ 85.047641][ T6914] invoke_syscall+0x98/0x244 [ 85.047658][ T6914] el0_svc_common+0x19c/0x23c [ 85.047674][ T6914] do_el0_svc+0x4c/0x5c [ 85.047690][ T6914] el0_svc+0x64/0x260 [ 85.047706][ T6914] el0t_64_sync_handler+0x44/0x104 [ 85.047722][ T6914] el0t_64_sync+0x198/0x19c [ 87.456678][ T6947] loop4: detected capacity change from 0 to 512 [ 87.464626][ T6947] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.520208][ T6947] EXT4-fs (loop4): 1 truncate cleaned up [ 87.523499][ T6947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.695682][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.802'. [ 87.720601][ T6953] netlink: 'syz.5.802': attribute type 26 has an invalid length. [ 87.929275][ T6957] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 88.278294][ T322] IPVS: starting estimator thread 0... [ 88.354294][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.361063][ T6962] IPVS: using max 11 ests per chain, 26400 per kthread [ 88.745580][ T6966] FAULT_INJECTION: forcing a failure. [ 88.745580][ T6966] name fail_futex, interval 1, probability 0, space 0, times 1 [ 88.745646][ T6966] CPU: 0 UID: 0 PID: 6966 Comm: syz.0.806 Tainted: G L syzkaller #0 PREEMPT [ 88.745665][ T6966] Tainted: [L]=SOFTLOCKUP [ 88.745672][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.745679][ T6966] Call trace: [ 88.745684][ T6966] show_stack+0x2c/0x3c (C) [ 88.745708][ T6966] __dump_stack+0x30/0x40 [ 88.745725][ T6966] dump_stack_lvl+0xd8/0x12c [ 88.745741][ T6966] dump_stack+0x1c/0x28 [ 88.745757][ T6966] should_fail_ex+0x41c/0x590 [ 88.745774][ T6966] should_fail+0x14/0x24 [ 88.745790][ T6966] get_futex_key+0x1ec/0x12b0 [ 88.745807][ T6966] futex_wait_setup+0x58/0x674 [ 88.745823][ T6966] __futex_wait+0x108/0x25c [ 88.745839][ T6966] futex_wait+0x108/0x2c0 [ 88.745854][ T6966] do_futex+0x320/0x378 [ 88.745869][ T6966] __arm64_sys_futex+0x2e4/0x418 [ 88.745885][ T6966] invoke_syscall+0x98/0x244 [ 88.745901][ T6966] el0_svc_common+0x19c/0x23c [ 88.745917][ T6966] do_el0_svc+0x4c/0x5c [ 88.745933][ T6966] el0_svc+0x64/0x260 [ 88.745949][ T6966] el0t_64_sync_handler+0x44/0x104 [ 88.745963][ T6966] el0t_64_sync+0x198/0x19c [ 90.782643][ T6993] input: syz1 as /devices/virtual/input/input10 [ 91.357176][ T7000] loop2: detected capacity change from 0 to 1024 [ 91.410111][ T7000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.498297][ T7000] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.822: lblock 0 mapped to illegal pblock 0 (length 3) [ 91.504524][ T7000] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 91.504593][ T7000] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.504593][ T7000] [ 91.553805][ T7000] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.822: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.558149][ T7000] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5172: inode #15: block 0: len 1: ext4_map_blocks returned -117 [ 91.558497][ T7000] EXT4-fs error (device loop2): ext4_ext_remove_space:2977: inode #15: comm syz.2.822: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 92.351162][ T6951] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 93.311495][ T7023] trusted_key: syz.1.833 sent an empty control message without MSG_MORE. [ 94.608657][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.122809][ T7060] netlink: 32 bytes leftover after parsing attributes in process `syz.1.845'. [ 98.408271][ T7065] FAULT_INJECTION: forcing a failure. [ 98.408271][ T7065] name failslab, interval 1, probability 0, space 0, times 0 [ 98.423342][ T7065] CPU: 0 UID: 0 PID: 7065 Comm: syz.4.847 Tainted: G L syzkaller #0 PREEMPT [ 98.423380][ T7065] Tainted: [L]=SOFTLOCKUP [ 98.423386][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.423395][ T7065] Call trace: [ 98.423402][ T7065] show_stack+0x2c/0x3c (C) [ 98.423429][ T7065] __dump_stack+0x30/0x40 [ 98.423448][ T7065] dump_stack_lvl+0xd8/0x12c [ 98.423465][ T7065] dump_stack+0x1c/0x28 [ 98.423485][ T7065] should_fail_ex+0x41c/0x590 [ 98.423505][ T7065] should_failslab+0xc4/0x120 [ 98.423525][ T7065] kmem_cache_alloc_noprof+0x94/0x5d4 [ 98.423543][ T7065] __ksm_enter+0x3c/0x6ec [ 98.423560][ T7065] ksm_madvise+0x130/0x244 [ 98.423577][ T7065] madvise_vma_behavior+0x958/0x3370 [ 