last executing test programs: 1m11.445163437s ago: executing program 2 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x4c, r1, 0x5, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x4c}}, 0x0) 1m11.30546s ago: executing program 2 (id=112): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 1m11.115218154s ago: executing program 2 (id=115): inotify_init() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000540)={[{@journal_dev={'journal_dev', 0x3d, 0xe}}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") syz_mount_image$vfat(&(0x7f0000000680), &(0x7f0000000100)='./bus\x00', 0x200010, 0x0, 0x82, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f00000003c0)='./bus/file0\x00', 0x4) 1m10.4487515s ago: executing program 2 (id=120): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f00000009c0)='./file0/file0\x00', 0x0, 0x9814c6, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 1m10.03212031s ago: executing program 2 (id=122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x23c, 0x9, 0xffff}) 1m9.514154932s ago: executing program 2 (id=124): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7b9a, 0x4) sendto$inet6(r0, 0x0, 0x64, 0x10004004, &(0x7f0000000140)={0xa, 0x4e22, 0x765, @empty, 0x905e3b80}, 0x1c) 1m8.707885612s ago: executing program 32 (id=124): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7b9a, 0x4) sendto$inet6(r0, 0x0, 0x64, 0x10004004, &(0x7f0000000140)={0xa, 0x4e22, 0x765, @empty, 0x905e3b80}, 0x1c) 18.493113499s ago: executing program 4 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14.968156543s ago: executing program 4 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12.12294204s ago: executing program 4 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9.697692068s ago: executing program 1 (id=360): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) 9.697261448s ago: executing program 3 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_mempolicy(0x4003, &(0x7f00000000c0)=0x4, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 9.274816808s ago: executing program 3 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_clone(0x10080800, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/connector\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, 0x0, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) 8.575019035s ago: executing program 3 (id=363): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) 8.524215436s ago: executing program 4 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.148465083s ago: executing program 0 (id=364): fremovexattr(0xffffffffffffffff, &(0x7f0000000340)=@known='system.posix_acl_access\x00') 6.147992293s ago: executing program 1 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$eJzs3c9PHG0dAPDvDGihvm+F1/dQExM3sYlGDYGeVJpIKS2FFmuqNsbLdoFtiy5sA4vx0EN7a+LJxIPx0GjijVPDwaP1T/DisZ6b6MGLiUkjZndngRl2AxIWpPl8Epid5zf73Xl45jD7pJnGk5WN0spGqbJWqi892rha+nm9trlajfSUnHX/5Fzo9cb3I05if3bu3bj1gwdXI/68/Nd3Ozs7O9E0GF1N7Hv9r38+W9p/7EgLdZrtdm/tpPwkIj49MK6mgYj48R8jkoi4nqVNZ8fhiLgU7bwHz375sHRCo3n9tnqt/H7h5fbklfmtV9u9//Yk4re1L37z8erfvzIw+bevn1D3AAAAAAAAAAAAAAAAAACcc7P37/3o++MT8SaJwa3k4PO6s9mx1/OxOyfmy/3/YwEAAAAAAAAAAAAAAAAAAOD/1N7z/6Xkky7P/89kx6ke9Xe+2/8x0j9z37s3c3N8Itv/PTmQ/60s6R/XB2K0sO/7iy77v18v1O++//vBfo6rM75OvyORpGO58zQdG4v4fbbx++XkYlqrbzS+8ai+ubZ8YsM4t/Lxb+/en4tOtqF/t/hHl/hPF9rv//7/XzjwaWqePzzsI/aZPg7pHMnHf6BnuT+8SI4U/xuFeqcRf44vH//BVtrw/gJT7QmgGf9fDR4e/5lC+/2K/6WIKCXNsZZyM0BzDdNM77VeIS8f//akmJs6szey1/X/70L8bxbaP6v5/3nxHxFd5eP/2VbaUK7E3vU/mh5+/d8qtH8W8W+O//nJLTE/aPn4X2gnDuaKtN7Jo87/s4X2+xD/zhfGtcd5Kcl9AraS9vh7fV8defn4Dx3I37v/S4+0/rtdqH9a93+dfjv3f53p/2tJ+/6P7vLxH+5Z7qjX/1yhXr/n/6nW+o/jysf/Yistv3Yeaf0+avznC+33K/6tVclQJ/6tSaB5SxD/udBO/53135Hk4/+5dmK6v8Tz1u/W+i85fP1/p9D+ma3/0/72+qHIx/+jnuWa8f/LEf7/3y3U63/8I8at9Y8tH/+Pe5ZrXf9Dh8d/Ye/ln+IU4v/VfjYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcA5MZ8eRSNKx3Hmajo1F3MjOL8fFZLGyXF6s1Zd+thExk6WX4pPkca2+WKmVV9bqy9VypVarL0XczPI/jaFko1ZvlFcrT2/ttjWcPKlW1huL1UojImaz9C/Fx522Flcaq5WnEXF7N+/zaX396ZPKWnl5Zf074+Pj4zG3O4bRpPqLRnWt0e69nRsxv1t3JNk3uFb2nd2xfJT8tL65vlap5dKbdWr1pUptX52FLO/XMZo01jfXliqNarlWf9zp7yxNZceZufs/vH934kD+w6R9nD7dYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3oz+e3fRMRg+yyNiFKSvUiyn5zXb6vXyu8XXm5PXpnferX9rlsZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYpX+UBoIoDsBvxkJLj2G17Ha2K4po4YrgCfQYHkaP4iW8g0WKtClCIJmFsH9gm6T6vubB/Jh5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMs9vnXvr3UTkeJqexnx+/n3f5w/l/p9N33/4gwzcjpPL939Q92Uf0+j/LYcrdq8Tzfrr4+YqL2fwZ4M9+lg3Gdobt/m5uv7XkfKVUS0Jb9JOVfVsrcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYsQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUXfBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKwAA//9k4ChH") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183842, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0xe7c) r1 = getpid() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$P9_RLINK(r0, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 6.136820493s ago: executing program 3 (id=366): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x474) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000001c0)=0x3, 0x4) sendmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000600)=[{0x1, 0x2, {0x2, 0xfe, 0x1}, {0x1}, 0xfe, 0x2}, {0x0, 0x1, {0x1, 0x0, 0x3}, {0x1, 0xf0}, 0xfd, 0x2}], 0x40) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x0, 0x0) 5.743983732s ago: executing program 0 (id=367): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000480)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x7fffffff}}, {@uni_xlateno}, {@utf8}, {@utf8}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381"], 0x460}}, 0x0) 4.848059494s ago: executing program 3 (id=368): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x80) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 3.887983407s ago: executing program 0 (id=369): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="bad0a5b32a", 0x5, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) 3.887520347s ago: executing program 1 (id=370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x1, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x1, 0x0, 0xee01}, {0x9, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50, 0x6b4d}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.572386244s ago: executing program 4 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.532090355s ago: executing program 0 (id=371): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32], 0x67, 0xc54, &(0x7f0000002500)="$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") getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20048804) recvmsg$unix(r3, 0x0, 0x40000040) 656.205204ms ago: executing program 0 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 655.981624ms ago: executing program 1 (id=373): unshare(0xe000000) 655.730444ms ago: executing program 3 (id=374): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x2103) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') flistxattr(r0, &(0x7f00000000c0)=""/90, 0x5a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xb4a4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$FUSE(r2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000240), 0x804021, &(0x7f00000002c0)={[], [{@flag='rw'}, {@fowner_lt={'fowner<', 0xee00}}]}) socket$inet6(0xa, 0x800000000000002, 0x0) 575.551726ms ago: executing program 0 (id=375): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 546.502757ms ago: executing program 1 (id=376): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r0, r1}, 0xc) 300.098902ms ago: executing program 1 (id=377): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. [ 84.797020][ T5764] cgroup: Unknown subsys name 'net' [ 84.935233][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.620861][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.449208][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.458253][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.465381][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.467577][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.476476][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.482796][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.490764][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.495229][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.504195][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.510529][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.524399][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.524420][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.536778][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.545923][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.548366][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.554418][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.567237][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.568047][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.583824][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.584147][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.600277][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.608579][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.616348][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.616383][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.193773][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 89.317824][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 89.351153][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 89.371380][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 89.467012][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.475138][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.483034][ T5779] bridge_slave_0: entered allmulticast mode [ 89.490327][ T5779] bridge_slave_0: entered promiscuous mode [ 89.500682][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.507924][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.515266][ T5779] bridge_slave_1: entered allmulticast mode [ 89.522828][ T5779] bridge_slave_1: entered promiscuous mode [ 89.613354][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.620717][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.628524][ T5776] bridge_slave_0: entered allmulticast mode [ 89.636413][ T5776] bridge_slave_0: entered promiscuous mode [ 89.662977][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.678379][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.692078][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.699633][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.707739][ T5776] bridge_slave_1: entered allmulticast mode [ 89.714768][ T5776] bridge_slave_1: entered promiscuous mode [ 89.813459][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.827108][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.836456][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.844125][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.851895][ T5777] bridge_slave_0: entered allmulticast mode [ 89.859688][ T5777] bridge_slave_0: entered promiscuous mode [ 89.868525][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.875696][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.882945][ T5777] bridge_slave_1: entered allmulticast mode [ 89.890470][ T5777] bridge_slave_1: entered promiscuous mode [ 89.898948][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.906083][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.913595][ T5778] bridge_slave_0: entered