last executing test programs: 1m27.424729972s ago: executing program 2 (id=604): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000300)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000340)={0xa, 0xce22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x0) listen(r1, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000380)=0x800001, 0x4) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) 1m27.365938607s ago: executing program 2 (id=606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001100)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000008600)={0x0, 0x0, &(0x7f0000008640)={&(0x7f0000008680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000086c0)={0x0, 0x0, &(0x7f0000008700)={&(0x7f0000008740)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd27, 0x25dddbb9, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2002, 0x3, 0x5}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x5}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4004880) 1m26.954281909s ago: executing program 2 (id=612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 1m26.905394674s ago: executing program 2 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0/../file0\x00') syz_clone3(&(0x7f00000003c0)={0xb00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0xd5848, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00') 1m26.859041349s ago: executing program 2 (id=617): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@nogrpid}, {@bsdgroups}, {@quota}, {@abort}, {@abort}]}, 0x1, 0x506, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 1m26.173224067s ago: executing program 2 (id=637): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000440)=0x33, 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000480)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000004c0), 0xfeb5, 0x0, 0x0, 0x0) 1m26.098797635s ago: executing program 32 (id=637): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000440)=0x33, 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000480)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000004c0), 0xfeb5, 0x0, 0x0, 0x0) 16.428911277s ago: executing program 4 (id=1201): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='27', 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'lo\x00'}, 0x18) 15.912133539s ago: executing program 4 (id=1204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x13, 0x4, 0x2, 0x0, r0, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) 15.827848708s ago: executing program 4 (id=1205): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000001801000078", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000800)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000ac0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000b00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c40), 0x4000087, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000003240)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x20000000) 14.237317618s ago: executing program 4 (id=1209): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./file1\x00', 0x10048, &(0x7f0000000bc0)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6c6f7765722c696f636861727365743d63703836312c00f54f36778e7c2defd4a177283254efa9174a5aac6eb8992e9861f2eb7095940f9f27e0992164c730e09565585f5699f069051edce5a2147e9e052030e269ba9d31870e1b471c24470fb136a11da4a9f11c4d77af199ac1acf0a65e2c4807829751de53d1fab4506199601b9d8115c3efc59d88b3a16dcba162c362a91457e038b2da16203c62867d82e8af74e7a2142f9fd66d2fc999ad8be012dbb24071220de3a2bc8aca31c6e39f1eaaeccbe8bd029c0e6a01f580abd3da1661d05a43e96773526dbe520e441238346c0980694218c41fcad26443c5ee7be70c"], 0x1, 0x2a5, &(0x7f0000000d00)="$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") mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='7'], 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 12.967796135s ago: executing program 4 (id=1218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4f}, {0xc}, {0xc}}}]}, @TCA_BASIC_POLICE={0x0, 0x4, [@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x40}, @TCA_POLICE_RATE64={0x0, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x80000000, 0x1, 0x80000001, 0x3, 0x1, 0x7, 0x0, 0x7, 0x2, 0x1, 0x1d67, 0xfffffff3, 0x7, 0x401, 0x80000000, 0x9, 0xe10c, 0x8001, 0x914, 0x8000, 0xfffffffe, 0x1, 0x0, 0x3, 0x8, 0x9, 0x0, 0xd, 0x9, 0x2, 0xfffffffd, 0x1000, 0x2, 0x7, 0x2, 0x7, 0xa, 0xf, 0xcfb, 0x2, 0x40, 0x7, 0x3d3, 0x809, 0x7, 0x3fd, 0x6, 0x8, 0x2, 0x2, 0x100, 0x69a76fae, 0xff, 0x1, 0x0, 0x6, 0x5, 0x8, 0x7, 0x0, 0x7f, 0x0, 0x8, 0xaf, 0x5, 0x480, 0x0, 0x1, 0x4, 0x5, 0x6, 0x1ff, 0x4, 0x4d60, 0x7, 0x3, 0x2, 0xad, 0x673b, 0x6, 0x4e9, 0x7, 0x100, 0x6, 0x7, 0x9, 0x2, 0x1, 0xffffffb0, 0x3, 0x9, 0x0, 0x8, 0x80, 0x7, 0x6, 0x7ff, 0xe, 0x1, 0x1, 0x495, 0x3, 0x9, 0x4, 0x2, 0x400000, 0x7e, 0x8, 0x4, 0x6, 0x1ff, 0x200, 0x1, 0xfffffff8, 0xffffffff, 0xffffff6f, 0x9e15, 0xfffffffe, 0x2, 0x6, 0x9, 0x12be, 0x9, 0x3, 0x6, 0x8899, 0x7, 0x80000000, 0x4, 0x1, 0x8, 0x2, 0x81, 0x8, 0x1, 0x3ff, 0x0, 0x7, 0x6f14, 0xa, 0x80000001, 0x5, 0xfffffff8, 0x8, 0xebb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0xffff, 0x5, 0xcc1, 0xdbbd, 0xfffffff8, 0x4, 0xe, 0x1, 0x10000, 0xfffffffb, 0x9075, 0x40, 0x5, 0x4, 0xb3aa, 0x9, 0x7, 0x1, 0x4, 0x2, 0x100, 0x4, 0x2, 0x7, 0xd, 0xa80e, 0x8, 0x9, 0x48, 0x3, 0x9, 0x9, 0xffff, 0x6, 0xc, 0x1000, 0x9, 0x200000, 0x1, 0x8, 0xa7e2, 0x5, 0x7, 0x3, 0x2, 0x7f, 0x3ff, 0x9, 0x40, 0xb, 0x5f155f10, 0xe4, 0x2, 0xabd4, 0x1, 0x50, 0x9e6, 0x800, 0x10000, 0xfffffff7, 0x400, 0x8, 0x54, 0x40, 0x3, 0x4, 0x401, 0xc0, 0x7fffffff, 0x6, 0x8, 0xfff, 0xfffffffb, 0x9, 0x9000000, 0x1, 0x41f, 0xd8, 0x0, 0x5, 0x3, 0x80, 0x7, 0x6893, 0x4, 0x3, 0xffff7fff, 0x9, 0x7c4, 0xfd8e, 0xba, 0xe, 0x8000, 0x8, 0x3, 0xffffffe5, 0x10000, 0x6, 0x1ff, 0x1, 0x6, 0xbcc, 0xfc4a, 0xffffff80, 0x9]}, @TCA_POLICE_TBF={0x0, 0x1, {0xc, 0x4, 0x7, 0x7ff, 0x8, {0x6, 0x1, 0x4, 0x9, 0xfffa, 0xffff528b}, {0x40, 0x1, 0x800, 0x3, 0xf, 0x2c91}, 0x3, 0x1, 0xbd5}}, @TCA_POLICE_AVRATE={0x0, 0x4, 0xfff}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x7fffffff}, @TCA_POLICE_RATE={0x0, 0x2, [0x1, 0x7, 0x0, 0x1, 0x3, 0x1, 0x16c2, 0x420, 0x80800, 0xffff, 0x1, 0x4, 0x5, 0x5, 0x8000, 0x0, 0xfffffff7, 0x8001, 0x3, 0x180000, 0x3, 0x10000, 0xbf, 0xffffff81, 0x7, 0x4, 0x8, 0x8, 0x93e, 0xb66, 0x9, 0xaa3c, 0x10000, 0x7, 0x0, 0xfff, 0x3ff, 0x4, 0xb, 0x400, 0x0, 0x6, 0x401, 0x401, 0x0, 0x2, 0x5c, 0x0, 0x8, 0x1, 0xe3a, 0xb3, 0x8, 0x3, 0x7, 0x5, 0x9e, 0xb, 0x9, 0x9, 0x7, 0x6, 0x6e9, 0x6, 0x1, 0x0, 0x3, 0x10000, 0x5, 0x5, 0xfffffffe, 0x1, 0x8, 0x8, 0x8813, 0x7, 0x4, 0x4, 0x9, 0xa, 0x5, 0x9, 0x1, 0x8, 0x3, 0x3ff, 0x5, 0x200, 0xff, 0x80, 0x8000, 0x8000, 0xfffffffe, 0x3, 0x400, 0x6, 0x1, 0x8, 0x7, 0x10000, 0x3, 0x3b, 0x7ff, 0x386, 0x3, 0xf, 0x200, 0x6, 0x4, 0x3, 0x7, 0x101, 0x3, 0x1d7a, 0x8001, 0x9, 0x2, 0xda, 0x10001, 0x9, 0x0, 0x68, 0x8, 0x2, 0x8000, 0x3, 0x40, 0x2, 0x0, 0x4, 0x3ff, 0x0, 0x10001, 0x401, 0x6, 0xfffffffe, 0x8, 0x6, 0x101, 0x80000000, 0x11a, 0xf, 0x1, 0x101, 0x8, 0x7, 0x5, 0xb1d, 0x6, 0xffff, 0x9, 0x31e1, 0xfffffffc, 0x40, 0x3, 0x800, 0xfffffffe, 0x3, 0x8, 0x5, 0xe, 0xfc2, 0x8, 0x10, 0x500000, 0x888, 0x5, 0x6, 0x40, 0x6, 0x7, 0xffff, 0x101, 0x401, 0xe, 0x402098c7, 0x6, 0xa07, 0x8, 0x4, 0xfab, 0x6, 0x80000001, 0x6, 0x3b, 0xfff, 0xffff, 0xd, 0x3, 0x6, 0x1, 0xd34, 0x6, 0x9f, 0x800, 0x6, 0x6152, 0x800, 0x800, 0xbf, 0xd7f, 0x5, 0x1, 0x3af, 0xaa65, 0xfb, 0x1, 0xffffff38, 0x4, 0xa889, 0x5, 0x9, 0xfff, 0x3b95, 0x20000000, 0x2, 0x0, 0x1000, 0xc2da, 0x1000, 0x4, 0x401, 0x9, 0x98, 0x8, 0xfffffff7, 0x10, 0x6, 0x6, 0x7, 0x0, 0x77, 0x6, 0x4, 0xe5c, 0x1d6, 0xffffffff, 0x89, 0x9, 0x8, 0x10, 0x2, 0x4, 0x1ff, 0xe, 0x2, 0x40, 0x8, 0x2, 0xf, 0x2, 0x1, 0x0, 0x46, 0x7f, 0x7]}, @TCA_POLICE_RESULT={0x0, 0x5, 0x1}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff525400123456ed3e000a22010008"], 0x3a) 12.122383091s ago: executing program 4 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x14, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 12.076233785s ago: executing program 33 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x14, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 10.297352144s ago: executing program 0 (id=1241): bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) 10.23863189s ago: executing program 0 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000001640)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001680)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000016c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001800), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001840)=0x2) recvmmsg(r1, &(0x7f0000001880), 0x80002c1, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x14, r4, {0xb, 0xf}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) fchdir(0xffffffffffffffff) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001ac0)='ns/pid\x00') mount(0x0, &(0x7f0000001b00)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000001b40)='./cgroup\x00', 0x0, 0x2108cff, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000001b80)='.\x00', 0x8100, &(0x7f0000001bc0)={0x0, 0x84, 0x40000, {r5}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000002d80), 0x8, 0x10, &(0x7f0000002dc0), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000a000000000000000400000073110003400000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.741400931s ago: executing program 0 (id=1247): sched_setattr(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000002060103000034e400000000000000000900020073797a310000000005000400021f00000c00078008000840000000d012000300686173683a6e65742c706f72740000000500050002000000050001000700"], 0x58}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7.796595216s ago: executing program 5 (id=1250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001100)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000008600)={0x0, 0x0, &(0x7f0000008640)={&(0x7f0000008680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000086c0)={0x0, 0x0, &(0x7f0000008700)={&(0x7f0000008740)=@newtfilter={0x58, 0x2c, 0xf3f, 0x70bd27, 0x25dddbb9, {0x0, 0x0, 0x0, r2, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x5}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4004880) 7.594344736s ago: executing program 5 (id=1251): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x0, 0xe8, 0x208, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@inet=@socket2={{0x28}, 0x3}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@loopback, @broadcast, 0x0, 0x6b0b498af8769636, 'ip_vti0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x73, 0x0, 0x5c}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e24, 0x4e21], 0x5, 0x20, 0x1a7, 0x1}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x3, 0x3, 0x5, 0x1], 0x5, 0x4}, {0x3, [0x5, 0x0, 0x0, 0xc, 0x1, 0x4], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) lseek(0xffffffffffffffff, 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r1, &(0x7f00000003c0)='0', 0x1) openat(0xffffffffffffff9c, 0x0, 0x880cc2, 0x20) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfffff92d, 0x3, 0x9, 0x4, 0xfffeffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xa13629406f868885}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040046}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x5, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440e0}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f0000000500)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @random="2abcd265829d"}, 0x14) 7.430463223s ago: executing program 0 (id=1253): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x80002c1, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./file1\x00', 0x10048, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x2a5, &(0x7f0000000d00)="$eJzs3c1qJFUUAOBT/ZPuHhfdC1ciWKALV8PEJ0iQEcSAoPRCXejg9ICkmoEZaBgVO1n5BD6Bz+NGfAEfQHFnELGkUtV/obpjhyQdnO/b9OWce3JPVd0kq7r9xevj48dPnz85/fbX6HaTaBzEQZwlMYhGzJxErV9+r48DAHfcWZ7HH3mpU4ZerM5or6lsNW68OQDgRiz//991LwDA7fj4k08/ODw6evhRmnYjxt9PhkmUn2X+8El8FVmM4kH04++IfK4cv/f+0cNopYVBvDWeToZF5fjzn6qff/hbxHn9fvRjUF+/n5aW6qeTYTvuVesfZDH68Mfox6v19e8s6rtR1cdwL95+c6n/+9GPn7+Mp5HF46q3Wf13+2n6bv7Dn998VkSL+mQ6GXbm86rZzd6tPhkAAAAAAAAAAAAAAAAAAAAAAP7P7qdzg9Xzd2YH/2/IbzgfaLp0Ps+DNE3zpJy/qG/Fa61o7fLaAQAAAAAAAAAAAAAAAAAA4K54/uLr40dZNnq21aBxyZzZa/01qfhnNdKJiEsX/SuyTk2qWuXkP/Vc9hPN4rMTkSUR2117uyiLDVXRLfsZNbe8q72IyEbPklZc4VmsGSTzSG859UaUaxWRXjmI9jyy1RKzkx6WU904H8x21/GjJEaNjfe5W7dJrmGQ12y/5tqqvYuRXnUFNZN7G1bfe+VKPef92R67kEoiisdT3czVqvNfsnuLDdm+3nt4K39+AAAAAAAAAAAAAAAAAACAJYuXfmuSpztoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2YPH9/1sMplXxujl5sxi0oors+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4CfwbAAD//9jkXW4=") mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) syz_open_dev$loop(0x0, 0x10, 0x800c2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='7'], 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6.160730391s ago: executing program 0 (id=1255): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) 6.125064594s ago: executing program 5 (id=1257): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0xa, 0x4]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 5.450446462s ago: executing program 0 (id=1262): sched_setattr(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000002060103000034e400000000000000000900020073797a310000000005000400021f00000c00078008000840000000d012000300686173683a6e65742c706f72740000000500050002000000050001000700"], 0x58}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.407093186s ago: executing program 34 (id=1262): sched_setattr(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000002060103000034e400000000000000000900020073797a310000000005000400021f00000c00078008000840000000d012000300686173683a6e65742c706f72740000000500050002000000050001000700"], 0x58}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.263400541s ago: executing program 5 (id=1264): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10800, &(0x7f0000000a40)={[{@keep_last_dots}, {@sys_tz}, {@keep_last_dots}, {}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x3}}, {@utf8}, {@time_offset={'time_offset', 0x3d, 0x1}}]}, 0x1, 0x152a, &(0x7f0000000b40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./tracefs\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0) 5.150540742s ago: executing program 5 (id=1266): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000840), 0x253, 0x10, &(0x7f0000000880), 0x19f}, 0x48) 4.438149954s ago: executing program 5 (id=1271): socket(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'veth1_virt_wifi\x00', &(0x7f0000000440)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff}}) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003500)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003580)=0x14) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000035c0)={'ip6_vti0\x00', &(0x7f0000003600)={'syztnl1\x00', r5, 0x0, 0xc1, 0xfe, 0x7, 0x16, @dev={0xfe, 0x80, '\x00', 0x1f}, @remote, 0x8000, 0x10, 0xffff, 0x2aa1f953}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003680)={'syztnl1\x00', &(0x7f00000036c0)={'ip6tnl0\x00', r7, 0x0, 0x82, 0x0, 0x1ac1ee85, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x1, 0x10, 0xa174}}) 4.405597237s ago: executing program 35 (id=1271): socket(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'veth1_virt_wifi\x00', &(0x7f0000000440)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff}}) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003500)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003580)=0x14) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000035c0)={'ip6_vti0\x00', &(0x7f0000003600)={'syztnl1\x00', r5, 0x0, 0xc1, 0xfe, 0x7, 0x16, @dev={0xfe, 0x80, '\x00', 0x1f}, @remote, 0x8000, 0x10, 0xffff, 0x2aa1f953}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003680)={'syztnl1\x00', &(0x7f00000036c0)={'ip6tnl0\x00', r7, 0x0, 0x82, 0x0, 0x1ac1ee85, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x1, 0x10, 0xa174}}) 2.945086294s ago: executing program 1 (id=1280): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @remote}, 0x10) listen(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10) 2.922493967s ago: executing program 1 (id=1282): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9b5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90501b0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc5867dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eafeffffffffffffff000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99a40b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23eb8c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee36cdad078fc88d17cbde37a2270f90a60afe8548d4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd10459e2f2e267f82bafd5b4c7b481ea5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000001400)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r0, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f00000014c0)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6, &(0x7f00000015c0), &(0x7f0000001600)}, 0x2c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 2.850186714s ago: executing program 1 (id=1283): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00', 0x4, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000940), 0x8, 0x10, &(0x7f0000000980), 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, 0x0) syz_mount_image$f2fs(&(0x7f0000002e40), &(0x7f0000002f40)='./file1\x00', 0x1b060a0, &(0x7f0000002f80)=ANY=[], 0x2, 0x5524, &(0x7f0000002fc0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000008500)={0xa, 0x400000000008d}, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r2, 0x1ffffffffffffe, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000008540)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000008580)=0x2) sched_setscheduler(r3, 0x1, &(0x7f00000085c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000008600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000008640)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000086c0), 0x42, 0x8) recvmmsg(r4, &(0x7f0000008700), 0x4000087, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x440200, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000008740), &(0x7f0000008780)='./file1\x00', 0x18000, &(0x7f00000087c0)=ANY=[], 0x1, 0x313, &(0x7f0000008800)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000008b40)='./file1\x00', 0x42, 0x21) fallocate(r7, 0x0, 0x1, 0x8ffff) fallocate(0xffffffffffffffff, 0x0, 0x3fff, 0x20001000a) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000008b80)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000008bc0)={0x0, 0x0, &(0x7f0000008c00)={&(0x7f0000008c40)=ANY=[@ANYBLOB="2c0000001800010000000000fedbdf251d01050008000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="0c000000d7e3790201bae4040020defe71544048440da39930f027b900000000000000b02853"], 0x2c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000008cc0)={0xffffef, 0x5, 0x20000}, 0x10) write(r0, &(0x7f0000008d00)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) 2.833768686s ago: executing program 6 (id=1284): socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) socket(0xa, 0x2, 0x7f7f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) io_uring_setup(0x4dec, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010e40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000010f00), 0x651, 0x0) 2.507243009s ago: executing program 3 (id=1287): setuid(0xee00) setrlimit(0x40000000000008, &(0x7f0000000440)={0x0, 0x5}) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3e}], 0x18, 0x40080}, 0x4000000) 2.411719698s ago: executing program 3 (id=1288): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) 1.412064909s ago: executing program 3 (id=1289): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000980)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000009c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000a00)={{&(0x7f0000470000/0x4000)=nil, 0x4000}}) 1.285233441s ago: executing program 3 (id=1290): socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d40)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000dc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000e00), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xc, 0xe, 