last executing test programs: 54.14121064s ago: executing program 2 (id=374): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0xc080) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) 54.018745003s ago: executing program 2 (id=376): pipe(&(0x7f0000000000)) io_setup(0xea, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r2 = fanotify_init(0x0, 0x2) fanotify_mark(r2, 0x1, 0x8000039, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0}]) 53.746268399s ago: executing program 2 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001080)={"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"}) 53.312416019s ago: executing program 2 (id=385): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5522, &(0x7f0000000b40)="$eJzs3L1vW1UUAPDjpOk3JUIMbH1SVSmRalOnH4KtQCs+RKuqwMAEju1abm2/KHadkImBETHwnyCQmBj5GxiY2RADiA0J5HdfSgNUqhQnJsnvJz2fd6+vzzvXqiqd9yIHcGQtZr//WolzcSoi5iPibERxXimPwo0UXoqI8xEx98RRKecfTxyPiNMRcW6SPOWslG99eWl84dov7/z23Q8njp356tsfZ7drYNYuRkR/LZ1v9FPMOyk+KOcb424R+1fHZUxv9B+W4zzFjfZqkWGjsb2uUcQrnbQ+X3s0nMT7vUZzEjvd+8X82iBdcDjubOcpPvCgsV6MW+3VInaHeRE7W6muza30f9vWcJTytMp8nxTpYzTajml9e7Od9rP2sIjNwaicT3nzVntzEsdlLC8XzbzXKupY3cUX/T/3bnfwaDMbt9eH3XyQXavVX6nVr1fr63mrPWpfrTb6retXs6VOb7KsOmo3+jc6ed7ptWvNvL+cLXWazWq9ni3dbK92G4OsXq9dqV2uXlsuzy5lb975IOu1sqVJfL07eDTq9obZ/Xw9S59YzlZqV15dzi7Us/du383u3rt16/bd9z+6+eGd126//Ua56F9lZUsrl1dWqvXL1ZX68hHa/2dl0VPcP+xKZdYFABw8+n9gFi7GwuPz6fb/6/ci9r7/j2fq/9O8/v/pDlT/e/j6/42XI2a6f9gV/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJH108LXbxUni2l8ppx/rpx6oRxXImIuIv78D/NxfEfO+TLPwlPWL/yjhu8rUWSYXONEeZyOiBvl8cfze/0tAAAAwOH1zafnv0jdenpZnHVB7Kd002bu7MdTyleJiIXFn6eUbW7y8uKUkhX/vo/F5pSyFTewTk4pWbrldmxa2Z7J/I5w8olQSWFuX8sBAAD2xc5OYH+7EAAAAPbT57MugNmoxPajzO1nwcVf3v/9QPDUjhEAAABwAFVmXQAAAACw54r+3+//AQAAwOGWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C927uc2cSCKA/CzwQv7T4tWe99W9gZlbAl73GNEAWmCAnIgLaQBaiC3lBBBhMchEHGI5LGtRN8nOZOxzI83CA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAn9ucdBUIgDMJg7/rOZO5/WGnQ1NSkCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYuZ/XOKo4AODf2d3Z2FYxRskhIgoe9GLTbW3tTTwowYN/ghDSbY3d+qMNYksRc/EmOfciehQRlHjr/9BzC73UWw85VPCsvNmZ7DQNuCqd2SafD7x5350M875vhoR8500CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUdt6ZxN20mR/HnXLf7QfX11J/Z0+f3Ny6u5RairMmk34yvFT/kC1GxLH2kgEAAOBw6Fb1fUTcy7dXUt+ZL+r/vDom1fzfPzOOy3r+i6pk3Vv/V7V/ar/9ev+F3YHmx+Okk55fHw1PPJpK73HNcdY9+49H9IorXzx76RY3pPP+5vM7eXE9s29v3Xq3X4RzTWQLAPwXx6u+DKrfh1I/aDMxAA6NXq3wrur/7ny7OQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0YWczjlVxFhFLvUmc3HlwfW2//ubW3aWqnblxYyu+npwznSKPiPPro+GJRmcz265cvXZxdTQaXm4+eDki2hr97XL6Fz+c4uCIVq7PAQmy8vu2kUHn0j3d+6VOebNn4Wo8OUFrP5IAADig8rKl+uBevr2S9mULEX/98HD9/1otjinr//sfnbldH6te/w8am+HsW9649NnylavX3li/tHpheGH4yZsnB28NTp09ffrscvGsZNkTEwAAAP6fftnq9X9n4dH1/6O1OKas/z//bvBVfayu+n9fk0W/tjMBAAA43J575c8/sn32Z/1+fLm6sXF5MN7ufj453raQ6r82V7Z6/d9daDsrAAAAoAk7m9lD6//nanFMuf7/9I8v/lw/ZzcijpTr/8fXPh2da246M62JPydue44AAAC060jZ6uv/efH+f2f3lYdORLz+6jgu/w3gVPV/971vfqqPVX///1RzU5xJncXx9Sj6xYjeYtsZAQAAcJA9VbZU7P+eb698/MvRD/re/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo2t8BAAD//1IGNfA=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 51.437638022s ago: executing program 2 (id=397): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) 49.339638681s ago: executing program 2 (id=410): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 48.561733189s ago: executing program 32 (id=410): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 33.397580839s ago: executing program 4 (id=486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 31.567559051s ago: executing program 4 (id=491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 30.533459255s ago: executing program 4 (id=503): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 30.390090818s ago: executing program 4 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x44040200) 29.161250747s ago: executing program 4 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 28.937456902s ago: executing program 4 (id=508): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 13.8675449s ago: executing program 33 (id=508): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 4.538071675s ago: executing program 0 (id=628): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffc}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 3.586731988s ago: executing program 0 (id=629): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000180)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3.328041913s ago: executing program 0 (id=630): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357e31198a44f1e25aaa320f6daad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe5394ac1e9af734950b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee20d256d44149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bfd7a4fb4bbade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e54385ad496af31cffe7539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aab1b7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5c441d35ef856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae0104000000000000835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4e98a5ceaeb16a79bb95f960b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9e6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def200009538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e940d4b7e7291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c2dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf2a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa423de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907f4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a419df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786bf2eb5dd386d3f1600efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051960200000000000000328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e01d253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abb469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb40aaa90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e04007e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e502194ae25bf8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b900c14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7b1164cc20de5b23146baa978611100", 0x2000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}], 0xffffffffffffff03}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 3.06295418s ago: executing program 0 (id=633): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 2.751940816s ago: executing program 0 (id=635): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @multicast1}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x30, r3, 0x109, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) 2.485770022s ago: executing program 0 (id=636): ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xb7}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 2.137327191s ago: executing program 3 (id=639): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0xcea5, 0x6) 1.938026615s ago: executing program 3 (id=640): socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.221375732s ago: executing program 1 (id=643): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 991.253677ms ago: executing program 1 (id=644): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 909.888179ms ago: executing program 3 (id=645): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="05"], 0x80}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 743.035883ms ago: executing program 1 (id=646): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x18}) mq_timedreceive(r0, &(0x7f0000001140)=""/170, 0xaa, 0x0, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x10) 654.468725ms ago: executing program 3 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback, 0x100}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x108, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010108}, 0x949c}}, 0x0, 0x0, 0x1f, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 470.816369ms ago: executing program 1 (id=648): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000000)={0x28, 0x14, 0x940e2689cab82739, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2412447060aefae0261a000"}]}, 0x28}}, 0xc8c0) recvfrom(r1, 0x0, 0x0, 0x8100, 0x0, 0x0) 444.21105ms ago: executing program 3 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 227.940435ms ago: executing program 1 (id=650): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x73, 0x6}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) flock(r1, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 91.576358ms ago: executing program 1 (id=651): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f00000001c0)=0xe70, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=652): set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) kernel console output (not intermixed with test programs): face batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.622385][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.652580][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.662550][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.669891][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.695895][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.775809][ T5776] hsr_slave_0: entered promiscuous mode [ 79.782836][ T5776] hsr_slave_1: entered promiscuous mode [ 79.788963][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.796862][ T5776] Cannot create hsr debugfs directory [ 79.805320][ T5772] team0: Port device team_slave_0 added [ 79.855161][ T5772] team0: Port device team_slave_1 added [ 79.888891][ T5773] hsr_slave_0: entered promiscuous mode [ 79.895270][ T5773] hsr_slave_1: entered promiscuous mode [ 79.902371][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.910207][ T5773] Cannot create hsr debugfs directory [ 79.943447][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.950604][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.976780][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.980328][ T5778] Bluetooth: hci0: command tx timeout [ 80.014204][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.021527][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.047709][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.049558][ T5780] Bluetooth: hci1: command tx timeout [ 80.058446][ T5085] Bluetooth: hci2: command tx timeout [ 80.064146][ T5778] Bluetooth: hci3: command tx timeout [ 80.191474][ T5772] hsr_slave_0: entered promiscuous mode [ 80.198213][ T5772] hsr_slave_1: entered promiscuous mode [ 80.205293][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.213074][ T5772] Cannot create hsr debugfs directory [ 80.424439][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.467639][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.477591][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.494544][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.593269][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.603726][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.613889][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.628235][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.729176][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.744971][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.756308][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.768402][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.807804][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.878513][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.899067][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.910799][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.931509][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.943698][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.987683][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.995254][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.029868][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.036982][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.067381][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.120983][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.155357][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.183007][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.190205][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.206389][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.246499][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.253855][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.277647][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.313078][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.320266][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.374009][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.381285][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.425572][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.506977][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.553013][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.560510][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.600722][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.608050][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.687351][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.870337][ T5774] veth0_vlan: entered promiscuous mode [ 81.937471][ T5774] veth1_vlan: entered promiscuous mode [ 82.020102][ T5774] veth0_macvtap: entered promiscuous mode [ 82.040411][ T5778] Bluetooth: hci0: command tx timeout [ 82.058764][ T5774] veth1_macvtap: entered promiscuous mode [ 82.114532][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.123054][ T5778] Bluetooth: hci2: command tx timeout [ 82.128499][ T5778] Bluetooth: hci3: command tx timeout [ 82.134349][ T5780] Bluetooth: hci1: command tx timeout [ 82.148196][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.193171][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.205934][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.220284][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.229124][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.238828][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.314292][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.384461][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.464069][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.474672][ T5773] veth0_vlan: entered promiscuous mode [ 82.484661][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.546107][ T5776] veth0_vlan: entered promiscuous mode [ 82.561736][ T5773] veth1_vlan: entered promiscuous mode [ 82.574370][ T5776] veth1_vlan: entered promiscuous mode [ 82.584112][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.598848][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.656691][ T5773] veth0_macvtap: entered promiscuous mode [ 82.694098][ T5772] veth0_vlan: entered promiscuous mode [ 82.714112][ T5773] veth1_macvtap: entered promiscuous mode [ 82.745682][ T5776] veth0_macvtap: entered promiscuous mode [ 82.759092][ T5772] veth1_vlan: entered promiscuous mode [ 82.782385][ T5776] veth1_macvtap: entered promiscuous mode [ 