allmulticast mode [ 89.921272][ T5778] bridge_slave_0: entered promiscuous mode [ 89.931720][ T5779] team0: Port device team_slave_0 added [ 89.962413][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.969868][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.977459][ T5778] bridge_slave_1: entered allmulticast mode [ 89.984411][ T5778] bridge_slave_1: entered promiscuous mode [ 89.993763][ T5779] team0: Port device team_slave_1 added [ 90.025820][ T5776] team0: Port device team_slave_0 added [ 90.074383][ T5776] team0: Port device team_slave_1 added [ 90.087381][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.107848][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.114858][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.141268][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.174275][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.198390][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.210654][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.220737][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.228169][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.255350][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.320972][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.328650][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.362991][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.376449][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.383567][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.414939][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.440401][ T5777] team0: Port device team_slave_0 added [ 90.453880][ T5779] hsr_slave_0: entered promiscuous mode [ 90.460509][ T5779] hsr_slave_1: entered promiscuous mode [ 90.494948][ T5777] team0: Port device team_slave_1 added [ 90.504767][ T5778] team0: Port device team_slave_0 added [ 90.516050][ T5778] team0: Port device team_slave_1 added [ 90.630769][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.638013][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.664217][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.676828][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.683913][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.710960][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.724025][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.729537][ T51] Bluetooth: hci1: command tx timeout [ 90.731718][ T5088] Bluetooth: hci0: command tx timeout [ 90.739698][ T51] Bluetooth: hci3: command tx timeout [ 90.743328][ T5792] Bluetooth: hci2: command tx timeout [ 90.753596][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.780923][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.812992][ T5776] hsr_slave_0: entered promiscuous mode [ 90.819903][ T5776] hsr_slave_1: entered promiscuous mode [ 90.826306][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.834698][ T5776] Cannot create hsr debugfs directory [ 90.842437][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.851349][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.881000][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.039290][ T5778] hsr_slave_0: entered promiscuous mode [ 91.049823][ T5778] hsr_slave_1: entered promiscuous mode [ 91.056241][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.063993][ T5778] Cannot create hsr debugfs directory [ 91.113230][ T5777] hsr_slave_0: entered promiscuous mode [ 91.120103][ T5777] hsr_slave_1: entered promiscuous mode [ 91.126340][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.134201][ T5777] Cannot create hsr debugfs directory [ 91.372521][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.426961][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.437845][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.468940][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.583569][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.601114][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.614069][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.624600][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.723624][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.739345][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.765842][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.778057][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.866228][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.891565][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.909249][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.934893][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.946302][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.981263][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.036670][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.044231][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.082987][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.110747][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.118106][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.145045][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.169277][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.176488][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.212382][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.219580][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.261625][ T1199] cfg80211: failed to load regulatory.db [ 92.317800][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.395741][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.458599][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.465857][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.508774][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.516008][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.556285][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.663430][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.741156][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.748384][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.807846][ T51] Bluetooth: hci3: command tx timeout [ 92.807866][ T5792] Bluetooth: hci1: command tx timeout [ 92.807935][ T5792] Bluetooth: hci2: command tx timeout [ 92.813306][ T51] Bluetooth: hci0: command tx timeout [ 92.848496][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.855698][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.908271][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.918882][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.962523][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.009210][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.124888][ T5779] veth0_vlan: entered promiscuous mode [ 93.213460][ T5779] veth1_vlan: entered promiscuous mode [ 93.223697][ T5776] veth0_vlan: entered promiscuous mode [ 93.241214][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.319395][ T5776] veth1_vlan: entered promiscuous mode [ 93.396443][ T5779] veth0_macvtap: entered promiscuous mode [ 93.415301][ T5777] veth0_vlan: entered promiscuous mode [ 93.433355][ T5779] veth1_macvtap: entered promiscuous mode [ 93.446597][ T5777] veth1_vlan: entered promiscuous mode [ 93.465911][ T5776] veth0_macvtap: entered promiscuous mode [ 93.488121][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.511502][ T5776] veth1_macvtap: entered promiscuous mode [ 93.531981][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.564684][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.592292][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.603703][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.620219][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.631012][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.640661][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.649932][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.661445][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.682407][ T5777] veth0_macvtap: entered promiscuous mode [ 93.710317][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.724377][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.741109][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.756789][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.765553][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.777847][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.787971][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.800456][ T5777] veth1_macvtap: entered promiscuous mode [ 93.874303][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.891977][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.903133][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.914822][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.928293][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.944745][ T5778] veth0_vlan: entered promiscuous mode [ 93.960840][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.971930][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.982308][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.993759][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.009412][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.062535][ T5778] veth1_vlan: entered promiscuous mode [ 94.082958][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.093764][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.103422][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.113788][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.188820][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.202789][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.265468][ T5778] veth0_macvtap: entered promiscuous mode [ 94.294906][ T5778] veth1_macvtap: entered promiscuous mode [ 94.303510][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.317372][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.325254][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.339805][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.451651][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.460886][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.473981][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.484292][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.506498][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.518315][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.531676][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.542632][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.555233][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.573065][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.587612][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.598145][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.608961][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.618959][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.629901][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.642837][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.681854][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.688749][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.713079][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.716748][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.732707][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.745108][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.906856][ T5792] Bluetooth: hci0: command tx timeout [ 94.913115][ T5792] Bluetooth: hci3: command tx timeout [ 94.919017][ T5792] Bluetooth: hci1: command tx timeout [ 94.924651][ T5792] Bluetooth: hci2: command tx timeout [ 