0x0, &(0x7f0000001fc0)='GPL\x00'}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$usbfs(&(0x7f00000020c0), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000002100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000002140)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x5, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, 0x0, 0x0, 0xa, 0x1, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 1.068257653s ago: executing program 1 (id=1291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 986.065701ms ago: executing program 6 (id=1292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001100)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000008600)={0x0, 0x0, &(0x7f0000008640)={&(0x7f0000008680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000086c0)={0x0, 0x0, &(0x7f0000008700)={0x0}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4004880) 934.260237ms ago: executing program 1 (id=1293): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x0, 0xe8, 0x208, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@inet=@socket2={{0x28}, 0x3}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@loopback, @broadcast, 0x0, 0x6b0b498af8769636, 'ip_vti0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x73, 0x0, 0x5c}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e24, 0x4e21], 0x5, 0x20, 0x1a7, 0x1}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x3, 0x3, 0x5, 0x1], 0x5, 0x4}, {0x3, [0x5, 0x0, 0x0, 0xc, 0x1, 0x4], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) lseek(0xffffffffffffffff, 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r1, &(0x7f00000003c0)='0', 0x1) openat(0xffffffffffffff9c, 0x0, 0x880cc2, 0x20) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfffff92d, 0x3, 0x9, 0x4, 0xfffeffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xa13629406f868885}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040046}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x5, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440e0}, 0x4890) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) sendto$packet(r4, &(0x7f0000000440)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f0000000500)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @random="2abcd265829d"}, 0x14) 454.388415ms ago: executing program 6 (id=1294): add_key(0x0, 0x0, &(0x7f00000002c0)="30820555308203", 0x7, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) 454.114195ms ago: executing program 6 (id=1295): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001cc0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xd47, 0x6, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, {[@dstopts={0x5e, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x185b}, @ra={0x5, 0x2, 0x5}, @padn, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x18, {0x2, 0x4, 0x31, 0x7, [0x2, 0x100000001]}}]}, @hopopts={0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @jumbo, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @hopopts={0x1f, 0x7, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0x1, [0x0, 0x3, 0x5, 0x400]}}]}, @fragment={0x87, 0x0, 0x8, 0x1, 0x0, 0x8, 0x67}, @srh={0x29, 0xc, 0x4, 0x6, 0x3, 0x8, 0x5995}, @dstopts={0x2f, 0x177, '\x00', [@ra={0x5, 0x2, 0xfffe}, @jumbo={0xc2, 0x4, 0xde}, @generic={0xd, 0xbaa, "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"}, @enc_lim={0x4, 0x1, 0x4}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}, {"62f6ab5fd59baec4f915806159cd7500f1f669959167f6baf39cbfa9f5d220d111b0a5a967164bfdad81773f39a855cba9b402a594aa0000000000"}}}}}}}, 0x0) 446.238696ms ago: executing program 3 (id=1296): setuid(0xee00) setrlimit(0x40000000000008, &(0x7f0000000440)={0x0, 0x5}) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3e}], 0x18, 0x40080}, 0x4000000) 430.609317ms ago: executing program 3 (id=1297): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001fc0)='./file0\x00', 0x1000000, 0x0, 0x4, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000020c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002140)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000002180)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000021c0)={0x0, 0x400042cc, 0x100, 0x1, 0x280}, &(0x7f0000002240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29d8, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x1, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x1b7}}], 0x1, 0x0, 0x0) 50.422416ms ago: executing program 6 (id=1298): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001440), 0x0, &(0x7f0000001480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x4008, &(0x7f00000015c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 50.147736ms ago: executing program 6 (id=1299): gettid() socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r1, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2a00091, &(0x7f0000004480)=ANY=[@ANYRES64=0x0, @ANYRES32=r3, @ANYRESHEX, @ANYRES32, @ANYBLOB="d016c8d55cc9329d2e0101797fb5f52944f2b8694bae76ff77df23047285b916fba6b36c1b409890d28883acf4093105048a0c8cea76a257b7ee39a0fa772953b17ccd5d14328bcd8cd30f4cf0aa220eb9fcb0883de194766c39954634b5f9a0ca862e09200c5cf06ec1214c819ffadf5291b8ed1536d9145da9796ebeb922e3eea04914e29748eca2c90ffd65bace2ec8cb6808e9e719426ee9bb119acecbf8a735429439a2093d21aecabbdd15d44ddcf79b892ccb1b096880abd5988d69079281b4619ee57caae0d054eaa813a0a1ee847cbef8563408ab7db29a8965f5a121b56175f4be4dfbf2e6da7e4b74b67f37ec6660227c655b67e0f1a41c18ae60ab4bf766c5460f296625113944f84df515da615e597357d29059cb92f354e88594b05de4328d59b0e0e099e996c126c6663c9751466f81e2059cd90aef508fa30a1b0cd6b0c1d9fc04a8831801d0c7ba813dc1e59614bf56c69ae20f1683889e7247a12b740a9656421981e0763c64e4ade9be51ff260d61fb3a8ad54bfe09225d3a8402f426fcd2243a4c246669dddec2bf5fd601dccfd57e680f0e869deffb3f91c6a12fd339a61bf2027566c590343154e79969abee74a57e0916438c58198a4816d31b2ee9d481fd2ea6264fa36185d7e025d245dc151fcb87c3502ef537695b244dccaf592c543565cccb52e177ecfa5a5adf612afe4b98edfaa1d2d4ad14ddf67ad5c33bc86967c305312b1df912286ad92e21fb025dc18c1f262f733eeaa0f17f437f41a2ea816cad63e736d6182b96da94b23dd86130a388b4b0b84554eb4ce851ce5610049ace33cf1282b21b771733baad9030dee46cd6209df098d04a131eafc8b2ed58c71461c50cadcc912ab0edd9eb090d36661df4653053608b6156d99298b7dfea7fe67ede7d040dac6ac66e78967eb3c05ddb469c90bc8e5a8f1c74088caa5ba98db4ffb9a8aca8f8f01a0383c349a5dfb139362a5f665abb5f5d07a5c59b5c35c7cb8bb53e6baaaa42352b09f443477dfa6bed6049339101ceecc3bd1b327fdf2ec8ed7d1e5cbd02d1630e34e6f2c7150f47ff9a974a88ac2e8f94fde99f4cad1554ca0f7520b0a5af672346f0cca349153c5b939a32b07ac78909bebdccdbd3b1ab3532c6d061c2665ee9d67887ec209d1cf5125989588c79a18b99e2ae30bf3bafeffd6b2ff032ba4b6f64b62abdf0f53feb4b7d722dfe13dddc79c9d6f655f01db1cf6d92057332a96d92069a4347235a08b6ae91417cee0fe37a339beaedcf50b3b68cf7b99d22b29d49137bbc7bc38ad6cf6e200e29b94077305293825c4476dc17634a3ecb1c75b289c8e270f68c9dcb8341471fef9a1b8e0d191a8cbe6192b0738f44144379b15d2db2269797c09c1789be60c9e52f452a5205c66782c91fd2573d27f65161a5eda08df1b0e7ee3d4e8b6c1a9b4fc87392e16e8c0dba1884adc52acc7cdd93c8f83feb5d44cab62b9856678eaaf9bb82825230c44ea177bb62ab36fcb8875bed5b4f9ad3eba65a75fc6428fe3abce7b42b992fa4dc218669e848f3d07553e6d381ecc3e1f9c9ac3650c1d11844cd29352132a07e9324b3fb70166977855669ec0cfe75cc34b8e21044e142ac7da564b1ececd3a985c4b3d0bdefec84a96c13c9a496b80cfc1a915804646fd14ca5e90b036c9f247f9d4f564af75ae851203c8640ecfa25c1837167c91b977a07fc1b88de3a257b3bb63a380bee62d7300dd84aa087f579172651f2db55f8e0c6efcf759a5343f5e59110177e3f7b948dcb0d33ab9ebec1d1b987c55d10bc6214cb81866dd5ae794ae89a3e9ceef6f73714138b69ccf6562a136bbff44eaf0d2b8587db3b9a6dbedb48930b9541e0d6c21239ec2ee78b77957742490c651cabdec8fe87731eaa77811ab31a6e47f21bc1e6000b20f6e9118bf7baeb6985047f937c7ca4e27ad16a8b108e0e1e7645c5e181bdf3354c7b11ff44c7a9600f8e0b4919f24cdf72abcacb509fe56418430bb1a46fe4044e886574c0ca22e1a9e316784510220d9e628744e9cb38c9805570935f0407f1596fb9965c1575963643d85a7f1e4f641d66c4fbb8d962857aea040d0d6f4e324bcc2c157efd5e9313a41069728ac75a84022814011420428f0c84d8808cf228379c5770a10dd4a2540ee9b49cf4c67423ce11545415cb3b3a271fad52979dfb205e765bbbdf27db6871373e5704aea7f8da0f71b6d2cd51a4c13e5140c9018d98c820e572df54a8accb9f378bf768325939913efdf90b69debc59d2d4195f2c60be37683201a157bdd25f365d35c97eb3d8579d98b1d270164b2f4b0f590f6cdbb9bcc8d0da4439b6cdad548c7a7976b89fabd64ee53f65c3bac50702a14d393bc1469db6f7fa5a607c6b09eb6157982fe7b70a50e2508bc9f2d6e6ed98f7f68e8a26683db2776f19422688d72c2d3c128c10382a81c970064dac4fdfd5873c711bdb902f70bb72c95b2db18ab3d4001f38a0d59a43b12f5002909513df9d90fe1abb35111ca57847f37b56242676fd2ca33b7bf0f858ccfc3c600af12235b26f488f94c6bbdee6d3b42f1cc9db75d8219b9a2c96f4ea153d3fa14517a1a5369c71f136c2a9ae234a85882d21b66354d08eadb2f68a5e932341596b44bea306f11a0a4ac5c2561c2540d025545a8735dbda092003709e8f4db40a744ae99f96750a036b0958a521202477b4d3eb94aada9a94045cdc70861a8d8fc08e79a960022f34231897f1a4816e998d0589146ce4b2426050d166424d7c3d5209f7814d824172aec43c4bd68f49855363917a71c7f91636f74bd0eeb4df24a846cb627ab8248b5400d3e2d8fe1297c6422cb5fae73be62c3015d4d4b5d40dd1206eb7228884ac609fbd255b12677ad5a535ec3bf2855ea4004ae625ceb787da5a2b17cf6de63a9890658e8f0fd497e029418752193344486d284059d1d7c13c8b170dc1a54db0192af587fdb94da913cfdefb2939c586f34ae3ec3d2fce5d08ba13de9bf027ff4fbfcb2cb2a20df6f5600a33c7d5026e5e6091fe904445ee23bcf156a7945136c4002a4b060085f36178f8909770847bba3ed7aa4ae35e76b77dd4782d73fa7f07e4b1851d51bac51bb8f6ab029a936e321c2401d061db416da765b6752b1c1b7562f2292315acb39b87d3763426dadf0b6097ad6221be9594ad73fe562b84c2e7113c8587bb6234b023bf421b1964fbda393f38a593c31a99679065f0bb2ed89d232b70355021def8327706e70a3f8efc42f048ef4de94e676e9d2c7bc618ee9b5778b90068f4405f0787682a5b7d1e641a5ad595ddbc2476b6b17ef86df5c474b8299a0ab5fe884bef5f172cf945224b5ddc24d7004ae2bcf26d6efa44f4fa9810f05c3430aa25812e31110a3e2ca2ef48189729ef0317e71895bda2106596351a3f77d1457361b7fe32ca77422e7eccb8ea3f8946a2ca0a031e2f2d0862bb3e64ecfaf4cf6b8c976de12848bb21ac75924245a95eab2509da5cfd9c1da5de34f473412611320096c82e9a924f343c1ee6008277d82020fd842669eb3e2945e96306b9cd869872687f421dd8f0c0891fc481c2a0154b23c229cc20444b4d8713722be4b9142c511f237cfd49a3fe8e296f8a6dbdb28e73e8f0b4c489287cee53388dc6d839d23db1f9e90ff475dd4ee5e728666edf8c9d872a6902204ee7d11e37fc32d4a7748267a26bab65335421f5898dfd50dfc2d0a9b9a7829fb1a5a6c2088337363f7a2088f2dfa9617fa299fbe2f6162aebb7847fad46017ff078c53354d7a8a7fe86e440299fe7d7d654ad045d5b9849a906b0ecce0cf46fc4f348a9c240e8f9d7efb699e9ff4868f28f560521502929c32d7447ab4b7c196fbb706c41bef4e8b655a185140d24d39f8c043fc5f304856cff55bd881ed52fe385f93d48320683fccc8299f514bdda70bae383c00e519c2bfc4ff03df76f91d270c86dd0499f145ada66dcb9d4cfbad8b97fa43873fb4695559af885daf12866be73f01c98ad836a652afbbb66e8ea6308884feae5efe796ce67ea24f83f3a7938c55f216daf22d0133cc0476d851b8449c10b5e6fa1c598c10de9f7085c66930cf24520fac24e71bebb0320c08e8cdf3fa2e8b2517285208de28e251f5b6f796d3ef0749bf67e1f2c178b0715705dfc0fdddf8d2a6c856323fd9af1a79855cc9ac9662df8664d483252a04ce639eeb4e73ea685e617e844b9aca90758f98c5ced2766f67e845ad3e8afa379bc56bb4512aab985d8e8e3ebcd3cb91ad2af343936c11e7e3dc549f9cdb754ef5296175e6252b22788bb4c25c7d785b82541c63c2bf84770ba032008b794bdd126002bb27fe65aaf15f2febf80e34038b771ed5fb7ed7417799a0d7895ec6226206c415da2dc59f09e1086a38b62ae2125522714a8f1ec56a4b376800937e62c42d030fb025789e1e30dc56df4d6658d67b1d0690b5d33364329b6f2e9e13166f5520064223661d08eb774dde4a6abb7e549b708ce92db767829ab585d3fdc773513d14dc8532618da09d60abcb341f50936bf45ce2d14dcc0ff14f9e58aa0069c0dcba9ee8f53f32b49450f18db0c47ce85ea935baa4729bd1d576364429e88b0b9792ff6e8095c0ca8701257685ce97a3b47340b45ff902d7fe66ad00e655902a98589e63a1f7916866f50a9ba8660e4c15b0aa60b14f21081923cdc61c085018d345592301a989ae3c64e7cff3f094e7fafe723eb2719a4fda9536005f84e5c8a107963f6b2681cff060dcd537481fb4f50c756df258bf7210c52252558c3df00c2e1f82cb1faa740de72d0f974de9cd4a2a1c37027d381f8689fd4d08f3a5c228a89e9b096a73189be0c8ce2660b571db8bed81252fa7d1122da07df6212a0d0adbf911d7dc16660bf7abf4764d4b7708d0912287493c8fddaea467cfaae7a24ba0907d98c847e8697d507cf82a86203a1d89c34b04db579ba03cb1cfbcdd65a652a36435c989b423de545f368bde41f33e76ee65ca5538bc89c29e36f725ad8385611ebd32afdb2e209676aff0df1577620524c6818e064cea1a349066c9ad27643494c91fb0af9c54ce88568197e8dea217df827981cf4b6affd2078fc5f09c5c292dc70000188e977901a20cafe90c3463a8274f02e65f8d3c42242c61813adb21a0807ad474347d429aadd7d05a63cedd93f9c6cfdc74996068dcbda1ec88621871e1f3dc67fb7e883150946ab498141775ec710413f0154f8ef088777997a5b9b3103f00a04b4ad3cb5018864c7e456b17d732274dce1c9b1a574a7a4e86b8f609c0a58a08e6acfc0ac0961604a8dc6663b0fcfae347881b7383577fb6267c30efe043e052a569eaa76d4e0168d6333bd11b9d5c1479a9b24216b9dd1b56dfc3a94ff37ae2a95844f6bd878a8191d078426c7932911acc89407709c1abd0165b0a53f93612574e77daf90d4f18566d1ed90764f19615c2a8e860d18d2f7bde00a865533418d070e175a09f237a63dd007916d9e80e8f2b985f6732274841aaa815afc8a769db6a18d4a832687731e54be2ffb182fd9802335ea2fde0a39fccf1ef3d8374fc416c5954697195acdafa90daf37c43b6fd218ee7b6365d1bcc3e5372ac6e30f474ccfa76c7004d7c860d13bc1bdfa121756d9d39478e18827a8dc8263771a62524eb2c32683117b47892fff88708b50082d3f9f50e66684ead47776fde241596c4005631e438d95b36e4ad4b4f8824f27045d7e74b0c44df4503bd2203681c159e389f5230d5ebf8025ae27c8348915dc014a1a539d", @ANYRES32], 0x55, 0x1c6, &(0x7f0000000600)="$eJzsmD/P0lAUxp/bv6kxeV110UQScLC0RY0MJhITFwdNNBo3iFSCFjHQAZj0C7g6Ozs4Exe+hw7q5KBuTibW3NtbekUqISWB5D2/4fRp7+H03EN5SAqCII4tXz7//PSuWnG4PokKbHn9q57naEr+/OjXhQ/92+9fez8+zhe3mivlrG3vbwBYtHTE8jxJkkRdr8jjPWiZNtHO1x+AwZW6DQ33pQ7B8FDqJ4oe8nzXfdyPQvfRMOpy4fHg8xDw0Fjt7/tLhq7SH1PWx9PZ004UhaPy4gZve91S0ezsrL+WhmtKf+r3lc3Gy+cHHxp8qRtguCv1VdjZbNKRiPrXxf7PGHl9veT++fx2NrV9iupNYGPy6aMNdUwcyHYOVzi5s5SqY273cflDf7HVvZh4JL45JVvdk3jrALspmPtn8oahqviTofhHPR48r4+ns4v9QacX9sJnQdC44l3yvMtBXRhRGossEAYc4U8nlvX1xCzItZiFSSeOR34al+fBxEY8CtY5riX8X0PtfNo1W/MnJx6TU+wcP9R04HeSUtDGq8LNEARBEARBEARBEARBEARB/JezTvqW9S+a/1wK7ojsPwEAAP//9ttpeg==") r4 = openat(0xffffffffffffff9c, &(0x7f0000001d80)='./file2\x00', 0x80000, 0x82) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b65}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000001e40)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) read$FUSE(r4, &(0x7f0000001e80)={0x2020}, 0x2020) 0s ago: executing program 1 (id=1300): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f00000002c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x1}}) read(r0, &(0x7f0000000740)=""/4101, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001780)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000380)={{0x2, 0x1, 0x81, 0x2, 0x9}}) kernel console output (not intermixed with test programs): 35: comm syz.4.53: bad orphan inode 131083 [ 39.656447][ T4621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.681272][ T4624] loop1: detected capacity change from 0 to 512 [ 39.695095][ T4621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.699791][ T4624] ext4: Unknown parameter 'subj_type' [ 39.701519][ T4621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.456146][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 40.459048][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 41.386971][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.464634][ T4672] loop4: detected capacity change from 0 to 512 [ 41.865160][ T4672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.886481][ T4693] loop1: detected capacity change from 0 to 512 [ 41.889858][ T4693] ext4: Unknown parameter 'subj_type' [ 44.328929][ T4781] loop3: detected capacity change from 0 to 512 [ 44.346244][ T4781] ext4: Unknown parameter 'subj_type' [ 46.232526][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 46.284357][ T4850] loop1: detected capacity change from 0 to 512 [ 46.289722][ T4850] ext4: Unknown parameter 'subj_type' [ 47.168827][ T4872] loop0: detected capacity change from 0 to 512 [ 47.262069][ T4872] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.653735][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 48.687837][ T4915] loop0: detected capacity change from 0 to 512 [ 48.693137][ T4915] ext4: Unknown parameter 'subj_type' [ 49.033371][ T4320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.560752][ T4945] loop1: detected capacity change from 0 to 512 [ 49.581880][ T4945] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 50.999874][ T4981] loop4: detected capacity change from 0 to 512 [ 51.019798][ T4981] ext4: Unknown parameter 'subj_type' [ 52.154588][ T5022] loop4: detected capacity change from 0 to 512 [ 52.156370][ T5022] ext4: Unknown parameter 'subj_type' [ 52.208782][ T4320] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.273430][ T5057] loop4: detected capacity change from 0 to 512 [ 53.275573][ T5057] ext4: Unknown parameter 'subj_type' [ 53.499694][ T5066] Zero length message leads to an empty skb [ 53.585849][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 54.102040][ T5095] loop2: detected capacity change from 0 to 512 [ 54.109649][ T5095] ext4: Unknown parameter 'subj_type' [ 54.545439][ T5103] loop1: detected capacity change from 0 to 512 [ 54.580170][ T5103] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.256993][ T5209] loop2: detected capacity change from 0 to 512 [ 57.260645][ T5209] ext4: Unknown parameter 'subj_type' [ 57.291321][ T4320] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.569704][ T5297] loop0: detected capacity change from 0 to 512 [ 59.588528][ T5297] ext4: Unknown parameter 'subj_type' [ 60.474146][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 62.302156][ T5413] loop0: detected capacity change from 0 to 512 [ 62.321831][ T5413] ext4: Unknown parameter 'subj_type' [ 63.894442][ T5478] loop4: detected capacity change from 0 to 512 [ 63.916704][ T5478] ext4: Unknown parameter 'subj_type' [ 64.783437][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.784847][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.699635][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 67.174138][ T5648] loop3: detected capacity change from 0 to 512 [ 67.212492][ T5043] Bluetooth: hci5: Frame reassembly failed (-84) [ 67.240654][ T5648] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.248992][ T5656] loop0: detected capacity change from 0 to 512 [ 67.255439][ T5656] ext4: Unknown parameter 'subj_type' [ 67.271845][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 67.433190][ T5666] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 67.434604][ T5666] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.445039][ T5666] vhci_hcd vhci_hcd.0: Device attached [ 67.454126][ T5667] vhci_hcd: connection closed [ 67.455061][ T4574] vhci_hcd: stop threads [ 67.457262][ T4574] vhci_hcd: release socket [ 67.458174][ T4574] vhci_hcd: disconnect device [ 67.665298][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 68.366157][ T5704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 68.492494][ T5725] loop3: detected capacity change from 0 to 512 [ 68.503842][ T5725] ext4: Unknown parameter 'subj_type' [ 68.692270][ T5750] loop0: detected capacity change from 0 to 512 [ 68.695238][ T5750] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.717033][ T5750] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.370: inode has both inline data and extents flags [ 68.719679][ T5750] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.370: couldn't read orphan inode 15 (err -117) [ 68.722407][ T5750] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.286114][ T4338] Bluetooth: hci5: command 0x1003 tx timeout [ 69.288145][ T4348] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 69.822767][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 69.826804][ T113] cfg80211: failed to load regulatory.db [ 70.439744][ T5828] rtc-efi rtc-efi.0: write status is 3 [ 71.110488][ T5869] loop3: detected capacity change from 0 to 512 [ 71.119211][ T5869] ext4: Unknown parameter 'subj_type' [ 71.572146][ T5883] loop4: detected capacity change from 0 to 512 [ 71.578707][ T5883] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.604044][ T5883] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.406: inode has both inline data and extents flags [ 71.609355][ T5883] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.406: couldn't read orphan inode 15 (err -117) [ 71.611999][ T5883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.655865][ T5892] loop2: detected capacity change from 0 to 512 [ 71.917059][ T5895] EXT4-fs error (device loop4): ext4_add_entry:2488: inode #2: comm syz.4.406: Directory hole found for htree leaf block 0 [ 71.989103][ T5896] hub 5-0:1.0: USB hub found [ 