82.808016][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.830715][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.860302][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.902814][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.915048][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.928836][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.958932][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.975009][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.986923][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.015333][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.037813][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.063626][ T5772] veth0_macvtap: entered promiscuous mode [ 83.074218][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.087638][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.098879][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.110047][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.146443][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.157644][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.176945][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.189475][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.198741][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.221686][ T5772] veth1_macvtap: entered promiscuous mode [ 83.233373][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.242860][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.253138][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.261959][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.348568][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.370372][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.383423][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.394590][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.407667][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.418274][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.430722][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.476482][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.490832][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.501136][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.512385][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.522701][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.533214][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.544595][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.553804][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.558223][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.572153][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.581702][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.591358][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.600554][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.651319][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.666157][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.723909][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.742938][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.776836][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.789807][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.841444][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.858228][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.917766][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.958042][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.119576][ T5780] Bluetooth: hci0: command tx timeout [ 84.139097][ T5850] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.207283][ T5780] Bluetooth: hci1: command tx timeout [ 84.214172][ T5778] Bluetooth: hci2: command tx timeout [ 84.214207][ T5085] Bluetooth: hci3: command tx timeout [ 84.351783][ T5856] Bluetooth: MGMT ver 1.22 [ 84.747406][ T5872] input: syz1 as /devices/virtual/input/input5 [ 84.895801][ T5876] mmap: syz.1.14 (5876) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.078571][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 85.534162][ T5894] Illegal XDP return value 4294967274 on prog (id 5) dev syz_tun, expect packet loss! [ 86.219616][ T5085] Bluetooth: hci0: command tx timeout [ 86.279753][ T5085] Bluetooth: hci2: command tx timeout [ 86.285362][ T5778] Bluetooth: hci1: command tx timeout [ 86.291658][ T5778] Bluetooth: hci3: command tx timeout [ 86.412962][ T5914] syzkaller1: entered promiscuous mode [ 86.418510][ T5914] syzkaller1: entered allmulticast mode [ 86.981323][ T5931] FAULT_INJECTION: forcing a failure. [ 86.981323][ T5931] name failslab, interval 1, probability 0, space 0, times 1 [ 87.019453][ T5931] CPU: 1 PID: 5931 Comm: syz.1.35 Not tainted syzkaller #0 [ 87.026733][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.036833][ T5931] Call Trace: [ 87.040157][ T5931] [ 87.043127][ T5931] dump_stack_lvl+0x18c/0x250 [ 87.047868][ T5931] ? show_regs_print_info+0x20/0x20 [ 87.053124][ T5931] ? load_image+0x420/0x420 [ 87.057685][ T5931] ? __might_sleep+0xe0/0xe0 [ 87.062332][ T5931] ? __lock_acquire+0x7d80/0x7d80 [ 87.067418][ T5931] should_fail_ex+0x394/0x4c0 [ 87.072151][ T5931] should_failslab+0x9/0x20 [ 87.076794][ T5931] slab_pre_alloc_hook+0x59/0x300 [ 87.081875][ T5931] ? lockdep_init_map_type+0x9c/0x8e0 [ 87.087305][ T5931] ? kvmalloc_node+0x70/0x180 [ 87.092041][ T5931] ? kvmalloc_node+0x70/0x180 [ 87.096769][ T5931] __kmem_cache_alloc_node+0x53/0x250 [ 87.102266][ T5931] ? kvmalloc_node+0x70/0x180 [ 87.106994][ T5931] __kmalloc_node+0xa6/0x240 [ 87.111642][ T5931] kvmalloc_node+0x70/0x180 [ 87.116198][ T5931] rhashtable_init+0x529/0xa60 [ 87.121025][ T5931] ipc_init_ids+0x7b/0x1f0 [ 87.125496][ T5931] msg_init_ns+0x121/0x180 [ 87.129962][ T5931] copy_ipcs+0x33f/0x500 [ 87.134263][ T5931] create_new_namespaces+0x212/0x700 [ 87.139614][ T5931] unshare_nsproxy_namespaces+0x11a/0x160 [ 87.145389][ T5931] ksys_unshare+0x4fa/0x8f0 [ 87.149955][ T5931] ? sighand_ctor+0x50/0x50 [ 87.154508][ T5931] ? lock_chain_count+0x20/0x20 [ 87.159414][ T5931] ? syscall_enter_from_user_mode+0x25/0x80 [ 87.165378][ T5931] __x64_sys_unshare+0x38/0x40 [ 87.170197][ T5931] do_syscall_64+0x55/0xb0 [ 87.174679][ T5931] ? clear_bhb_loop+0x40/0x90 [ 87.179427][ T5931] ? clear_bhb_loop+0x40/0x90 [ 87.184256][ T5931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.190200][ T5931] RIP: 0033:0x7f1e7e79e159 [ 87.194663][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.214349][ T5931] RSP: 002b:00007f1e7f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 87.222914][ T5931] RAX: ffffffffffffffda RBX: 00007f1e7ea25fa0 RCX: 00007f1e7e79e159 [ 87.230940][ T5931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 87.238967][ T5931] RBP: 00007f1e7e835024 R08: 0000000000000000 R09: 0000000000000000 [ 87.247084][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.255194][ T5931] R13: 00007f1e7ea26038 R14: 00007f1e7ea25fa0 R15: 00007ffd189bd128 [ 87.263230][ T5931] [ 88.074080][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.082770][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.185599][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.267039][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.978153][ T5936] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.987559][ T5936] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.997520][ T5936] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.006929][ T5936] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.224300][ T5940] netlink: 'syz.3.38': attribute type 8 has an invalid length. [ 90.686268][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 91.184357][ T5978] syz.3.53[5978]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.254961][ T5978] loop3: detected capacity change from 0 to 512 [ 91.280867][ T5980] process 'syz.1.54' launched './file1' with NULL argv: empty string added [ 91.300911][ T5978] EXT4-fs: inline encryption not supported [ 91.352966][ T5978] EXT4-fs (loop3): Test dummy encryption mode enabled [ 91.399878][ T5978] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.441041][ T5978] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.542778][ T5978] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.53: bad orphan inode 131083 [ 91.633452][ T5978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.014016][ T5997] loop0: detected capacity change from 0 to 1024 [ 92.033796][ T5997] ======================================================= [ 92.033796][ T5997] WARNING: The mand mount option has been deprecated and [ 92.033796][ T5997] and is ignored by this kernel. Remove the mand [ 92.033796][ T5997] option from the mount to silence this warning. [ 92.033796][ T5997] ======================================================= [ 92.109682][ T5997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.185165][ T5997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 92.207756][ T5997] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.300082][ T789] cfg80211: failed to load regulatory.db [ 92.376436][ T5978] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 92.400093][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 92.575281][ T6009] loop0: detected capacity change from 0 to 128 [ 92.636911][ T6009] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.752029][ T5978] EXT4-fs: inline encryption not supported [ 92.786748][ T5978] EXT4-fs error (device loop3): __ext4_remount:6756: comm syz.3.53: Abort forced by user [ 92.829332][ T5978] EXT4-fs (loop3): Remounting filesystem read-only [ 92.835908][ T5978] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 92.913993][ T6012] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 92.951848][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cc63000: rx timeout, send abort [ 92.956179][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.961300][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cc63000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.179620][ T27] audit: type=1326 audit(1788374150.310:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.67" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8fcb9e159 code=0x0 [ 93.707825][ T6034] loop1: detected capacity change from 0 to 256 [ 93.847922][ T27] audit: type=1326 audit(1788374150.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.0.74" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2eec39e159 code=0x0 [ 93.881023][ T6034] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 94.111907][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.176509][ T6043] netlink: 'syz.1.77': attribute type 8 has an invalid length. [ 94.184346][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 94.211866][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 94.319341][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 94.329895][ T23] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 94.338924][ T23] usb 4-1: config 0 has no interface number 0 [ 94.359186][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 94.361049][ T6048] loop2: detected capacity change from 0 to 128 [ 94.379471][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.396052][ T6048] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 94.399290][ T23] usb 4-1: Product: syz [ 94.411484][ T6048] hpfs: filesystem error: improperly stopped [ 94.418825][ T6048] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 94.429281][ T23] usb 4-1: Manufacturer: syz [ 94.439375][ T23] usb 4-1: SerialNumber: syz [ 94.444277][ T6048] hpfs: You really don't want any checks? You are crazy... [ 94.456519][ T6048] hpfs: Code page index out of array [ 94.478392][ T6048] hpfs: code page support is disabled [ 94.482227][ T23] usb 4-1: config 0 descriptor?? [ 94.493802][ T6048] hpfs: hpfs_map_4sectors(): unaligned read [ 94.508249][ T6048] hpfs: hpfs_map_4sectors(): unaligned read [ 94.510932][ T23] smsc95xx v2.0.0 [ 94.515900][ T6048] hpfs: filesystem error: unable to find root dir [ 95.067383][ T6063] netlink: 27 bytes leftover after parsing attributes in process `syz.1.83'. [ 95.338994][ T6072] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 95.361517][ T23] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 95.374579][ T6072] snd_hda_intel 0000:00:01.0: Unknown PCI class/subclass/prog-if information (0x060100) found, selecting HDAudio legacy driver [ 95.434391][ T6072] snd_hda_intel 0000:00:01.3: Unknown PCI class/subclass/prog-if information (0x068000) found, selecting HDAudio legacy driver [ 95.579111][ T6072] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 95.609473][ T6072] snd_hda_intel 0000:00:01.3: PCI INT A: no GSI [ 95.737672][ T6072] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 95.754744][ T42] snd_hda_intel 0000:00:05.0: Unknown capability 0 [ 95.775440][ T23] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 95.787805][ T42] snd_hda_intel 0000:00:05.0: no codecs found! [ 95.797716][ T23] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 95.840969][ T23] usb 4-1: USB disconnect, device number 2 [ 96.934336][ T6080] loop0: detected capacity change from 0 to 40427 [ 96.988589][ T6080] F2FS-fs (loop0): invalid crc value [ 97.038177][ T6080] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.139752][ T6098] netlink: 14 bytes leftover after parsing attributes in process `syz.3.98'. [ 97.158683][ T6080] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.159426][ T6098] netlink: get zone limit has 4 unknown bytes [ 97.315844][ T6100] capability: warning: `syz.1.99' uses 32-bit capabilities (legacy support in use) [ 97.438084][ T6080] syz.0.92: attempt to access beyond end of device [ 97.438084][ T6080] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 97.535972][ T6080] syz.0.92: attempt to access beyond end of device [ 97.535972][ T6080] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 97.620710][ T5773] syz-executor: attempt to access beyond end of device [ 97.620710][ T5773] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.652245][ T5773] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 97.809026][ T6113] FAULT_INJECTION: forcing a failure. [ 97.809026][ T6113] name failslab, interval 1, probability 0, space 0, times 0 [ 97.822565][ T6113] CPU: 1 PID: 6113 Comm: syz.2.104 Not tainted syzkaller #0 [ 97.829900][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.839999][ T6113] Call Trace: [ 97.843398][ T6113] [ 97.846372][ T6113] dump_stack_lvl+0x18c/0x250 [ 97.851115][ T6113] ? show_regs_print_info+0x20/0x20 [ 97.856534][ T6113] ? load_image+0x420/0x420 [ 97.861120][ T6113] ? __might_sleep+0xe0/0xe0 [ 97.865769][ T6113] ? __lock_acquire+0x7d80/0x7d80 [ 97.870950][ T6113] should_fail_ex+0x394/0x4c0 [ 97.875687][ T6113] should_failslab+0x9/0x20 [ 97.880258][ T6113] slab_pre_alloc_hook+0x59/0x300 [ 97.885351][ T6113] ? call_usermodehelper_setup+0x8e/0x260 [ 97.891150][ T6113] __kmem_cache_alloc_node+0x53/0x250 [ 97.896580][ T6113] ? call_usermodehelper_setup+0x8e/0x260 [ 97.902349][ T6113] kmalloc_trace+0x2a/0xe0 [ 97.906825][ T6113] call_usermodehelper_setup+0x8e/0x260 [ 97.912432][ T6113] ? __request_module+0x600/0x600 [ 97.917517][ T6113] __request_module+0x3bb/0x600 [ 97.922434][ T6113] ? module_enforce_rwx_sections+0x150/0x150 [ 97.928481][ T6113] ? do_raw_spin_lock+0x11f/0x2b0 [ 97.933564][ T6113] ? do_raw_spin_unlock+0x121/0x230 [ 97.938812][ T6113] __sock_create+0x323/0x940 [ 97.943434][ T6113] __sys_socketpair+0x1c1/0x550 [ 97.948335][ T6113] __x64_sys_socketpair+0x9b/0xb0 [ 97.953377][ T6113] do_syscall_64+0x55/0xb0 [ 97.957811][ T6113] ? clear_bhb_loop+0x40/0x90 [ 97.962507][ T6113] ? clear_bhb_loop+0x40/0x90 [ 97.967198][ T6113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.973202][ T6113] RIP: 0033:0x7fa8fcb9e159 [ 97.977629][ T6113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.997249][ T6113] RSP: 002b:00007fa8fdb0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 98.005682][ T6113] RAX: ffffffffffffffda RBX: 00007fa8fce25fa0 RCX: 00007fa8fcb9e159 [ 98.013751][ T6113] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 98.021759][ T6113] RBP: 00007fa8fcc35024 R08: 0000000000000000 R09: 0000000000000000 [ 98.029770][ T6113] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 98.037847][ T6113] R13: 00007fa8fce26038 R14: 00007fa8fce25fa0 R15: 00007ffda8d04758 [ 98.045871][ T6113] [ 98.885215][ T6133] loop0: detected capacity change from 0 to 512 [ 98.912258][ T6133] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.036819][ T6133] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.102: corrupted in-inode xattr: e_value size too large [ 99.093588][ T6133] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.102: couldn't read orphan inode 15 (err -117) [ 99.151655][ T6133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.234584][ T6137] Zero length message leads to an empty skb [ 99.274235][ T6133] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.102: Logical block already allocated [ 99.425152][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.603240][ T6146] loop0: detected capacity change from 0 to 256 [ 99.687864][ T6146] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 100.065098][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.118'. [ 100.777435][ T6177] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 100.922591][ T6181] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.083456][ T6214] loop5: detected capacity change from 0 to 7 [ 107.114846][ T6214] loop5: [POWERTEC] p1 p2 [ 107.122183][ T6214] loop5: p1 start 1815049829 is beyond EOD, truncated [ 107.129021][ T6214] loop5: p2 size 5767168 extends beyond EOD, truncated [ 107.254589][ T6188] udevd[6188]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 108.389241][ C1] sched: RT throttling activated [ 108.707579][ T6223] loop0: detected capacity change from 0 to 131072 [ 108.725196][ T6223] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 108.734987][ T6223] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 108.746952][ T6223] F2FS-fs (loop0): invalid crc value [ 108.797442][ T6223] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.858762][ T6223] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 108.865953][ T6223] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 109.028597][ T6223] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 109.047860][ T6223] F2FS-fs (loop0): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 109.752876][ T6250] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 109.820784][ T6250] CPU: 0 PID: 6250 Comm: syz.3.145 Not tainted syzkaller #0 [ 109.828294][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.838397][ T6250] Call Trace: [ 109.841719][ T6250] [ 109.844689][ T6250] dump_stack_lvl+0x18c/0x250 [ 109.849430][ T6250] ? show_regs_print_info+0x20/0x20 [ 109.854694][ T6250] ? load_image+0x420/0x420 [ 109.859267][ T6250] sysfs_create_dir_ns+0x26e/0x2a0 [ 109.864428][ T6250] ? __lock_acquire+0x7d80/0x7d80 [ 109.869504][ T6250] ? sysfs_warn_dup+0xa0/0xa0 [ 109.874232][ T6250] ? rcu_is_watching+0x15/0xb0 [ 109.879058][ T6250] ? do_raw_spin_unlock+0x121/0x230 [ 109.884317][ T6250] kobject_add_internal+0x617/0xc90 [ 109.889587][ T6250] kobject_add+0x164/0x240 [ 109.894088][ T6250] ? kobject_init+0x1d0/0x1d0 [ 109.898831][ T6250] ? get_device_parent+0x366/0x390 [ 109.903998][ T6250] device_add+0x3fa/0xc40 [ 109.908730][ T6250] tty_register_device_attr+0x425/0x950 [ 109.914339][ T6250] ? tty_register_device+0x30/0x30 [ 109.919516][ T6250] ? tty_port_init+0x132/0x1a0 [ 109.924324][ T6250] ? gsm_dlci_alloc+0x32a/0x630 [ 109.929246][ T6250] gsm_activate_mux+0x110/0x2a0 [ 109.934247][ T6250] gsmld_ioctl+0x12ca/0x1900 [ 109.938898][ T6250] ? gsmld_write+0x120/0x120 [ 109.943554][ T6250] ? __init_ldsem+0x150/0x150 [ 109.948294][ T6250] ? __fget_files+0x28/0x460 [ 109.952945][ T6250] ? gsmld_write+0x120/0x120 [ 109.957585][ T6250] tty_ioctl+0x9b5/0xdc0 [ 109.961888][ T6250] ? tty_get_icount+0xb0/0xb0 [ 109.966623][ T6250] __se_sys_ioctl+0xfd/0x170 [ 109.971270][ T6250] do_syscall_64+0x55/0xb0 [ 109.975733][ T6250] ? clear_bhb_loop+0x40/0x90 [ 109.980460][ T6250] ? clear_bhb_loop+0x40/0x90 [ 109.985192][ T6250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.991132][ T6250] RIP: 0033:0x7feb8c19e159 [ 109.995590][ T6250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.015518][ T6250] RSP: 002b:00007feb8cfc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.023992][ T6250] RAX: ffffffffffffffda RBX: 00007feb8c426090 RCX: 00007feb8c19e159 [ 110.032014][ T6250] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 110.040202][ T6250] RBP: 00007feb8c235024 R08: 0000000000000000 R09: 0000000000000000 [ 110.048219][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.056236][ T6250] R13: 00007feb8c426128 R14: 00007feb8c426090 R15: 00007ffda1bd9338 [ 110.064279][ T6250] [ 110.129501][ T6250] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 111.729051][ T6261] loop2: detected capacity change from 0 to 32768 [ 111.769450][ T6261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.149 (6261) [ 111.844727][ T6261] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.857010][ T6261] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 111.872081][ T6261] BTRFS info (device loop2): setting nodatacow, compression disabled [ 111.883958][ T6261] BTRFS info (device loop2): disabling tree log [ 111.893228][ T6261] BTRFS info (device loop2): turning on async discard [ 111.903319][ T6261] BTRFS info (device loop2): max_inline at 0 [ 111.912332][ T6261] BTRFS info (device loop2): using free space tree [ 111.943138][ T6287] binder: 6283:6287 ioctl 4018620d 0 returned -22 [ 112.007777][ T6299] binder: 6283:6299 ioctl c0306201 0 returned -14 [ 113.093783][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.439332][ T789] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.649747][ T789] usb 4-1: config 1 interface 0 has no altsetting 0 [ 113.691393][ T789] usb 4-1: string descriptor 0 read error: -22 [ 113.700581][ T789] usb 4-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.40 [ 113.716770][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.812227][ T6316] loop1: detected capacity change from 0 to 32768 [ 113.830976][ T6316] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.165 (6316) [ 113.883263][ T6316] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 113.911620][ T6316] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 113.937119][ T6316] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.979357][ T6316] BTRFS info (device loop1): use zstd compression, level 3 [ 113.995655][ T6316] BTRFS info (device loop1): using free space tree [ 114.130396][ T6316] BTRFS info (device loop1): enabling ssd optimizations [ 114.163138][ T6316] BTRFS info (device loop1): auto enabling async discard [ 114.442659][ T789] hid_mf 0003:0079:1803.0001: report_id 0 is invalid [ 114.479390][ T789] hid_mf 0003:0079:1803.0001: item 0 0 1 8 parsing failed [ 114.497838][ T789] hid_mf 0003:0079:1803.0001: HID parse failed. [ 114.527445][ T789] hid_mf: probe of 0003:0079:1803.0001 failed with error -22 [ 114.579319][ T27] audit: type=1800 audit(1788374171.700:4): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.165" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 114.636301][ T27] audit: type=1800 audit(1788374171.760:5): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.165" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 114.678762][ T789] usb 4-1: USB disconnect, device number 3 [ 114.911165][ T5776] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 115.666524][ T6356] gadgetfs: bound to dummy_udc driver [ 116.522914][ T6353] loop0: detected capacity change from 0 to 131072 [ 116.557290][ T6353] F2FS-fs (loop0): invalid crc value [ 116.624943][ T6353] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.698741][ T6353] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 117.209342][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.282288][ T6388] loop3: detected capacity change from 0 to 4096 [ 117.320757][ T6388] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 117.422767][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.459469][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.499888][ T42] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.540934][ T6388] ntfs3: loop3: ino=0, attr_set_size [ 117.549474][ T42] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.603506][ T42] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 117.619274][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.620426][ T6388] ntfs3: loop3: ino=0, attr_set_size [ 117.669134][ T6388] ntfs3: loop3: ino=0, attr_set_size [ 117.675351][ T27] audit: type=1326 audit(1788374174.810:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.2.188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8fcb9e159 code=0x0 [ 118.919418][ T5845] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.936184][ T42] gud 2-1:1.0: USB-2: Failed to add properties (ret=-71) [ 118.955041][ T42] gud 2-1:1.0: Failed to get connectors (error=-71) [ 118.966996][ T42] gud: probe of 2-1:1.0 failed with error -71 [ 119.037277][ T42] usb 2-1: USB disconnect, device number 2 [ 119.123339][ T5845] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.140886][ T5845] usb 1-1: config 13 has an invalid interface number: 248 but max is 2 [ 119.159349][ T5845] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 119.176806][ T5845] usb 1-1: config 13 has 1 interface, different from the descriptor's value: 3 [ 119.190368][ T5845] usb 1-1: config 13 has no interface number 0 [ 119.200645][ T5845] usb 1-1: New USB device found, idVendor=066b, idProduct=2202, bcdDevice=49.c7 [ 119.219342][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.239405][ T5845] usb 1-1: Product: syz [ 119.243656][ T5845] usb 1-1: Manufacturer: syz [ 119.248650][ T5845] usb 1-1: SerialNumber: syz [ 119.395510][ T6414] loop2: detected capacity change from 0 to 32768 [ 119.400644][ T6419] FAULT_INJECTION: forcing a failure. [ 119.400644][ T6419] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 119.418427][ T6419] CPU: 1 PID: 6419 Comm: syz.3.197 Not tainted syzkaller #0 [ 119.425781][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.435882][ T6419] Call Trace: [ 119.439211][ T6419] [ 119.442186][ T6419] dump_stack_lvl+0x18c/0x250 [ 119.446931][ T6419] ? show_regs_print_info+0x20/0x20 [ 119.452183][ T6419] ? load_image+0x420/0x420 [ 119.456753][ T6419] ? __lock_acquire+0x7d80/0x7d80 [ 119.461846][ T6419] should_fail_ex+0x394/0x4c0 [ 119.466593][ T6419] prepare_alloc_pages+0x1e1/0x5b0 [ 119.471770][ T6419] __alloc_pages+0x134/0x460 [ 119.476408][ T6419] ? zone_statistics+0x170/0x170 [ 119.481404][ T6419] ? __lock_acquire+0x7d80/0x7d80 [ 119.486489][ T6419] ? alloc_pages+0x4e1/0x740 [ 119.491134][ T6419] ? xas_load+0x12b/0x140 [ 119.491414][ T5845] kaweth 1-1:13.248: couldn't find required endpoints [ 119.495576][ T6419] folio_alloc+0x1e/0x30 [ 119.506629][ T6419] filemap_alloc_folio+0xdf/0x490 [ 119.511715][ T6419] ? filemap_add_folio+0x3d0/0x3d0 [ 119.516896][ T6419] __filemap_get_folio+0x3fb/0xbe0 [ 119.522073][ T6419] pagecache_get_page+0x2a/0x250 [ 119.527080][ T6419] aio_setup_ring+0x3b7/0xf30 [ 119.531826][ T6419] ? free_ioctx_reqs+0x190/0x190 [ 119.536408][ T5845] pegasus 1-1:13.248: Missing or invalid endpoints [ 119.536804][ T6419] ioctx_alloc+0x316/0x770 [ 119.547793][ T6419] __se_sys_io_setup+0x7b/0x190 [ 119.552712][ T6419] do_syscall_64+0x55/0xb0 [ 119.557354][ T6419] ? clear_bhb_loop+0x40/0x90 [ 119.562085][ T6419] ? clear_bhb_loop+0x40/0x90 [ 119.566817][ T6419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.571916][ T5845] usb 1-1: USB disconnect, device number 2 [ 119.572748][ T6419] RIP: 0033:0x7feb8c19e159 [ 119.583027][ T6419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.602691][ T6419] RSP: 002b:00007feb8cfea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 119.611179][ T6419] RAX: ffffffffffffffda RBX: 00007feb8c425fa0 RCX: 00007feb8c19e159 [ 119.619203][ T6419] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000007fff [ 119.627225][ T6419] RBP: 00007feb8c235024 R08: 0000000000000000 R09: 0000000000000000 [ 119.635261][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.643286][ T6419] R13: 00007feb8c426038 R14: 00007feb8c425fa0 R15: 00007ffda1bd9338 [ 119.651326][ T6419] [ 120.596125][ T27] audit: type=1326 audit(1788374177.730:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.3.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb8c19e159 code=0x0 [ 120.626836][ T5845] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.705784][ T6451] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 120.705988][ T6453] Invalid ELF header len 3 [ 120.832332][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.852779][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.867051][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.880485][ T5845] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 120.889743][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.900623][ T5845] usb 3-1: config 0 descriptor?? [ 121.092980][ T6462] loop1: detected capacity change from 0 to 512 [ 121.109592][ T6462] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.143155][ T6462] EXT4-fs (loop1): 1 truncate cleaned up [ 121.151081][ T6462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.210475][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.333747][ T5845] hid (null): bogus close delimiter [ 121.357922][ T5845] kye 0003:0458:5019.