98.423593][ T7065] madvise_walk_vmas+0x4c8/0x9bc [ 98.423611][ T7065] madvise_do_behavior+0x5f0/0x7c0 [ 98.423627][ T7065] do_madvise+0x28c/0x2f0 [ 98.423643][ T7065] __arm64_sys_madvise+0xac/0xc8 [ 98.423659][ T7065] invoke_syscall+0x98/0x244 [ 98.423676][ T7065] el0_svc_common+0x19c/0x23c [ 98.423693][ T7065] do_el0_svc+0x4c/0x5c [ 98.423709][ T7065] el0_svc+0x64/0x260 [ 98.423724][ T7065] el0t_64_sync_handler+0x44/0x104 [ 98.423739][ T7065] el0t_64_sync+0x198/0x19c [ 98.597570][ T7067] loop1: detected capacity change from 0 to 512 [ 98.757195][ T7067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.769454][ T7072] loop5: detected capacity change from 0 to 512 [ 98.792464][ T7072] EXT4-fs: Ignoring removed bh option [ 98.849935][ T7072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.330592][ T7078] FAULT_INJECTION: forcing a failure. [ 99.330592][ T7078] name failslab, interval 1, probability 0, space 0, times 0 [ 99.336637][ T7078] CPU: 0 UID: 0 PID: 7078 Comm: syz.4.852 Tainted: G L syzkaller #0 PREEMPT [ 99.336664][ T7078] Tainted: [L]=SOFTLOCKUP [ 99.336672][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.336682][ T7078] Call trace: [ 99.336689][ T7078] show_stack+0x2c/0x3c (C) [ 99.336714][ T7078] __dump_stack+0x30/0x40 [ 99.336732][ T7078] dump_stack_lvl+0xd8/0x12c [ 99.336749][ T7078] dump_stack+0x1c/0x28 [ 99.336766][ T7078] should_fail_ex+0x41c/0x590 [ 99.336784][ T7078] should_failslab+0xc4/0x120 [ 99.336802][ T7078] __kmalloc_cache_noprof+0x94/0x5fc [ 99.336815][ T7078] x509_cert_parse+0xa4/0x65c [ 99.336831][ T7078] x509_key_preparse+0x74/0x630 [ 99.336846][ T7078] asymmetric_key_preparse+0xcc/0x1c0 [ 99.336860][ T7078] __key_create_or_update+0x2a4/0x848 [ 99.336874][ T7078] key_create_or_update+0x60/0x7c [ 99.336886][ T7078] __arm64_sys_add_key+0x384/0x43c [ 99.336900][ T7078] invoke_syscall+0x98/0x244 [ 99.336917][ T7078] el0_svc_common+0x19c/0x23c [ 99.336933][ T7078] do_el0_svc+0x4c/0x5c [ 99.336949][ T7078] el0_svc+0x64/0x260 [ 99.336965][ T7078] el0t_64_sync_handler+0x44/0x104 [ 99.336981][ T7078] el0t_64_sync+0x198/0x19c [ 99.463023][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.967623][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.773208][ T7094] loop5: detected capacity change from 0 to 8 [ 100.861972][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.856'. [ 101.880333][ T7108] loop0: detected capacity change from 0 to 256 [ 102.014175][ T7110] ptp ptp0: new virtual clock ptp1 [ 102.034859][ T7110] ptp ptp0: guarantee physical clock free running [ 102.049510][ T7108] syz.0.863: attempt to access beyond end of device [ 102.049510][ T7108] loop0: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 102.057178][ T7110] ptp ptp0: delete virtual clock ptp1 [ 102.123331][ T7110] ptp ptp0: only physical clock in use now [ 102.727221][ T7124] loop4: detected capacity change from 0 to 512 [ 102.753168][ T7124] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 102.886211][ T7124] Bluetooth: MGMT ver 1.23 [ 102.886340][ T7124] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 103.442957][ T7135] input: syz0 as /devices/virtual/input/input11 [ 104.781558][ T7158] loop0: detected capacity change from 0 to 256 [ 105.688665][ T7171] loop5: detected capacity change from 0 to 512 [ 105.786551][ T7173] loop1: detected capacity change from 0 to 512 [ 105.819848][ T7173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.852510][ T7173] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.892: invalid block [ 105.855403][ T7173] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.859489][ T7173] EXT4-fs error (device loop1) in ext4_process_orphan:346: IO failure [ 105.859569][ T7173] loop1: lost filesystem error report for type 5 error -5 [ 105.860780][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 105.860814][ C0] EXT4-fs (loop1): initial error at time 105: ext4_get_branch:178: inode 11: block 4294967295 [ 105.860908][ C0] EXT4-fs (loop1): last error at time 105: ext4_process_orphan:346 [ 105.874792][ T7173] EXT4-fs (loop1): 2 truncates cleaned up [ 105.908618][ T7173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.936146][ T7171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.216025][ T7182] loop0: detected capacity change from 0 to 512 [ 106.225245][ T7182] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.232326][ T7182] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.896: bad orphan inode 131083 [ 106.235405][ T7182] loop0: lost filesystem error report for type 5 error -117 [ 106.239551][ T7182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.298875][ T7182] fscrypt (loop0, inode 18): Mutually exclusive encryption flags (0x0c) [ 106.803242][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.836004][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.124242][ T5065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.169418][ T7190] loop1: detected capacity change from 0 to 256 [ 107.508862][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.5.898'. [ 107.511281][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.5.898'. [ 107.511539][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.5.898'. [ 107.511573][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.5.898'. [ 108.943511][ T7216] 9pnet: p9_errstr2errno: server reported unknown error [ 110.499319][ T7241] FAULT_INJECTION: forcing a failure. [ 110.499319][ T7241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.499392][ T7241] CPU: 0 UID: 0 PID: 7241 Comm: syz.1.917 Tainted: G L syzkaller #0 PREEMPT [ 110.499413][ T7241] Tainted: [L]=SOFTLOCKUP [ 110.499419][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 110.499426][ T7241] Call trace: [ 110.499432][ T7241] show_stack+0x2c/0x3c (C) [ 110.499455][ T7241] __dump_stack+0x30/0x40 [ 110.499472][ T7241] dump_stack_lvl+0xd8/0x12c [ 110.499493][ T7241] dump_stack+0x1c/0x28 [ 110.499510][ T7241] should_fail_ex+0x41c/0x590 [ 110.499529][ T7241] should_fail+0x14/0x24 [ 110.499544][ T7241] should_fail_usercopy+0x20/0x30 [ 110.499562][ T7241] _inline_copy_from_user+0x3c/0x174 [ 110.499578][ T7241] __arm64_sys_setitimer+0x138/0x330 [ 110.499594][ T7241] invoke_syscall+0x98/0x244 [ 110.499610][ T7241] el0_svc_common+0x19c/0x23c [ 110.499626][ T7241] do_el0_svc+0x4c/0x5c [ 110.499642][ T7241] el0_svc+0x64/0x260 [ 110.499657][ T7241] el0t_64_sync_handler+0x44/0x104 [ 110.499672][ T7241] el0t_64_sync+0x198/0x19c [ 110.550218][ T10] kernel read not supported for file /video9 (pid: 10 comm: kworker/0:1) [ 111.201383][ T7254] netlink: 48 bytes leftover after parsing attributes in process `syz.1.922'. [ 111.566217][ T7259] netlink: 56 bytes leftover after parsing attributes in process `syz.5.926'. [ 112.171267][ T10] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 60 sec [ 112.584073][ T7278] netlink: 16198 bytes leftover after parsing attributes in process `syz.4.935'. [ 112.863500][ T7282] input: syz0 as /devices/virtual/input/input12 [ 114.401019][ T30] audit: type=1400 audit(114.350:4): lsm=SMACK fn=smack_task_setscheduler action=denied subject="w" object="_" requested=w pid=7303 comm="syz.0.948" opid=7303 ocomm="syz.0.948" [ 115.402713][ T7317] loop5: detected capacity change from 0 to 1024 [ 115.408826][ T7317] EXT4-fs: Ignoring removed bh option [ 115.559703][ T7317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.765654][ T7317] EXT4-fs error (device loop5): ext4_read_inline_dir:1512: inode #12: block 7: comm syz.5.952: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 115.801036][ T7317] EXT4-fs (loop5): Remounting filesystem read-only [ 116.999771][ T7345] FAULT_INJECTION: forcing a failure. [ 116.999771][ T7345] name failslab, interval 1, probability 0, space 0, times 0 [ 117.002828][ T7345] CPU: 0 UID: 0 PID: 7345 Comm: syz.1.965 Tainted: G L syzkaller #0 PREEMPT [ 117.002850][ T7345] Tainted: [L]=SOFTLOCKUP [ 117.002856][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 117.002865][ T7345] Call trace: [ 117.002870][ T7345] show_stack+0x2c/0x3c (C) [ 117.002896][ T7345] __dump_stack+0x30/0x40 [ 117.002913][ T7345] dump_stack_lvl+0xd8/0x12c [ 117.002930][ T7345] dump_stack+0x1c/0x28 [ 117.002946][ T7345] should_fail_ex+0x41c/0x590 [ 117.002964][ T7345] should_failslab+0xc4/0x120 [ 117.002982][ T7345] kmem_cache_alloc_noprof+0x94/0x5d4 [ 117.002999][ T7345] sk_prot_alloc+0x60/0x1e8 [ 117.003017][ T7345] sk_alloc+0x44/0x3ac [ 117.003034][ T7345] unix_create1+0xcc/0x640 [ 117.003049][ T7345] unix_stream_connect+0x25c/0xca0 [ 117.003065][ T7345] p9_fd_create_unix+0x234/0x42c [ 117.003084][ T7345] p9_client_create+0x338/0xa40 [ 117.003099][ T7345] v9fs_session_init+0x58/0xa7c [ 117.003116][ T7345] v9fs_get_tree+0xc4/0x8e8 [ 117.003131][ T7345] vfs_get_tree+0x90/0x28c [ 117.003146][ T7345] fc_mount+0x24/0xac [ 117.003160][ T7345] do_new_mount+0x2a4/0x538 [ 117.003175][ T7345] path_mount+0x5f0/0xa88 [ 117.003190][ T7345] do_mount+0xe8/0x148 [ 117.003205][ T7345] __arm64_sys_mount+0x33c/0x388 [ 117.003221][ T7345] invoke_syscall+0x98/0x244 [ 117.003238][ T7345] el0_svc_common+0x19c/0x23c [ 117.003255][ T7345] do_el0_svc+0x4c/0x5c [ 117.003272][ T7345] el0_svc+0x64/0x260 [ 117.003287][ T7345] el0t_64_sync_handler+0x44/0x104 [ 117.003301][ T7345] el0t_64_sync+0x198/0x19c [ 117.043413][ T7345] 9pnet_fd: p9_fd_create_unix (7345): problem connecting socket: ./proc: -12 [ 117.905017][ T7358] binder: 7356:7358 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 117.905098][ T7358] binder: 7356:7358 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 117.905147][ T7358] binder: 7358 RLIMIT_NICE not set [ 117.970957][ T7358] binder: 7356:7358 ioctl c0306201 20000480 returned -14 [ 118.280013][ T7364] loop2: detected capacity change from 0 to 512 [ 118.294735][ T7364] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.340397][ T7364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.592018][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.977473][ T7387] netlink: 'syz.4.983': attribute type 7 has an invalid length. [ 120.097215][ T7387] netlink: 'syz.4.983': attribute type 7 has an invalid length. [ 120.112655][ T322] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.122976][ T322] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.123077][ T322] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.123135][ T322] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.156856][ T6177] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.927369][ T4724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.931474][ T4724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.952634][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.956130][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.959097][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.101328][ T7411] input: syz0 as /devices/virtual/input/input13 [ 123.789590][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.796135][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.798743][ T7406] bridge_slave_0: entered allmulticast mode [ 123.808713][ T7406] bridge_slave_0: entered promiscuous mode [ 123.887367][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.887465][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.893311][ T7406] bridge_slave_1: entered allmulticast mode [ 123.928149][ T7406] bridge_slave_1: entered promiscuous mode [ 124.011455][ T4724] Bluetooth: hci4: command tx timeout [ 124.167635][ T7406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.208971][ T7406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.462664][ T7406] team0: Port device team_slave_0 added [ 124.467645][ T7406] team0: Port device team_slave_1 added [ 124.724280][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.741012][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.741100][ T7406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.783660][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.783704][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.783754][ T7406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.063322][ T7461] ip_tables: iptables: counters copy to user failed while replacing table [ 125.128425][ T7406] hsr_slave_0: entered promiscuous mode [ 125.141908][ T7406] hsr_slave_1: entered promiscuous mode [ 125.156339][ T7406] debugfs: 'hsr0' already exists in 'hsr' [ 125.156427][ T7406] Cannot create hsr debugfs directory [ 125.355050][ T7465] loop1: detected capacity change from 0 to 512 [ 125.457614][ T7465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.864904][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.951576][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.951679][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.052257][ T7477] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 