last executing test programs: 1m49.045505952s ago: executing program 3 (id=427): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x40, 0x4a, 0x1, 0x40000000, 0x10002}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 1m48.676882301s ago: executing program 3 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x1b, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1m48.224487253s ago: executing program 3 (id=433): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000012d000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 1m47.673165777s ago: executing program 3 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x1000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xc, 0x30002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m47.230572948s ago: executing program 3 (id=441): r0 = io_uring_setup(0x1006, &(0x7f0000000100)={0x0, 0x5f3d, 0x10000, 0x1, 0x200013a}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4090, &(0x7f0000008180)="$eJzszzFKA0EUBuA/2dWsQQLaWoidlcQbWHqBXCCdYGHhAaLeJngAKw/gQQTBE9hEZl0TRewUJXxfsfvPe/MGXvhzT8s0XBWvkmwmj9/M3E1vd1KXdDMaJ02S+mLUthat9PeTjI+zMWz62U5y+fWVyfyndwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6rrffwvKo15fOQVOVffbpeJb1klmS6txgkuT/vOtfVy1kXD46SnO52p1mZaJ0kyzyZ/9JCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB6qj/kXg4zeItN8sruHNoACAUxAO0J4GMYgYSwB8uxDVMSBApD8u175sQ1aedveMpQz91zHmtVS7bl/bUk47/Oq3c0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgrgAAAP//SlMZMA==") syz_open_procfs(r2, &(0x7f0000000280)='numa_maps\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m46.684992771s ago: executing program 3 (id=444): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20002005}) 1m46.468840597s ago: executing program 32 (id=444): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20002005}) 8.525031056s ago: executing program 2 (id=1197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg(r0, &(0x7f0000008500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="c8", 0x1}], 0x1}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000500)="a305060c0e77f4ee6a3fb9161d1f3389098004d662a2e1bc1f873dd8e0fc8333796372e0f89c50e7225d5e127396766b3cea5d916e1efd5527ca89bf58e20493bf44ef28c3c4a37ca8694480e5ab3231fe3d5636d5aa9263", 0x58, 0x4885, 0x0, 0x0) 7.796733354s ago: executing program 2 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x16bfc9754559bcb9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000031c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x4f834c58, 0x43, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x2, 0x7}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000003240)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000003280)="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", 0x2000, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005340)={0x90, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x401, 0xfffffffffffffff8, 0x0, 0xd5a6, 0x9, 0x0, 0xfffffffd, 0xfffffffd, 0x1000, 0x2, 0x0, 0x0, 0x7f, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000005400)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000074c0)={0x90, 0x0, 0xf5d9, {0x4, 0x4, 0x800, 0x4, 0x8, 0x5c, {0x2, 0xfffffffffffffffa, 0x589, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x2000, 0xb, r2, r3, 0xffff8001, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.54245037s ago: executing program 2 (id=1202): socket$nl_generic(0x10, 0x3, 0x10) futex_waitv(&(0x7f0000003480)=[{0x7, &(0x7f0000003200)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x51}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 6.491681806s ago: executing program 2 (id=1210): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 6.049073548s ago: executing program 2 (id=1220): socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 3.56096804s ago: executing program 1 (id=1219): socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) 2.562594496s ago: executing program 4 (id=1225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004000094850000000200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4}, &(0x7f0000000940), &(0x7f00000009c0)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000a00)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x80) 2.37502032s ago: executing program 4 (id=1226): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x2, 0x1, 0x1}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000740)={0x14, {{0x29, 0x0, 0x43000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$midi(0x0, 0x3e, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x18, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd8, 0x2, {0x4}}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x6d, 0xf7, 0x80, {0x4}}}]}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 2.145396586s ago: executing program 1 (id=1228): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x44}, 0xfffffff0}], 0x1, 0x0, 0x0) 2.049350528s ago: executing program 0 (id=1229): r0 = memfd_create(&(0x7f00000002c0)='Foot\xc6\x8cT\xcb', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x8) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 1.874110973s ago: executing program 1 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x8054) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1.837886223s ago: executing program 0 (id=1231): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000400), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000440)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) close(r1) 1.663042968s ago: executing program 2 (id=1232): r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x100000000]}, 0x0, 0x8) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 1.661431188s ago: executing program 0 (id=1233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xd}, {0x10, 0xffff}}}, 0x24}}, 0x4040004) 1.138843701s ago: executing program 33 (id=1232): r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x100000000]}, 0x0, 0x8) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 1.117481701s ago: executing program 0 (id=1235): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000640), 0x3, 0x42f, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ac0)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b00), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000b80)=""/286, 0x11e, 0x100000000000001) 1.117010992s ago: executing program 1 (id=1236): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x0, 0x1, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) close_range(r0, 0xffffffffffffffff, 0x0) 831.111579ms ago: executing program 1 (id=1237): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 677.467293ms ago: executing program 4 (id=1238): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) write$dsp(r0, &(0x7f0000000080)='d', 0x1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 561.504935ms ago: executing program 0 (id=1239): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x44}, 0xfffffff0}], 0x1, 0x0, 0x0) 561.226055ms ago: executing program 1 (id=1240): socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 460.182238ms ago: executing program 4 (id=1241): r0 = memfd_create(&(0x7f00000002c0)='Foot\xc6\x8cT\xcb', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x8) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 235.897323ms ago: executing program 0 (id=1242): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 156.516856ms ago: executing program 4 (id=1243): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 0s ago: executing program 4 (id=1244): r0 = msgget$private(0x0, 0x1f3) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002a00)={0x1, &(0x7f0000002a40)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) kernel console output (not intermixed with test programs): pid=5859 comm="syz.3.8" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 93.634766][ T28] audit: type=1326 audit(1791939586.326:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.3.8" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 94.059624][ T5779] Bluetooth: hci3: command tx timeout [ 94.139552][ T5779] Bluetooth: hci2: command tx timeout [ 94.149580][ T5779] Bluetooth: hci0: command tx timeout [ 94.149612][ T5789] Bluetooth: hci1: command tx timeout [ 94.380450][ T5817] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 94.551869][ T5895] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 94.579257][ T5895] netlink: 'syz.2.19': attribute type 4 has an invalid length. [ 94.586914][ T5895] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.19'. [ 94.612381][ T5817] usb 2-1: not running at top speed; connect to a high speed hub [ 94.624625][ T5817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 94.651500][ T5899] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 94.674583][ T5817] usb 2-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40 [ 94.683388][ T5899] netlink: 'syz.2.19': attribute type 4 has an invalid length. [ 94.686293][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.693739][ T5899] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.19'. [ 94.726725][ T5817] usb 2-1: Product: 渹꬘à¯é„¢ì›­ï˜€é£·îµšéž¡é•¿ì¨£ï¥‘ᱢ阹瓤봤땛è½ë†¿áƒè¸¥ä‡±è“嗞ｊఌã‡è ‡â…¶ç¨¶âŠªé›½å“੊યᅡ२Ⰲ囻彪ὂ⣀싇çä§Ë¯ [ 94.782727][ T5817] usb 2-1: Manufacturer: ဠ[ 94.787421][ T5817] usb 2-1: SerialNumber: â°‰ [ 94.833906][ T5877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.136789][ T5817] usb 2-1: USB disconnect, device number 2 [ 95.743737][ T5923] loop0: detected capacity change from 0 to 128 [ 96.147758][ T5934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.372226][ T5938] FAULT_INJECTION: forcing a failure. [ 96.372226][ T5938] name failslab, interval 1, probability 0, space 0, times 1 [ 96.391250][ T5938] CPU: 0 PID: 5938 Comm: syz.3.34 Not tainted syzkaller #0 [ 96.398589][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.408734][ T5938] Call Trace: [ 96.412180][ T5938] [ 96.415173][ T5938] dump_stack_lvl+0x18c/0x250 [ 96.419928][ T5938] ? show_regs_print_info+0x20/0x20 [ 96.425213][ T5938] ? load_image+0x420/0x420 [ 96.429799][ T5938] ? __might_sleep+0xe0/0xe0 [ 96.434487][ T5938] ? __lock_acquire+0x7eb0/0x7eb0 [ 96.439688][ T5938] should_fail_ex+0x394/0x4c0 [ 96.444437][ T5938] should_failslab+0x9/0x20 [ 96.449015][ T5938] slab_pre_alloc_hook+0x59/0x300 [ 96.454099][ T5938] ? nfnetlink_rcv+0xebe/0x2490 [ 96.459024][ T5938] __kmem_cache_alloc_node+0x53/0x250 [ 96.464480][ T5938] ? nfnetlink_rcv+0xebe/0x2490 [ 96.469419][ T5938] kmalloc_trace+0x2a/0xe0 [ 96.473911][ T5938] nfnetlink_rcv+0xebe/0x2490 [ 96.478691][ T5938] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 96.484417][ T5938] ? __lock_acquire+0x7eb0/0x7eb0 [ 96.489525][ T5938] ? netlink_deliver_tap+0x2e/0x1b0 [ 96.494803][ T5938] netlink_unicast+0x7b1/0x930 [ 96.499647][ T5938] netlink_sendmsg+0x8d0/0xbf0 [ 96.504530][ T5938] ? netlink_getsockopt+0x590/0x590 [ 96.509838][ T5938] ? apparmor_socket_sendmsg+0x8e/0x330 [ 96.515438][ T5938] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 96.520769][ T5938] ? security_socket_sendmsg+0x80/0xa0 [ 96.526264][ T5938] ? netlink_getsockopt+0x590/0x590 [ 96.531507][ T5938] ____sys_sendmsg+0x61b/0x980 [ 96.536324][ T5938] ? __asan_memset+0x22/0x40 [ 96.540960][ T5938] ? __sys_sendmsg_sock+0x30/0x30 [ 96.546024][ T5938] ? __import_iovec+0x5f2/0x850 [ 96.550940][ T5938] ? import_iovec+0x73/0xa0 [ 96.555511][ T5938] ___sys_sendmsg+0x2a6/0x360 [ 96.560285][ T5938] ? __sys_sendmsg+0x2b0/0x2b0 [ 96.565145][ T5938] __se_sys_sendmsg+0x1d0/0x2c0 [ 96.570052][ T5938] ? __x64_sys_sendmsg+0x80/0x80 [ 96.575046][ T5938] ? lockdep_hardirqs_on+0x98/0x150 [ 96.580285][ T5938] do_syscall_64+0x55/0xb0 [ 96.584769][ T5938] ? clear_bhb_loop+0x40/0x90 [ 96.589501][ T5938] ? clear_bhb_loop+0x40/0x90 [ 96.594232][ T5938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.600167][ T5938] RIP: 0033:0x7f18dfd9e2d9 [ 96.604629][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.624616][ T5938] RSP: 002b:00007f18e0c79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.633065][ T5938] RAX: ffffffffffffffda RBX: 00007f18e0025fa0 RCX: 00007f18dfd9e2d9 [ 96.641093][ T5938] RDX: 000000000000c860 RSI: 0000200000007dc0 RDI: 0000000000000005 [ 96.649100][ T5938] RBP: 00007f18dfe35888 R08: 0000000000000000 R09: 0000000000000000 [ 96.657163][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.665180][ T5938] R13: 00007f18e0026038 R14: 00007f18e0025fa0 R15: 00007ffdf6bf6ae8 [ 96.673222][ T5938] [ 96.808538][ T5785] IPVS: starting estimator thread 0... [ 96.919303][ T5945] IPVS: using max 20 ests per chain, 48000 per kthread [ 97.345575][ T973] cfg80211: failed to load regulatory.db [ 97.364301][ T5960] process 'syz.2.43' launched './file0' with NULL argv: empty string added [ 98.257411][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 98.257428][ T28] audit: type=1326 audit(1791939591.616:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 98.299156][ T28] audit: type=1326 audit(1791939591.616:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 98.329397][ T28] audit: type=1326 audit(1791939591.626:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 98.361439][ T28] audit: type=1326 audit(1791939591.626:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 98.391552][ T28] audit: type=1326 audit(1791939591.626:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 98.416724][ T5988] FAULT_INJECTION: forcing a failure. [ 98.416724][ T5988] name failslab, interval 1, probability 0, space 0, times 0 [ 98.431496][ T5988] CPU: 1 PID: 5988 Comm: syz.3.54 Not tainted syzkaller #0 [ 98.438820][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.439748][ T28] audit: type=1326 audit(1791939591.626:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 98.448905][ T5988] Call Trace: [ 98.448923][ T5988] [ 98.448935][ T5988] dump_stack_lvl+0x18c/0x250 [ 98.483765][ T5988] ? show_regs_print_info+0x20/0x20 [ 98.489031][ T5988] ? load_image+0x420/0x420 [ 98.493623][ T5988] should_fail_ex+0x394/0x4c0 [ 98.498351][ T5988] should_failslab+0x9/0x20 [ 98.502905][ T5988] slab_pre_alloc_hook+0x59/0x300 [ 98.507971][ T5988] ? wake_bit_function+0x200/0x200 [ 98.513124][ T5988] ? vmci_handle_arr_create+0x71/0x130 [ 98.518636][ T5988] ? vmci_handle_arr_create+0x71/0x130 [ 98.524134][ T5988] __kmem_cache_alloc_node+0x53/0x250 [ 98.529558][ T5988] ? vmci_handle_arr_create+0x71/0x130 [ 98.535053][ T5988] __kmalloc+0xa7/0x240 [ 98.539262][ T5988] ? __schedule_delayed_monitor_work+0x200/0x200 [ 98.545691][ T5988] vmci_handle_arr_create+0x71/0x130 [ 98.551033][ T5988] vmci_ctx_put+0x120/0xbf0 [ 98.555582][ T5988] ? vmci_ctx_destroy+0xde/0x100 [ 98.560559][ T5988] ? vmci_ctx_destroy+0x100/0x100 [ 98.565624][ T5988] ? __rwlock_init+0x150/0x150 [ 98.570471][ T5988] ? do_raw_spin_unlock+0x121/0x230 [ 98.575808][ T5988] vmci_host_close+0x91/0x140 [ 98.580525][ T5988] ? vmci_host_open+0xe0/0xe0 [ 98.585238][ T5988] __fput+0x221/0x940 [ 98.589269][ T5988] __se_sys_close+0x15c/0x1e0 [ 98.593993][ T5988] do_syscall_64+0x55/0xb0 [ 98.598445][ T5988] ? clear_bhb_loop+0x40/0x90 [ 98.603178][ T5988] ? clear_bhb_loop+0x40/0x90 [ 98.607889][ T5988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.613850][ T5988] RIP: 0033:0x7f18dfd9e2d9 [ 98.618310][ T5988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.637985][ T5988] RSP: 002b:00007f18e0c79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 98.646437][ T5988] RAX: ffffffffffffffda RBX: 00007f18e0025fa0 RCX: 00007f18dfd9e2d9 [ 98.654440][ T5988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 98.662440][ T5988] RBP: 00007f18dfe35888 R08: 0000000000000000 R09: 0000000000000000 [ 98.670465][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.678466][ T5988] R13: 00007f18e0026038 R14: 00007f18e0025fa0 R15: 00007ffdf6bf6ae8 [ 98.686487][ T5988] [ 98.697598][ T28] audit: type=1326 audit(1791939591.626:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 98.726538][ T28] audit: type=1326 audit(1791939591.626:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 98.759453][ T28] audit: type=1326 audit(1791939591.626:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 98.789243][ T28] audit: type=1326 audit(1791939591.626:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 99.061395][ T5998] loop1: detected capacity change from 0 to 256 [ 99.068894][ T5998] ======================================================= [ 99.068894][ T5998] WARNING: The mand mount option has been deprecated and [ 99.068894][ T5998] and is ignored by this kernel. Remove the mand [ 99.068894][ T5998] option from the mount to silence this warning. [ 99.068894][ T5998] ======================================================= [ 99.160662][ T5998] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.816042][ T5994] loop0: detected capacity change from 0 to 32768 [ 99.848564][ T5994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.57 (5994) [ 99.915615][ T5994] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.959817][ T5994] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 99.968661][ T5994] BTRFS info (device loop0): turning on sync discard [ 100.069344][ T5994] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 100.094007][ T5994] BTRFS info (device loop0): use zstd compression, level 3 [ 100.125118][ T5994] BTRFS info (device loop0): turning on async discard [ 100.149333][ T5994] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 100.199323][ T5994] BTRFS info (device loop0): trying to use backup root at mount time [ 100.207616][ T5994] BTRFS info (device loop0): enabling auto defrag [ 100.259650][ T5994] BTRFS info (device loop0): turning on flush-on-commit [ 100.266725][ T5994] BTRFS info (device loop0): using free space tree [ 100.542532][ T3508] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 100.581444][ T5994] BTRFS error (device loop0): failed to load root extent [ 100.599102][ T5994] BTRFS warning (device loop0): try to load backup roots slot 1 [ 100.619542][ T3508] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 100.652630][ T5994] BTRFS warning (device loop0): couldn't read tree root [ 100.675219][ T5994] BTRFS warning (device loop0): try to load backup roots slot 2 [ 100.707475][ T3508] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 100.739585][ T5994] BTRFS warning (device loop0): couldn't read tree root [ 100.748020][ T5994] BTRFS warning (device loop0): try to load backup roots slot 3 [ 100.800904][ T5994] BTRFS info (device loop0): enabling ssd optimizations [ 100.829859][ T5994] BTRFS info (device loop0): rebuilding free space tree [ 100.912219][ T5994] BTRFS info (device loop0): checking UUID tree [ 101.107172][ T5994] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.134616][ T6058] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 102.276189][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 102.694200][ T6106] loop2: detected capacity change from 0 to 512 [ 102.707551][ T6106] EXT4-fs: Ignoring removed nobh option [ 102.802385][ T6106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.839620][ T6106] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.027007][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.876678][ T6145] loop1: detected capacity change from 0 to 512 [ 103.909364][ T6145] EXT4-fs (loop1): invalid journal inode [ 103.925188][ T6145] EXT4-fs (loop1): can't get journal size [ 103.967597][ T6145] EXT4-fs (loop1): 1 truncate cleaned up [ 104.011009][ T6145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.167115][ T6155] loop3: detected capacity change from 0 to 8192 [ 104.206649][ T6155] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.307567][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.849441][ T973] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.053641][ T973] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 105.077178][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 105.109457][ T973] usb 2-1: Product: syz [ 105.113722][ T973] usb 2-1: Manufacturer: syz [ 105.599509][ T6185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.607228][ T6185] IPv6: NLM_F_CREATE should be set when creating new route [ 105.628098][ T6187] netlink: 'syz.3.122': attribute type 10 has an invalid length. [ 105.671157][ T6187] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.685058][ T6187] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.774730][ T973] scsi host1: uas [ 105.810509][ C0] usb 2-1: stat urb: no pending cmd for uas-tag 0 [ 106.047226][ C0] usb 2-1: cmd cmplt err -71 [ 106.059440][ T9] usb 2-1: USB disconnect, device number 3 [ 106.068206][ T9] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 106.076586][ T9] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 107.350635][ T6227] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 107.409268][ T6227] caller generic_access_phys+0x33f/0x650 mapping multiple BARs [ 107.624366][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'. [ 107.732922][ T6236] overlayfs: failed to clone upperpath [ 108.272424][ T6257] ip_tables: iptables: counters copy to user failed while replacing table [ 108.338472][ T6257] raw_sendmsg: syz.3.149 forgot to set AF_INET. Fix it! [ 108.574946][ T6263] netlink: 'syz.3.151': attribute type 4 has an invalid length. [ 108.680826][ T6265] netlink: 'syz.3.151': attribute type 4 has an invalid length. [ 109.246285][ T6283] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 109.277863][ T6283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.335297][ T6287] bond1: (slave veth3): Enslaving as an active interface with a down link [ 109.462725][ T6283] bond1: (slave syz_tun): making interface the new active one [ 109.478098][ T6283] syz_tun: entered promiscuous mode [ 109.494770][ T6283] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 109.566076][ T6283] syz.3.159 (6283) used greatest stack depth: 20488 bytes left [ 109.609365][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 109.656138][ T6296] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.665701][ T6296] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.674516][ T6296] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.683999][ T6296] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.766230][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 109.793127][ T6296] Zero length message leads to an empty skb [ 109.864857][ T6302] loop2: detected capacity change from 0 to 4096 [ 109.933028][ T6302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.108780][ T6314] netlink: 196 bytes leftover after parsing attributes in process `syz.3.170'. [ 110.112600][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.326724][ T9] kernel read not supported for file [userfaultfd] (pid: 9 comm: kworker/0:1) [ 110.926231][ T6341] sctp: [Deprecated]: syz.1.181 (pid 6341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.926231][ T6341] Use struct sctp_sack_info instead [ 111.253234][ T6347] netlink: 'syz.3.183': attribute type 5 has an invalid length. [ 111.474039][ T6343] syzkaller1: entered promiscuous mode [ 111.509233][ T6343] syzkaller1: entered allmulticast mode [ 112.622521][ T6385] Illegal XDP return value 4291379200 on prog (id 30) dev syz_tun, expect packet loss! [ 112.832473][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 112.832491][ T28] audit: type=1800 audit(1791939606.196:124): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.202" name="file0" dev="overlay" ino=326 res=0 errno=0 [ 112.897866][ T28] audit: type=1804 audit(1791939606.246:125): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.202" name="/newroot/56/bus/file0" dev="overlay" ino=326 res=1 errno=0 [ 112.945330][ T6396] loop1: detected capacity change from 0 to 512 [ 113.006024][ T6396] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 113.049999][ T6396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 113.076071][ T6396] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.096636][ T6396] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.204: bad orphan inode 3 [ 113.140172][ T6396] EXT4-fs (loop1): Remounting filesystem read-only [ 113.148477][ T6396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 113.172932][ T6396] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.204: dx entry: limit 0 != root limit 125 [ 113.186256][ T6396] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.204: Corrupt directory, running e2fsck is recommended [ 113.203367][ T6396] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.204: dx entry: limit 0 != root limit 125 [ 113.217199][ T6396] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.204: Corrupt directory, running e2fsck is recommended [ 113.239215][ T6396] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.204: dx entry: limit 0 != root limit 125 [ 113.269369][ T6396] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.204: Corrupt directory, running e2fsck is recommended [ 113.330418][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 113.653496][ T6414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'. [ 113.787802][ T6422] capability: warning: `syz.3.213' uses deprecated v2 capabilities in a way that may be insecure [ 114.216246][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'. [ 116.077181][ T6528] loop3: detected capacity change from 0 to 1024 [ 117.100998][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'. [ 117.325066][ T6560] overlayfs: failed to clone upperpath [ 117.385907][ T6541] loop2: detected capacity change from 0 to 32768 [ 117.476790][ T6541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.234 (6541) [ 117.566412][ T6541] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.638042][ T6541] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 117.684046][ T6541] BTRFS info (device loop2): force clearing of disk cache [ 117.732198][ T6541] BTRFS info (device loop2): use zlib compression, level 3 [ 117.789860][ T6541] BTRFS info (device loop2): using free space tree [ 117.911960][ T6582] warning: `syz.3.250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.175398][ T6541] BTRFS info (device loop2): enabling ssd optimizations [ 118.199079][ T6541] BTRFS info (device loop2): auto enabling async discard [ 118.223057][ T6596] loop3: detected capacity change from 0 to 512 [ 118.241381][ T6541] BTRFS info (device loop2): rebuilding free space tree [ 118.260835][ T6596] EXT4-fs: Ignoring removed oldalloc option [ 118.301189][ T6596] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.330780][ T6596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.334162][ T6541] BTRFS info (device loop2): checking UUID tree [ 118.366846][ T6596] EXT4-fs (loop3): 1 truncate cleaned up [ 118.385548][ T6596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.242464][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.326633][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.594916][ T28] audit: type=1326 audit(1791939612.946:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.3.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 119.669302][ T28] audit: type=1326 audit(1791939612.946:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.3.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 119.732738][ T28] audit: type=1326 audit(1791939612.956:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.3.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 119.820692][ T28] audit: type=1326 audit(1791939612.956:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.3.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 119.891229][ T28] audit: type=1326 audit(1791939612.956:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.3.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 119.966843][ T28] audit: type=1326 audit(1791939612.956:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.3.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 120.036928][ T28] audit: type=1326 audit(1791939612.986:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.3.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 120.104357][ T28] audit: type=1326 audit(1791939612.986:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.3.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 120.179247][ T28] audit: type=1326 audit(1791939612.986:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.3.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 120.255258][ T28] audit: type=1326 audit(1791939612.986:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.3.