71.990664][ T5896] hub 5-0:1.0: 8 ports detected [ 72.319939][ T5909] device syzkaller0 entered promiscuous mode [ 72.472223][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 72.799324][ T4589] Bluetooth: hci5: Frame reassembly failed (-84) [ 73.721471][ T5959] device syzkaller0 entered promiscuous mode [ 74.876122][ T4348] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 74.961537][ T5996] device syzkaller0 entered promiscuous mode [ 75.002003][ T5998] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 75.011345][ T5998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.017042][ T5998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'. [ 75.019001][ T5998] device bond1 entered promiscuous mode [ 75.030925][ T5998] bond1: (slave dummy0): making interface the new active one [ 75.032496][ T5998] device dummy0 entered promiscuous mode [ 75.034314][ T5998] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 75.189713][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 75.701602][ T6041] sctp: [Deprecated]: syz.1.471 (pid 6041) Use of int in max_burst socket option. [ 75.701602][ T6041] Use struct sctp_assoc_value instead [ 75.726865][ T6044] device syzkaller0 entered promiscuous mode [ 75.914479][ T6058] loop4: detected capacity change from 0 to 512 [ 75.916680][ T6058] ext4: Unknown parameter 'subj_type' [ 75.958503][ T4320] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.249372][ T6087] device syzkaller0 entered promiscuous mode [ 76.777401][ T6093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.078772][ T6126] device syzkaller0 entered promiscuous mode [ 77.185145][ T6133] loop1: detected capacity change from 0 to 512 [ 77.197535][ T6133] ext4: Unknown parameter 'subj_type' [ 77.261412][ T4320] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.317465][ T6139] loop3: detected capacity change from 0 to 512 [ 77.332745][ T6139] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 77.343196][ T6139] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 77.344778][ T6139] EXT4-fs (loop3): too many log groups per flexible block group [ 77.355570][ T6139] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 77.357469][ T6139] EXT4-fs (loop3): mount failed [ 77.782308][ T6165] capability: warning: `syz.2.515' uses deprecated v2 capabilities in a way that may be insecure [ 77.862219][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'. [ 77.868981][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'. [ 79.152899][ T6218] device syzkaller0 entered promiscuous mode [ 79.873727][ T6255] loop3: detected capacity change from 0 to 512 [ 79.894054][ T6255] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.547: bad orphan inode 15 [ 79.898780][ T6255] ext4_test_bit(bit=14, block=5) = 0 [ 79.900156][ T6255] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.910315][ T6255] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 79.939565][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 80.003439][ T6268] device syzkaller0 entered promiscuous mode [ 80.321862][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.555'. [ 80.329881][ T6279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 80.443081][ T6287] FAULT_INJECTION: forcing a failure. [ 80.443081][ T6287] name failslab, interval 1, probability 0, space 0, times 1 [ 80.446206][ T6287] CPU: 1 PID: 6287 Comm: syz.2.560 Not tainted syzkaller #0 [ 80.447801][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 80.450172][ T6287] Call trace: [ 80.450936][ T6287] dump_backtrace+0x1c4/0x1f0 [ 80.452043][ T6287] show_stack+0x2c/0x3c [ 80.453019][ T6287] __dump_stack+0x30/0x40 [ 80.454052][ T6287] dump_stack_lvl+0xf4/0x15c [ 80.455117][ T6287] dump_stack+0x1c/0x5c [ 80.456101][ T6287] should_fail_ex+0x3cc/0x524 [ 80.457220][ T6287] __should_failslab+0xc0/0x11c [ 80.458384][ T6287] should_failslab+0x10/0x28 [ 80.459473][ T6287] __kmem_cache_alloc_node+0x7c/0x318 [ 80.460688][ T6287] __kmalloc+0xc4/0x180 [ 80.461598][ T6287] nla_strdup+0x98/0x140 [ 80.462552][ T6287] nf_tables_newtable+0x3ec/0x119c [ 80.463709][ T6287] nfnetlink_rcv+0xc7c/0x1c54 [ 80.464785][ T6287] netlink_unicast+0x5fc/0x80c [ 80.465836][ T6287] netlink_sendmsg+0x6f0/0x9d8 [ 80.466900][ T6287] ____sys_sendmsg+0x588/0x90c [ 80.467983][ T6287] __sys_sendmsg+0x288/0x374 [ 80.469026][ T6287] __arm64_sys_sendmsg+0x80/0x94 [ 80.470159][ T6287] invoke_syscall+0x98/0x290 [ 80.471220][ T6287] el0_svc_common+0x13c/0x258 [ 80.472304][ T6287] do_el0_svc+0x5c/0x134 [ 80.473224][ T6287] el0_svc+0x58/0x12c [ 80.474125][ T6287] el0t_64_sync_handler+0x84/0xf0 [ 80.475256][ T6287] el0t_64_sync+0x18c/0x190 [ 81.080778][ T6303] device syzkaller0 entered promiscuous mode [ 81.881979][ T6210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.932641][ T6328] syz.4.577 uses obsolete (PF_INET,SOCK_PACKET) [ 81.943844][ T6328] FAULT_INJECTION: forcing a failure. [ 81.943844][ T6328] name failslab, interval 1, probability 0, space 0, times 0 [ 81.949498][ T6328] CPU: 1 PID: 6328 Comm: syz.4.577 Not tainted syzkaller #0 [ 81.950891][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 81.952871][ T6328] Call trace: [ 81.953547][ T6328] dump_backtrace+0x1c4/0x1f0 [ 81.954438][ T6328] show_stack+0x2c/0x3c [ 81.955234][ T6328] __dump_stack+0x30/0x40 [ 81.956127][ T6328] dump_stack_lvl+0xf4/0x15c [ 81.957190][ T6328] dump_stack+0x1c/0x5c [ 81.958168][ T6328] should_fail_ex+0x3cc/0x524 [ 81.959255][ T6328] __should_failslab+0xc0/0x11c [ 81.960285][ T6328] should_failslab+0x10/0x28 [ 81.961323][ T6328] __kmem_cache_alloc_node+0x7c/0x318 [ 81.962597][ T6328] kmalloc_trace+0x48/0x94 [ 81.963600][ T6328] batadv_v_ogm_init+0xcc/0x394 [ 81.964710][ T6328] batadv_v_mesh_init+0x20/0x34 [ 81.965885][ T6328] batadv_mesh_init+0x390/0x678 [ 81.967037][ T6328] batadv_softif_init_late+0x7c4/0xc50 [ 81.968343][ T6328] register_netdevice+0x4a8/0x1650 [ 81.969558][ T6328] batadv_softif_newlink+0x90/0xa0 [ 81.970771][ T6328] rtnl_newlink+0x10b4/0x1af0 [ 81.971895][ T6328] rtnetlink_rcv_msg+0x694/0xcc4 [ 81.973067][ T6328] netlink_rcv_skb+0x220/0x3ec [ 81.974201][ T6328] rtnetlink_rcv+0x28/0x38 [ 81.975122][ T6328] netlink_unicast+0x5fc/0x80c [ 81.976066][ T6328] netlink_sendmsg+0x6f0/0x9d8 [ 81.977072][ T6328] ____sys_sendmsg+0x588/0x90c [ 81.978053][ T6328] __sys_sendmsg+0x288/0x374 [ 81.978989][ T6328] __arm64_sys_sendmsg+0x80/0x94 [ 81.979989][ T6328] invoke_syscall+0x98/0x290 [ 81.980935][ T6328] el0_svc_common+0x13c/0x258 [ 81.981888][ T6328] do_el0_svc+0x5c/0x134 [ 81.982752][ T6328] el0_svc+0x58/0x12c [ 81.983545][ T6328] el0t_64_sync_handler+0x84/0xf0 [ 81.984474][ T6328] el0t_64_sync+0x18c/0x190 [ 83.448371][ T6407] FAULT_INJECTION: forcing a failure. [ 83.448371][ T6407] name failslab, interval 1, probability 0, space 0, times 0 [ 83.451586][ T6407] CPU: 0 PID: 6407 Comm: syz.0.607 Not tainted syzkaller #0 [ 83.453237][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 83.455585][ T6407] Call trace: [ 83.456348][ T6407] dump_backtrace+0x1c4/0x1f0 [ 83.457366][ T6407] show_stack+0x2c/0x3c [ 83.458248][ T6407] __dump_stack+0x30/0x40 [ 83.459243][ T6407] dump_stack_lvl+0xf4/0x15c [ 83.460270][ T6407] dump_stack+0x1c/0x5c [ 83.461216][ T6407] should_fail_ex+0x3cc/0x524 [ 83.462288][ T6407] __should_failslab+0xc0/0x11c [ 83.463431][ T6407] should_failslab+0x10/0x28 [ 83.464498][ T6407] __kmem_cache_alloc_node+0x7c/0x318 [ 83.465727][ T6407] __kmalloc_node+0xc8/0x184 [ 83.466793][ T6407] __vmalloc_node_range+0x448/0xe70 [ 83.468014][ T6407] vmalloc+0x9c/0xd4 [ 83.468916][ T6407] bpf_prog_calc_tag+0xe4/0x580 [ 83.469972][ T6407] resolve_pseudo_ldimm64+0xc0/0xdec [ 83.471132][ T6407] bpf_check+0x31c4/0xe03c [ 83.472108][ T6407] bpf_prog_load+0xe2c/0x12c0 [ 83.473151][ T6407] __sys_bpf+0x494/0x660 [ 83.474113][ T6407] __arm64_sys_bpf+0x80/0x98 [ 83.475135][ T6407] invoke_syscall+0x98/0x290 [ 83.476151][ T6407] el0_svc_common+0x13c/0x258 [ 83.477179][ T6407] do_el0_svc+0x5c/0x134 [ 83.478109][ T6407] el0_svc+0x58/0x12c [ 83.479013][ T6407] el0t_64_sync_handler+0x84/0xf0 [ 83.480132][ T6407] el0t_64_sync+0x18c/0x190 [ 83.706117][ T6434] loop1: detected capacity change from 0 to 1024 [ 83.712333][ T6434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.724231][ T6434] EXT4-fs (loop1): unsupported inode size: 6 [ 83.725481][ T6434] EXT4-fs (loop1): blocksize: 1024 [ 83.930576][ T6457] loop4: detected capacity change from 0 to 512 [ 83.939784][ T6457] ext4: Unknown parameter 'subj_type' [ 84.340284][ T6467] loop3: detected capacity change from 0 to 1024 [ 84.354827][ T6467] EXT4-fs: Ignoring removed bh option [ 84.376870][ T6467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.400621][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 84.442613][ T4339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.445165][ T4339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.450114][ T4339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.452719][ T4339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.454788][ T4339] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.457328][ T4339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.568426][ T4890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.584076][ T6474] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.669008][ T4890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.684713][ T6474] chnl_net:caif_netlink_parms(): no params data found [ 84.944282][ T4890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.054477][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.056109][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.057835][ T6474] device bridge_slave_0 entered promiscuous mode [ 85.060794][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.062369][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.064076][ T6474] device bridge_slave_1 entered promiscuous mode [ 85.071518][ T6474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.074372][ T6474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.086569][ T6474] team0: Port device team_slave_0 added [ 85.090714][ T6474] team0: Port device team_slave_1 added [ 85.138454][ T4890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.144927][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.148210][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.158037][ T6474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.164206][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.647'. [ 85.168102][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.647'. [ 85.171310][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.172813][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.181089][ T6474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.187195][ T6511] ip_tables: iptables: counters copy to user failed while replacing table [ 85.275575][ T6517] FAULT_INJECTION: forcing a failure. [ 85.275575][ T6517] name failslab, interval 1, probability 0, space 0, times 0 [ 85.278599][ T6517] CPU: 0 PID: 6517 Comm: syz.4.653 Not tainted syzkaller #0 [ 85.280006][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 85.282024][ T6517] Call trace: [ 85.282718][ T6517] dump_backtrace+0x1c4/0x1f0 [ 85.283152][ T6474] device hsr_slave_0 entered promiscuous mode [ 85.283696][ T6517] show_stack+0x2c/0x3c [ 85.285880][ T6517] __dump_stack+0x30/0x40 [ 85.286784][ T6517] dump_stack_lvl+0xf4/0x15c [ 85.287735][ T6517] dump_stack+0x1c/0x5c [ 85.288581][ T6517] should_fail_ex+0x3cc/0x524 [ 85.289510][ T6517] __should_failslab+0xc0/0x11c [ 85.290465][ T6517] should_failslab+0x10/0x28 [ 85.291437][ T6517] __kmem_cache_alloc_node+0x7c/0x318 [ 85.292544][ T6517] __kmalloc+0xc4/0x180 [ 85.293444][ T6517] tomoyo_realpath_from_path+0xc4/0x508 [ 85.294644][ T6517] tomoyo_path_number_perm+0x1c4/0x540 [ 85.295773][ T6517] tomoyo_file_ioctl+0x2c/0x3c [ 85.296834][ T6517] security_file_ioctl+0x80/0xbc [ 85.297762][ T6517] __arm64_sys_ioctl+0xa8/0x1c8 [ 85.298745][ T6517] invoke_syscall+0x98/0x290 [ 85.299751][ T6517] el0_svc_common+0x13c/0x258 [ 85.300793][ T6517] do_el0_svc+0x5c/0x134 [ 85.301686][ T6517] el0_svc+0x58/0x12c [ 85.302458][ T6517] el0t_64_sync_handler+0x84/0xf0 [ 85.303381][ T6517] el0t_64_sync+0x18c/0x190 [ 85.312211][ T6517] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.326606][ T6474] device hsr_slave_1 entered promiscuous mode [ 85.328201][ T6521] loop1: detected capacity change from 0 to 128 [ 85.338262][ T6521] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 85.356366][ T6474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.378620][ T6474] Cannot create hsr debugfs directory [ 86.151757][ T6474] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.201582][ T6474] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.212746][ T4911] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 86.263309][ T6546] loop4: detected capacity change from 0 to 512 [ 86.283449][ T6546] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 86.285516][ T6546] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.287246][ T6546] EXT4-fs error (device loop4): ext4_iget_extra_inode:4766: inode #15: comm syz.4.661: corrupted in-inode xattr [ 86.292610][ T6546] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.661: couldn't read orphan inode 15 (err -117) [ 86.295418][ T6546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.311897][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 86.420092][ T6474] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.476380][ T4348] Bluetooth: hci2: command 0x0409 tx timeout [ 86.615769][ T6474] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.888559][ T6582] nfs: Bad value for 'vers' [ 86.924875][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.938745][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.940533][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.979957][ T6474] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.983481][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.987711][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.990086][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.991599][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.002196][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.006176][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.008495][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.010490][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.012099][ T4422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.016305][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.022140][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.440223][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.443806][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.454628][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.462139][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.470883][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.473922][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.481133][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.484263][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.498166][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.600731][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.639290][ T4348] Bluetooth: hci2: command 0x041b tx timeout [ 88.728753][ T6650] nfs: Unknown parameter 'nore' [ 88.828872][ T6656] netlink: 108 bytes leftover after parsing attributes in process `syz.4.681'. [ 88.865974][ T6656] netlink: 80 bytes leftover after parsing attributes in process `syz.4.681'. [ 89.812674][ T6698] loop3: detected capacity change from 0 to 512 [ 89.814616][ T6698] ext4: Unknown parameter 'subj_type' [ 90.111717][ T4320] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.147349][ T6706] FAULT_INJECTION: forcing a failure. [ 90.147349][ T6706] name failslab, interval 1, probability 0, space 0, times 0 [ 90.150054][ T6706] CPU: 1 PID: 6706 Comm: syz.0.696 Not tainted syzkaller #0 [ 90.151512][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 90.153636][ T6706] Call trace: [ 90.154358][ T6706] dump_backtrace+0x1c4/0x1f0 [ 90.155417][ T6706] show_stack+0x2c/0x3c [ 90.156347][ T6706] __dump_stack+0x30/0x40 [ 90.157275][ T6706] dump_stack_lvl+0xf4/0x15c [ 90.158294][ T6706] dump_stack+0x1c/0x5c [ 90.159144][ T6706] should_fail_ex+0x3cc/0x524 [ 90.160085][ T6706] __should_failslab+0xc0/0x11c [ 90.161048][ T6706] should_failslab+0x10/0x28 [ 90.161996][ T6706] kmem_cache_alloc+0x88/0x310 [ 90.163001][ T6706] key_alloc+0x284/0xdec [ 90.163929][ T6706] key_create_or_update+0x780/0x86c [ 90.165080][ T6706] __arm64_sys_add_key+0x40c/0x520 [ 90.166187][ T6706] invoke_syscall+0x98/0x290 [ 90.167210][ T6706] el0_svc_common+0x13c/0x258 [ 90.168250][ T6706] do_el0_svc+0x5c/0x134 [ 90.169216][ T6706] el0_svc+0x58/0x12c [ 90.170111][ T6706] el0t_64_sync_handler+0x84/0xf0 [ 90.171260][ T6706] el0t_64_sync+0x18c/0x190 [ 90.534448][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.539338][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.563384][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.667993][ T6732] loop1: detected capacity change from 0 to 256 [ 90.672038][ T6733] nfs: Unknown parameter 'nore' [ 90.735397][ T4339] Bluetooth: hci2: command 0x040f tx timeout [ 90.746843][ T6732] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.772799][ T6732] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 90.774496][ T6732] FAT-fs (loop1): Filesystem has been set read-only [ 91.871925][ T6764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.710'. [ 91.961849][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.964105][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.992506][ T6777] nfs: Unknown parameter 'noresvp' [ 92.081477][ T4890] device hsr_slave_0 left promiscuous mode [ 92.116087][ T4890] device hsr_slave_1 left promiscuous mode [ 92.172173][ T6800] loop4: detected capacity change from 0 to 2048 [ 92.176673][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.178422][ T4890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.187053][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.188678][ T4890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.199013][ T4890] device bridge_slave_1 left promiscuous mode [ 92.201221][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.229054][ T4890] device bridge_slave_0 left promiscuous mode [ 92.230325][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.266232][ T6800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.336100][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 92.426363][ T4890] device veth1_macvtap left promiscuous mode [ 92.427670][ T4890] device veth0_macvtap left promiscuous mode [ 92.429360][ T4890] device veth1_vlan left promiscuous mode [ 92.430655][ T4890] device veth0_vlan left promiscuous mode [ 92.805744][ T4348] Bluetooth: hci2: command 0x0419 tx timeout [ 93.168106][ T6823] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 93.413653][ T6833] nfs: Unknown parameter 'noresvp' [ 93.462059][ T6835] FAULT_INJECTION: forcing a failure. [ 93.462059][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 93.464984][ T6835] CPU: 0 PID: 6835 Comm: syz.3.730 Not tainted syzkaller #0 [ 93.466613][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 93.468961][ T6835] Call trace: [ 93.469646][ T6835] dump_backtrace+0x1c4/0x1f0 [ 93.470646][ T6835] show_stack+0x2c/0x3c [ 93.471579][ T6835] __dump_stack+0x30/0x40 [ 93.472621][ T6835] dump_stack_lvl+0xf4/0x15c [ 93.473612][ T6835] dump_stack+0x1c/0x5c [ 93.474479][ T6835] should_fail_ex+0x3cc/0x524 [ 93.475527][ T6835] __should_failslab+0xc0/0x11c [ 93.476575][ T6835] should_failslab+0x10/0x28 [ 93.477541][ T6835] __kmem_cache_alloc_node+0x7c/0x318 [ 93.478679][ T6835] __kmalloc+0xc4/0x180 [ 93.479564][ T6835] tomoyo_realpath_from_path+0xc4/0x508 [ 93.480693][ T6835] tomoyo_path_number_perm+0x1c4/0x540 [ 93.481816][ T6835] tomoyo_file_ioctl+0x2c/0x3c [ 93.482805][ T6835] security_file_ioctl+0x80/0xbc [ 93.483815][ T6835] __arm64_sys_ioctl+0xa8/0x1c8 [ 93.484825][ T6835] invoke_syscall+0x98/0x290 [ 93.485783][ T6835] el0_svc_common+0x13c/0x258 [ 93.486824][ T6835] do_el0_svc+0x5c/0x134 [ 93.487780][ T6835] el0_svc+0x58/0x12c [ 93.488670][ T6835] el0t_64_sync_handler+0x84/0xf0 [ 93.489748][ T6835] el0t_64_sync+0x18c/0x190 [ 93.501913][ T6835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.760049][ T6845] loop1: detected capacity change from 0 to 8192 [ 94.529992][ T6856] loop3: detected capacity change from 0 to 512 [ 94.571492][ T6856] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.744931][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 95.763774][ T6868] nfs: Unknown parameter 'noresvp' [ 96.438679][ T4890] team0 (unregistering): Port device team_slave_1 removed [ 96.597088][ T4890] team0 (unregistering): Port device team_slave_0 removed [ 96.757157][ T4890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.966466][ T4890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.427580][ T4890] bond0 (unregistering): Released all slaves [ 98.674623][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.676609][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.678551][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.680537][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.692052][ T6474] device veth0_vlan entered promiscuous mode [ 98.698993][ T6474] device veth1_vlan entered promiscuous mode [ 98.727304][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 98.730679][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 98.732541][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.736534][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.739781][ T6474] device veth0_macvtap entered promiscuous mode [ 98.743644][ T6474] device veth1_macvtap entered promiscuous mode [ 98.781258][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.785463][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.793705][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.798924][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.803087][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.805099][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.842760][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.844826][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.120782][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.123827][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.125527][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.134912][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 99.144117][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.146655][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.157024][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.159376][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.159553][ T6892] loop0: detected capacity change from 0 to 1024 [ 99.162693][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.164960][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.165606][ T6892] EXT4-fs: Ignoring removed bh option [ 99.171379][ T6892] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.173607][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.176252][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.178489][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.180801][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.183685][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.188105][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.190329][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.204224][ T6474] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.207350][ T6474] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.209362][ T6474] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.211171][ T6892] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.211319][ T6474] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.252256][ T4911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.255112][ T4911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.266908][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): ipvtap0: link becomes ready [ 99.269122][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.294200][ T6892] EXT4-fs (loop0): shut down requested (2) [ 99.296674][ T5082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.298394][ T5082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.301158][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.318091][ T6892] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 99.322421][ T6900] FAULT_INJECTION: forcing a failure. [ 99.322421][ T6900] name failslab, interval 1, probability 0, space 0, times 0 [ 99.325238][ T6900] CPU: 1 PID: 6900 Comm: syz.3.750 Not tainted syzkaller #0 [ 99.326663][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 99.328732][ T6900] Call trace: [ 99.329448][ T6900] dump_backtrace+0x1c4/0x1f0 [ 99.330503][ T6900] show_stack+0x2c/0x3c [ 99.331473][ T6900] __dump_stack+0x30/0x40 [ 99.332475][ T6900] dump_stack_lvl+0xf4/0x15c [ 99.333523][ T6900] dump_stack+0x1c/0x5c [ 99.334399][ T6900] should_fail_ex+0x3cc/0x524 [ 99.335399][ T6900] __should_failslab+0xc0/0x11c [ 99.336454][ T6900] should_failslab+0x10/0x28 [ 99.337523][ T6900] __kmem_cache_alloc_node+0x7c/0x318 [ 99.338742][ T6900] __kmalloc+0xc4/0x180 [ 99.339699][ T6900] fib6_info_alloc+0x38/0xe4 [ 99.340769][ T6900] ip6_route_info_create+0x3a4/0xf9c [ 99.342028][ T6900] addrconf_f6i_alloc+0x1a8/0x36c [ 99.343184][ T6900] __ipv6_dev_ac_inc+0x224/0x7e8 [ 99.344342][ T6900] ipv6_sock_ac_join+0x3f8/0x5d8 [ 99.345479][ T6900] do_ipv6_setsockopt+0x1974/0x3174 [ 99.346699][ T6900] ipv6_setsockopt+0x6c/0x1a0 [ 99.347823][ T6900] tcp_setsockopt+0xcc/0xe8 [ 99.348902][ T6900] sock_common_setsockopt+0xb0/0xcc [ 99.350153][ T6900] __sys_setsockopt+0x2fc/0x50c [ 99.351262][ T6900] __arm64_sys_setsockopt+0xc0/0xdc [ 99.352399][ T6900] invoke_syscall+0x98/0x290 [ 99.353427][ T6900] el0_svc_common+0x13c/0x258 [ 99.354485][ T6900] do_el0_svc+0x5c/0x134 [ 99.355441][ T6900] el0_svc+0x58/0x12c [ 99.356346][ T6900] el0t_64_sync_handler+0x84/0xf0 [ 99.357486][ T6900] el0t_64_sync+0x18c/0x190 [ 99.390476][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 99.467477][ T6924] FAULT_INJECTION: forcing a failure. [ 99.467477][ T6924] name failslab, interval 1, probability 0, space 0, times 0 [ 99.467628][ T6919] loop0: detected capacity change from 0 to 512 [ 99.470336][ T6924] CPU: 1 PID: 6924 Comm: syz.1.754 Not tainted syzkaller #0 [ 99.473277][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 99.475596][ T6924] Call trace: [ 99.476324][ T6924] dump_backtrace+0x1c4/0x1f0 [ 99.477338][ T6924] show_stack+0x2c/0x3c [ 99.478212][ T6924] __dump_stack+0x30/0x40 [ 99.479152][ T6924] dump_stack_lvl+0xf4/0x15c [ 99.480086][ T6924] dump_stack+0x1c/0x5c [ 99.480978][ T6924] should_fail_ex+0x3cc/0x524 [ 99.481977][ T6924] __should_failslab+0xc0/0x11c [ 99.482968][ T6924] should_failslab+0x10/0x28 [ 99.483909][ T6924] kmem_cache_alloc+0x88/0x310 [ 99.484145][ T6919] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.752: inode has both inline data and extents flags [ 99.484895][ T6924] fib_trie_unmerge+0x21c/0xb38 [ 99.488029][ T6919] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.752: couldn't read orphan inode 15 (err -117) [ 99.488700][ T6924] fib_unmerge+0xdc/0x2fc [ 99.491430][ T6919] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.491968][ T6924] fib4_rule_configure+0xe0/0x980 [ 99.494809][ T6924] fib_nl_newrule+0xe30/0x1618 [ 99.495792][ T6924] rtnetlink_rcv_msg+0x694/0xcc4 [ 99.496796][ T6924] netlink_rcv_skb+0x220/0x3ec [ 99.497796][ T6924] rtnetlink_rcv+0x28/0x38 [ 99.498650][ T6924] netlink_unicast+0x5fc/0x80c [ 99.499559][ T6924] netlink_sendmsg+0x6f0/0x9d8 [ 99.500476][ T6924] ____sys_sendmsg+0x588/0x90c [ 99.501399][ T6924] __sys_sendmsg+0x288/0x374 [ 99.502289][ T6924] __arm64_sys_sendmsg+0x80/0x94 [ 99.503235][ T6924] invoke_syscall+0x98/0x290 [ 99.504128][ T6924] el0_svc_common+0x13c/0x258 [ 99.505006][ T6924] do_el0_svc+0x5c/0x134 [ 99.505838][ T6924] el0_svc+0x58/0x12c [ 99.506613][ T6924] el0t_64_sync_handler+0x84/0xf0 [ 99.507594][ T6924] el0t_64_sync+0x18c/0x190 [ 99.530590][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 99.613964][ T6935] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 99.615378][ T6935] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.617541][ T6935] vhci_hcd vhci_hcd.0: Device attached [ 99.622589][ T6935] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 99.624011][ T6935] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 99.626604][ T6935] vhci_hcd vhci_hcd.0: Device attached [ 99.873522][ T6960] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 99.895880][ T5434] usb 12-1: new high-speed USB device number 2 using vhci_hcd [ 100.099093][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'. [ 100.263809][ T6993] FAULT_INJECTION: forcing a failure. [ 100.263809][ T6993] name failslab, interval 1, probability 0, space 0, times 0 [ 100.273798][ T6993] CPU: 1 PID: 6993 Comm: syz.3.774 Not tainted syzkaller #0 [ 100.275379][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 100.277558][ T6993] Call trace: [ 100.278262][ T6993] dump_backtrace+0x1c4/0x1f0 [ 100.279359][ T6993] show_stack+0x2c/0x3c [ 100.280360][ T6993] __dump_stack+0x30/0x40 [ 100.281392][ T6993] dump_stack_lvl+0xf4/0x15c [ 100.282472][ T6993] dump_stack+0x1c/0x5c [ 100.283422][ T6993] should_fail_ex+0x3cc/0x524 [ 100.284381][ T6993] __should_failslab+0xc0/0x11c [ 100.285376][ T6993] should_failslab+0x10/0x28 [ 100.286325][ T6993] kmem_cache_alloc+0x88/0x310 [ 100.287334][ T6993] __kernfs_new_node+0xec/0x5fc [ 100.288361][ T6993] kernfs_new_node+0x120/0x230 [ 100.289368][ T6993] __kernfs_create_file+0x60/0x2e0 [ 100.290459][ T6993] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 100.291578][ T6993] internal_create_group+0x3e8/0xb24 [ 100.292646][ T6993] sysfs_create_groups+0x60/0x134 [ 100.293697][ T6993] device_add_attrs+0xdc/0x6f8 [ 100.294686][ T6993] device_add+0x5ac/0xe4c [ 100.295584][ T6993] netdev_register_kobject+0x170/0x2f4 [ 100.296696][ T6993] register_netdevice+0xf28/0x1650 [ 100.297831][ T6993] batadv_softif_newlink+0x90/0xa0 [ 100.298956][ T6993] rtnl_newlink+0x10b4/0x1af0 [ 100.299986][ T6993] rtnetlink_rcv_msg+0x694/0xcc4 [ 100.301084][ T6993] netlink_rcv_skb+0x220/0x3ec [ 100.302124][ T6993] rtnetlink_rcv+0x28/0x38 [ 100.303123][ T6993] netlink_unicast+0x5fc/0x80c [ 100.304081][ T6993] netlink_sendmsg+0x6f0/0x9d8 [ 100.305034][ T6993] ____sys_sendmsg+0x588/0x90c [ 100.305938][ T6993] __sys_sendmsg+0x288/0x374 [ 100.306831][ T6993] __arm64_sys_sendmsg+0x80/0x94 [ 100.307776][ T6993] invoke_syscall+0x98/0x290 [ 100.308674][ T6993] el0_svc_common+0x13c/0x258 [ 100.309568][ T6993] do_el0_svc+0x5c/0x134 [ 100.310435][ T6993] el0_svc+0x58/0x12c [ 100.311297][ T6993] el0t_64_sync_handler+0x84/0xf0 [ 100.312311][ T6993] el0t_64_sync+0x18c/0x190 [ 100.471542][ T7004] loop0: detected capacity change from 0 to 128 [ 100.486388][ T7004] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 100.594746][ T6940] vhci_hcd: connection closed [ 100.595006][ T4890] vhci_hcd: stop threads [ 100.597339][ T4890] vhci_hcd: release socket [ 100.601314][ T4890] vhci_hcd: disconnect device [ 100.613661][ T6936] vhci_hcd: connection reset by peer [ 100.616086][ T4890] vhci_hcd: stop threads [ 100.616914][ T4890] vhci_hcd: release socket [ 100.617773][ T4890] vhci_hcd: disconnect device [ 101.118204][ T7030] usb usb5: usbfs: process 7030 (syz.3.786) did not claim interface 0 before use [ 101.436822][ T4890] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 101.535295][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.545268][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.565463][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.582460][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.616207][ T7054] batman_adv: batadv0: Adding interface: ip6gretap1 [ 101.645229][ T7054] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.705747][ T7054] batman_adv: batadv0: Interface activated: ip6gretap1 [ 101.824638][ T7070] IPVS: nq: FWM 3 0x00000003 - no destination available [ 102.001695][ T7086] loop5: detected capacity change from 0 to 128 [ 102.024427][ T7086] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 102.031929][ T7085] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 102.033231][ T7085] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.035446][ T7085] vhci_hcd vhci_hcd.0: Device attached [ 102.054890][ T7093] FAULT_INJECTION: forcing a failure. [ 102.054890][ T7093] name failslab, interval 1, probability 0, space 0, times 0 [ 102.064565][ T7093] CPU: 1 PID: 7093 Comm: syz.0.806 Not tainted syzkaller #0 [ 102.066086][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 102.068241][ T7093] Call trace: [ 102.068969][ T7093] dump_backtrace+0x1c4/0x1f0 [ 102.069993][ T7093] show_stack+0x2c/0x3c [ 102.070836][ T7093] __dump_stack+0x30/0x40 [ 102.071742][ T7093] dump_stack_lvl+0xf4/0x15c [ 102.072696][ T7093] dump_stack+0x1c/0x5c [ 102.073556][ T7093] should_fail_ex+0x3cc/0x524 [ 102.074418][ T7093] __should_failslab+0xc0/0x11c [ 102.075469][ T7093] should_failslab+0x10/0x28 [ 102.076481][ T7093] __kmem_cache_alloc_node+0x7c/0x318 [ 102.077560][ T7093] __kmalloc+0xc4/0x180 [ 102.078371][ T7093] start_sync_thread+0x798/0x2150 [ 102.079384][ T7093] do_ip_vs_set_ctl+0x4a8/0xab0 [ 102.080351][ T7093] nf_setsockopt+0x260/0x280 [ 102.081273][ T7093] ip_setsockopt+0x124/0x134 [ 102.082234][ T7093] tcp_setsockopt+0xcc/0xe8 [ 102.083137][ T7093] sock_common_setsockopt+0xb0/0xcc [ 102.084210][ T7093] __sys_setsockopt+0x2fc/0x50c [ 102.085193][ T7093] __arm64_sys_setsockopt+0xc0/0xdc [ 102.086269][ T7093] invoke_syscall+0x98/0x290 [ 102.087194][ T7093] el0_svc_common+0x13c/0x258 [ 102.088253][ T7093] do_el0_svc+0x5c/0x134 [ 102.089198][ T7093] el0_svc+0x58/0x12c [ 102.090036][ T7093] el0t_64_sync_handler+0x84/0xf0 [ 102.091120][ T7093] el0t_64_sync+0x18c/0x190 [ 102.103484][ T7085] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 102.104845][ T7085] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 102.110140][ T7085] vhci_hcd vhci_hcd.0: Device attached [ 102.345931][ T24] usb 10-1: new high-speed USB device number 2 using vhci_hcd [ 102.592354][ T7120] IPVS: nq: FWM 3 0x00000003 - no destination available [ 102.615088][ T7122] jffs2: notice: (7122) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 102.669602][ T7122] device ip6gre1 entered promiscuous mode [ 102.807023][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 102.829396][ T7092] vhci_hcd: connection closed [ 102.829488][ T7087] vhci_hcd: connection reset by peer [ 102.829572][ T5082] vhci_hcd: stop threads [ 102.832672][ T5082] vhci_hcd: release socket [ 102.833754][ T5082] vhci_hcd: disconnect device [ 102.834829][ T5082] vhci_hcd: stop threads [ 102.842296][ T7141] loop0: detected capacity change from 0 to 512 [ 102.844040][ T5082] vhci_hcd: release socket [ 102.845182][ T5082] vhci_hcd: disconnect device [ 102.912082][ T4616] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 102.959940][ T7141] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 103.262976][ T7170] netlink: 'syz.3.829': attribute type 10 has an invalid length. [ 103.295618][ T7170] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.309593][ T7170] bond0: (slave team0): Enslaving as an active interface with an up link [ 103.380218][ T7175] loop1: detected capacity change from 0 to 128 [ 103.412194][ T7175] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 103.535406][ T7180] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 103.972600][ T7188] loop3: detected capacity change from 0 to 512 [ 104.021064][ T7188] EXT4-fs error (device loop3): __ext4_iget:5135: inode #2: block 131072: comm syz.3.837: invalid block [ 104.044783][ T7188] EXT4-fs (loop3): get root inode failed [ 104.046081][ T7188] EXT4-fs (loop3): mount failed [ 104.089920][ T7188] loop3: detected capacity change from 0 to 512 [ 104.092512][ T7196] FAULT_INJECTION: forcing a failure. [ 104.092512][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 104.099390][ T7188] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.106027][ T7196] CPU: 1 PID: 7196 Comm: syz.5.839 Not tainted syzkaller #0 [ 104.107450][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 104.109427][ T7196] Call trace: [ 104.110161][ T7196] dump_backtrace+0x1c4/0x1f0 [ 104.111127][ T7196] show_stack+0x2c/0x3c [ 104.111986][ T7196] __dump_stack+0x30/0x40 [ 104.112893][ T7196] dump_stack_lvl+0xf4/0x15c [ 104.113849][ T7196] dump_stack+0x1c/0x5c [ 104.114715][ T7196] should_fail_ex+0x3cc/0x524 [ 104.115693][ T7196] __should_failslab+0xc0/0x11c [ 104.116703][ T7196] should_failslab+0x10/0x28 [ 104.117663][ T7196] __kmem_cache_alloc_node+0x7c/0x318 [ 104.118751][ T7196] __kmalloc_node_track_caller+0xb8/0x174 [ 104.119939][ T7196] kstrdup_const+0x90/0xdc [ 104.120845][ T7196] kvasprintf_const+0x120/0x2e4 [ 104.121853][ T7196] kobject_set_name_vargs+0xd8/0x1c8 [ 104.122919][ T7196] dev_set_name+0xe8/0x13c [ 104.123884][ T7196] netdev_register_kobject+0xa8/0x2f4 [ 104.125058][ T7196] register_netdevice+0xf28/0x1650 [ 104.126188][ T7196] ip6_tnl_create2+0x80/0x138 [ 104.127237][ T7196] ip6_tnl_locate+0x5e4/0x6d4 [ 104.128277][ T7196] ip6_tnl_siocdevprivate+0x4c0/0xc38 [ 104.129450][ T7196] dev_ifsioc+0x810/0xc04 [ 104.130409][ T7196] dev_ioctl+0x530/0xc78 [ 104.131349][ T7196] sock_ioctl+0x778/0x828 [ 104.132304][ T7196] __arm64_sys_ioctl+0x14c/0x1c8 [ 104.133413][ T7196] invoke_syscall+0x98/0x290 [ 104.134391][ T7196] el0_svc_common+0x13c/0x258 [ 104.135325][ T7196] do_el0_svc+0x5c/0x134 [ 104.136184][ T7196] el0_svc+0x58/0x12c [ 104.137003][ T7196] el0t_64_sync_handler+0x84/0xf0 [ 104.138047][ T7196] el0t_64_sync+0x18c/0x190 [ 104.172383][ T7188] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.837: invalid indirect mapped block 32768 (level 2) [ 104.180881][ T7188] EXT4-fs (loop3): 1 orphan inode deleted [ 104.182105][ T7188] EXT4-fs (loop3): 1 truncate cleaned up [ 104.183576][ T7188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.243869][ T4589] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 105.666182][ T5434] vhci_hcd: vhci_device speed not set [ 105.704355][ T7232] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 105.705562][ T7232] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.709323][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 105.709897][ T7232] vhci_hcd vhci_hcd.0: Device attached [ 105.728893][ T7232] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 105.730270][ T7232] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 105.733371][ T7232] vhci_hcd vhci_hcd.0: Device attached [ 105.804724][ T7255] loop4: detected capacity change from 0 to 128 [ 105.839939][ T7255] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 105.948495][ T7246] vhci_hcd: connection closed [ 105.956144][ T7238] vhci_hcd: connection closed [ 105.973857][ T4457] vhci_hcd: stop threads [ 105.975443][ T4457] vhci_hcd: release socket [ 105.975804][ T113] usb 4-1: new high-speed USB device number 2 using vhci_hcd [ 105.977695][ T4457] vhci_hcd: disconnect device [ 105.978811][ T7239] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 105.980205][ T4457] vhci_hcd: stop threads [ 105.981093][ T4457] vhci_hcd: release socket [ 105.982389][ T4457] vhci_hcd: disconnect device [ 106.437309][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 106.446326][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 106.448379][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 106.462419][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 106.473427][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 106.617469][ T7278] loop3: detected capacity change from 0 to 2048 [ 106.674202][ T4911] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 106.955273][ T7282] loop5: detected capacity change from 0 to 8192 [ 107.101810][ T7278] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.151308][ T7278] EXT4-fs error (device loop3): ext4_lookup:1852: inode #2: comm syz.3.862: bad inode number: 12 [ 107.161264][ T7278] EXT4-fs (loop3): Remounting filesystem read-only [ 107.204272][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 107.261491][ T6598] usb usb13-port1: attempt power cycle [ 107.526060][ T24] vhci_hcd: vhci_device speed not set [ 107.588285][ T7311] ipt_REJECT: TCP_RESET invalid for non-tcp [ 107.618525][ T7310] device syzkaller0 entered promiscuous mode [ 107.633100][ T7313] netlink: 'syz.5.875': attribute type 15 has an invalid length. [ 107.634598][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 