95.136404][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.650149][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.836538][ C0] sched: RT throttling activated [ 96.970106][ T5792] Bluetooth: hci1: command tx timeout [ 96.975604][ T5792] Bluetooth: hci3: command tx timeout [ 96.981401][ T51] Bluetooth: hci0: command tx timeout [ 96.988857][ T5088] Bluetooth: hci2: command tx timeout [ 97.034709][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.086732][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.189353][ T5860] netlink: 'syz.0.8': attribute type 4 has an invalid length. [ 97.249844][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.271090][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.491001][ T28] audit: type=1326 audit(1791184008.889:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd68b9e159 code=0x7ffc0000 [ 97.548281][ T5870] capability: warning: `syz.2.11' uses 32-bit capabilities (legacy support in use) [ 97.554145][ T28] audit: type=1326 audit(1791184008.889:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd68b9e159 code=0x7ffc0000 [ 97.593926][ T28] audit: type=1326 audit(1791184008.929:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fcd68b9e159 code=0x7ffc0000 [ 97.658040][ T28] audit: type=1326 audit(1791184008.929:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd68b9e159 code=0x7ffc0000 [ 97.728251][ T28] audit: type=1326 audit(1791184008.929:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fcd68b9e159 code=0x7ffc0000 [ 97.783601][ T5874] syz.0.12[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.817458][ T28] audit: type=1326 audit(1791184008.929:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd68b9e159 code=0x7ffc0000 [ 97.883742][ T5874] loop0: detected capacity change from 0 to 512 [ 97.889045][ T28] audit: type=1326 audit(1791184008.929:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd68b9e159 code=0x7ffc0000 [ 97.938329][ T5878] loop2: detected capacity change from 0 to 164 [ 97.976068][ T28] audit: type=1326 audit(1791184008.929:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fcd68b9e159 code=0x7ffc0000 [ 98.031841][ T5874] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 98.033163][ T28] audit: type=1326 audit(1791184008.929:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd68b9e159 code=0x7ffc0000 [ 98.104811][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 98.160986][ T5882] ip_tables: iptables: counters copy to user failed while replacing table [ 98.392834][ T5886] loop0: detected capacity change from 0 to 512 [ 98.443692][ T5886] ======================================================= [ 98.443692][ T5886] WARNING: The mand mount option has been deprecated and [ 98.443692][ T5886] and is ignored by this kernel. Remove the mand [ 98.443692][ T5886] option from the mount to silence this warning. [ 98.443692][ T5886] ======================================================= [ 98.511792][ T5889] netlink: 'syz.2.17': attribute type 3 has an invalid length. [ 98.601904][ T5886] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.745631][ T5886] EXT4-fs (loop0): 1 orphan inode deleted [ 98.769831][ T11] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 98.788184][ T5886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.807627][ T5887] loop1: detected capacity change from 0 to 8192 [ 98.828681][ T5898] loop2: detected capacity change from 0 to 1024 [ 98.839517][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 98.860137][ T5898] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.882258][ T5887] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.904341][ T5886] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.958409][ T5898] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #3: block 1: comm syz.2.23: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.982508][ T5898] EXT4-fs (loop2): Remounting filesystem read-only [ 98.990284][ T5898] EXT4-fs (loop2): 1 orphan inode deleted [ 99.001290][ T5898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.032788][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.073286][ T5887] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 99.098997][ T5887] FAT-fs (loop1): Filesystem has been set read-only [ 99.177773][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.520732][ T5912] loop2: detected capacity change from 0 to 512 [ 99.552769][ T5912] EXT4-fs: Ignoring removed bh option [ 99.626067][ T5912] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.29: corrupted in-inode xattr: e_value size too large [ 99.674703][ T5918] FAULT_INJECTION: forcing a failure. [ 99.674703][ T5918] name failslab, interval 1, probability 0, space 0, times 1 [ 99.713004][ T5912] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.29: couldn't read orphan inode 15 (err -117) [ 99.726093][ T5918] CPU: 1 PID: 5918 Comm: syz.1.30 Not tainted syzkaller #0 [ 99.733375][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.743551][ T5918] Call Trace: [ 99.746914][ T5918] [ 99.749910][ T5918] dump_stack_lvl+0x18c/0x250 [ 99.754691][ T5918] ? show_regs_print_info+0x20/0x20 [ 99.759981][ T5918] ? load_image+0x420/0x420 [ 99.764653][ T5918] ? __might_sleep+0xe0/0xe0 [ 99.769328][ T5918] ? __lock_acquire+0x7eb0/0x7eb0 [ 99.774441][ T5918] ? __might_sleep+0xe0/0xe0 [ 99.779134][ T5918] should_fail_ex+0x394/0x4c0 [ 99.783901][ T5918] should_failslab+0x9/0x20 [ 99.788918][ T5918] slab_pre_alloc_hook+0x59/0x300 [ 99.794028][ T5918] kmem_cache_alloc_lru+0x4d/0x2b0 [ 99.799228][ T5918] ? sock_alloc_inode+0x28/0xc0 [ 99.804184][ T5918] sock_alloc_inode+0x28/0xc0 [ 99.809018][ T5918] ? sockfs_init_fs_context+0xb0/0xb0 [ 99.814473][ T5918] new_inode_pseudo+0x63/0x1d0 [ 99.819313][ T5918] __sock_create+0x12d/0x940 [ 99.823982][ T5918] ? __might_fault+0xaa/0x120 [ 99.828736][ T5918] ? __might_fault+0xc6/0x120 [ 99.833486][ T5918] __sys_socketpair+0x1c1/0x550 [ 99.838432][ T5918] __x64_sys_socketpair+0x9b/0xb0 [ 99.843542][ T5918] do_syscall_64+0x55/0xb0 [ 99.848039][ T5918] ? clear_bhb_loop+0x40/0x90 [ 99.852786][ T5918] ? clear_bhb_loop+0x40/0x90 [ 99.857537][ T5918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.863520][ T5918] RIP: 0033:0x7f7213f9e159 [ 99.868062][ T5918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.887743][ T5918] RSP: 002b:00007f7214e59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 99.896228][ T5918] RAX: ffffffffffffffda RBX: 00007f7214225fa0 RCX: 00007f7213f9e159 [ 99.904269][ T5918] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 99.904573][ T5912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.912273][ T5918] RBP: 00007f721403506b R08: 0000000000000000 R09: 0000000000000000 [ 99.912292][ T5918] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.912306][ T5918] R13: 00007f7214226038 R14: 00007f7214225fa0 R15: 00007fffe091ed68 [ 99.912337][ T5918] [ 99.977684][ T5918] socket: no more sockets [ 100.098593][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.242061][ T5930] loop3: detected capacity change from 0 to 512 [ 100.306051][ T5930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.477144][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'. [ 100.667842][ T5940] tipc: Started in network mode [ 100.674617][ T5940] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 100.683996][ T5940] tipc: Enabled bearer , priority 1 [ 101.022543][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.575054][ T5950] loop1: detected capacity change from 0 to 512 [ 101.689022][ T5950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.723022][ T5950] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.797807][ T5824] tipc: Node number set to 43690 [ 102.059082][ T5950] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 102.149025][ T5973] Zero length message leads to an empty skb [ 102.156394][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.51'. [ 102.182178][ T5971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.51'. [ 102.201605][ T5971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.51'. [ 102.226207][ T5971] netlink: 'syz.0.51': attribute type 6 has an invalid length. [ 102.238007][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.436936][ T5980] program syz.3.55 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.765926][ T5989] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.880174][ T5991] loop3: detected capacity change from 0 to 164 [ 102.964952][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 103.227323][ T6001] Invalid ELF header magic: != ELF [ 103.237544][ T5999] rock: directory entry would overflow storage [ 103.244079][ T5999] rock: sig=0x4f50, size=4, remaining=3 [ 103.249827][ T5999] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 103.374553][ T6006] loop0: detected capacity change from 0 to 512 [ 103.401009][ T6006] EXT4-fs: Ignoring removed nobh option [ 103.510503][ T6006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.589352][ T6006] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.625678][ T6006] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #2: comm syz.0.66: corrupted inode contents [ 103.641195][ T6006] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #2: comm syz.0.66: mark_inode_dirty error [ 103.658465][ T6006] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #2: comm syz.0.66: corrupted inode contents [ 104.431466][ T6016] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #2: comm syz.0.66: corrupted inode contents [ 104.481247][ T6016] EXT4-fs error (device loop0): ext4_setattr:5526: inode #2: comm syz.0.66: mark_inode_dirty error [ 104.595209][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 104.626349][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.696054][ T6058] loop1: detected capacity change from 0 to 128 [ 106.017911][ T6064] loop0: detected capacity change from 0 to 2048 [ 106.062981][ T6068] loop2: detected capacity change from 0 to 512 [ 106.103622][ T6064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.138092][ T6068] EXT4-fs: inline encryption not supported [ 106.176833][ T6064] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.210652][ T6068] EXT4-fs: inline encryption not supported [ 106.259482][ T6068] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.322115][ T6074] loop3: detected capacity change from 0 to 512 [ 106.346043][ T6068] EXT4-fs (loop2): 1 truncate cleaned up [ 106.353198][ T6076] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.90: bg 0: block 345: padding at end of block bitmap is not set [ 106.399764][ T6068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.444659][ T6076] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 113 with error 117 [ 106.486476][ T6074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.501323][ T6076] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.501323][ T6076] [ 106.528407][ T6074] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.544169][ T6064] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 106.609500][ T6064] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.609500][ T6064] [ 106.622368][ T6064] EXT4-fs (loop0): Total free blocks count 0 [ 106.629472][ T6064] EXT4-fs (loop0): Free/Dirty block details [ 106.635896][ T6064] EXT4-fs (loop0): free_blocks=0 [ 106.641181][ T6064] EXT4-fs (loop0): dirty_blocks=16 [ 106.646776][ T6064] EXT4-fs (loop0): Block reservation details [ 106.666674][ T6068] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #12: comm syz.2.92: bad extra_isize 62 (inode size 256) [ 