last executing test programs: 21.899078838s ago: executing program 4 (id=5): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)={[{@rodir}, {@utf8}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@uni_xlateno}, {@fat=@check_normal}, {@shortname_mixed}, {@utf8no}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@rodir}]}, 0x7b, 0x2d5, &(0x7f0000000000)="$eJzs3U+LG2UYAPBnspNk1wrJwZMIDujBU2jrF9hFVizuSZmDXrTYLcgmCBsIWMVsT94FT34Hb34AP4AgfgePFW/2UDqSzEz+77bR3WrL73eZZ+Z9n3nfefOSXQJ58ulrg5M7Xwzv3v/6cS8iicZ+7MfDJLrRiNpZzLUDAHjePSyK+LMoPalva+ksbVzlvACAq/PUf/93ntmUAIAr9uFHH79/cHR0+EGW7UYMvh3lSZTHsv3gbnwe/TiO69GJRxHFTBm/fOvoMNIsqz8MGO1FHjH45Jfq/OBBxDT/RnRidyn/2nwW2VS8ORiP8snIk2MzXkoiDoqk7HIzOvFKRNGM6ibl4d1b9+Jmtp4feSveeuOHav6Pj6MXnfjts0494jz/6PCbG5G9U3z/11flE+QRyXiUt+PO0koV/gMCAAAAAAAAAAAAAAAAAAAAAODS9LKZ7mL9nLoaYK+32p7mEX8M6vx5faD9mNYHqir8jBfq61zPsqwu4zPKm1HW90nj1TTS/+q5AQAAAAAAAAAAAAAAAAAA4P9k+OW9k9v9/vHpUvBzMQn2LuyzGqQLV+qv9T85a3Nw8mPE9lkXBu+1pkHsVFPrJ2tDJHXTFnf+6ZymdhlUdzy7+D57mwaNxnlrmPajnPx326/G69s+4NMH3flU6911cjuJuk+cVau7nLU7yyraMevcX9h19TY8HSZbbMhiw9LtnJvVuqRFaF37p+l7sXqlHTF5naM5W8zlrN2VxWxOgl8v7TVdfadIFuLGv3/jAQAAAAAAAAAAAAAAAAAA1sy/9Bu/rzXeXzrzW/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvLDmv/8/C6K7emU1GFfJ0yuNKutRUWzq3D4dbhi2G29Pjw+e6cMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwvo7AAD//4BBSjY=") 21.555829325s ago: executing program 4 (id=9): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x88d80a, 0x0, 0x20, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 20.882384426s ago: executing program 4 (id=12): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000a40)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc415811a2970bbb79c9fe1c95293dbe00000036b03632dab46a43226a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRES8, @ANYRES64, @ANYRESOCT=r0, @ANYRES8, @ANYBLOB="7b8eb47a42f5dc0f8b79825f0547187313016ec6df713f691656646ebc4e8515b28415035664ad6dcfdc39308160e48db98e20a63e69637f6a3d1d6876d0671e79b5f7fddd4579b2a1739875bc5921d08ff3c54bc1de61e4e090ce8a201084b6d299fb9c9eb05164d90b42a45e11785c3faea816feef9996c68c98fc3840dd143d2caae0e641aeec5a67dee070c3f9edbe01d73092bad65a11a31788288b329d83239c224fc712154237fb82c0727b2e05b18386a18b88d5b849d7e33d9f87002b07015fc5b9f6efab96c4f29ad518855c", @ANYRES8=0x0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f00000000c0)="$eJzs3V1v094dwPGfSzuiTOqmMSFUFTiUTSpSCU4CQRFXnnOSHkjsyHZQe4UqmqKKFCbKpLU30Bu2SduLYJd7EXtH6P8S+MsP6WMegD5SfT9VOY59fM7PbuQfp42PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOXWbLtoSdN4nSU1nFsL/Nbey2zvIyvk3oFiRL8iVvwtuZzcSFfd+OPe5uuWyMfdV7OSi4ucbP/2+u+fXJuc6O8/IuDv8t8fbGlza/v1Sq/XfXdSgVxAN68O39bQngl903IaWpnQV9VKxX6wWA9V3TR1uBxGuqXcQDuRH6h5954qVqtlpQvLfsdr1Jym7q98fL9k2xX1tNDWThD63oOnhdBdNM2m8RpJnXhzXOdx/EZ8ZiIVaael1Np6r1sedwBxpeK3VCqNq1SyS6VisVQqVh5VHz227ckjK+xD5EiNk3vT4ud0Ytdu4LgmsvwvTTHiSUeWRA38cqUmgfjSGrI908//f36gR/a7P//Ppqtmb+xtnon/mZNb6atbw/L/kFhO+GuyH9XRbZuyJdvyWlakJz3pyruziejCfDVEiydGQvHFSEucZI3K1iipSkUqYssLWZT6VHwO62KkKVpCWZZQItHJO8qVQLQ4EokvgSiZF1fuiZKiVKUqZVGipSDL4ktHPGlITZyklTVZT857WZQ1LMbdSsWhh5Hv/4S7UhpxtOR/HN8JXbmB4/vaz/8AAAAAAODSspLfvk8l3zeT13XT1PZ5hwUAAAAAAE5Q8pf/2bhIPp11UyzG/wAAAAAAXDZWco+dJSJ5uZ0urYmV3C7FLwEAAAAAALgkkr//34qLZA6U22LtTpfC+B8AAAAAgEvin7uz7w6bYzdsX7X+/4sEwZS10176k7WRzM3rbFxJ97tyuMWoPmNNZ40kRSUtJiddPWvl0kq7k2B+yYq1cXFYewE4uwF8/J4Ark3Kv+VOWufOalquZlt+l/aSr5umLrh+80lRHGd6ItJL0d/erP9dksP/l9eatnKy3usWXr7trSax7MSt7GxkEygemUdxRCzvk/kWknsuBh7xVHIjRtZv3pK19V7Xbi9dzVp2NibShYmDPX6YHtHnJ5lLa81lM97m+1vSPnNxn8XCsKPPoige88g/yd20zt35u2kxIIrSuChK+6MYfC6OH0V5XBTlY0YBAOdlbUwWsuRI3v2Bq9yh7B5f9r4hu8t3ZvdPMp/WmZ9JLqyTMwOu6Pa4K7p9zOz2vyPPQBqWY+N+/3Moq36Od/g8tN+wWbLiU3jl/cZf5frm1vb99Y2VV91X3TelUrliP7TtRyWZSg4jK8g9AIAB9j9jxxqY/0c9hefr1zh3P8xG1TuHR9VZxvvD7kcKCvJS3kpPVmUhudsg+cTBwP935Pd9DGFhzKg1n6TJ9AkvCyNGdb9J7nLot1saWfdgDOWz+FEAAHBm5sbk4dH5Px27L4wZdx/M5aNHx/l9T2sDAACnQwdfrHz0DysITPtFsVotOtGiVkFOnqnA1BpaGS/SgbvoeA2t2oEf+a7fjBeem5oOVdhpt/0gUnU/UG0/NEvJ9IEqe/R7qFuOFxk3bDe1E2rl+l7kuJGqmdBV7c5fmiZc1EGyc9jWrqkb14mM76nQ7wSuLigVar2voqlpLzJ1Ey96qh2YlhPk1HO/2WlpVdOhG5h25KcN9vsyXt0PWkmzhfM+2QAAXBCbW9uvV3q97rtTXBjYce7MDxUAAGTGZGkAAAAAAAAAAAAAAAAAAAAAAHABnMX9fyxc8oX+VNA/3k5OTi9CS877/PyUC2MvHR9O/eIE4FT9GgAA//9t+k3W") openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f000000a3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 19.836830565s ago: executing program 4 (id=18): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000940)=ANY=[@ANYRES8], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000100)={[{@dir_resv_level={'dir_resv_level', 0x3d, 0x402}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@noacl}, {@journal_async_commit}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x3}}, {@acl}]}, 0xfd, 0x4421, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6KqfxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//zBiH1E=") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000021300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d811, 0x0, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x55bf9eb, 0x0) getdents64(r0, 0x0, 0x4f) 19.225775383s ago: executing program 4 (id=20): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x21, 0x61b6, &(0x7f00000075c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) 18.936469567s ago: executing program 32 (id=20): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x21, 0x61b6, &(0x7f00000075c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) 6.183571141s ago: executing program 3 (id=55): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x54}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 5.053937604s ago: executing program 3 (id=66): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x3f, 0x0, 0x80000000}}) 4.976595198s ago: executing program 3 (id=68): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000000)={'team0\x00', @ifru_names='bond_slave_1\x00'}) 4.798083286s ago: executing program 3 (id=70): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000004", 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0xf700, {[@fastopen={0x1e, 0x5, 'MN,'}]}}}}}}}}, 0x0) 4.689372501s ago: executing program 3 (id=73): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2890) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x1c890) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) prlimit64(r2, 0x3, &(0x7f0000000080)={0x3}, &(0x7f0000000180)) 3.990207054s ago: executing program 5 (id=21): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51b8, &(0x7f0000005280)="$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") 2.56073227s ago: executing program 1 (id=86): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, &(0x7f0000000100)) 2.245970035s ago: executing program 1 (id=88): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) writev(r0, &(0x7f0000001080)=[{&(0x7f0000000ec0)="69c1b4", 0x3}], 0x1) 2.203383857s ago: executing program 0 (id=89): r0 = io_uring_setup(0x63f4, &(0x7f0000000080)={0x0, 0x5290, 0x10000, 0x3, 0x5d8}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, 0x0, 0x1) 2.198176717s ago: executing program 2 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x2a020400) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x4060000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) ptrace(0x4208, r3) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8dbbc4ff5c20b497, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x8, 0x4}, @float={0x4, 0x0, 0x0, 0x10, 0x10}, @ptr={0xa}]}, {0x0, [0x0, 0x5f, 0x30, 0x30]}}, &(0x7f0000000240)=""/16, 0x46, 0x10, 0x0, 0xd36}, 0x28) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@loopback, @loopback, 0x0}, &(0x7f0000000300)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @flow_dissector=0x11, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r8, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7002091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) sendmsg$kcm(r4, 0x0, 0x40800) 2.070161253s ago: executing program 5 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30"], 0x104}}, 0x0) 2.010049616s ago: executing program 0 (id=92): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1c, 0x7f, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fd0800", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x92, 0x100, @void}}}}}}}}, 0x0) 1.914536501s ago: executing program 0 (id=93): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x39, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) 1.785619026s ago: executing program 1 (id=94): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x8040480) setsockopt$packet_buf(r0, 0x107, 0x2, 0x0, 0x0) 1.101990248s ago: executing program 1 (id=95): setns(0xc9, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 1.101810179s ago: executing program 2 (id=96): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r0, @ANYBLOB="0000000080410000140012800b00010069703667726500000e00000008003a00f8ff07"], 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000094) 1.05061401s ago: executing program 0 (id=97): r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0) ftruncate(r0, 0x6400000) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) r3 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0) ftruncate(r3, 0x6400000) syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='md0\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='7:0\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='7:1\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='raid1\x00', 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r8, &(0x7f0000000480)='2\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-loop0/slot\x00', 0x101081, 0x0) write(r9, &(0x7f0000000500)="3002", 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-loop1/slot\x00', 0x1, 0x0) write(r10, &(0x7f0000000580)='1\x00', 0x2) r11 = openat(r7, &(0x7f00000005c0)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x40) write(r11, &(0x7f0000000600)='external\x00', 0x9) r12 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/bitmap/chunksize\x00', 0x1, 0x0) write(r12, &(0x7f0000000680)='4096\x00', 0x5) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/bitmap/time_base\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)='readonly\x00', 0x9) 936.322896ms ago: executing program 5 (id=98): socket$key(0xf, 0x3, 0x2) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xfffffffe, 0xe0, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x201}, 0x8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}) 849.1605ms ago: executing program 2 (id=99): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 762.653764ms ago: executing program 0 (id=100): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$eJzs20tvG0UcAPD/rp30TUIpjz6AQEFEPJImLdADQgKBxAUJCQ7lGJK0KnUb1ASJVhEEhLiiStwRRyQ+ASe4IOCExJUPgCpVKJcWTkZr7yaO4zycOnHAv5+09czuuDN/74w9u5MNoGcNZf8kEQcj4o+IGKhnVxYYqr/cWZyf/HtxfjKJavXtv5JauduL85NF0eJ9B/LMcBqRfp7E8Rb1zl67fmmiUpm+mufL+etzFy9PXJi+MH1l/OzZM6fHXnxh/PmOxJm16faxj2dOHH3j3RtvTp678d4v3yVF/E1xdMjQy+scfLJa7XB13XWoIZ2Uu9gQ2lLKx15fbfwPRCmWT95AvP5ZVxsHbKtqtVo9sPbhhSrwP5ZEt1sAdEfxQ59d/xbbDk09doVbr9QvgLK47+Rb/Ug50rxMX9P1bScNRcS5hX++zrbYnvsQAAAr/JDNf55tNf9L44GGcvfka0ODEXFvRByOiPsi4khE3B9RK/tgRDzUZv1DTfnV85/05pYC26Rs/vdSvra1cv5XzP5isJTnDtXi70vOX6xMn8o/k+Ho25Plx9ap48fXfv9yrWON879sy+ov5oJ5O26W96x8z9TE3MTdxNzo1qcRx8qt4k+WVgKSiDgaEce2WMfFp789sdaxjeNfRwfWmarfRDxVP/8L0RR/IUuNzl3+YHT22vUW65Oje6MyfWq06BWr/frbF2+tVf9dxd8B2fnf37L/L8U/mDSu18629//v2eD4Vvt/f/JOLd2f7/toYm7u6lhE/6WVnaK2f3x1viifxT98svX4PxzLn8TxiMg68cMR8UhEPJq3/bGIeDwiTq4T48+vPvH+1uPfXln8U22d/+VEfzTvaZ0oXfrp+9jbUOlgO/Fn5/9MLTWc79nM999m2tV+bwYAAID/pjQiDkaSjiyl03RkpP738kdif1qZmZ175vzMh1em6s8IDEZfWtzpGmi4HzqWX9YX+fGm/On8vvFXpX21/MjkTGWq28FDjzuwxvjP/FnqduuAbed5Lehdxj/0LuMfepfxD72rxfjf1412ADuv1e//J11oB7Dzmsa/ZT/oIa7/oXcZ/9C7jH/oSbP7YuOH5CUkViUi3RXN2MZEUt4VzehSotvfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Eg/hCA==") chdir(&(0x7f0000000140)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) setuid(0xee01) socket$nl_route(0x10, 