126.093400][ T4724] Bluetooth: hci4: command tx timeout [ 126.828656][ T7485] input: syz0 as /devices/virtual/input/input15 [ 126.841183][ T7406] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.943635][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.944553][ T7406] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.985335][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.015190][ T7406] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.052729][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.055572][ T7406] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.093129][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.754538][ T7499] syzkaller1: entered promiscuous mode [ 127.754614][ T7499] syzkaller1: entered allmulticast mode [ 127.968354][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.085559][ T7406] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.116580][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.116682][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.159128][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.159224][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.171993][ T4724] Bluetooth: hci4: command tx timeout [ 128.631191][ T4803] psmouse serio2: Failed to reset mouse on : -5 [ 128.644192][ T7508] 9p: Bad value for 'rfdno' [ 130.251579][ T4724] Bluetooth: hci4: command tx timeout [ 130.728262][ T7406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.872990][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1035'. [ 131.025679][ T7539] vlan2 (unregistering): left promiscuous mode [ 131.036985][ T7539] dummy0 (unregistering): left promiscuous mode [ 131.040485][ T7539] bridge0: port 3(vlan2) entered disabled state [ 132.223451][ T7406] veth0_vlan: entered promiscuous mode [ 132.268710][ T7406] veth1_vlan: entered promiscuous mode [ 132.438326][ T7406] veth0_macvtap: entered promiscuous mode [ 132.440937][ T4803] misc userio: Buffer overflowed, userio client isn't keeping up [ 132.503724][ T7406] veth1_macvtap: entered promiscuous mode [ 132.509908][ T7557] loop2: detected capacity change from 0 to 256 [ 132.614613][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.640587][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.811897][ T582] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.812849][ T582] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.817347][ T582] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.820133][ T582] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.148474][ T582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.148529][ T582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.404600][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.404660][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.507668][ T4803] input: PS/2 Generic Mouse as /devices/serio2/input/input16 [ 133.755022][ T4803] psmouse serio2: Failed to enable mouse on [ 135.010624][ T7580] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.010771][ T7580] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.010840][ T7580] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.010888][ T7580] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.010934][ T7580] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.010978][ T7580] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.011022][ T7580] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.011065][ T7580] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.011108][ T7580] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.011151][ T7580] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 136.926769][ T7602] nvme nvme0: using deprecated NVME_IOCTL_IO_CMD ioctl on the char device! [ 137.474395][ T7613] input: syz0 as /devices/virtual/input/input17 [ 140.851175][ T7653] binder: 7652:7653 ioctl c0306201 20000080 returned -14 [ 140.866146][ T7653] binder: 7652:7653 ioctl c0306201 200003c0 returned -14 [ 143.011630][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 144.046882][ T7685] FAULT_INJECTION: forcing a failure. [ 144.046882][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 144.046952][ T7685] CPU: 0 UID: 0 PID: 7685 Comm: syz.6.1090 Tainted: G L syzkaller #0 PREEMPT [ 