106.742227][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.773297][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.785592][ T6100] netlink: 44 bytes leftover after parsing attributes in process `syz.0.104'. [ 107.794662][ T6100] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 108.077010][ T6108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.108'. [ 108.463836][ T6123] loop2: detected capacity change from 0 to 512 [ 108.470860][ T6121] FAULT_INJECTION: forcing a failure. [ 108.470860][ T6121] name failslab, interval 1, probability 0, space 0, times 0 [ 108.509045][ T6121] CPU: 0 PID: 6121 Comm: syz.3.114 Not tainted syzkaller #0 [ 108.516437][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.526556][ T6121] Call Trace: [ 108.529886][ T6121] [ 108.532872][ T6121] dump_stack_lvl+0x18c/0x250 [ 108.537634][ T6121] ? show_regs_print_info+0x20/0x20 [ 108.542904][ T6121] ? load_image+0x420/0x420 [ 108.547487][ T6121] ? __might_sleep+0xe0/0xe0 [ 108.548882][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 108.552122][ T6121] ? __lock_acquire+0x7eb0/0x7eb0 [ 108.552202][ T6121] should_fail_ex+0x394/0x4c0 [ 108.571111][ T6121] should_failslab+0x9/0x20 [ 108.575690][ T6121] slab_pre_alloc_hook+0x59/0x300 [ 108.580797][ T6121] ? rcu_is_watching+0x15/0xb0 [ 108.585638][ T6121] ? kvmalloc_node+0x70/0x180 [ 108.590378][ T6121] ? kvmalloc_node+0x70/0x180 [ 108.595121][ T6121] __kmem_cache_alloc_node+0x53/0x250 [ 108.597638][ T6125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.116'. [ 108.600549][ T6121] ? __mutex_lock+0x30d/0xc80 [ 108.600586][ T6121] ? kvmalloc_node+0x70/0x180 [ 108.618910][ T6121] __kmalloc_node+0xa6/0x240 [ 108.623583][ T6121] kvmalloc_node+0x70/0x180 [ 108.628175][ T6121] nf_hook_entries_grow+0x27c/0x710 [ 108.633450][ T6121] __nf_register_net_hook+0x2c9/0x910 [ 108.638910][ T6121] nf_register_net_hook+0xb2/0x190 [ 108.644099][ T6121] nf_register_net_hooks+0x44/0x1b0 [ 108.649364][ T6121] ip_vs_register_hooks+0xce/0x150 [ 108.654547][ T6121] ip_vs_add_service+0x2c9/0x1330 [ 108.659647][ T6121] do_ip_vs_set_ctl+0x8cc/0xab0 [ 108.664570][ T6121] ? ipvs_proc_est_nice+0x360/0x360 [ 108.669834][ T6121] ? trace_contention_end+0x39/0xe0 [ 108.675122][ T6121] ? mutex_unlock+0x10/0x10 [ 108.679694][ T6121] ? aa_af_perm+0x330/0x330 [ 108.684275][ T6121] nf_setsockopt+0x263/0x280 [ 108.688929][ T6121] ? sock_common_recvmsg+0x190/0x190 [ 108.694275][ T6121] do_sock_setsockopt+0x175/0x1a0 [ 108.699373][ T6121] ? __fdget+0x180/0x210 [ 108.703692][ T6121] __x64_sys_setsockopt+0x182/0x200 [ 108.708966][ T6121] do_syscall_64+0x55/0xb0 [ 108.713455][ T6121] ? clear_bhb_loop+0x40/0x90 [ 108.718239][ T6121] ? clear_bhb_loop+0x40/0x90 [ 108.723008][ T6121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.728977][ T6121] RIP: 0033:0x7fa7d079e159 [ 108.733465][ T6121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.753154][ T6121] RSP: 002b:00007fa7d168d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 108.761667][ T6121] RAX: ffffffffffffffda RBX: 00007fa7d0a25fa0 RCX: 00007fa7d079e159 [ 108.769710][ T6121] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 108.777743][ T6121] RBP: 00007fa7d083506b R08: 000000000000002c R09: 0000000000000000 [ 108.785783][ T6121] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 108.793813][ T6121] R13: 00007fa7d0a26038 R14: 00007fa7d0a25fa0 R15: 00007ffcf2101988 [ 108.801884][ T6121] [ 108.822623][ T6123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.919704][ T6123] EXT4-fs error (device loop2): ext4_get_first_dir_block:3586: inode #12: comm syz.2.115: Directory block failed checksum [ 108.999083][ T6132] loop3: detected capacity change from 0 to 512 [ 109.052926][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.096838][ T6132] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #2: comm syz.3.118: corrupted xattr block 255: invalid header [ 109.179314][ T6132] EXT4-fs (loop3): Remounting filesystem read-only [ 109.185938][ T6132] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 109.249375][ T6132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.408608][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.572207][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d63f400: rx timeout, send abort [ 110.073009][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d63ec00: rx timeout, send abort [ 110.081743][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d63f400: abort rx timeout. Force session deactivation [ 110.482025][ T3500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.581361][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d63ec00: abort rx timeout. Force session deactivation [ 110.673658][ T3500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.894304][ T3500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.060132][ T3500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.433013][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.463967][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.474600][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.496755][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.507048][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 111.514747][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.695837][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 111.695853][ T28] audit: type=1326 audit(1791184023.089:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d079e159 code=0x7ffc0000 [ 111.750813][ T28] audit: type=1326 audit(1791184023.109:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d079e159 code=0x7ffc0000 [ 111.837271][ T28] audit: type=1326 audit(1791184023.109:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d079e159 code=0x7ffc0000 [ 111.901197][ T28] audit: type=1326 audit(1791184023.109:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa7d079e159 code=0x7ffc0000 [ 111.987547][ T28] audit: type=1326 audit(1791184023.149:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d079e159 code=0x7ffc0000 [ 112.059364][ T28] audit: type=1326 audit(1791184023.149:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d079e159 code=0x7ffc0000 [ 112.144224][ T28] audit: type=1326 audit(1791184023.199:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d079e159 code=0x7ffc0000 [ 112.307694][ T28] audit: type=1326 audit(1791184023.199:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d079e159 code=0x7ffc0000 [ 112.430383][ T28] audit: type=1326 audit(1791184023.199:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7d079e159 code=0x7ffc0000 [ 112.498486][ T28] audit: type=1326 audit(1791184023.199:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d079e159 code=0x7ffc0000 [ 112.643359][ T6158] chnl_net:caif_netlink_parms(): no params data found [ 113.183604][ T6199] loop3: detected capacity change from 0 to 512 [ 113.320299][ T6199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.402586][ T6199] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.447868][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.476763][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.484084][ T6158] bridge_slave_0: entered allmulticast mode [ 113.507103][ T6199] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.140: corrupted xattr block 32: invalid ea_ino [ 113.520681][ T6158] bridge_slave_0: entered promiscuous mode [ 113.557507][ T6210] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.140: corrupted xattr block 32: invalid ea_ino [ 113.579706][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.595174][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.602486][ T6211] loop6: detected capacity change from 0 to 7 [ 113.609228][ T5088] Bluetooth: hci0: command tx timeout [ 113.620942][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.630496][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.646964][ T6158] bridge_slave_1: entered allmulticast mode [ 113.656222][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.665477][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.673515][ T6158] bridge_slave_1: entered promiscuous mode [ 113.697216][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.706439][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.727467][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.736719][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.744919][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.754214][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.763656][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.772945][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.783393][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.792688][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.800763][ T6211] ldm_validate_partition_table(): Disk read failed. [ 113.808751][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.819373][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.828613][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.838269][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.847499][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.861225][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.870510][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.879158][ T6211] Dev loop6: unable to read RDB block 0 [ 113.911946][ T6211] loop6: unable to read partition table [ 113.929189][ T6211] loop6: partition table beyond EOD, truncated [ 113.935463][ T6211] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 113.973288][ T6158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.999955][ T6158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.231633][ T6158] team0: Port device team_slave_0 added [ 114.258263][ T6158] team0: Port device team_slave_1 added [ 114.375148][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.396573][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.435260][ T6158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.528150][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.535177][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.577920][ T6158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.630052][ T6232] loop3: detected capacity change from 0 to 512 [ 114.677769][ T6232] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.723486][ T6232] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 114.744250][ T6232] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.151: bg 0: block 248: padding at end of block bitmap is not set [ 114.770919][ T6232] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.151: Failed to acquire dquot type 1 [ 114.797566][ T3500] hsr_slave_0: left promiscuous mode [ 114.825142][ T3500] hsr_slave_1: left promiscuous mode [ 114.834729][ T6232] EXT4-fs (loop3): 1 truncate cleaned up [ 114.843244][ T6232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 114.862331][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.907139][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.928328][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.948281][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.977294][ T3500] bridge_slave_1: left allmulticast mode [ 114.996730][ T3500] bridge_slave_1: left promiscuous mode [ 115.018836][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.065904][ T3500] bridge_slave_0: left allmulticast mode [ 115.088607][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 115.097999][ T3500] bridge_slave_0: left promiscuous mode [ 115.100090][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.162230][ T6247] loop0: detected capacity change from 0 to 512 [ 115.231147][ T6247] EXT4-fs (loop0): orphan cleanup on readonly fs [ 115.279922][ T3500] veth1_macvtap: left promiscuous mode [ 115.286197][ T3500] veth0_macvtap: left promiscuous mode [ 115.305678][ T6247] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 115.306254][ T3500] veth1_vlan: left promiscuous mode [ 115.320840][ T3500] veth0_vlan: left promiscuous mode [ 115.337203][ T6247] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 115.360968][ T6247] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.155: attempt to clear invalid blocks 33619980 len 1 [ 115.442795][ T6247] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.155: invalid indirect mapped block 1819239214 (level 0) [ 115.489992][ T6247] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.155: invalid indirect mapped block 1819239214 (level 1) [ 115.569651][ T6247] EXT4-fs (loop0): 1 truncate cleaned up [ 115.596239][ T6247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.669527][ T6247] EXT4-fs error (device loop0): ext4_lookup:1857: inode #2: comm syz.0.155: 'file1' linked to parent dir [ 115.688234][ T5088] Bluetooth: hci0: command tx timeout [ 115.803475][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.335279][ T6274] loop1: detected capacity change from 0 to 512 [ 116.369372][ T6274] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 116.396674][ T6274] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 116.415165][ T6274] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.428682][ T6274] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #13: comm syz.1.163: iget: bad i_size value: 12154761577498 [ 116.459361][ T6274] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.163: couldn't read orphan inode 13 (err -117) [ 116.503169][ T6274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 116.525754][ T6274] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.163: dx entry: limit 65535 != root limit 120 [ 116.541342][ T6274] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.163: Corrupt directory, running e2fsck is recommended [ 116.588822][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.038730][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 117.099482][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 117.170666][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.251111][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.770634][ T5088] Bluetooth: hci0: command tx timeout [ 118.456316][ T3500] bond0 (unregistering): Released all slaves [ 118.666798][ T6294] loop0: detected capacity change from 0 to 8192 [ 118.735925][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 118.735942][ T28] audit: type=1800 audit(1791184030.129:159): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.171" name="file1" dev="loop0" ino=1048593 res=0 errno=0 [ 118.791768][ T6158] hsr_slave_0: entered promiscuous mode [ 118.867639][ T6158] hsr_slave_1: entered promiscuous mode [ 118.890383][ T6158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.926736][ T6158] Cannot create hsr debugfs directory [ 119.847788][ T5088] Bluetooth: hci0: command tx timeout [ 119.884358][ T6158] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.938550][ T6158] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.976646][ T6158] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.991243][ T6158] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.064895][ T27] wiimote 0005:057E:0330.0001: item fetching failed at offset 0/1 [ 120.091348][ T27] wiimote 0005:057E:0330.0001: HID parse failed [ 120.115937][ T27] wiimote: probe of 0005:057E:0330.0001 failed with error -22 [ 120.304840][ T6158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.373828][ T6158] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.410657][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.417919][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.473768][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.481109][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.562328][ T6158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.674841][ T6353] loop0: detected capacity change from 0 to 512 [ 120.701101][ T6353] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 120.744971][ T6353] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 150994978)! [ 120.812931][ T6353] EXT4-fs (loop0): group descriptors corrupted! [ 120.873225][ T5780] blk_print_req_error: 10 callbacks suppressed [ 120.873256][ T5780] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.269038][ T6158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.412534][ T6368] loop1: detected capacity change from 0 to 8192 [ 121.452742][ T6368] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.565633][ T6368] FAULT_INJECTION: forcing a failure. [ 121.565633][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 121.586822][ T6368] CPU: 0 PID: 6368 Comm: syz.1.192 Not tainted syzkaller #0 [ 121.594213][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.604349][ T6368] Call Trace: [ 121.607702][ T6368] [ 121.610694][ T6368] dump_stack_lvl+0x18c/0x250 [ 121.615491][ T6368] ? show_regs_print_info+0x20/0x20 [ 121.620776][ T6368] ? load_image+0x420/0x420 [ 121.625376][ T6368] ? __might_sleep+0xe0/0xe0 [ 121.630057][ T6368] ? __lock_acquire+0x7eb0/0x7eb0 [ 121.635166][ T6368] should_fail_ex+0x394/0x4c0 [ 121.639943][ T6368] should_failslab+0x9/0x20 [ 121.644532][ T6368] slab_pre_alloc_hook+0x59/0x300 [ 121.649655][ T6368] ? proc_thread_self_get_link+0xfc/0x190 [ 121.655467][ T6368] __kmem_cache_alloc_node+0x53/0x250 [ 121.660937][ T6368] ? proc_thread_self_get_link+0xfc/0x190 [ 121.666751][ T6368] kmalloc_trace+0x2a/0xe0 [ 121.671257][ T6368] proc_thread_self_get_link+0xfc/0x190 [ 121.676897][ T6368] ? proc_setup_thread_self+0x2c0/0x2c0 [ 121.682527][ T6368] pick_link+0x666/0xdd0 [ 121.686858][ T6368] step_into+0xc18/0xee0 [ 121.691190][ T6368] ? set_root+0x3a0/0x3a0 [ 121.695707][ T6368] ? lookup_fast+0xb3/0x4c0 [ 121.700285][ T6368] ? bpf_lsm_inode_permission+0x9/0x10 [ 121.705800][ T6368] ? security_inode_permission+0xb0/0xf0 [ 121.711509][ T6368] link_path_walk+0x748/0xe40 [ 121.716301][ T6368] ? handle_lookup_down+0x130/0x130 [ 121.721589][ T6368] __filename_parentat+0x231/0x650 [ 121.726775][ T6368] ? vfs_path_parent_lookup+0x50/0x50 [ 121.732292][ T6368] ? __x64_sys_symlink+0x6e/0x90 [ 121.737338][ T6368] filename_create+0xd9/0x450 [ 121.742086][ T6368] ? __might_fault+0xaa/0x120 [ 121.746833][ T6368] ? kern_path_create+0x50/0x50 [ 121.751754][ T6368] ? __virt_addr_valid+0x10c/0x380 [ 121.756939][ T6368] ? __virt_addr_valid+0x10c/0x380 [ 121.762123][ T6368] do_symlinkat+0xc5/0x400 [ 121.766599][ T6368] ? vfs_symlink+0x2b0/0x2b0 [ 121.771277][ T6368] ? getname_flags+0x20a/0x500 [ 121.776107][ T6368] __x64_sys_symlink+0x7e/0x90 [ 121.780919][ T6368] do_syscall_64+0x55/0xb0 [ 121.785394][ T6368] ? clear_bhb_loop+0x40/0x90 [ 121.790203][ T6368] ? clear_bhb_loop+0x40/0x90 [ 121.794913][ T6368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.800857][ T6368] RIP: 0033:0x7f7213f9e159 [ 121.805329][ T6368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.824988][ T6368] RSP: 002b:00007f7214e59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 121.833462][ T6368] RAX: ffffffffffffffda RBX: 00007f7214225fa0 RCX: 00007f7213f9e159 [ 121.841474][ T6368] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000300 [ 121.849485][ T6368] RBP: 00007f721403506b R08: 0000000000000000 R09: 0000000000000000 [ 121.857519][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.865527][ T6368] R13: 00007f7214226038 R14: 00007f7214225fa0 R15: 00007fffe091ed68 [ 121.873556][ T6368] [ 122.169078][ T5776] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 122.223152][ T5776] FAT-fs (loop1): Filesystem has been set read-only [ 122.287885][ T6388] syz.3.196 (6388) used greatest stack depth: 20904 bytes left [ 122.605798][ T6158] veth0_vlan: entered promiscuous mode [ 122.649444][ T6158] veth1_vlan: entered promiscuous mode [ 122.760575][ T6158] veth0_macvtap: entered promiscuous mode [ 122.792240][ T6158] veth1_macvtap: entered promiscuous mode [ 122.853340][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.871144][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.893009][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.925944][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.957425][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.007674][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.066689][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.125882][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.163753][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.206554][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.236576][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.246471][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.296564][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.328987][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.360549][ T6158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.387079][ T3068] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 123.411302][ T6158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.430844][ T6158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.444374][ T6158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.556823][ T3068] usb 2-1: device descriptor read/64, error -71 [ 123.700025][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.728196][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.812978][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.827815][ T3068] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 123.833077][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.883087][ T6442] sock: sock_timestamping_bind_phc: sock not bind to device [ 123.915270][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 124.008896][ T3068] usb 2-1: device descriptor read/64, error -71 [ 124.127926][ T3068] usb usb2-port1: attempt power cycle [ 124.187084][ T6452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.566901][ T3068] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 124.609271][ T3068] usb 2-1: device descriptor read/8, error -71 [ 124.833313][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.865658][ T6469] loop0: detected capacity change from 0 to 128 [ 124.876620][ T3068] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 124.910501][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 124.946662][ T3068] usb 2-1: device descriptor read/8, error -71 [ 124.975174][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 125.013973][ T6469] syz.0.217: attempt to access beyond end of device [ 125.013973][ T6469] loop0: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 125.057229][ T6469] syz.0.217: attempt to access beyond end of device [ 125.057229][ T6469] loop0: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 125.087255][ T3068] usb usb2-port1: unable to enumerate USB device [ 125.273925][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 125.321305][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 125.553532][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.694964][ T6484] loop3: detected capacity change from 0 to 4096 [ 125.711100][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.734975][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 125.789393][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 