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18dfd9e2d9 code=0x7ffc0000 [ 120.890138][ T6514] syz_tun: left promiscuous mode [ 121.782027][ T6676] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.281'. [ 121.799534][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.281'. [ 122.235858][ T6678] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 122.714647][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.293'. [ 122.750346][ T6700] ref_ctr increment failed for inode: 0x186 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807df95580 [ 123.054630][ T6714] netlink: 14 bytes leftover after parsing attributes in process `syz.0.296'. [ 123.166553][ T6714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.194509][ T6714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.228863][ T6714] bond0 (unregistering): Released all slaves [ 126.406368][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.308'. [ 126.431642][ T6762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.308'. [ 126.446610][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 126.759218][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 126.759235][ T28] audit: type=1326 audit(1791939620.106:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5146b9e2d9 code=0x7ffc0000 [ 126.824865][ T28] audit: type=1326 audit(1791939620.116:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5146b9e2d9 code=0x7ffc0000 [ 126.867663][ T28] audit: type=1326 audit(1791939620.116:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5146b9e2d9 code=0x7ffc0000 [ 126.939343][ T28] audit: type=1326 audit(1791939620.116:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5146b9e2d9 code=0x7ffc0000 [ 126.999579][ T28] audit: type=1326 audit(1791939620.116:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5146b9e2d9 code=0x7ffc0000 [ 127.030945][ T28] audit: type=1326 audit(1791939620.116:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5146b9e2d9 code=0x7ffc0000 [ 127.075667][ T28] audit: type=1326 audit(1791939620.116:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5146b9e2d9 code=0x7ffc0000 [ 127.134195][ T28] audit: type=1326 audit(1791939620.116:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5146b9e2d9 code=0x7ffc0000 [ 127.191298][ T28] audit: type=1326 audit(1791939620.116:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5146b9e2d9 code=0x7ffc0000 [ 127.217345][ T28] audit: type=1326 audit(1791939620.116:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f5146b9e2d9 code=0x7ffc0000 [ 127.266972][ T6793] loop2: detected capacity change from 0 to 64 [ 127.510993][ T6798] syz.2.322: attempt to access beyond end of device [ 127.510993][ T6798] loop2: rw=0, sector=423, nr_sectors = 1 limit=64 [ 127.547601][ T6793] syz.2.322: attempt to access beyond end of device [ 127.547601][ T6793] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 127.571416][ T6793] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 127.580254][ T6798] Buffer I/O error on dev loop2, logical block 423, async page read [ 127.580609][ T6798] syz.2.322: attempt to access beyond end of device [ 127.580609][ T6798] loop2: rw=0, sector=424, nr_sectors = 1 limit=64 [ 127.606704][ T6793] syz.2.322: attempt to access beyond end of device [ 127.606704][ T6793] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 127.626615][ T6793] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 127.635768][ T6798] Buffer I/O error on dev loop2, logical block 424, async page read [ 127.650651][ T6793] syz.2.322: attempt to access beyond end of device [ 127.650651][ T6793] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 127.667011][ T6798] syz.2.322: attempt to access beyond end of device [ 127.667011][ T6798] loop2: rw=0, sector=425, nr_sectors = 1 limit=64 [ 127.689876][ T6793] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 127.704556][ T6798] Buffer I/O error on dev loop2, logical block 425, async page read [ 127.713565][ T6798] syz.2.322: attempt to access beyond end of device [ 127.713565][ T6798] loop2: rw=0, sector=426, nr_sectors = 1 limit=64 [ 127.740935][ T6793] syz.2.322: attempt to access beyond end of device [ 127.740935][ T6793] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 127.776259][ T6798] Buffer I/O error on dev loop2, logical block 426, async page read [ 127.784736][ T6798] syz.2.322: attempt to access beyond end of device [ 127.784736][ T6798] loop2: rw=0, sector=427, nr_sectors = 1 limit=64 [ 127.805229][ T6798] Buffer I/O error on dev loop2, logical block 427, async page read [ 127.814328][ T6793] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 127.826317][ T6798] syz.2.322: attempt to access beyond end of device [ 127.826317][ T6798] loop2: rw=0, sector=428, nr_sectors = 1 limit=64 [ 127.846328][ T6793] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 127.972620][ T6809] netlink: 'syz.0.329': attribute type 10 has an invalid length. [ 128.226369][ T6819] FAULT_INJECTION: forcing a failure. [ 128.226369][ T6819] name failslab, interval 1, probability 0, space 0, times 0 [ 128.244913][ T6819] CPU: 1 PID: 6819 Comm: syz.3.332 Not tainted syzkaller #0 [ 128.252295][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.262427][ T6819] Call Trace: [ 128.265767][ T6819] [ 128.268745][ T6819] dump_stack_lvl+0x18c/0x250 [ 128.273485][ T6819] ? show_regs_print_info+0x20/0x20 [ 128.278742][ T6819] ? load_image+0x420/0x420 [ 128.283322][ T6819] ? __might_sleep+0xe0/0xe0 [ 128.287982][ T6819] ? __lock_acquire+0x7eb0/0x7eb0 [ 128.293084][ T6819] should_fail_ex+0x394/0x4c0 [ 128.297847][ T6819] should_failslab+0x9/0x20 [ 128.302427][ T6819] slab_pre_alloc_hook+0x59/0x300 [ 128.307521][ T6819] ? ops_init+0x8b/0x640 [ 128.311842][ T6819] ? ops_init+0x8b/0x640 [ 128.316144][ T6819] __kmem_cache_alloc_node+0x53/0x250 [ 128.321593][ T6819] ? ops_init+0x8b/0x640 [ 128.325890][ T6819] __kmalloc+0xa7/0x240 [ 128.330090][ T6819] ? nat_init_net+0x15a/0x190 [ 128.334811][ T6819] ops_init+0x8b/0x640 [ 128.338938][ T6819] setup_net+0x3b6/0xa20 [ 128.343223][ T6819] ? copy_net_ns+0x530/0x530 [ 128.347858][ T6819] ? copy_net_ns+0x347/0x530 [ 128.352491][ T6819] ? down_read_killable+0x1d0/0x340 [ 128.357740][ T6819] copy_net_ns+0x361/0x530 [ 128.362224][ T6819] create_new_namespaces+0x3ce/0x700 [ 128.367563][ T6819] unshare_nsproxy_namespaces+0x11a/0x160 [ 128.373326][ T6819] ksys_unshare+0x4fa/0x8f0 [ 128.377886][ T6819] ? sighand_ctor+0x50/0x50 [ 128.382447][ T6819] ? lock_chain_count+0x20/0x20 [ 128.387341][ T6819] ? syscall_enter_from_user_mode+0x25/0x80 [ 128.393303][ T6819] __x64_sys_unshare+0x38/0x40 [ 128.398105][ T6819] do_syscall_64+0x55/0xb0 [ 128.402552][ T6819] ? clear_bhb_loop+0x40/0x90 [ 128.407255][ T6819] ? clear_bhb_loop+0x40/0x90 [ 128.411964][ T6819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.417923][ T6819] RIP: 0033:0x7f18dfd9e2d9 [ 128.422466][ T6819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.442119][ T6819] RSP: 002b:00007f18e0c79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 128.450572][ T6819] RAX: ffffffffffffffda RBX: 00007f18e0025fa0 RCX: 00007f18dfd9e2d9 [ 128.458574][ T6819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 128.466574][ T6819] RBP: 00007f18dfe35888 R08: 0000000000000000 R09: 0000000000000000 [ 128.474578][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.482582][ T6819] R13: 00007f18e0026038 R14: 00007f18e0025fa0 R15: 00007ffdf6bf6ae8 [ 128.490598][ T6819] [ 128.953829][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.341'. [ 128.973571][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.341'. [ 129.000237][ T6840] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 129.081382][ T6845] overlayfs: failed to clone upperpath [ 130.005015][ T6890] loop2: detected capacity change from 0 to 256 [ 130.033946][ T6890] exFAT-fs (loop2): error, The cluster chain has a loop [ 130.043794][ T6890] exFAT-fs (loop2): failed to count the number of clusters in root [ 130.073826][ T6890] exFAT-fs (loop2): failed to recognize exfat type [ 130.186186][ T6893] loop2: detected capacity change from 0 to 2048 [ 130.206080][ T6893] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0x58 != 0xd4 [ 130.262488][ T6893] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.305305][ T6893] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 130.315837][ T6893] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 130.710484][ T6897] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 131.458556][ T973] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.672508][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.700857][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.713717][ T973] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.728277][ T973] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.737726][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.755193][ T973] usb 2-1: config 0 descriptor?? [ 132.207337][ T973] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 132.268219][ T973] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 133.189867][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.197000][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.432143][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 134.288296][ T8] usb 2-1: USB disconnect, device number 4 [ 134.705998][ T6954] xt_hashlimit: max too large, truncated to 1048576 [ 135.770638][ T6991] loop3: detected capacity change from 0 to 1024 [ 135.863431][ T6991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.118158][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.526040][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 136.602017][ T7010] tipc: Started in network mode [ 136.624300][ T7010] tipc: Node identity eabc576b8471, cluster identity 4711 [ 136.699954][ T7010] tipc: Enabled bearer , priority 10 [ 136.785656][ T7008] tipc: Resetting bearer [ 136.866354][ T7008] tipc: Disabling bearer [ 136.890213][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.375372][ T7036] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 138.020976][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.409'. [ 138.063429][ T7049] loop2: detected capacity change from 0 to 4096 [ 138.116868][ T7049] ntfs3: loop2: ino=0, mi_enum_attr [ 138.186503][ T7049] ntfs3: loop2: ino=0, mi_enum_attr [ 139.226805][ T7078] tipc: Failed to remove unknown binding: 66,1,1/0:950357408/950357410 [ 139.280862][ T7078] tipc: Failed to remove unknown binding: 66,1,1/0:950357408/950357410 [ 140.236210][ T7112] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.430'. [ 140.263678][ T7106] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.430'. [ 140.291696][ T7104] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.430'. [ 140.872012][ T7122] netlink: 'syz.0.435': attribute type 1 has an invalid length. [ 140.939846][ T7122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.137625][ T7122] bond0: (slave erspan0): making interface the new active one [ 141.172664][ T7122] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 141.211829][ T7124] bond0: entered promiscuous mode [ 141.217276][ T7124] erspan0: entered promiscuous mode [ 141.254350][ T7124] bond0: entered allmulticast mode [ 141.273021][ T7124] erspan0: entered allmulticast mode [ 141.459321][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 141.826634][ T5778] bond1: (slave syz_tun): Releasing active interface [ 142.393869][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 142.545762][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 142.571190][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 142.589175][ T7160] netlink: 'syz.1.451': attribute type 15 has an invalid length. [ 142.615805][ T7160] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 142.624838][ T7160] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 142.633582][ T7160] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 142.642318][ T7160] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 142.675685][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 142.686694][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 142.696158][ T7160] netlink: 'syz.1.451': attribute type 15 has an invalid length. [ 142.742663][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.753442][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.755239][ T7160] netdevsim netdevsim1 netdevsim0: set [0, 2] type 1 family 0 port 60387 - 0 [ 142.770248][ T7160] netdevsim netdevsim1 netdevsim1: set [0, 2] type 1 family 0 port 60387 - 0 [ 142.779275][ T7160] netdevsim netdevsim1 netdevsim2: set [0, 2] type 1 family 0 port 60387 - 0 [ 142.788105][ T7160] netdevsim netdevsim1 netdevsim3: set [0, 2] type 1 family 0 port 60387 - 0 [ 142.804621][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.813864][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.821811][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.829574][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.165785][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 143.270867][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.278216][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.286097][ T7166] bridge_slave_0: entered allmulticast mode [ 143.294123][ T7166] bridge_slave_0: entered promiscuous mode [ 143.304193][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.311880][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.319665][ T7166] bridge_slave_1: entered allmulticast mode [ 143.327421][ T7166] bridge_slave_1: entered promiscuous mode [ 143.381068][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.435617][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.486573][ T7189] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 143.503242][ T7189] caller generic_access_phys+0x33f/0x650 mapping multiple BARs [ 143.565645][ T7166] team0: Port device team_slave_0 added [ 143.593929][ T7166] team0: Port device team_slave_1 added [ 143.655080][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 143.671872][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.689912][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.727023][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.772120][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.784742][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.827226][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.883828][ T7166] hsr_slave_0: entered promiscuous mode [ 143.891821][ T7166] hsr_slave_1: entered promiscuous mode [ 143.899328][ T7166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.908113][ T7166] Cannot create hsr debugfs directory [ 144.097003][ T7166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.108244][ T7166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.120832][ T7166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.132637][ T7166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.242476][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.272535][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.287823][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.295089][ T6505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.312823][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.320137][ T6514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.568819][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.864043][ T5789] Bluetooth: hci3: command tx timeout [ 146.949994][ T5789] Bluetooth: hci3: command tx timeout [ 147.105861][ T7241] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.188566][ T7166] veth0_vlan: entered promiscuous mode [ 147.218206][ T7166] veth1_vlan: entered promiscuous mode [ 147.382957][ T7166] veth0_macvtap: entered promiscuous mode [ 147.404656][ T7166] veth1_macvtap: entered promiscuous mode [ 147.457018][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.499390][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.519124][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.544998][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.562292][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.576229][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.593158][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.606302][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.636171][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.663487][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.674992][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.686300][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.698444][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.729453][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.746813][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.769696][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.803207][ T7166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.821264][ T7166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.836445][ T7166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.848721][ T7166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.985144][ T6487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.006208][ T6487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.042977][ T6487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.052987][ T6487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.153545][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 148.183332][ T7264] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.192388][ T7264] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.201336][ T7264] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.210142][ T7264] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.229936][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 148.378574][ T7272] netlink: 'syz.1.493': attribute type 1 has an invalid length. [ 148.415700][ T7272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.487233][ T7272] bond1: (slave veth7): Enslaving as an active interface with a down link [ 148.623348][ T7272] bond1: (slave syz_tun): making interface the new active one [ 148.658211][ T7272] syz_tun: entered promiscuous mode [ 148.674045][ T7272] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 148.896620][ T7283] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 148.953422][ T7285] netlink: 'syz.1.487': attribute type 5 has an invalid length. [ 149.030448][ T7283] ip6gre0: entered promiscuous mode [ 149.035900][ T5789] Bluetooth: hci3: command tx timeout [ 149.052693][ T7283] ip6gre0: entered allmulticast mode [ 149.218700][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 149.271374][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.401187][ T7292] bridge_slave_1 (unregistering): left allmulticast mode [ 149.410610][ T7292] bridge_slave_1 (unregistering): left promiscuous mode [ 149.419444][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.521422][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 149.554425][ T7296] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.563516][ T7296] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.572354][ T7296] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.581270][ T7296] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.619603][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 150.387823][ T7315] netlink: 'syz.4.502': attribute type 5 has an invalid length. [ 150.630425][ T7325] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 150.679458][ T7325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.774065][ T7327] bond1: (slave veth7): Enslaving as an active interface with a down link [ 150.977990][ T7325] bond1: (slave syz_tun): making interface the new active one [ 150.999761][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 151.027785][ T7325] syz_tun: entered promiscuous mode [ 151.078214][ T7325] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 151.108053][ T5789] Bluetooth: hci3: command tx timeout [ 151.572793][ T7356] netlink: 'syz.2.516': attribute type 5 has an invalid length. [ 152.156883][ T7371] syz.1.531 uses obsolete (PF_INET,SOCK_PACKET) [ 152.188511][ T7375] netlink: 'syz.4.523': attribute type 1 has an invalid length. [ 152.197894][ T7371] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 152.684517][ T7382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.081481][ T7402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 153.298253][ T7410] netlink: 'syz.0.536': attribute type 1 has an invalid length. [ 153.455581][ T7410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.645880][ T7415] bond1: (slave veth9): Enslaving as an active interface with a down link [ 153.697951][ T7417] bond1: (slave syz_tun): making interface the new active one [ 153.767791][ T7417] syz_tun: entered promiscuous mode [ 153.814484][ T7417] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 154.051815][ T7434] loop4: detected capacity change from 0 to 1024 [ 154.258581][ T7442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.546'. [ 154.313007][ T7444] loop2: detected capacity change from 0 to 512 [ 154.334487][ T7444] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 154.353647][ T7444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 154.373156][ T7444] EXT4-fs (loop2): orphan cleanup on readonly fs [ 154.426249][ T7444] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.548: bad orphan inode 3 [ 154.437864][ T7444] EXT4-fs (loop2): Remounting filesystem read-only [ 154.476519][ T7444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 154.552161][ T7444] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.548: dx entry: limit 0 != root limit 125 [ 154.564605][ T7444] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.548: Corrupt directory, running e2fsck is recommended [ 154.584188][ T7444] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.548: dx entry: limit 0 != root limit 125 [ 154.596263][ T7444] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.548: Corrupt directory, running e2fsck is recommended [ 154.611510][ T7444] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.548: dx entry: limit 0 != root limit 125 [ 154.627851][ T7444] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.548: Corrupt directory, running e2fsck is recommended [ 154.678238][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 154.763511][ T7453] loop1: detected capacity change from 0 to 128 [ 155.012071][ T7453] bio_check_eod: 15 callbacks suppressed [ 155.012090][ T7453] syz.1.561: attempt to access beyond end of device [ 155.012090][ T7453] loop1: rw=2049, sector=145, nr_sectors = 456 limit=128 [ 155.075226][ T7453] syz.1.561: attempt to access beyond end of device [ 155.075226][ T7453] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 155.115657][ T7453] syz.1.561: attempt to access beyond end of device [ 155.115657][ T7453] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 155.213102][ T7467] loop2: detected capacity change from 0 to 1024 [ 155.288755][ T7438] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.505304][ T7470] loop1: detected capacity change from 0 to 1024 [ 156.450838][ T7497] loop4: detected capacity change from 0 to 164 [ 156.516857][ T7438] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.407967][ T7525] loop2: detected capacity change from 0 to 128 [ 157.420808][ T7525] FAT-fs (loop2): Unrecognized mount option "z5¯lë† o«(_6ŽmJïéûâ½;É­:?‘”I ™pv{ªÑ" or missing value [ 157.491347][ T7438] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.764595][ T7519] loop1: detected capacity change from 0 to 32768 [ 157.786648][ T7519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.575 (7519) [ 157.801078][ T5785] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 157.836669][ T7519] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.869179][ T7519] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 157.878007][ T7519] BTRFS info (device loop1): force clearing of disk cache [ 157.909090][ T7519] BTRFS info (device loop1): use zlib compression, level 3 [ 157.916420][ T7519] BTRFS info (device loop1): using free space tree [ 157.999511][ T5785] usb 3-1: Using ep0 maxpacket: 8 [ 158.030310][ T5785] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 241, changing to 11 [ 158.056679][ T5785] usb 3-1: config 1 interface 0 has no altsetting 0 [ 158.071214][ T7519] BTRFS info (device loop1): enabling ssd optimizations [ 158.096117][ T7519] BTRFS info (device loop1): auto enabling async discard [ 158.104262][ T5785] usb 3-1: language id specifier not provided by device, defaulting to English [ 158.138665][ T7519] BTRFS info (device loop1): rebuilding free space tree [ 158.149754][ T5785] usb 3-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 158.171010][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.196434][ T5785] usb 3-1: Product: syz [ 158.217146][ T5785] usb 3-1: Manufacturer: 〉 [ 158.232522][ T7519] BTRFS info (device loop1): checking UUID tree [ 158.239254][ T5785] usb 3-1: SerialNumber: syz [ 158.631451][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.095635][ T5785] usbhid 3-1:1.0: can't add hid device: -71 [ 159.102192][ T5785] usbhid: probe of 3-1:1.0 failed with error -71 [ 159.116458][ T5785] usb 3-1: USB disconnect, device number 2 [ 159.286921][ T7564] ref_ctr increment failed for inode: 0x2fc offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807af2e880 [ 159.519681][ T7571] overlayfs: failed to get inode (-116) [ 159.525861][ T7571] overlayfs: failed to get inode (-116) [ 159.668851][ T7579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.592'. [ 159.913282][ T6487] syz_tun: left promiscuous mode [ 160.510227][ T7600] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 160.753805][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 160.764034][ T5789] CPU: 0 PID: 5789 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 160.771819][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.781937][ T5789] Workqueue: hci2 hci_rx_work [ 160.786698][ T5789] Call Trace: [ 160.790016][ T5789] [ 160.792991][ T5789] dump_stack_lvl+0x18c/0x250 [ 160.797738][ T5789] ? show_regs_print_info+0x20/0x20 [ 160.802999][ T5789] ? load_image+0x420/0x420 [ 160.807584][ T5789] sysfs_create_dir_ns+0x26e/0x2a0 [ 160.812762][ T5789] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.817897][ T5789] ? sysfs_warn_dup+0xa0/0xa0 [ 160.822680][ T5789] ? do_raw_spin_unlock+0x121/0x230 [ 160.827963][ T5789] kobject_add_internal+0x617/0xc90 [ 160.833243][ T5789] kobject_add+0x164/0x240 [ 160.837729][ T5789] ? __rwlock_init+0x150/0x150 [ 160.842600][ T5789] ? kobject_init+0x1d0/0x1d0 [ 160.847324][ T5789] ? _raw_spin_unlock+0x28/0x40 [ 160.852237][ T5789] ? get_device_parent+0x366/0x390 [ 160.857392][ T5789] device_add+0x3fa/0xc40 [ 160.861846][ T5789] hci_conn_add_sysfs+0xd5/0x1e0 [ 160.866833][ T5789] hci_sync_conn_complete_evt+0x6d6/0x9a0 [ 160.872610][ T5789] ? hci_remote_ext_features_evt+0xa80/0xa80 [ 160.878641][ T5789] hci_event_packet+0x807/0x1280 [ 160.883639][ T5789] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.888710][ T5789] ? lock_chain_count+0x20/0x20 [ 160.893598][ T5789] ? bis_list+0x290/0x290 [ 160.897965][ T5789] ? kcov_remote_start+0x513/0x810 [ 160.903123][ T5789] ? lockdep_hardirqs_on+0x98/0x150 [ 160.908357][ T5789] ? hci_send_to_monitor+0xd7/0x4f0 [ 160.913589][ T5789] hci_rx_work+0x43a/0xd60 [ 160.918055][ T5789] ? process_scheduled_works+0x975/0x1600 [ 160.923820][ T5789] process_scheduled_works+0xa60/0x1600 [ 160.929515][ T5789] ? worker_attach_to_pool+0x370/0x370 [ 160.935015][ T5789] ? assign_work+0x3cc/0x5d0 [ 160.939652][ T5789] worker_thread+0xa5e/0xfe0 [ 160.944299][ T5789] kthread+0x2fa/0x390 [ 160.948399][ T5789] ? pr_cont_work+0x550/0x550 [ 160.953113][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 160.957744][ T5789] ret_from_fork+0x48/0x80 [ 160.962193][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 160.966815][ T5789] ret_from_fork_asm+0x11/0x20 [ 160.971678][ T5789] [ 160.978344][ T5789] kobject: kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 160.994419][ T5789] Bluetooth: hci2: failed to register connection device [ 161.053201][ T7610] netlink: 14 bytes leftover after parsing attributes in process `syz.1.602'. [ 161.180064][ T7610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.235520][ T7610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.269498][ T7610] bond0 (unregistering): Released all slaves [ 161.309641][ T7242] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 161.469096][ T7242] usb 3-1: device descriptor read/64, error -71 [ 161.759237][ T7242] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 161.939237][ T7242] usb 3-1: device descriptor read/64, error -71 [ 162.071386][ T7242] usb usb3-port1: attempt power cycle [ 162.356430][ T6508] syz_tun: left promiscuous mode [ 162.499168][ T7242] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.547738][ T7242] usb 3-1: device descriptor read/8, error -71 [ 162.780216][ T5789] Bluetooth: hci2: command tx timeout [ 162.844612][ T7242] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.852373][ T7637] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.612'. [ 162.869480][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.612'. [ 162.897765][ T7242] usb 3-1: device descriptor read/8, error -71 [ 163.039312][ T7242] usb usb3-port1: unable to enumerate USB device [ 164.184565][ T7662] loop4: detected capacity change from 0 to 512 [ 164.213644][ T7662] EXT4-fs: Ignoring removed oldalloc option [ 164.245543][ T7662] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.280895][ T7662] EXT4-fs (loop4): 1 truncate cleaned up [ 164.290474][ T7662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.838226][ T7166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.046657][ T11] syz_tun: left promiscuous mode [ 165.058076][ T7676] loop2: detected capacity change from 0 to 256 [ 165.579695][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 166.426303][ T7701] loop1: detected capacity change from 0 to 128 [ 166.491054][ T7701] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.521540][ T7701] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.782398][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.014869][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 167.014886][ T28] audit: type=1326 audit(1791939660.376:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 167.060676][ T28] audit: type=1326 audit(1791939660.406:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 167.094445][ T28] audit: type=1326 audit(1791939660.406:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 167.149361][ T28] audit: type=1326 audit(1791939660.406:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 167.209330][ T28] audit: type=1326 audit(1791939660.406:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 167.271093][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 167.280364][ T28] audit: type=1326 audit(1791939660.406:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 167.324142][ T28] audit: type=1326 audit(1791939660.406:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 167.377605][ T28] audit: type=1326 audit(1791939660.406:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 167.405051][ T28] audit: type=1326 audit(1791939660.446:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 167.431767][ T28] audit: type=1326 audit(1791939660.446:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 167.615386][ T7726] loop1: detected capacity change from 0 to 128 [ 168.852040][ T7764] loop1: detected capacity change from 0 to 1024 [ 168.905943][ T7764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 168.961160][ T7764] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.090965][ T7764] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.663: Freeing blocks not in datazone - block = 0, count = 16 [ 169.115507][ T7764] EXT4-fs (loop1): Remounting filesystem read-only [ 169.201413][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.592010][ T7792] loop1: detected capacity change from 0 to 256 [ 169.648136][ T7792] exFAT-fs (loop1): error, The cluster chain has a loop [ 169.670453][ T7792] exFAT-fs (loop1): failed to count the number of clusters in root [ 169.678471][ T7792] exFAT-fs (loop1): failed to recognize exfat type [ 169.867417][ T7799] loop1: detected capacity change from 0 to 2048 [ 169.933432][ T7799] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x58 != 0xd4 [ 169.994968][ T7799] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.050235][ T7799] UDF-fs: error (device loop1): udf_read_inode: (ino 1376) failed !bh [ 170.090243][ T7799] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 171.187188][ T7844] loop4: detected capacity change from 0 to 256 [ 171.267846][ T7844] exFAT-fs (loop4): error, The cluster chain has a loop [ 171.289044][ T7844] exFAT-fs (loop4): failed to count the number of clusters in root [ 171.339064][ T7844] exFAT-fs (loop4): failed to recognize exfat type [ 171.372338][ T7849] loop1: detected capacity change from 0 to 256 [ 171.617589][ T7851] loop4: detected capacity change from 0 to 2048 [ 171.691091][ T7851] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x58 != 0xd4 [ 171.750800][ T7851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.783535][ T7851] UDF-fs: error (device loop4): udf_read_inode: (ino 1376) failed !bh [ 171.809140][ T7851] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 172.124241][ T7846] loop2: detected capacity change from 0 to 40427 [ 172.153522][ T7846] F2FS-fs (loop2): invalid crc value [ 172.209156][ T7846] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.379139][ T7846] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 172.678101][ T5775] syz-executor: attempt to access beyond end of device [ 172.678101][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.719066][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 172.779255][ T5785] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.876186][ T7884] loop4: detected capacity change from 0 to 256 [ 172.960055][ T5785] usb 2-1: Using ep0 maxpacket: 8 [ 172.975919][ T5785] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 173.004921][ T5785] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 173.047045][ T5785] usb 2-1: config 179 has no interface number 0 [ 173.067372][ T5785] usb 2-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 173.068208][ T7886] lo speed is unknown, defaulting to 1000 [ 173.104327][ T5785] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 173.114150][ T7886] lo speed is unknown, defaulting to 1000 [ 173.130630][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.186958][ T7889] siw: device registration error -23 [ 173.204093][ T7886] lo speed is unknown, defaulting to 1000 [ 173.260800][ T7886] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 173.334166][ T7886] lo speed is unknown, defaulting to 1000 [ 173.348067][ T7886] lo speed is unknown, defaulting to 1000 [ 173.380185][ T7886] lo speed is unknown, defaulting to 1000 [ 173.396371][ T7886] lo speed is unknown, defaulting to 1000 [ 173.402628][ T7243] usb 2-1: USB disconnect, device number 5 [ 173.427203][ T7886] lo speed is unknown, defaulting to 1000 [ 174.325593][ T7903] loop2: detected capacity change from 0 to 256 [ 174.477684][ T7903] FAT-fs (loop2): Directory bread(block 64) failed [ 174.504841][ T7903] FAT-fs (loop2): Directory bread(block 65) failed [ 174.519211][ T7903] FAT-fs (loop2): Directory bread(block 66) failed [ 174.525846][ T7903] FAT-fs (loop2): Directory bread(block 67) failed [ 174.549231][ T7903] FAT-fs (loop2): Directory bread(block 68) failed [ 174.555855][ T7903] FAT-fs (loop2): Directory bread(block 69) failed [ 174.569337][ T7903] FAT-fs (loop2): Directory bread(block 70) failed [ 174.576875][ T7903] FAT-fs (loop2): Directory bread(block 71) failed [ 174.584736][ T7903] FAT-fs (loop2): Directory bread(block 72) failed [ 174.609206][ T7903] FAT-fs (loop2): Directory bread(block 73) failed [ 175.156625][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 175.422445][ T7928] team0: Port device team_slave_0 removed [ 176.680012][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 178.149176][ T7987] loop4: detected capacity change from 0 to 40427 [ 178.183993][ T7987] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 178.206065][ T7987] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 178.245643][ T7987] F2FS-fs (loop4): invalid crc value [ 178.284407][ T7987] F2FS-fs (loop4): Found nat_bits in checkpoint [ 178.439229][ T7987] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 178.464060][ T7987] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.037226][ T8031] overlayfs: failed to clone upperpath [ 182.510763][ T8049] loop1: detected capacity change from 0 to 128 [ 182.572212][ T8049] FAT-fs (loop1): Directory bread(block 32) failed [ 182.578855][ T8049] FAT-fs (loop1): Directory bread(block 33) failed [ 182.626615][ T8049] FAT-fs (loop1): Directory bread(block 34) failed [ 182.644538][ T8049] FAT-fs (loop1): Directory bread(block 35) failed [ 182.665118][ T8049] FAT-fs (loop1): Directory bread(block 36) failed [ 182.687785][ T8049] FAT-fs (loop1): Directory bread(block 37) failed [ 182.707305][ T8049] FAT-fs (loop1): Directory bread(block 38) failed [ 182.744804][ T8049] FAT-fs (loop1): Directory bread(block 39) failed [ 182.755234][ T8049] FAT-fs (loop1): Directory bread(block 40) failed [ 182.769154][ T8049] FAT-fs (loop1): Directory bread(block 41) failed [ 182.958738][ T8049] syz.1.769: attempt to access beyond end of device [ 182.958738][ T8049] loop1: rw=524288, sector=4108, nr_sectors = 4 limit=128 [ 182.973946][ T8049] syz.1.769: attempt to access beyond end of device [ 182.973946][ T8049] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 182.990594][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 182.990610][ T28] audit: type=1800 audit(1791939676.346:273): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.769" name="file1" dev="loop1" ino=1048657 res=0 errno=0 [ 183.259703][ T8060] loop2: detected capacity change from 0 to 512 [ 183.292867][ T8060] FAT-fs (loop2): Unrecognized mount option "ë" or missing value [ 183.326434][ T8060] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 183.788800][ T8] IPVS: starting estimator thread 0... [ 183.919531][ T8076] IPVS: using max 17 ests per chain, 40800 per kthread [ 185.115720][ T8087] loop1: detected capacity change from 0 to 512 [ 185.180753][ T8087] FAT-fs (loop1): Unrecognized mount option "ë" or missing value [ 185.359761][ T8087] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 186.138872][ T8119] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 186.176306][ T8119] bond2: entered promiscuous mode [ 186.181913][ T8119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.207803][ T8122] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.230125][ T8122] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 186.253075][ T8122] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 187.149574][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 187.243305][ T28] audit: type=1326 audit(1791939680.606:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.4.810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 187.334693][ T28] audit: type=1326 audit(1791939680.606:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.4.810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 187.418686][ T28] audit: type=1326 audit(1791939680.656:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.4.810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 187.471716][ T28] audit: type=1326 audit(1791939680.656:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.4.810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 187.517481][ T28] audit: type=1326 audit(1791939680.656:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.4.810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 187.568474][ T28] audit: type=1326 audit(1791939680.656:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.4.810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 187.628393][ T28] audit: type=1326 audit(1791939680.656:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.4.810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 187.685743][ T28] audit: type=1326 audit(1791939680.656:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.4.810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 187.744996][ T28] audit: type=1326 audit(1791939680.656:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.4.810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 187.955024][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.820'. [ 188.050715][ T8171] loop1: detected capacity change from 0 to 2048 [ 188.095052][ T8171] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 188.134331][ T8171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.423648][ T8170] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 188416 lbcount: 192512 extent 129+156672 [ 188.717356][ T8194] netlink: 84 bytes leftover after parsing attributes in process `syz.4.827'. [ 188.899205][ T5785] IPVS: starting estimator thread 0... [ 189.009544][ T8202] IPVS: using max 16 ests per chain, 38400 per kthread [ 189.158268][ T8214] netlink: 'syz.4.835': attribute type 1 has an invalid length. [ 189.173897][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.836'. [ 189.207121][ T8218] loop1: detected capacity change from 0 to 512 [ 189.219190][ T8218] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.238756][ T8218] EXT4-fs (loop1): orphan cleanup on readonly fs [ 189.248803][ T8218] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 189.264497][ T8214] bond1: entered promiscuous mode [ 189.273498][ T8218] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.837: invalid indirect mapped block 1819239214 (level 1) [ 189.290419][ T8214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.329814][ T8218] EXT4-fs (loop1): Remounting filesystem read-only [ 189.346763][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.836'. [ 189.347051][ T8218] EXT4-fs (loop1): 1 truncate cleaned up [ 189.380435][ T8218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.402651][ T8220] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.422655][ T8220] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 189.433883][ T8220] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 189.491298][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.627921][ T8226] Bluetooth: MGMT ver 1.22 [ 189.884572][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 190.226906][ T8247] netlink: 'syz.0.849': attribute type 1 has an invalid length. [ 190.264181][ T8247] bond2: entered promiscuous mode [ 190.295357][ T8247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.344199][ T8250] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 190.388021][ T8250] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 190.407577][ T8238] loop1: detected capacity change from 0 to 256 [ 190.420562][ T8250] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 190.467417][ T8238] FAT-fs (loop1): Directory bread(block 64) failed [ 190.492294][ T8238] FAT-fs (loop1): Directory bread(block 65) failed [ 190.503780][ T8238] FAT-fs (loop1): Directory bread(block 66) failed [ 190.519067][ T8238] FAT-fs (loop1): Directory bread(block 67) failed [ 190.528619][ T8238] FAT-fs (loop1): Directory bread(block 68) failed [ 190.555386][ T8238] FAT-fs (loop1): Directory bread(block 69) failed [ 190.575843][ T8238] FAT-fs (loop1): Directory bread(block 70) failed [ 190.590583][ T8238] FAT-fs (loop1): Directory bread(block 71) failed [ 190.618918][ T8238] FAT-fs (loop1): Directory bread(block 72) failed [ 190.625650][ T8238] FAT-fs (loop1): Directory bread(block 73) failed [ 190.796373][ T8257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.851'. [ 191.400048][ T7338] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 191.597580][ T7338] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.623508][ T7338] usb 2-1: not running at top speed; connect to a high speed hub [ 191.634849][ T7338] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.652555][ T7338] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 191.668806][ T7338] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 191.687567][ T7338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.698008][ T7338] usb 2-1: Product: syz [ 191.708203][ T7338] usb 2-1: Manufacturer: syz [ 191.713353][ T7338] usb 2-1: SerialNumber: syz [ 191.994993][ T7338] usb 2-1: 0:2 : does not exist [ 192.016184][ T7338] usb 2-1: unit 6 not found! [ 