0x3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 625.866341ms ago: executing program 5 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}, 0x1, 0x0, 0x0, 0x2004c850}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 625.652521ms ago: executing program 2 (id=102): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast}) write$UHID_DESTROY(r0, 0x0, 0x0) 597.776192ms ago: executing program 1 (id=103): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0009}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) fchdir(r0) 443.999919ms ago: executing program 0 (id=104): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000004c0)={[{@barrier}, {@nodioread_nolock}, {@discard}, {@barrier}, {@block_validity}, {@resuid}, {@lazytime}, {@block_validity}, {@errors_continue}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001600)={0x1, 0x0, 0x0}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 386.028872ms ago: executing program 1 (id=105): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) 347.725194ms ago: executing program 2 (id=106): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(r1) close(0x4) 67.481637ms ago: executing program 3 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912', 0x14) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) close(r4) nanosleep(&(0x7f00000006c0)={0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r0, &(0x7f0000000000)='3', 0x4e) syz_emit_ethernet(0x32, &(0x7f0000000280)={@remote, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x14, 0x24, 0x66, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x3, "0e92d1", 0x0, "45f87f"}}}}}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 42.240212][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.253908][ T3851] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. syzkaller login: [ 62.912076][ T4173] cgroup: Unknown subsys name 'net' [ 63.038457][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.518939][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.973976][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 66.003354][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.067623][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.081478][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 66.114899][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 66.135847][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.143187][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.151099][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.192531][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.199644][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.208333][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.231413][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.238615][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.247111][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.258604][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.265865][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.274240][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.324546][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.339027][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.357060][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.372834][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.425922][ T4186] team0: Port device team_slave_0 added [ 66.434334][ T4186] team0: Port device team_slave_1 added [ 66.461007][ T4192] team0: Port device team_slave_0 added [ 66.474726][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.482099][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.490211][ T4199] device bridge_slave_0 entered promiscuous mode [ 66.506157][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.513600][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.521386][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.530897][ T4192] team0: Port device team_slave_1 added [ 66.536811][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.544231][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.552842][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.574060][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.581120][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.590967][ T4199] device bridge_slave_1 entered promiscuous mode [ 66.599093][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.606395][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.633052][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.651728][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.659109][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.667621][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.688093][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.695274][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.721494][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.744542][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.751753][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.759547][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.768484][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.784315][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.791290][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.817546][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.830782][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.837879][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.864053][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.882279][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.900354][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.926407][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.951406][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.969555][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.989145][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.996386][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.019009][ T4188] team0: Port device team_slave_0 added [ 67.055285][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.063071][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.069717][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.077684][ T4192] Cannot create hsr debugfs directory [ 67.084724][ T4188] team0: Port device team_slave_1 added [ 67.093030][ T4199] team0: Port device team_slave_0 added [ 67.100984][ T4187] team0: Port device team_slave_0 added [ 67.109198][ T4187] team0: Port device team_slave_1 added [ 67.138803][ T4199] team0: Port device team_slave_1 added [ 67.168703][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.175760][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.201928][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.219978][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.227407][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.253554][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.269560][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.276825][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.303014][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.320970][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.328663][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.354650][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.396311][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.403342][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.429505][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.442869][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.449848][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.476133][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.527404][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.534797][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.542527][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.550118][ T4188] Cannot create hsr debugfs directory [ 67.571427][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.578229][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.585009][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.592825][ T4187] Cannot create hsr debugfs directory [ 67.656826][ T4199] device hsr_slave_0 entered promiscuous mode [ 67.664061][ T4199] device hsr_slave_1 entered promiscuous mode [ 67.670661][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.678368][ T4199] Cannot create hsr debugfs directory [ 67.692719][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 67.692784][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 67.707425][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 67.721740][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 67.740743][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 67.949594][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.965391][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.975909][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.985922][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.033862][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.051041][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.063046][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.076186][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.125308][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.155520][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.168410][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.188068][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.203933][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.241439][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.258207][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.272176][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.293398][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.341253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.351006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.370897][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.389706][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.424800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.435289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.445621][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.452923][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.463215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.473668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.483213][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.490310][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.499453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.510030][ T4199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.530188][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.537992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.548465][ T4199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.560884][ T4199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.589398][ T4199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.602101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.614052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.624035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.633152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.642251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.650995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.665293][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.674055][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.689120][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.705132][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.713488][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.721388][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.730909][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.739081][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.748539][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.768570][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.778920][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.801752][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.810663][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.829440][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.836609][ T541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.851671][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.860534][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.874805][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.881954][ T541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.890588][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.902295][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.926460][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.936671][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.950533][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.966114][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.979118][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.986263][ T541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.995605][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.028181][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.040387][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.055184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.066670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.076580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.085810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.095013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.104818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.113591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.122262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.135088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.145218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.180059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.193743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.208903][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.216046][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.230759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.239986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.255332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.267036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.275077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.283494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.311491][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.321138][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.338660][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.354198][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.361281][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.405626][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.422894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.433647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.442990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.451498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.461393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.471289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.480402][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.487519][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.497855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.506468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.516907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.525869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.535002][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.542126][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.549813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.559651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.572345][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.590233][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.617336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.633816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.647659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.657022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.671875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.679361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.695525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.717520][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.728031][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.737787][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.744916][ T541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.766515][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.779339][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.787788][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 69.794964][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 69.801889][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 69.807995][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 69.814520][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 69.814975][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.835494][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.848227][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.858672][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.896332][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.907841][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.921055][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.931194][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.940597][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.949279][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.956492][ T541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.966994][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.975567][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.984130][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.993439][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.002025][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.010439][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.020530][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.028816][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.063757][ T4192] device veth0_vlan entered promiscuous mode [ 70.074763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.090322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.102768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.118610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.127953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.143153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.157490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.166618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.198084][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.211435][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.227019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.241267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.272660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.307322][ T4188] device veth0_vlan entered promiscuous mode [ 70.324988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.342145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.350859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.365295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.378073][ T4192] device veth1_vlan entered promiscuous mode [ 70.405296][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.416211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.433138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.445777][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.454049][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.463771][ T4188] device veth1_vlan entered promiscuous mode [ 70.516788][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.529016][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.550968][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.564988][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.580224][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.598082][ T4192] device veth0_macvtap entered promiscuous mode [ 70.617633][ T4188] device veth0_macvtap entered promiscuous mode [ 70.633355][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.645606][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.657477][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.666651][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.678794][ T4192] device veth1_macvtap entered promiscuous mode [ 70.707847][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.716002][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.725464][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.734973][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.743908][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.751368][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.761255][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.780842][ T4188] device veth1_macvtap entered promiscuous mode [ 70.791896][ T4187] device veth0_vlan entered promiscuous mode [ 70.806548][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.819136][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.830736][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.846129][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.864646][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.879404][ T4187] device veth1_vlan entered promiscuous mode [ 70.894996][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.908819][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.917644][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.934572][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.959143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.974010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.000745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.011912][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.023437][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.036256][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.047428][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.061256][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.073073][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.082430][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.091273][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.101223][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.110848][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.126720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.135665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.145583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.157052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.174765][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.185226][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.194419][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.203740][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.215793][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.223485][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.261961][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.270760][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.299723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.308712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.333212][ T4187] device veth0_macvtap entered promiscuous mode [ 71.358773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.374258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.384464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.393502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.402440][ T4186] device veth0_vlan entered promiscuous mode [ 71.410575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.419493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.427886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.440371][ T4187] device veth1_macvtap entered promiscuous mode [ 71.489561][ T4186] device veth1_vlan entered promiscuous mode [ 71.503696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.512565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.520705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.529987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.542068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.551271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.590120][ T4199] device veth0_vlan entered promiscuous mode [ 71.619271][ T541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.626306][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.635222][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.642840][ T541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.653868][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.667371][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.678012][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.688630][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.701329][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.723156][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.731244][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.740112][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.749482][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.759426][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.779837][ T4199] device veth1_vlan entered promiscuous mode [ 71.791057][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.803493][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.813813][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.825328][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.837002][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.860000][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.869223][ T4238] Bluetooth: hci4: command 0x040f tx timeout [ 71.876748][ T4238] Bluetooth: hci1: command 0x040f tx timeout [ 71.884029][ T4238] Bluetooth: hci3: command 0x040f tx timeout [ 71.886213][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.890260][ T4238] Bluetooth: hci2: command 0x040f tx timeout [ 71.905506][ T4238] Bluetooth: hci0: command 0x040f tx timeout [ 71.912276][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.921347][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.939975][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.948284][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.956823][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.966042][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.984594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.994341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.006262][ T541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.015173][ T541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.051474][ T4186] device veth0_macvtap entered promiscuous mode [ 72.059126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.067922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.105182][ T4186] device veth1_macvtap entered promiscuous mode [ 72.118016][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.134634][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.151370][ T4199] device veth0_macvtap entered promiscuous mode [ 72.166528][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.179247][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.191177][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.202731][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.211453][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.229866][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.245891][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.257777][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.269211][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.279306][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.289791][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.303703][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.317122][ T4199] device veth1_macvtap entered promiscuous mode [ 72.347117][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.363942][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.379059][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.403199][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.420207][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.431558][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.443502][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.458264][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.471264][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.489502][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.500463][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.519012][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.528902][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.538290][ T4266] loop2: detected capacity change from 0 to 2048 [ 72.557654][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.581644][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.591511][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.604869][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.619861][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.631416][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.652094][ T4267] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.664523][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.697817][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.715334][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.726215][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.731178][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.746589][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.759675][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.771737][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.782790][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.808748][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.829780][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.849121][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.872392][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.882001][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.891084][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.899981][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.909359][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.949325][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.974494][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.992256][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.009059][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.022235][ T4272] loop2: detected capacity change from 0 to 512 [ 73.054327][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.101230][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.122035][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.130781][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.201411][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.225722][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.248768][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.419334][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.443212][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.475686][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.516764][ T4276] loop0: detected capacity change from 0 to 4096 [ 73.522169][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.536258][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.553376][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.585424][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.597478][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.602752][ T4272] attempt to access beyond end of device [ 73.602752][ T4272] loop2: rw=524288, want=17179852722, limit=512 [ 73.614274][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.628648][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.639926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.649032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.667255][ T4272] attempt to access beyond end of device [ 73.667255][ T4272] loop2: rw=0, want=17179852714, limit=512 [ 73.685368][ T4276] EXT4-fs (loop0): Ignoring removed nobh option [ 73.690307][ T4270] loop1: detected capacity change from 0 to 32768 [ 73.702053][ T26] audit: type=1800 audit(1789741397.432:2): pid=4272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6" name="file2" dev="loop2" ino=1048586 res=0 errno=0 [ 73.784662][ T4270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4270) [ 73.914723][ T4282] loop4: detected capacity change from 0 to 256 [ 73.943367][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 73.953671][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 73.975811][ T4270] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 73.984986][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 73.997895][ T4282] FAT-fs (loop4): bogus logical sector size 46 [ 74.014720][ T4282] FAT-fs (loop4): Can't find a valid FAT filesystem [ 74.023599][ T4284] /dev/loop0: Can't open blockdev [ 74.031609][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 74.042265][ T4270] BTRFS info (device loop1): setting nodatacow, compression disabled [ 74.050414][ T4270] BTRFS info (device loop1): disabling tree log [ 74.056929][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 74.098932][ T4276] EXT4-fs (loop0): Test dummy encryption mode enabled [ 74.139945][ T4287] loop2: detected capacity change from 0 to 1764 [ 74.146544][ T4276] EXT4-fs (loop0): Ignoring removed bh option [ 74.163412][ T4270] BTRFS info (device loop1): max_inline at 0 [ 74.203281][ T4270] BTRFS info (device loop1): using free space tree [ 74.209862][ T4270] BTRFS info (device loop1): has skinny extents [ 74.239361][ T4276] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 74.417111][ T4301] loop4: detected capacity change from 0 to 1024 [ 74.567511][ T4301] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 74.569804][ T4316] loop2: detected capacity change from 0 to 128 [ 74.613617][ T4316] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.708009][ T4316] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.938015][ T4276] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 75.031001][ T4334] loop4: detected capacity change from 0 to 164 [ 75.054263][ T4327] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 75.106466][ T4334] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 75.444897][ T4339] loop0: detected capacity change from 0 to 256 [ 75.680752][ T4308] F2FS-fs (loop3): invalid crc value [ 75.769729][ T4308] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.906394][ T4186] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 75.987391][ T4308] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 76.000808][ T4186] ISOFS: unable to read i-node block [ 76.035558][ T4186] ISOFS: unable to read i-node block [ 76.211929][ T4360] attempt to access beyond end of device [ 76.211929][ T4360] loop3: rw=524288, want=45072, limit=40427 [ 76.282168][ T4360] attempt to access beyond end of device [ 76.282168][ T4360] loop3: rw=0, want=45072, limit=40427 [ 76.389995][ T4199] attempt to access beyond end of device [ 76.389995][ T4199] loop3: rw=2049, want=45112, limit=40427 [ 76.485160][ T4354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.16 (4354) [ 76.540584][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.569908][ T4354] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 76.589951][ T4354] BTRFS info (device loop0): setting nodatacow, compression disabled [ 76.612814][ T4354] BTRFS info (device loop0): disabling tree log [ 76.619264][ T4354] BTRFS info (device loop0): max_inline at 0 [ 76.640809][ T4354] BTRFS info (device loop0): using free space tree [ 76.649409][ T4354] BTRFS info (device loop0): has skinny extents [ 76.717011][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.822576][ T4356] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.14 (4356) [ 76.960333][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.052292][ T4356] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 77.129179][ T4358] ERROR: (device loop2): diRead: i_ino != di_number [ 77.129179][ T4358] [ 77.140094][ T4356] BTRFS info (device loop1): using free space tree [ 77.146792][ T4356] BTRFS info (device loop1): has skinny extents [ 77.154782][ T4358] ERROR: (device loop2): remounting filesystem as read-only [ 77.245588][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.376460][ T4402] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.19: bg 0: block 5: invalid block bitmap [ 77.487015][ T4321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4321) [ 77.499414][ T4356] BTRFS info (device loop1): enabling ssd optimizations [ 77.631682][ T4402] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 77.644192][ T4356] BTRFS warning (device loop1): get dev_stats failed, device not found [ 77.718926][ T4402] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.19: invalid indirect mapped block 3 (level 2) [ 77.758770][ T4402] EXT4-fs (loop3): 1 orphan inode deleted [ 77.779972][ T4402] EXT4-fs (loop3): 1 truncate cleaned up [ 77.794767][ T4402] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: writeback. [ 77.873653][ T26] audit: type=1800 audit(1789741401.612:3): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 78.004832][ T4382] chnl_net:caif_netlink_parms(): no params data found [ 78.022040][ T26] audit: type=1800 audit(1789741401.662:4): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 78.354141][ T4441] set_capacity_and_notify: 5 callbacks suppressed [ 78.354158][ T4441] loop3: detected capacity change from 0 to 128 [ 78.453017][ T4441] ======================================================= [ 78.453017][ T4441] WARNING: The mand mount option has been deprecated and [ 78.453017][ T4441] and is ignored by this kernel. Remove the mand [ 78.453017][ T4441] option from the mount to silence this warning. [ 78.453017][ T4441] ======================================================= [ 78.629581][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.642878][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.702686][ T4382] device bridge_slave_0 entered promiscuous mode [ 78.720142][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.732684][ T4441] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000001000000,quota,,errors=continue. Quota mode: writeback. [ 78.759347][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.825669][ T4427] loop2: detected capacity change from 0 to 32768 [ 78.851034][ T4382] device bridge_slave_1 entered promiscuous mode [ 78.859238][ T4441] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.006057][ T4382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.052098][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 79.090917][ T4427] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 79.120541][ T4435] loop1: detected capacity change from 0 to 32768 [ 79.226661][ T4438] loop0: detected capacity change from 0 to 32768 [ 79.250005][ T4382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.298605][ T4382] team0: Port device team_slave_0 added [ 79.318991][ T4382] team0: Port device team_slave_1 added [ 79.386957][ T4438] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 79.402217][ T4459] loop3: detected capacity change from 0 to 128 [ 79.449006][ T4438] BTRFS info (device loop0): setting nodatasum [ 79.456777][ T4438] BTRFS info (device loop0): force zlib compression, level 3 [ 79.468177][ T4438] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 79.482131][ T4435] XFS (loop1): Mounting V5 Filesystem [ 79.511676][ T4438] BTRFS info (device loop0): use lzo compression, level 0 [ 79.518923][ T4438] BTRFS info (device loop0): turning on flush-on-commit [ 79.540031][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.576327][ T4438] BTRFS info (device loop0): enabling auto defrag [ 79.600907][ T4438] BTRFS info (device loop0): max_inline at 0 [ 79.608814][ T4459] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 79.638907][ T4438] BTRFS info (device loop0): using free space tree [ 79.650382][ T4438] BTRFS info (device loop0): has skinny extents [ 79.674058][ T4435] XFS (loop1): Ending clean mount [ 79.692238][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.830184][ T4382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.935678][ T4459] loop3: detected capacity change from 0 to 4096 [ 79.942789][ T4438] BTRFS info (device loop0): enabling ssd optimizations [ 79.962452][ T4459] ntfs3: Unknown parameter 'windows_names' [ 79.985389][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 80.010689][ T4188] XFS (loop1): Unmounting Filesystem [ 80.028209][ T26] audit: type=1800 audit(1789741403.762:5): pid=4438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 80.063617][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.070622][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.194755][ T4382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.377018][ T4382] device hsr_slave_0 entered promiscuous mode [ 80.452472][ T4382] device hsr_slave_1 entered promiscuous mode [ 80.639013][ T4382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.660612][ T4382] Cannot create hsr debugfs directory [ 81.141782][ T4238] Bluetooth: hci0: command 0x041b tx timeout [ 81.172807][ T4505] loop1: detected capacity change from 0 to 4096 [ 81.203078][ T4505] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 81.370375][ T144] device hsr_slave_0 left promiscuous mode [ 81.397279][ T144] device hsr_slave_1 left promiscuous mode [ 81.442026][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.451965][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.516327][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.561995][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.588453][ T144] device bridge_slave_1 left promiscuous mode [ 81.622899][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.693671][ T4490] loop3: detected capacity change from 0 to 40427 [ 81.736415][ T4494] loop2: detected capacity change from 0 to 32768 [ 81.739819][ T144] device bridge_slave_0 left promiscuous mode [ 81.772350][ T4490] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 81.780836][ T4490] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4 [ 81.803565][ T4494] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.29 (4494) [ 81.814920][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.872448][ T4490] F2FS-fs (loop3): invalid crc value [ 81.910724][ T4494] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 81.926546][ T4490] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.949638][ T4494] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 81.990881][ T4494] BTRFS info (device loop2): use zstd compression, level 3 [ 82.023382][ T144] device veth1_macvtap left promiscuous mode [ 82.035015][ T4494] BTRFS info (device loop2): using free space tree [ 82.061669][ T4494] BTRFS info (device loop2): has skinny extents [ 82.073592][ T144] device veth0_macvtap left promiscuous mode [ 82.079722][ T144] device veth1_vlan left promiscuous mode [ 82.083995][ T4490] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 82.110523][ T144] device veth0_vlan left promiscuous mode [ 82.180699][ T4490] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.329024][ T4494] BTRFS info (device loop2): enabling ssd optimizations [ 82.382855][ T4490] F2FS-fs (loop3) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 82.526357][ T4490] F2FS-fs (loop3) : inject checkpoint error in f2fs_balance_fs of f2fs_create+0xb5f/0x1510 [ 82.531745][ T4521] loop0: detected capacity change from 0 to 32768 [ 82.589194][ T4490] Device name cannot be null; rc = [-22] [ 82.633404][ T4517] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.35 (4517) [ 82.726150][ T4521] XFS (loop0): Mounting V5 Filesystem [ 82.745510][ T4517] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 82.799249][ T4517] BTRFS info (device loop1): enabling auto defrag [ 82.806161][ T4517] BTRFS info (device loop1): force clearing of disk cache [ 82.816326][ T4517] BTRFS info (device loop1): ignoring data csums [ 82.823346][ T4517] BTRFS info (device loop1): turning on async discard [ 82.830247][ T4517] BTRFS info (device loop1): setting nodatacow, compression disabled [ 82.839255][ T4517] BTRFS info (device loop1): turning off async discard [ 82.846696][ T4517] BTRFS info (device loop1): disabling free space tree [ 82.854048][ T4517] BTRFS info (device loop1): has skinny extents [ 82.931304][ T144] team0 (unregistering): Port device team_slave_1 removed [ 82.980692][ T4521] XFS (loop0): Ending clean mount [ 83.017934][ T4521] XFS (loop0): Quotacheck needed: Please wait. [ 83.049256][ T144] team0 (unregistering): Port device team_slave_0 removed [ 83.160104][ T4521] XFS (loop0): Quotacheck: Done. [ 83.199140][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.211769][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 83.428584][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.691440][ T4321] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4321) [ 83.741551][ T4187] XFS (loop0): Unmounting Filesystem [ 83.863975][ T4578] FAULT_INJECTION: forcing a failure. [ 83.863975][ T4578] name failslab, interval 1, probability 0, space 0, times 1 [ 83.925252][ T4578] CPU: 0 PID: 4578 Comm: syz.1.39 Not tainted syzkaller #0 [ 83.932537][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.942643][ T4578] Call Trace: [ 83.945956][ T4578] [ 83.948925][ T4578] dump_stack_lvl+0x188/0x250 [ 83.953653][ T4578] ? show_regs_print_info+0x20/0x20 [ 83.958899][ T4578] ? load_image+0x410/0x410 [ 83.963495][ T4578] ? __might_sleep+0xf0/0xf0 [ 83.968127][ T4578] ? __lock_acquire+0x7b50/0x7b50 [ 83.973192][ T4578] should_fail+0x383/0x4b0 [ 83.977650][ T4578] should_failslab+0x5/0x20 [ 83.982182][ T4578] slab_pre_alloc_hook+0x51/0xc0 [ 83.987158][ T4578] kmem_cache_alloc_trace+0x47/0x290 [ 83.992470][ T4578] ? __list_lru_init+0x535/0xac0 [ 83.997458][ T4578] __list_lru_init+0x535/0xac0 [ 84.002287][ T4578] alloc_super+0x787/0x970 [ 84.006739][ T4578] ? kill_litter_super+0xa0/0xa0 [ 84.011702][ T4578] sget_fc+0x2d4/0x6f0 [ 84.015804][ T4578] ? kill_litter_super+0xa0/0xa0 [ 84.020787][ T4578] ? mqueue_get_tree+0xe0/0xe0 [ 84.025607][ T4578] get_tree_nodev+0x26/0x160 [ 84.030227][ T4578] vfs_get_tree+0x88/0x270 [ 84.034681][ T4578] fc_mount+0x18/0xa0 [ 84.038706][ T4578] mq_init_ns+0x39d/0x510 [ 84.043078][ T4578] copy_ipcs+0x2ea/0x4b0 [ 84.047352][ T4578] create_new_namespaces+0x212/0x700 [ 84.052683][ T4578] unshare_nsproxy_namespaces+0x116/0x160 [ 84.058483][ T4578] ksys_unshare+0x4f6/0x8e0 [ 84.063021][ T4578] ? __lock_acquire+0x7b50/0x7b50 [ 84.068096][ T4578] ? sighand_ctor+0x40/0x40 [ 84.072630][ T4578] ? lock_chain_count+0x20/0x20 [ 84.077527][ T4578] ? syscall_enter_from_user_mode+0x21/0x70 [ 84.083464][ T4578] __x64_sys_unshare+0x34/0x40 [ 84.088257][ T4578] do_syscall_64+0x4c/0xa0 [ 84.092701][ T4578] ? clear_bhb_loop+0x30/0x80 [ 84.097415][ T4578] ? clear_bhb_loop+0x30/0x80 [ 84.102131][ T4578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.108066][ T4578] RIP: 0033:0x7f9533d4e159 [ 84.112513][ T4578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.132149][ T4578] RSP: 002b:00007f9531fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 84.140595][ T4578] RAX: ffffffffffffffda RBX: 00007f9533fd5fa0 RCX: 00007f9533d4e159 [ 84.148601][ T4578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c000400 [ 84.156597][ T4578] RBP: 00007f9533de506b R08: 0000000000000000 R09: 0000000000000000 [ 84.164600][ T4578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.172603][ T4578] R13: 00007f9533fd6038 R14: 00007f9533fd5fa0 R15: 00007ffc78f92bc8 [ 84.180642][ T4578] [ 84.260730][ T144] bond0 (unregistering): Released all slaves [ 84.486191][ T4382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.571281][ T4382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.605356][ T4382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.644914][ T4382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.851778][ T4574] set_capacity_and_notify: 1 callbacks suppressed [ 84.851796][ T4574] loop3: detected capacity change from 0 to 32768 [ 84.889264][ T4584] loop0: detected capacity change from 0 to 1024 [ 84.944610][ T4584] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 85.003017][ T4382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.018058][ T4584] EXT4-fs (loop0): barriers disabled [ 85.047727][ T4584] JBD2: no valid journal superblock found [ 85.078009][ T4584] EXT4-fs (loop0): error loading journal [ 85.130994][ T4382] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.142628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.172159][ T4579] loop2: detected capacity change from 0 to 40427 [ 85.200715][ T4579] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x1ffff [ 85.224158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.246343][ T4574] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 85.293797][ T4579] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x30e4 [ 85.305186][ T4342] Bluetooth: hci0: command 0x0419 tx timeout [ 85.323860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.425464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.462191][ T4579] F2FS-fs (loop2): invalid crc value [ 85.502163][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.509337][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.628742][ T4382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.722440][ T4382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.973850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.014933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.031210][ T4579] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.085289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.115243][ T4199] ocfs2: Unmounting device (7,3) on (node local) [ 86.128575][ T4581] loop1: detected capacity change from 0 to 32768 [ 86.151277][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.158473][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.203594][ T4579] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 86.209387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.303552][ T4581] JBD2: Ignoring recovery information on journal [ 86.331807][ T4579] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.347885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.434846][ T4579] F2FS-fs (loop2) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 86.461968][ T4581] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 86.472501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.506749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.576000][ T1108] cfg80211: failed to load regulatory.db [ 86.632566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.692893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.737637][ T4579] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_get_new_data_page+0xc1/0x660 [ 86.751846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.797710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.809630][ T4600] loop0: detected capacity change from 0 to 16384 [ 86.835074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.852720][ T4579] F2FS-fs (loop2) : inject checkpoint error in f2fs_balance_fs of f2fs_convert_inline_inode+0x57c/0x5b0 [ 86.891048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.969512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.988005][ T4621] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.047531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.370046][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.393219][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.426447][ T4382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.131375][ T4623] syz.1.41 (4623) used greatest stack depth: 20640 bytes left [ 88.255633][ T4657] loop0: detected capacity change from 0 to 512 [ 88.282718][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 88.358691][ T4656] loop2: detected capacity change from 0 to 4096 [ 88.417045][ T4657] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,abort,,errors=continue. Quota mode: writeback. [ 88.530658][ T4665] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.562270][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.573123][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.574174][ T4657] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.703594][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.713734][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.765260][ T4382] device veth0_vlan entered promiscuous mode [ 88.792357][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.823723][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.880082][ T4382] device veth1_vlan entered promiscuous mode [ 89.000214][ T4670] FAULT_INJECTION: forcing a failure. [ 89.000214][ T4670] name failslab, interval 1, probability 0, space 0, times 0 [ 89.021691][ T4670] CPU: 1 PID: 4670 Comm: syz.2.53 Not tainted syzkaller #0 [ 89.028953][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.039049][ T4670] Call Trace: [ 89.042354][ T4670] [ 89.045342][ T4670] dump_stack_lvl+0x188/0x250 [ 89.050076][ T4670] ? show_regs_print_info+0x20/0x20 [ 89.055311][ T4670] ? load_image+0x410/0x410 [ 89.059844][ T4670] ? __might_sleep+0xf0/0xf0 [ 89.064471][ T4670] ? __lock_acquire+0x7b50/0x7b50 [ 89.069534][ T4670] ? mutex_unlock+0x10/0x10 [ 89.074142][ T4670] should_fail+0x383/0x4b0 [ 89.078616][ T4670] should_failslab+0x5/0x20 [ 89.083167][ T4670] slab_pre_alloc_hook+0x51/0xc0 [ 89.088139][ T4670] __kmalloc+0x6b/0x340 [ 89.092327][ T4670] ? tcf_idr_create+0x59/0x740 [ 89.097144][ T4670] tcf_idr_create+0x59/0x740 [ 89.101761][ T4670] ? __nla_parse+0x3c/0x50 [ 89.106210][ T4670] tcf_police_init+0x3f4/0x1530 [ 89.111129][ T4670] ? __kasan_kmalloc+0xc6/0xe0 [ 89.115932][ T4670] ? __kasan_kmalloc+0xaf/0xe0 [ 89.120727][ T4670] ? tc_ctl_action+0x437/0xba0 [ 89.125529][ T4670] ? ___sys_sendmsg+0x236/0x2e0 [ 89.130431][ T4670] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 89.135490][ T4670] ? do_syscall_64+0x4c/0xa0 [ 89.140119][ T4670] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.146227][ T4670] ? tcf_police_search+0x40/0x40 [ 89.151309][ T4670] ? __kmalloc_track_caller+0x3b/0x330 [ 89.156799][ T4670] ? memcpy+0x3c/0x60 [ 89.160812][ T4670] tcf_action_init_1+0x3fd/0x6b0 [ 89.165781][ T4670] ? tc_action_load_ops+0x550/0x550 [ 89.171007][ T4670] ? _raw_read_unlock+0x24/0x40 [ 89.175903][ T4670] ? tc_action_load_ops+0x237/0x550 [ 89.181159][ T4670] ? __nla_parse+0x3c/0x50 [ 89.185613][ T4670] tcf_action_init+0x243/0x6b0 [ 89.190420][ T4670] ? tcf_action_init_1+0x6b0/0x6b0 [ 89.195558][ T4670] ? mark_lock+0x94/0x320 [ 89.199974][ T4670] ? __nla_parse+0x3c/0x50 [ 89.204427][ T4670] tc_ctl_action+0x437/0xba0 [ 89.209069][ T4670] ? tcf_free_cookie_rcu+0x40/0x40 [ 89.214222][ T4670] ? do_raw_spin_unlock+0x11d/0x230 [ 89.219507][ T4670] ? tcf_free_cookie_rcu+0x40/0x40 [ 89.224648][ T4670] rtnetlink_rcv_msg+0x7f1/0xf10 [ 89.229624][ T4670] ? lock_chain_count+0x20/0x20 [ 89.234513][ T4670] ? rtnetlink_bind+0x80/0x80 [ 89.239238][ T4670] ? __local_bh_enable_ip+0x136/0x1c0 [ 89.244653][ T4670] ? lockdep_hardirqs_on+0x94/0x140 [ 89.249895][ T4670] ? __local_bh_enable_ip+0x136/0x1c0 [ 89.255302][ T4670] ? _local_bh_enable+0xa0/0xa0 [ 89.260201][ T4670] ? __dev_queue_xmit+0x1b64/0x2e50 [ 89.265453][ T4670] ? dev_queue_xmit+0x20/0x20 [ 89.270167][ T4670] ? memcpy+0x3c/0x60 [ 89.274178][ T4670] ? __copy_skb_header+0x3ba/0x4f0 [ 89.279339][ T4670] netlink_rcv_skb+0x1e9/0x430 [ 89.284143][ T4670] ? rtnetlink_bind+0x80/0x80 [ 89.288866][ T4670] ? netlink_ack+0xb10/0xb10 [ 89.293515][ T4670] netlink_unicast+0x78f/0x940 [ 89.298335][ T4670] netlink_sendmsg+0x8ba/0xbe0 [ 89.303143][ T4670] ? netlink_getsockopt+0x570/0x570 [ 89.308368][ T4670] ? aa_sock_msg_perm+0x94/0x150 [ 89.313344][ T4670] ? apparmor_socket_sendmsg+0x88/0x230 [ 89.318922][ T4670] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 89.324239][ T4670] ? security_socket_sendmsg+0x7c/0xa0 [ 89.329739][ T4670] ? netlink_getsockopt+0x570/0x570 [ 89.334973][ T4670] ____sys_sendmsg+0x5be/0x8f0 [ 89.339779][ T4670] ? __sys_sendmsg_sock+0x30/0x30 [ 89.344846][ T4670] ? import_iovec+0x6f/0xa0 [ 89.349481][ T4670] ___sys_sendmsg+0x236/0x2e0 [ 89.354215][ T4670] ? __sys_sendmsg+0x290/0x290 [ 89.359059][ T4670] __se_sys_sendmsg+0x1b7/0x2a0 [ 89.363950][ T4670] ? __x64_sys_sendmsg+0x80/0x80 [ 89.368923][ T4670] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.374951][ T4670] ? lockdep_hardirqs_on+0x94/0x140 [ 89.380185][ T4670] do_syscall_64+0x4c/0xa0 [ 89.384633][ T4670] ? clear_bhb_loop+0x30/0x80 [ 89.389342][ T4670] ? clear_bhb_loop+0x30/0x80 [ 89.394050][ T4670] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.399972][ T4670] RIP: 0033:0x7fc62172c159 [ 89.404450][ T4670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.424094][ T4670] RSP: 002b:00007fc61f984028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.432555][ T4670] RAX: ffffffffffffffda RBX: 00007fc6219b3fa0 RCX: 00007fc62172c159 [ 89.440566][ T4670] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 89.448570][ T4670] RBP: 00007fc6217c306b R08: 0000000000000000 R09: 0000000000000000 [ 89.456919][ T4670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.465009][ T4670] R13: 00007fc6219b4038 R14: 00007fc6219b3fa0 R15: 00007ffebdc772f8 [ 89.473035][ T4670] [ 89.510853][ T4382] device veth0_macvtap entered promiscuous mode [ 89.575307][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.599386][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.632522][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.662338][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.693344][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.731989][ T4382] device veth1_macvtap entered promiscuous mode [ 89.839302][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.903439][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.955114][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.968765][ T4689] loop1: detected capacity change from 0 to 512 [ 89.979258][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.007091][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.048695][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.058977][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.079766][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.104740][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.118059][ T4689] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 90.143642][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.187360][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.200247][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.213342][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.224474][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.235321][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.256481][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.302647][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.342080][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.354333][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.374950][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.429782][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.474661][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.503294][ T4382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.530562][ T4382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.557441][ T4382] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.575357][ T4382] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.906516][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.944042][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.993795][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.019451][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.047262][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.060256][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.136262][ T4732] FAULT_INJECTION: forcing a failure. [ 91.136262][ T4732] name failslab, interval 1, probability 0, space 0, times 0 [ 91.199166][ T4732] CPU: 1 PID: 4732 Comm: syz.3.73 Not tainted syzkaller #0 [ 91.206439][ T4732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.216619][ T4732] Call Trace: [ 91.219942][ T4732] [ 91.223081][ T4732] dump_stack_lvl+0x188/0x250 [ 91.227802][ T4732] ? show_regs_print_info+0x20/0x20 [ 91.233046][ T4732] ? load_image+0x410/0x410 [ 91.237604][ T4732] ? __might_sleep+0xf0/0xf0 [ 91.242230][ T4732] ? __lock_acquire+0x7b50/0x7b50 [ 91.247410][ T4732] ? verify_lock_unused+0x140/0x140 [ 91.252662][ T4732] should_fail+0x383/0x4b0 [ 91.257129][ T4732] should_failslab+0x5/0x20 [ 91.261675][ T4732] slab_pre_alloc_hook+0x51/0xc0 [ 91.266653][ T4732] ? __kernfs_new_node+0xa8/0x6b0 [ 91.271718][ T4732] __kmalloc_track_caller+0x69/0x330 [ 91.277062][ T4732] ? __kernfs_new_node+0xa8/0x6b0 [ 91.282138][ T4732] kstrdup_const+0x51/0x90 [ 91.286628][ T4732] __kernfs_new_node+0xa8/0x6b0 [ 91.291515][ T4732] ? widen_string+0x3b/0x320 [ 91.296144][ T4732] ? kernfs_new_node+0x250/0x250 [ 91.301125][ T4732] ? snprintf+0xe5/0x140 [ 91.305413][ T4732] kernfs_new_node+0x148/0x250 [ 91.310226][ T4732] __kernfs_create_file+0x47/0x2e0 [ 91.315383][ T4732] cgroup_addrm_files+0xac3/0x1020 [ 91.320590][ T4732] ? rcu_lock_release+0x20/0x20 [ 91.325484][ T4732] ? vfs_mkdir+0x386/0x570 [ 91.330035][ T4732] ? __x64_sys_mkdirat+0x85/0x90 [ 91.335096][ T4732] ? do_syscall_64+0x4c/0xa0 [ 91.339721][ T4732] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.345838][ T4732] ? mark_lock+0x94/0x320 [ 91.350261][ T4732] ? __local_bh_enable_ip+0x136/0x1c0 [ 91.355671][ T4732] ? lockdep_hardirqs_on+0x94/0x140 [ 91.360924][ T4732] css_populate_dir+0x155/0x350 [ 91.365825][ T4732] cgroup_apply_control_enable+0x641/0xb00 [ 91.371685][ T4732] cgroup_mkdir+0xcbd/0xeb0 [ 91.376338][ T4732] ? css_task_iter_end+0x280/0x280 [ 91.381536][ T4732] ? do_raw_spin_unlock+0x11d/0x230 [ 91.386793][ T4732] ? kernfs_iop_permission+0x22d/0x310 [ 91.392305][ T4732] ? css_task_iter_end+0x280/0x280 [ 91.397461][ T4732] kernfs_iop_mkdir+0x23d/0x3d0 [ 91.402410][ T4732] vfs_mkdir+0x386/0x570 [ 91.406702][ T4732] do_mkdirat+0x1dd/0x5c0 [ 91.411185][ T4732] ? vfs_mkdir+0x570/0x570 [ 91.415652][ T4732] __x64_sys_mkdirat+0x85/0x90 [ 91.420468][ T4732] do_syscall_64+0x4c/0xa0 [ 91.424919][ T4732] ? clear_bhb_loop+0x30/0x80 [ 91.429635][ T4732] ? clear_bhb_loop+0x30/0x80 [ 91.434368][ T4732] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.440302][ T4732] RIP: 0033:0x7fc5b9071159 [ 91.444764][ T4732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.464518][ T4732] RSP: 002b:00007fc5b72c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 91.473009][ T4732] RAX: ffffffffffffffda RBX: 00007fc5b92f8fa0 RCX: 00007fc5b9071159 [ 91.481019][ T4732] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 91.489026][ T4732] RBP: 00007fc5b910806b R08: 0000000000000000 R09: 0000000000000000 [ 91.497151][ T4732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.505251][ T4732] R13: 00007fc5b92f9038 R14: 00007fc5b92f8fa0 R15: 00007ffc81be8748 [ 91.513286][ T4732] [ 91.706628][ T4732] cgroup: cgroup_addrm_files: failed to add throttle.read_iops_device, err=-12 [ 92.109035][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 92.205099][ T4755] FAULT_INJECTION: forcing a failure. [ 92.205099][ T4755] name fail_futex, interval 1, probability 0, space 0, times 1 [ 92.258357][ T4755] CPU: 0 PID: 4755 Comm: syz.1.77 Not tainted syzkaller #0 [ 92.265624][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.275717][ T4755] Call Trace: [ 92.279037][ T4755] [ 92.282005][ T4755] dump_stack_lvl+0x188/0x250 [ 92.286729][ T4755] ? show_regs_print_info+0x20/0x20 [ 92.291960][ T4755] ? load_image+0x410/0x410 [ 92.296507][ T4755] ? skb_release_head_state+0x1e7/0x240 [ 92.302099][ T4755] should_fail+0x383/0x4b0 [ 92.306561][ T4755] get_futex_key+0x1a1/0x12d0 [ 92.311281][ T4755] ? put_pid+0xda/0x120 [ 92.315470][ T4755] ? netlink_sendmsg+0x8f5/0xbe0 [ 92.320443][ T4755] ? futex_wait_restart+0x250/0x250 [ 92.325690][ T4755] futex_wait_setup+0x4b/0x520 [ 92.330501][ T4755] ? apparmor_socket_sendmsg+0x88/0x230 [ 92.336097][ T4755] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 92.341428][ T4755] ? security_socket_sendmsg+0x7c/0xa0 [ 92.346925][ T4755] ? netlink_getsockopt+0x570/0x570 [ 92.352164][ T4755] futex_wait+0x22f/0x680 [ 92.356540][ T4755] ? do_futex+0x12b0/0x12b0 [ 92.361108][ T4755] ? verify_lock_unused+0x140/0x140 [ 92.366450][ T4755] ? verify_lock_unused+0x140/0x140 [ 92.371687][ T4755] do_futex+0xdc2/0x12b0 [ 92.376003][ T4755] ? futex_exit_release+0x1c0/0x1c0 [ 92.381241][ T4755] ? __context_tracking_exit+0x4c/0x80 [ 92.386748][ T4755] __se_sys_futex+0x389/0x420 [ 92.391487][ T4755] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.397545][ T4755] ? __x64_sys_futex+0xf0/0xf0 [ 92.402355][ T4755] ? __x64_sys_futex+0x1d/0xf0 [ 92.407157][ T4755] do_syscall_64+0x4c/0xa0 [ 92.411605][ T4755] ? clear_bhb_loop+0x30/0x80 [ 92.416431][ T4755] ? clear_bhb_loop+0x30/0x80 [ 92.421147][ T4755] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.427164][ T4755] RIP: 0033:0x7f9533d4e159 [ 92.431619][ T4755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.451313][ T4755] RSP: 002b:00007f9531fa60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.459857][ T4755] RAX: ffffffffffffffda RBX: 00007f9533fd5fa8 RCX: 00007f9533d4e159 [ 92.467952][ T4755] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9533fd5fa8 [ 92.475966][ T4755] RBP: 00007f9533fd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 92.483978][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.491991][ T4755] R13: 00007f9533fd6038 R14: 00007ffc78f92ae0 R15: 00007ffc78f92bc8 [ 92.500052][ T4755] [ 92.845999][ T4749] loop5: detected capacity change from 0 to 32768 [ 92.910993][ T4749] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop5 scanned by syz.5.21 (4749) [ 93.000415][ T4749] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 93.047929][ T4749] BTRFS info (device loop5): using free space tree [ 93.074241][ T4749] BTRFS info (device loop5): has skinny extents [ 93.109366][ T4776] loop2: detected capacity change from 0 to 4096 [ 93.160281][ T4782] md: loop0 has zero or unknown size, marking faulty! [ 93.249821][ T4782] md: loop1 has zero or unknown size, marking faulty! [ 93.277317][ T4776] EXT4-fs (loop2): invalid first ino: 0 [ 93.601818][ T4749] BTRFS info (device loop5): enabling ssd optimizations [ 93.829493][ T26] audit: type=1326 audit(1789741417.562:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.2.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc62172c159 code=0x0 [ 94.015665][ T4831] FAULT_INJECTION: forcing a failure. [ 94.015665][ T4831] name failslab, interval 1, probability 0, space 0, times 0 [ 94.158107][ T4831] CPU: 0 PID: 4831 Comm: syz.0.93 Not tainted syzkaller #0 [ 94.165404][ T4831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.175503][ T4831] Call Trace: [ 94.178813][ T4831] [ 94.181857][ T4831] dump_stack_lvl+0x188/0x250 [ 94.186573][ T4831] ? show_regs_print_info+0x20/0x20 [ 94.191809][ T4831] ? load_image+0x410/0x410 [ 94.196344][ T4831] ? __lock_acquire+0x7b50/0x7b50 [ 94.201408][ T4831] should_fail+0x383/0x4b0 [ 94.205864][ T4831] should_failslab+0x5/0x20 [ 94.210398][ T4831] slab_pre_alloc_hook+0x51/0xc0 [ 94.215373][ T4831] ? vm_area_dup+0x1e/0xb0 [ 94.219818][ T4831] kmem_cache_alloc+0x3d/0x280 [ 94.224616][ T4831] vm_area_dup+0x1e/0xb0 [ 94.228891][ T4831] __split_vma+0xb1/0x410 [ 94.233252][ T4831] ? find_vma+0xd2/0x230 [ 94.237532][ T4831] __do_munmap+0x40b/0xe10 [ 94.241994][ T4831] mmap_region+0x977/0x1730 [ 94.246544][ T4831] ? get_unmapped_area+0x2f0/0x360 [ 94.251691][ T4831] do_mmap+0x801/0xe30 [ 94.255808][ T4831] ? vm_mmap_pgoff+0x16c/0x2d0 [ 94.260611][ T4831] vm_mmap_pgoff+0x1c1/0x2d0 [ 94.265265][ T4831] ? account_locked_vm+0xe0/0xe0 [ 94.270232][ T4831] ? __context_tracking_exit+0x4c/0x80 [ 94.275731][ T4831] ? __lock_acquire+0x7b50/0x7b50 [ 94.280790][ T4831] ksys_mmap_pgoff+0x140/0x790 [ 94.285596][ T4831] ? mmap_region+0x1730/0x1730 [ 94.290431][ T4831] ? lockdep_hardirqs_on+0x94/0x140 [ 94.295671][ T4831] do_syscall_64+0x4c/0xa0 [ 94.300126][ T4831] ? clear_bhb_loop+0x30/0x80 [ 94.304847][ T4831] ? clear_bhb_loop+0x30/0x80 [ 94.309579][ T4831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.315513][ T4831] RIP: 0033:0x7f1d7a64a159 [ 94.319971][ T4831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.339618][ T4831] RSP: 002b:00007f1d788a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 94.348077][ T4831] RAX: ffffffffffffffda RBX: 00007f1d7a8d1fa0 RCX: 00007f1d7a64a159 [ 94.356092][ T4831] RDX: 000000000200000f RSI: 0000000000000039 RDI: 000000110c230000 [ 94.364098][ T4831] RBP: 00007f1d7a6e106b R08: ffffffffffffffff R09: 0000000000000000 [ 94.372113][ T4831] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 94.380118][ T4831] R13: 00007f1d7a8d2038 R14: 00007f1d7a8d1fa0 R15: 00007ffd5c8d1d48 [ 94.388164][ T4831] [ 94.668252][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 94.703051][ T4840] netlink: 52 bytes leftover after parsing attributes in process `syz.5.91'. [ 94.779950][ T4384] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 9 /dev/loop5 scanned by udevd (4384) [ 94.802828][ T4844] md: loop0 has zero or unknown size, marking faulty! [ 94.838810][ T4844] md: loop1 has zero or unknown size, marking faulty! [ 94.903402][ T4848] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.051283][ T4855] loop0: detected capacity change from 0 to 512 [ 95.227802][ T26] audit: type=1326 audit(1789741418.962:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9533d4e159 code=0x7ffc0000 [ 95.352893][ T26] audit: type=1326 audit(1789741418.992:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f9533d4e159 code=0x7ffc0000 [ 95.479742][ T4870] autofs4:pid:4870:autofs_fill_super: called with bogus options [ 95.496081][ T4867] loop0: detected capacity change from 0 to 1024 [ 95.503883][ T26] audit: type=1326 audit(1789741418.992:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9533d4e159 