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 121.376705][ T5845] kye 0003:0458:5019.0002: bogus close delimiter [ 121.404376][ T5845] kye 0003:0458:5019.0002: item 0 0 2 10 parsing failed [ 121.426400][ T5845] kye 0003:0458:5019.0002: parse failed [ 121.440008][ T5845] kye: probe of 0003:0458:5019.0002 failed with error -22 [ 121.548377][ T6471] tipc: Started in network mode [ 121.561993][ T6471] tipc: Node identity 4, cluster identity 4711 [ 121.577686][ T6471] tipc: Node number set to 4 [ 121.609979][ T5845] usb 3-1: USB disconnect, device number 2 [ 122.392077][ T789] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.599377][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 122.613147][ T789] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.631839][ T789] usb 2-1: config 0 has no interface number 0 [ 122.648206][ T789] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 122.659153][ T6486] kvm: kvm [6485]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 122.670595][ T789] usb 2-1: config 0 interface 184 has no altsetting 0 [ 122.690310][ T789] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 122.708775][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.724528][ T789] usb 2-1: Product: syz [ 122.741316][ T789] usb 2-1: Manufacturer: syz [ 122.754624][ T789] usb 2-1: SerialNumber: syz [ 122.778606][ T789] usb 2-1: config 0 descriptor?? [ 122.807552][ T6482] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.831690][ T789] smsc75xx v1.0.0 [ 123.029612][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.228'. [ 123.086141][ T6482] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.968697][ T789] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 124.189516][ T789] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 124.223182][ T789] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 124.249282][ T789] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 124.265039][ T789] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 124.299981][ T789] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 124.353197][ T789] usb 2-1: USB disconnect, device number 3 [ 125.253734][ T6539] loop1: detected capacity change from 0 to 256 [ 125.467075][ T6543] loop2: detected capacity change from 0 to 512 [ 125.646225][ T6543] EXT4-fs (loop2): Test dummy encryption mode enabled [ 125.739537][ T6543] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.248: inode has both inline data and extents flags [ 125.806998][ T6543] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.248: couldn't read orphan inode 15 (err -117) [ 125.853637][ T6543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.186456][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.639950][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.753712][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.835322][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.869592][ T788] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 126.899513][ T788] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 126.919074][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.956656][ T788] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 126.970357][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 126.995123][ T8] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 126.995385][ T788] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 127.017896][ T8] usb 2-1: config 0 has no interface number 0 [ 127.032486][ T8] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 127.060850][ T8] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 127.095897][ T8] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 127.116230][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.133542][ T8] usb 2-1: Product: syz [ 127.143658][ T8] usb 2-1: Manufacturer: syz [ 127.158005][ T8] usb 2-1: SerialNumber: syz [ 127.190729][ T8] usb 2-1: config 0 descriptor?? [ 127.207260][ T6586] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 127.216710][ T6586] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 127.480066][ T6586] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 127.509421][ T6586] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 127.751951][ T8] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 127.803472][ T6618] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -110) [ 127.832098][ T6618] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 128.040977][ T6578] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 128.055106][ T789] usb 3-1: USB disconnect, device number 3 [ 128.137207][ T789] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 128.154711][ T789] spcp8x5 3-1:1.0: device disconnected [ 128.576214][ T8] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 128.596780][ T8] asix: probe of 2-1:0.34 failed with error -71 [ 128.618741][ T8] usb 2-1: USB disconnect, device number 4 [ 128.800430][ T6652] Bluetooth: ISO socket layer initialized [ 128.835872][ T6654] loop2: detected capacity change from 0 to 512 [ 128.860585][ T6654] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.930607][ T6654] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.273: corrupted in-inode xattr: e_value size too large [ 129.011444][ T6654] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.273: couldn't read orphan inode 15 (err -117) [ 129.065200][ T6654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.247587][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.587341][ T6672] loop0: detected capacity change from 0 to 512 [ 129.619419][ T789] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.646563][ T6672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.667679][ T6672] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.701647][ T6672] capability: warning: `syz.0.279' uses deprecated v2 capabilities in a way that may be insecure [ 129.776114][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.839432][ T789] usb 4-1: Using ep0 maxpacket: 32 [ 129.903490][ T789] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 129.928435][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.946746][ T789] usb 4-1: Product: syz [ 129.956396][ T789] usb 4-1: Manufacturer: syz [ 129.966947][ T789] usb 4-1: SerialNumber: syz [ 129.982602][ T789] usb 4-1: config 0 descriptor?? [ 130.215423][ T789] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 004 [ 130.658553][ T6702] syz.1.289 uses obsolete (PF_INET,SOCK_PACKET) [ 130.854336][ T788] usb 4-1: USB disconnect, device number 4 [ 130.855422][ T6705] syzkaller1: entered promiscuous mode [ 130.861551][ T6703] i2c i2c-1: failure sending STOP [ 130.872627][ T6705] syzkaller1: entered allmulticast mode [ 131.603415][ T6714] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 131.813198][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.841953][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.259879][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.266759][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.372604][ T6776] jffs2: notice: (6776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 133.746882][ T6764] loop3: detected capacity change from 0 to 32768 [ 133.763766][ T6764] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.304 (6764) [ 133.795321][ T6764] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 133.831458][ T6764] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 133.847686][ T6764] BTRFS info (device loop3): using free space tree [ 133.971078][ T6764] BTRFS info (device loop3): enabling ssd optimizations [ 134.030113][ T6764] BTRFS info (device loop3): auto enabling async discard [ 134.268465][ T6809] syz_tun: entered allmulticast mode [ 134.329639][ T6809] lo: entered allmulticast mode [ 134.350715][ T6809] lo: left allmulticast mode [ 134.357278][ T6808] syz_tun: left allmulticast mode [ 134.657089][ T5774] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 134.936188][ T789] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.171863][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.186604][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.208067][ T789] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.229335][ T789] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.251826][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.268377][ T789] usb 2-1: config 0 descriptor?? [ 135.632330][ T6846] loop0: detected capacity change from 0 to 128 [ 135.684001][ T6846] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 135.757349][ T789] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 135.778029][ T6846] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.812227][ T789] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 135.863952][ T6850] loop2: detected capacity change from 0 to 512 [ 135.884305][ T6850] EXT4-fs: Ignoring removed i_version option [ 135.911468][ T6850] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.014685][ T6850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.033290][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.248016][ T6857] loop5: detected capacity change from 0 to 7 [ 136.273625][ T6857] Dev loop5: unable to read RDB block 7 [ 136.281855][ T6857] loop5: unable to read partition table [ 136.287900][ T6857] loop5: partition table beyond EOD, truncated [ 136.306707][ T6857] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 136.367413][ T5140] Dev loop5: unable to read RDB block 7 [ 136.377807][ T5140] loop5: unable to read partition table [ 136.402735][ T5140] loop5: partition table beyond EOD, truncated [ 136.517064][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.854384][ T6869] loop2: detected capacity change from 0 to 4096 [ 136.901624][ T6869] NILFS (loop2): invalid segment: Checksum error in segment payload [ 136.917337][ T6869] NILFS (loop2): trying rollback from an earlier position [ 136.960502][ T6869] NILFS (loop2): recovery complete [ 136.986503][ T6873] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.255100][ C1] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 137.480914][ T6881] loop2: detected capacity change from 0 to 512 [ 137.498612][ T6881] EXT4-fs: Ignoring removed nobh option [ 137.501271][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.570430][ T6881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.622133][ T6881] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.784016][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.103542][ T789] usb 2-1: USB disconnect, device number 5 [ 138.219153][ T6895] syz.3.337 (6895) used greatest stack depth: 20008 bytes left [ 138.739666][ T6893] loop1: detected capacity change from 0 to 32768 [ 138.757202][ T6893] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.336 (6893) [ 138.812307][ T6893] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.845835][ T6893] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 138.863994][ T6893] BTRFS info (device loop1): setting nodatasum [ 138.874160][ T6887] loop0: detected capacity change from 0 to 40427 [ 138.882787][ T6893] BTRFS info (device loop1): force zlib compression, level 3 [ 138.923282][ T6893] BTRFS info (device loop1): turning on flush-on-commit [ 138.934954][ T6887] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 138.956839][ T6893] BTRFS info (device loop1): max_inline at 4096 [ 138.967387][ T6887] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 138.983446][ T6887] F2FS-fs (loop0): Image doesn't support compression [ 138.995000][ T6893] BTRFS info (device loop1): using free space tree [ 139.011677][ T6887] F2FS-fs (loop0): Image doesn't support compression [ 139.038041][ T6887] F2FS-fs (loop0): invalid crc value [ 139.165329][ T6893] BTRFS info (device loop1): enabling ssd optimizations [ 139.341735][ T6887] F2FS-fs (loop0): Start checkpoint disabled! [ 139.405808][ T6887] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 139.448555][ T6887] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 139.763439][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.111562][ T2966] kworker/u4:9: attempt to access beyond end of device [ 140.111562][ T2966] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.125774][ T42] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.191907][ T2966] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 140.263611][ T6941] netlink: 'syz.1.347': attribute type 10 has an invalid length. [ 140.290923][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.298467][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.363193][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.372491][ T42] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 140.382230][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.389490][ T6941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.390274][ T42] usb 3-1: can't read configurations, error -71 [ 140.398151][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.410397][ T6941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.461115][ T6941] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 141.615997][ T6966] netlink: 'syz.1.359': attribute type 25 has an invalid length. [ 141.637603][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 141.674260][ T6966] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.683959][ T6966] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.692817][ T6966] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.701619][ T6966] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.724628][ T6966] netlink: 'syz.1.359': attribute type 25 has an invalid length. [ 141.755583][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 143.008763][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 143.020931][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 143.607898][ T7018] netlink: 'syz.0.383': attribute type 12 has an invalid length. [ 144.015771][ T7029] loop1: detected capacity change from 0 to 128 [ 144.096916][ T7029] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.144952][ T7029] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.426766][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.568632][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 144.618332][ T7024] loop2: detected capacity change from 0 to 40427 [ 144.669247][ T7024] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64) [ 144.682509][ T7024] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 144.704732][ T7024] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 144.730332][ T7024] F2FS-fs (loop2): invalid crc value [ 144.772171][ T7024] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.958944][ T7024] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 144.976331][ T7024] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 144.989403][ T5846] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.189365][ T7024] syz.2.385: attempt to access beyond end of device [ 145.189365][ T7024] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.203630][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 145.236815][ T5846] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.259554][ T5846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.282892][ T5846] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.299325][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.316038][ T7024] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1d0/0x910 [ 145.317628][ T5846] usb 4-1: Product: syz [ 145.352667][ T5846] usb 4-1: Manufacturer: syz [ 145.357340][ T5846] usb 4-1: SerialNumber: syz [ 145.552495][ T5772] F2FS-fs (loop2): access invalid blkaddr:2816 [ 145.574179][ T5772] CPU: 0 PID: 5772 Comm: syz-executor Not tainted syzkaller #0 [ 145.581811][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.586049][ T5846] usb 4-1: 0:2 : does not exist [ 145.591881][ T5772] Call Trace: [ 145.591920][ T5772] [ 145.591930][ T5772] dump_stack_lvl+0x18c/0x250 [ 145.591966][ T5772] ? show_regs_print_info+0x20/0x20 [ 145.591987][ T5772] ? mark_lock+0x94/0x320 [ 145.592016][ T5772] ? __lock_acquire+0x1262/0x7d80 [ 145.615631][ T5846] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 145.617605][ T5772] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 145.635276][ T5772] f2fs_map_blocks+0xc20/0x4080 [ 145.640233][ T5772] ? f2fs_get_block_locked+0xe0/0xe0 [ 145.645576][ T5772] ? xa_load+0x64/0x2e0 [ 145.649802][ T5772] ? xa_load+0x64/0x2e0 [ 145.654004][ T5772] ? xa_load+0x2b7/0x2e0 [ 145.658287][ T5772] ? xa_load+0x64/0x2e0 [ 145.662489][ T5772] ? page_index+0xe6/0x480 [ 145.666966][ T5772] f2fs_mpage_readpages+0xa0b/0x1eb0 [ 145.672345][ T5772] ? detach_page_private+0x4d0/0x4d0 [ 145.677686][ T5772] ? __mod_lruvec_page_state+0xa5/0x410 [ 145.683266][ T5772] ? f2fs_readahead+0x167/0x2f0 [ 145.688131][ T5772] ? f2fs_dirty_data_folio+0x830/0x830 [ 145.693607][ T5772] read_pages+0x18b/0x860 [ 145.697949][ T5772] ? __lock_acquire+0x7d80/0x7d80 [ 145.702993][ T5772] ? page_cache_ra_unbounded+0x740/0x740 [ 145.708643][ T5772] ? folio_add_lru+0x323/0xce0 [ 145.713505][ T5772] ? folio_add_lru+0x512/0xce0 [ 145.718285][ T5772] ? filemap_add_folio+0x190/0x3d0 [ 145.723422][ T5772] page_cache_ra_unbounded+0x661/0x740 [ 145.728905][ T5772] f2fs_readdir+0x498/0x970 [ 145.733445][ T5772] ? f2fs_fill_dentries+0xbf0/0xbf0 [ 145.738669][ T5772] ? mutex_lock_nested+0x20/0x20 [ 145.743632][ T5772] ? iterate_dir+0xcb/0x590 [ 145.748158][ T5772] ? down_read_killable+0x1d0/0x340 [ 145.753370][ T5772] ? fsnotify_perm+0x271/0x5e0 [ 145.758177][ T5772] iterate_dir+0x1bd/0x590 [ 145.762636][ T5772] __se_sys_getdents64+0xf6/0x270 [ 145.767692][ T5772] ? __x64_sys_getdents64+0x80/0x80 [ 145.772922][ T5772] ? filldir+0x620/0x620 [ 145.777188][ T5772] ? lock_chain_count+0x20/0x20 [ 145.782059][ T5772] ? lockdep_hardirqs_on+0x98/0x150 [ 145.787284][ T5772] do_syscall_64+0x55/0xb0 [ 145.791801][ T5772] ? clear_bhb_loop+0x40/0x90 [ 145.796489][ T5772] ? clear_bhb_loop+0x40/0x90 [ 145.801180][ T5772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.807085][ T5772] RIP: 0033:0x7fa8fcbc6af3 [ 145.811534][ T5772] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 145.831166][ T5772] RSP: 002b:00007ffda8d028a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 145.839602][ T5772] RAX: ffffffffffffffda RBX: 00005555778f3a40 RCX: 00007fa8fcbc6af3 [ 145.847591][ T5772] RDX: 0000000000008000 RSI: 00005555778f3a70 RDI: 0000000000000005 [ 145.855579][ T5772] RBP: 00005555778f3a70 R08: 00007fa8fcdf2e20 R09: 0000000000000001 [ 145.863565][ T5772] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555778f3a44 [ 145.871549][ T5772] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffda8d04b50 [ 145.879640][ T5772] [ 145.935164][ T5846] usb 4-1: USB disconnect, device number 5 [ 145.943168][ T5772] F2FS-fs (loop2): access invalid blkaddr:2816 [ 145.967153][ T5772] CPU: 1 PID: 5772 Comm: syz-executor Not tainted syzkaller #0 [ 145.974777][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.984973][ T5772] Call Trace: [ 145.988291][ T5772] [ 145.991258][ T5772] dump_stack_lvl+0x18c/0x250 [ 145.995985][ T5772] ? show_regs_print_info+0x20/0x20 [ 146.001217][ T5772] ? mark_lock+0x94/0x320 [ 146.005587][ T5772] ? __lock_acquire+0x1262/0x7d80 [ 146.010665][ T5772] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 146.016087][ T5772] f2fs_map_blocks+0xc20/0x4080 [ 146.021033][ T5772] ? f2fs_get_block_locked+0xe0/0xe0 [ 146.026367][ T5772] ? xa_load+0x64/0x2e0 [ 146.030584][ T5772] ? xa_load+0x64/0x2e0 [ 146.034782][ T5772] ? xa_load+0x2b7/0x2e0 [ 146.039070][ T5772] ? xa_load+0x64/0x2e0 [ 146.043268][ T5772] ? page_index+0xe6/0x480 [ 146.047735][ T5772] f2fs_mpage_readpages+0xa0b/0x1eb0 [ 146.053097][ T5772] ? detach_page_private+0x4d0/0x4d0 [ 146.058431][ T5772] ? __mod_lruvec_page_state+0xa5/0x410 [ 146.064042][ T5772] ? f2fs_readahead+0x167/0x2f0 [ 146.068933][ T5772] ? f2fs_dirty_data_folio+0x830/0x830 [ 146.074426][ T5772] read_pages+0x18b/0x860 [ 146.078802][ T5772] ? __lock_acquire+0x7d80/0x7d80 [ 146.083911][ T5772] ? page_cache_ra_unbounded+0x740/0x740 [ 146.089594][ T5772] ? folio_add_lru+0x323/0xce0 [ 146.094411][ T5772] ? folio_add_lru+0x512/0xce0 [ 146.099224][ T5772] ? filemap_add_folio+0x190/0x3d0 [ 146.104388][ T5772] page_cache_ra_unbounded+0x661/0x740 [ 146.109913][ T5772] f2fs_readdir+0x498/0x970 [ 146.114489][ T5772] ? f2fs_fill_dentries+0xbf0/0xbf0 [ 146.119744][ T5772] ? mutex_lock_nested+0x20/0x20 [ 146.124739][ T5772] ? iterate_dir+0xcb/0x590 [ 146.129293][ T5772] ? down_read_killable+0x1d0/0x340 [ 146.136386][ T5772] ? fsnotify_perm+0x271/0x5e0 [ 146.141221][ T5772] iterate_dir+0x1bd/0x590 [ 146.145704][ T5772] __se_sys_getdents64+0xf6/0x270 [ 146.150796][ T5772] ? __x64_sys_getdents64+0x80/0x80 [ 146.156125][ T5772] ? filldir+0x620/0x620 [ 146.160565][ T5772] ? lock_chain_count+0x20/0x20 [ 146.165480][ T5772] ? lockdep_hardirqs_on+0x98/0x150 [ 146.170767][ T5772] do_syscall_64+0x55/0xb0 [ 146.175236][ T5772] ? clear_bhb_loop+0x40/0x90 [ 146.179956][ T5772] ? clear_bhb_loop+0x40/0x90 [ 146.184681][ T5772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.190614][ T5772] RIP: 0033:0x7fa8fcbc6af3 [ 146.195066][ T5772] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 146.214712][ T5772] RSP: 002b:00007ffda8d028a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 146.223185][ T5772] RAX: ffffffffffffffda RBX: 00005555778f3a40 RCX: 00007fa8fcbc6af3 [ 146.231205][ T5772] RDX: 0000000000008000 RSI: 00005555778f3a70 RDI: 0000000000000005 [ 146.239221][ T5772] RBP: 00005555778f3a70 R08: 00007fa8fcdf2e20 R09: 0000000000000001 [ 146.247240][ T5772] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555778f3a44 [ 146.255257][ T5772] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffda8d04b50 [ 146.263299][ T5772] [ 146.286037][ T5772] syz-executor: attempt to access beyond end of device [ 146.286037][ T5772] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 146.336410][ T6249] udevd[6249]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 146.562305][ T1138] kworker/u4:6: attempt to access beyond end of device [ 146.562305][ T1138] loop2: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 146.565473][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 146.576746][ T1138] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 146.594159][ T1138] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 146.601655][ T1138] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 146.608900][ T1138] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 146.616621][ T1138] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 147.062205][ T2966] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.080237][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 147.138936][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 147.148272][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 147.164898][ T7077] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.174840][ T7077] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.184145][ T7077] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.192995][ T7077] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.254473][ T2966] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.326957][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 147.337160][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 147.432148][ T2966] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.662782][ T2966] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.812103][ T7083] loop1: detected capacity change from 0 to 4096 [ 147.887693][ T7084] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.083168][ T7075] loop3: detected capacity change from 0 to 40427 [ 148.116943][ T7083] syz.1.409 (7083) used greatest stack depth: 19344 bytes left [ 148.124744][ T7075] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 148.150044][ T7075] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 148.173866][ T7075] F2FS-fs (loop3): invalid crc value [ 148.231668][ T7075] F2FS-fs (loop3): Found nat_bits in checkpoint [ 148.530897][ T7075] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 148.565196][ T7075] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 148.824902][ T7100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.414'. [ 149.103517][ T5774] syz-executor: attempt to access beyond end of device [ 149.103517][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.164800][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 149.548190][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.579962][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.599466][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.624738][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.645033][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.656226][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.890798][ T2176] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.036189][ T2966] hsr_slave_0: left promiscuous mode [ 151.051659][ T2966] hsr_slave_1: left promiscuous mode [ 151.058243][ T2966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.072018][ T2966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.082477][ T2966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.101859][ T2966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.111449][ T2176] usb 1-1: Using ep0 maxpacket: 8 [ 151.126783][ T2966] bridge_slave_1: left allmulticast mode [ 151.134494][ T2176] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.144335][ T2966] bridge_slave_1: left promiscuous mode [ 151.150116][ T2176] usb 1-1: config 179 has no interface number 0 [ 151.157710][ T2966] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.171036][ T2176] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 151.195932][ T2966] bridge_slave_0: left allmulticast mode [ 151.201973][ T2176] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 151.219351][ T2966] bridge_slave_0: left promiscuous mode [ 151.227099][ T2966] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.243756][ T2176] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.266602][ T2176] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 151.297828][ T2176] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.328420][ T2966] veth1_macvtap: left promiscuous mode [ 151.334903][ T2176] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.346169][ T2966] veth0_macvtap: left promiscuous mode [ 151.352081][ T2966] veth1_vlan: left promiscuous mode [ 151.357499][ T2176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.366890][ T2966] veth0_vlan: left promiscuous mode [ 151.378243][ T7139] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.731577][ T5778] Bluetooth: hci1: command tx timeout [ 151.749153][ T7150] loop3: detected capacity change from 0 to 40427 [ 151.861721][ T7150] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 151.872636][ T7150] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 151.916789][ T7150] F2FS-fs (loop3): Image doesn't support compression [ 151.926883][ T7150] F2FS-fs (loop3): Image doesn't support compression [ 151.945604][ T7150] F2FS-fs (loop3): invalid crc value [ 152.210412][ T7150] F2FS-fs (loop3): Start checkpoint disabled! [ 152.261160][ T7150] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 152.276555][ T7163] loop1: detected capacity change from 0 to 2048 [ 152.287495][ T7150] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 152.373093][ T7163] loop1: p3 < > p4 < > [ 152.377647][ T7163] loop1: partition table partially beyond EOD, truncated [ 152.439495][ T7163] loop1: p3 start 4284289 is beyond EOD, truncated [ 152.450567][ T5846] usb 1-1: USB disconnect, device number 3 [ 152.450567][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 152.465209][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 152.601042][ T7166] syz.3.426: attempt to access beyond end of device [ 152.601042][ T7166] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.738911][ T7168] loop1: detected capacity change from 0 to 256 [ 152.884619][ T7168] FAT-fs (loop1): Directory bread(block 64) failed [ 152.912270][ T1092] kworker/u4:5: attempt to access beyond end of device [ 152.912270][ T1092] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 152.926750][ T7168] FAT-fs (loop1): Directory bread(block 65) failed [ 152.939970][ T7168] FAT-fs (loop1): Directory bread(block 66) failed [ 152.947706][ T1092] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 152.948618][ T7168] FAT-fs (loop1): Directory bread(block 67) failed [ 152.965816][ T7168] FAT-fs (loop1): Directory bread(block 68) failed [ 152.995695][ T7168] FAT-fs (loop1): Directory bread(block 69) failed [ 153.009776][ T7168] FAT-fs (loop1): Directory bread(block 70) failed [ 153.019271][ T7168] FAT-fs (loop1): Directory bread(block 71) failed [ 153.026010][ T7168] FAT-fs (loop1): Directory bread(block 72) failed [ 153.047812][ T7168] FAT-fs (loop1): Directory bread(block 73) failed [ 153.349751][ T7168] syz.1.429: attempt to access beyond end of device [ 153.349751][ T7168] loop1: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 153.351907][ T2966] team0 (unregistering): Port device team_slave_1 removed [ 153.380069][ T7168] syz.1.429: attempt to access beyond end of device [ 153.380069][ T7168] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 153.443050][ T27] audit: type=1800 audit(1788374210.580:8): pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.429" name="file0" dev="loop1" ino=1048599 res=0 errno=0 [ 153.561452][ T2966] team0 (unregistering): Port device team_slave_0 removed [ 153.724712][ T2966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.806223][ T5778] Bluetooth: hci1: command tx timeout [ 153.865455][ T2966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.430625][ T2966] bond0 (unregistering): Released all slaves [ 154.612366][ T7115] chnl_net:caif_netlink_parms(): no params data found [ 154.982313][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.989708][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.997560][ T7115] bridge_slave_0: entered allmulticast mode [ 155.009083][ T789] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.026518][ T7115] bridge_slave_0: entered promiscuous mode [ 155.063429][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.083400][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.110055][ T7115] bridge_slave_1: entered allmulticast mode [ 155.123280][ T7115] bridge_slave_1: entered promiscuous mode [ 155.210622][ T789] usb 1-1: Using ep0 maxpacket: 16 [ 155.262452][ T789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.283161][ T7115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.292672][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.320693][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.333945][ T7115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.349310][ T789] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 155.390510][ T789] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.430438][ T789] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 155.457036][ T789] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 155.464405][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 155.475570][ T789] usb 1-1: Manufacturer: syz [ 155.506667][ T7207] hsr_slave_0: left promiscuous mode [ 155.511688][ T789] usb 1-1: config 0 descriptor?? [ 155.534071][ T7207] hsr_slave_1: left promiscuous mode [ 155.691381][ T7115] team0: Port device team_slave_0 added [ 155.718267][ T7115] team0: Port device team_slave_1 added [ 155.856216][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.872724][ T7215] loop1: detected capacity change from 0 to 4096 [ 155.879893][ T5778] Bluetooth: hci1: command tx timeout [ 155.899578][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.939408][ T789] rc_core: IR keymap rc-hauppauge not found [ 155.959820][ T789] Registered IR keymap rc-empty [ 155.965245][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.989606][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.017359][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.034369][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.069413][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.098008][ T7215] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 156.107381][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.122990][ T789] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 156.156650][ T789] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 156.197812][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.289702][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.338684][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.381212][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.450704][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.462881][ T7115] hsr_slave_0: entered promiscuous mode [ 156.490300][ T7115] hsr_slave_1: entered promiscuous mode [ 156.500446][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.550079][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.620045][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.661935][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.709499][ T789] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.750335][ T789] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 156.758418][ T789] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 156.835385][ T789] usb 1-1: USB disconnect, device number 4 [ 157.127620][ T7243] FAULT_INJECTION: forcing a failure. [ 157.127620][ T7243] name failslab, interval 1, probability 0, space 0, times 0 [ 157.170148][ T7243] CPU: 0 PID: 7243 Comm: syz.3.447 Not tainted syzkaller #0 [ 157.177524][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.187624][ T7243] Call Trace: [ 157.190948][ T7243] [ 157.193918][ T7243] dump_stack_lvl+0x18c/0x250 [ 157.198652][ T7243] ? show_regs_print_info+0x20/0x20 [ 157.203905][ T7243] ? load_image+0x420/0x420 [ 157.208449][ T7243] ? __might_sleep+0xe0/0xe0 [ 157.213089][ T7243] ? __lock_acquire+0x7d80/0x7d80 [ 157.218167][ T7243] should_fail_ex+0x394/0x4c0 [ 157.222903][ T7243] should_failslab+0x9/0x20 [ 157.227629][ T7243] slab_pre_alloc_hook+0x59/0x300 [ 157.232710][ T7243] kmem_cache_alloc+0x5a/0x2c0 [ 157.237537][ T7243] ? sk_prot_alloc+0x57/0x210 [ 157.242393][ T7243] sk_prot_alloc+0x57/0x210 [ 157.246959][ T7243] ? sk_alloc+0x24/0x350 [ 157.251355][ T7243] sk_alloc+0x3a/0x350 [ 157.255570][ T7243] __smc_create+0xf7/0x260 [ 157.260040][ T7243] __sock_create+0x49e/0x940 [ 157.264861][ T7243] __sys_socket+0xd7/0x1b0 [ 157.269334][ T7243] __x64_sys_socket+0x7a/0x90 [ 157.274053][ T7243] do_syscall_64+0x55/0xb0 [ 157.278510][ T7243] ? clear_bhb_loop+0x40/0x90 [ 157.283233][ T7243] ? clear_bhb_loop+0x40/0x90 [ 157.287976][ T7243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.293930][ T7243] RIP: 0033:0x7feb8c19e159 [ 157.298393][ T7243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.318053][ T7243] RSP: 002b:00007feb8cfea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 157.326528][ T7243] RAX: ffffffffffffffda RBX: 00007feb8c425fa0 RCX: 00007feb8c19e159 [ 157.334567][ T7243] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 157.342587][ T7243] RBP: 00007feb8c235024 R08: 0000000000000000 R09: 0000000000000000 [ 157.350609][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.358624][ T7243] R13: 00007feb8c426038 R14: 00007feb8c425fa0 R15: 00007ffda1bd9338 [ 157.366657][ T7243] [ 157.416918][ T7115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.436927][ T7115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.449673][ T7115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.480321][ T7115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.783555][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.807652][ T7115] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.871051][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.878226][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.914865][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.922108][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.963637][ T5778] Bluetooth: hci1: command tx timeout [ 157.974915][ T7264] warning: `syz.0.454' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.030771][ T7267] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 158.051985][ T7115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.064176][ T7267] overlayfs: failed to set xattr on upper [ 158.065370][ T7115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.080027][ T7267] overlayfs: ...falling back to index=off. [ 158.101768][ T7267] overlayfs: ...falling back to uuid=null. [ 158.107787][ T7267] overlayfs: conflicting lowerdir path [ 158.685966][ T7285] loop0: detected capacity change from 0 to 512 [ 158.784302][ T7285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.814640][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.836542][ T7285] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.121740][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.410088][ T7297] loop3: detected capacity change from 0 to 8192 [ 159.514760][ T27] audit: type=1800 audit(1788374216.650:9): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.459" name="bus" dev="loop3" ino=1048601 res=0 errno=0 [ 160.115226][ T7115] veth0_vlan: entered promiscuous mode [ 160.238010][ T7115] veth1_vlan: entered promiscuous mode [ 160.273926][ T7321] syz.0.464 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 160.295679][ T7321] CPU: 1 PID: 7321 Comm: syz.0.464 Not tainted syzkaller #0 [ 160.303052][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.313153][ T7321] Call Trace: [ 160.316462][ T7321] [ 160.319400][ T7321] dump_stack_lvl+0x18c/0x250 [ 160.324091][ T7321] ? show_regs_print_info+0x20/0x20 [ 160.329311][ T7321] ? load_image+0x420/0x420 [ 160.333851][ T7321] ? ___ratelimit+0x478/0x610 [ 160.338594][ T7321] ? radix_tree_cpu_dead+0x160/0x160 [ 160.343942][ T7321] dump_header+0xd8/0x820 [ 160.348325][ T7321] oom_kill_process+0x390/0x580 [ 160.353235][ T7321] out_of_memory+0xe0e/0x1200 [ 160.357984][ T7321] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 160.363689][ T7321] ? mutex_lock_nested+0x20/0x20 [ 160.368698][ T7321] ? unregister_oom_notifier+0x20/0x20 [ 160.374221][ T7321] mem_cgroup_out_of_memory+0x2c2/0x390 [ 160.379837][ T7321] ? try_charge_memcg+0xc91/0x17c0 [ 160.385017][ T7321] ? drain_local_stock+0x630/0x630 [ 160.390193][ T7321] ? do_raw_spin_unlock+0x121/0x230 [ 160.395454][ T7321] try_charge_memcg+0xca1/0x17c0 [ 160.400464][ T7321] ? folio_flags+0x120/0x120 [ 160.405079][ T7321] ? percpu_ref_tryget+0x15/0x180 [ 160.410122][ T7321] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 160.415899][ T7321] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 160.421919][ T7321] ? percpu_ref_tryget+0x15/0x180 [ 160.426979][ T7321] ? percpu_ref_tryget+0x15/0x180 [ 160.432029][ T7321] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 160.437871][ T7321] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 160.443619][ T7321] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 160.449453][ T7321] obj_cgroup_charge+0x36e/0x630 [ 160.454406][ T7321] ? get_obj_cgroup_from_current+0xd4/0x280 [ 160.460335][ T7321] ? obj_cgroup_charge+0xed/0x630 [ 160.465464][ T7321] ? mod_objcg_mlstate+0x320/0x320 [ 160.470589][ T7321] ? percpu_ref_tryget+0x15/0x180 [ 160.475634][ T7321] ? get_obj_cgroup_from_current+0xd4/0x280 [ 160.481538][ T7321] ? get_obj_cgroup_from_current+0xd4/0x280 [ 160.487454][ T7321] slab_pre_alloc_hook+0x2e2/0x300 [ 160.492595][ T7321] ? kvmalloc_node+0x70/0x180 [ 160.497293][ T7321] ? kvmalloc_node+0x70/0x180 [ 160.501987][ T7321] __kmem_cache_alloc_node+0x53/0x250 [ 160.507389][ T7321] ? kvmalloc_node+0x70/0x180 [ 160.512090][ T7321] __kmalloc_node+0xa6/0x240 [ 160.516706][ T7321] ? stat_open+0xc0/0xc0 [ 160.521142][ T7321] kvmalloc_node+0x70/0x180 [ 160.525678][ T7321] single_open_size+0x4b/0x110 [ 160.530459][ T7321] do_dentry_open+0x880/0x14b0 [ 160.535247][ T7321] ? proc_reg_mmap+0x290/0x290 [ 160.540034][ T7321] path_openat+0x284f/0x3270 [ 160.544875][ T7321] ? do_filp_open+0x430/0x430 [ 160.549596][ T7321] do_filp_open+0x1f2/0x430 [ 160.554122][ T7321] ? vfs_tmpfile+0x620/0x620 [ 160.558748][ T7321] ? _raw_spin_unlock+0x28/0x40 [ 160.563624][ T7321] ? alloc_fd+0x590/0x640 [ 160.567981][ T7321] do_sys_openat2+0x134/0x1d0 [ 160.572685][ T7321] ? do_sys_open+0xe0/0xe0 [ 160.577207][ T7321] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 160.583204][ T7321] ? lock_chain_count+0x20/0x20 [ 160.588075][ T7321] __x64_sys_openat+0x139/0x160 [ 160.592949][ T7321] do_syscall_64+0x55/0xb0 [ 160.597387][ T7321] ? clear_bhb_loop+0x40/0x90 [ 160.602079][ T7321] ? clear_bhb_loop+0x40/0x90 [ 160.606773][ T7321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.612681][ T7321] RIP: 0033:0x7f2eec39e159 [ 160.617115][ T7321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.636756][ T7321] RSP: 002b:00007f2eed2b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 160.645204][ T7321] RAX: ffffffffffffffda RBX: 00007f2eec625fa0 RCX: 00007f2eec39e159 [ 160.653199][ T7321] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 160.661184][ T7321] RBP: 00007f2eec435024 R08: 0000000000000000 R09: 0000000000000000 [ 160.669425][ T7321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.677665][ T7321] R13: 00007f2eec626038 R14: 00007f2eec625fa0 R15: 00007ffc0e39d938 [ 160.685671][ T7321] [ 160.700919][ T7321] memory: usage 4kB, limit 8kB, failcnt 20 [ 160.706819][ T7321] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 160.718346][ T7321] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 160.769300][ T7321] Memory cgroup stats for /syz0/test: [ 160.769824][ T7321] cache 0 [ 160.778218][ T7321] rss 0 [ 160.789559][ T7321] rss_huge 0 [ 160.840804][ T7321] shmem 0 [ 160.843964][ T7321] mapped_file 0 [ 160.847469][ T7321] dirty 0 [ 160.872528][ T7321] writeback 0 [ 160.885364][ T7321] workingset_refault_anon 0 [ 160.898896][ T7321] workingset_refault_file 0 [ 160.909027][ T7321] swap 0 [ 160.910218][ T27] audit: type=1804 audit(1788374218.040:10): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.467" name="/newroot/136/file0/file1" dev="overlay" ino=738 res=1 errno=0 [ 160.919896][ T7321] pgpgin 0 [ 160.936049][ T7115] veth0_macvtap: entered promiscuous mode [ 160.981595][ T7115] veth1_macvtap: entered promiscuous mode [ 160.995000][ T7321] pgpgout 0 [ 161.010202][ T7321] pgfault 2 [ 161.079975][ T7321] pgmajfault 0 [ 161.083428][ T7321] inactive_anon 0 [ 161.087095][ T7321] active_anon 0 [ 161.095753][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.120774][ T7321] inactive_file 0 [ 161.124500][ T7321] active_file 0 [ 161.127998][ T7321] unevictable 0 [ 161.138368][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.159788][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.189354][ T7321] hierarchical_memory_limit 8192 [ 161.194402][ T7321] hierarchical_memsw_limit 9223372036854771712 [ 161.208032][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.230997][ T7334] overlayfs: invalid redirect ((null)) [ 161.238929][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.259515][ T7321] total_cache 0 [ 161.263046][ T7321] total_rss 0 [ 161.266374][ T7321] total_rss_huge 0 [ 161.288080][ T7321] total_shmem 0 [ 161.303935][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.349885][ T7321] total_mapped_file 0 [ 161.353956][ T7321] total_dirty 0 [ 161.357458][ T7321] total_writeback 0 [ 161.361528][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.379351][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.390064][ T7321] total_workingset_refault_anon 0 [ 161.395137][ T7321] total_workingset_refault_file 0 [ 161.415438][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.425444][ T7321] total_swap 0 [ 161.428869][ T7321] total_pgpgin 0 [ 161.439234][ T7321] total_pgpgout 0 [ 161.442947][ T7321] total_pgfault 2 [ 161.460212][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.470138][ T7321] total_pgmajfault 0 [ 161.474095][ T7321] total_inactive_anon 0 [ 161.492374][ T7115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.502817][ T7321] total_active_anon 0 [ 161.511634][ T7321] total_inactive_file 0 [ 161.515877][ T7321] total_active_file 0 [ 161.531238][ T7115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.544723][ T7321] total_unevictable 0 [ 161.548777][ T7321] anon_cost 0 [ 161.557246][ T7115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.570633][ T7321] file_cost 0 [ 161.573997][ T7321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.464,pid=7320,uid=0 [ 161.594684][ T7115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.625687][ T7321] Memory cgroup out of memory: Killed process 7321 (syz.0.464) total-vm:104292kB, anon-rss:1244kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 161.963755][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.996917][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.100897][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 162.186455][ T7357] input: syz1 as /devices/virtual/input/input8 [ 162.246250][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.269415][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.446915][ T7363] loop3: detected capacity change from 0 to 1024 [ 164.150627][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.159504][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.864429][ T7397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.897919][ T7397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.262033][ T7397] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.271645][ T7397] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.280617][ T7397] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.289660][ T7397] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.384362][ T7401] netlink: 27 bytes leftover after parsing attributes in process `syz.3.488'. [ 166.244731][ T7464] veth1_to_bridge: entered allmulticast mode [ 166.275364][ T7464] veth1_to_bridge: left allmulticast mode [ 166.540843][ T7415] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.739658][ T7415] usb 4-1: Using ep0 maxpacket: 16 [ 166.790101][ T7415] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 166.832668][ T7415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.849579][ T7415] usb 4-1: Product: syz [ 166.862328][ T7415] usb 4-1: Manufacturer: syz [ 166.879360][ T7415] usb 4-1: SerialNumber: syz [ 166.913941][ T7415] usb 4-1: config 0 descriptor?? [ 166.948159][ T7415] usb 4-1: selecting invalid altsetting 1 [ 166.954352][ T7415] technisat-usb2: could not set alternate setting to 0 [ 167.470615][ T7415] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 167.556083][ T7415] usb 4-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 167.570317][ T7485] loop0: detected capacity change from 0 to 512 [ 167.576444][ T7415] usb 4-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 167.613502][ T7485] EXT4-fs (loop0): orphan cleanup on readonly fs [ 167.633377][ T7485] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #4: comm syz.0.505: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 167.755185][ T7485] EXT4-fs error (device loop0): ext4_quota_enable:7147: comm syz.0.505: Bad quota inode: 4, type: 1 [ 167.799987][ T7485] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 167.861447][ T7485] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 167.885080][ T7485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.072377][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.887999][ T7490] loop1: detected capacity change from 0 to 40427 [ 168.905477][ T7490] F2FS-fs (loop1): invalid crc value [ 168.921490][ T7490] F2FS-fs (loop1): Found nat_bits in checkpoint [ 169.061233][ T7490] F2FS-fs (loop1): Start checkpoint disabled! [ 169.122845][ T7490] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 169.161430][ T27] audit: type=1326 audit(1788374226.300:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.0.513" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2eec39e159 code=0x0 [ 169.326573][ T7490] syz.1.506: attempt to access beyond end of device [ 169.326573][ T7490] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 169.348091][ T7519] syz.1.506: attempt to access beyond end of device [ 169.348091][ T7519] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.506678][ T1138] kworker/u4:6: attempt to access beyond end of device [ 169.506678][ T1138] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 169.522664][ T1138] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 169.534875][ T1138] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 171.399558][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 171.683951][ T7562] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 171.859306][ T7418] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.890217][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 172.060202][ T7418] usb 2-1: Using ep0 maxpacket: 32 [ 172.071749][ T7418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.109601][ T7418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.139302][ T7418] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.165529][ T7418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.205660][ T7418] usb 2-1: config 0 descriptor?? [ 172.226678][ T7418] hub 2-1:0.0: USB hub found [ 172.295620][ T7571] Invalid argument reading file caps for ./file0 [ 172.402043][ T7573] loop0: detected capacity change from 0 to 16 [ 172.423382][ T7573] erofs: (device loop0): mounted with root inode @ nid 36. [ 172.442307][ T7418] hub 2-1:0.0: 1 port detected [ 172.517385][ T5778] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 172.532980][ T7573] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 173.077586][ T7418] hub 2-1:0.0: activate --> -90 [ 173.503229][ T7409] usb 2-1: USB disconnect, device number 6 [ 174.213118][ T7588] syz.1.538 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 174.228130][ T7588] CPU: 1 PID: 7588 Comm: syz.1.538 Not tainted syzkaller #0 [ 174.235577][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.242505][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 174.245651][ T7588] Call Trace: [ 174.245663][ T7588] [ 174.260799][ T7588] dump_stack_lvl+0x18c/0x250 [ 174.265545][ T7588] ? show_regs_print_info+0x20/0x20 [ 174.270893][ T7588] ? load_image+0x420/0x420 [ 174.275437][ T7588] ? ___ratelimit+0x478/0x610 [ 174.280181][ T7588] ? radix_tree_cpu_dead+0x160/0x160 [ 174.285520][ T7588] dump_header+0xd8/0x820 [ 174.289904][ T7588] oom_kill_process+0x390/0x580 [ 174.294826][ T7588] out_of_memory+0xe0e/0x1200 [ 174.299574][ T7588] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 174.305253][ T7588] ? print_unlock_imbalance_bug+0x160/0x160 [ 174.311284][ T7588] ? mutex_lock_nested+0x20/0x20 [ 174.316281][ T7588] ? unregister_oom_notifier+0x20/0x20 [ 174.321818][ T7588] mem_cgroup_out_of_memory+0x2c2/0x390 [ 174.327516][ T7588] ? try_charge_memcg+0xc91/0x17c0 [ 174.332673][ T7588] ? drain_local_stock+0x630/0x630 [ 174.337816][ T7588] ? do_raw_spin_unlock+0x121/0x230 [ 174.343040][ T7588] try_charge_memcg+0xca1/0x17c0 [ 174.348101][ T7588] ? folio_flags+0x120/0x120 [ 174.352706][ T7588] ? percpu_ref_tryget+0x15/0x180 [ 174.357772][ T7588] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 174.363622][ T7588] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 174.369636][ T7588] ? percpu_ref_tryget+0x15/0x180 [ 174.374708][ T7588] ? percpu_ref_tryget+0x15/0x180 [ 174.379778][ T7588] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 174.385578][ T7588] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 174.391416][ T7588] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 174.397257][ T7588] obj_cgroup_charge+0x36e/0x630 [ 174.402240][ T7588] ? get_obj_cgroup_from_current+0xd4/0x280 [ 174.408155][ T7588] ? obj_cgroup_charge+0xed/0x630 [ 174.413206][ T7588] ? mod_objcg_mlstate+0x320/0x320 [ 174.418344][ T7588] ? percpu_ref_tryget+0x15/0x180 [ 174.423397][ T7588] ? get_obj_cgroup_from_current+0xd4/0x280 [ 174.429318][ T7588] ? get_obj_cgroup_from_current+0xd4/0x280 [ 174.435558][ T7588] slab_pre_alloc_hook+0x2e2/0x300 [ 174.440717][ T7588] ? kvmalloc_node+0x70/0x180 [ 174.445424][ T7588] ? kvmalloc_node+0x70/0x180 [ 174.450130][ T7588] __kmem_cache_alloc_node+0x53/0x250 [ 174.455629][ T7588] ? kvmalloc_node+0x70/0x180 [ 174.460326][ T7588] __kmalloc_node+0xa6/0x240 [ 174.464934][ T7588] ? stat_open+0xc0/0xc0 [ 174.469208][ T7588] kvmalloc_node+0x70/0x180 [ 174.473768][ T7588] single_open_size+0x4b/0x110 [ 174.478638][ T7588] do_dentry_open+0x880/0x14b0 [ 174.483424][ T7588] ? proc_reg_mmap+0x290/0x290 [ 174.488212][ T7588] path_openat+0x284f/0x3270 [ 174.492860][ T7588] ? do_filp_open+0x430/0x430 [ 174.497569][ T7588] do_filp_open+0x1f2/0x430 [ 174.502090][ T7588] ? vfs_tmpfile+0x620/0x620 [ 174.506713][ T7588] ? _raw_spin_unlock+0x28/0x40 [ 174.511575][ T7588] ? alloc_fd+0x590/0x640 [ 174.515932][ T7588] do_sys_openat2+0x134/0x1d0 [ 174.520676][ T7588] ? do_sys_open+0xe0/0xe0 [ 174.525286][ T7588] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 174.531304][ T7588] ? lock_chain_count+0x20/0x20 [ 174.536176][ T7588] __x64_sys_openat+0x139/0x160 [ 174.541046][ T7588] do_syscall_64+0x55/0xb0 [ 174.545473][ T7588] ? clear_bhb_loop+0x40/0x90 [ 174.550183][ T7588] ? clear_bhb_loop+0x40/0x90 [ 174.554967][ T7588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.560886][ T7588] RIP: 0033:0x7f1e7e79e159 [ 174.565320][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.584945][ T7588] RSP: 002b:00007f1e7f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 174.593461][ T7588] RAX: ffffffffffffffda RBX: 00007f1e7ea25fa0 RCX: 00007f1e7e79e159 [ 174.601446][ T7588] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 174.609712][ T7588] RBP: 00007f1e7e835024 R08: 0000000000000000 R09: 0000000000000000 [ 174.617694][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.625677][ T7588] R13: 00007f1e7ea26038 R14: 00007f1e7ea25fa0 R15: 00007ffd189bd128 [ 174.633702][ T7588] [ 174.636808][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.715132][ T7588] memory: usage 4kB, limit 8kB, failcnt 20 [ 174.739411][ T7588] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 174.747120][ T7588] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 174.793732][ T7588] Memory cgroup stats for /syz1/test: [ 174.793997][ T7588] cache 0 [ 174.834439][ T7588] rss 0 [ 174.837450][ T7588] rss_huge 0 [ 174.861669][ T7588] shmem 0 [ 174.884258][ T7588] mapped_file 0 [ 174.908950][ T7588] dirty 0 [ 174.912349][ T7588] writeback 0 [ 174.915772][ T7588] workingset_refault_anon 0 [ 174.938096][ T7588] workingset_refault_file 0 [ 174.954198][ T7588] swap 0 [ 174.959615][ T7588] pgpgin 0 [ 174.968142][ T7588] pgpgout 0 [ 174.979362][ T7588] pgfault 3 [ 174.993950][ T7588] pgmajfault 0 [ 175.034060][ T7588] inactive_anon 0 [ 175.037786][ T7588] active_anon 0 [ 175.063731][ T7588] inactive_file 0 [ 175.067461][ T7588] active_file 0 [ 175.084268][ T7588] unevictable 0 [ 175.087889][ T7588] hierarchical_memory_limit 8192 [ 175.124292][ T7588] hierarchical_memsw_limit 9223372036854771712 [ 175.136520][ T7588] total_cache 0 [ 175.147184][ T7588] total_rss 0 [ 175.150916][ T7588] total_rss_huge 0 [ 175.154780][ T7588] total_shmem 0 [ 175.158413][ T7588] total_mapped_file 0 [ 175.165268][ T7588] total_dirty 0 [ 175.172808][ T7588] total_writeback 0 [ 175.176753][ T7588] total_workingset_refault_anon 0 [ 175.184000][ T7588] total_workingset_refault_file 0 [ 175.189163][ T7588] total_swap 0 [ 175.197589][ T7588] total_pgpgin 0 [ 175.211823][ T7588] total_pgpgout 0 [ 175.223421][ T7588] total_pgfault 3 [ 175.231193][ T7588] total_pgmajfault 0 [ 175.249518][ T7588] total_inactive_anon 0 [ 175.253982][ T7588] total_active_anon 0 [ 175.254413][ T7604] FAULT_INJECTION: forcing a failure. [ 175.254413][ T7604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.258141][ T7588] total_inactive_file 0 [ 175.282299][ T7588] total_active_file 0 [ 175.285451][ T7604] CPU: 1 PID: 7604 Comm: syz.3.544 Not tainted syzkaller #0 [ 175.286601][ T7588] total_unevictable 0 [ 175.293774][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.293790][ T7604] Call Trace: [ 175.293798][ T7604] [ 175.293808][ T7604] dump_stack_lvl+0x18c/0x250 [ 175.293844][ T7604] ? show_regs_print_info+0x20/0x20 [ 175.293868][ T7604] ? load_image+0x420/0x420 [ 175.293892][ T7604] ? __lock_acquire+0x7d80/0x7d80 [ 175.293924][ T7604] should_fail_ex+0x394/0x4c0 [ 175.293960][ T7604] prepare_alloc_pages+0x1e1/0x5b0 [ 175.293993][ T7604] __alloc_pages+0x134/0x460 [ 175.294019][ T7604] ? zone_statistics+0x170/0x170 [ 175.294051][ T7604] ? alloc_pages+0x4e1/0x740 [ 175.294080][ T7604] nvme_init_ctrl+0x75c/0xd30 [ 175.294112][ T7604] nvme_loop_create_ctrl+0x1cc/0xb40 [ 175.294153][ T7604] nvmf_dev_write+0x2383/0x2b50 [ 175.294214][ T7604] ? nvmf_host_put+0x190/0x190 [ 175.294235][ T7604] ? aa_file_perm+0x11b/0xee0 [ 175.294262][ T7604] ? futex_wait_queue+0x138/0x1b0 [ 175.301304][ T7588] anon_cost 0 [ 175.308352][ T7604] ? common_file_perm+0x198/0x1f0 [ 175.312061][ T7588] file_cost 0 [ 175.314582][ T7604] ? fsnotify_perm+0x5d/0x5e0 [ 175.314612][ T7604] ? security_file_permission+0x79/0xa0 [ 175.319743][ T7588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 175.324481][ T7604] ? nvmf_host_put+0x190/0x190 [ 175.324510][ T7604] vfs_write+0x299/0x9a0 [ 175.329113][ T7588] ,cpuset= [ 175.334056][ T7604] ? file_end_write+0x250/0x250 [ 175.334100][ T7604] ? __fget_files+0x28/0x460 [ 175.334130][ T7604] ? __fget_files+0x3fc/0x460 [ 175.334165][ T7604] ? __fdget_pos+0x1d8/0x330 [ 175.334191][ T7604] ? ksys_write+0x74/0x260 [ 175.334220][ T7604] ksys_write+0x151/0x260 [ 175.334253][ T7604] ? __ia32_sys_read+0x90/0x90 [ 175.334287][ T7604] ? lockdep_hardirqs_on+0x98/0x150 [ 175.334322][ T7604] do_syscall_64+0x55/0xb0 [ 175.334344][ T7604] ? clear_bhb_loop+0x40/0x90 [ 175.334369][ T7604] ? clear_bhb_loop+0x40/0x90 [ 175.334394][ T7604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.334419][ T7604] RIP: 0033:0x7feb8c19e159 [ 175.334441][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.334459][ T7604] RSP: 002b:00007feb8cfea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.334486][ T7604] RAX: ffffffffffffffda RBX: 00007feb8c425fa0 RCX: 00007feb8c19e159 [ 175.334503][ T7604] RDX: 0000000000000014 RSI: 0000200000000400 RDI: 0000000000000004 [ 175.334517][ T7604] RBP: 00007feb8c235024 R08: 0000000000000000 R09: 0000000000000000 [ 175.334531][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.334544][ T7604] R13: 00007feb8c426038 R14: 00007feb8c425fa0 R15: 00007ffda1bd9338 [ 175.334578][ T7604] [ 175.334691][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.357485][ T7588] test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.538,pid=7587,uid=0 [ 175.677465][ T7588] Memory cgroup out of memory: Killed process 7588 (syz.1.538) total-vm:104292kB, anon-rss:1376kB, file-rss:22528kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 177.115335][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 177.200995][ T7634] netlink: 60 bytes leftover after parsing attributes in process `syz.1.555'. [ 179.004075][ T7686] loop1: detected capacity change from 0 to 256 [ 179.039789][ T7686] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.376223][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 182.429396][ T7773] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 182.429396][ T7773] Q&|x [ 183.218359][ T7798] loop1: detected capacity change from 0 to 512 [ 183.323121][ T7798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.520332][ T7797] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.594: bg 0: block 67: padding at end of block bitmap is not set [ 183.584741][ T7797] EXT4-fs (loop1): Remounting filesystem read-only [ 183.591829][ T7797] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -5) [ 183.700529][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.180732][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.204360][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.227945][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.244253][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.252589][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 184.262445][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.738500][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 184.769126][ T7835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.602'. [ 185.033290][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 185.049439][ T7835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.602'. [ 186.035450][ T7821] chnl_net:caif_netlink_parms(): no params data found [ 186.370526][ T5778] Bluetooth: hci4: command tx timeout [ 186.565148][ T7871] device-mapper: ioctl: name not supplied when creating device [ 186.768230][ T7821] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.840378][ T7821] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.847665][ T7821] bridge_slave_0: entered allmulticast mode [ 186.917400][ T7821] bridge_slave_0: entered promiscuous mode [ 187.165886][ T7821] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.173565][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.198997][ T7821] bridge_slave_1: entered allmulticast mode [ 187.213124][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.229378][ T7821] bridge_slave_1: entered promiscuous mode [ 187.420919][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 187.435052][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.453999][ T9] usb 2-1: config 0 has no interface number 0 [ 187.471032][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.507506][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.533598][ T7821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.537481][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.610187][ T9] usb 2-1: config 