192.098777][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'. [ 192.108017][ T7338] usb 2-1: USB disconnect, device number 6 [ 192.173547][ T8034] udevd[8034]: setting owner of /dev/bus/usb/002/006 to uid=0, gid=0 failed: No such file or directory [ 192.266880][ T8034] udevd[8034]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.609260][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 192.609275][ T28] audit: type=1326 audit(1791939685.966:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x0 [ 193.716160][ T8319] lo speed is unknown, defaulting to 1000 [ 194.069112][ T8] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 194.272695][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 194.301380][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 194.326020][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.336830][ T8] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 194.367592][ T8] usb 5-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 194.377727][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.390856][ T8] usb 5-1: Product: syz [ 194.403668][ T8] usb 5-1: Manufacturer: syz [ 194.415488][ T8] usb 5-1: SerialNumber: syz [ 194.631671][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.639642][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.677025][ T8] usb 5-1: 0:2 : does not exist [ 194.703570][ T8] usb 5-1: unit 6 not found! [ 194.792385][ T8] usb 5-1: USB disconnect, device number 2 [ 194.905475][ T8034] udevd[8034]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.061443][ T8341] loop1: detected capacity change from 0 to 512 [ 195.130816][ T8341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.172287][ T8341] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.217792][ T8341] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 195.244318][ T8341] EXT4-fs (loop1): Remounting filesystem read-only [ 195.327346][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.699992][ T8356] loop2: detected capacity change from 0 to 2048 [ 195.736202][ T8356] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 195.758143][ T8356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.779699][ T7139] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 195.969273][ T7139] usb 5-1: Using ep0 maxpacket: 16 [ 196.009240][ T7139] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 196.029288][ T7139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.037383][ T7139] usb 5-1: Product: syz [ 196.078779][ T7139] usb 5-1: Manufacturer: syz [ 196.091624][ T7139] usb 5-1: SerialNumber: syz [ 196.157503][ T7139] usb 5-1: config 0 descriptor?? [ 196.180774][ T7139] usb 5-1: selecting invalid altsetting 1 [ 196.186597][ T7139] technisat-usb2: could not set alternate setting to 0 [ 196.397370][ T7139] technisat-usb2: firmware version: 0.0 [ 196.411629][ T7139] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 196.838231][ T7139] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.859602][ T7139] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 196.875554][ T7139] usb 5-1: media controller created [ 196.882788][ T7139] technisat-usb2: i2c-error: out failed 53 = -22 [ 196.891234][ T7139] dvb-usb: MAC address reading failed. [ 196.938734][ T7139] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.001959][ T8351] technisat-usb2: i2c-error: out failed 00 = -22 [ 197.065198][ T7139] DVB: Unable to find symbol stv090x_attach() [ 197.073956][ T7139] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 197.179969][ T7139] rc_core: IR keymap rc-technisat-usb2 not found [ 197.186493][ T7139] Registered IR keymap rc-empty [ 197.195364][ T7139] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 197.239381][ T7139] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 197.285484][ T7139] dvb-usb: schedule remote query interval to 100 msecs. [ 197.293486][ T7139] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 197.313401][ T7139] usb 5-1: USB disconnect, device number 3 [ 197.353819][ T8398] sctp: [Deprecated]: syz.1.902 (pid 8398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.353819][ T8398] Use struct sctp_sack_info instead [ 197.480548][ T7139] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 198.479669][ T8] IPVS: starting estimator thread 0... [ 198.490299][ T8428] netlink: 60 bytes leftover after parsing attributes in process `syz.0.915'. [ 198.589184][ T8429] IPVS: using max 17 ests per chain, 40800 per kthread [ 198.629427][ T7337] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 198.831267][ T7337] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 198.848475][ T7337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.874446][ T7337] usb 5-1: Product: syz [ 198.878756][ T7337] usb 5-1: Manufacturer: syz [ 198.894502][ T7337] usb 5-1: SerialNumber: syz [ 199.342050][ T7337] rtl8150 5-1:1.0: couldn't reset the device [ 199.355768][ T7337] rtl8150: probe of 5-1:1.0 failed with error -5 [ 199.384384][ T7337] usb 5-1: USB disconnect, device number 4 [ 199.590633][ T8452] loop1: detected capacity change from 0 to 512 [ 199.652817][ T8452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.666939][ T8452] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.733171][ T8452] capability: warning: `syz.1.924' uses 32-bit capabilities (legacy support in use) [ 199.875688][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.300936][ T28] audit: type=1326 audit(1791939693.666:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.2.929" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x0 [ 201.254787][ T8495] CacheFiles: Failed to register: -95 [ 201.263056][ T8496] sctp: [Deprecated]: syz.2.939 (pid 8496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.263056][ T8496] Use struct sctp_sack_info instead [ 201.651563][ T8509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.953'. [ 201.950206][ T8516] FAULT_INJECTION: forcing a failure. [ 201.950206][ T8516] name failslab, interval 1, probability 0, space 0, times 0 [ 201.966549][ T8516] CPU: 1 PID: 8516 Comm: syz.1.948 Not tainted syzkaller #0 [ 201.973927][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 201.984039][ T8516] Call Trace: [ 201.987377][ T8516] [ 201.990370][ T8516] dump_stack_lvl+0x18c/0x250 [ 201.995130][ T8516] ? show_regs_print_info+0x20/0x20 [ 202.000395][ T8516] ? load_image+0x420/0x420 [ 202.004971][ T8516] ? __might_sleep+0xe0/0xe0 [ 202.009631][ T8516] ? __lock_acquire+0x7eb0/0x7eb0 [ 202.014748][ T8516] should_fail_ex+0x394/0x4c0 [ 202.019538][ T8516] should_failslab+0x9/0x20 [ 202.024115][ T8516] slab_pre_alloc_hook+0x59/0x300 [ 202.029195][ T8516] ? d_instantiate+0x6f/0x90 [ 202.033852][ T8516] kmem_cache_alloc+0x5a/0x2c0 [ 202.038663][ T8516] ? alloc_empty_file+0x9e/0x1d0 [ 202.043641][ T8516] alloc_empty_file+0x9e/0x1d0 [ 202.048442][ T8516] alloc_file+0x5b/0x600 [ 202.052726][ T8516] alloc_file_pseudo+0x184/0x210 [ 202.057700][ T8516] ? fput+0x1a0/0x1a0 [ 202.061756][ T8516] anon_inode_getfile+0xc5/0x1a0 [ 202.066742][ T8516] sync_file_create+0x76/0x1c0 [ 202.071543][ T8516] sw_sync_ioctl+0x921/0xaa0 [ 202.076174][ T8516] ? __bpf_trace_sync_timeline+0x100/0x100 [ 202.082021][ T8516] ? __fget_files+0x28/0x460 [ 202.086663][ T8516] ? bpf_lsm_file_ioctl+0x9/0x10 [ 202.091657][ T8516] ? security_file_ioctl+0x80/0xa0 [ 202.096814][ T8516] ? __bpf_trace_sync_timeline+0x100/0x100 [ 202.102654][ T8516] __se_sys_ioctl+0xfd/0x170 [ 202.107311][ T8516] do_syscall_64+0x55/0xb0 [ 202.111764][ T8516] ? clear_bhb_loop+0x40/0x90 [ 202.116469][ T8516] ? clear_bhb_loop+0x40/0x90 [ 202.121180][ T8516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.127114][ T8516] RIP: 0033:0x7f9555b9e2d9 [ 202.131575][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.151215][ T8516] RSP: 002b:00007f9556a4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.159665][ T8516] RAX: ffffffffffffffda RBX: 00007f9555e25fa0 RCX: 00007f9555b9e2d9 [ 202.167669][ T8516] RDX: 0000200000000b00 RSI: 00000000c0285700 RDI: 0000000000000004 [ 202.175670][ T8516] RBP: 00007f9555c35888 R08: 0000000000000000 R09: 0000000000000000 [ 202.183755][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.191755][ T8516] R13: 00007f9555e26038 R14: 00007f9555e25fa0 R15: 00007fff74285f48 [ 202.199778][ T8516] [ 202.542149][ T8524] loop2: detected capacity change from 0 to 1024 [ 203.350243][ T28] audit: type=1326 audit(1791939696.716:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.1.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9555b9e2d9 code=0x0 [ 203.823028][ T8566] loop4: detected capacity change from 0 to 1024 [ 203.891443][ T8034] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.219464][ T5818] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 205.429451][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 205.444484][ T5818] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 205.461236][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.474458][ T5818] usb 2-1: Product: syz [ 205.480273][ T5818] usb 2-1: Manufacturer: syz [ 205.485033][ T5818] usb 2-1: SerialNumber: syz [ 205.498383][ T5818] usb 2-1: config 0 descriptor?? [ 205.535689][ T5818] usb 2-1: selecting invalid altsetting 1 [ 205.545907][ T5818] technisat-usb2: could not set alternate setting to 0 [ 205.742197][ T5818] technisat-usb2: firmware version: 0.0 [ 205.748853][ T5818] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 206.155527][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 206.189164][ T5818] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 206.198064][ T5818] usb 2-1: media controller created [ 206.223914][ T5818] technisat-usb2: i2c-error: out failed 53 = -22 [ 206.238834][ T5818] dvb-usb: MAC address reading failed. [ 206.317735][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.354664][ T8585] technisat-usb2: i2c-error: out failed 00 = -22 [ 206.480654][ T5818] DVB: Unable to find symbol stv090x_attach() [ 206.503933][ T5818] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 206.650491][ T5818] rc_core: IR keymap rc-technisat-usb2 not found [ 206.672593][ T5818] Registered IR keymap rc-empty [ 206.681939][ T5818] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 206.706621][ T5818] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 206.740448][ T5818] dvb-usb: schedule remote query interval to 100 msecs. [ 206.761709][ T5818] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 206.794870][ T5818] usb 2-1: USB disconnect, device number 7 [ 206.954533][ T5818] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 207.726265][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 207.749141][ T8641] netlink: 'syz.0.998': attribute type 12 has an invalid length. [ 207.786214][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 207.824654][ T8642] netlink: 'syz.0.998': attribute type 12 has an invalid length. [ 208.279307][ T7243] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 208.494700][ T7243] usb 3-1: Using ep0 maxpacket: 16 [ 208.508303][ T7243] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 208.534674][ T7243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.558285][ T7243] usb 3-1: Product: syz [ 208.569242][ T7243] usb 3-1: Manufacturer: syz [ 208.589152][ T7243] usb 3-1: SerialNumber: syz [ 208.598852][ T7243] usb 3-1: config 0 descriptor?? [ 208.620341][ T7243] usb 3-1: selecting invalid altsetting 1 [ 208.627713][ T7243] technisat-usb2: could not set alternate setting to 0 [ 208.829817][ T7243] technisat-usb2: firmware version: 0.0 [ 208.848805][ T7243] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 209.234476][ T7243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.277163][ T7243] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 209.297223][ T7243] usb 3-1: media controller created [ 209.303797][ T7243] technisat-usb2: i2c-error: out failed 53 = -22 [ 209.319143][ T7243] dvb-usb: MAC address reading failed. [ 209.389729][ T7243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.417276][ T8665] loop4: detected capacity change from 0 to 512 [ 209.434380][ T8649] technisat-usb2: i2c-error: out failed 00 = -22 [ 209.569421][ T8665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.594623][ T8665] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.615107][ T7243] DVB: Unable to find symbol stv090x_attach() [ 209.632746][ T7243] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 209.783605][ T7166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.808605][ T7243] rc_core: IR keymap rc-technisat-usb2 not found [ 209.815824][ T7243] Registered IR keymap rc-empty [ 209.831117][ T7243] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 209.862689][ T7243] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7 [ 209.897129][ T7243] dvb-usb: schedule remote query interval to 100 msecs. [ 209.905354][ T7243] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 209.926535][ T7243] usb 3-1: USB disconnect, device number 7 [ 210.111521][ T7243] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 210.747440][ T8693] loop2: detected capacity change from 0 to 256 [ 210.773824][ T28] audit: type=1326 audit(1791939704.136:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.0.1014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5146b9e2d9 code=0x0 [ 210.854437][ T8693] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 212.060528][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.066719][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.596627][ T8672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.000813][ T28] audit: type=1326 audit(1791939706.366:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.1.1028" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9555b9e2d9 code=0x0 [ 213.327967][ T8746] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1035'. [ 214.465876][ T8777] lo speed is unknown, defaulting to 1000 [ 215.061710][ T7139] IPVS: starting estimator thread 0... [ 215.155538][ T8787] IPVS: using max 17 ests per chain, 40800 per kthread [ 215.517678][ T28] audit: type=1326 audit(1791939708.866:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.4.1051" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x0 [ 216.074238][ T11] IPVS: stop unused estimator thread 0... [ 216.897971][ T8820] FAULT_INJECTION: forcing a failure. [ 216.897971][ T8820] name failslab, interval 1, probability 0, space 0, times 0 [ 216.919289][ T8820] CPU: 1 PID: 8820 Comm: syz.1.1060 Not tainted syzkaller #0 [ 216.926755][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 216.936856][ T8820] Call Trace: [ 216.940182][ T8820] [ 216.943155][ T8820] dump_stack_lvl+0x18c/0x250 [ 216.947889][ T8820] ? show_regs_print_info+0x20/0x20 [ 216.953119][ T8820] ? load_image+0x420/0x420 [ 216.957668][ T8820] ? __might_sleep+0xe0/0xe0 [ 216.962302][ T8820] ? __lock_acquire+0x7eb0/0x7eb0 [ 216.967389][ T8820] should_fail_ex+0x394/0x4c0 [ 216.972123][ T8820] should_failslab+0x9/0x20 [ 216.976685][ T8820] slab_pre_alloc_hook+0x59/0x300 [ 216.981744][ T8820] ? snprintf+0xe9/0x140 [ 216.986030][ T8820] ? xs_format_common_peer_ports+0x227/0x320 [ 216.992048][ T8820] ? xs_format_common_peer_ports+0x227/0x320 [ 216.998094][ T8820] __kmem_cache_alloc_node+0x53/0x250 [ 217.003526][ T8820] ? xs_format_common_peer_ports+0x227/0x320 [ 217.009545][ T8820] __kmalloc_node_track_caller+0xa4/0x230 [ 217.015412][ T8820] kstrdup+0x3b/0x80 [ 217.019365][ T8820] xs_format_common_peer_ports+0x227/0x320 [ 217.025217][ T8820] ? xs_read_stream_request+0xd90/0xd90 [ 217.030812][ T8820] ? kstrdup+0x65/0x80 [ 217.034926][ T8820] ? __asan_memcpy+0x40/0x70 [ 217.039567][ T8820] xs_format_peer_addresses+0x443/0x530 [ 217.045165][ T8820] ? xs_dummy_setup_socket+0x10/0x10 [ 217.050509][ T8820] ? init_timer_key+0x161/0x2a0 [ 217.055425][ T8820] xs_setup_tcp+0x752/0x920 [ 217.059965][ T8820] ? xs_create_sock+0x7c0/0x7c0 [ 217.064851][ T8820] ? __rwlock_init+0x150/0x150 [ 217.069664][ T8820] ? do_raw_spin_unlock+0x121/0x230 [ 217.074938][ T8820] xprt_create_transport+0x152/0x5b0 [ 217.080280][ T8820] rpc_create+0x4d3/0x8a0 [ 217.084654][ T8820] ? rpc_cleanup_clids+0x20/0x20 [ 217.089646][ T8820] ? net_generic+0x1e/0x240 [ 217.094198][ T8820] ? net_generic+0x1e/0x240 [ 217.098741][ T8820] ? nfs_create_rpc_client+0x2ea/0x730 [ 217.104258][ T8820] nfs_create_rpc_client+0x525/0x730 [ 217.109600][ T8820] ? nfs_init_timeout_values+0x420/0x420 [ 217.115294][ T8820] ? __init_waitqueue_head+0xa8/0x140 [ 217.120715][ T8820] nfs4_alloc_client+0x79e/0xc20 [ 217.125704][ T8820] ? nfs40_shutdown_client+0x80/0x80 [ 217.131037][ T8820] ? net_generic+0x1e/0x240 [ 217.135581][ T8820] ? nfs_get_client+0xa8b/0xe50 [ 217.140472][ T8820] ? __lock_acquire+0x7eb0/0x7eb0 [ 217.145569][ T8820] ? do_raw_spin_unlock+0x121/0x230 [ 217.150820][ T8820] nfs_get_client+0xab3/0xe50 [ 217.155564][ T8820] nfs4_set_client+0x3e2/0x5b0 [ 217.160385][ T8820] ? nfs4_create_referral_server+0x5f0/0x5f0 [ 217.166424][ T8820] ? __rpc_init_priority_wait_queue+0x300/0x400 [ 217.172718][ T8820] nfs4_create_server+0x48e/0x1080 [ 217.177893][ T8820] ? nfs4_set_ds_client+0x590/0x590 [ 217.183138][ T8820] ? get_nfs_version+0x1eb/0x210 [ 217.188112][ T8820] ? nfs_get_tree+0x11a4/0x1650 [ 217.193004][ T8820] nfs4_try_get_tree+0x49/0x110 [ 217.197911][ T8820] vfs_get_tree+0x8c/0x280 [ 217.202400][ T8820] do_new_mount+0x24a/0xa40 [ 217.206974][ T8820] __se_sys_mount+0x2e7/0x3d0 [ 217.211716][ T8820] ? __x64_sys_mount+0xc0/0xc0 [ 217.216524][ T8820] ? lockdep_hardirqs_on+0x98/0x150 [ 217.221803][ T8820] ? __x64_sys_mount+0x20/0xc0 [ 217.226615][ T8820] do_syscall_64+0x55/0xb0 [ 217.231065][ T8820] ? clear_bhb_loop+0x40/0x90 [ 217.235782][ T8820] ? clear_bhb_loop+0x40/0x90 [ 217.240504][ T8820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.246482][ T8820] RIP: 0033:0x7f9555b9e2d9 [ 217.250939][ T8820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.270586][ T8820] RSP: 002b:00007f9556a4e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 217.279079][ T8820] RAX: ffffffffffffffda RBX: 00007f9555e25fa0 RCX: 00007f9555b9e2d9 [ 217.287113][ T8820] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 217.295126][ T8820] RBP: 00007f9555c35888 R08: 0000200000000140 R09: 0000000000000000 [ 217.303135][ T8820] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 217.311157][ T8820] R13: 00007f9555e26038 R14: 00007f9555e25fa0 R15: 00007fff74285f48 [ 217.319190][ T8820] [ 218.997898][ T8843] netlink: 'syz.4.1067': attribute type 10 has an invalid length. [ 220.944741][ T8873] loop4: detected capacity change from 0 to 2048 [ 221.091663][ T8873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.310716][ T8884] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 221.398293][ T8884] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 206 with error 28 [ 221.442573][ T8884] EXT4-fs (loop4): This should not happen!! Data will be lost [ 221.442573][ T8884] [ 221.487099][ T8884] EXT4-fs (loop4): Total free blocks count 0 [ 221.511380][ T8884] EXT4-fs (loop4): Free/Dirty block details [ 221.535727][ T8884] EXT4-fs (loop4): free_blocks=4096 [ 221.543305][ T8884] EXT4-fs (loop4): dirty_blocks=752 [ 221.548590][ T8884] EXT4-fs (loop4): Block reservation details [ 221.619438][ T8884] EXT4-fs (loop4): i_reserved_data_blocks=47 [ 221.915583][ T2932] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 222.022701][ T8899] gretap0: entered promiscuous mode [ 222.033045][ T8899] gretap0: left promiscuous mode [ 223.416963][ T8932] ipip0: entered allmulticast mode [ 224.351826][ T8950] loop4: detected capacity change from 0 to 2048 [ 224.634103][ T8955] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.999273][ T8962] netlink: 'syz.1.1112': attribute type 10 has an invalid length. [ 225.524207][ T8955] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 225.572457][ T8955] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 225.617299][ T8955] Remounting filesystem read-only [ 225.631291][ T6505] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 225.649433][ T6505] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 225.656832][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.676207][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.694594][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.714074][ T6505] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 225.727935][ T6505] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 225.756924][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.784293][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.802934][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.826227][ T6505] NILFS (loop4): discard dirty page: offset=16777216, ino=18 [ 225.844179][ T6505] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 225.863520][ T6505] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 225.880157][ T6505] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 225.903823][ T6505] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 225.918648][ T6505] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 225.937954][ T6505] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 225.952463][ T6505] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 225.976040][ T6505] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 225.990636][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.014738][ T6505] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 226.039077][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.066897][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.089057][ T6505] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 226.096392][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.139443][ T6505] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 226.146661][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.179108][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.209064][ T6505] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 226.229202][ T6505] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.264333][ T7166] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 226.333125][ T7166] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 226.344771][ T7166] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 226.369044][ T7166] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 226.376444][ T7166] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 226.400961][ T7166] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 226.430711][ T7166] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 226.437486][ T7166] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 226.469373][ T7166] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.478340][ T7166] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.513837][ T7166] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.534159][ T7166] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 226.554840][ T7166] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 226.579037][ T7166] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.588007][ T7166] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.619102][ T7166] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.839978][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 227.007083][ T8984] vxlan0: entered allmulticast mode [ 227.197183][ T8987] loop2: detected capacity change from 0 to 2048 [ 227.380741][ T8987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.590958][ T8999] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 227.637974][ T8999] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 244 with error 28 [ 227.651899][ T8999] EXT4-fs (loop2): This should not happen!! Data will be lost [ 227.651899][ T8999] [ 227.662446][ T8999] EXT4-fs (loop2): Total free blocks count 0 [ 227.668507][ T8999] EXT4-fs (loop2): Free/Dirty block details [ 227.675510][ T8999] EXT4-fs (loop2): free_blocks=4096 [ 227.681095][ T8999] EXT4-fs (loop2): dirty_blocks=288 [ 227.686569][ T8999] EXT4-fs (loop2): Block reservation details [ 227.709042][ T8999] EXT4-fs (loop2): i_reserved_data_blocks=18 [ 228.033686][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 228.655177][ T9013] netlink: 'syz.2.1130': attribute type 10 has an invalid length. [ 230.352255][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 230.702603][ T9041] loop2: detected capacity change from 0 to 512 [ 230.768230][ T9041] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.857276][ T9041] EXT4-fs (loop2): 1 truncate cleaned up [ 230.891141][ T9041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.347971][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.014612][ T9063] loop1: detected capacity change from 0 to 2048 [ 232.118217][ T9068] lo speed is unknown, defaulting to 1000 [ 232.324519][ T9063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.507103][ T9076] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 232.666343][ T9076] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 110 with error 28 [ 232.747500][ T7139] IPVS: starting estimator thread 0... [ 232.805399][ T9076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 232.805399][ T9076] [ 232.859605][ T9078] IPVS: using max 18 ests per chain, 43200 per kthread [ 232.983003][ T9076] EXT4-fs (loop1): Total free blocks count 0 [ 233.066485][ T9076] EXT4-fs (loop1): Free/Dirty block details [ 233.095489][ T9076] EXT4-fs (loop1): free_blocks=4096 [ 233.159855][ T9076] EXT4-fs (loop1): dirty_blocks=672 [ 233.165214][ T9076] EXT4-fs (loop1): Block reservation details [ 233.219073][ T9076] EXT4-fs (loop1): i_reserved_data_blocks=42 [ 233.494604][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 233.540432][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'. [ 233.559995][ T6485] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 233.859925][ T9101] lo speed is unknown, defaulting to 1000 [ 234.363830][ T11] IPVS: stop unused estimator thread 0... [ 234.757315][ T27] IPVS: starting estimator thread 0... [ 234.849115][ T9116] IPVS: using max 19 ests per chain, 45600 per kthread [ 236.028868][ T11] IPVS: stop unused estimator thread 0... [ 236.139553][ T7337] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 236.363014][ T7337] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 236.387139][ T7337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.417465][ T7337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.447997][ T7337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 236.478138][ T7337] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 236.499346][ T7337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.523046][ T7337] usb 5-1: config 0 descriptor?? [ 237.011829][ T7337] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 237.029470][ T7337] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 237.048106][ T7337] holtek_kbd 0003:04D9:A055.0002: collection stack underflow [ 237.067084][ T7337] holtek_kbd 0003:04D9:A055.0002: item 0 0 0 12 parsing failed [ 237.096671][ T7337] holtek_kbd: probe of 0003:04D9:A055.0002 failed with error -22 [ 237.151139][ T9151] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1181'. [ 237.173335][ T9151] unsupported nlmsg_type 40 [ 237.203688][ T7337] usb 5-1: USB disconnect, device number 5 [ 239.538588][ T9186] loop2: detected capacity change from 0 to 32768 [ 239.588444][ T9186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1194 (9186) [ 239.611664][ T9186] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.622829][ T9186] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 239.631764][ T9186] BTRFS info (device loop2): using free space tree [ 239.708383][ T9196] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 239.743521][ T9186] BTRFS info (device loop2): enabling ssd optimizations [ 239.750779][ T9186] BTRFS info (device loop2): auto enabling async discard [ 239.862037][ T28] audit: type=1800 audit(1791939733.226:300): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1194" name="file1" dev="overlay" ino=260 res=0 errno=0 [ 240.146202][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.613508][ T28] audit: type=1326 audit(1791939734.976:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.1206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x0 [ 241.709079][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 241.889232][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 241.906145][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.941232][ T8] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 241.970923][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.996809][ T8] usb 2-1: Product: syz [ 242.008996][ T8] usb 2-1: Manufacturer: syz [ 242.014864][ T8] usb 2-1: SerialNumber: syz [ 242.186579][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1209'. [ 242.291687][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 242.319071][ T28] audit: type=1326 audit(1791939735.666:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.2.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 242.399093][ T28] audit: type=1326 audit(1791939735.666:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.2.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 242.489246][ T8] usb 2-1: USB disconnect, device number 8 [ 242.501537][ T28] audit: type=1326 audit(1791939735.676:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.2.