107.644055][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.647650][ T7313] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 107.649384][ T7313] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 107.650973][ T7313] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 107.652832][ T7313] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 107.656994][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.899769][ T6598] usb usb13-port1: unable to enumerate USB device [ 108.102341][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 108.177777][ T7322] usb usb7: usbfs: process 7322 (syz.0.877) did not claim interface 0 before use [ 108.481899][ T7338] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 108.483285][ T7338] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.490020][ T7338] vhci_hcd vhci_hcd.0: Device attached [ 108.494645][ T7338] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 108.495907][ T7338] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 108.498150][ T7338] vhci_hcd vhci_hcd.0: Device attached [ 108.755851][ T4341] usb 2-1: new high-speed USB device number 2 using vhci_hcd [ 108.879331][ T4409] usb usb11-port1: attempt power cycle [ 109.311273][ T7341] vhci_hcd: connection closed [ 109.311941][ T7339] vhci_hcd: connection reset by peer [ 109.314271][ T4589] vhci_hcd: stop threads [ 109.315158][ T4589] vhci_hcd: release socket [ 109.319535][ T4589] vhci_hcd: disconnect device [ 109.321132][ T4589] vhci_hcd: stop threads [ 109.322008][ T4589] vhci_hcd: release socket [ 109.322984][ T4589] vhci_hcd: disconnect device [ 109.556153][ T4409] usb usb11-port1: unable to enumerate USB device [ 111.129848][ T113] vhci_hcd: vhci_device speed not set [ 112.477842][ T14] usb usb5-port1: attempt power cycle [ 113.126768][ T14] usb usb5-port1: unable to enumerate USB device [ 113.916728][ T4341] vhci_hcd: vhci_device speed not set [ 115.256983][ T3903] usb usb3-port1: attempt power cycle [ 115.917509][ T3903] usb usb3-port1: unable to enumerate USB device [ 118.498178][ T7313] netlink: 'syz.5.875': attribute type 15 has an invalid length. [ 118.499739][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 118.504181][ T7318] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 118.539570][ T7358] loop5: detected capacity change from 0 to 512 [ 118.588098][ T7358] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 118.626311][ T6474] EXT4-fs (loop5): unmounting filesystem. [ 118.986770][ T7384] FAULT_INJECTION: forcing a failure. [ 118.986770][ T7384] name fail_futex, interval 1, probability 0, space 0, times 1 [ 118.989338][ T7384] CPU: 0 PID: 7384 Comm: syz.5.893 Not tainted syzkaller #0 [ 118.990817][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 118.992934][ T7384] Call trace: [ 118.993666][ T7384] dump_backtrace+0x1c4/0x1f0 [ 118.994734][ T7384] show_stack+0x2c/0x3c [ 118.995659][ T7384] __dump_stack+0x30/0x40 [ 118.996646][ T7384] dump_stack_lvl+0xf4/0x15c [ 118.997683][ T7384] dump_stack+0x1c/0x5c [ 118.998639][ T7384] should_fail_ex+0x3cc/0x524 [ 118.999726][ T7384] should_fail+0x14/0x24 [ 119.000673][ T7384] get_futex_key+0x904/0xec0 [ 119.001636][ T7384] futex_wake+0x10c/0x458 [ 119.002559][ T7384] do_futex+0x2c4/0x340 [ 119.003472][ T7384] __arm64_sys_futex+0x390/0x414 [ 119.004495][ T7384] invoke_syscall+0x98/0x290 [ 119.005475][ T7384] el0_svc_common+0x13c/0x258 [ 119.006462][ T7384] do_el0_svc+0x5c/0x134 [ 119.007352][ T7384] el0_svc+0x58/0x12c [ 119.008206][ T7384] el0t_64_sync_handler+0x84/0xf0 [ 119.009255][ T7384] el0t_64_sync+0x18c/0x190 [ 119.019730][ T7385] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 119.021247][ T7385] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.039735][ T7385] vhci_hcd vhci_hcd.0: Device attached [ 119.049742][ T7385] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 119.051138][ T7385] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 119.059744][ T7385] vhci_hcd vhci_hcd.0: Device attached [ 119.362609][ T27] audit: type=1326 audit(119.330:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.5.899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85984be8 code=0x7ffc0000 [ 119.367783][ T4413] usb 4-1: new high-speed USB device number 3 using vhci_hcd [ 119.414624][ T27] audit: type=1326 audit(119.330:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.5.899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85984be8 code=0x7ffc0000 [ 119.606524][ T27] audit: type=1326 audit(119.350:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.5.899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffff85984be8 code=0x7ffc0000 [ 119.624303][ T27] audit: type=1326 audit(119.350:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.5.899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85984be8 code=0x7ffc0000 [ 119.640168][ T27] audit: type=1326 audit(119.350:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.5.899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85984be8 code=0x7ffc0000 [ 119.651552][ T27] audit: type=1326 audit(119.350:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.5.899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff85984be8 code=0x7ffc0000 [ 119.660027][ T27] audit: type=1326 audit(119.350:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.5.899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85984be8 code=0x7ffc0000 [ 119.664339][ T7422] Unknown options in mask 300 [ 119.665536][ T27] audit: type=1326 audit(119.350:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.5.899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85984be8 code=0x7ffc0000 [ 119.668368][ T7423] loop0: detected capacity change from 0 to 512 [ 119.672369][ T27] audit: type=1326 audit(119.350:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.5.899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff85984be8 code=0x7ffc0000 [ 119.688347][ T27] audit: type=1326 audit(119.350:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.5.899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85984be8 code=0x7ffc0000 [ 119.699095][ T7423] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.720532][ T7423] EXT4-fs (loop0): 1 truncate cleaned up [ 119.725073][ T7423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 119.753722][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 119.760044][ T7431] usb usb8: usbfs: process 7431 (syz.4.904) did not claim interface 0 before use [ 119.802678][ T7434] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 119.818253][ T7393] vhci_hcd: connection closed [ 119.818319][ T7390] vhci_hcd: connection reset by peer [ 119.818413][ T4890] vhci_hcd: stop threads [ 119.823390][ T4890] vhci_hcd: release socket [ 119.825462][ T4890] vhci_hcd: disconnect device [ 119.828087][ T4890] vhci_hcd: stop threads [ 119.829009][ T4890] vhci_hcd: release socket [ 119.831164][ T4890] vhci_hcd: disconnect device [ 119.834368][ T7437] device pim6reg1 entered promiscuous mode [ 119.882330][ T7446] loop0: detected capacity change from 0 to 512 [ 119.914596][ T7446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.933161][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 120.100912][ T7474] tipc: Failed to remove unknown binding: 66,0,2/0:3161351489/3161351490 [ 120.110437][ T7474] tipc: Failed to remove unknown binding: 66,0,2/0:3161351489/3161351490 [ 120.111506][ T7476] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 120.116598][ T7477] block device autoloading is deprecated and will be removed. [ 120.174098][ T7486] loop3: detected capacity change from 0 to 512 [ 120.189589][ T7484] loop5: detected capacity change from 0 to 512 [ 120.191541][ T7484] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.202318][ T7484] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.922: inode has both inline data and extents flags [ 120.205182][ T7484] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.922: couldn't read orphan inode 15 (err -117) [ 120.208495][ T7484] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 120.272984][ T7486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.503084][ T7507] EXT4-fs error (device loop5): ext4_add_entry:2488: inode #2: comm syz.5.922: Directory hole found for htree leaf block 0 [ 120.697502][ T7511] ip_tables: iptables: counters copy to user failed while replacing table [ 121.560892][ T7567] netlink: 3560 bytes leftover after parsing attributes in process `syz.4.943'. [ 121.620636][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 121.834068][ T7605] ip_tables: iptables: counters copy to user failed while replacing table [ 121.893437][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 121.900021][ T7612] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.995641][ T7623] FAULT_INJECTION: forcing a failure. [ 121.995641][ T7623] name failslab, interval 1, probability 0, space 0, times 0 [ 122.004331][ T7623] CPU: 0 PID: 7623 Comm: syz.4.959 Not tainted syzkaller #0 [ 122.005929][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 122.008080][ T7623] Call trace: [ 122.008796][ T7623] dump_backtrace+0x1c4/0x1f0 [ 122.009802][ T7623] show_stack+0x2c/0x3c [ 122.010644][ T7623] __dump_stack+0x30/0x40 [ 122.011598][ T7623] dump_stack_lvl+0xf4/0x15c [ 122.012552][ T7623] dump_stack+0x1c/0x5c [ 122.013411][ T7623] should_fail_ex+0x3cc/0x524 [ 122.014372][ T7623] __should_failslab+0xc0/0x11c [ 122.015381][ T7623] should_failslab+0x10/0x28 [ 122.016333][ T7623] __kmem_cache_alloc_node+0x7c/0x318 [ 122.017452][ T7623] kmalloc_trace+0x48/0x94 [ 122.018364][ T7623] batadv_hash_new+0x68/0x28c [ 122.019345][ T7623] batadv_nc_mesh_init+0x104/0x35c [ 122.020407][ T7623] batadv_mesh_init+0x3e4/0x678 [ 122.021418][ T7623] batadv_softif_init_late+0x7c4/0xc50 [ 122.022535][ T7623] register_netdevice+0x4a8/0x1650 [ 122.023697][ T7623] batadv_softif_newlink+0x90/0xa0 [ 122.024890][ T7623] rtnl_newlink+0x10b4/0x1af0 [ 122.025944][ T7623] rtnetlink_rcv_msg+0x694/0xcc4 [ 122.027020][ T7623] netlink_rcv_skb+0x220/0x3ec [ 122.028005][ T7623] rtnetlink_rcv+0x28/0x38 [ 122.028931][ T7623] netlink_unicast+0x5fc/0x80c [ 122.029865][ T7623] netlink_sendmsg+0x6f0/0x9d8 [ 122.030876][ T7623] ____sys_sendmsg+0x588/0x90c [ 122.031875][ T7623] __sys_sendmsg+0x288/0x374 [ 122.032843][ T7623] __arm64_sys_sendmsg+0x80/0x94 [ 122.033960][ T7623] invoke_syscall+0x98/0x290 [ 122.035017][ T7623] el0_svc_common+0x13c/0x258 [ 122.036062][ T7623] do_el0_svc+0x5c/0x134 [ 122.036937][ T7623] el0_svc+0x58/0x12c [ 122.037730][ T7623] el0t_64_sync_handler+0x84/0xf0 [ 122.038786][ T7623] el0t_64_sync+0x18c/0x190 [ 122.970568][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 123.025142][ T7677] FAULT_INJECTION: forcing a failure. [ 123.025142][ T7677] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.031326][ T7677] CPU: 0 PID: 7677 Comm: syz.3.969 Not tainted syzkaller #0 [ 123.032899][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 123.034942][ T7677] Call trace: [ 123.035618][ T7677] dump_backtrace+0x1c4/0x1f0 [ 123.036504][ T7677] show_stack+0x2c/0x3c [ 123.037402][ T7677] __dump_stack+0x30/0x40 [ 123.038274][ T7677] dump_stack_lvl+0xf4/0x15c [ 123.039229][ T7677] dump_stack+0x1c/0x5c [ 123.040152][ T7677] should_fail_ex+0x3cc/0x524 [ 123.041205][ T7677] should_fail+0x14/0x24 [ 123.042095][ T7677] should_fail_usercopy+0x20/0x30 [ 123.043163][ T7677] copy_from_bpfptr+0x84/0x1d8 [ 123.044224][ T7677] __sys_bpf+0x1f8/0x660 [ 123.045182][ T7677] __arm64_sys_bpf+0x80/0x98 [ 123.046212][ T7677] invoke_syscall+0x98/0x290 [ 123.047220][ T7677] el0_svc_common+0x13c/0x258 [ 123.048246][ T7677] do_el0_svc+0x5c/0x134 [ 123.049240][ T7677] el0_svc+0x58/0x12c [ 123.050132][ T7677] el0t_64_sync_handler+0x84/0xf0 [ 123.051274][ T7677] el0t_64_sync+0x18c/0x190 [ 123.055048][ T7677] netlink: 'syz.3.969': attribute type 30 has an invalid length. [ 123.116445][ T7683] FAULT_INJECTION: forcing a failure. [ 123.116445][ T7683] name failslab, interval 1, probability 0, space 0, times 0 [ 123.119442][ T7683] CPU: 1 PID: 7683 Comm: syz.3.972 Not tainted syzkaller #0 [ 123.121024][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 123.123103][ T7683] Call trace: [ 123.123783][ T7683] dump_backtrace+0x1c4/0x1f0 [ 123.124695][ T7683] show_stack+0x2c/0x3c [ 123.125612][ T7683] __dump_stack+0x30/0x40 [ 123.126606][ T7683] dump_stack_lvl+0xf4/0x15c [ 123.127570][ T7683] dump_stack+0x1c/0x5c [ 123.128414][ T7683] should_fail_ex+0x3cc/0x524 [ 123.129484][ T7683] __should_failslab+0xc0/0x11c [ 123.130567][ T7683] should_failslab+0x10/0x28 [ 123.131503][ T7683] __kmem_cache_alloc_node+0x7c/0x318 [ 123.132598][ T7683] kmalloc_trace+0x48/0x94 [ 123.133516][ T7683] batadv_hash_new+0x68/0x28c [ 123.134493][ T7683] batadv_bla_init+0x3ec/0x644 [ 123.135495][ T7683] batadv_mesh_init+0x3ac/0x678 [ 123.136516][ T7683] batadv_softif_init_late+0x7c4/0xc50 [ 123.137663][ T7683] register_netdevice+0x4a8/0x1650 [ 123.138784][ T7683] batadv_softif_newlink+0x90/0xa0 [ 123.139892][ T7683] rtnl_newlink+0x10b4/0x1af0 [ 123.139969][ T7658] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.140907][ T7683] rtnetlink_rcv_msg+0x694/0xcc4 [ 123.142418][ T7658] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.143192][ T7683] netlink_rcv_skb+0x220/0x3ec [ 123.145245][ T7683] rtnetlink_rcv+0x28/0x38 [ 123.146100][ T7683] netlink_unicast+0x5fc/0x80c [ 123.147117][ T7683] netlink_sendmsg+0x6f0/0x9d8 [ 123.148188][ T7683] ____sys_sendmsg+0x588/0x90c [ 123.149266][ T7683] __sys_sendmsg+0x288/0x374 [ 123.150278][ T7683] __arm64_sys_sendmsg+0x80/0x94 [ 123.151378][ T7683] invoke_syscall+0x98/0x290 [ 123.152403][ T7683] el0_svc_common+0x13c/0x258 [ 123.153437][ T7683] do_el0_svc+0x5c/0x134 [ 123.154368][ T7683] el0_svc+0x58/0x12c [ 123.155249][ T7683] el0t_64_sync_handler+0x84/0xf0 [ 123.156381][ T7683] el0t_64_sync+0x18c/0x190 [ 123.160950][ T7658] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.186320][ T7658] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.187875][ T7658] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.189700][ T7658] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.193612][ T7658] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.194227][ T7685] FAULT_INJECTION: forcing a failure. [ 123.194227][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 123.194980][ T7658] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.201780][ T7685] CPU: 1 PID: 7685 Comm: syz.0.973 Not tainted syzkaller #0 [ 123.203211][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 123.205164][ T7685] Call trace: [ 123.205857][ T7685] dump_backtrace+0x1c4/0x1f0 [ 123.206817][ T7685] show_stack+0x2c/0x3c [ 123.207680][ T7685] __dump_stack+0x30/0x40 [ 123.208590][ T7685] dump_stack_lvl+0xf4/0x15c [ 123.209540][ T7685] dump_stack+0x1c/0x5c [ 123.210412][ T7685] should_fail_ex+0x3cc/0x524 [ 123.211406][ T7685] __should_failslab+0xc0/0x11c [ 123.212446][ T7685] should_failslab+0x10/0x28 [ 123.213340][ T7685] __kmem_cache_alloc_node+0x7c/0x318 [ 123.214408][ T7685] kmalloc_trace+0x48/0x94 [ 123.215313][ T7685] ref_tracker_alloc+0x138/0x3f0 [ 123.216350][ T7685] dst_init+0xc0/0x3dc [ 123.217211][ T7685] dst_alloc+0x124/0x16c [ 123.218094][ T7685] ip_route_output_key_hash_rcu+0xfbc/0x1e18 [ 123.219329][ T7685] ip_route_output_key_hash+0x1b0/0x2fc [ 123.220473][ T7685] ip_route_output_flow+0x3c/0x158 [ 123.221547][ T7685] __ip4_datagram_connect+0x6f8/0xfc8 [ 123.222643][ T7685] ip4_datagram_connect+0x40/0x64 [ 123.223692][ T7685] inet_dgram_connect+0x17c/0x354 [ 123.224748][ T7685] kernel_connect+0x124/0x190 [ 123.225727][ T7685] start_sync_thread+0x1528/0x2150 [ 123.226784][ T7685] do_ip_vs_set_ctl+0x4a8/0xab0 [ 123.227816][ T7685] nf_setsockopt+0x260/0x280 [ 123.228794][ T7685] ip_setsockopt+0x124/0x134 [ 123.229735][ T7685] tcp_setsockopt+0xcc/0xe8 [ 123.230641][ T7685] sock_common_setsockopt+0xb0/0xcc [ 123.231757][ T7685] __sys_setsockopt+0x2fc/0x50c [ 123.232791][ T7685] __arm64_sys_setsockopt+0xc0/0xdc [ 123.233887][ T7685] invoke_syscall+0x98/0x290 [ 123.234859][ T7685] el0_svc_common+0x13c/0x258 [ 123.235853][ T7685] do_el0_svc+0x5c/0x134 [ 123.236758][ T7685] el0_svc+0x58/0x12c [ 123.237540][ T7685] el0t_64_sync_handler+0x84/0xf0 [ 123.238597][ T7685] el0t_64_sync+0x18c/0x190 [ 123.241993][ T7685] memory allocation failure, unreliable refcount tracker. [ 123.245869][ T7658] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.248001][ T7686] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 123.250401][ T7658] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.252117][ T7658] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.255435][ T7658] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.257951][ T7658] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.259326][ T7658] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.262252][ T7658] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.344753][ T7702] loop1: detected capacity change from 0 to 512 [ 123.406911][ T7702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 123.541169][ T7718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.980'. [ 124.352221][ T7730] FAULT_INJECTION: forcing a failure. [ 124.352221][ T7730] name failslab, interval 1, probability 0, space 0, times 0 [ 124.361354][ T7730] CPU: 0 PID: 7730 Comm: syz.3.985 Not tainted syzkaller #0 [ 124.362911][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 124.365278][ T7730] Call trace: [ 124.366053][ T7730] dump_backtrace+0x1c4/0x1f0 [ 124.367089][ T7730] show_stack+0x2c/0x3c [ 124.368036][ T7730] __dump_stack+0x30/0x40 [ 124.368996][ T7730] dump_stack_lvl+0xf4/0x15c [ 124.370076][ T7730] dump_stack+0x1c/0x5c [ 124.370940][ T7730] should_fail_ex+0x3cc/0x524 [ 124.371966][ T7730] __should_failslab+0xc0/0x11c [ 124.373021][ T7730] should_failslab+0x10/0x28 [ 124.374062][ T7730] __kmem_cache_alloc_node+0x7c/0x318 [ 124.375269][ T7730] __kmalloc+0xc4/0x180 [ 124.376185][ T7730] batadv_hash_new+0x7c/0x28c [ 124.377204][ T7730] batadv_bla_init+0x3ec/0x644 [ 124.378221][ T7730] batadv_mesh_init+0x3ac/0x678 [ 124.379258][ T7730] batadv_softif_init_late+0x7c4/0xc50 [ 124.380418][ T7730] register_netdevice+0x4a8/0x1650 [ 124.381459][ T7730] batadv_softif_newlink+0x90/0xa0 [ 124.382555][ T7730] rtnl_newlink+0x10b4/0x1af0 [ 124.383493][ T7730] rtnetlink_rcv_msg+0x694/0xcc4 [ 124.384471][ T7730] netlink_rcv_skb+0x220/0x3ec [ 124.385495][ T7730] rtnetlink_rcv+0x28/0x38 [ 124.386463][ T7730] netlink_unicast+0x5fc/0x80c [ 124.387484][ T7730] netlink_sendmsg+0x6f0/0x9d8 [ 124.388541][ T7730] ____sys_sendmsg+0x588/0x90c [ 124.389579][ T7730] __sys_sendmsg+0x288/0x374 [ 124.390571][ T7730] __arm64_sys_sendmsg+0x80/0x94 [ 124.391670][ T7730] invoke_syscall+0x98/0x290 [ 124.392616][ T7730] el0_svc_common+0x13c/0x258 [ 124.393619][ T7730] do_el0_svc+0x5c/0x134 [ 124.394561][ T7730] el0_svc+0x58/0x12c [ 124.395351][ T7730] el0t_64_sync_handler+0x84/0xf0 [ 124.396424][ T7730] el0t_64_sync+0x18c/0x190 [ 124.397824][ T4348] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.461907][ T7736] FAULT_INJECTION: forcing a failure. [ 124.461907][ T7736] name failslab, interval 1, probability 0, space 0, times 0 [ 124.464602][ T7736] CPU: 1 PID: 7736 Comm: syz.3.988 Not tainted syzkaller #0 [ 124.466080][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 124.468226][ T7736] Call trace: [ 124.468957][ T7736] dump_backtrace+0x1c4/0x1f0 [ 124.469980][ T7736] show_stack+0x2c/0x3c [ 124.470851][ T7736] __dump_stack+0x30/0x40 [ 124.471803][ T7736] dump_stack_lvl+0xf4/0x15c [ 124.472776][ T7736] dump_stack+0x1c/0x5c [ 124.473619][ T7736] should_fail_ex+0x3cc/0x524 [ 124.474558][ T7736] __should_failslab+0xc0/0x11c [ 124.475520][ T7736] should_failslab+0x10/0x28 [ 124.476462][ T7736] __kmem_cache_alloc_node+0x7c/0x318 [ 124.477525][ T7736] kmalloc_trace+0x48/0x94 [ 124.478393][ T7736] __kthread_create_on_node+0x130/0x4d4 [ 124.479456][ T7736] kthread_create_on_node+0xf8/0x150 [ 124.480530][ T7736] start_sync_thread+0x1590/0x2150 [ 124.481609][ T7736] do_ip_vs_set_ctl+0x4a8/0xab0 [ 124.482621][ T7736] nf_setsockopt+0x260/0x280 [ 124.483548][ T7736] ip_setsockopt+0x124/0x134 [ 124.484449][ T7736] tcp_setsockopt+0xcc/0xe8 [ 124.485380][ T7736] sock_common_setsockopt+0xb0/0xcc [ 124.486483][ T7736] __sys_setsockopt+0x2fc/0x50c [ 124.487497][ T7736] __arm64_sys_setsockopt+0xc0/0xdc [ 124.488562][ T7736] invoke_syscall+0x98/0x290 [ 124.489497][ T7736] el0_svc_common+0x13c/0x258 [ 124.490456][ T7736] do_el0_svc+0x5c/0x134 [ 124.491318][ T7736] el0_svc+0x58/0x12c [ 124.492119][ T7736] el0t_64_sync_handler+0x84/0xf0 [ 124.493173][ T7736] el0t_64_sync+0x18c/0x190 [ 124.500231][ T4413] vhci_hcd: vhci_device speed not set [ 124.601131][ T7746] loop3: detected capacity change from 0 to 16 [ 124.626076][ T7746] erofs: (device loop3): mounted with root inode @ nid 36. [ 124.732980][ T7746] syz.3.993: attempt to access beyond end of device [ 124.732980][ T7746] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 124.743811][ T7746] syz.3.993: attempt to access beyond end of device [ 124.743811][ T7746] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 124.754484][ T7746] syz.3.993: attempt to access beyond end of device [ 124.754484][ T7746] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 124.760386][ T7746] syz.3.993: attempt to access beyond end of device [ 124.760386][ T7746] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 124.766606][ T7746] syz.3.993: attempt to access beyond end of device [ 124.766606][ T7746] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 124.769682][ T7746] syz.3.993: attempt to access beyond end of device [ 124.769682][ T7746] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 124.772925][ T7746] syz.3.993: attempt to access beyond end of device [ 124.772925][ T7746] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 124.795609][ T7746] syz.3.993: attempt to access beyond end of device [ 124.795609][ T7746] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 124.818958][ T7757] loop0: detected capacity change from 0 to 16 [ 124.839592][ T7757] erofs: (device loop0): mounted with root inode @ nid 36. [ 124.882670][ T7762] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 124.959473][ T7772] syz.0.997: attempt to access beyond end of device [ 124.959473][ T7772] loop0: rw=0, sector=36, nr_sectors = 1 limit=16 [ 124.962329][ T7772] syz.0.997: attempt to access beyond end of device [ 124.962329][ T7772] loop0: rw=0, sector=36, nr_sectors = 1 limit=16 [ 125.205811][ T4339] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.207195][ T4339] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.327112][ T4348] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.328551][ T4339] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.399060][ T7776] loop4: detected capacity change from 0 to 40427 [ 125.403073][ T7776] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 125.404762][ T7776] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 125.574910][ T7797] rxe_eth0 speed is unknown, defaulting to 1000 [ 125.654140][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 125.710184][ T7804] loop4: detected capacity change from 0 to 512 [ 125.721400][ T7807] binder: 7806:7807 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 125.724381][ T7807] binder: 7807 RLIMIT_NICE not set [ 126.007499][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.041940][ T4341] usb usb5-port1: attempt power cycle [ 126.515933][ T4338] Bluetooth: hci0: command 0x0406 tx timeout [ 126.676414][ T4341] usb usb5-port1: unable to enumerate USB device [ 126.708282][ T6474] EXT4-fs (loop5): unmounting filesystem. [ 126.968182][ T7838] loop5: detected capacity change from 0 to 512 [ 127.011096][ T7841] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 127.014122][ T7849] ip_tables: iptables: counters copy to user failed while replacing table [ 127.033277][ T7838] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 127.043140][ T7841] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 127.053003][ T7841] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 127.057306][ T7841] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 127.061461][ T7841] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 127.064457][ T7841] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 127.067377][ T7841] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 127.108199][ T7854] loop4: detected capacity change from 0 to 256 [ 127.748594][ T7862] Cannot find add_set index 6 as target [ 127.910063][ T4348] Bluetooth: hci1: command 0x0406 tx timeout [ 127.912374][ T4348] Bluetooth: hci3: command 0x0406 tx timeout [ 127.914438][ T4348] Bluetooth: hci2: command 0x0406 tx timeout [ 127.916310][ T4348] Bluetooth: hci4: command 0x0406 tx timeout [ 128.545687][ C0] sched: RT throttling activated [ 128.545736][ T4341] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.555757][ T4338] Bluetooth: hci0: command 0x0406 tx timeout [ 128.593313][ T7865] loop1: detected capacity change from 0 to 128 [ 129.506304][ T7865] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.614543][ T4341] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 129.616892][ T4341] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 129.619913][ T7880] loop4: detected capacity change from 0 to 128 [ 129.623979][ T4341] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 129.635958][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.637640][ T4341] usb 1-1: Product: syz [ 129.638528][ T4341] usb 1-1: Manufacturer: syz [ 129.639574][ T4341] usb 1-1: SerialNumber: syz [ 129.670147][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 129.671874][ T7880] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 130.015924][ T4348] Bluetooth: hci4: command 0x0406 tx timeout [ 130.017473][ T4348] Bluetooth: hci2: command 0x0406 tx timeout [ 130.018974][ T4348] Bluetooth: hci3: command 0x0406 tx timeout [ 130.020473][ T4348] Bluetooth: hci1: command 0x0406 tx timeout [ 130.103336][ T4341] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 130.107533][ T4341] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to g@b4.vu [ 130.122572][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 130.124540][ T4341] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 130.182765][ T4341] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 130.213156][ T4341] usb 1-1: USB disconnect, device number 2 [ 130.294113][ T7355] udevd[7355]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.333540][ T7903] ip_tables: iptables: counters copy to user failed while replacing table [ 130.675135][ T4632] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 130.690456][ T7906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1050'. [ 130.966698][ T7920] ipt_REJECT: TCP_RESET invalid for non-tcp [ 130.999674][ T7922] ip_tables: iptables: counters copy to user failed while replacing table [ 131.022736][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.024407][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.110172][ T7927] loop4: detected capacity change from 0 to 1024 [ 131.178547][ T7936] loop3: detected capacity change from 0 to 128 [ 131.189308][ T7936] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 131.192668][ T7927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.662068][ T7941] 9pnet_fd: Insufficient options for proto=fd [ 131.963592][ T7937] netlink: 'syz.0.1059': attribute type 30 has an invalid length. [ 132.107772][ T4616] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 132.250058][ T7946] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.360422][ T7949] loop0: detected capacity change from 0 to 512 [ 132.421384][ T7949] EXT4-fs: Ignoring removed nobh option [ 132.523740][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 132.570459][ T7949] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.573567][ T7949] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #15: comm syz.0.1062: corrupted inode contents [ 132.606840][ T7949] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 132.614786][ T7949] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #15: comm syz.0.1062: corrupted inode contents [ 132.619959][ T7949] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.1062: mark_inode_dirty error [ 132.627740][ T7949] EXT4-fs (loop0): 1 orphan inode deleted [ 132.634794][ T6474] EXT4-fs (loop5): unmounting filesystem. [ 132.635868][ T7949] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.691523][ T7946] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.713734][ T7961] ip_tables: iptables: counters copy to user failed while replacing table [ 132.733376][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 132.787787][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1070'. [ 132.809755][ T7967] loop4: detected capacity change from 0 to 128 [ 132.834872][ T7967] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 133.240130][ T7977] loop5: detected capacity change from 0 to 1024 [ 133.484496][ T7977] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 133.685024][ T4890] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 133.990849][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 134.096197][ T7987] loop0: detected capacity change from 0 to 512 [ 134.127766][ T7989] FAULT_INJECTION: forcing a failure. [ 134.127766][ T7989] name fail_futex, interval 1, probability 0, space 0, times 0 [ 134.145604][ T7989] CPU: 1 PID: 7989 Comm: syz.1.1079 Not tainted syzkaller #0 [ 134.147279][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 134.149439][ T7989] Call trace: [ 134.150066][ T7989] dump_backtrace+0x1c4/0x1f0 [ 134.150978][ T7989] show_stack+0x2c/0x3c [ 134.151778][ T7989] __dump_stack+0x30/0x40 [ 134.152697][ T7989] dump_stack_lvl+0xf4/0x15c [ 134.153697][ T7989] dump_stack+0x1c/0x5c [ 134.154545][ T7989] should_fail_ex+0x3cc/0x524 [ 134.155531][ T7989] should_fail+0x14/0x24 [ 134.156449][ T7989] get_futex_key+0x904/0xec0 [ 134.157438][ T7989] futex_wait_setup+0xbc/0x320 [ 134.158465][ T7989] futex_wait+0x178/0x488 [ 134.159414][ T7989] do_futex+0x2e8/0x340 [ 134.160315][ T7989] __arm64_sys_futex+0x390/0x414 [ 134.161383][ T7989] invoke_syscall+0x98/0x290 [ 134.162401][ T7989] el0_svc_common+0x13c/0x258 [ 134.163397][ T7989] do_el0_svc+0x5c/0x134 [ 134.164307][ T7989] el0_svc+0x58/0x12c [ 134.165159][ T7989] el0t_64_sync_handler+0x84/0xf0 [ 134.166227][ T7989] el0t_64_sync+0x18c/0x190 [ 134.175418][ T7987] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.312576][ T6474] EXT4-fs (loop5): unmounting filesystem. [ 134.387087][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.388888][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.403918][ T8010] loop5: detected capacity change from 0 to 128 [ 134.736072][ T8010] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 135.393968][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 135.433619][ T9] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 135.468076][ T8021] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 135.469487][ T8021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 135.471534][ T8021] vhci_hcd vhci_hcd.0: Device attached [ 135.478746][ T8021] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 135.480065][ T8021] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 135.482472][ T8021] vhci_hcd vhci_hcd.0: Device attached [ 135.484412][ T8031] vhci_hcd: connection closed [ 135.484832][ T8024] vhci_hcd: connection closed [ 135.487051][ T4745] vhci_hcd: stop threads [ 135.489110][ T4745] vhci_hcd: release socket [ 135.490161][ T4745] vhci_hcd: disconnect device [ 135.503891][ T8028] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.509495][ T4745] vhci_hcd: stop threads [ 135.510405][ T4745] vhci_hcd: release socket [ 135.511351][ T4745] vhci_hcd: disconnect device [ 135.652276][ T8043] loop1: detected capacity change from 0 to 512 [ 135.656307][ T8043] ext3: Unknown parameter '.' [ 136.903401][ T8041] loop5: detected capacity change from 0 to 256 [ 136.905254][ T8041] exfat: Deprecated parameter 'utf8' [ 136.906509][ T8041] exfat: Deprecated parameter 'namecase' [ 136.907632][ T8041] exfat: Deprecated parameter 'namecase' [ 136.908741][ T8041] exfat: Deprecated parameter 'namecase' [ 137.039379][ T8041] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 137.246943][ T8050] loop0: detected capacity change from 0 to 512 [ 137.258563][ T8050] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.380981][ T8050] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1091: invalid indirect mapped block 32768 (level 2) [ 137.384945][ T8050] EXT4-fs (loop0): 1 orphan inode deleted [ 137.386188][ T8050] EXT4-fs (loop0): 1 truncate cleaned up [ 137.387696][ T8050] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 138.057513][ T8069] loop3: detected capacity change from 0 to 128 [ 138.060939][ T8066] loop1: detected capacity change from 0 to 512 [ 138.063430][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1099'. [ 138.065464][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1099'. [ 138.081600][ T8069] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 138.190632][ T8066] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.660204][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 138.725175][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 139.137203][ T8091] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 139.138324][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 139.138622][ T8091] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.141773][ T8091] vhci_hcd vhci_hcd.0: Device attached [ 139.161928][ T8091] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 139.163287][ T8091] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 139.165047][ T8091] vhci_hcd vhci_hcd.0: Device attached [ 139.169550][ T8095] vhci_hcd: connection closed [ 139.169735][ T8093] vhci_hcd: connection closed [ 139.170947][ T1616] vhci_hcd: stop threads [ 139.172964][ T1616] vhci_hcd: release socket [ 139.173949][ T1616] vhci_hcd: disconnect device [ 139.174975][ T1616] vhci_hcd: stop threads [ 139.176373][ T1616] vhci_hcd: release socket [ 139.181485][ T1616] vhci_hcd: disconnect device [ 139.240400][ T8067] loop4: detected capacity change from 0 to 131072 [ 139.244296][ T8067] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 139.246361][ T8067] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.259351][ T8067] F2FS-fs (loop4): invalid crc value [ 139.264884][ T8067] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.286930][ T8067] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.288524][ T8067] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 139.377177][ T8107] loop0: detected capacity change from 0 to 512 [ 139.378822][ T8107] EXT4-fs: Ignoring removed bh option [ 139.384465][ T8107] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.398896][ T8107] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 140.476412][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 140.481318][ T8126] loop4: detected capacity change from 0 to 128 [ 140.511181][ T8126] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 140.642153][ T8132] loop0: detected capacity change from 0 to 1024 [ 140.893475][ T8132] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 141.672209][ T8159] xt_bpf: check failed: parse error [ 141.968926][ T8165] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 141.970317][ T8165] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.972539][ T8165] vhci_hcd vhci_hcd.0: Device attached [ 141.974813][ T8165] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 141.976259][ T8165] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.982073][ T8165] vhci_hcd vhci_hcd.0: Device attached [ 141.983965][ T8168] vhci_hcd: connection closed [ 141.985030][ T8166] vhci_hcd: connection closed [ 141.989726][ T5082] vhci_hcd: stop threads [ 141.991717][ T5082] vhci_hcd: release socket [ 141.993009][ T5082] vhci_hcd: disconnect device [ 141.994181][ T5082] vhci_hcd: stop threads [ 141.995033][ T5082] vhci_hcd: release socket [ 141.999663][ T5082] vhci_hcd: disconnect device [ 142.263161][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 142.392956][ T8186] ipt_REJECT: TCP_RESET invalid for non-tcp [ 142.414318][ T8177] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 142.455430][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.459230][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.467636][ T8191] loop4: detected capacity change from 0 to 512 [ 142.502299][ T8191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.544455][ T8191] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.554743][ T8198] loop3: detected capacity change from 0 to 128 [ 142.928055][ T8198] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 143.425601][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 143.663939][ T8217] loop4: detected capacity change from 0 to 1024 [ 144.073927][ T8217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.557306][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 144.566790][ T8221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1147'. [ 144.570016][ T8221] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.571625][ T8221] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.573274][ T8221] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.574881][ T8221] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.611331][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 144.613339][ T8221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1147'. [ 144.780766][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 144.894582][ T8227] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 144.895861][ T8227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 144.902932][ T8227] vhci_hcd vhci_hcd.0: Device attached [ 144.910501][ T8230] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 144.911754][ T8230] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 144.913562][ T8230] vhci_hcd vhci_hcd.0: Device attached [ 144.996805][ T8235] loop3: detected capacity change from 0 to 256 [ 145.166825][ T113] usb 10-1: new high-speed USB device number 3 using vhci_hcd [ 145.705945][ T8228] vhci_hcd: connection reset by peer [ 145.707169][ T8233] vhci_hcd: connection closed [ 145.712231][ T4890] vhci_hcd: stop threads [ 145.714010][ T4890] vhci_hcd: release socket [ 145.723649][ T4890] vhci_hcd: disconnect device [ 145.735847][ T4890] vhci_hcd: stop threads [ 145.736769][ T4890] vhci_hcd: release socket [ 145.737747][ T4890] vhci_hcd: disconnect device [ 145.878693][ T8245] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 145.940735][ T8249] loop1: detected capacity change from 0 to 128 [ 145.965398][ T8249] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 146.332935][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 146.393406][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.397829][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.810277][ T4890] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 146.811088][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1160'. [ 146.814275][ T8263] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1160'. [ 146.830242][ T8263] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 146.832026][ T8263] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 146.833801][ T8263] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 146.835473][ T8263] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 146.846476][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1160'. [ 146.848583][ T8263] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1160'. [ 147.427303][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1165'. [ 147.574220][ T8285] loop5: detected capacity change from 0 to 1024 [ 148.813702][ T8285] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 150.310786][ T6474] EXT4-fs (loop5): unmounting filesystem. [ 150.359241][ T8306] loop0: detected capacity change from 0 to 128 [ 150.375641][ T8306] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 150.386413][ T113] vhci_hcd: vhci_device speed not set [ 150.870472][ T8323] loop1: detected capacity change from 0 to 2048 [ 150.929949][ T8323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.296928][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 151.311501][ T4422] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 151.424089][ T8338] ipt_REJECT: TCP_RESET invalid for non-tcp [ 152.160058][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.172504][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.316541][ T8358] loop3: detected capacity change from 0 to 128 [ 152.333720][ T8358] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 152.756963][ T14] usb usb11-port1: attempt power cycle [ 152.889512][ T8374] loop1: detected capacity change from 0 to 256 [ 153.882582][ T56] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 153.943355][ T8385] loop5: detected capacity change from 0 to 256 [ 154.136420][ T8390] FAULT_INJECTION: forcing a failure. [ 154.136420][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 154.154778][ T8390] CPU: 1 PID: 8390 Comm: syz.4.1201 Not tainted syzkaller #0 [ 154.156229][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 154.158436][ T8390] Call trace: [ 154.159184][ T8390] dump_backtrace+0x1c4/0x1f0 [ 154.160293][ T8390] show_stack+0x2c/0x3c [ 154.161284][ T8390] __dump_stack+0x30/0x40 [ 154.162270][ T8390] dump_stack_lvl+0xf4/0x15c [ 154.163295][ T8390] dump_stack+0x1c/0x5c [ 154.164229][ T8390] should_fail_ex+0x3cc/0x524 [ 154.165211][ T8390] __should_failslab+0xc0/0x11c [ 154.166284][ T8390] should_failslab+0x10/0x28 [ 154.167310][ T8390] kmem_cache_alloc+0x88/0x310 [ 154.168392][ T8390] sk_prot_alloc+0x60/0x1e8 [ 154.169306][ T8390] sk_alloc+0x44/0x3a0 [ 154.170161][ T8390] inet_create+0x670/0xd84 [ 154.171131][ T8390] __sock_create+0x448/0x8a8 [ 154.172126][ T8390] sock_create_kern+0x4c/0x64 [ 154.173159][ T8390] start_sync_thread+0x934/0x2150 [ 154.174272][ T8390] do_ip_vs_set_ctl+0x4a8/0xab0 [ 154.175345][ T8390] nf_setsockopt+0x260/0x280 [ 154.176337][ T8390] ip_setsockopt+0x124/0x134 [ 154.177321][ T8390] tcp_setsockopt+0xcc/0xe8 [ 154.178312][ T8390] sock_common_setsockopt+0xb0/0xcc [ 154.179535][ T8390] __sys_setsockopt+0x2fc/0x50c [ 154.180687][ T8390] __arm64_sys_setsockopt+0xc0/0xdc [ 154.181881][ T8390] invoke_syscall+0x98/0x290 [ 154.182931][ T8390] el0_svc_common+0x13c/0x258 [ 154.184053][ T8390] do_el0_svc+0x5c/0x134 [ 154.185072][ T8390] el0_svc+0x58/0x12c [ 154.185968][ T8390] el0t_64_sync_handler+0x84/0xf0 [ 154.187055][ T8390] el0t_64_sync+0x18c/0x190 [ 154.555955][ T8390] IPVS: Error during creation of socket; terminating [ 154.699208][ T8402] ipt_REJECT: TCP_RESET invalid for non-tcp [ 154.726451][ T14] usb usb11-port1: unable to enumerate USB device [ 154.729698][ T8405] loop3: detected capacity change from 0 to 128 [ 154.754639][ T8405] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 156.316679][ T8381] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 156.405922][ T4413] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.457004][ T8423] loop4: detected capacity change from 0 to 256 [ 157.371509][ T8427] FAULT_INJECTION: forcing a failure. [ 157.371509][ T8427] name failslab, interval 1, probability 0, space 0, times 0 [ 157.373977][ T8427] CPU: 1 PID: 8427 Comm: syz.1.1214 Not tainted syzkaller #0 [ 157.375630][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 157.377731][ T8427] Call trace: [ 157.378415][ T8427] dump_backtrace+0x1c4/0x1f0 [ 157.379424][ T8427] show_stack+0x2c/0x3c [ 157.380313][ T8427] __dump_stack+0x30/0x40 [ 157.381284][ T8427] dump_stack_lvl+0xf4/0x15c [ 157.382364][ T8427] dump_stack+0x1c/0x5c [ 157.383347][ T8427] should_fail_ex+0x3cc/0x524 [ 157.384445][ T8427] __should_failslab+0xc0/0x11c [ 157.385552][ T8427] should_failslab+0x10/0x28 [ 157.386599][ T8427] kmem_cache_alloc+0x88/0x310 [ 157.387592][ T8427] sk_prot_alloc+0x60/0x1e8 [ 157.388521][ T8427] sk_alloc+0x44/0x3a0 [ 157.389434][ T8427] inet_create+0x670/0xd84 [ 157.390366][ T8427] __sock_create+0x448/0x8a8 [ 157.391278][ T8427] sock_create_kern+0x4c/0x64 [ 157.392191][ T8427] start_sync_thread+0x934/0x2150 [ 157.393194][ T8427] do_ip_vs_set_ctl+0x4a8/0xab0 [ 157.394145][ T8427] nf_setsockopt+0x260/0x280 [ 157.395066][ T8427] ip_setsockopt+0x124/0x134 [ 157.396004][ T8427] tcp_setsockopt+0xcc/0xe8 [ 157.396939][ T8427] sock_common_setsockopt+0xb0/0xcc [ 157.397952][ T8427] __sys_setsockopt+0x2fc/0x50c [ 157.398923][ T8427] __arm64_sys_setsockopt+0xc0/0xdc [ 157.399930][ T8427] invoke_syscall+0x98/0x290 [ 157.400864][ T8427] el0_svc_common+0x13c/0x258 [ 157.401824][ T8427] do_el0_svc+0x5c/0x134 [ 157.402686][ T8427] el0_svc+0x58/0x12c [ 157.403451][ T8427] el0t_64_sync_handler+0x84/0xf0 [ 157.404429][ T8427] el0t_64_sync+0x18c/0x190 [ 157.415801][ T4413] usb 1-1: device descriptor read/64, error -71 [ 157.513007][ T4340] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 157.513611][ T8427] IPVS: Error during creation of socket; terminating [ 157.517333][ T4340] FAT-fs (loop4): Filesystem has been set read-only [ 157.519092][ T4340] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 157.685950][ T4413] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.240757][ T8454] loop3: detected capacity change from 0 to 2048 [ 158.543104][ T8461] loop3: detected capacity change from 0 to 1024 [ 159.146549][ T8461] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.569469][ T4348] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.572010][ T4348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.574203][ T4348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.696174][ T4348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.697965][ T4348] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.699565][ T4348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.704061][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 159.901623][ T8467] rxe_eth0 speed is unknown, defaulting to 1000 [ 159.933442][ T8488] loop5: detected capacity change from 0 to 512 [ 159.977042][ T8488] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 160.014995][ T8467] chnl_net:caif_netlink_parms(): no params data found [ 160.019789][ T6474] EXT4-fs (loop5): unmounting filesystem. [ 160.139298][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.140830][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.142649][ T8467] device bridge_slave_0 entered promiscuous mode [ 160.145430][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.147321][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.167258][ T8467] device bridge_slave_1 entered promiscuous mode [ 160.208431][ T8505] device-mapper: table: 248:4: adding target device ram3 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=4193792 [ 160.218064][ T8467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.220180][ T8505] device-mapper: table: 248:4: ram3 too small for target: start=8191, len=1536, dev_size=8192 [ 160.225055][ T8467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.233127][ T8467] team0: Port device team_slave_0 added [ 160.233985][ T8505] device-mapper: core: Cannot calculate initial queue limits [ 160.235761][ T8467] team0: Port device team_slave_1 added [ 160.237757][ T8505] device-mapper: ioctl: unable to set up device queue for new table. [ 160.242035][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.243294][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.249097][ T8467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.252433][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.253897][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.259709][ T8467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.269472][ T8514] loop1: detected capacity change from 0 to 128 [ 161.189403][ T8467] device hsr_slave_0 entered promiscuous mode [ 161.204880][ T8514] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 161.607040][ T8467] device hsr_slave_1 entered promiscuous mode [ 161.645824][ T8467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.647497][ T8467] Cannot create hsr debugfs directory [ 161.761880][ T4338] Bluetooth: hci4: command 0x0409 tx timeout [ 161.958925][ T8539] loop3: detected capacity change from 0 to 256 [ 161.962992][ T8539] exfat: Deprecated parameter 'utf8' [ 161.964178][ T8539] exfat: Deprecated parameter 'namecase' [ 161.965526][ T8539] exfat: Deprecated parameter 'namecase' [ 161.967048][ T8539] exfat: Deprecated parameter 'namecase' [ 162.223773][ T8539] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 162.646744][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 162.960345][ T8467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.970354][ T8548] ipt_REJECT: TCP_RESET invalid for non-tcp [ 162.972575][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.974290][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.994278][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.996970][ T8467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.007377][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.055414][ T8467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 163.117026][ T8467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 163.193934][ T8467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.262061][ T8557] loop0: detected capacity change from 0 to 256 [ 164.064415][ T8467] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.086716][ T8467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.088841][ T8467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.105631][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.107698][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.109463][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.111969][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.113818][ T1616] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.115369][ T1616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.117716][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.119708][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.121481][ T1616] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.122888][ T1616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.124567][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.126912][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.129122][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.130998][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.132890][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.134955][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.137943][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.140171][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.142353][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.144102][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.189918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.191998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.193643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.272215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.273914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.285141][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.315511][ T4335] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 164.316839][ T4339] Bluetooth: hci4: command 0x041b tx timeout [ 164.318028][ T4335] FAT-fs (loop0): Filesystem has been set read-only [ 164.326992][ T4335] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 164.448669][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.450663][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.835408][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.838991][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.843092][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.865522][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.126427][ T4339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.129252][ T4339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.131243][ T4339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.134159][ T4339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.136935][ T4348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.138764][ T4348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.197288][ T8467] device veth0_vlan entered promiscuous mode [ 165.240252][ T8594] loop5: detected capacity change from 0 to 256 [ 165.248658][ T8594] exfat: Deprecated parameter 'utf8' [ 165.260497][ T8594] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 165.317871][ T4422] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.326940][ T8467] device veth1_vlan entered promiscuous mode [ 165.348809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.356055][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.357090][ T8596] loop3: detected capacity change from 0 to 4096 [ 165.362919][ T8467] device veth0_macvtap entered promiscuous mode [ 165.365490][ T8467] device veth1_macvtap entered promiscuous mode [ 165.387528][ T8596] EXT4-fs: inline encryption not supported [ 165.399424][ T8596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.401395][ T8596] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 165.433341][ T8600] ipt_REJECT: TCP_RESET invalid for non-tcp [ 165.438352][ T4422] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.451508][ T8587] rxe_eth0 speed is unknown, defaulting to 1000 [ 165.460467][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.473951][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.478480][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.482932][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.494064][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.495493][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.501673][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.505858][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.513010][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.515343][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.517656][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.519837][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.522812][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.668856][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.670929][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.672822][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.674815][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.813659][ T4422] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.816979][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.819089][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.821161][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.823324][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.825337][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.833065][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.834918][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.841328][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.843184][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.845164][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.852005][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.859069][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.860955][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.869191][ T8467] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.870870][ T8467] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.872618][ T8467] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.878322][ T8467] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.918922][ T4422] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.921090][ T8608] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 165.922369][ T8608] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.923858][ T8608] vhci_hcd vhci_hcd.0: Device attached [ 165.927895][ T8608] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 165.929118][ T8608] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 165.930891][ T8608] vhci_hcd vhci_hcd.0: Device attached [ 166.009689][ T4632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.011322][ T4632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.013640][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.029628][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.031305][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.033041][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.053906][ T8587] chnl_net:caif_netlink_parms(): no params data found [ 166.081878][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.083498][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.085471][ T8587] device bridge_slave_0 entered promiscuous mode [ 166.091268][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.092762][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.094628][ T8587] device bridge_slave_1 entered promiscuous mode [ 166.119063][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.140337][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.144278][ T4348] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.147539][ T4348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.149771][ T4348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.152329][ T4348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.162132][ T4348] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 166.163815][ T4348] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.179961][ T8587] team0: Port device team_slave_0 added [ 166.189070][ T14] usb 4-1: new high-speed USB device number 4 using vhci_hcd [ 166.191592][ T8587] team0: Port device team_slave_1 added [ 166.193751][ T8622] FAULT_INJECTION: forcing a failure. [ 166.193751][ T8622] name failslab, interval 1, probability 0, space 0, times 0 [ 166.199537][ T8622] CPU: 1 PID: 8622 Comm: syz.6.1229 Not tainted syzkaller #0 [ 166.201114][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 166.203167][ T8622] Call trace: [ 166.203848][ T8622] dump_backtrace+0x1c4/0x1f0 [ 166.204870][ T8622] show_stack+0x2c/0x3c [ 166.205854][ T8622] __dump_stack+0x30/0x40 [ 166.206793][ T8622] dump_stack_lvl+0xf4/0x15c [ 166.207800][ T8622] dump_stack+0x1c/0x5c [ 166.208682][ T8622] should_fail_ex+0x3cc/0x524 [ 166.209656][ T8622] __should_failslab+0xc0/0x11c [ 166.210680][ T8622] should_failslab+0x10/0x28 [ 166.211629][ T8622] kmem_cache_alloc+0x88/0x310 [ 166.212617][ T8622] sk_prot_alloc+0x60/0x1e8 [ 166.213550][ T8622] sk_alloc+0x44/0x3a0 [ 166.214390][ T8622] inet_create+0x670/0xd84 [ 166.215304][ T8622] __sock_create+0x448/0x8a8 [ 166.216254][ T8622] sock_create_kern+0x4c/0x64 [ 166.217322][ T8622] start_sync_thread+0x934/0x2150 [ 166.218446][ T8622] do_ip_vs_set_ctl+0x4a8/0xab0 [ 166.219494][ T8622] nf_setsockopt+0x260/0x280 [ 166.220516][ T8622] ip_setsockopt+0x124/0x134 [ 166.221589][ T8622] tcp_setsockopt+0xcc/0xe8 [ 166.222567][ T8622] sock_common_setsockopt+0xb0/0xcc [ 166.223675][ T8622] __sys_setsockopt+0x2fc/0x50c [ 166.224629][ T8622] __arm64_sys_setsockopt+0xc0/0xdc [ 166.225610][ T8622] invoke_syscall+0x98/0x290 [ 166.226625][ T8622] el0_svc_common+0x13c/0x258 [ 166.227530][ T8622] do_el0_svc+0x5c/0x134 [ 166.228406][ T8622] el0_svc+0x58/0x12c [ 166.229179][ T8622] el0t_64_sync_handler+0x84/0xf0 [ 166.230285][ T8622] el0t_64_sync+0x18c/0x190 [ 166.243373][ T8622] IPVS: Error during creation of socket; terminating [ 166.274183][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.277332][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.283109][ T8587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.449067][ T4338] Bluetooth: hci4: command 0x040f tx timeout [ 166.708644][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.710368][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.719623][ T8587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.742470][ T8611] vhci_hcd: connection closed [ 166.742624][ T39] vhci_hcd: stop threads [ 166.744517][ T39] vhci_hcd: release socket [ 166.745616][ T39] vhci_hcd: disconnect device [ 166.747553][ T8609] vhci_hcd: connection reset by peer [ 166.749015][ T39] vhci_hcd: stop threads [ 166.749931][ T39] vhci_hcd: release socket [ 166.751787][ T39] vhci_hcd: disconnect device [ 167.076570][ T8619] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.117874][ T8587] device hsr_slave_0 entered promiscuous mode [ 167.166138][ T8587] device hsr_slave_1 entered promiscuous mode [ 167.195899][ T4348] Bluetooth: hci3: command 0x0409 tx timeout [ 167.206501][ T8587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.208166][ T8587] Cannot create hsr debugfs directory [ 167.266992][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1275'. [ 167.509981][ T8676] x_tables: duplicate underflow at hook 2 [ 167.661450][ T8619] chnl_net:caif_netlink_parms(): no params data found [ 167.692357][ T8688] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 