code=0x7ffc0000 [ 95.592247][ T26] audit: type=1326 audit(1789741418.992:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f9533d4e159 code=0x7ffc0000 [ 95.634588][ T26] audit: type=1326 audit(1789741418.992:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9533d4e159 code=0x7ffc0000 [ 95.701894][ T4867] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,discard,barrier,block_validity,resuid=0x0000000000000000,lazytime,block_validity,errors=continue,,errors=continue. Quota mode: none. [ 95.731980][ T4867] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.768919][ T4886] FAULT_INJECTION: forcing a failure. [ 95.768919][ T4886] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.825560][ T4888] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 95.842360][ T4886] CPU: 1 PID: 4886 Comm: syz.2.108 Not tainted syzkaller #0 [ 95.849709][ T4886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.860031][ T4886] Call Trace: [ 95.863347][ T4886] [ 95.866310][ T4886] dump_stack_lvl+0x188/0x250 [ 95.871028][ T4886] ? show_regs_print_info+0x20/0x20 [ 95.876269][ T4886] ? load_image+0x410/0x410 [ 95.880814][ T4886] ? __lock_acquire+0x7b50/0x7b50 [ 95.886141][ T4886] ? __alloc_pages+0x282/0x480 [ 95.890972][ T4886] should_fail+0x383/0x4b0 [ 95.895447][ T4886] copy_page_from_iter+0x33a/0x760 [ 95.900613][ T4886] tun_get_user+0x1985/0x3b10 [ 95.905337][ T4886] ? tun_ring_recv+0xc90/0xc90 [ 95.910144][ T4886] ? rcu_lock_release+0x5/0x20 [ 95.914950][ T4886] ? __lock_acquire+0x7b50/0x7b50 [ 95.920032][ T4886] tun_chr_write_iter+0x112/0x1e0 [ 95.925145][ T4886] vfs_write+0x748/0xd70 [ 95.926731][ T4867] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.104: lblock 0 mapped to illegal pblock 0 (length 1) [ 95.929432][ T4886] ? file_end_write+0x250/0x250 [ 95.948029][ T4886] ? __fget_files+0x402/0x470 [ 95.952849][ T4886] ? __fdget_pos+0x1e2/0x370 [ 95.957473][ T4886] ? ksys_write+0x70/0x260 [ 95.961944][ T4886] ksys_write+0x153/0x260 [ 95.966320][ T4886] ? __ia32_sys_read+0x80/0x80 [ 95.971126][ T4886] ? lockdep_hardirqs_on+0x94/0x140 [ 95.976396][ T4886] do_syscall_64+0x4c/0xa0 [ 95.981024][ T4886] ? clear_bhb_loop+0x30/0x80 [ 95.985738][ T4886] ? clear_bhb_loop+0x30/0x80 [ 95.990462][ T4886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.996482][ T4886] RIP: 0033:0x7fc6216ec98e [ 96.000927][ T4886] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.020589][ T4886] RSP: 002b:00007fc61f983fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.029047][ T4886] RAX: ffffffffffffffda RBX: 00007fc61f9846c0 RCX: 00007fc6216ec98e [ 96.037052][ T4886] RDX: 0000000000000032 RSI: 0000200000000280 RDI: 00000000000000c8 [ 96.045062][ T4886] RBP: 00007fc6217c306b R08: 0000000000000000 R09: 0000000000000000 [ 96.053069][ T4886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.061073][ T4886] R13: 00007fc6219b4038 R14: 00007fc6219b3fa0 R15: 00007ffebdc772f8 [ 96.069184][ T4886] [ 96.073646][ T26] audit: type=1800 audit(1789741419.582:12): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.104" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 96.121613][ T4867] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 96.135323][ T26] audit: type=1800 audit(1789741419.582:13): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.104" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 96.156265][ T4867] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.156265][ T4867] [ 96.211386][ T4888] [ 96.213771][ T4888] ====================================================== [ 96.220806][ T4888] WARNING: possible circular locking dependency detected [ 96.227847][ T4888] syzkaller #0 Not tainted [ 96.232294][ T4888] ------------------------------------------------------ [ 96.239339][ T4888] syz.3.107/4888 is trying to acquire lock: [ 96.245246][ T4888] ffffffff8cf20cc8 (tpg_instances_lock){+.+.}-{3:3}, at: tcm_alloc+0x1d/0x2c0 [ 96.254269][ T4888] [ 96.254269][ T4888] but task is already holding lock: [ 96.261653][ T4888] ffff88805e9ce310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 96.270655][ T4888] [ 96.270655][ T4888] which lock already depends on the new lock. [ 96.270655][ T4888] [ 96.281084][ T4888] [ 96.281084][ T4888] the existing dependency chain (in reverse order) is: [ 96.290135][ T4888] [ 96.290135][ T4888] -> #2 (&gi->lock){+.+.}-{3:3}: [ 96.297295][ T4888] __mutex_lock_common+0x1e5/0x2400 [ 96.303051][ T4888] mutex_lock_nested+0x17/0x20 [ 96.308360][ T4888] config_usb_cfg_link+0x55/0x250 [ 96.313938][ T4888] configfs_symlink+0x5a4/0x13b0 [ 96.319440][ T4888] vfs_symlink+0x245/0x3d0 [ 96.324412][ T4888] do_symlinkat+0x1ab/0x6b0 [ 96.329480][ T4888] __x64_sys_symlinkat+0x95/0xa0 [ 96.334971][ T4888] do_syscall_64+0x4c/0xa0 [ 96.339938][ T4888] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.346399][ T4888] [ 96.346399][ T4888] -> #1 (&sb->s_type->i_mutex_key#27){++++}-{3:3}: [ 96.355122][ T4888] down_write+0x38/0x60 [ 96.359829][ T4888] configfs_depend_item_unlocked+0x14f/0x430 [ 96.366363][ T4888] usbg_make_tpg+0x1dd/0x550 [ 96.371516][ T4888] target_fabric_make_tpg+0xa0/0x6d0 [ 96.377364][ T4888] configfs_mkdir+0x511/0x9e0 [ 96.382600][ T4888] vfs_mkdir+0x386/0x570 [ 96.387398][ T4888] do_mkdirat+0x1dd/0x5c0 [ 96.392283][ T4888] __x64_sys_mkdirat+0x85/0x90 [ 96.397598][ T4888] do_syscall_64+0x4c/0xa0 [ 96.402568][ T4888] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.409017][ T4888] [ 96.409017][ T4888] -> #0 (tpg_instances_lock){+.+.}-{3:3}: [ 96.416982][ T4888] __lock_acquire+0x2c66/0x7b50 [ 96.422401][ T4888] lock_acquire+0x19e/0x400 [ 96.427453][ T4888] __mutex_lock_common+0x1e5/0x2400 [ 96.433200][ T4888] mutex_lock_nested+0x17/0x20 [ 96.438513][ T4888] tcm_alloc+0x1d/0x2c0 [ 96.443221][ T4888] usb_get_function+0x59/0xa0 [ 96.448688][ T4888] config_usb_cfg_link+0x144/0x250 [ 96.454610][ T4888] configfs_symlink+0x5a4/0x13b0 [ 96.460101][ T4888] vfs_symlink+0x245/0x3d0 [ 96.465066][ T4888] do_symlinkat+0x1ab/0x6b0 [ 96.470123][ T4888] __x64_sys_symlinkat+0x95/0xa0 [ 96.475637][ T4888] do_syscall_64+0x4c/0xa0 [ 96.480602][ T4888] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.487063][ T4888] [ 96.487063][ T4888] other info that might help us debug this: [ 96.487063][ T4888] [ 96.497312][ T4888] Chain exists of: [ 96.497312][ T4888] tpg_instances_lock --> &sb->s_type->i_mutex_key#27 --> &gi->lock [ 96.497312][ T4888] [ 96.511163][ T4888] Possible unsafe locking scenario: [ 96.511163][ T4888] [ 96.518631][ T4888] CPU0 CPU1 [ 96.524013][ T4888] ---- ---- [ 96.529404][ T4888] lock(&gi->lock); [ 96.533331][ T4888] lock(&sb->s_type->i_mutex_key#27); [ 96.541519][ T4888] lock(&gi->lock); [ 96.547979][ T4888] lock(tpg_instances_lock); [ 96.552688][ T4888] [ 96.552688][ T4888] *** DEADLOCK *** [ 96.552688][ T4888] [ 96.560847][ T4888] 3 locks held by syz.3.107/4888: [ 96.565892][ T4888] #0: ffff8881415b6460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 96.575211][ T4888] #1: ffff8880733cf3f0 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0 [ 96.586313][ T4888] #2: ffff88805e9ce310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 96.595847][ T4888] [ 96.595847][ T4888] stack backtrace: [ 96.601752][ T4888] CPU: 1 PID: 4888 Comm: syz.3.107 Not tainted syzkaller #0 [ 96.609060][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.619137][ T4888] Call Trace: [ 96.622438][ T4888] [ 96.625388][ T4888] dump_stack_lvl+0x188/0x250 [ 96.630100][ T4888] ? load_image+0x410/0x410 [ 96.634639][ T4888] ? show_regs_print_info+0x20/0x20 [ 96.639866][ T4888] ? print_circular_bug+0x12b/0x1a0 [ 96.645242][ T4888] check_noncircular+0x296/0x330 [ 96.650327][ T4888] ? add_chain_block+0x9b0/0x9b0 [ 96.655303][ T4888] ? lockdep_lock+0xf1/0x1f0 [ 96.659941][ T4888] ? mark_lock+0x94/0x320 [ 96.664651][ T4888] ? _find_first_zero_bit+0xd1/0xf0 [ 96.669889][ T4888] __lock_acquire+0x2c66/0x7b50 [ 96.674792][ T4888] ? verify_lock_unused+0x140/0x140 [ 96.680300][ T4888] ? verify_lock_unused+0x140/0x140 [ 96.685545][ T4888] ? stack_trace_save+0xa6/0xf0 [ 96.690507][ T4888] lock_acquire+0x19e/0x400 [ 96.695040][ T4888] ? tcm_alloc+0x1d/0x2c0 [ 96.699410][ T4888] ? __might_sleep+0xf0/0xf0 [ 96.704046][ T4888] ? read_lock_is_recursive+0x10/0x10 [ 96.709491][ T4888] ? __mutex_trylock_common+0x15c/0x260 [ 96.715099][ T4888] __mutex_lock_common+0x1e5/0x2400 [ 96.720329][ T4888] ? tcm_alloc+0x1d/0x2c0 [ 96.724690][ T4888] ? __mutex_lock_common+0x435/0x2400 [ 96.730099][ T4888] ? lock_chain_count+0x20/0x20 [ 96.734978][ T4888] ? tcm_alloc+0x1d/0x2c0 [ 96.739345][ T4888] ? mutex_lock_io_nested+0x60/0x60 [ 96.744574][ T4888] ? mutex_lock_io_nested+0x60/0x60 [ 96.749804][ T4888] mutex_lock_nested+0x17/0x20 [ 96.754599][ T4888] tcm_alloc+0x1d/0x2c0 [ 96.758786][ T4888] usb_get_function+0x59/0xa0 [ 96.763496][ T4888] config_usb_cfg_link+0x144/0x250 [ 96.768643][ T4888] configfs_symlink+0x5a4/0x13b0 [ 96.773611][ T4888] ? end_current_label_crit_section+0x14b/0x170 [ 96.779879][ T4888] ? common_perm+0x15d/0x1b0 [ 96.784500][ T4888] ? from_kgid+0x14f/0x6a0 [ 96.788957][ T4888] ? apparmor_path_symlink+0x1ac/0x230 [ 96.794440][ T4888] ? lookup_one_qstr_excl+0x11c/0x240 [ 96.799852][ T4888] ? detach_groups+0x370/0x370 [ 96.804662][ T4888] ? inode_permission+0xef/0x480 [ 96.809627][ T4888] ? bpf_lsm_inode_symlink+0x5/0x10 [ 96.814871][ T4888] ? security_inode_symlink+0xb2/0x100 [ 96.820484][ T4888] vfs_symlink+0x245/0x3d0 [ 96.824953][ T4888] do_symlinkat+0x1ab/0x6b0 [ 96.829688][ T4888] ? strncpy_from_user+0x1f4/0x350 [ 96.834849][ T4888] ? vfs_symlink+0x3d0/0x3d0 [ 96.839488][ T4888] __x64_sys_symlinkat+0x95/0xa0 [ 96.844478][ T4888] do_syscall_64+0x4c/0xa0 [ 96.848943][ T4888] ? clear_bhb_loop+0x30/0x80 [ 96.853662][ T4888] ? clear_bhb_loop+0x30/0x80 [ 96.858386][ T4888] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.864326][ T4888] RIP: 0033:0x7fc5b9071159 [ 96.868785][ T4888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.888452][ T4888] RSP: 002b:00007fc5b72c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 96.896898][ T4888] RAX: ffffffffffffffda RBX: 00007fc5b92f8fa0 RCX: 00007fc5b9071159 [ 96.905137][ T4888] RDX: 0000200000000600 RSI: ffffffffffffff9c RDI: 00002000000005c0 [ 96.913230][ T4888] RBP: 00007fc5b910806b R08: 0000000000000000 R09: 0000000000000000 [ 96.921234][ T4888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.929260][ T4888] R13: 00007fc5b92f9038 R14: 00007fc5b92f8fa0 R15: 00007ffc81be8748 [ 96.937275][ T4888] [ 97.025741][ T4900] md: loop0 has zero or unknown size, marking faulty! [ 97.053635][ T4900] md: loop1 has zero or unknown size, marking faulty! [ 97.251740][ T4416] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.531697][ T4416] usb 1-1: Dual-Role OTG device on HNP port [ 97.571353][ T4416] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 97.580507][ T4416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.643393][ T4408] Using the BOT protocol [ 97.733063][ T4408] Using the UAS protocol [ 97.782866][ T4416] scsi host1: uas [ 97.961861][ T144] scsi 1:0:0:0: Direct-Access LIO-ORG RAMDISK-MCP 4.0 PQ: 0 ANSI: 6 [ 98.143994][ T144] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 98.365715][ T4859] Set syz1 is full, maxelem 65536 reached [ 98.422206][ T4386] sd 1:0:0:0: [sdb] 512 512-byte logical blocks: (262 kB/256 KiB) [ 98.501802][ T4386] sd 1:0:0:0: [sdb] Write Protect is off [ 98.507499][ T4386] sd 1:0:0:0: [sdb] Mode Sense: 43 00 00 08 [ 98.681760][ T4386] sd 1:0:0:0: [sdb] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA [ 98.711809][ T4408] usb_gadget/naa.6001405c935d7912: Unsupported SCSI Opcode 0xa3, sending CHECK_CONDITION. [ 100.391895][ T4386] sd 1:0:0:0: [sdb] Attached SCSI disk [ 100.541704][ T1111] target: Unknown data direction for SCSI Opcode 0xa1