125.830860][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 125.880957][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.894344][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 126.950408][ T28] audit: type=1326 audit(1791184044.350:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7213f9e159 code=0x7ffc0000 [ 127.019297][ T28] audit: type=1326 audit(1791184044.370:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7213f9e159 code=0x7ffc0000 [ 127.082250][ T6523] loop1: detected capacity change from 0 to 512 [ 127.111598][ T28] audit: type=1326 audit(1791184044.410:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7213f9e159 code=0x7ffc0000 [ 127.172705][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 127.202915][ T28] audit: type=1326 audit(1791184044.410:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7213f9e159 code=0x7ffc0000 [ 127.223726][ T6527] loop0: detected capacity change from 0 to 512 [ 127.229180][ T6523] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.226: bad orphan inode 15 [ 127.263873][ T28] audit: type=1326 audit(1791184044.410:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7213f9e159 code=0x7ffc0000 [ 127.264013][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 127.307648][ T6523] ext4_test_bit(bit=14, block=5) = 0 [ 127.315657][ T28] audit: type=1326 audit(1791184044.410:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7213f9e159 code=0x7ffc0000 [ 127.343783][ T6523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.368179][ T28] audit: type=1326 audit(1791184044.410:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7213f9e159 code=0x7ffc0000 [ 127.416228][ T6523] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 127.434812][ T6527] EXT4-fs (loop0): 1 orphan inode deleted [ 127.437552][ T28] audit: type=1326 audit(1791184044.440:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7213f9e159 code=0x7ffc0000 [ 127.444698][ T6523] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.226: bit already cleared for inode 13 [ 127.484163][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 127.504503][ T28] audit: type=1326 audit(1791184044.440:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7213f9e159 code=0x7ffc0000 [ 127.529057][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 127.560088][ T6527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.605368][ T6527] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.657291][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.756182][ T6527] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 127.922215][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.452248][ T6547] ip_tables: iptables: counters copy to user failed while replacing table [ 129.187810][ T6562] loop3: detected capacity change from 0 to 1024 [ 129.305780][ T6562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.456657][ T49] hsr_slave_0: left promiscuous mode [ 129.484249][ T49] hsr_slave_1: left promiscuous mode [ 129.503249][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.515144][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.537630][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.585527][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.618071][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.667496][ T49] bridge_slave_1: left allmulticast mode [ 129.673326][ T49] bridge_slave_1: left promiscuous mode [ 129.700683][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.722409][ T49] bridge_slave_0: left allmulticast mode [ 129.736931][ T49] bridge_slave_0: left promiscuous mode [ 129.742851][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.804770][ T49] veth1_macvtap: left promiscuous mode [ 129.816123][ T49] veth0_macvtap: left promiscuous mode [ 129.824346][ T49] veth1_vlan: left promiscuous mode [ 129.830105][ T49] veth0_vlan: left promiscuous mode [ 130.585621][ T6586] loop3: detected capacity change from 0 to 164 [ 130.613593][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 130.711317][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 130.775466][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 131.182019][ T49] team0 (unregistering): Port device team_slave_1 removed [ 131.310507][ T49] team0 (unregistering): Port device team_slave_0 removed [ 131.456999][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.542575][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.018285][ T49] bond0 (unregistering): Released all slaves [ 132.112216][ T6608] loop3: detected capacity change from 0 to 256 [ 132.128492][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 132.413482][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 132.458237][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 133.210993][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.220071][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.510575][ T6681] autofs4:pid:6681:autofs_fill_super: called with bogus options [ 134.709260][ T6689] FAULT_INJECTION: forcing a failure. [ 134.709260][ T6689] name failslab, interval 1, probability 0, space 0, times 0 [ 134.722498][ T6689] CPU: 1 PID: 6689 Comm: syz.0.267 Not tainted syzkaller #0 [ 134.729865][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.739981][ T6689] Call Trace: [ 134.743408][ T6689] [ 134.746410][ T6689] dump_stack_lvl+0x18c/0x250 [ 134.751180][ T6689] ? show_regs_print_info+0x20/0x20 [ 134.756446][ T6689] ? load_image+0x420/0x420 [ 134.761017][ T6689] ? __might_sleep+0xe0/0xe0 [ 134.765666][ T6689] ? __lock_acquire+0x7eb0/0x7eb0 [ 134.770756][ T6689] should_fail_ex+0x394/0x4c0 [ 134.775517][ T6689] should_failslab+0x9/0x20 [ 134.780116][ T6689] slab_pre_alloc_hook+0x59/0x300 [ 134.785209][ T6689] ? mpi_resize+0x7d/0x210 [ 134.789691][ T6689] ? mpi_resize+0x7d/0x210 [ 134.794168][ T6689] __kmem_cache_alloc_node+0x53/0x250 [ 134.799620][ T6689] ? mpi_resize+0x7d/0x210 [ 134.804098][ T6689] __kmalloc+0xa7/0x240 [ 134.808317][ T6689] ? mpi_powm+0x1b6/0x2390 [ 134.812792][ T6689] mpi_resize+0x7d/0x210 [ 134.817108][ T6689] mpi_powm+0xb7f/0x2390 [ 134.821449][ T6689] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 134.827672][ T6689] ? mpihelp_cmp+0xba/0xd0 [ 134.832150][ T6689] ? mpi_cmp+0x1b8/0x290 [ 134.836455][ T6689] rsa_enc+0x293/0x3d0 [ 134.840577][ T6689] ? crypto_dh_decode_key+0x170/0x170 [ 134.845999][ T6689] ? __virt_addr_valid+0x10c/0x380 [ 134.851170][ T6689] ? __virt_addr_valid+0x10c/0x380 [ 134.856343][ T6689] pkcs1pad_verify+0x406/0x5e0 [ 134.861180][ T6689] crypto_sig_verify+0x1bc/0x250 [ 134.866181][ T6689] ? crypto_sig_sign+0x240/0x240 [ 134.871206][ T6689] ? rsa_max_size+0x19/0x70 [ 134.875766][ T6689] ? pkcs1pad_set_pub_key+0x15d/0x1c0 [ 134.881243][ T6689] public_key_verify_signature+0x607/0x870 [ 134.887163][ T6689] ? public_key_free+0x80/0x80 [ 134.892025][ T6689] ? asymmetric_key_generate_id+0x60/0x150 [ 134.897939][ T6689] ? asymmetric_key_id_same+0x67/0xe0 [ 134.903378][ T6689] x509_check_for_self_signed+0x31b/0x430 [ 134.909165][ T6689] x509_cert_parse+0x5a0/0x7b0 [ 134.914004][ T6689] x509_key_preparse+0x64/0x6c0 [ 134.919000][ T6689] ? down_read+0x1ac/0x2e0 [ 134.923472][ T6689] asymmetric_key_preparse+0xa9/0x140 [ 134.928941][ T6689] __key_create_or_update+0x3a6/0xa60 [ 134.934422][ T6689] ? __lock_acquire+0x7eb0/0x7eb0 [ 134.939528][ T6689] ? key_create_or_update+0x60/0x60 [ 134.944794][ T6689] ? bpf_lsm_key_permission+0x9/0x10 [ 134.950156][ T6689] ? lookup_user_key+0xb66/0x1140 [ 134.955247][ T6689] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 134.961284][ T6689] ? keyring_search_rcu+0x280/0x280 [ 134.966548][ T6689] key_create_or_update+0x42/0x60 [ 134.971639][ T6689] __se_sys_add_key+0x34f/0x410 [ 134.976581][ T6689] ? __x64_sys_add_key+0xc0/0xc0 [ 134.981591][ T6689] ? lockdep_hardirqs_on+0x98/0x150 [ 134.986857][ T6689] ? __x64_sys_add_key+0x20/0xc0 [ 134.991874][ T6689] do_syscall_64+0x55/0xb0 [ 134.996346][ T6689] ? clear_bhb_loop+0x40/0x90 [ 135.001085][ T6689] ? clear_bhb_loop+0x40/0x90 [ 135.005827][ T6689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.011786][ T6689] RIP: 0033:0x7fcd68b9e159 [ 135.016299][ T6689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.035965][ T6689] RSP: 002b:00007fcd699e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 135.044559][ T6689] RAX: ffffffffffffffda RBX: 00007fcd68e25fa0 RCX: 00007fcd68b9e159 [ 135.052623][ T6689] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 135.060655][ T6689] RBP: 00007fcd68c3506b R08: 00000000100e7386 R09: 0000000000000000 [ 135.068686][ T6689] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 135.076709][ T6689] R13: 00007fcd68e26038 R14: 00007fcd68e25fa0 R15: 00007ffe050bffe8 [ 135.084761][ T6689] [ 135.112059][ T6692] loop3: detected capacity change from 0 to 1024 [ 135.136217][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 135.159681][ T6692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.289805][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 135.289820][ T28] audit: type=1800 audit(1791184052.690:207): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.268" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 135.395214][ T28] audit: type=1800 audit(1791184052.740:208): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.268" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 135.430589][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.503023][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 135.522358][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 136.407410][ T6728] raw_sendmsg: syz.3.271 forgot to set AF_INET. Fix it! [ 136.660016][ T6733] loop3: detected capacity change from 0 to 512 [ 136.731752][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 136.750361][ T6736] FAULT_INJECTION: forcing a failure. [ 136.750361][ T6736] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 136.770681][ T6733] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.273: corrupted in-inode xattr: invalid ea_ino [ 136.827570][ T6736] CPU: 1 PID: 6736 Comm: syz.0.274 Not tainted syzkaller #0 [ 136.834971][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.845084][ T6736] Call Trace: [ 136.848412][ T6736] [ 136.851464][ T6736] dump_stack_lvl+0x18c/0x250 [ 136.856214][ T6736] ? show_regs_print_info+0x20/0x20 [ 136.861484][ T6736] ? load_image+0x420/0x420 [ 136.866064][ T6736] ? __might_fault+0xaa/0x120 [ 136.870799][ T6736] ? __lock_acquire+0x7eb0/0x7eb0 [ 136.875979][ T6736] should_fail_ex+0x394/0x4c0 [ 136.880730][ T6736] strncpy_from_user+0x36/0x2f0 [ 136.885641][ T6736] getname_flags+0xf6/0x500 [ 136.890207][ T6736] do_sys_openat2+0xda/0x1d0 [ 136.894908][ T6736] ? do_sys_open+0xe0/0xe0 [ 136.899472][ T6736] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 136.905513][ T6736] ? lock_chain_count+0x20/0x20 [ 136.910427][ T6736] __x64_sys_openat+0x139/0x160 [ 136.915384][ T6736] do_syscall_64+0x55/0xb0 [ 136.919866][ T6736] ? clear_bhb_loop+0x40/0x90 [ 136.924607][ T6736] ? clear_bhb_loop+0x40/0x90 [ 136.929375][ T6736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.935324][ T6736] RIP: 0033:0x7fcd68b9e159 [ 136.939788][ T6736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.959453][ T6736] RSP: 002b:00007fcd699e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 136.967955][ T6736] RAX: ffffffffffffffda RBX: 00007fcd68e25fa0 RCX: 00007fcd68b9e159 [ 136.975978][ T6736] RDX: 0000000000004140 RSI: 0000000000000000 RDI: 0000000000000003 [ 136.984002][ T6736] RBP: 00007fcd68c3506b R08: 0000000000000000 