167.693649][ T8688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 167.706989][ T8688] vhci_hcd vhci_hcd.0: Device attached [ 167.741977][ T8688] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 167.743290][ T8688] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 167.745019][ T8688] vhci_hcd vhci_hcd.0: Device attached [ 167.762461][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.765968][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.768104][ T8619] device bridge_slave_0 entered promiscuous mode [ 167.801350][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.812200][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.818182][ T8619] device bridge_slave_1 entered promiscuous mode [ 167.832468][ T8684] loop1: detected capacity change from 0 to 40427 [ 167.872891][ T7355] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.944430][ T8619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.956107][ T8587] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 167.975821][ T8583] usb 14-1: new high-speed USB device number 2 using vhci_hcd [ 168.008067][ T8619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.017974][ T8619] team0: Port device team_slave_0 added [ 168.020077][ T8619] team0: Port device team_slave_1 added [ 168.026217][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.027705][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.032910][ T8619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.036543][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.038011][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.043106][ T8619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.097139][ T8619] device hsr_slave_0 entered promiscuous mode [ 168.195601][ T8720] loop1: detected capacity change from 0 to 128 [ 168.276506][ T4348] Bluetooth: hci2: command 0x0409 tx timeout [ 168.583090][ T4348] Bluetooth: hci4: command 0x0419 tx timeout [ 168.944747][ T8619] device hsr_slave_1 entered promiscuous mode [ 168.961716][ T8695] vhci_hcd: connection closed [ 168.966275][ T8689] vhci_hcd: connection reset by peer [ 168.969064][ T4785] vhci_hcd: stop threads [ 168.969997][ T4785] vhci_hcd: release socket [ 168.970960][ T4785] vhci_hcd: disconnect device [ 168.995896][ T5082] vhci_hcd: stop threads [ 168.996744][ T5082] vhci_hcd: release socket [ 168.997636][ T5082] vhci_hcd: disconnect device [ 169.238028][ T8619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.239872][ T8619] Cannot create hsr debugfs directory [ 169.275900][ T4348] Bluetooth: hci3: command 0x041b tx timeout [ 169.299483][ T8587] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 169.336274][ T4422] IPVS: stopping master sync thread 7686 ... [ 169.337021][ T8587] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 169.376765][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1283'. [ 169.412718][ T8587] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 169.416957][ T11] bio_check_eod: 4 callbacks suppressed [ 169.416966][ T11] kworker/u4:1: attempt to access beyond end of device [ 169.416966][ T11] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 169.576254][ T8737] ipt_REJECT: TCP_RESET invalid for non-tcp [ 169.637008][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.638822][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.977693][ T8619] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 170.017121][ T8619] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 170.316569][ T4348] Bluetooth: hci2: command 0x041b tx timeout [ 170.388056][ T8619] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 170.414598][ T8767] overlayfs: failed to resolve './bus': -2 [ 170.418478][ T8767] overlayfs: missing 'lowerdir' [ 170.427807][ T8619] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 170.555110][ T8772] loop6: detected capacity change from 0 to 16 [ 170.566706][ T8772] erofs: (device loop6): mounted with root inode @ nid 36. [ 170.611379][ T8772] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 170.613285][ T8772] erofs: (device loop6): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 170.616319][ T8772] syz.6.1299: attempt to access beyond end of device [ 170.616319][ T8772] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 170.619346][ T8772] syz.6.1299: attempt to access beyond end of device [ 170.619346][ T8772] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 170.640155][ T8772] ================================================================== [ 170.641842][ T8772] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x39c/0x494 [ 170.643388][ T8772] Read of size 4096 at addr ffff0000f05e4000 by task syz.6.1299/8772 [ 170.645001][ T8772] [ 170.645467][ T8772] CPU: 1 PID: 8772 Comm: syz.6.1299 Not tainted syzkaller #0 [ 170.647087][ T8772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.649214][ T8772] Call trace: [ 170.649927][ T8772] dump_backtrace+0x1c4/0x1f0 [ 170.650957][ T8772] show_stack+0x2c/0x3c [ 170.651816][ T8772] __dump_stack+0x30/0x40 [ 170.652821][ T8772] dump_stack_lvl+0xf4/0x15c [ 170.653859][ T8772] print_address_description+0x88/0x218 [ 170.655104][ T8772] print_report+0x50/0x68 [ 170.656078][ T8772] kasan_report+0xa8/0xfc [ 170.657007][ T8772] kasan_check_range+0x258/0x290 [ 170.658007][ T8772] memcpy+0x48/0x90 [ 170.658809][ T8772] z_erofs_transform_plain+0x39c/0x494 [ 170.659973][ T8772] z_erofs_decompress+0x9c/0xd4 [ 170.660960][ T8772] z_erofs_decompress_queue+0x103c/0x1bf4 [ 170.662117][ T8772] z_erofs_runqueue+0x1508/0x16a8 [ 170.663114][ T8772] z_erofs_read_folio+0x2dc/0x5cc [ 170.664123][ T8772] filemap_read_folio+0x134/0x384 [ 170.665159][ T8772] filemap_read+0x1290/0x20dc [ 170.666144][ T8772] generic_file_read_iter+0xf8/0x5ac [ 170.667245][ T8772] vfs_read+0x3cc/0x7b8 [ 170.668123][ T8772] ksys_read+0x12c/0x228 [ 170.669006][ T8772] __arm64_sys_read+0x7c/0x90 [ 170.669990][ T8772] invoke_syscall+0x98/0x290 [ 170.670915][ T8772] el0_svc_common+0x13c/0x258 [ 170.671870][ T8772] do_el0_svc+0x5c/0x134 [ 170.672737][ T8772] el0_svc+0x58/0x12c [ 170.673558][ T8772] el0t_64_sync_handler+0x84/0xf0 [ 170.674678][ T8772] el0t_64_sync+0x18c/0x190 [ 170.675677][ T8772] [ 170.676167][ T8772] The buggy address belongs to the physical page: [ 170.677473][ T8772] page:00000000b4386c68 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1305e4 [ 170.679629][ T8772] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 170.681154][ T8772] raw: 05ffc00000000000 fffffc00042b9ec8 fffffc0003b19508 0000000000000000 [ 170.682942][ T8772] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 170.684654][ T8772] page dumped because: kasan: bad access detected [ 170.685901][ T8772] [ 170.686364][ T8772] Memory state around the buggy address: [ 170.687548][ T8772] ffff0000f05e3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 170.689254][ T8772] ffff0000f05e3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 170.690884][ T8772] >ffff0000f05e4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 170.692512][ T8772] ^ [ 170.693335][ T8772] ffff0000f05e4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 170.694974][ T8772] ffff0000f05e4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 170.696609][ T8772] ================================================================== [ 170.698263][ T8772] Disabling lock debugging due to kernel taint [ 170.699660][ T8772] syz.6.1299: attempt to access beyond end of device [ 170.699660][ T8772] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 171.291437][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.315909][ T14] vhci_hcd: vhci_device speed not set [ 171.318838][ T4422] device hsr_slave_0 left promiscuous mode [ 171.356377][ T4422] device hsr_slave_1 left promiscuous mode [ 171.363775][ T4348] Bluetooth: hci3: command 0x040f tx timeout [ 171.425901][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.427754][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.429692][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.431218][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.432837][ T4422] device bridge_slave_1 left promiscuous mode [ 171.434143][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.466147][ T4422] device bridge_slave_0 left promiscuous mode [ 171.467436][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.585858][ T4422] device veth1_macvtap left promiscuous mode [ 171.587177][ T4422] device veth0_macvtap left promiscuous mode [ 171.588428][ T4422] device veth1_vlan left promiscuous mode [ 171.589593][ T4422] device veth0_vlan left promiscuous mode [ 172.395798][ T4338] Bluetooth: hci2: command 0x040f tx timeout [ 172.696008][ T113] usb usb5-port1: attempt power cycle [ 173.116618][ T8583] vhci_hcd: vhci_device speed not set [ 173.356727][ T113] usb usb5-port1: unable to enumerate USB device [ 173.445769][ T4338] Bluetooth: hci3: command 0x0419 tx timeout [ 174.066183][ T4422] team0 (unregistering): Port device team_slave_1 removed [ 174.226683][ T4422] team0 (unregistering): Port device team_slave_0 removed [ 174.376660][ T4422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.475784][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 174.486497][ T6598] usb usb15-port1: attempt power cycle [ 174.586055][ T4422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.146014][ T6598] usb usb15-port1: unable to enumerate USB device [ 176.086928][ T4422] bond0 (unregistering): Released all slaves [ 176.349349][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.360816][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.363398][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.365049][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.367313][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.369917][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.371305][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.372967][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.374745][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.377583][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.378980][ T4785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.380523][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.382446][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.384626][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.390770][ T8587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.392674][ T8587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.394945][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.399419][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.401188][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.403164][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.404980][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.407851][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.409658][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.411340][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.413641][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.415375][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.432032][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.441909][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.443493][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.451567][ T8619] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.454591][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.460865][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.466126][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.467456][ T8773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.474748][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.484650][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.489312][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.490990][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.492298][ T8773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.493849][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.495667][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.506736][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.508577][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.510477][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.512350][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.514243][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.519409][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.521278][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.522872][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.524265][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.526004][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.528545][ T8619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.531319][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.533895][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.601884][ T8619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.603712][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.605259][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.657546][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.659521][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.674105][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.676420][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.678168][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.679723][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.683645][ T8587] device veth0_vlan entered promiscuous mode [ 176.691321][ T8587] device veth1_vlan entered promiscuous mode [ 176.699175][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 176.700960][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 176.702607][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.704333][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.709674][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.711803][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.718833][ T8587] device veth0_macvtap entered promiscuous mode [ 176.722055][ T8587] device veth1_macvtap entered promiscuous mode [ 176.730586][ T8619] device veth0_vlan entered promiscuous mode [ 176.732356][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.734109][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.736716][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.739281][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.741138][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.747064][ T8619] device veth1_vlan entered promiscuous mode [ 176.758105][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.759848][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.761555][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.763239][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.770586][ T8619] device veth0_macvtap entered promiscuous mode [ 176.772728][ T8619] device veth1_macvtap entered promiscuous mode [ 176.777516][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 176.780203][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 176.781929][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.783773][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.785537][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.787754][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.789481][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.792451][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.794596][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.797531][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.799518][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.801411][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.803401][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.805312][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.808170][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.810100][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.812107][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.814693][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.817563][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.819777][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.821573][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.823436][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.825282][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.827470][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.829303][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.831184][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.833074][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.835002][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.837466][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.840479][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.842343][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.844144][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.846098][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.849109][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.851454][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.853372][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.855323][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.857857][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.859829][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.861647][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.863607][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.865435][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.867966][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.869775][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.871738][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.874258][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.877362][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.879228][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.883795][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.886546][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.888438][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.890392][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.892338][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.894383][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.896603][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.898625][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.900579][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.902711][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.904578][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.906725][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.909110][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.910914][ T8587] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.912601][ T8587] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.914297][ T8587] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.916366][ T8587] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.919735][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.921638][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.929847][ T8619] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.931802][ T8619] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.933625][ T8619] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.935570][ T8619] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.973608][ T8381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.975329][ T8381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.976704][ T8773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.977435][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): ipvtap0: link becomes ready [ 176.978385][ T8773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.980294][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): ipvtap0: link becomes ready [ 176.983052][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.986811][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.005817][ T4745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.007469][ T4745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.009939][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.012493][ T4745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.014091][ T4745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.015666][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready