last executing test programs: 3.499029689s ago: executing program 2 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x40000000009ecb, 0x2102) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f00000000c0)={0x5, [0x100000, 0x9, 0x8], [{0x7fff, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x7, 0xe, 0x0, 0x0, 0x1}, {0x401, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x2, 0x1, 0x1}, {0x5, 0x2, 0x0, 0x0, 0x1}, {0x8, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x4, 0x0, 0x0, 0x1, 0x1}, {0xca, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x9, 0x1}, {0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x106dd568, 0x80c, 0x0, 0x1, 0x1, 0x1}], 0xc}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@noblock_validity}, {@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@nouid32}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000000b00)="$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") symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) sendmsg$NFT_BATCH(r0, 0x0, 0x11) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f00000002c0)=r2) lsetxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20008084) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9edb1f8", 0x6}], 0x1}, 0x9c00) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000880)={0x9, [[0x800, 0x80000001, 0x0, 0x14, 0x9, 0x3, 0x5, 0x2], [0x719, 0x3, 0x7d61, 0x6, 0x9c8, 0x4, 0x8, 0x7], [0x9, 0x3, 0x5937, 0x7, 0x0, 0x5, 0x5, 0xd]], '\x00', [{0xfffffffc, 0x7, 0x1, 0x0, 0x0, 0x1}, {0xe8, 0x6, 0x1, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x10001, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x1}, {0xfffffffd, 0xa1, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x7, 0x1, 0x0, 0x1}, {0xff, 0x5, 0x1, 0x1, 0x1}, {0x8, 0xe53, 0x0, 0x0, 0x0, 0x1}, {0x7fff, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7ff, 0x2}, {0x101, 0x4, 0x1, 0x0, 0x1, 0x1}], '\x00', 0x3}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000000080)="16cca061000000", 0x7}, {&(0x7f0000000300)="2e687948212f3ab101b055eec2d0681390c40100006614fd338857584e18039b0000000080000000e710f6c6d7fa18422f5ba2b84f3353bc14019f745fda89ef64a860dc3c53eb58b7b118cef21a706113c9f97b9c9c9c599731b87da4c1d14037d35547cf31", 0x66}], 0x2}, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket(0x11, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r4], 0x7) 3.01787641s ago: executing program 1 (id=315): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000080)={r4, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)}], 0x1}}], 0x3, 0x404c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) 2.789932686s ago: executing program 2 (id=319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.502806742s ago: executing program 3 (id=320): r0 = socket$kcm(0xa, 0x5, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) (async) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) dup(r2) (async) dup(r2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000340)={0xfffffffffffffffe, 0x50, [0x54a, 0x6c76, 0x5, 0xc660], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000340)={0xfffffffffffffffe, 0x50, [0x54a, 0x6c76, 0x5, 0xc660], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) (async) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r2, 0x0, 0xffff, 0x2) (async) splice(r4, 0x0, r2, 0x0, 0xffff, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xff) unshare(0x6a040000) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000001f00), &(0x7f0000003000)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000001f00), &(0x7f0000003000)=0x8) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/165, 0xa5, 0x1, 0x0}, &(0x7f0000000180)=0x22) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/165, 0xa5, 0x1, 0x0}, &(0x7f0000000180)=0x22) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 2.500227932s ago: executing program 4 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.383955085s ago: executing program 3 (id=322): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) (fail_nth: 1) 2.072404182s ago: executing program 1 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000480)=0x7fffffff, 0x4) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x805c4d65, 0x1000000000000) sendmmsg$unix(r0, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) 1.652432712s ago: executing program 2 (id=325): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.607129782s ago: executing program 4 (id=326): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(r3, &(0x7f0000000040), 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) 1.606979113s ago: executing program 3 (id=327): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00"}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='us', 0x2) 1.606694062s ago: executing program 2 (id=328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xffff}, {}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.159729393s ago: executing program 1 (id=329): unshare(0xa000200) r0 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0x4, 0x4000]) unshare(0x2000100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff5, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x2000000, 0x0, 0x2, 0x7, 0x200}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000160033060000000000ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d23200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000050000000000000004000000020000000000000006000000020000000a00041819000000000000000c0015005c07350001000000"], 0xf8}}, 0x0) semtimedop(r0, &(0x7f0000000340)=[{0x4, 0x86, 0x1800}], 0x1, 0x0) unshare(0x20060400) 1.130965424s ago: executing program 2 (id=330): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x8, 0x5, 0x6, 0x20000001000, 0xf64, 0x9a}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0xf7) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) 1.095784375s ago: executing program 1 (id=331): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000b40)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff6a00084fa53b86dd6000006b00183afffc0200000000000000000000002138c68d80a27936c87a43c75f000000fe8000000000000000000000000000aa8700907800000000fe8000000000000000000000000000aa1449a13727b124f2b8d053ce"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r4, &(0x7f0000000000)='3', 0x1) 1.067740775s ago: executing program 3 (id=332): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYBLOB="4466dfa0a5ae7f720ab01b7f92b0b5", @ANYRES64=r0], 0x53) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @mcast1, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) gettid() sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x8000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 1.030332326s ago: executing program 0 (id=333): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) r1 = socket(0x10, 0x3, 0x0) socket(0x15, 0x800, 0x657) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000140)=""/48, 0x30) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x1, 0x8, 0x11027, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x2, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000002ac0)={0x0, 0xb770}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) 929.558128ms ago: executing program 1 (id=334): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet6(0xa, 0x800000000000002, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) 554.072287ms ago: executing program 3 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 506.136488ms ago: executing program 0 (id=336): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000b40)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff6a00084fa53b86dd6000006b00183afffc0200000000000000000000002138c68d80a27936c87a43c75f000000fe8000000000000000000000000000aa8700907800000000fe8000000000000000000000000000aa1449a13727b124f2b8d053ce"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x203020, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r4, &(0x7f0000000000)='3', 0x1) 505.850928ms ago: executing program 4 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f1c600", @ANYRES16=r1, @ANYBLOB="170900000000000000010100000008000900040000001400200000000000000000000000ffffac1414bb0500070000000000060002000100000008000a000400000014001f0000000000000000000000000000000001"], 0x5c}}, 0x0) 422.07224ms ago: executing program 4 (id=338): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x800040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 421.83131ms ago: executing program 0 (id=339): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x800040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) 398.206691ms ago: executing program 3 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000480)=0x7fffffff, 0x4) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x805c4d65, 0x1000000000000) sendmmsg$unix(r0, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) 334.860863ms ago: executing program 0 (id=341): unshare(0xa000200) r0 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0x4, 0x4000]) unshare(0x2000100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff5, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x2000000, 0x0, 0x2, 0x7, 0x200}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000160033060000000000ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d23200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000050000000000000004000000020000000000000006000000020000000a00041819000000000000000c0015005c07350001000000"], 0xf8}}, 0x0) semtimedop(r0, &(0x7f0000000340)=[{0x4, 0x86, 0x1800}], 0x1, 0x0) unshare(0x20060400) 300.025733ms ago: executing program 4 (id=342): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00"}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='usb', 0x3) 299.751403ms ago: executing program 2 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2000400, &(0x7f0000000200)=ANY=[]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 299.183303ms ago: executing program 0 (id=344): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8602, 0x1) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r2, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xd3f0, 0x2000, 0x8, 0xadeb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x800040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 51.605809ms ago: executing program 1 (id=345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 329.36µs ago: executing program 0 (id=346): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYBLOB="4466dfa0a5ae7f720ab01b7f92b0b5", @ANYRES64=r0], 0x53) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @mcast1, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) gettid() sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x8000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 0s ago: executing program 4 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0xa, 0x806}, @void, @eth={@random="000000000400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "e71366", 0xa, 0x11, 0x1, @private2, @mcast2, {[], {0x4f19, 0x4e20, 0xa, 0x0, @opaque='iS'}}}}}}}, 0x44) (fail_nth: 1) kernel console output (not intermixed with test programs): 249 > 4 [ 30.407631][ T4330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.416916][ T4342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.418244][ T4342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.419879][ T4342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.421330][ T4342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.422908][ T4342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.424364][ T4342] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.425548][ T4343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.427352][ T4343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.430847][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.432568][ T4343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.433871][ T4343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.435533][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.437020][ T4343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.438285][ T4343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.439549][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.440808][ T4343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.442291][ T4343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.443733][ T4344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.445400][ T4344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.446837][ T4344] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.448105][ T4344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.450198][ T4344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.451659][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.453110][ T4344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.461021][ T4344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.545959][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.593248][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.595308][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.606516][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 30.619618][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.620896][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.622969][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.625163][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.626347][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.627951][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.654152][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.655739][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.657249][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.665371][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.667833][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.669573][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.670778][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.672198][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.678399][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.681822][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.684605][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.686117][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.691828][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.697709][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.699015][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.700661][ T4333] device bridge_slave_0 entered promiscuous mode [ 30.702847][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.703881][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.705267][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.707630][ T4328] team0: Port device team_slave_0 added [ 30.712234][ T4334] team0: Port device team_slave_0 added [ 30.713523][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.714907][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.716526][ T4333] device bridge_slave_1 entered promiscuous mode [ 30.720152][ T4328] team0: Port device team_slave_1 added [ 30.725099][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.727782][ T4334] team0: Port device team_slave_1 added [ 30.736109][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.737140][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.740907][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.748030][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.751870][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.753739][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.754834][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.758874][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.761931][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.773014][ T4329] team0: Port device team_slave_0 added [ 30.776668][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.778542][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.779659][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.784144][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.788029][ T4329] team0: Port device team_slave_1 added [ 30.798246][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.799520][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.804487][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.853710][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.892788][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.944735][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.945941][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.950088][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.956886][ T4333] team0: Port device team_slave_0 added [ 30.958994][ T4333] team0: Port device team_slave_1 added [ 30.961447][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.962944][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.967050][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.969045][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.970185][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.971595][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.979944][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.981210][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.983019][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.991779][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.995222][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.999268][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.045819][ T4334] device hsr_slave_0 entered promiscuous mode [ 31.082753][ T4334] device hsr_slave_1 entered promiscuous mode [ 31.122580][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.123976][ T4334] Cannot create hsr debugfs directory [ 31.138595][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.139783][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.144102][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.151384][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.153975][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.159882][ T4335] team0: Port device team_slave_0 added [ 31.161768][ T4335] team0: Port device team_slave_1 added [ 31.233528][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.282674][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.322615][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.323879][ T4329] Cannot create hsr debugfs directory [ 31.330786][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.331903][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.336220][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.348312][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.349513][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.354000][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.393419][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.432982][ T4333] device hsr_slave_1 entered promiscuous mode [ 31.472575][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.473820][ T4333] Cannot create hsr debugfs directory [ 31.553553][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.602648][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.652520][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.653866][ T4335] Cannot create hsr debugfs directory [ 31.673217][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.716687][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.758422][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.799053][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.845778][ T4334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.896641][ T4334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.934458][ T4334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.004929][ T4334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.087890][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.116421][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.163524][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.205900][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.252411][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.257110][ T4333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.301554][ T4333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.353598][ T4333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.395317][ T4333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.438924][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.446465][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.448569][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.450138][ T4335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.484478][ T4335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.492675][ T4344] Bluetooth: hci3: command 0x0409 tx timeout [ 32.492809][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 32.493746][ T4344] Bluetooth: hci1: command 0x0409 tx timeout [ 32.494802][ T4330] Bluetooth: hci4: command 0x0409 tx timeout [ 32.495795][ T4344] Bluetooth: hci0: command 0x0409 tx timeout [ 32.523463][ T4335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.557445][ T4335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.598259][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.600828][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.602118][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.604596][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.612218][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.614251][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.615829][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.616969][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.618445][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.619867][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.621305][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.622613][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.633127][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.634810][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.636376][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.637948][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.639611][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.640796][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.651647][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.657281][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.658993][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.660697][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.662255][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.664195][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.665794][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.667064][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.668924][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.679039][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.680755][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.682386][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.690867][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.692954][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.694901][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.696461][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.698045][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.699512][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.707758][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.709404][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.714414][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.716607][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.721316][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.722938][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.724490][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.725929][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.729137][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.731646][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.737100][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.760774][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.765419][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.768913][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.779249][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.780773][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.783483][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.788755][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.791136][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.792578][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.797408][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.800624][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.801892][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.806511][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.808036][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.809548][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.810813][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.812229][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.823748][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.825273][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.826536][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.837833][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.839330][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.840754][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.842134][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.844767][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.845888][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.847242][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.848744][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.850144][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.851264][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.853307][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.855087][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.856645][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.858092][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.859611][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.860867][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.862391][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.865463][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.867242][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.868975][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.870499][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.871692][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.873792][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.875272][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.884163][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.885821][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.887853][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.889475][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.891081][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.892916][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.894536][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.896056][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.897659][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.898990][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.901640][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.908111][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.909798][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.911441][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.914061][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.915748][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.919098][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.920419][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.924185][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.934307][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.936171][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.937724][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.939189][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.940789][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.942399][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.946106][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.947846][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.952869][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.954780][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.956429][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.958575][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.960126][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.961665][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.977448][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.979352][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.983762][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.986033][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.989567][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.990943][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.992632][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.016184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.017909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.020197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.021636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.029347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.030591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.031959][ T4334] device veth0_vlan entered promiscuous mode [ 33.040798][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.042407][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.045804][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.050876][ T4334] device veth1_vlan entered promiscuous mode [ 33.067147][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.068780][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.070220][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.071679][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.076905][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.078506][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.088720][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.090851][ T4328] device veth0_vlan entered promiscuous mode [ 33.094501][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.095822][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.097153][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.098704][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.106085][ T4334] device veth0_macvtap entered promiscuous mode [ 33.108330][ T4334] device veth1_macvtap entered promiscuous mode [ 33.110976][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.132220][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.134287][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.135612][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.137271][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.138795][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.140264][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.141958][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.146254][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.149208][ T4328] device veth1_vlan entered promiscuous mode [ 33.160474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.162237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.164850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.166275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.168131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.169605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.172113][ T4333] device veth0_vlan entered promiscuous mode [ 33.174793][ T4329] device veth0_vlan entered promiscuous mode [ 33.179198][ T4329] device veth1_vlan entered promiscuous mode [ 33.186133][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.188484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.190062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.191517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.196055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.197460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.202097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.204880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.206479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.211103][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.213888][ T4333] device veth1_vlan entered promiscuous mode [ 33.217827][ T4328] device veth0_macvtap entered promiscuous mode [ 33.219786][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.221140][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.225766][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.227612][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.230350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.231774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.233518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.235099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.236756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.238516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.241388][ T4328] device veth1_macvtap entered promiscuous mode [ 33.249885][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.251447][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.253664][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.268756][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.270309][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.271923][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.275059][ T4329] device veth0_macvtap entered promiscuous mode [ 33.276666][ T4333] device veth0_macvtap entered promiscuous mode [ 33.281545][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.283084][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.284645][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.286231][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.302031][ T4333] device veth1_macvtap entered promiscuous mode [ 33.306454][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.308175][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.310279][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.312391][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.314267][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.315730][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.317313][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.318885][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.320475][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.321926][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.328969][ T4335] device veth0_vlan entered promiscuous mode [ 33.337205][ T4329] device veth1_macvtap entered promiscuous mode [ 33.341987][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.347614][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.349283][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.350964][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.353348][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.356795][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.356943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.358012][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.359555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.361892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.366468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.368743][ T4335] device veth1_vlan entered promiscuous mode [ 33.371021][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.373194][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.374889][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.376572][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.378122][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.379690][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.381885][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.387636][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.389501][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.391731][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.393459][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.395179][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.396641][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.398307][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.400379][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.402652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.404171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.405672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.407307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.408865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.410511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.412117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.417532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.424377][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.425752][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.426779][ T4333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.428722][ T4333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.430407][ T4333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.431849][ T4333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.436103][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.437410][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.438744][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.440070][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.442088][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.445189][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.446806][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.448516][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.450080][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.451762][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.454342][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.456214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.457721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.459230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.461063][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.462428][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.463980][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.465456][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.479342][ T4335] device veth0_macvtap entered promiscuous mode [ 33.482196][ T4335] device veth1_macvtap entered promiscuous mode [ 33.488897][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.490483][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.492060][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.494560][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.548067][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.549503][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.551746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.563736][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.565357][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.566887][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.568450][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.570061][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.571755][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.575679][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.577375][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.579690][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.581793][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.584912][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.586452][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.588101][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.589676][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.591480][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.595087][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.596828][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.598943][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.613010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.614675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.616189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.617717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.621459][ T4335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.623097][ T4335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.624552][ T4335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.625990][ T4335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.647555][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.648883][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.650250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.653918][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.655196][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.656400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.671511][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.673045][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.677176][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.686701][ T4409] loop0: detected capacity change from 0 to 32768 [ 33.689971][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.691273][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.696167][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.698419][ T4409] ======================================================= [ 33.698419][ T4409] WARNING: The mand mount option has been deprecated and [ 33.698419][ T4409] and is ignored by this kernel. Remove the mand [ 33.698419][ T4409] option from the mount to silence this warning. [ 33.698419][ T4409] ======================================================= [ 33.709215][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.710605][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.712040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.759080][ T4413] Injecting memory failure for pfn 0x136567 at process virtual address 0x20000000 [ 33.777870][ T4413] Memory failure: 0x136567: recovery action for dirty LRU page: Recovered [ 33.778013][ T4409] XFS (loop0): Mounting V5 Filesystem [ 33.779459][ T4413] Injecting memory failure for pfn 0x210d76 at process virtual address 0x20001000 [ 33.781906][ T4413] Memory failure: 0x210d76: recovery action for reserved kernel page: Ignored [ 33.791828][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.794296][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.797042][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.799281][ T4418] CIFS: Attempting to mount \\127.0.0.1\share [ 33.808316][ T1615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.808675][ T4418] CIFS: VFS: Error connecting to socket. Aborting operation. [ 33.809687][ T1615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.809925][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.815388][ T4418] CIFS: VFS: cifs_mount failed w/return code = -111 [ 33.918204][ T4409] XFS (loop0): Ending clean mount [ 33.920893][ T4409] XFS (loop0): Quotacheck needed: Please wait. [ 33.932395][ T4409] XFS (loop0): Quotacheck: Done. [ 34.371405][ T4437] loop1: detected capacity change from 0 to 8192 [ 34.387165][ T4437] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 34.392741][ T4437] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 34.396364][ T4437] REISERFS (device loop1): using ordered data mode [ 34.399216][ T4437] reiserfs: using flush barriers [ 34.402295][ T4437] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 34.572799][ T4332] Bluetooth: hci4: command 0x041b tx timeout [ 34.574239][ T4344] Bluetooth: hci0: command 0x041b tx timeout [ 34.575497][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 34.576671][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 34.577986][ T4344] Bluetooth: hci3: command 0x041b tx timeout [ 34.685232][ T4437] REISERFS (device loop1): checking transaction log (loop1) [ 34.699320][ T4437] REISERFS (device loop1): Using r5 hash to sort names [ 34.709099][ T4437] REISERFS (device loop1): using 3.5.x disk format [ 34.717776][ T4437] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 