last executing test programs: 1m32.235335155s ago: executing program 2 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$tun(r2, &(0x7f00000003c0)=ANY=[], 0x11) write$P9_RGETATTR(r3, &(0x7f0000002880)={0xa0, 0x19, 0x1, {0x20, {0x20, 0x0, 0x3}, 0x125, 0x0, 0xee01, 0xfffffffffffffffa, 0x3, 0x1, 0x3, 0x8, 0xe6e, 0xd44, 0x7, 0x9, 0x1, 0xe4, 0x200, 0x7, 0x6, 0x2}}, 0xa0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) read$FUSE(r2, &(0x7f0000000840)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 1m32.219858647s ago: executing program 2 (id=36): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_get$pid(0x2, r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440), 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m31.303764696s ago: executing program 2 (id=38): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m29.887729433s ago: executing program 2 (id=44): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5", 0x17}], 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1m28.50099397s ago: executing program 2 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/serial8250/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='serial8250\x00', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/usb251xb/bind\x00', 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff09) write(r1, &(0x7f0000000700)='usb251xb\x00', 0x9) close(r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/drivers/usb251xb/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='serial8250\x00', 0xb) close(r4) 1m28.355649133s ago: executing program 2 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0x6}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4050) 1m13.312792894s ago: executing program 32 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0x6}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4050) 1.739236911s ago: executing program 1 (id=615): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000000, @loopback, 0x402, 0x4}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x80, @loopback, 0xe6e0, 0x2004}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1.704442361s ago: executing program 1 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x50, 0x2c, 0xf2f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 1.583612461s ago: executing program 1 (id=622): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRES8, @ANYRES8, @ANYRES32], 0x1, 0x343, &(0x7f0000000bc0)="$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") io_setup(0x20fe, 0x0) io_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x9f4, &(0x7f0000000080)={0x0, 0xfffffffd, 0x400, 0x1, 0x81fa}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.583452605s ago: executing program 0 (id=623): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000240)=@alg, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffd61}, 0x1000}], 0x1, 0x140, 0x0) 1.141560132s ago: executing program 5 (id=628): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x100, 0x140) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.097358454s ago: executing program 3 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.095684609s ago: executing program 5 (id=631): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) 1.006486964s ago: executing program 5 (id=633): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f00000003c0)="26ef26da06fcc43959ccc53ee926a18529c725b47804bab281fcac63bf954c857621deb5014780812808bdf0df49fe66cbc535f004c5dad9e0ad7f815e70132f182e62bb3fbc2f0c2333ba2979d9d21ab29fe119318ce98572749ce7f1f8791f9ef5dc2bc4e657ba8fd2eda4bcddf7f74bc7ad2c52195b6e8d674cb366d297f43dc5a88a3450cc348a9c9bd8845f960e34edfe989c992297c985f8726ec3faab1c499d5872e41f406be1fb1d381af824bbbcf593c15de90a1b66e563f0", 0xbd}], 0x1}}], 0x1, 0xc840) 927.957663ms ago: executing program 3 (id=634): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 927.666614ms ago: executing program 5 (id=635): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)="5803595e8497741434", 0x9, 0x20004040, &(0x7f0000000000)={0xa, 0x4e23, 0x800, @loopback={0x0, 0x7f000001}, 0x4}, 0x1c) 912.884252ms ago: executing program 5 (id=637): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711905000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301740, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 851.345251ms ago: executing program 5 (id=638): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x94000516) lsetxattr(0x0, &(0x7f0000000140)=@known='trusted.syz\x00', 0x0, 0x0, 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mkdirat(r1, 0x0, 0x3a) mount$tmpfs(0x0, 0x0, 0x0, 0x1000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) open_tree(r1, &(0x7f0000001280)='./cgroup.cpu/cgroup.procs/file0\x00', 0x80100) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) ppoll(0x0, 0x0, &(0x7f00000011c0)={0x0, 0x3938700}, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2a00a9, &(0x7f0000002480)={[{@grpquota_inode_hardlimit}]}) pipe2$watch_queue(&(0x7f0000000000), 0x80) 836.931024ms ago: executing program 4 (id=639): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV_FIXED={0x3c, 0x1, 0x0, @fd, 0x820, 0x0, 0x0, 0x16, 0x0, {0x1, 0x0, 0xc0, '\x00', &(0x7f00000007c0)={0x462, 0xa9cd, 0x0, 0x0, 0x3}, 0x1}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008440000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) 787.955004ms ago: executing program 3 (id=640): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x1, 0x70bd2c, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) 751.547904ms ago: executing program 4 (id=641): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) setxattr$security_capability(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x2, 0x1}}}, 0x18) 719.233182ms ago: executing program 1 (id=642): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r1, 0x200, 0x1}, &(0x7f0000000280)=0xc) 671.791051ms ago: executing program 3 (id=643): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x81000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 424.26883ms ago: executing program 4 (id=644): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) shutdown(r0, 0x1) 420.836062ms ago: executing program 1 (id=645): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x48}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 356.304405ms ago: executing program 3 (id=646): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4073, &(0x7f0000000400)="$eJzszzFKA1EQBuA/iWsWWQiCVoIYLOxk7az2FuklZ7CyUHFvYikewHt4B0s9QiTKBtfYBoJ8XzHM7M/sey9st4+uKVefBkle5s/7SU6maev6O9z5Cke97foixV45TJXkev3ns6eN3h0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANg24x/9sJfcJWlfb866uVyW3WWZH6W9bXJZJeXhJHkYpWiOBzlIpud/nDFK3pIMkrwnmU029xwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D+56k3j33HVNffrq4+naZtilS4Wn+zOMQEAIAwDwYwYxCQmg4V2vzPw346zJ7lv+woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcFAAD//xGEFjw=") syz_open_procfs(r1, &(0x7f0000000040)='fdinfo/4\x00') 