R09: 0000000000000000 [ 136.992041][ T6736] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 136.997799][ T6733] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.273: couldn't read orphan inode 15 (err -117) [ 137.000124][ T6736] R13: 00007fcd68e26038 R14: 00007fcd68e25fa0 R15: 00007ffe050bffe8 [ 137.000161][ T6736] [ 137.081045][ T6733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.146846][ T6746] netlink: 'syz.1.276': attribute type 9 has an invalid length. [ 137.169551][ T6746] netlink: 391 bytes leftover after parsing attributes in process `syz.1.276'. [ 137.378766][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.438523][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 137.461397][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 138.421896][ T6779] loop1: detected capacity change from 0 to 128 [ 138.452180][ T6782] loop3: detected capacity change from 0 to 512 [ 138.467636][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 138.478232][ T6782] EXT4-fs: Ignoring removed bh option [ 138.490558][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 138.516448][ T6782] ext4: Bad value for 'sb' [ 138.588926][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 138.623081][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 138.643774][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 138.682333][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 138.903715][ T6794] syz.3.282 uses obsolete (PF_INET,SOCK_PACKET) [ 138.987581][ T6791] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.052108][ T6799] 9pnet_fd: p9_fd_create_tcp (6799): problem connecting socket to 127.0.0.1 [ 139.279269][ T6806] loop1: detected capacity change from 0 to 512 [ 139.288009][ T6806] EXT4-fs: Ignoring removed nobh option [ 139.298804][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 139.393187][ T6806] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #3: comm syz.1.285: corrupted inode contents [ 139.444701][ T6806] EXT4-fs (loop1): Remounting filesystem read-only [ 139.497398][ T6806] Quota error (device loop1): write_blk: dquota write failed [ 139.505261][ T6806] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 139.516308][ T6806] EXT4-fs (loop1): 1 truncate cleaned up [ 139.523772][ T6806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.536638][ T6806] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.646853][ T3068] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 140.105310][ T6816] syz.0.284 (6816) used greatest stack depth: 15224 bytes left [ 140.145621][ T3068] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 140.206261][ T3068] usb 4-1: can't read configurations, error -71 [ 140.308372][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.465164][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 141.480338][ T6828] loop1: detected capacity change from 0 to 512 [ 141.530994][ T6828] syz.1.288: attempt to access beyond end of device [ 141.530994][ T6828] loop1: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 141.568718][ T6828] syz.1.288: attempt to access beyond end of device [ 141.568718][ T6828] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 141.597783][ T28] audit: type=1800 audit(1791184059.000:209): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.288" name="file2" dev="loop1" ino=1048605 res=0 errno=0 [ 141.610626][ T6828] syz.1.288: attempt to access beyond end of device [ 141.610626][ T6828] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 141.665500][ T6828] syz.1.288: attempt to access beyond end of device [ 141.665500][ T6828] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 141.680833][ T6828] syz.1.288: attempt to access beyond end of device [ 141.680833][ T6828] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 141.752411][ T6834] ip_tables: iptables: counters copy to user failed while replacing table [ 141.800655][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 141.845760][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 141.893402][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.293'. [ 144.283456][ T6875] FAULT_INJECTION: forcing a failure. [ 144.283456][ T6875] name failslab, interval 1, probability 0, space 0, times 0 [ 144.326736][ T6875] CPU: 0 PID: 6875 Comm: syz.1.298 Not tainted syzkaller #0 [ 144.334116][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.344223][ T6875] Call Trace: [ 144.347678][ T6875] [ 144.350655][ T6875] dump_stack_lvl+0x18c/0x250 [ 144.355417][ T6875] ? show_regs_print_info+0x20/0x20 [ 144.360691][ T6875] ? load_image+0x420/0x420 [ 144.365266][ T6875] ? __lock_acquire+0x7eb0/0x7eb0 [ 144.370353][ T6875] ? mark_lock+0x94/0x320 [ 144.374752][ T6875] should_fail_ex+0x394/0x4c0 [ 144.379502][ T6875] should_failslab+0x9/0x20 [ 144.384076][ T6875] slab_pre_alloc_hook+0x59/0x300 [ 144.389186][ T6875] kmem_cache_alloc_node+0x5e/0x310 [ 144.394497][ T6875] ? __alloc_skb+0x103/0x2c0 [ 144.399186][ T6875] __alloc_skb+0x103/0x2c0 [ 144.403675][ T6875] rtmsg_ifa+0xf9/0x1f0 [ 144.407894][ T6875] __inet_insert_ifa+0x9b4/0xbd0 [ 144.412895][ T6875] ? notifier_call_chain+0x36a/0x380 [ 144.418269][ T6875] ? inet_rcu_free_ifa+0xc0/0xc0 [ 144.423390][ T6875] devinet_ioctl+0x1417/0x1d70 [ 144.428243][ T6875] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 144.433422][ T6875] ? _copy_from_user+0xa5/0xe0 [ 144.438248][ T6875] ? get_user_ifreq+0x12b/0x180 [ 144.443166][ T6875] inet_ioctl+0x42b/0x560 [ 144.447529][ T6875] ? tomoyo_path_number_perm+0x217/0x5e0 [ 144.453202][ T6875] ? inet_shutdown+0x370/0x370 [ 144.457995][ T6875] ? slab_free_freelist_hook+0x130/0x1a0 [ 144.463664][ T6875] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 144.469389][ T6875] ? __kmem_cache_free+0xba/0x1f0 [ 144.474471][ T6875] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 144.479981][ T6875] sock_do_ioctl+0xfc/0x310 [ 144.484528][ T6875] ? sock_show_fdinfo+0xb0/0xb0 [ 144.489440][ T6875] sock_ioctl+0x5be/0x7e0 [ 144.493821][ T6875] ? sock_poll+0x3e0/0x3e0 [ 144.498314][ T6875] ? bpf_lsm_file_ioctl+0x9/0x10 [ 144.503291][ T6875] ? security_file_ioctl+0x80/0xa0 [ 144.508443][ T6875] ? sock_poll+0x3e0/0x3e0 [ 144.512908][ T6875] __se_sys_ioctl+0xfd/0x170 [ 144.517540][ T6875] do_syscall_64+0x55/0xb0 [ 144.522035][ T6875] ? clear_bhb_loop+0x40/0x90 [ 144.526751][ T6875] ? clear_bhb_loop+0x40/0x90 [ 144.531459][ T6875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.537395][ T6875] RIP: 0033:0x7f7213f9e159 [ 144.541864][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.561518][ T6875] RSP: 002b:00007f7214e59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.569974][ T6875] RAX: ffffffffffffffda RBX: 00007f7214225fa0 RCX: 00007f7213f9e159 [ 144.577977][ T6875] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000005 [ 144.585976][ T6875] RBP: 00007f721403506b R08: 0000000000000000 R09: 0000000000000000 [ 144.593978][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.601987][ T6875] R13: 00007f7214226038 R14: 00007f7214225fa0 R15: 00007fffe091ed68 [ 144.610018][ T6875] [ 146.631068][ T6911] syzkaller0: entered promiscuous mode [ 146.648672][ T6911] syzkaller0: entered allmulticast mode [ 147.193306][ T6931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.316'. [ 148.761911][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 148.846448][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 149.687504][ T7002] cgroup2: Unknown parameter 'D' [ 152.279045][ T7062] loop3: detected capacity change from 0 to 4096 [ 152.732321][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 153.867157][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 153.901308][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 154.058751][ T7077] netlink: 'syz.3.336': attribute type 2 has an invalid length. [ 155.090999][ T7077] loop3: detected capacity change from 0 to 65536 [ 155.103450][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 155.127786][ T7077] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 155.195849][ T7077] XFS (loop3): Ending clean mount [ 155.218686][ T7077] XFS (loop3): Quotacheck needed: Please wait. [ 155.281389][ T7077] XFS (loop3): Quotacheck: Done. [ 155.408508][ T5778] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 155.473299][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 155.525357][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 155.942373][ T7130] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 156.416695][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 156.632136][ T27] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 156.646179][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.670003][ T27] usb 1-1: Product: syz [ 156.682375][ T27] usb 1-1: Manufacturer: syz [ 156.703395][ T27] usb 1-1: SerialNumber: syz [ 156.762327][ T27] usb 1-1: config 0 descriptor?? [ 156.800599][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 156.819856][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 157.015790][ T27] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 157.068229][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.097040][ T27] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 157.106317][ T27] usb 1-1: media controller created [ 157.171062][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.322920][ T27] DVB: Unable to find symbol dib7000p_attach() [ 157.333806][ T27] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 157.426648][ T27] rc_core: IR keymap rc-dib0700-rc5 not found [ 157.433041][ T27] Registered IR keymap rc-empty [ 157.438735][ T27] dvb-usb: could not initialize remote control. [ 157.445284][ T27] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 157.468695][ T27] usb 1-1: USB disconnect, device number 2 [ 157.532142][ T27] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 159.203344][ T7206] udevd[7206]: open /dev/null failed: No such file or directory [ 159.967412][ T6988] udevd[6988]: inotify_add_watch(7, /dev/sda, 10) failed: No such file or directory [ 160.074261][ T6988] udevd[6988]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 160.183200][ T7211] loop3: detected capacity change from 0 to 4096 [ 160.222927][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 161.209987][ T7211] ntfs3: loop3: failed to convert "0080" to cp775 [ 161.242737][ T7211] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 161.457570][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 161.467670][ T9] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 161.531876][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 161.661976][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 161.676703][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.697832][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 161.715627][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 161.723840][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.742971][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 161.760971][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 161.770701][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.784304][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 161.803570][ T9] usb 1-1: string descriptor 0 read error: -22 [ 161.811678][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 161.824615][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.841202][ T9] adutux 1-1:168.0: interrupt endpoints not found [ 162.061914][ T9] usb 1-1: USB disconnect, device number 3 [ 164.507989][ T7225] loop0: detected capacity change from 0 to 