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f888fb9d147 code=0x7ffc0000 [ 242.580096][ T28] audit: type=1326 audit(1791939735.676:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.2.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 242.679352][ T28] audit: type=1326 audit(1791939735.676:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.2.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 242.795017][ T28] audit: type=1326 audit(1791939735.686:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.2.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 242.845725][ T28] audit: type=1326 audit(1791939735.696:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.2.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 242.898497][ T28] audit: type=1326 audit(1791939735.706:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.2.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888fb9e2d9 code=0x7ffc0000 [ 242.944003][ T9252] loop4: detected capacity change from 0 to 256 [ 242.963927][ T9252] exfat: Deprecated parameter 'utf8' [ 242.981788][ T9252] exfat: Deprecated parameter 'namecase' [ 243.020102][ T9252] exfat: Deprecated parameter 'utf8' [ 243.061425][ T9252] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 243.106958][ T9252] syz.4.1213: attempt to access beyond end of device [ 243.106958][ T9252] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 243.144435][ T9252] syz.4.1213: attempt to access beyond end of device [ 243.144435][ T9252] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 243.166862][ T9252] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 243.186276][ T9253] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 243.508024][ T8971] bond1: (slave syz_tun): Releasing active interface [ 244.451796][ T9262] FAULT_INJECTION: forcing a failure. [ 244.451796][ T9262] name fail_futex, interval 1, probability 0, space 0, times 1 [ 244.479576][ T9262] CPU: 1 PID: 9262 Comm: syz.1.1216 Not tainted syzkaller #0 [ 244.487055][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.497192][ T9262] Call Trace: [ 244.500505][ T9262] [ 244.503476][ T9262] dump_stack_lvl+0x18c/0x250 [ 244.508195][ T9262] ? show_regs_print_info+0x20/0x20 [ 244.513427][ T9262] ? load_image+0x420/0x420 [ 244.517971][ T9262] ? get_user_pages_fast_only+0xa0/0xa0 [ 244.523602][ T9262] should_fail_ex+0x394/0x4c0 [ 244.528324][ T9262] get_futex_key+0x857/0x1030 [ 244.533045][ T9262] ? futex_setup_timer+0xc0/0xc0 [ 244.538031][ T9262] futex_wake+0x127/0x4f0 [ 244.542412][ T9262] ? futex_wake_mark+0x150/0x150 [ 244.547396][ T9262] do_futex+0x35d/0x3e0 [ 244.551590][ T9262] ? __might_fault+0xaa/0x120 [ 244.556309][ T9262] ? __ia32_sys_get_robust_list+0x110/0x110 [ 244.562238][ T9262] ? __might_fault+0xc6/0x120 [ 244.566948][ T9262] mm_release+0x184/0x3a0 [ 244.571316][ T9262] ? exit_mm_release+0x30/0x30 [ 244.576117][ T9262] ? lockdep_hardirqs_on+0x98/0x150 [ 244.581362][ T9262] exit_mm+0xa4/0x340 [ 244.585388][ T9262] ? sysctl_delayacct+0x220/0x220 [ 244.590472][ T9262] ? do_exit+0x2530/0x2530 [ 244.594936][ T9262] do_exit+0x909/0x2530 [ 244.599149][ T9262] ? put_task_struct+0xc0/0xc0 [ 244.603955][ T9262] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 244.609989][ T9262] ? get_signal+0x100e/0x1390 [ 244.614699][ T9262] ? lock_chain_count+0x20/0x20 [ 244.619586][ T9262] ? _raw_spin_lock_irq+0xbb/0xf0 [ 244.624649][ T9262] do_group_exit+0x22d/0x2f0 [ 244.629269][ T9262] ? lockdep_hardirqs_on+0x98/0x150 [ 244.634508][ T9262] get_signal+0x12a6/0x1390 [ 244.639071][ T9262] arch_do_signal_or_restart+0xc2/0x7b0 [ 244.644670][ T9262] ? get_sigframe_size+0x20/0x20 [ 244.649656][ T9262] ? __sys_bind+0x32f/0x3f0 [ 244.654208][ T9262] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 244.660225][ T9262] ? exit_to_user_mode_loop+0x3b/0x110 [ 244.665728][ T9262] exit_to_user_mode_loop+0x70/0x110 [ 244.671061][ T9262] exit_to_user_mode_prepare+0xee/0x180 [ 244.676648][ T9262] syscall_exit_to_user_mode+0x1a/0x50 [ 244.682142][ T9262] do_syscall_64+0x61/0xb0 [ 244.686617][ T9262] ? clear_bhb_loop+0x40/0x90 [ 244.691324][ T9262] ? clear_bhb_loop+0x40/0x90 [ 244.696125][ T9262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.702065][ T9262] RIP: 0033:0x7f9555b9e2d9 [ 244.706518][ T9262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.726163][ T9262] RSP: 002b:00007f9556a4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 244.734623][ T9262] RAX: fffffffffffffe00 RBX: 00007f9555e25fa0 RCX: 00007f9555b9e2d9 [ 244.742630][ T9262] RDX: 00000000d0d0c2ac RSI: 0000200000000080 RDI: 0000000000000004 [ 244.750640][ T9262] RBP: 00007f9555c35888 R08: 0000000000000000 R09: 0000000000000000 [ 244.758644][ T9262] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 244.766644][ T9262] R13: 00007f9555e26038 R14: 00007f9555e25fa0 R15: 00007fff74285f48 [ 244.774664][ T9262] [ 245.237674][ T9263] syz.4.1214 (9263) used greatest stack depth: 20296 bytes left [ 245.340627][ T9271] bond1: (slave syz_tun): Releasing active interface [ 245.400748][ T9271] bridge_slave_0: left allmulticast mode [ 245.417244][ T9271] bridge_slave_0: left promiscuous mode [ 245.437834][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.568698][ T9271] team0: Port device team_slave_0 removed [ 245.617672][ T9271] team0: Port device team_slave_1 removed [ 245.667235][ T9271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.695394][ T9271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.709308][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 245.709325][ T28] audit: type=1326 audit(1791939739.066:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 245.757389][ T9271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.796176][ T28] audit: type=1326 audit(1791939739.066:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 245.838859][ T9271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.859094][ T28] audit: type=1326 audit(1791939739.106:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 245.927454][ T28] audit: type=1326 audit(1791939739.106:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 246.019914][ T28] audit: type=1326 audit(1791939739.106:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 246.061226][ T9271] bond1: (slave veth7): Releasing active interface [ 246.088487][ T28] audit: type=1326 audit(1791939739.106:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 246.150816][ T28] audit: type=1326 audit(1791939739.106:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 246.233290][ T9273] team0: Port device xfrm0 added [ 246.250708][ T28] audit: type=1326 audit(1791939739.106:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 246.318211][ T28] audit: type=1326 audit(1791939739.106:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 246.395741][ T28] audit: type=1326 audit(1791939739.106:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f36c879e2d9 code=0x7ffc0000 [ 246.649520][ T5818] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 246.869258][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 246.883282][ T5818] usb 5-1: unable to get BOS descriptor or descriptor too short [ 246.904798][ T5818] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 246.926006][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.944736][ T5818] usb 5-1: Product: syz [ 246.949679][ T5818] usb 5-1: Manufacturer: syz [ 246.954357][ T5818] usb 5-1: SerialNumber: syz [ 247.051428][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1233'. [ 247.257675][ T5818] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 247.367568][ T5818] usb 5-1: USB disconnect, device number 6 [ 248.165191][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.176528][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.194854][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.209186][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.221217][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 248.229352][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.517215][ T9312] lo speed is unknown, defaulting to 1000 [ 248.604230][ T9319] netlink: 'syz.0.1242': attribute type 1 has an invalid length. [ 248.682078][ T9319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.754399][ T5818] ------------[ cut here ]------------ [ 248.760992][ T5818] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 248.770537][ T5818] WARNING: CPU: 0 PID: 5818 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 248.780424][ T5818] Modules linked in: [ 248.784422][ T5818] CPU: 0 PID: 5818 Comm: kworker/0:4 Not tainted syzkaller #0 [ 248.792135][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 248.802334][ T5818] Workqueue: events delete_netdev [ 248.807427][ T5818] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 248.813354][ T5818] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 c0 ce da 8a 48 89 de e8 55 f7 39 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 38 70 ff [ 248.833111][ T5818] RSP: 0018:ffffc900048d7840 EFLAGS: 00010246 [ 248.840079][ T5818] RAX: de20a74aab8b1300 RBX: ffffffff8bc5d2a0 RCX: ffff88802f51da00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 248.848157][ T5818] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 248.856599][ T5818] RBP: 0000000000000059 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 248.864897][ T5818] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffffffff178b950 [ 248.873001][ T5818] R13: dffffc0000000000 R14: ffff88805dc1ee88 R15: ffff888031b2cc20 [ 248.881416][ T5818] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 248.890524][ T5818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.897170][ T5818] CR2: 0000001b33f23ffc CR3: 000000002fd23000 CR4: 00000000003506f0 [ 248.905620][ T5818] Call Trace: [ 248.909030][ T5818] [ 248.912016][ T5818] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 248.918199][ T5818] netdev_queue_update_kobjects+0x3e1/0x480 [ 248.924332][ T5818] netdev_unregister_kobject+0x108/0x250 [ 248.930075][ T5818] unregister_netdevice_many_notify+0x1449/0x1910 [ 248.936576][ T5818] ? __rwlock_init+0x150/0x150 [ 248.942287][ T5818] ? unregister_netdevice_many+0x20/0x20 [ 248.948011][ T5818] ? do_raw_spin_unlock+0x121/0x230 [ 248.953502][ T5818] ? __mutex_lock+0x923/0xc80 [ 248.958262][ T5818] ? __mutex_lock+0x4d2/0xc80 [ 248.963112][ T5818] unregister_netdevice_queue+0x2e9/0x330 [ 248.968973][ T5818] ? list_netdevice+0x730/0x730 [ 248.973899][ T5818] ? read_lock_is_recursive+0x20/0x20 [ 248.979408][ T5818] lowpan_unregister_netdev+0x1c/0x30 [ 248.984869][ T5818] unregister_dev+0x70/0x1a0 [ 248.989571][ T5818] ? process_scheduled_works+0x975/0x1600 [ 248.995360][ T5818] process_scheduled_works+0xa60/0x1600 [ 249.001071][ T5818] ? worker_attach_to_pool+0x370/0x370 [ 249.006610][ T5818] ? assign_work+0x3cc/0x5d0 [ 249.011369][ T5818] worker_thread+0xa5e/0xfe0 [ 249.016066][ T5818] kthread+0x2fa/0x390 [ 249.020304][ T5818] ? pr_cont_work+0x550/0x550 [ 249.025057][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 249.029759][ T5818] ret_from_fork+0x48/0x80 [ 249.034324][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 249.039052][ T5818] ret_from_fork_asm+0x11/0x20 [ 249.044684][ T5818] [ 249.047762][ T5818] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.055082][ T5818] CPU: 0 PID: 5818 Comm: kworker/0:4 Not tainted syzkaller #0 [ 249.062588][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 249.072685][ T5818] Workqueue: events delete_netdev [ 249.077757][ T5818] Call Trace: [ 249.081066][ T5818] [ 249.084027][ T5818] dump_stack_lvl+0x18c/0x250 [ 249.088737][ T5818] ? show_regs_print_info+0x20/0x20 [ 249.093961][ T5818] ? load_image+0x420/0x420 [ 249.098537][ T5818] panic+0x2ca/0x720 [ 249.102495][ T5818] ? bpf_jit_dump+0xd0/0xd0 [ 249.107043][ T5818] ? ret_from_fork_asm+0x11/0x20 [ 249.112024][ T5818] __warn+0x2e0/0x470 [ 249.116127][ T5818] ? sysfs_remove_group+0x17b/0x290 [ 249.121382][ T5818] ? sysfs_remove_group+0x17b/0x290 [ 249.126622][ T5818] report_bug+0x2be/0x4f0 [ 249.130986][ T5818] ? sysfs_remove_group+0x17b/0x290 [ 249.136219][ T5818] ? sysfs_remove_group+0x17b/0x290 [ 249.141450][ T5818] ? sysfs_remove_group+0x17d/0x290 [ 249.146692][ T5818] handle_bug+0xcf/0x120 [ 249.151002][ T5818] exc_invalid_op+0x1a/0x50 [ 249.155549][ T5818] asm_exc_invalid_op+0x1a/0x20 [ 249.160442][ T5818] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 249.166287][ T5818] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 c0 ce da 8a 48 89 de e8 55 f7 39 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 38 70 ff [ 249.185926][ T5818] RSP: 0018:ffffc900048d7840 EFLAGS: 00010246 [ 249.192026][ T5818] RAX: de20a74aab8b1300 RBX: ffffffff8bc5d2a0 RCX: ffff88802f51da00 [ 249.200031][ T5818] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 249.208041][ T5818] RBP: 0000000000000059 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 249.216068][ T5818] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffffffff178b950 [ 249.224108][ T5818] R13: dffffc0000000000 R14: ffff88805dc1ee88 R15: ffff888031b2cc20 [ 249.232137][ T5818] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 249.238277][ T5818] netdev_queue_update_kobjects+0x3e1/0x480 [ 249.244226][ T5818] netdev_unregister_kobject+0x108/0x250 [ 249.249911][ T5818] unregister_netdevice_many_notify+0x1449/0x1910 [ 249.256551][ T5818] ? __rwlock_init+0x150/0x150 [ 249.261351][ T5818] ? unregister_netdevice_many+0x20/0x20 [ 249.267025][ T5818] ? do_raw_spin_unlock+0x121/0x230 [ 249.272265][ T5818] ? __mutex_lock+0x923/0xc80 [ 249.276972][ T5818] ? __mutex_lock+0x4d2/0xc80 [ 249.281693][ T5818] unregister_netdevice_queue+0x2e9/0x330 [ 249.287453][ T5818] ? list_netdevice+0x730/0x730 [ 249.292343][ T5818] ? read_lock_is_recursive+0x20/0x20 [ 249.297755][ T5818] lowpan_unregister_netdev+0x1c/0x30 [ 249.303172][ T5818] unregister_dev+0x70/0x1a0 [ 249.307795][ T5818] ? process_scheduled_works+0x975/0x1600 [ 249.313579][ T5818] process_scheduled_works+0xa60/0x1600 [ 249.319185][ T5818] ? worker_attach_to_pool+0x370/0x370 [ 249.324688][ T5818] ? assign_work+0x3cc/0x5d0 [ 249.329327][ T5818] worker_thread+0xa5e/0xfe0 [ 249.333973][ T5818] kthread+0x2fa/0x390 [ 249.338068][ T5818] ? pr_cont_work+0x550/0x550 [ 249.342864][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 249.347484][ T5818] ret_from_fork+0x48/0x80 [ 249.351931][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 249.356582][ T5818] ret_from_fork_asm+0x11/0x20 [ 249.361391][ T5818] [ 249.365020][ T5818] Kernel Offset: disabled [ 249.369471][ T5818] Rebooting in 86400 seconds..