303.921795ms ago: executing program 0 (id=647): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$kcm(0xa, 0x2, 0x0) close(0x4) r1 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 303.670601ms ago: executing program 4 (id=648): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 303.495553ms ago: executing program 0 (id=649): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x109882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) 293.865285ms ago: executing program 1 (id=650): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)='\f&', 0x2, 0x20004851, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000807, 0x0) 273.338661ms ago: executing program 4 (id=651): unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000200001002dbd7000fbdbdf2502001000000000040f00000008000a0008000000080002007f"], 0x2c}, 0x1, 0x0, 0x0, 0x40841}, 0x40080c0) 199.977187ms ago: executing program 0 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x140, 0x7, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x8000, 0x7, 0xc72d, 0x0, 0x20007, 0x3, 0x2, 0x2b, 0x7, 0x101, 0x50, 0x6, 0x9, 0x4, 0x6, 0x4, 0x9, 0x1000, 0x8, 0x471, 0xffdfff7f, 0x383, 0x8001, 0x4]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 174.289708ms ago: executing program 0 (id=653): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200), 0xc, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) 173.783867ms ago: executing program 4 (id=654): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0x13, 0x0, 0xfffffffa, 0x871e, 0x5, 0x8, 0x9, 0x4, 0xffffff1b, 0x1, 0x8, 0x8, 0x4, 0xfffffff9, 0x0, 0x5, 0x1, 0x2, 0x7, 0x7, 0x2, 0x9, 0xc}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f0000000280)={{@align=0x3, {0x2, 0x0, 0x9, 0x9}}, {{[0xfffffff7, 0x0, 0x3, 0x4]}, 0x0, 0x1, 0xfffffff9, 0x0, &(0x7f00000001c0)=[{{@_ha_fsid={[0x8, 0x7]}, {0x1, 0x800, 0xffff, 0x52d0}}, 0x9b3, 0x0, '\xff\xff\xff\xff\xff\xff'}, {{@_ha_fsid={[0x44f6, 0x8]}, {0xa, 0x3, 0xfff, 0x9}}, 0x0, 0x0, '\x00'}, {{@_ha_fsid={[0x980, 0xffff2340]}, {0x5, 0x93b, 0x100000, 0x6}}, 0x10, 0x0, '-\x00'}]}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='dummy_udc.0', 0xb) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) 67.419198ms ago: executing program 0 (id=655): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001e00)="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", 0x311}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="6ac56a5849e8b9e3", 0xfffffffb, 0x10040895, 0x0, 0xffffffffffffffa6) 0s ago: executing program 3 (id=656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 28.862535][ T4698] cgroup: Unknown subsys name 'net' [ 29.002397][ T4698] cgroup: Unknown subsys name 'cpuset' [ 29.004463][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.215619][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.996860][ T4716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.009503][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.020759][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.022672][ T4725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.022881][ T4725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.022980][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.023140][ T4725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.023421][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.024704][ T4727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.025309][ T4726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.025479][ T4726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.026133][ T4726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.026777][ T4726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.026945][ T4726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.027101][ T4726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.027782][ T4726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.027947][ T4726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.037735][ T4716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.037980][ T4716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.041765][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.045722][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.050062][ T4718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.052096][ T4716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.052096][ T4718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.053906][ T4718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.362442][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.362711][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.365402][ T4711] bridge_slave_0: entered allmulticast mode [ 30.366098][ T4711] bridge_slave_0: entered promiscuous mode [ 30.388847][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.388933][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.389026][ T4711] bridge_slave_1: entered allmulticast mode [ 30.389480][ T4711] bridge_slave_1: entered promiscuous mode [ 30.399702][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.403569][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.437382][ T4711] team0: Port device team_slave_0 added [ 30.439322][ T4711] team0: Port device team_slave_1 added [ 30.459708][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.460994][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.461057][ T4717] bridge_slave_0: entered allmulticast mode [ 30.461472][ T4717] bridge_slave_0: entered promiscuous mode [ 30.462135][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.462159][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.462209][ T4712] bridge_slave_0: entered allmulticast mode [ 30.462983][ T4712] bridge_slave_0: entered promiscuous mode [ 30.463822][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.463847][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.463933][ T4712] bridge_slave_1: entered allmulticast mode [ 30.464386][ T4712] bridge_slave_1: entered promiscuous mode [ 30.469662][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.469670][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.469686][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.470537][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.470544][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.470559][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.481530][ T4711] hsr_slave_0: entered promiscuous mode [ 30.481891][ T4711] hsr_slave_1: entered promiscuous mode [ 30.499163][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.499207][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.499306][ T4717] bridge_slave_1: entered allmulticast mode [ 30.499725][ T4717] bridge_slave_1: entered promiscuous mode [ 30.519269][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.525016][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.536514][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.539266][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.563294][ T4717] team0: Port device team_slave_0 added [ 30.566392][ T4717] team0: Port device team_slave_1 added [ 30.570031][ T4712] team0: Port device team_slave_0 added [ 30.581274][ T4712] team0: Port device team_slave_1 added [ 30.601770][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.601795][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.601811][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.609579][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.609607][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.609628][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.610877][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.610886][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.610901][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.611259][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.611265][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.611279][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.643545][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.644890][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.646293][ T4721] bridge_slave_0: entered allmulticast mode [ 30.647774][ T4721] bridge_slave_0: entered promiscuous mode [ 30.649558][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.652696][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.653058][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.654772][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.656514][ T4712] hsr_slave_0: entered promiscuous mode [ 30.657254][ T4712] hsr_slave_1: entered promiscuous mode [ 30.657480][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.657512][ T4712] Cannot create hsr debugfs directory [ 30.666995][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.667474][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.667582][ T4721] bridge_slave_1: entered allmulticast mode [ 30.667983][ T4721] bridge_slave_1: entered promiscuous mode [ 30.671968][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.675056][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.675740][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.677269][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.679913][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.681396][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.681481][ T4713] bridge_slave_0: entered allmulticast mode [ 30.681895][ T4713] bridge_slave_0: entered promiscuous mode [ 30.682977][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.683053][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.683148][ T4713] bridge_slave_1: entered allmulticast mode [ 30.683556][ T4713] bridge_slave_1: entered promiscuous mode [ 30.685679][ T4717] hsr_slave_0: entered promiscuous mode [ 30.685996][ T4717] hsr_slave_1: entered promiscuous mode [ 30.686180][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.686190][ T4717] Cannot create hsr debugfs directory [ 30.696254][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.708020][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.710436][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.721767][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.737530][ T4713] team0: Port device team_slave_0 added [ 30.738206][ T4721] team0: Port device team_slave_0 added [ 30.738969][ T4721] team0: Port device team_slave_1 added [ 30.745276][ T4713] team0: Port device team_slave_1 added [ 30.755806][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.755828][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.755844][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.764580][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.764630][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.764776][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.764814][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.769449][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.769461][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.769473][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.772820][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.772829][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.772843][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.783746][ T4721] hsr_slave_0: entered promiscuous mode [ 30.784286][ T4721] hsr_slave_1: entered promiscuous mode [ 30.784511][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 30.784522][ T4721] Cannot create hsr debugfs directory [ 30.796812][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.796838][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.796853][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.849615][ T4713] hsr_slave_0: entered promiscuous mode [ 30.849923][ T4713] hsr_slave_1: entered promiscuous mode [ 30.850123][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.850134][ T4713] Cannot create hsr debugfs directory [ 30.869014][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.871646][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.886495][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.888506][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.889103][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.891513][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.901573][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.903951][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.917560][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.932100][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.933563][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.947768][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.950372][ T4717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.953534][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.957075][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.957132][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.960253][ T4717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.962932][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.963271][ T4717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.964969][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.968477][ T4717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.970586][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.972864][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.972934][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.997322][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.999348][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.008524][ T4713] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.012959][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.015236][ T4713] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.017367][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.027950][ T4713] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.029351][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.029659][ T4713] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.033555][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.056092][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.057452][ T4721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.059680][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.059990][ T4721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.062911][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.065332][ T4721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.067599][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.069635][ T4721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.072342][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.098405][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.106229][ T2674] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.106278][ T2674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.125691][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.125735][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.142984][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.147882][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.158341][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.164951][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.164997][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.166517][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.175682][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.175728][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.188836][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.194049][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.197809][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.197856][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.198562][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.198582][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.213256][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.218045][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.218085][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.218444][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.218461][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.223572][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.257648][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.259914][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.266508][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.320269][ T4711] veth0_vlan: entered promiscuous mode [ 31.346292][ T4711] veth1_vlan: entered promiscuous mode [ 31.388063][ T4711] veth0_macvtap: entered promiscuous mode [ 31.392943][ T4711] veth1_macvtap: entered promiscuous mode [ 31.396489][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.397510][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.403782][ T3572] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.404030][ T3572] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.404052][ T3572] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.404069][ T3572] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.463285][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.467470][ T2674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.467510][ T2674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.477896][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.499559][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.505867][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.505900][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.506991][ T4717] veth0_vlan: entered promiscuous mode [ 31.512166][ T4717] veth1_vlan: entered promiscuous mode [ 31.536450][ T4717] veth0_macvtap: entered promiscuous mode [ 31.538704][ T4717] veth1_macvtap: entered promiscuous mode [ 31.545861][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.548798][ T4711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.557955][ T4712] veth0_vlan: entered promiscuous mode [ 31.570458][ T4712] veth1_vlan: entered promiscuous mode [ 31.576072][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.584730][ T4713] veth0_vlan: entered promiscuous mode [ 31.588628][ T4713] veth1_vlan: entered promiscuous mode [ 31.597874][ T4713] veth0_macvtap: entered promiscuous mode [ 31.600118][ T4713] veth1_macvtap: entered promiscuous mode [ 31.604798][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.607191][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.639755][ T4721] veth0_vlan: entered promiscuous mode [ 31.644944][ T3771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.644987][ T3771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.645006][ T3771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.645022][ T3771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.652905][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.655556][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.655590][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.655610][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.655626][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.664847][ T4721] veth1_vlan: entered promiscuous mode [ 31.675573][ T4712] veth0_macvtap: entered promiscuous mode [ 31.685621][ T4721] veth0_macvtap: entered promiscuous mode [ 31.686897][ T4721] veth1_macvtap: entered promiscuous mode [ 31.688517][ T4712] veth1_macvtap: entered promiscuous mode [ 31.938469][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.939500][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.956291][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.956437][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.956465][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.956482][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.957779][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.957790][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.964975][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.966134][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.977441][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.977498][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.977523][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.977541][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.994147][ T3771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.995908][ T3771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.999378][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.999407][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.022212][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.022243][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.039662][ T1259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.039691][ T1259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.052401][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.052430][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.064808][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.064836][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.077914][ T1259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.077939][ T1259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.091292][ T4724] Bluetooth: hci2: command tx timeout [ 32.091447][ T4718] Bluetooth: hci0: command tx timeout [ 32.093642][ T4716] Bluetooth: hci1: command tx timeout [ 32.101355][ T4716] Bluetooth: hci3: command tx timeout [ 32.101369][ T4718] Bluetooth: hci4: command tx timeout [ 32.119749][ T4898] Zero length message leads to an empty skb [ 32.217081][ T4911] binder: 4910:4911 tried to acquire reference to desc 0, got 1 instead [ 32.217659][ T4911] binder: 4910:4911 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 32.217671][ T4911] binder: 4911 RLIMIT_NICE not set [ 32.217679][ T4911] binder: 4911 RLIMIT_NICE not set [ 32.217722][ T4911] binder: send failed reply for transaction 5 to 4910:4911 [ 32.217754][ T4911] binder: 4910:4911 ioctl c0306201 20000240 returned -14 [ 32.218156][ T9] binder: undelivered TRANSACTION_COMPLETE [ 32.218169][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 32.228534][ T4718] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 32.228546][ T4718] CPU: 0 UID: 0 PID: 4718 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT [ 32.228557][ T4718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 32.228562][ T4718] Workqueue: hci3 hci_rx_work [ 32.228577][ T4718] Call trace: [ 32.228580][ T4718] show_stack+0x2c/0x3c (C) [ 32.228596][ T4718] __dump_stack+0x30/0x40 [ 32.228608][ T4718] dump_stack_lvl+0xd8/0x12c [ 32.228620][ T4718] dump_stack+0x1c/0x28 [ 32.228631][ T4718] sysfs_warn_dup+0x9c/0xb8 [ 32.228644][ T4718] sysfs_create_dir_ns+0x190/0x1f4 [ 32.228655][ T4718] kobject_add_internal+0x290/0x6f0 [ 32.228665][ T4718] kobject_add_varg+0x9c/0xe8 [ 32.228673][ T4718] kobject_add+0x110/0x1c8 [ 32.228681][ T4718] device_add+0x394/0x9e0 [ 32.228689][ T4718] hci_conn_add_sysfs+0xbc/0x1e8 [ 32.228700][ T4718] le_conn_complete_evt+0xc68/0x10f8 [ 32.228710][ T4718] hci_le_conn_complete_evt+0x114/0x3d8 [ 32.228720][ T4718] hci_le_meta_evt+0x2b0/0x46c [ 32.228730][ T4718] hci_event_packet+0x4c0/0x9c8 [ 32.228740][ T4718] hci_rx_work+0x2f4/0xd78 [ 32.228752][ T4718] process_scheduled_works+0x788/0x10b8 [ 32.228764][ T4718] worker_thread+0x798/0xbd0 [ 32.228774][ T4718] kthread+0x304/0x3d4 [ 32.228783][ T4718] ret_from_fork+0x10/0x20 [ 32.228819][ T4718] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 32.228837][ T4718] Bluetooth: hci3: failed to register connection device [ 32.818361][ T4931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15'. [ 32.869297][ T4935] loop0: detected capacity change from 0 to 128 [ 32.874166][ T4935] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.880531][ T4935] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.889273][ T4935] mmap: syz.0.16 (4935) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.894641][ T4935] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 32.983419][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 33.031366][ T4942] binder: 4941:4942 tried to acquire reference to desc 0, got 1 instead [ 33.101018][ T4823] binder: undelivered TRANSACTION_COMPLETE [ 33.101055][ T4823] binder: undelivered TRANSACTION_COMPLETE [ 33.101114][ T4823] binder: undelivered transaction 11, process died. [ 33.101152][ T4823] binder: undelivered transaction 10, process died. [ 34.013091][ T4961] loop2: detected capacity change from 0 to 128 [ 34.013617][ T4961] vfat: Bad value for 'time_offset' [ 34.171470][ T4716] Bluetooth: hci3: command tx timeout [ 34.171517][ T4724] Bluetooth: hci2: command tx timeout [ 34.171519][ T4716] Bluetooth: hci4: command tx timeout [ 34.171542][ T4724] Bluetooth: hci0: command tx timeout [ 34.172528][ T4718] Bluetooth: hci1: command tx timeout [ 34.366828][ T4966] file system registered [ 34.370138][ T4966] read descriptors [ 34.376318][ T4712] ffs_data_put(): freeing [ 34.467333][ T4970] syzkaller0: entered promiscuous mode [ 34.467362][ T4970] syzkaller0: entered allmulticast mode [ 34.469695][ T4970] 0: reclassify loop, rule prio 0, protocol 800 [ 34.808896][ T4972] syzkaller0: entered promiscuous mode [ 34.808923][ T4972] syzkaller0: entered allmulticast mode [ 36.177919][ T4998] loop1: detected capacity change from 0 to 1024 [ 36.178332][ T4998] ======================================================= [ 36.178332][ T4998] WARNING: The mand mount option has been deprecated and [ 36.178332][ T4998] and is ignored by this kernel. Remove the mand [ 36.178332][ T4998] option from the mount to silence this warning. [ 36.178332][ T4998] ======================================================= [ 36.178381][ T4998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.178390][ T4998] EXT4-fs: inline encryption not supported [ 36.178398][ T4998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.213324][ T4998] EXT4-fs (loop1): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.261454][ T4718] Bluetooth: hci0: command tx timeout [ 36.261493][ T4718] Bluetooth: hci2: command tx timeout [ 36.261514][ T4718] Bluetooth: hci3: command tx timeout [ 36.261532][ T4718] Bluetooth: hci1: command tx timeout [ 36.261549][ T4718] Bluetooth: hci4: command tx timeout [ 36.303625][ T4998] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.40: bg 0: block 112: padding at end of block bitmap is not set [ 38.225416][ T5026] netlink: 'syz.0.46': attribute type 1 has an invalid length. [ 38.244658][ T4712] EXT4-fs (loop1): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 38.256752][ T5026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.46'. [ 38.256787][ T5026] wg2: entered promiscuous mode [ 38.321776][ T5033] syzkaller0: entered promiscuous mode [ 38.322904][ T5033] syzkaller0: entered allmulticast mode [ 38.332436][ T4716] Bluetooth: hci4: command tx timeout [ 38.332471][ T4716] Bluetooth: hci1: command tx timeout [ 38.332493][ T4716] Bluetooth: hci3: command tx timeout [ 38.332512][ T4716] Bluetooth: hci2: command tx timeout [ 38.332529][ T4716] Bluetooth: hci0: command tx timeout [ 38.375336][ T4701] FAULT_INJECTION: forcing a failure. [ 38.375336][ T4701] name failslab, interval 1, probability 100, space 0, times 1 [ 38.375374][ T4701] CPU: 0 UID: 0 PID: 4701 Comm: udevd Not tainted syzkaller #0 PREEMPT [ 38.375388][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 38.375396][ T4701] Call trace: [ 38.375400][ T4701] show_stack+0x2c/0x3c (C) [ 38.375420][ T4701] __dump_stack+0x30/0x40 [ 38.375432][ T4701] dump_stack_lvl+0xd8/0x12c [ 38.375442][ T4701] dump_stack+0x1c/0x28 [ 38.375452][ T4701] should_fail_ex+0x41c/0x590 [ 38.375463][ T4701] should_failslab+0xc4/0x120 [ 38.375471][ T4701] kmem_cache_alloc_noprof+0x94/0x5d8 [ 38.375481][ T4701] do_getname+0x48/0x234 [ 38.375488][ T4701] __arm64_sys_unlinkat+0xa8/0x108 [ 38.375497][ T4701] invoke_syscall+0x98/0x244 [ 38.375507][ T4701] el0_svc_common+0xec/0x23c [ 38.375516][ T4701] do_el0_svc+0x4c/0x5c [ 38.375526][ T4701] el0_svc+0x64/0x260 [ 38.375536][ T4701] el0t_64_sync_handler+0x48/0x148 [ 38.375545][ T4701] el0t_64_sync+0x198/0x19c [ 38.377950][ T5036] FAULT_INJECTION: forcing a failure. [ 38.377950][ T5036] name failslab, interval 1, probability 100, space 1, times 1 [ 38.377967][ T5036] CPU: 0 UID: 0 PID: 5036 Comm: syz.3.50 Not tainted syzkaller #0 PREEMPT [ 38.377977][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 38.377983][ T5036] Call trace: [ 38.377986][ T5036] show_stack+0x2c/0x3c (C) [ 38.378001][ T5036] __dump_stack+0x30/0x40 [ 38.378014][ T5036] dump_stack_lvl+0xd8/0x12c [ 38.378025][ T5036] dump_stack+0x1c/0x28 [ 38.378037][ T5036] should_fail_ex+0x41c/0x590 [ 38.378049][ T5036] should_failslab+0xc4/0x120 [ 38.378057][ T5036] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 38.378067][ T5036] __alloc_skb+0x1f0/0x610 [ 38.378078][ T5036] netlink_alloc_large_skb+0xd4/0x114 [ 38.378088][ T5036] netlink_sendmsg+0x4c4/0x948 [ 38.378098][ T5036] __sock_sendmsg+0xc8/0x17c [ 38.378108][ T5036] ____sys_sendmsg+0x3d0/0x6c8 [ 38.378124][ T5036] ___sys_sendmsg+0x198/0x224 [ 38.378135][ T5036] __sys_sendmsg+0x158/0x204 [ 38.378145][ T5036] __arm64_sys_sendmsg+0x88/0x9c [ 38.378156][ T5036] invoke_syscall+0x98/0x244 [ 38.378168][ T5036] el0_svc_common+0xec/0x23c [ 38.378180][ T5036] do_el0_svc+0x4c/0x5c [ 38.378191][ T5036] el0_svc+0x64/0x260 [ 38.378203][ T5036] el0t_64_sync_handler+0x48/0x148 [ 38.378214][ T5036] el0t_64_sync+0x198/0x19c [ 38.660596][ T5038] binder: 5037:5038 tried to acquire reference to desc 0, got 1 instead [ 38.682533][ T5043] printk: legacy console [ttyS0] disabled [ 38.686363][ T5042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.53'. [ 38.719621][ T5046] binder: 5037:5046 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.723287][ T5046] binder: 5046 RLIMIT_NICE not set [ 38.724680][ T5046] binder: 5046 RLIMIT_NICE not set [ 38.772447][ T4800] IPVS: starting estimator thread 0... [ 38.790086][ T5049] syzkaller0: entered promiscuous mode [ 38.790132][ T5049] syzkaller0: entered allmulticast mode [ 38.911902][ T5053] IPVS: using max 60 ests per chain, 144000 per kthread [ 39.276303][ T4807] binder: release 5037:5038 transaction 16 out, still active [ 39.291922][ T4807] binder: undelivered TRANSACTION_COMPLETE [ 39.291948][ T4807] binder: send failed reply for transaction 23 to 5037:5046 [ 39.292053][ T4807] binder: release 5037:5046 transaction 16 in, still active [ 39.292067][ T4807] binder: send failed reply for transaction 16, target dead [ 39.292083][ T4807] binder: undelivered TRANSACTION_COMPLETE [ 39.292094][ T4807] binder: undelivered TRANSACTION_ERROR: 29189 [ 39.373193][ T5066] cgroup: Invalid name [ 39.867853][ T5072] syzkaller0: entered promiscuous mode [ 39.867888][ T5072] syzkaller0: entered allmulticast mode [ 40.102089][ T5077] loop0: detected capacity change from 0 to 1024 [ 40.102473][ T5077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.102502][ T5077] EXT4-fs: inline encryption not supported [ 40.102518][ T5077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.112932][ T5077] EXT4-fs (loop0): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.359187][ T5077] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.65: bg 0: block 112: padding at end of block bitmap is not set [ 41.617740][ T4717] EXT4-fs (loop0): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 41.843175][ T5095] loop0: detected capacity change from 0 to 128 [ 42.821593][ T5104] loop0: detected capacity change from 0 to 4096 [ 42.824986][ T5104] EXT4-fs: inline encryption not supported [ 42.826439][ T5104] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.827957][ T5104] EXT4-fs: Ignoring removed bh option [ 42.830345][ T5104] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.833953][ T5104] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 42.835842][ T5104] System zones: 0-5 [ 42.840553][ T5104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.275110][ T5102] serio: Serial port ptm0 [ 43.349550][ T5119] netlink: 'syz.4.76': attribute type 1 has an invalid length. [ 44.243563][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.447203][ T5131] loop4: detected capacity change from 0 to 4096 [ 44.462939][ T5130] syzkaller0: entered promiscuous mode [ 44.462972][ T5130] syzkaller0: entered allmulticast mode [ 44.483079][ T5131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.483116][ T5131] EXT4-fs (loop4): Test dummy encryption mode enabled [ 44.486824][ T5131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.494799][ T5131] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 44.856647][ T5138] netlink: 14 bytes leftover after parsing attributes in process `syz.3.83'. [ 44.875958][ T5138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.948951][ T5138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.982153][ T5138] bond0 (unregistering): Released all slaves [ 45.099124][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.465005][ T5151] syzkaller0: entered promiscuous mode [ 45.465042][ T5151] syzkaller0: entered allmulticast mode [ 45.492499][ T5153] syzkaller0: entered promiscuous mode [ 45.492546][ T5153] syzkaller0: entered allmulticast mode [ 45.564626][ T5155] syzkaller0: entered promiscuous mode [ 45.565989][ T5155] syzkaller0: entered allmulticast mode [ 45.851365][ T5164] loop8: detected capacity change from 0 to 7 [ 45.976382][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 45.976485][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 45.980286][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 45.980334][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 