0 descriptor?? [ 187.638781][ T27] audit: type=1326 audit(1788374244.760:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eec39e159 code=0x7ffc0000 [ 187.697236][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 187.729995][ T27] audit: type=1326 audit(1788374244.770:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eec39e159 code=0x7ffc0000 [ 187.827909][ T27] audit: type=1326 audit(1788374244.770:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eec39e159 code=0x7ffc0000 [ 187.841543][ T7821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.957773][ T27] audit: type=1326 audit(1788374244.770:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2eec39e159 code=0x7ffc0000 [ 187.978133][ T2176] usb 2-1: USB disconnect, device number 7 [ 187.981969][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 188.088049][ T27] audit: type=1326 audit(1788374244.820:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eec35e98e code=0x7ffc0000 [ 188.136009][ T27] audit: type=1326 audit(1788374244.840:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eec35e98e code=0x7ffc0000 [ 188.226632][ T27] audit: type=1326 audit(1788374244.840:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eec35e98e code=0x7ffc0000 [ 188.263306][ T7821] team0: Port device team_slave_0 added [ 188.309571][ T27] audit: type=1326 audit(1788374244.840:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eec35e98e code=0x7ffc0000 [ 188.415490][ T27] audit: type=1326 audit(1788374244.840:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eec35e98e code=0x7ffc0000 [ 188.439911][ T5778] Bluetooth: hci4: command tx timeout [ 188.518726][ T27] audit: type=1326 audit(1788374244.840:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2eec35e98e code=0x7ffc0000 [ 188.547930][ T7821] team0: Port device team_slave_1 added [ 188.812349][ T7409] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 188.867541][ T7409] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.003783][ T7821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.039266][ T7821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.097401][ T7821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.131762][ T7821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.156514][ T7821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.235144][ T7821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.756141][ T7821] hsr_slave_0: entered promiscuous mode [ 189.829973][ T7821] hsr_slave_1: entered promiscuous mode [ 189.861814][ T7821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.869852][ T7821] Cannot create hsr debugfs directory [ 190.207773][ T49] hsr_slave_0: left promiscuous mode [ 190.299543][ T49] hsr_slave_1: left promiscuous mode [ 190.364842][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.419524][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.429808][ T7928] loop5: detected capacity change from 0 to 7 [ 190.458816][ T7928] Dev loop5: unable to read RDB block 7 [ 190.459335][ T49] bridge_slave_1: left allmulticast mode [ 190.466322][ T7928] loop5: AHDI p1 p2 p3 [ 190.477433][ T7928] loop5: partition table partially beyond EOD, truncated [ 190.479711][ T49] bridge_slave_1: left promiscuous mode [ 190.509804][ T7928] loop5: p1 start 5472580 is beyond EOD, truncated [ 190.519831][ T5778] Bluetooth: hci4: command tx timeout [ 190.538795][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.553683][ T7928] loop5: p2 start 167772160 is beyond EOD, truncated [ 190.568435][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 190.589932][ T49] bridge_slave_0: left allmulticast mode [ 190.595655][ T49] bridge_slave_0: left promiscuous mode [ 190.640977][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.559382][ T2176] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 191.796408][ T2176] usb 2-1: Using ep0 maxpacket: 8 [ 191.816252][ T2176] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 191.839396][ T2176] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.869622][ T2176] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.899109][ T2176] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.932278][ T2176] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.989380][ T2176] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.011935][ T2176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.264963][ T2176] usb 2-1: usb_control_msg returned -32 [ 192.274544][ T2176] usbtmc 2-1:16.0: can't read capabilities [ 192.528033][ T49] team0 (unregistering): Port device team_slave_1 removed [ 192.585735][ T49] team0 (unregistering): Port device team_slave_0 removed [ 192.604905][ T5778] Bluetooth: hci4: command tx timeout [ 192.643590][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.706513][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.087730][ T7956] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 193.144034][ T49] bond0 (unregistering): Released all slaves [ 193.298774][ T2176] usb 2-1: USB disconnect, device number 8 [ 193.674208][ T7821] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.762934][ T7821] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.790691][ T7821] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.831214][ T7821] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 194.202803][ T7821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.281883][ T7821] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.321874][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.329064][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.390928][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.398252][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.686298][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.693070][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.768329][ T49] Bluetooth: hci1: Frame reassembly failed (-84) [ 195.265547][ T7821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.358668][ T8003] kvm: apic: phys broadcast and lowest prio [ 195.984349][ T7821] veth0_vlan: entered promiscuous mode [ 196.017195][ T7821] veth1_vlan: entered promiscuous mode [ 196.124559][ T7821] veth0_macvtap: entered promiscuous mode [ 196.170056][ T7821] veth1_macvtap: entered promiscuous mode [ 196.208488][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.237101][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.254855][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.279434][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.321016][ T7821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.364089][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.390397][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.423118][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.449416][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.481250][ T7821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.536330][ T7821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.579390][ T7821] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.588159][ T7821] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.629407][ T7821] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.839569][ T5778] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 196.839895][ T5085] Bluetooth: hci1: command 0x1003 tx timeout [ 196.860481][ T7985] Bluetooth: hci1: Opcode 0x080f failed: -22 [ 196.918100][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.978507][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.009561][ T7984] ------------[ cut here ]------------ [ 197.015619][ T7984] ODEBUG: free active (active state 0) object: ffff88807b36c9c0 object type: timer_list hint: hci_cmd_timeout+0x0/0x1e0 [ 197.041964][ T7984] WARNING: CPU: 1 PID: 7984 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x39f/0x520 [ 197.052217][ T7984] Modules linked in: [ 197.056159][ T7984] CPU: 1 PID: 7984 Comm: syz.0.636 Not tainted syzkaller #0 [ 197.063560][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.073732][ T7984] RIP: 0010:debug_check_no_obj_freed+0x39f/0x520 [ 197.080209][ T7984] Code: 8b 4d 00 48 c7 c7 a0 3f 1d 8b 48 c7 c6 00 3c 1d 8b 48 c7 c2 20 41 1d 8b 8b 4c 24 1c 4d 89 f8 41 55 e8 85 5b 16 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 10 48 b9 00 00 00 00 00 fc ff df ff 05 ca ce 51 [ 197.100024][ T7984] RSP: 0018:ffffc9000354f9f8 EFLAGS: 00010282 [ 197.106279][ T7984] RAX: 59713469f34ced00 RBX: ffffffff975961d8 RCX: ffff88802bf09e00 [ 197.114544][ T7984] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 197.123155][ T7984] RBP: ffffffff8accaf60 R08: ffffc9000354f5e7 R09: 1ffff920006a9ebc [ 197.131402][ T7984] R10: dffffc0000000000 R11: fffff520006a9ebd R12: 0000000000000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 197.139878][ T7984] R13: ffffffff898d2fa0 R14: ffff88807b36c000 R15: ffff88807b36c9c0 [ 197.148839][ T7984] FS: 000055558dfb3500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 197.158540][ T7984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.165512][ T7984] CR2: 00007ffd189bbd40 CR3: 000000001df33000 CR4: 00000000003506e0 [ 197.173616][ T7984] Call Trace: [ 197.176944][ T7984] [ 197.180005][ T7984] free_unref_page_prepare+0x1ed/0x8f0 [ 197.185539][ T7984] free_unref_page+0x32/0x2e0 [ 197.190338][ T7984] free_large_kmalloc+0x101/0x1b0 [ 197.195425][ T7984] bt_host_release+0x93/0xa0 [ 197.200143][ T7984] ? bt_link_release+0x20/0x20 [ 197.204961][ T7984] device_release+0xbc/0x1e0 [ 197.209710][ T7984] kobject_put+0x21b/0x450 [ 197.214196][ T7984] hci_uart_tty_close+0x2b6/0x340 [ 197.219350][ T7984] tty_ldisc_kill+0xa3/0x1a0 [ 197.223999][ T7984] tty_ldisc_release+0x1a4/0x200 [ 197.227351][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.228968][ T7984] tty_release_struct+0x2a/0xd0 [ 197.242136][ T7984] tty_release+0xbcc/0x14f0 [ 197.247580][ T7984] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 197.253766][ T7984] ? tty_release_struct+0xd0/0xd0 [ 197.258204][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.258837][ T7984] __fput+0x221/0x940 [ 197.270343][ T7984] task_work_run+0x1d4/0x260 [ 197.274997][ T7984] ? task_work_cancel+0x220/0x220 [ 197.280629][ T7984] ? exit_to_user_mode_loop+0x3b/0x110 [ 197.286158][ T7984] exit_to_user_mode_loop+0xe6/0x110 [ 197.291537][ T7984] exit_to_user_mode_prepare+0xee/0x180 [ 197.297141][ T7984] syscall_exit_to_user_mode+0x1a/0x50 [ 197.302714][ T7984] do_syscall_64+0x61/0xb0 [ 197.307185][ T7984] ? clear_bhb_loop+0x40/0x90 [ 197.312039][ T7984] ? clear_bhb_loop+0x40/0x90 [ 197.316776][ T7984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.322963][ T7984] RIP: 0033:0x7f2eec39e159 [ 197.327427][ T7984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.347336][ T7984] RSP: 002b:00007ffc0e39da98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 197.357316][ T7984] RAX: 0000000000000000 RBX: 00007f2eec627da0 RCX: 00007f2eec39e159 [ 197.365557][ T7984] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 197.373813][ T7984] RBP: 00007f2eec627da0 R08: 0000000000000006 R09: 0000000000000000 [ 197.381891][ T7984] R10: 00007f2eec627cb0 R11: 0000000000000246 R12: 000000000002fb4a [ 197.389950][ T7984] R13: 00007f2eec625fac R14: 000000000002f8c5 R15: 00007ffc0e39dba0 [ 197.397988][ T7984] [ 197.401186][ T7984] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 197.408494][ T7984] CPU: 1 PID: 7984 Comm: syz.0.636 Not tainted syzkaller #0 [ 197.415796][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.425870][ T7984] Call Trace: [ 197.429159][ T7984] [ 197.432108][ T7984] dump_stack_lvl+0x18c/0x250 [ 197.436809][ T7984] ? show_regs_print_info+0x20/0x20 [ 197.442016][ T7984] ? load_image+0x420/0x420 [ 197.446543][ T7984] panic+0x2ca/0x720 [ 197.450468][ T7984] ? bpf_jit_dump+0xd0/0xd0 [ 197.455003][ T7984] __warn+0x2e0/0x470 [ 197.458997][ T7984] ? debug_check_no_obj_freed+0x39f/0x520 [ 197.464736][ T7984] ? debug_check_no_obj_freed+0x39f/0x520 [ 197.470471][ T7984] report_bug+0x2be/0x4f0 [ 197.474814][ T7984] ? debug_check_no_obj_freed+0x39f/0x520 [ 197.480561][ T7984] ? debug_check_no_obj_freed+0x39f/0x520 [ 197.486323][ T7984] ? debug_check_no_obj_freed+0x3a1/0x520 [ 197.492055][ T7984] handle_bug+0xcf/0x120 [ 197.496312][ T7984] exc_invalid_op+0x1a/0x50 [ 197.500830][ T7984] asm_exc_invalid_op+0x1a/0x20 [ 197.505691][ T7984] RIP: 0010:debug_check_no_obj_freed+0x39f/0x520 [ 197.512035][ T7984] Code: 8b 4d 00 48 c7 c7 a0 3f 1d 8b 48 c7 c6 00 3c 1d 8b 48 c7 c2 20 41 1d 8b 8b 4c 24 1c 4d 89 f8 41 55 e8 85 5b 16 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 10 48 b9 00 00 00 00 00 fc ff df ff 05 ca ce 51 [ 197.531655][ T7984] RSP: 0018:ffffc9000354f9f8 EFLAGS: 00010282 [ 197.537734][ T7984] RAX: 59713469f34ced00 RBX: ffffffff975961d8 RCX: ffff88802bf09e00 [ 197.545736][ T7984] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 197.553736][ T7984] RBP: ffffffff8accaf60 R08: ffffc9000354f5e7 R09: 1ffff920006a9ebc [ 197.561722][ T7984] R10: dffffc0000000000 R11: fffff520006a9ebd R12: 0000000000000004 [ 197.569714][ T7984] R13: ffffffff898d2fa0 R14: ffff88807b36c000 R15: ffff88807b36c9c0 [ 197.577700][ T7984] ? hci_power_off+0xe0/0xe0 [ 197.582315][ T7984] ? hci_power_off+0xe0/0xe0 [ 197.586925][ T7984] free_unref_page_prepare+0x1ed/0x8f0 [ 197.592396][ T7984] free_unref_page+0x32/0x2e0 [ 197.597086][ T7984] free_large_kmalloc+0x101/0x1b0 [ 197.602131][ T7984] bt_host_release+0x93/0xa0 [ 197.606749][ T7984] ? bt_link_release+0x20/0x20 [ 197.611525][ T7984] device_release+0xbc/0x1e0 [ 197.616136][ T7984] kobject_put+0x21b/0x450 [ 197.620580][ T7984] hci_uart_tty_close+0x2b6/0x340 [ 197.625627][ T7984] tty_ldisc_kill+0xa3/0x1a0 [ 197.630230][ T7984] tty_ldisc_release+0x1a4/0x200 [ 197.635178][ T7984] tty_release_struct+0x2a/0xd0 [ 197.640046][ T7984] tty_release+0xbcc/0x14f0 [ 197.644572][ T7984] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 197.650570][ T7984] ? tty_release_struct+0xd0/0xd0 [ 197.655610][ T7984] __fput+0x221/0x940 [ 197.659617][ T7984] task_work_run+0x1d4/0x260 [ 197.664223][ T7984] ? task_work_cancel+0x220/0x220 [ 197.669268][ T7984] ? exit_to_user_mode_loop+0x3b/0x110 [ 197.674754][ T7984] exit_to_user_mode_loop+0xe6/0x110 [ 197.680058][ T7984] exit_to_user_mode_prepare+0xee/0x180 [ 197.685631][ T7984] syscall_exit_to_user_mode+0x1a/0x50 [ 197.691133][ T7984] do_syscall_64+0x61/0xb0 [ 197.695605][ T7984] ? clear_bhb_loop+0x40/0x90 [ 197.700296][ T7984] ? clear_bhb_loop+0x40/0x90 [ 197.704985][ T7984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.710898][ T7984] RIP: 0033:0x7f2eec39e159 [ 197.715326][ T7984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.734944][ T7984] RSP: 002b:00007ffc0e39da98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 197.743373][ T7984] RAX: 0000000000000000 RBX: 00007f2eec627da0 RCX: 00007f2eec39e159 [ 197.751352][ T7984] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 197.759367][ T7984] RBP: 00007f2eec627da0 R08: 0000000000000006 R09: 0000000000000000 [ 197.767379][ T7984] R10: 00007f2eec627cb0 R11: 0000000000000246 R12: 000000000002fb4a [ 197.775381][ T7984] R13: 00007f2eec625fac R14: 000000000002f8c5 R15: 00007ffc0e39dba0 [ 197.783385][ T7984] [ 197.786533][ T7984] Kernel Offset: disabled [ 197.790955][ T7984] Rebooting in 86400 seconds..