144.046986][ T7685] Tainted: [L]=SOFTLOCKUP [ 144.046992][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 144.047000][ T7685] Call trace: [ 144.047005][ T7685] show_stack+0x2c/0x3c (C) [ 144.047030][ T7685] __dump_stack+0x30/0x40 [ 144.047048][ T7685] dump_stack_lvl+0xd8/0x12c [ 144.047064][ T7685] dump_stack+0x1c/0x28 [ 144.047080][ T7685] should_fail_ex+0x41c/0x590 [ 144.047098][ T7685] should_failslab+0xc4/0x120 [ 144.047115][ T7685] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 144.047137][ T7685] sock_alloc_inode+0x30/0x180 [ 144.047159][ T7685] alloc_inode+0x68/0x198 [ 144.047175][ T7685] sock_alloc+0x4c/0x204 [ 144.047188][ T7685] __sock_create+0x108/0x670 [ 144.047201][ T7685] sock_create_kern+0x4c/0x64 [ 144.047215][ T7685] smc_create_clcsk+0x40/0xb8 [ 144.047232][ T7685] smc_create+0xe8/0x47c [ 144.047248][ T7685] __sock_create+0x31c/0x670 [ 144.047263][ T7685] __sys_socket_create+0xc0/0x11c [ 144.047277][ T7685] __sys_socket+0x44/0xec [ 144.047290][ T7685] __arm64_sys_socket+0x84/0x9c [ 144.047303][ T7685] invoke_syscall+0x98/0x244 [ 144.047320][ T7685] el0_svc_common+0x19c/0x23c [ 144.047337][ T7685] do_el0_svc+0x4c/0x5c [ 144.047353][ T7685] el0_svc+0x64/0x260 [ 144.047368][ T7685] el0t_64_sync_handler+0x44/0x104 [ 144.047383][ T7685] el0t_64_sync+0x198/0x19c [ 144.047460][ T7685] net_ratelimit: 1334 callbacks suppressed [ 144.047490][ T7685] socket: no more sockets [ 152.680745][ C0] sched: DL replenish lagged too much [ 153.634292][ T4719] Bluetooth: hci3: command 0x0406 tx timeout [ 153.636121][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 153.637858][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 153.639511][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 187.389007][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.390796][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.792750][ T4719] Bluetooth: hci4: command 0x0406 tx timeout [ 248.832396][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.834086][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.601947][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.602054][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.100898][ T31] INFO: task kworker/R-ipv6_:2823 blocked for more than 143 seconds. [ 314.100959][ T31] Tainted: G L syzkaller #0 [ 314.101000][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.101021][ T31] task:kworker/R-ipv6_ state:D stack:0 pid:2823 tgid:2823 ppid:2 task_flags:0x4208060 flags:0x00000410 [ 314.101071][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 314.101123][ T31] Call trace: [ 314.101142][ T31] __switch_to+0x2b4/0x6e4 (T) [ 314.101172][ T31] __schedule+0x1370/0x2d80 [ 314.101199][ T31] schedule+0x13c/0x20c [ 314.101225][ T31] schedule_preempt_disabled+0x18/0x2c [ 314.101252][ T31] __mutex_lock+0x4ec/0xf14 [ 314.101278][ T31] mutex_lock_nested+0x24/0x30 [ 314.101304][ T31] rtnl_lock+0x20/0x2c [ 314.101334][ T31] addrconf_verify_work+0x20/0x3c [ 314.101363][ T31] process_scheduled_works+0x91c/0x1250 [ 314.101425][ T31] rescuer_thread+0x68c/0xd90 [ 314.101455][ T31] kthread+0x304/0x3d4 [ 314.101481][ T31] ret_from_fork+0x10/0x20 [ 314.101564][ T31] [ 314.101564][ T31] Showing all locks held in the system: [ 314.101585][ T31] locks held by kworker/0:0/9: 3, on CPU#0: [ 314.101606][ T31] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 314.101725][ T31] #1: ffff80008ed37c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 314.101842][ T31] #2: ffff800089ee9d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 314.101960][ T31] locks held by kworker/u8:1/13: 3, last CPU#0: [ 314.101982][ T31] #0: ffff0000c8989940 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 314.102098][ T31] #1: ffff80008ed77c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 314.102215][ T31] #2: ffff0000c8d96780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x170/0x794 [ 314.102335][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 314.102356][ T31] #0: ffff800088de2060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 314.102475][ T31] locks held by kworker/u8:2/40: 4, last CPU#0: [ 314.102499][ T31] #0: ffff0000ca92b140 ((wq_completion)krds_cp_wq#3/0){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 314.102616][ T31] #1: ffff8000902b7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 314.102732][ T31] #2: ffff0000d932f680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x170/0x794 [ 314.102849][ T31] #3: ffff800088f02b30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 314.102969][ T31] locks held by kworker/u8:8/404: 3, on CPU#0: [ 314.102990][ T31] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 314.103106][ T31] #1: ffff800092d17c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 314.103222][ T31] #2: ffff800089ee9d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 314.103339][ T31] locks held by kworker/u8:10/582: 3, last CPU#0: [ 314.103360][ T31] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 314.103476][ T31] #1: ffff800092d27c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 314.103595][ T31] #2: ffff800088de2060 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x210/0x144c [ 314.103716][ T31] locks held by kworker/R-ipv6_/2823: 3, on CPU#0: [ 314.103737][ T31] #0: ffff0000cd17b940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 314.103853][ T31] #1: ffff8000991b7c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 314.103970][ T31] #2: ffff800089ee9d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 314.104087][ T31] locks held by udevd/4343: 2, last CPU#0: [ 314.104108][ T31] #0: ffff8000891306b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x190/0x394 [ 314.104225][ T31] #1: ffff800088f02b30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 314.104341][ T31] locks held by dhcpcd/4398: 1, last CPU#0: [ 314.104363][ T31] #0: ffff800088f02b30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 314.104479][ T31] locks held by getty/4491: 2, on CPU#1: [ 314.104503][ T31] #0: ffff0000d13c30a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 314.104619][ T31] #1: ffff8000925de2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 314.104737][ T31] locks held by syz-executor/4697: 1, last CPU#0: [ 314.104757][ T31] #0: ffff800088f02b30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 314.104874][ T31] locks held by syz-executor/4708: 2, last CPU#0: [ 314.104894][ T31] #0: ffff8000891306b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x208/0x460 [ 314.105009][ T31] #1: ffff800088f02b30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 314.105125][ T31] locks held by syz-executor/4709: 1, last CPU#0: [ 314.105146][ T31] #0: ffff800088f02b30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 314.105268][ T31] locks held by syz.0.571/6406: 2, last CPU#0: [ 314.105288][ T31] #0: ffff0000c672ba78 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x158/0xad4 [ 314.105404][ T31] #1: ffff800088de2060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x4c/0x224 [ 314.105581][ T31] locks held by syz.6.1094/7696: 3, last CPU#0: [ 314.105602][ T31] #0: ffff800089edcd08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x438/0x698 [ 314.105717][ T31] #1: ffff800089ee9d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 314.105832][ T31] #2: ffff800088f02b30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 314.105948][ T31] locks held by syz-executor/7708: 1, last CPU#0: [ 314.105970][ T31] #0: ffff800088f02b30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 314.106085][ T31] [ 314.106103][ T31] ============================================= [ 314.106103][ T31] [ 314.106124][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 314.222393][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 314.224358][ T31] Tainted: [L]=SOFTLOCKUP [ 314.225250][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 314.227206][ T31] Call trace: [ 314.227844][ T31] show_stack+0x2c/0x3c (C) [ 314.228787][ T31] __dump_stack+0x30/0x40 [ 314.229703][ T31] dump_stack_lvl+0x30/0x12c [ 314.230633][ T31] dump_stack+0x1c/0x28 [ 314.231497][ T31] vpanic+0x594/0xaf8 [ 314.232361][ T31] vpanic+0x0/0xaf8 [ 314.233176][ T31] hung_task_panic+0x0/0x2c [ 314.234129][ T31] kthread+0x304/0x3d4 [ 314.234985][ T31] ret_from_fork+0x10/0x20 [ 314.235914][ T31] Kernel Offset: disabled [ 314.236776][ T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 314.238176][ T31] Memory Limit: none [ 314.589884][ T31] Rebooting in 86400 seconds..