32768 [ 164.537975][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 164.548385][ T7225] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.349 (7225) [ 164.627265][ T7225] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 164.648335][ T7225] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 164.668839][ T7225] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 164.692102][ T7225] BTRFS info (device loop0): use zstd compression, level 3 [ 164.709796][ T7225] BTRFS info (device loop0): using free space tree [ 164.795361][ T7229] loop3: detected capacity change from 0 to 32768 [ 164.835046][ T7229] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.352 (7229) [ 164.840622][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 164.866993][ T7225] BTRFS info (device loop0): enabling ssd optimizations [ 164.884296][ T7225] BTRFS info (device loop0): auto enabling async discard [ 164.952455][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 164.981135][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 165.029715][ T28] audit: type=1800 audit(1791184082.430:210): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.349" name="control" dev="loop0" ino=263 res=0 errno=0 [ 165.633507][ T5779] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 165.765067][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 165.785974][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 167.042803][ T7263] netlink: 64 bytes leftover after parsing attributes in process `syz.1.358'. [ 167.463021][ T7260] loop0: detected capacity change from 0 to 32768 [ 167.491601][ T7260] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.357 (7260) [ 167.506317][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 167.551527][ T7256] loop3: detected capacity change from 0 to 32768 [ 167.560144][ T7260] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.575341][ T7256] XFS: ikeep mount option is deprecated. [ 167.587513][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 167.599976][ T7260] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 167.617918][ T7260] BTRFS info (device loop0): using free space tree [ 167.634183][ T7256] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.740039][ T7260] BTRFS info (device loop0): enabling ssd optimizations [ 167.771747][ T7260] BTRFS info (device loop0): auto enabling async discard [ 167.898701][ T7256] XFS (loop3): Ending clean mount [ 167.937288][ T7256] XFS (loop3): Quotacheck needed: Please wait. [ 168.010619][ T7256] XFS (loop3): Quotacheck: Done. [ 168.070160][ T5779] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.184475][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.192987][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 168.206047][ T6988] udevd[6988]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 170.402281][ T7302] jffs2: notice: (7302) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 171.106702][ T28] audit: type=1800 audit(1791184088.490:211): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.359" name="bus" dev="ramfs" ino=11993 res=0 errno=0 [ 173.683570][ T7315] loop1: detected capacity change from 0 to 32768 [ 173.881848][ T7315] JBD2: Ignoring recovery information on journal [ 173.892352][ T7315] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 173.901090][ T7315] JBD2: bad block at offset 32 [ 173.965803][ T7315] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 174.394771][ T7319] udevd[7319]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 174.460825][ T7328] loop0: detected capacity change from 0 to 256 [ 174.549163][ T7319] udevd[7319]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 174.560567][ T7328] FAT-fs (loop0): Unrecognized mount option "utf8=" or missing value [ 174.633964][ T7319] udevd[7319]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 174.737547][ T7319] udevd[7319]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 175.116863][ T7335] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 175.139646][ T7335] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 175.149981][ T7335] OCFS2: File system is now read-only. [ 175.155590][ T7335] (syz.1.365,7335,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 175.164149][ T7335] (syz.1.365,7335,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 175.172551][ T7335] (syz.1.365,7335,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 175.180866][ T7335] (syz.1.365,7335,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 175.189592][ T7335] (syz.1.365,7335,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 175.197583][ T7335] (syz.1.365,7335,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 175.206227][ T7335] (syz.1.365,7335,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 175.215790][ T7335] (syz.1.365,7335,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 175.698065][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 175.725464][ T7319] udevd[7319]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 175.792957][ T7319] udevd[7319]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 176.134017][ T28] audit: type=1326 audit(1791184093.510:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd68b97ed7 code=0x7ffc0000 [ 176.201154][ T28] audit: type=1326 audit(1791184093.520:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd68b3f4d9 code=0x7ffc0000 [ 176.289866][ T28] audit: type=1326 audit(1791184093.520:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd68b97ed7 code=0x7ffc0000 [ 176.328783][ T28] audit: type=1326 audit(1791184093.520:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd68b3f4d9 code=0x7ffc0000 [ 176.392224][ T28] audit: type=1326 audit(1791184093.520:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd68b97ed7 code=0x7ffc0000 [ 176.470874][ T28] audit: type=1326 audit(1791184093.520:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd68b3f4d9 code=0x7ffc0000 [ 176.532743][ T28] audit: type=1326 audit(1791184093.520:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd68b97ed7 code=0x7ffc0000 [ 176.591036][ T28] audit: type=1326 audit(1791184093.520:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd68b3f4d9 code=0x7ffc0000 [ 176.619020][ T28] audit: type=1326 audit(1791184093.520:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd68b97ed7 code=0x7ffc0000 [ 176.649230][ T28] audit: type=1326 audit(1791184093.520:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd68b3f4d9 code=0x7ffc0000 SYZFAIL: mount(dev) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=125 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 181.156372][ T4129] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.316678][ T4129] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.424701][ T4129] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.539967][ T4129] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.596805][ T7366] tipc: Resetting bearer [ 181.646326][ T7366] tipc: Disabling bearer [ 182.752266][ T4129] hsr_slave_0: left promiscuous mode [ 182.759418][ T4129] hsr_slave_1: left promiscuous mode [ 182.766002][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.773624][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.785451][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.794260][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.806697][ T4129] bridge_slave_1: left allmulticast mode [ 182.812475][ T4129] bridge_slave_1: left promiscuous mode [ 182.818567][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.829012][ T4129] bridge_slave_0: left allmulticast mode [ 182.834727][ T4129] bridge_slave_0: left promiscuous mode [ 182.841234][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.880197][ T4129] veth1_macvtap: left promiscuous mode [ 182.885835][ T4129] veth0_macvtap: left promiscuous mode [ 182.895913][ T4129] veth1_vlan: left promiscuous mode [ 182.903243][ T4129] veth0_vlan: left promiscuous mode [ 183.067700][ T4129] bond1 (unregistering): Released all slaves [ 183.636579][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 183.695726][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 183.744445][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.793297][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.140334][ T4129] bond0 (unregistering): Released all slaves [ 184.738236][ T4129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.808300][ T4129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.880661][ T4129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.975698][ T4129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.172501][ T4129] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.312033][ T4129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.387296][ T4129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.463424][ T4129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.528129][ T4129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.688936][ T4129] tipc: Left network mode [ 186.987175][ T4129] hsr_slave_0: left promiscuous mode [ 186.994271][ T4129] hsr_slave_1: left promiscuous mode [ 187.002969][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.010582][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.018992][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.026427][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.034471][ T4129] bridge_slave_1: left allmulticast mode [ 187.040258][ T4129] bridge_slave_1: left promiscuous mode [ 187.045979][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.055204][ T4129] bridge_slave_0: left allmulticast mode [ 187.061235][ T4129] bridge_slave_0: left promiscuous mode [ 187.067338][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.081900][ T4129] hsr_slave_0: left promiscuous mode [ 187.088472][ T4129] hsr_slave_1: left promiscuous mode [ 187.094434][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.102478][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.111278][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.119046][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.126903][ T4129] bridge_slave_1: left allmulticast mode [ 187.132587][ T4129] bridge_slave_1: left promiscuous mode [ 187.138740][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.149544][ T4129] bridge_slave_0: left allmulticast mode [ 187.155243][ T4129] bridge_slave_0: left promiscuous mode [ 187.161468][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.201311][ T4129] veth1_macvtap: left promiscuous mode [ 187.208285][ T4129] veth0_macvtap: left promiscuous mode [ 187.213951][ T4129] veth1_vlan: left promiscuous mode [ 187.221414][ T4129] veth0_vlan: left promiscuous mode [ 187.229674][ T4129] veth1_macvtap: left promiscuous mode [ 187.235236][ T4129] veth0_macvtap: left promiscuous mode [ 187.241121][ T4129] veth1_vlan: left promiscuous mode [ 187.246462][ T4129] veth0_vlan: left promiscuous mode [ 187.939625][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 187.982002][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 188.024673][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.067080][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.370712][ T4129] bond0 (unregistering): Released all slaves [ 188.875059][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 188.920467][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 188.965488][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.010263][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.341343][ T4129] bond0 (unregistering): Released all slaves