34.872857][ T4444] loop2: detected capacity change from 0 to 8192 [ 35.286826][ T4450] loop4: detected capacity change from 0 to 4096 [ 35.317660][ T4450] ntfs: (device loop4): parse_ntfs_boot_sector(): Sector size (256) is smaller than the device block size (512). This is not supported. Sorry. [ 35.320380][ T4450] ntfs: (device loop4): ntfs_fill_super(): Unsupported NTFS filesystem. [ 35.530086][ T4444] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.532769][ T4444] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 35.534335][ T4444] REISERFS (device loop2): using ordered data mode [ 35.535355][ T4444] reiserfs: using flush barriers [ 35.545904][ T4444] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.548621][ T4444] REISERFS (device loop2): checking transaction log (loop2) [ 35.555565][ T4321] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.577839][ T4444] REISERFS (device loop2): Using r5 hash to sort names [ 35.579163][ T4444] REISERFS (device loop2): using 3.5.x disk format [ 35.580965][ T4444] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 35.652092][ T4334] XFS (loop0): Unmounting Filesystem [ 35.703060][ T4459] process 'syz.3.10' launched './file0' with NULL argv: empty string added [ 36.064610][ T4463] binder: BINDER_SET_CONTEXT_MGR already set [ 36.065796][ T4463] binder: 4462:4463 ioctl 4018620d 20004a80 returned -16 [ 36.067517][ T4463] binder: 4462:4463 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 36.070766][ T4463] binder: 4463 RLIMIT_NICE not set [ 36.611558][ T4480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16'. [ 36.652708][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 36.654021][ T4344] Bluetooth: hci2: command 0x040f tx timeout [ 36.655095][ T4332] Bluetooth: hci1: command 0x040f tx timeout [ 36.656137][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 36.656182][ T4340] Bluetooth: hci0: command 0x040f tx timeout [ 36.668067][ T4482] loop1: detected capacity change from 0 to 8192 [ 36.675835][ T4486] Zero length message leads to an empty skb [ 36.683019][ T4482] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 36.685463][ T4482] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 36.687081][ T4482] REISERFS (device loop1): using ordered data mode [ 36.688370][ T4482] reiserfs: using flush barriers [ 36.689788][ T4482] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 36.693243][ T4482] REISERFS (device loop1): checking transaction log (loop1) [ 36.695247][ T4482] REISERFS (device loop1): Using r5 hash to sort names [ 36.696660][ T4482] REISERFS (device loop1): using 3.5.x disk format [ 36.698058][ T4482] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 37.324984][ T4500] loop4: detected capacity change from 0 to 512 [ 37.334888][ T4500] EXT4-fs: Ignoring removed oldalloc option [ 37.346211][ T4488] syz.0.11 (4488): drop_caches: 2 [ 37.366694][ T4496] device syzkaller0 entered promiscuous mode [ 37.409568][ T4500] EXT4-fs (loop4): 1 truncate cleaned up [ 37.410565][ T4500] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.469089][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 37.567068][ T4513] loop1: detected capacity change from 0 to 256 [ 37.589477][ T4509] loop0: detected capacity change from 0 to 8192 [ 37.598928][ T4509] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 37.601031][ T4509] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 37.604731][ T4509] REISERFS (device loop0): using ordered data mode [ 37.605844][ T4509] reiserfs: using flush barriers [ 37.610858][ T4509] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 37.614301][ T4509] REISERFS (device loop0): checking transaction log (loop0) [ 37.617514][ T4509] REISERFS (device loop0): Using r5 hash to sort names [ 37.618792][ T4509] REISERFS (device loop0): using 3.5.x disk format [ 37.619908][ T4509] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 37.965750][ T4499] loop3: detected capacity change from 0 to 32768 [ 38.001467][ T4499] XFS (loop3): Mounting V5 Filesystem [ 38.041859][ T4499] XFS (loop3): Ending clean mount [ 38.044848][ T4499] XFS (loop3): Quotacheck needed: Please wait. [ 38.055973][ T4499] XFS (loop3): Quotacheck: Done. [ 38.102324][ T4536] CIFS: Attempting to mount \\127.0.0.1\share [ 38.355584][ T4329] XFS (loop3): Unmounting Filesystem [ 38.458471][ T4542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.29'. [ 38.733745][ T4340] Bluetooth: hci4: command 0x0419 tx timeout [ 38.735022][ T4340] Bluetooth: hci3: command 0x0419 tx timeout [ 38.736185][ T4340] Bluetooth: hci1: command 0x0419 tx timeout [ 38.737454][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 38.738600][ T4340] Bluetooth: hci0: command 0x0419 tx timeout [ 38.929338][ T4536] CIFS: VFS: cifs_mount failed w/return code = -112 [ 38.951828][ T4551] CIFS: Attempting to mount \\127.0.0.1\share [ 39.588022][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 39.785788][ T4551] CIFS: VFS: cifs_mount failed w/return code = -112 [ 49.045510][ T4568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.33'. [ 49.047117][ T4569] device veth0_to_bridge entered promiscuous mode [ 49.133588][ T4578] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 49.134967][ T4578] netlink: 220 bytes leftover after parsing attributes in process `syz.2.36'. [ 49.136615][ T4578] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 49.140066][ T4578] netlink: 220 bytes leftover after parsing attributes in process `syz.2.36'. [ 49.141614][ T4578] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 49.147083][ T4578] netlink: 220 bytes leftover after parsing attributes in process `syz.2.36'. [ 49.148584][ T4578] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 49.149739][ T4578] netlink: 220 bytes leftover after parsing attributes in process `syz.2.36'. [ 49.151308][ T4578] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 49.153154][ T4578] netlink: 220 bytes leftover after parsing attributes in process `syz.2.36'. [ 49.154773][ T4578] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 49.156028][ T4578] netlink: 220 bytes leftover after parsing attributes in process `syz.2.36'. [ 49.157531][ T4578] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 49.158690][ T4578] netlink: 220 bytes leftover after parsing attributes in process `syz.2.36'. [ 49.160145][ T4578] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 49.161386][ T4578] netlink: 220 bytes leftover after parsing attributes in process `syz.2.36'. [ 49.166271][ T4578] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 49.167431][ T4578] netlink: 220 bytes leftover after parsing attributes in process `syz.2.36'. [ 49.169071][ T4578] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 49.300439][ T4584] syz.4.35 (4584): drop_caches: 2 [ 49.444556][ T4583] loop3: detected capacity change from 0 to 4096 [ 49.454699][ T4583] ntfs: (device loop3): parse_ntfs_boot_sector(): Sector size (256) is smaller than the device block size (512). This is not supported. Sorry. [ 49.457171][ T4583] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 49.813976][ T4600] loop1: detected capacity change from 0 to 2048 [ 50.139857][ T4600] loop1: p1 p2 p3 [ 50.139857][ T4600] p1: [ 50.141406][ T4600] loop1: p1 size 16779263 extends beyond EOD, truncated [ 50.143559][ T4600] loop1: p2 size 458752 extends beyond EOD, truncated [ 50.145060][ T4600] loop1: p3 start 3036741376 is beyond EOD, truncated [ 50.174072][ T4607] device syzkaller0 entered promiscuous mode [ 50.185458][ T4607] tipc: Started in network mode [ 50.187541][ T4607] tipc: Node identity fe83293a926b, cluster identity 4711 [ 50.190109][ T4607] tipc: Enabled bearer , priority 0 [ 50.196924][ T4607] tipc: Resetting bearer [ 50.201185][ T4603] tipc: Resetting bearer [ 50.229722][ T4610] loop0: detected capacity change from 0 to 128 [ 50.231503][ T4610] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.234731][ T4610] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.241957][ T4613] loop4: detected capacity change from 0 to 4096 [ 50.260561][ T4614] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.273591][ T4603] tipc: Disabling bearer [ 50.292056][ T4613] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 50.381851][ T4618] loop4: detected capacity change from 0 to 8192 [ 50.387788][ T4618] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.390462][ T4618] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 50.392105][ T4618] REISERFS (device loop4): using ordered data mode [ 50.394660][ T4618] reiserfs: using flush barriers [ 50.395988][ T4618] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.398987][ T4618] REISERFS (device loop4): checking transaction log (loop4) [ 50.401214][ T4618] REISERFS (device loop4): Using r5 hash to sort names [ 50.402384][ T4618] REISERFS (device loop4): using 3.5.x disk format [ 50.404165][ T4618] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 50.460378][ T4620] loop3: detected capacity change from 0 to 4096 [ 50.520376][ T4620] NILFS (loop3): invalid segment: Checksum error in segment payload [ 50.521931][ T4620] NILFS (loop3): trying rollback from an earlier position [ 50.527102][ T4620] NILFS (loop3): recovery complete [ 50.821601][ T4622] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.883672][ T4616] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 12 already freed [ 50.886666][ T4616] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 50.929884][ T4629] loop3: detected capacity change from 0 to 512 [ 50.947086][ T4629] EXT2-fs (loop3): (no)user_xattr optionsnot supported [ 50.950702][ T4629] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 50.964251][ T4631] loop1: detected capacity change from 0 to 2048 [ 50.982667][ T4633] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.049525][ T4631] syz.1.49: attempt to access beyond end of device [ 51.049525][ T4631] loop1: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 51.067621][ T4631] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 51.092602][ T4631] NILFS (loop1): error -5 truncating bmap (ino=16) [ 53.304654][ T4734] loop3: detected capacity change from 0 to 4096 [ 53.465746][ T4734] ntfs: (device loop3): parse_ntfs_boot_sector(): Sector size (256) is smaller than the device block size (512). This is not supported. Sorry. [ 53.468625][ T4734] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 53.727748][ T4738] device syzkaller0 entered promiscuous mode [ 53.738478][ T4738] tipc: Started in network mode [ 53.739646][ T4738] tipc: Node identity daee1ad6f3da, cluster identity 4711 [ 53.746520][ T4738] tipc: Enabled bearer , priority 0 [ 53.757235][ T4738] tipc: Resetting bearer [ 53.760184][ T4737] tipc: Resetting bearer [ 53.795795][ T4737] tipc: Disabling bearer [ 53.860679][ T4741] loop2: detected capacity change from 0 to 2048 [ 53.882676][ T4742] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.199964][ T4753] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.275872][ T4753] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.393751][ T4758] __nla_validate_parse: 56 callbacks suppressed [ 54.393760][ T4758] netlink: 56 bytes leftover after parsing attributes in process `syz.1.62'. [ 54.887766][ T4769] set_capacity_and_notify: 2 callbacks suppressed [ 54.887774][ T4769] loop0: detected capacity change from 0 to 512 [ 54.928184][ T4769] EXT2-fs (loop0): (no)user_xattr optionsnot supported [ 54.944113][ T4771] loop4: detected capacity change from 0 to 256 [ 54.951971][ T4772] syz.2.57: attempt to access beyond end of device [ 54.951971][ T4772] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 54.964799][ T4769] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 54.972991][ T4772] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 54.974783][ T4772] syz.2.57: attempt to access beyond end of device [ 54.974783][ T4772] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 54.977698][ T4772] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 54.979423][ T4772] NILFS (loop2): error -5 truncating bmap (ino=16) [ 55.051789][ T4606] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.141174][ T4782] device syzkaller0 entered promiscuous mode [ 56.197367][ T4782] tipc: Enabled bearer , priority 0 [ 56.281813][ T4782] tipc: Resetting bearer [ 56.307154][ T4833] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 56.308437][ T4833] overlayfs: failed to set xattr on upper [ 56.354568][ T4780] tipc: Resetting bearer [ 56.366681][ T4833] overlayfs: ...falling back to index=off,metacopy=off. [ 56.594227][ T4780] tipc: Disabling bearer [ 56.613935][ T4862] Bluetooth: MGMT ver 1.22 [ 56.629833][ T4862] loop0: detected capacity change from 0 to 2048 [ 56.643652][ T4862] UDF-fs: bad mount option "gid=00000000000000060928000000000000000" or missing value [ 57.141866][ T4874] loop2: detected capacity change from 0 to 2048 [ 57.170384][ T4874] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 57.622853][ T4885] usb usb8: usbfs: process 4885 (syz.4.78) did not claim interface 0 before use [ 57.649340][ T4889] netlink: 56 bytes leftover after parsing attributes in process `syz.4.79'. [ 57.701179][ T4886] loop0: detected capacity change from 0 to 8192 [ 57.721786][ T4886] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.727935][ T4886] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 57.733905][ T4886] REISERFS (device loop0): using ordered data mode [ 57.735129][ T4886] reiserfs: using flush barriers [ 57.736342][ T4886] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.739411][ T4886] REISERFS (device loop0): checking transaction log (loop0) [ 57.756276][ T4886] REISERFS (device loop0): Using r5 hash to sort names [ 57.759288][ T4886] REISERFS (device loop0): using 3.5.x disk format [ 58.285535][ T4886] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 58.510408][ T4898] ÿ [ 58.551912][ T4903] fuse: Bad value for 'user_id' [ 58.556326][ T4901] loop2: detected capacity change from 0 to 512 [ 58.789724][ T4901] EXT2-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 58.798823][ T4901] EXT2-fs (loop2): DAX unsupported by block device. Turning off DAX. [ 58.801113][ T4901] EXT2-fs (loop2): error: revision level too high, forcing read-only mode [ 58.826686][ T4901] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=800a8] [ 59.674425][ T4924] device syzkaller0 entered promiscuous mode [ 59.678530][ T4924] tipc: Enabled bearer , priority 0 [ 59.699272][ T4926] loop1: detected capacity change from 0 to 128 [ 59.703293][ T4924] tipc: Resetting bearer [ 59.718410][ T4926] tmpfs: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 59.720956][ T4910] loop4: detected capacity change from 0 to 32768 [ 59.723839][ T4923] tipc: Resetting bearer [ 59.727054][ T4910] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.87 (4910) [ 59.744809][ T4923] tipc: Disabling bearer [ 59.746679][ T4910] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 59.750920][ T4910] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 59.752795][ T4929] binder: 4927:4929 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 59.758910][ T4910] BTRFS info (device loop4): using free space tree [ 59.762971][ T4929] binder: 4927:4929 got transaction to invalid handle, 1 [ 59.764392][ T4929] binder: 4929:4927 cannot find target node [ 59.765490][ T4929] binder: 4927:4929 transaction call to 0:0 failed 5/29201/-22, size 72-24 line 3062 [ 59.835092][ T4940] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 59.835913][ T4938] netlink: 56 bytes leftover after parsing attributes in process `syz.1.93'. [ 60.270849][ T4910] BTRFS info (device loop4): enabling ssd optimizations [ 60.291329][ T4945] loop3: detected capacity change from 0 to 8192 [ 60.333741][ T4945] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 60.354712][ T4945] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 60.356334][ T4945] REISERFS (device loop3): using ordered data mode [ 60.357420][ T4945] reiserfs: using flush barriers [ 60.367008][ T4945] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.371197][ T4945] REISERFS (device loop3): checking transaction log (loop3) [ 60.378863][ T4945] REISERFS (device loop3): Using r5 hash to sort names [ 60.380271][ T4945] REISERFS (device loop3): using 3.5.x disk format [ 60.663805][ T4945] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 60.771021][ T4971] loop1: detected capacity change from 0 to 512 [ 60.784170][ T4335] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 60.786955][ T4971] EXT4-fs (loop1): 1 truncate cleaned up [ 60.787932][ T4971] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 60.800604][ T4971] FAULT_INJECTION: forcing a failure. [ 60.800604][ T4971] name failslab, interval 1, probability 0, space 0, times 0 [ 60.844001][ T4971] CPU: 1 PID: 4971 Comm: syz.1.99 Not tainted syzkaller #0 [ 60.845315][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 60.847199][ T4971] Call trace: [ 60.847794][ T4971] dump_backtrace+0x1c4/0x1f0 [ 60.848690][ T4971] show_stack+0x2c/0x3c [ 60.849439][ T4971] __dump_stack+0x30/0x40 [ 60.850261][ T4971] dump_stack_lvl+0xf4/0x15c [ 60.851045][ T4971] dump_stack+0x1c/0x5c [ 60.851794][ T4971] should_fail_ex+0x3cc/0x524 [ 60.852667][ T4971] __should_failslab+0xc0/0x11c [ 60.853576][ T4971] should_failslab+0x10/0x28 [ 60.854460][ T4971] __kmem_cache_alloc_node+0x7c/0x318 [ 60.855445][ T4971] __kmalloc+0xc4/0x180 [ 60.856202][ T4971] tomoyo_realpath_from_path+0xc4/0x508 [ 60.857193][ T4971] tomoyo_path_number_perm+0x1c4/0x540 [ 60.858168][ T4971] tomoyo_file_ioctl+0x2c/0x3c [ 60.859021][ T4971] security_file_ioctl+0x80/0xbc [ 60.859945][ T4971] __arm64_sys_ioctl+0xa8/0x1c8 [ 60.860833][ T4971] invoke_syscall+0x98/0x290 [ 60.861616][ T4971] el0_svc_common+0x13c/0x258 [ 60.862450][ T4971] do_el0_svc+0x5c/0x134 [ 60.863142][ T4971] el0_svc+0x58/0x128 [ 60.863829][ T4971] el0t_64_sync_handler+0x84/0xf0 [ 60.864708][ T4971] el0t_64_sync+0x18c/0x190 [ 60.878763][ T4942] loop2: detected capacity change from 0 to 32768 [ 60.893942][ T4975] loop0: detected capacity change from 0 to 512 [ 60.896070][ T4971] ERROR: Out of memory at tomoyo_realpath_from_path. [ 60.905161][ T4942] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.95 (4942) [ 60.918247][ T4975] EXT4-fs (loop0): 1 truncate cleaned up [ 60.920005][ T4942] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 60.922122][ T4942] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 60.932843][ T4942] BTRFS info (device loop2): force clearing of disk cache [ 60.934146][ T4942] BTRFS info (device loop2): using free space tree [ 60.935373][ T4975] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.939657][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 60.974798][ T4982] loop4: detected capacity change from 0 to 512 [ 60.976079][ T4982] EXT4-fs: Ignoring removed i_version option [ 60.993517][ T4982] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 60.995991][ T4975] netlink: 64 bytes leftover after parsing attributes in process `syz.0.101'. [ 61.093407][ T4973] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 61.177295][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 61.208122][ T5000] loop3: detected capacity change from 0 to 8 [ 61.255511][ T5004] device syzkaller0 entered promiscuous mode [ 61.317986][ T5008] loop4: detected capacity change from 0 to 128 [ 61.319562][ T5008] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.485003][ T5008] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.688510][ T5020] binder: 5019:5020 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 61.701947][ T5023] loop1: detected capacity change from 0 to 8 [ 61.704861][ T4942] BTRFS info (device loop2): enabling ssd optimizations [ 61.706533][ T4942] BTRFS info (device loop2): rebuilding free space tree [ 61.715009][ T5023] FAULT_INJECTION: forcing a failure. [ 61.715009][ T5023] name failslab, interval 1, probability 0, space 0, times 0 [ 61.717140][ T5023] CPU: 0 PID: 5023 Comm: syz.1.107 Not tainted syzkaller #0 [ 61.718254][ T5023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.719870][ T5023] Call trace: [ 61.720450][ T5023] dump_backtrace+0x1c4/0x1f0 [ 61.721278][ T5023] show_stack+0x2c/0x3c [ 61.721979][ T5023] __dump_stack+0x30/0x40 [ 61.722722][ T5023] dump_stack_lvl+0xf4/0x15c [ 61.723540][ T5023] dump_stack+0x1c/0x5c [ 61.724228][ T5023] should_fail_ex+0x3cc/0x524 [ 61.724975][ T5023] __should_failslab+0xc0/0x11c [ 61.725781][ T5023] should_failslab+0x10/0x28 [ 61.726548][ T5023] kmem_cache_alloc+0x88/0x310 [ 61.727320][ T5023] getname_flags+0xb8/0x458 [ 61.728016][ T5023] getname+0x28/0x38 [ 61.728656][ T5023] __arm64_sys_execve+0x78/0xb0 [ 61.729454][ T5023] invoke_syscall+0x98/0x290 [ 61.730209][ T5023] el0_svc_common+0x13c/0x258 [ 61.731011][ T5023] do_el0_svc+0x5c/0x134 [ 61.731739][ T5023] el0_svc+0x58/0x128 [ 61.732424][ T5023] el0t_64_sync_handler+0x84/0xf0 [ 61.733215][ T5023] el0t_64_sync+0x18c/0x190 [ 61.862751][ T5030] netlink: 56 bytes leftover after parsing attributes in process `syz.1.110'. [ 62.502991][ T4942] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 62.522783][ T5044] FAULT_INJECTION: forcing a failure. [ 62.522783][ T5044] name failslab, interval 1, probability 0, space 0, times 0 [ 62.525046][ T5044] CPU: 0 PID: 5044 Comm: syz.3.113 Not tainted syzkaller #0 [ 62.526321][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 62.528300][ T5044] Call trace: [ 62.528904][ T5044] dump_backtrace+0x1c4/0x1f0 [ 62.529792][ T5044] show_stack+0x2c/0x3c [ 62.530600][ T5044] __dump_stack+0x30/0x40 [ 62.531419][ T5044] dump_stack_lvl+0xf4/0x15c [ 62.532273][ T5044] dump_stack+0x1c/0x5c [ 62.532992][ T5044] should_fail_ex+0x3cc/0x524 [ 62.533787][ T5044] __should_failslab+0xc0/0x11c [ 62.534609][ T5044] should_failslab+0x10/0x28 [ 62.535376][ T5044] __kmem_cache_alloc_node+0x7c/0x318 [ 62.536298][ T5044] __kmalloc+0xc4/0x180 [ 62.536985][ T5044] tomoyo_realpath_from_path+0xc4/0x508 [ 62.537902][ T5044] tomoyo_path_number_perm+0x1c4/0x540 [ 62.538779][ T5044] tomoyo_file_ioctl+0x2c/0x3c [ 62.539554][ T5044] security_file_ioctl+0x80/0xbc [ 62.540370][ T5044] __arm64_sys_ioctl+0xa8/0x1c8 [ 62.541183][ T5044] invoke_syscall+0x98/0x290 [ 62.541918][ T5044] el0_svc_common+0x13c/0x258 [ 62.542666][ T5044] do_el0_svc+0x5c/0x134 [ 62.543373][ T5044] el0_svc+0x58/0x128 [ 62.544030][ T5044] el0t_64_sync_handler+0x84/0xf0 [ 62.544883][ T5044] el0t_64_sync+0x18c/0x190 [ 62.549635][ T5044] ERROR: Out of memory at tomoyo_realpath_from_path. [ 62.926587][ T5057] kAFS: unable to lookup cell '.yz1' [ 63.183062][ T5059] binder: 5058:5059 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 63.209650][ T5049] loop4: detected capacity change from 0 to 8192 [ 63.249902][ T5049] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 63.252356][ T5049] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 63.254505][ T5049] REISERFS (device loop4): using ordered data mode [ 63.257460][ T5049] reiserfs: using flush barriers [ 63.261316][ T5049] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 63.265021][ T5049] REISERFS (device loop4): checking transaction log (loop4) [ 63.271570][ T5049] REISERFS (device loop4): Using r5 hash to sort names [ 63.276449][ T5049] REISERFS (device loop4): using 3.5.x disk format [ 63.278243][ T5049] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 63.457704][ T5071] FAULT_INJECTION: forcing a failure. [ 63.457704][ T5071] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 63.464458][ T5071] CPU: 0 PID: 5071 Comm: syz.3.121 Not tainted syzkaller #0 [ 63.465661][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 63.467371][ T5071] Call trace: [ 63.467943][ T5071] dump_backtrace+0x1c4/0x1f0 [ 63.468794][ T5071] show_stack+0x2c/0x3c [ 63.469536][ T5071] __dump_stack+0x30/0x40 [ 63.470307][ T5071] dump_stack_lvl+0xf4/0x15c [ 63.471134][ T5071] dump_stack+0x1c/0x5c [ 63.471846][ T5071] should_fail_ex+0x3cc/0x524 [ 63.472573][ T5071] should_fail+0x14/0x24 [ 63.473232][ T5071] should_fail_usercopy+0x20/0x30 [ 63.474032][ T5071] copy_msghdr_from_user+0xc4/0x4e0 [ 63.474902][ T5071] __sys_sendmsg+0x230/0x374 [ 63.475635][ T5071] __arm64_sys_sendmsg+0x80/0x94 [ 63.476423][ T5071] invoke_syscall+0x98/0x290 [ 63.477157][ T5071] el0_svc_common+0x13c/0x258 [ 63.477907][ T5071] do_el0_svc+0x5c/0x134 [ 63.478603][ T5071] el0_svc+0x58/0x128 [ 63.479250][ T5071] el0t_64_sync_handler+0x84/0xf0 [ 63.480105][ T5071] el0t_64_sync+0x18c/0x190 [ 63.586873][ T5068] loop1: detected capacity change from 0 to 32768 [ 63.628605][ T5074] ntfs: (device loop0): parse_ntfs_boot_sector(): Sector size (256) is smaller than the device block size (512). This is not supported. Sorry. [ 63.631325][ T5074] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 63.660679][ T5068] XFS (loop1): Mounting V5 Filesystem [ 63.687137][ T5068] XFS (loop1): Ending clean mount [ 63.689826][ T5068] XFS (loop1): Quotacheck needed: Please wait. [ 63.698532][ T4988] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.707018][ T5068] XFS (loop1): Quotacheck: Done. [ 64.145970][ T5096] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.403625][ T5096] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.484431][ T5105] netlink: 56 bytes leftover after parsing attributes in process `syz.3.128'. [ 64.493774][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495038][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.499317][ T5107] binder: 5106:5107 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 64.596654][ T5115] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.599915][ T4328] XFS (loop1): Unmounting Filesystem [ 64.601550][ T4575] udevd[4575]: incorrect nilfs2 checksum on /dev/loop2 [ 64.906076][ T5118] FAULT_INJECTION: forcing a failure. [ 64.906076][ T5118] name failslab, interval 1, probability 0, space 0, times 0 [ 64.908244][ T5118] CPU: 0 PID: 5118 Comm: syz.0.133 Not tainted syzkaller #0 [ 64.909571][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 64.911570][ T5118] Call trace: [ 64.912111][ T5118] dump_backtrace+0x1c4/0x1f0 [ 64.912825][ T5118] show_stack+0x2c/0x3c [ 64.913496][ T5118] __dump_stack+0x30/0x40 [ 64.914216][ T5118] dump_stack_lvl+0xf4/0x15c [ 64.914940][ T5118] dump_stack+0x1c/0x5c [ 64.915664][ T5118] should_fail_ex+0x3cc/0x524 [ 64.916423][ T5118] __should_failslab+0xc0/0x11c [ 64.917197][ T5118] should_failslab+0x10/0x28 [ 64.917947][ T5118] kmem_cache_alloc+0x88/0x310 [ 64.918736][ T5118] getname_flags+0xb8/0x458 [ 64.919483][ T5118] __arm64_sys_unlinkat+0xb4/0xfc [ 64.920350][ T5118] invoke_syscall+0x98/0x290 [ 64.921159][ T5118] el0_svc_common+0x13c/0x258 [ 64.921900][ T5118] do_el0_svc+0x5c/0x134 [ 64.922635][ T5118] el0_svc+0x58/0x128 [ 64.923315][ T5118] el0t_64_sync_handler+0x84/0xf0 [ 64.924162][ T5118] el0t_64_sync+0x18c/0x190 [ 65.141811][ T5122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'. [ 65.335263][ T5130] set_capacity_and_notify: 4 callbacks suppressed [ 65.335271][ T5130] loop0: detected capacity change from 0 to 4096 [ 65.338972][ T5130] ntfs: (device loop0): parse_ntfs_boot_sector(): Sector size (256) is smaller than the device block size (512). This is not supported. Sorry. [ 65.341467][ T5130] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 65.411617][ T4575] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.485535][ T5132] loop4: detected capacity change from 0 to 32768 [ 65.492001][ T5132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.138 (5132) [ 65.509262][ T5132] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.514427][ T5132] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 65.518292][ T5132] BTRFS info (device loop4): force clearing of disk cache [ 65.520698][ T5143] FAULT_INJECTION: forcing a failure. [ 65.520698][ T5143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.523296][ T5132] BTRFS info (device loop4): using free space tree [ 65.523865][ T5144] binder: 5141:5144 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 65.526603][ T5143] CPU: 0 PID: 5143 Comm: syz.2.142 Not tainted syzkaller #0 [ 65.527790][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 65.529481][ T5143] Call trace: [ 65.530007][ T5143] dump_backtrace+0x1c4/0x1f0 [ 65.530784][ T5143] show_stack+0x2c/0x3c [ 65.531462][ T5143] __dump_stack+0x30/0x40 [ 65.532178][ T5143] dump_stack_lvl+0xf4/0x15c [ 65.532925][ T5143] dump_stack+0x1c/0x5c [ 65.533606][ T5143] should_fail_ex+0x3cc/0x524 [ 65.534369][ T5143] should_fail+0x14/0x24 [ 65.535047][ T5143] should_fail_usercopy+0x20/0x30 [ 65.535886][ T5143] copy_from_bpfptr+0x84/0x1d8 [ 65.536701][ T5143] __sys_bpf+0x1f8/0x660 [ 65.537400][ T5143] __arm64_sys_bpf+0x80/0x98 [ 65.538110][ T5143] invoke_syscall+0x98/0x290 [ 65.538866][ T5143] el0_svc_common+0x13c/0x258 [ 65.539652][ T5143] do_el0_svc+0x5c/0x134 [ 65.540362][ T5143] el0_svc+0x58/0x128 [ 65.541025][ T5143] el0t_64_sync_handler+0x84/0xf0 [ 65.541866][ T5143] el0t_64_sync+0x18c/0x190 [ 65.605658][ T5132] BTRFS info (device loop4): enabling ssd optimizations [ 65.607546][ T5132] BTRFS info (device loop4): rebuilding free space tree [ 65.624009][ T5132] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.693358][ T5170] loop2: detected capacity change from 0 to 128 [ 65.694832][ T5170] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.719788][ T5170] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.953822][ T27] audit: type=1326 audit(65.940:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.145" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf579228 code=0x7fc00000 [ 66.029697][ T4575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4575) [ 66.250308][ T5176] loop0: detected capacity change from 0 to 32768 [ 66.301004][ T5176] XFS (loop0): Mounting V5 Filesystem [ 66.335048][ T5179] loop4: detected capacity change from 0 to 32768 [ 66.335739][ T5176] XFS (loop0): Ending clean mount [ 66.346630][ T5179] XFS (loop4): Mounting V5 Filesystem [ 66.350583][ T5176] XFS (loop0): Quotacheck needed: Please wait. [ 66.370552][ T5179] XFS (loop4): Ending clean mount [ 66.373044][ T5176] XFS (loop0): Quotacheck: Done. [ 66.381569][ T5179] XFS (loop4): Quotacheck needed: Please wait. [ 66.397671][ T5179] XFS (loop4): Quotacheck: Done. [ 66.416453][ T27] audit: type=1326 audit(66.400:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.145" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffaf579228 code=0x7fc00000 [ 66.522168][ T5203] netlink: 56 bytes leftover after parsing attributes in process `syz.3.150'. [ 66.619533][ T4334] XFS (loop0): Unmounting Filesystem [ 66.920539][ T4335] XFS (loop4): Unmounting Filesystem [ 67.041527][ T5201] loop2: detected capacity change from 0 to 40427 [ 67.056004][ T5201] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 67.058180][ T5201] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 67.067522][ T5201] F2FS-fs (loop2): invalid crc value [ 67.070210][ T5201] F2FS-fs (loop2): invalid crc value [ 67.072144][ T5201] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 67.152846][ T5207] loop0: detected capacity change from 0 to 128 [ 67.204854][ T5207] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.260598][ T5212] loop4: detected capacity change from 0 to 8192 [ 67.269599][ T5212] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 67.276138][ T5212] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 67.284263][ T5212] REISERFS (device loop4): using ordered data mode [ 67.292340][ T5212] reiserfs: using flush barriers [ 67.315038][ T5212] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 67.322922][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 67.330308][ T5212] REISERFS (device loop4): checking transaction log (loop4) [ 67.343246][ T5212] REISERFS (device loop4): Using r5 hash to sort names [ 67.345711][ T5212] REISERFS (device loop4): using 3.5.x disk format [ 67.349653][ T5212] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 67.408271][ T5224] FAULT_INJECTION: forcing a failure. [ 67.408271][ T5224] name failslab, interval 1, probability 0, space 0, times 0 [ 67.410607][ T5224] CPU: 0 PID: 5224 Comm: syz.0.155 Not tainted syzkaller #0 [ 67.411963][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 67.413601][ T5224] Call trace: [ 67.414132][ T5224] dump_backtrace+0x1c4/0x1f0 [ 67.414899][ T5224] show_stack+0x2c/0x3c [ 67.415575][ T5224] __dump_stack+0x30/0x40 [ 67.416282][ T5224] dump_stack_lvl+0xf4/0x15c [ 67.417026][ T5224] dump_stack+0x1c/0x5c [ 67.417723][ T5224] should_fail_ex+0x3cc/0x524 [ 67.418504][ T5224] __should_failslab+0xc0/0x11c [ 67.419333][ T5224] should_failslab+0x10/0x28 [ 67.420065][ T5224] __kmem_cache_alloc_node+0x7c/0x318 [ 67.420936][ T5224] __kmalloc+0xc4/0x180 [ 67.421614][ T5224] tomoyo_realpath_from_path+0xc4/0x508 [ 67.422509][ T5224] tomoyo_path_number_perm+0x1c4/0x540 [ 67.423431][ T5224] tomoyo_file_ioctl+0x2c/0x3c [ 67.424237][ T5224] security_file_ioctl+0x80/0xbc [ 67.425004][ T5224] __arm64_sys_ioctl+0xa8/0x1c8 [ 67.425825][ T5224] invoke_syscall+0x98/0x290 [ 67.426554][ T5224] el0_svc_common+0x200/0x258 [ 67.427332][ T5224] do_el0_svc+0x5c/0x134 [ 67.428031][ T5224] el0_svc+0x58/0x128 [ 67.428716][ T5224] el0t_64_sync_handler+0x84/0xf0 [ 67.429500][ T5224] el0t_64_sync+0x18c/0x190 [ 67.434112][ T5224] ERROR: Out of memory at tomoyo_realpath_from_path. [ 67.642852][ T5242] loop3: detected capacity change from 0 to 1024 [ 67.644543][ T5242] EXT4-fs: Invalid gid value -1 [ 67.701386][ T5248] loop0: detected capacity change from 0 to 131072 [ 67.778494][ T5250] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.851533][ T5250] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.856268][ T5265] FAULT_INJECTION: forcing a failure. [ 68.856268][ T5265] name failslab, interval 1, probability 0, space 0, times 0 [ 68.866052][ T5265] CPU: 1 PID: 5265 Comm: syz.0.168 Not tainted syzkaller #0 [ 68.867378][ T5265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 68.869226][ T5265] Call trace: [ 68.869823][ T5265] dump_backtrace+0x1c4/0x1f0 [ 68.870686][ T5265] show_stack+0x2c/0x3c [ 68.871450][ T5265] __dump_stack+0x30/0x40 [ 68.872249][ T5265] dump_stack_lvl+0xf4/0x15c [ 68.873048][ T5265] dump_stack+0x1c/0x5c [ 68.873765][ T5265] should_fail_ex+0x3cc/0x524 [ 68.874573][ T5265] __should_failslab+0xc0/0x11c [ 68.875422][ T5265] should_failslab+0x10/0x28 [ 68.876233][ T5265] kmem_cache_alloc+0x88/0x310 [ 68.877070][ T5265] getname_flags+0xb8/0x458 [ 68.877857][ T5265] __arm64_sys_renameat2+0xbc/0x104 [ 68.878758][ T5265] invoke_syscall+0x98/0x290 [ 68.879547][ T5265] el0_svc_common+0x13c/0x258 [ 68.880344][ T5265] do_el0_svc+0x5c/0x134 [ 68.881058][ T5265] el0_svc+0x58/0x128 [ 68.881732][ T5265] el0t_64_sync_handler+0x84/0xf0 [ 68.882593][ T5265] el0t_64_sync+0x18c/0x190 [ 68.936826][ T5272] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.970436][ T4679] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/1 [ 68.972369][ T4679] hid-generic: probe of 0005:16C0:5505.0001 failed with error -22 [ 69.075298][ T5284] binder: 5283:5284 ioctl 4018620d 0 returned -22 [ 69.077085][ T5284] binder: 5283:5284 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 69.079989][ T5284] binder: 5283:5284 got transaction to invalid handle, 1 [ 69.081379][ T5284] binder: 5284:5283 cannot find target node [ 69.082339][ T5284] binder: 5283:5284 transaction call to 0:0 failed 12/29201/-22, size 72-24 line 3062 [ 69.200491][ T5289] FAULT_INJECTION: forcing a failure. [ 69.200491][ T5289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.208638][ T5289] CPU: 1 PID: 5289 Comm: syz.1.177 Not tainted syzkaller #0 [ 69.209980][ T5289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 69.211709][ T5289] Call trace: [ 69.212250][ T5289] dump_backtrace+0x1c4/0x1f0 [ 69.213029][ T5289] show_stack+0x2c/0x3c [ 69.213721][ T5289] __dump_stack+0x30/0x40 [ 69.214452][ T5289] dump_stack_lvl+0xf4/0x15c [ 69.215217][ T5289] dump_stack+0x1c/0x5c [ 69.215925][ T5289] should_fail_ex+0x3cc/0x524 [ 69.216719][ T5289] should_fail+0x14/0x24 [ 69.217453][ T5289] should_fail_usercopy+0x20/0x30 [ 69.218323][ T5289] copy_from_bpfptr+0x84/0x1d8 [ 69.219130][ T5289] __sys_bpf+0x1f8/0x660 [ 69.219887][ T5289] __arm64_sys_bpf+0x80/0x98 [ 69.220756][ T5289] invoke_syscall+0x98/0x290 [ 69.221549][ T5289] el0_svc_common+0x13c/0x258 [ 69.222374][ T5289] do_el0_svc+0x5c/0x134 [ 69.223155][ T5289] el0_svc+0x58/0x128 [ 69.223843][ T5289] el0t_64_sync_handler+0x84/0xf0 [ 69.224725][ T5289] el0t_64_sync+0x18c/0x190 [ 69.306305][ T27] audit: type=1807 audit(69.290:4): UNKNOWN=\ res=0 [ 69.307802][ T27] audit: type=1802 audit(69.290:5): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.180" res=0 errno=0 [ 69.315488][ T27] audit: type=1807 audit(69.300:6): action=measure func=FILE_CHECK res=1 [ 69.317931][ T5299] ima: policy update failed [ 69.320479][ T27] audit: type=1802 audit(69.300:7): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.180" res=0 errno=0 [ 69.414867][ T5306] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.423794][ T5306] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.664779][ T3435] cfg80211: failed to load regulatory.db [ 70.193719][ T5315] binder: 5314:5315 ioctl 4018620d 0 returned -22 [ 70.196154][ T5315] binder: 5314:5315 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 70.206406][ T5315] binder: 5314:5315 got transaction to invalid handle, 1 [ 70.208814][ T5315] binder: 5315:5314 cannot find target node [ 70.219323][ T5315] binder: 5314:5315 transaction call to 0:0 failed 15/29201/-22, size 72-24 line 3062 [ 70.259792][ T5316] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 70.265335][ T5316] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 70.269158][ T5316] REISERFS (device loop4): using ordered data mode [ 70.270295][ T5316] reiserfs: using flush barriers [ 70.304782][ T5316] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.314195][ T5316] REISERFS (device loop4): checking transaction log (loop4) [ 70.318505][ T5316] REISERFS (device loop4): Using r5 hash to sort names [ 70.319860][ T5316] REISERFS (device loop4): using 3.5.x disk format [ 70.321089][ T5316] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 70.795514][ T5304] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 70.797239][ T5304] XFS (loop2): Mounting V5 Filesystem [ 70.877650][ T5334] FAULT_INJECTION: forcing a failure. [ 70.877650][ T5334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.881846][ T5304] XFS (loop2): Ending clean mount [ 70.898449][ T5304] XFS (loop2): Quotacheck needed: Please wait. [ 70.899995][ T5334] CPU: 0 PID: 5334 Comm: syz.3.189 Not tainted syzkaller #0 [ 70.901084][ T5334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 70.902603][ T5334] Call trace: [ 70.903118][ T5334] dump_backtrace+0x1c4/0x1f0 [ 70.903883][ T5334] show_stack+0x2c/0x3c [ 70.904553][ T5334] __dump_stack+0x30/0x40 [ 70.905266][ T5334] dump_stack_lvl+0xf4/0x15c [ 70.906022][ T5334] dump_stack+0x1c/0x5c [ 70.906713][ T5334] should_fail_ex+0x3cc/0x524 [ 70.907502][ T5334] should_fail+0x14/0x24 [ 70.908240][ T5334] should_fail_usercopy+0x20/0x30 [ 70.909062][ T5334] copy_msghdr_from_user+0xc4/0x4e0 [ 70.909937][ T5334] do_recvmmsg+0x338/0x9d8 [ 70.910688][ T5334] __arm64_sys_recvmmsg+0x184/0x244 [ 70.911554][ T5334] invoke_syscall+0x98/0x290 [ 70.912293][ T5334] el0_svc_common+0x13c/0x258 [ 70.913086][ T5334] do_el0_svc+0x5c/0x134 [ 70.913796][ T5334] el0_svc+0x58/0x128 [ 70.914485][ T5334] el0t_64_sync_handler+0x84/0xf0 [ 70.915363][ T5334] el0t_64_sync+0x18c/0x190 [ 70.936212][ T5304] XFS (loop2): Quotacheck: Done. [ 71.012297][ T4333] XFS (loop2): Unmounting Filesystem [ 71.154852][ T5342] set_capacity_and_notify: 5 callbacks suppressed [ 71.154859][ T5342] loop1: detected capacity change from 0 to 2048 [ 71.208012][ T5346] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.222211][ T5343] loop4: detected capacity change from 0 to 8192 [ 71.232028][ T5343] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 71.236861][ T5343] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 71.238542][ T5343] REISERFS (device loop4): using ordered data mode [ 71.239877][ T5343] reiserfs: using flush barriers [ 71.241198][ T5343] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.244599][ T5343] REISERFS (device loop4): checking transaction log (loop4) [ 71.268348][ T5351] FAULT_INJECTION: forcing a failure. [ 71.268348][ T5351] name failslab, interval 1, probability 0, space 0, times 0 [ 71.282530][ T5351] CPU: 0 PID: 5351 Comm: syz.3.194 Not tainted syzkaller #0 [ 71.283855][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 71.285583][ T5351] Call trace: [ 71.286156][ T5351] dump_backtrace+0x1c4/0x1f0 [ 71.286938][ T5351] show_stack+0x2c/0x3c [ 71.287651][ T5351] __dump_stack+0x30/0x40 [ 71.288374][ T5351] dump_stack_lvl+0xf4/0x15c [ 71.289153][ T5351] dump_stack+0x1c/0x5c [ 71.289874][ T5351] should_fail_ex+0x3cc/0x524 [ 71.290699][ T5351] __should_failslab+0xc0/0x11c [ 71.291531][ T5351] should_failslab+0x10/0x28 [ 71.292272][ T5351] kmem_cache_alloc+0x88/0x310 [ 71.293010][ T5351] getname_flags+0xb8/0x458 [ 71.293780][ T5351] __arm64_sys_symlinkat+0x80/0xbc [ 71.294633][ T5351] invoke_syscall+0x98/0x290 [ 71.295381][ T5351] el0_svc_common+0x13c/0x258 [ 71.296186][ T5351] do_el0_svc+0x5c/0x134 [ 71.296854][ T5351] el0_svc+0x58/0x128 [ 71.297528][ T5351] el0t_64_sync_handler+0x84/0xf0 [ 71.298341][ T5351] el0t_64_sync+0x18c/0x190 [ 71.303501][ T5343] REISERFS (device loop4): Using tea hash to sort names [ 71.309818][ T5343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.191'. [ 71.312090][ T5343] reiserfs: enabling write barrier flush mode [ 71.373640][ T5343] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 71.507470][ T5357] loop0: detected capacity change from 0 to 4096 [ 71.515045][ T5357] ntfs: (device loop0): parse_ntfs_boot_sector(): Sector size (256) is smaller than the device block size (512). This is not supported. Sorry. [ 71.517706][ T5357] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 71.633256][ T4988] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.635182][ T5360] Soft offlining pfn 0x13cb91 at process virtual address 0x20000000 [ 71.643838][ T5360] Soft offlining pfn 0x13a4d3 at process virtual address 0x20001000 [ 71.649704][ T5360] Soft offlining pfn 0x138a88 at process virtual address 0x20002000 [ 71.654169][ T5360] Soft offlining pfn 0x13ab72 at process virtual address 0x20003000 [ 71.666130][ T5360] Soft offlining pfn 0x139a38 at process virtual address 0x20004000 [ 71.676231][ T5360] Soft offlining pfn 0x137634 at process virtual address 0x20005000 [ 71.680579][ T5364] binder: 5363:5364 ioctl 4018620d 0 returned -22 [ 71.695583][ T5364] binder: 5363:5364 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 71.698303][ T5364] binder: 5363:5364 got transaction to invalid handle, 1 [ 71.699550][ T5364] binder: 5364:5363 cannot find target node [ 71.700592][ T5364] binder: 5363:5364 transaction call to 0:0 failed 18/29201/-22, size 72-24 line 3062 [ 71.820478][ T5370] loop2: detected capacity change from 0 to 2048 [ 71.824363][ T5370] UDF-fs: bad mount option "" or missing value [ 71.858052][ T5378] loop1: detected capacity change from 0 to 2048 [ 71.863894][ T4606] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.867755][ T5370] netlink: 332 bytes leftover after parsing attributes in process `syz.2.190'. [ 71.869639][ T5370] netlink: 'syz.2.190': attribute type 9 has an invalid length. [ 71.877959][ T5373] loop1: detected capacity change from 0 to 64 [ 71.879320][ T5370] netlink: 108 bytes leftover after parsing attributes in process `syz.2.190'. [ 71.883584][ T5373] hfs: dir_umask requires a value [ 71.886097][ T5370] netlink: 'syz.2.190': attribute type 6 has an invalid length. [ 71.888611][ T5380] loop3: detected capacity change from 0 to 8192 [ 71.889641][ T5373] hfs: unable to parse mount options [ 71.900782][ T5380] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 71.903403][ T5380] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 71.906596][ T5373] netlink: 68 bytes leftover after parsing attributes in process `syz.1.199'. [ 71.907159][ T5380] REISERFS (device loop3): using ordered data mode [ 71.908469][ T5373] netlink: 248 bytes leftover after parsing attributes in process `syz.1.199'. [ 71.910461][ T5380] reiserfs: using flush barriers [ 71.916024][ T5380] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.928644][ T5380] REISERFS (device loop3): checking transaction log (loop3) [ 71.935678][ T5380] REISERFS (device loop3): Using r5 hash to sort names [ 71.956960][ T5380] REISERFS (device loop3): using 3.5.x disk format [ 71.958415][ T5380] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 72.467202][ T5394] FAULT_INJECTION: forcing a failure. [ 72.467202][ T5394] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 72.472609][ T5394] CPU: 0 PID: 5394 Comm: syz.0.203 Not tainted syzkaller #0 [ 72.473890][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 72.475647][ T5394] Call trace: [ 72.476252][ T5394] dump_backtrace+0x1c4/0x1f0 [ 72.477024][ T5394] show_stack+0x2c/0x3c [ 72.477716][ T5394] __dump_stack+0x30/0x40 [ 72.478455][ T5394] dump_stack_lvl+0xf4/0x15c [ 72.479252][ T5394] dump_stack+0x1c/0x5c [ 72.479960][ T5394] should_fail_ex+0x3cc/0x524 [ 72.480780][ T5394] should_fail_alloc_page+0x74/0xb8 [ 72.481690][ T5394] prepare_alloc_pages+0x1b8/0x4f0 [ 72.482504][ T5394] __alloc_pages+0x134/0x544 [ 72.483251][ T5394] __folio_alloc+0x1c/0x44 [ 72.484140][ T5394] vma_alloc_folio+0x37c/0x8ac [ 72.484987][ T5394] alloc_zeroed_user_highpage_movable+0x78/0x8c [ 72.486044][ T5394] handle_mm_fault+0x1788/0x3018 [ 72.486859][ T5394] do_page_fault+0x310/0x99c [ 72.487641][ T5394] do_translation_fault+0x94/0xc8 [ 72.488508][ T5394] do_mem_abort+0x70/0x198 [ 72.489200][ T5394] el0_da+0x70/0x144 [ 72.489831][ T5394] el0t_64_sync_handler+0x90/0xf0 [ 72.490641][ T5394] el0t_64_sync+0x18c/0x190 [ 72.493523][ T5394] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 72.528709][ T5399] loop8: detected capacity change from 0 to 8 [ 72.531696][ T4575] Dev loop8: unable to read RDB block 8 [ 72.535653][ T4575] loop8: unable to read partition table [ 72.536881][ T4575] loop8: partition table beyond EOD, truncated [ 72.541035][ T5399] Dev loop8: unable to read RDB block 8 [ 72.542158][ T5399] loop8: unable to read partition table [ 72.543158][ T5384] loop2: detected capacity change from 0 to 32768 [ 72.546582][ T5399] loop8: partition table beyond EOD, truncated [ 72.548727][ T5399] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 72.573127][ T5384] JBD2: Ignoring recovery information on journal [ 72.645583][ T5384] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 72.765744][ T5409] loop4: detected capacity change from 0 to 128 [ 72.767599][ T5409] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.814951][ T5409] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.137143][ T4333] ocfs2: Unmounting device (7,2) on (node local) [ 73.148119][ T5419] FAULT_INJECTION: forcing a failure. [ 73.148119][ T5419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.150550][ T5419] CPU: 0 PID: 5419 Comm: syz.3.210 Not tainted syzkaller #0 [ 73.151878][ T5419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.153534][ T5419] Call trace: [ 73.154107][ T5419] dump_backtrace+0x1c4/0x1f0 [ 73.154918][ T5419] show_stack+0x2c/0x3c [ 73.155631][ T5419] __dump_stack+0x30/0x40 [ 73.156365][ T5419] dump_stack_lvl+0xf4/0x15c [ 73.157098][ T5419] dump_stack+0x1c/0x5c [ 73.157757][ T5419] should_fail_ex+0x3cc/0x524 [ 73.158510][ T5419] should_fail+0x14/0x24 [ 73.159176][ T5419] should_fail_usercopy+0x20/0x30 [ 73.159965][ T5419] copy_msghdr_from_user+0xc4/0x4e0 [ 73.160799][ T5419] __sys_recvmsg+0x1f4/0x33c [ 73.161575][ T5419] __arm64_sys_recvmsg+0x80/0x94 [ 73.162391][ T5419] invoke_syscall+0x98/0x290 [ 73.163147][ T5419] el0_svc_common+0x13c/0x258 [ 73.163930][ T5419] do_el0_svc+0x5c/0x134 [ 73.164637][ T5419] el0_svc+0x58/0x128 [ 73.165303][ T5419] el0t_64_sync_handler+0x84/0xf0 [ 73.166104][ T5419] el0t_64_sync+0x18c/0x190 [ 73.226049][ T5423] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.230230][ T5423] syz.3.212 (pid 5423) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 73.250228][ T5428] binder: BINDER_SET_CONTEXT_MGR already set [ 73.254781][ T4988] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.256657][ T5428] binder: 5427:5428 ioctl 4018620d 20004a80 returned -16 [ 73.263259][ T5428] binder: 5427:5428 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 73.270947][ T5428] binder: 5428 RLIMIT_NICE not set [ 73.287117][ T5423] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)" [ 73.307971][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 73.430981][ T5444] FAULT_INJECTION: forcing a failure. [ 73.430981][ T5444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.433814][ T5444] CPU: 1 PID: 5444 Comm: syz.3.215 Not tainted syzkaller #0 [ 73.435022][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.436808][ T5444] Call trace: [ 73.437391][ T5444] dump_backtrace+0x1c4/0x1f0 [ 73.438268][ T5444] show_stack+0x2c/0x3c [ 73.439007][ T5444] __dump_stack+0x30/0x40 [ 73.439750][ T5444] dump_stack_lvl+0xf4/0x15c [ 73.440569][ T5444] dump_stack+0x1c/0x5c [ 73.441300][ T5444] should_fail_ex+0x3cc/0x524 [ 73.442115][ T5444] should_fail+0x14/0x24 [ 73.442883][ T5444] should_fail_usercopy+0x20/0x30 [ 73.443787][ T5444] copy_msghdr_from_user+0xc4/0x4e0 [ 73.444719][ T5444] __sys_sendmmsg+0x2f4/0x7ec [ 73.445569][ T5444] __arm64_sys_sendmmsg+0xa4/0xc0 [ 73.446468][ T5444] invoke_syscall+0x98/0x290 [ 73.447292][ T5444] el0_svc_common+0x13c/0x258 [ 73.448118][ T5444] do_el0_svc+0x5c/0x134 [ 73.448861][ T5444] el0_svc+0x58/0x128 [ 73.449569][ T5444] el0t_64_sync_handler+0x84/0xf0 [ 73.450466][ T5444] el0t_64_sync+0x18c/0x190 [ 73.593487][ T5453] FAULT_INJECTION: forcing a failure. [ 73.593487][ T5453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.597171][ T5453] CPU: 1 PID: 5453 Comm: syz.2.218 Not tainted syzkaller #0 [ 73.598186][ T5448] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.598527][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.602694][ T5453] Call trace: [ 73.603343][ T5453] dump_backtrace+0x1c4/0x1f0 [ 73.604261][ T5448] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 73.604282][ T5453] show_stack+0x2c/0x3c [ 73.606550][ T5453] __dump_stack+0x30/0x40 [ 73.607005][ T5448] REISERFS (device loop0): using ordered data mode [ 73.607324][ T5453] dump_stack_lvl+0xf4/0x15c [ 73.609136][ T5453] dump_stack+0x1c/0x5c [ 73.609551][ T5448] reiserfs: using flush barriers [ 73.609819][ T5453] should_fail_ex+0x3cc/0x524 [ 73.611387][ T5453] should_fail+0x14/0x24 [ 73.612137][ T5453] should_fail_usercopy+0x20/0x30 [ 73.613045][ T5453] __cgroup_bpf_run_filter_setsockopt+0x278/0xbe0 [ 73.614101][ T5453] __sys_setsockopt+0x4c0/0x50c [ 73.614213][ T5448] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.614922][ T5453] __arm64_sys_setsockopt+0xc0/0xdc [ 73.618553][ T5453] invoke_syscall+0x98/0x290 [ 73.619376][ T5453] el0_svc_common+0x13c/0x258 [ 73.620185][ T5453] do_el0_svc+0x5c/0x134 [ 73.620935][ T5453] el0_svc+0x58/0x128 [ 73.621643][ T5453] el0t_64_sync_handler+0x84/0xf0 [ 73.622496][ T5453] el0t_64_sync+0x18c/0x190 [ 73.622640][ T5448] REISERFS (device loop0): checking transaction log (loop0) [ 73.628722][ T5448] REISERFS (device loop0): Using r5 hash to sort names [ 73.631637][ T5448] REISERFS (device loop0): using 3.5.x disk format [ 73.639471][ T5448] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 73.730743][ T5458] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.734265][ T5458] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 73.736726][ T5458] REISERFS (device loop2): using ordered data mode [ 73.737784][ T5458] reiserfs: using flush barriers [ 73.739410][ T5462] FAULT_INJECTION: forcing a failure. [ 73.739410][ T5462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.742032][ T5458] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.747139][ T5462] CPU: 0 PID: 5462 Comm: syz.4.222 Not tainted syzkaller #0 [ 73.748261][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.749762][ T5462] Call trace: [ 73.750240][ T5462] dump_backtrace+0x1c4/0x1f0 [ 73.750937][ T5462] show_stack+0x2c/0x3c [ 73.751591][ T5462] __dump_stack+0x30/0x40 [ 73.752269][ T5462] dump_stack_lvl+0xf4/0x15c [ 73.752629][ T5458] REISERFS (device loop2): checking transaction log (loop2) [ 73.752986][ T5462] dump_stack+0x1c/0x5c [ 73.755102][ T5462] should_fail_ex+0x3cc/0x524 [ 73.755837][ T5462] should_fail+0x14/0x24 [ 73.756498][ T5462] should_fail_usercopy+0x20/0x30 [ 73.757317][ T5462] __cgroup_bpf_run_filter_setsockopt+0x278/0xbe0 [ 73.758379][ T5462] __sys_setsockopt+0x4c0/0x50c [ 73.759176][ T5462] __arm64_sys_setsockopt+0xc0/0xdc [ 73.760042][ T5462] invoke_syscall+0x98/0x290 [ 73.760789][ T5462] el0_svc_common+0x13c/0x258 [ 73.761581][ T5462] do_el0_svc+0x5c/0x134 [ 73.762327][ T5462] el0_svc+0x58/0x128 [ 73.762987][ T5462] el0t_64_sync_handler+0x84/0xf0 [ 73.763758][ T5462] el0t_64_sync+0x18c/0x190 [ 73.768794][ T5458] REISERFS (device loop2): Using r5 hash to sort names [ 73.770921][ T5458] REISERFS (device loop2): using 3.5.x disk format [ 73.773764][ T5458] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 73.918517][ T5472] FAULT_INJECTION: forcing a failure. [ 73.918517][ T5472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.921244][ T5472] CPU: 0 PID: 5472 Comm: syz.4.225 Not tainted syzkaller #0 [ 73.922511][ T5472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.924274][ T5472] Call trace: [ 73.924837][ T5472] dump_backtrace+0x1c4/0x1f0 [ 73.925665][ T5472] show_stack+0x2c/0x3c [ 73.926346][ T5472] __dump_stack+0x30/0x40 [ 73.927096][ T5472] dump_stack_lvl+0xf4/0x15c [ 73.927897][ T5472] dump_stack+0x1c/0x5c [ 73.928604][ T5472] should_fail_ex+0x3cc/0x524 [ 73.929417][ T5472] should_fail+0x14/0x24 [ 73.930093][ T5472] should_fail_usercopy+0x20/0x30 [ 73.930961][ T5472] copy_msghdr_from_user+0xc4/0x4e0 [ 73.931815][ T5472] __sys_recvmsg+0x1f4/0x33c [ 73.932610][ T5472] __arm64_sys_recvmsg+0x80/0x94 [ 73.933413][ T5472] invoke_syscall+0x98/0x290 [ 73.934169][ T5472] el0_svc_common+0x13c/0x258 [ 73.934942][ T5472] do_el0_svc+0x5c/0x134 [ 73.935620][ T5472] el0_svc+0x58/0x128 [ 73.936259][ T5472] el0t_64_sync_handler+0x84/0xf0 [ 73.937073][ T5472] el0t_64_sync+0x18c/0x190 [ 74.291402][ T5488] binder: BINDER_SET_CONTEXT_MGR already set [ 74.292940][ T5488] binder: 5487:5488 ioctl 4018620d 20004a80 returned -16 [ 74.294529][ T5488] binder: 5487:5488 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 74.296771][ T5488] binder: 5488 RLIMIT_NICE not set [ 74.941282][ T5505] netlink: 68 bytes leftover after parsing attributes in process `syz.3.233'. [ 74.943755][ T5505] netlink: 248 bytes leftover after parsing attributes in process `syz.3.233'. [ 74.972070][ T5507] FAULT_INJECTION: forcing a failure. [ 74.972070][ T5507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.977284][ T5507] CPU: 1 PID: 5507 Comm: syz.2.234 Not tainted syzkaller #0 [ 74.978604][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 74.980417][ T5507] Call trace: [ 74.981021][ T5507] dump_backtrace+0x1c4/0x1f0 [ 74.981915][ T5507] show_stack+0x2c/0x3c [ 74.982641][ T5507] __dump_stack+0x30/0x40 [ 74.983375][ T5507] dump_stack_lvl+0xf4/0x15c [ 74.984185][ T5507] dump_stack+0x1c/0x5c [ 74.984937][ T5507] should_fail_ex+0x3cc/0x524 [ 74.985760][ T5507] should_fail+0x14/0x24 [ 74.986513][ T5507] should_fail_usercopy+0x20/0x30 [ 74.987388][ T5507] copy_from_sockptr+0x70/0x1b0 [ 74.988223][ T5507] sk_getsockopt+0x104/0x15f0 [ 74.989022][ T5507] sock_getsockopt+0x64/0x78 [ 74.989815][ T5507] __sys_getsockopt+0x184/0x474 [ 74.990611][ T5507] __arm64_sys_getsockopt+0xc0/0xdc [ 74.991507][ T5507] invoke_syscall+0x98/0x290 [ 74.992333][ T5507] el0_svc_common+0x13c/0x258 [ 74.993178][ T5507] do_el0_svc+0x5c/0x134 [ 74.993971][ T5507] el0_svc+0x58/0x128 [ 74.994695][ T5507] el0t_64_sync_handler+0x84/0xf0 [ 74.995582][ T5507] el0t_64_sync+0x18c/0x190 [ 75.098731][ T4988] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.016240][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 76.057694][ T5518] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.059857][ T5518] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 76.066189][ T5518] REISERFS (device loop2): using ordered data mode [ 76.067329][ T5518] reiserfs: using flush barriers [ 76.083423][ T5518] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.109036][ T5518] REISERFS (device loop2): checking transaction log (loop2) [ 76.122052][ T5518] REISERFS (device loop2): Using r5 hash to sort names [ 76.127459][ T5518] REISERFS (device loop2): using 3.5.x disk format [ 76.137581][ T5518] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 76.195512][ T5528] set_capacity_and_notify: 8 callbacks suppressed [ 76.195519][ T5528] loop0: detected capacity change from 0 to 131072 [ 76.543640][ T5540] FAULT_INJECTION: forcing a failure. [ 76.543640][ T5540] name failslab, interval 1, probability 0, space 0, times 0 [ 76.546020][ T5540] CPU: 0 PID: 5540 Comm: syz.1.248 Not tainted syzkaller #0 [ 76.547306][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 76.549001][ T5540] Call trace: [ 76.549581][ T5540] dump_backtrace+0x1c4/0x1f0 [ 76.550365][ T5540] show_stack+0x2c/0x3c [ 76.551071][ T5540] __dump_stack+0x30/0x40 [ 76.551842][ T5540] dump_stack_lvl+0xf4/0x15c [ 76.552606][ T5540] dump_stack+0x1c/0x5c [ 76.553334][ T5540] should_fail_ex+0x3cc/0x524 [ 76.554141][ T5540] __should_failslab+0xc0/0x11c [ 76.554967][ T5540] should_failslab+0x10/0x28 [ 76.555739][ T5540] __kmem_cache_alloc_node+0x7c/0x318 [ 76.556669][ T5540] __kmalloc+0xc4/0x180 [ 76.557366][ T5540] tomoyo_realpath_from_path+0xc4/0x508 [ 76.558305][ T5540] tomoyo_path_number_perm+0x1c4/0x540 [ 76.559235][ T5540] tomoyo_file_ioctl+0x2c/0x3c [ 76.560028][ T5540] security_file_ioctl+0x80/0xbc [ 76.560843][ T5540] __arm64_sys_ioctl+0xa8/0x1c8 [ 76.561616][ T5540] invoke_syscall+0x98/0x290 [ 76.562351][ T5540] el0_svc_common+0x13c/0x258 [ 76.563138][ T5540] do_el0_svc+0x5c/0x134 [ 76.563788][ T5540] el0_svc+0x58/0x128 [ 76.564416][ T5540] el0t_64_sync_handler+0x84/0xf0 [ 76.565224][ T5540] el0t_64_sync+0x18c/0x190 [ 76.575845][ T5540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 77.439104][ T5562] loop3: detected capacity change from 0 to 128 [ 77.443746][ T5562] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.564620][ T5562] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.665004][ T5564] FAULT_INJECTION: forcing a failure. [ 77.665004][ T5564] name failslab, interval 1, probability 0, space 0, times 0 [ 77.673094][ T5564] CPU: 1 PID: 5564 Comm: syz.4.254 Not tainted syzkaller #0 [ 77.674413][ T5564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 77.676107][ T5564] Call trace: [ 77.676757][ T5564] dump_backtrace+0x1c4/0x1f0 [ 77.677586][ T5564] show_stack+0x2c/0x3c [ 77.678329][ T5564] __dump_stack+0x30/0x40 [ 77.679077][ T5564] dump_stack_lvl+0xf4/0x15c [ 77.679900][ T5564] dump_stack+0x1c/0x5c [ 77.680610][ T5564] should_fail_ex+0x3cc/0x524 [ 77.681420][ T5564] __should_failslab+0xc0/0x11c [ 77.682266][ T5564] should_failslab+0x10/0x28 [ 77.683078][ T5564] __kmem_cache_alloc_node+0x7c/0x318 [ 77.684035][ T5564] __kmalloc+0xc4/0x180 [ 77.684714][ T5564] sock_kmalloc+0xb0/0x158 [ 77.685466][ T5564] alg_setkey+0x68/0x294 [ 77.686159][ T5564] alg_setsockopt+0x26c/0x36c [ 77.686938][ T5564] __sys_setsockopt+0x2fc/0x50c [ 77.687757][ T5564] __arm64_sys_setsockopt+0xc0/0xdc [ 77.688629][ T5564] invoke_syscall+0x98/0x290 [ 77.689389][ T5564] el0_svc_common+0x13c/0x258 [ 77.690150][ T5564] do_el0_svc+0x5c/0x134 [ 77.690901][ T5564] el0_svc+0x58/0x128 [ 77.691550][ T5564] el0t_64_sync_handler+0x84/0xf0 [ 77.692423][ T5564] el0t_64_sync+0x18c/0x190 [ 77.919799][ T5572] syz.2.256 (5572): drop_caches: 2 [ 78.229663][ T5576] loop3: detected capacity change from 0 to 8 [ 78.630564][ T5591] loop2: detected capacity change from 0 to 2048 [ 78.640403][ T5592] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.819892][ T5595] loop1: detected capacity change from 0 to 8192 [ 78.835058][ T5595] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 78.837309][ T5595] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 78.843787][ T5595] REISERFS (device loop1): using ordered data mode [ 78.844879][ T5595] reiserfs: using flush barriers [ 78.851894][ T5595] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.152603][ T5595] REISERFS (device loop1): checking transaction log (loop1) [ 79.159707][ T5595] REISERFS (device loop1): Using r5 hash to sort names [ 79.161359][ T5595] REISERFS (device loop1): using 3.5.x disk format [ 79.163828][ T5595] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 79.921963][ T5619] loop1: detected capacity change from 0 to 128 [ 79.923719][ T5619] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.926419][ T5619] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.664367][ T5634] syz.3.275 (5634): drop_caches: 2 [ 80.963408][ T5639] FAULT_INJECTION: forcing a failure. [ 80.963408][ T5639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.966655][ T5639] CPU: 0 PID: 5639 Comm: syz.1.278 Not tainted syzkaller #0 [ 80.967849][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 80.969628][ T5639] Call trace: [ 80.970229][ T5639] dump_backtrace+0x1c4/0x1f0 [ 80.971048][ T5639] show_stack+0x2c/0x3c [ 80.971720][ T5639] __dump_stack+0x30/0x40 [ 80.972425][ T5639] dump_stack_lvl+0xf4/0x15c [ 80.973203][ T5639] dump_stack+0x1c/0x5c [ 80.973931][ T5639] should_fail_ex+0x3cc/0x524 [ 80.974741][ T5639] should_fail+0x14/0x24 [ 80.975445][ T5639] should_fail_usercopy+0x20/0x30 [ 80.976289][ T5639] _copy_from_iter+0x190/0xf98 [ 80.977123][ T5639] file_tty_write+0x384/0x6d8 [ 80.977903][ T5639] tty_write+0x44/0x54 [ 80.978611][ T5639] vfs_write+0x3c8/0x7c8 [ 80.979301][ T5639] ksys_write+0x12c/0x228 [ 80.980003][ T5639] __arm64_sys_write+0x7c/0x90 [ 80.980761][ T5639] invoke_syscall+0x98/0x290 [ 80.981559][ T5639] el0_svc_common+0x13c/0x258 [ 80.982303][ T5639] do_el0_svc+0x5c/0x134 [ 80.982987][ T5639] el0_svc+0x58/0x128 [ 80.983652][ T5639] el0t_64_sync_handler+0x84/0xf0 [ 80.984448][ T5639] el0t_64_sync+0x18c/0x190 [ 81.048812][ T5644] loop4: detected capacity change from 0 to 2048 [ 81.058329][ T5645] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.147095][ T5647] loop0: detected capacity change from 0 to 4096 [ 81.162254][ T5647] NILFS (loop0): invalid segment: Checksum error in segment payload [ 81.164934][ T5647] NILFS (loop0): trying rollback from an earlier position [ 81.176783][ T5647] NILFS (loop0): recovery complete [ 81.190353][ T5648] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.357394][ T5654] [ 81.366065][ T5657] FAULT_INJECTION: forcing a failure. [ 81.366065][ T5657] name failslab, interval 1, probability 0, space 0, times 0 [ 81.368754][ T5657] CPU: 0 PID: 5657 Comm: syz.4.285 Not tainted syzkaller #0 [ 81.370029][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.371696][ T5657] Call trace: [ 81.372236][ T5657] dump_backtrace+0x1c4/0x1f0 [ 81.373123][ T5657] show_stack+0x2c/0x3c [ 81.373839][ T5657] __dump_stack+0x30/0x40 [ 81.374585][ T5657] dump_stack_lvl+0xf4/0x15c [ 81.375351][ T5657] dump_stack+0x1c/0x5c [ 81.376033][ T5657] should_fail_ex+0x3cc/0x524 [ 81.376875][ T5657] __should_failslab+0xc0/0x11c [ 81.377704][ T5657] should_failslab+0x10/0x28 [ 81.378459][ T5657] __kmem_cache_alloc_node+0x7c/0x318 [ 81.379351][ T5657] __kmalloc+0xc4/0x180 [ 81.380041][ T5657] devkmsg_write+0x164/0x33c [ 81.380855][ T5657] vfs_write+0x3c8/0x7c8 [ 81.381614][ T5657] ksys_write+0x12c/0x228 [ 81.382384][ T5657] __arm64_sys_write+0x7c/0x90 [ 81.383194][ T5657] invoke_syscall+0x98/0x290 [ 81.383967][ T5657] el0_svc_common+0x13c/0x258 [ 81.384737][ T5657] do_el0_svc+0x5c/0x134 [ 81.385454][ T5657] el0_svc+0x58/0x128 [ 81.386129][ T5657] el0t_64_sync_handler+0x84/0xf0 [ 81.386967][ T5657] el0t_64_sync+0x18c/0x190 [ 81.387711][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.789985][ T5671] loop4: detected capacity change from 0 to 128 [ 81.797677][ T5671] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.101731][ T5671] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.280154][ T5675] [ 82.325820][ T5673] loop2: detected capacity change from 0 to 8192 [ 82.388666][ T5673] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.391001][ T5673] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 82.398478][ T5673] REISERFS (device loop2): using ordered data mode [ 82.402007][ T5673] reiserfs: using flush barriers [ 82.406856][ T5673] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.426496][ T5673] REISERFS (device loop2): checking transaction log (loop2) [ 82.430484][ T5673] REISERFS (device loop2): Using r5 hash to sort names [ 82.464823][ T5673] REISERFS (device loop2): using 3.5.x disk format [ 82.466162][ T5673] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 82.506331][ T5686] loop4: detected capacity change from 0 to 2048 [ 82.595830][ T5692] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.666727][ T5696] binder: 5695:5696 got transaction to invalid handle, 1 [ 82.668003][ T5696] binder: 5696:5695 cannot find target node [ 82.669037][ T5696] binder: 5695:5696 transaction call to 0:0 failed 24/29201/-22, size 72-24 line 3062 [ 82.782780][ T5700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.206516][ T5712] FAULT_INJECTION: forcing a failure. [ 83.206516][ T5712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.209097][ T5712] CPU: 1 PID: 5712 Comm: syz.3.305 Not tainted syzkaller #0 [ 83.210382][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 83.212265][ T5712] Call trace: [ 83.212860][ T5712] dump_backtrace+0x1c4/0x1f0 [ 83.213739][ T5712] show_stack+0x2c/0x3c [ 83.214499][ T5712] __dump_stack+0x30/0x40 [ 83.215306][ T5712] dump_stack_lvl+0xf4/0x15c [ 83.216056][ T5712] dump_stack+0x1c/0x5c [ 83.216809][ T5712] should_fail_ex+0x3cc/0x524 [ 83.217665][ T5712] should_fail+0x14/0x24 [ 83.218396][ T5712] should_fail_usercopy+0x20/0x30 [ 83.219262][ T5712] move_addr_to_kernel+0xa0/0x25c [ 83.220169][ T5712] __sys_sendto+0x20c/0x440 [ 83.220963][ T5712] __arm64_sys_sendto+0xe4/0x104 [ 83.221812][ T5712] invoke_syscall+0x98/0x290 [ 83.222571][ T5712] el0_svc_common+0x13c/0x258 [ 83.223351][ T5712] do_el0_svc+0x5c/0x134 [ 83.224067][ T5712] el0_svc+0x58/0x128 [ 83.224744][ T5712] el0t_64_sync_handler+0x84/0xf0 [ 83.225628][ T5712] el0t_64_sync+0x18c/0x190 [ 83.261908][ T5711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.413672][ T5717] loop4: detected capacity change from 0 to 128 [ 83.415146][ T5717] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.481073][ T5717] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.717012][ T5721] loop2: detected capacity change from 0 to 1024 [ 83.738012][ T5721] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.308: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.745334][ T5721] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 83.749088][ T5721] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.308: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.761230][ T5721] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 83.764244][ T5721] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.308: Failed to acquire dquot type 0 [ 83.766604][ T5721] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 83.771327][ T5721] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.308: mark_inode_dirty error [ 83.776549][ T5721] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 83.779129][ T5721] EXT4-fs (loop2): 1 orphan inode deleted [ 83.781241][ T5721] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.808027][ T5726] loop1: detected capacity change from 0 to 8192 [ 83.810419][ T5726] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.815183][ T5726] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 83.817374][ T5726] REISERFS (device loop1): using ordered data mode [ 83.818604][ T5726] reiserfs: using flush barriers [ 83.820466][ T5726] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.823113][ T5720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.824896][ T5726] REISERFS (device loop1): checking transaction log (loop1) [ 83.827345][ T5726] REISERFS (device loop1): Using r5 hash to sort names [ 83.828765][ T5726] REISERFS (device loop1): using 3.5.x disk format [ 83.830282][ T5726] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 84.002976][ T5730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.010960][ T5733] Illegal XDP return value 4294967274 on prog (id 23) dev syz_tun, expect packet loss! [ 84.137583][ T5735] binder: 5734:5735 got transaction to invalid handle, 1 [ 84.138946][ T5735] binder: 5735:5734 cannot find target node [ 84.140080][ T5735] binder: 5734:5735 transaction call to 0:0 failed 28/29201/-22, size 72-24 line 3062 [ 84.354958][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 84.666924][ T4385] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.674544][ T4385] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 84.677200][ T4385] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 84.691533][ T4333] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 84.696200][ T4333] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 84.700947][ T4333] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 84.804381][ T5764] device syzkaller0 entered promiscuous mode [ 85.541933][ T5777] binder: 5776:5777 got transaction to invalid handle, 1 [ 85.543388][ T5777] binder: 5777:5776 cannot find target node [ 85.544473][ T5777] binder: 5776:5777 transaction call to 0:0 failed 32/29201/-22, size 72-24 line 3062 [ 85.688214][ T5786] loop4: detected capacity change from 0 to 128 [ 85.691246][ T5786] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.699285][ T5786] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.165515][ T5797] loop0: detected capacity change from 0 to 1024 [ 86.165858][ T5797] EXT4-fs: Ignoring removed bh option [ 86.229526][ T5797] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.258547][ T5791] loop2: detected capacity change from 0 to 32768 [ 86.635268][ T5791] (syz.2.330,5791,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.648899][ T5791] (syz.2.330,5791,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.651772][ T5807] device syzkaller0 entered promiscuous mode [ 86.661517][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 86.688189][ T5791] JBD2: Ignoring recovery information on journal [ 86.746508][ T5791] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.758743][ T22] kernel write not supported for file net/rpc/auth.rpcsec.context/channel (pid: 22 comm: kworker/1:0) [ 86.905522][ T4333] ocfs2: Unmounting device (7,2) on (node local) [ 87.028319][ T5827] loop0: detected capacity change from 0 to 32768 [ 87.058906][ T5827] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 87.177631][ T4334] VFS: Lookup of '' in ocfs2 loop0 would have caused loop [ 87.180642][ T4334] VFS: Lookup of '' in ocfs2 loop0 would have caused loop [ 87.216741][ T5358] ocfs2: Unmounting device (7,0) on (node local) [ 87.221636][ T5358] VFS: Busy inodes after unmount of loop0 (ocfs2) [ 87.221690][ T5358] ------------[ cut here ]------------ [ 87.223678][ T5358] kernel BUG at fs/super.c:505! [ 87.224527][ T5358] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 87.225739][ T5358] Modules linked in: [ 87.226506][ T5358] CPU: 0 PID: 5358 Comm: syz.0.195 Not tainted syzkaller #0 [ 87.227764][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 87.229371][ T5358] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 87.230690][ T5358] pc : generic_shutdown_super+0x328/0x32c [ 87.231645][ T5358] lr : generic_shutdown_super+0x328/0x32c [ 87.232593][ T5358] sp : ffff800022247790 [ 87.233297][ T5358] x29: ffff800022247790 x28: ffff0000c427ed80 x27: ffff0000c427ed80 [ 87.234640][ T5358] x26: dfff800000000000 x25: 0000000000000002 x24: 1fffe0001b25f0fb [ 87.235965][ T5358] x23: ffff0000d92f87d8 x22: dfff800000000000 x21: ffff8000120ccec0 [ 87.237263][ T5358] x20: ffff800015a3bd80 x19: ffff0000d92f8000 x18: 1fffe00033e7277e [ 87.238638][ T5358] x17: ffff80001537d000 x16: ffff800011b90080 x15: 0000000000000000 [ 87.240000][ T5358] x14: 0000000000000001 x13: 1fffe00033e727a3 x12: 0000000000000000 [ 87.241368][ T5358] x11: ff00800008315484 x10: 0000000000000000 x9 : 8a90ff2392e8d400 [ 87.242666][ T5358] x8 : 8a90ff2392e8d400 x7 : 0000000000000001 x6 : 0000000000000001 [ 87.244003][ T5358] x5 : ffff800022247258 x4 : ffff800015464e80 x3 : ffff800008540904 [ 87.245382][ T5358] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002f [ 87.246782][ T5358] Call trace: [ 87.247361][ T5358] generic_shutdown_super+0x328/0x32c [ 87.248312][ T5358] kill_block_super+0x78/0xe0 [ 87.249115][ T5358] deactivate_locked_super+0xb4/0x128 [ 87.250017][ T5358] deactivate_super+0xe4/0x104 [ 87.250801][ T5358] cleanup_mnt+0x3a8/0x430 [ 87.251561][ T5358] __cleanup_mnt+0x20/0x30 [ 87.252299][ T5358] task_work_run+0x1f4/0x280 [ 87.253060][ T5358] do_exit+0x54c/0x19ac [ 87.253760][ T5358] do_group_exit+0x198/0x238 [ 87.254525][ T5358] get_signal+0x11f4/0x133c [ 87.255268][ T5358] do_notify_resume+0x364/0x2c84 [ 87.256072][ T5358] el0_svc+0x98/0x128 [ 87.256747][ T5358] el0t_64_sync_handler+0x84/0xf0 [ 87.257559][ T5358] el0t_64_sync+0x18c/0x190 [ 87.258276][ T5358] Code: b0049f40 913c8000 911aa261 97d9847e (d4210000) [ 87.259439][ T5358] ---[ end trace 0000000000000000 ]--- [ 87.481236][ T5358] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 87.482408][ T5358] SMP: stopping secondary CPUs [ 87.483167][ T5358] Kernel Offset: disabled [ 87.483907][ T5358] CPU features: 0x0a0000,000f0097,a65bfea7 [ 87.484835][ T5358] Memory Limit: none [ 87.695138][ T5358] Rebooting in 86400 seconds..