45.984200][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 45.984254][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 45.987764][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 45.987814][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 45.991809][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 45.991843][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 45.995758][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 45.995818][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 45.999338][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 45.999374][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 45.999440][ T5164] ldm_validate_partition_table(): Disk read failed. [ 45.999800][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 45.999831][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 46.011897][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 46.011941][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 46.015232][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 46.015271][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 46.017101][ T5164] Dev loop8: unable to read RDB block 0 [ 46.023913][ T5164] loop8: unable to read partition table [ 46.024009][ T5164] loop8: partition table beyond EOD, truncated [ 46.024029][ T5164] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 46.139875][ T5169] tipc: Started in network mode [ 46.139916][ T5169] tipc: Node identity 2a07a5de7527, cluster identity 4711 [ 46.140013][ T5169] tipc: Enabled bearer , priority 0 [ 46.140690][ T5169] syzkaller0: entered promiscuous mode [ 46.140702][ T5169] syzkaller0: entered allmulticast mode [ 46.154630][ T5169] tipc: Resetting bearer [ 47.061054][ T5168] tipc: Resetting bearer [ 47.108960][ T5168] tipc: Disabling bearer [ 47.199403][ T5176] syzkaller0: entered promiscuous mode [ 47.199446][ T5176] syzkaller0: entered allmulticast mode [ 47.483704][ T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.486600][ T11] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.528464][ T5197] loop3: detected capacity change from 0 to 1024 [ 48.528813][ T5197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.543776][ T5197] EXT4-fs: inline encryption not supported [ 48.543800][ T5197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.616840][ T5197] EXT4-fs (loop3): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.636595][ T5197] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.103: bg 0: block 112: padding at end of block bitmap is not set [ 48.753488][ T5210] syzkaller0: entered promiscuous mode [ 48.754569][ T5210] syzkaller0: entered allmulticast mode [ 49.637343][ T5216] loop1: detected capacity change from 0 to 1024 [ 49.640421][ T5216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.644183][ T5216] EXT4-fs: inline encryption not supported [ 49.645348][ T5216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.654491][ T4721] EXT4-fs (loop3): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 49.658442][ T5216] EXT4-fs (loop1): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.666349][ T5216] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.108: bg 0: block 112: padding at end of block bitmap is not set [ 50.504971][ T5221] Bluetooth: MGMT ver 1.23 [ 50.507156][ T5227] syzkaller0: entered promiscuous mode [ 50.507200][ T5227] syzkaller0: entered allmulticast mode [ 50.954654][ T4712] EXT4-fs (loop1): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 50.995098][ T5237] binder: 5236:5237 tried to acquire reference to desc 0, got 1 instead [ 50.996141][ T5237] binder: 5236:5237 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.996156][ T5237] binder: 5237 RLIMIT_NICE not set [ 50.996168][ T5237] binder: 5237 RLIMIT_NICE not set [ 50.996603][ T5237] binder: release 5236:5237 transaction 35 out, still active [ 50.996613][ T5237] binder: release 5236:5237 transaction 28 in, still active [ 50.996623][ T5237] binder: undelivered TRANSACTION_COMPLETE [ 50.996841][ T5237] binder: 5237 RLIMIT_NICE not set [ 50.997006][ T5237] binder: release 5236:5237 transaction 35 in, still active [ 50.997015][ T5237] binder: release 5236:5237 transaction 28 out, still active [ 50.997023][ T5237] binder: send failed reply for transaction 35, target dead [ 50.997036][ T5237] binder: send failed reply for transaction 28, target dead [ 51.105078][ T5244] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 51.400278][ T5248] vlan2: entered promiscuous mode [ 51.402932][ T5248] hsr0: entered promiscuous mode [ 51.404247][ T5248] vlan2: entered allmulticast mode [ 51.405404][ T5248] hsr0: entered allmulticast mode [ 51.406409][ T5248] hsr_slave_0: entered allmulticast mode [ 51.407685][ T5248] hsr_slave_1: entered allmulticast mode [ 51.458776][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 51.534693][ T5248] hsr_slave_0: left promiscuous mode [ 51.536365][ T5248] hsr_slave_1: left promiscuous mode [ 51.564051][ T5252] loop4: detected capacity change from 0 to 1024 [ 51.566736][ T5252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.569337][ T5252] EXT4-fs: inline encryption not supported [ 51.569381][ T5252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.633780][ T5255] loop0: detected capacity change from 0 to 128 [ 51.936876][ T5255] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.424628][ T5252] EXT4-fs (loop4): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.445216][ T5252] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.119: bg 0: block 112: padding at end of block bitmap is not set [ 52.911358][ T4717] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.956292][ T5266] loop0: detected capacity change from 0 to 2048 [ 52.971064][ T15] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.007223][ T4344] loop0: p1 < > p4 < > [ 53.007250][ T4344] loop0: partition table partially beyond EOD, truncated [ 53.031188][ T4344] loop0: p4 start 42180 is beyond EOD, truncated [ 53.105219][ T5269] loop3: detected capacity change from 0 to 128 [ 53.107198][ T5269] Smack: duplicate mount options [ 53.646511][ T5266] loop0: p1 < > p4 < > [ 53.646544][ T5266] loop0: partition table partially beyond EOD, truncated [ 53.648066][ T5266] loop0: p4 start 42180 is beyond EOD, truncated [ 53.656753][ T4711] EXT4-fs (loop4): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 53.714022][ T5273] loop4: detected capacity change from 0 to 1024 [ 53.714382][ T5273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.714392][ T5273] EXT4-fs: inline encryption not supported [ 53.714401][ T5273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.738530][ T5273] EXT4-fs (loop4): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.749799][ T5273] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.124: bg 0: block 112: padding at end of block bitmap is not set [ 54.751743][ T4716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.753840][ T4716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.762605][ T4716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.766772][ T4716] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.772319][ T4716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.829156][ T5297] loop3: detected capacity change from 0 to 512 [ 54.831795][ T5297] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.250039][ T4711] EXT4-fs (loop4): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 55.605355][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.607050][ T5291] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.608765][ T5291] bridge_slave_0: entered allmulticast mode [ 55.610505][ T5291] bridge_slave_0: entered promiscuous mode [ 55.614670][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.616138][ T5291] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.617694][ T5291] bridge_slave_1: entered allmulticast mode [ 55.619309][ T5291] bridge_slave_1: entered promiscuous mode [ 55.633694][ T5291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.636863][ T5291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.620446][ T5291] team0: Port device team_slave_0 added [ 56.629823][ T5291] team0: Port device team_slave_1 added [ 56.647651][ T5291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.650258][ T5291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.779488][ T5291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.780304][ T5291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.780312][ T5291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.780326][ T5291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.811045][ T4718] Bluetooth: hci5: command tx timeout [ 56.835912][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.855764][ T5291] hsr_slave_0: entered promiscuous mode [ 56.856468][ T5291] hsr_slave_1: entered promiscuous mode [ 56.857619][ T5291] debugfs: 'hsr0' already exists in 'hsr' [ 56.857644][ T5291] Cannot create hsr debugfs directory [ 57.170064][ T5333] syzkaller0: entered promiscuous mode [ 57.170106][ T5333] syzkaller0: entered allmulticast mode [ 57.184927][ T5345] loop3: detected capacity change from 0 to 4096 [ 57.188222][ T5345] EXT4-fs: inline encryption not supported [ 57.192963][ T5345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.192994][ T5345] EXT4-fs (loop3): Test dummy encryption mode enabled [ 57.194362][ T5345] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 57.194422][ T5345] System zones: 0-5 [ 57.199371][ T5345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.213403][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.223090][ T5340] syzkaller0: entered promiscuous mode [ 57.223125][ T5340] syzkaller0: entered allmulticast mode [ 57.302139][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.305303][ T5291] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.307936][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.308493][ T5291] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.310181][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.310641][ T5291] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.314643][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.315218][ T5291] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.316942][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.342622][ T5291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.619220][ T5291] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.633190][ T5291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.635308][ T5291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.642016][ T2674] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.642069][ T2674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.643986][ T2674] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.644008][ T2674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.658673][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.717110][ T5364] loop4: detected capacity change from 0 to 1024 [ 57.720381][ T5364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.720416][ T5364] EXT4-fs: inline encryption not supported [ 57.720431][ T5364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.739028][ T5364] EXT4-fs (loop4): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.746909][ T5364] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.142: bg 0: block 112: padding at end of block bitmap is not set [ 57.786942][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.802485][ T5291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.842615][ T40] bridge_slave_1: left allmulticast mode [ 57.842666][ T40] bridge_slave_1: left promiscuous mode [ 57.843180][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.853812][ T40] bridge_slave_0: left allmulticast mode [ 57.853846][ T40] bridge_slave_0: left promiscuous mode [ 57.853920][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.750880][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.815680][ T4711] EXT4-fs (loop4): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 58.832436][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.861864][ T40] bond0 (unregistering): Released all slaves [ 58.873324][ T5378] warning: `syz.3.143' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.890420][ T5390] syzkaller0: entered promiscuous mode [ 58.890456][ T5390] syzkaller0: entered allmulticast mode [ 58.892732][ T4718] Bluetooth: hci5: command tx timeout [ 58.927862][ T5397] loop3: detected capacity change from 0 to 512 [ 58.929632][ T5397] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.296693][ T5291] veth0_vlan: entered promiscuous mode [ 59.298448][ T5291] veth1_vlan: entered promiscuous mode [ 59.436120][ T5291] veth0_macvtap: entered promiscuous mode [ 59.439837][ T5291] veth1_macvtap: entered promiscuous mode [ 59.454711][ T5291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.458114][ T5291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.465770][ T15] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.465823][ T15] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.465945][ T15] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.465970][ T15] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.560681][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.560710][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.607782][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.607812][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.660710][ T40] hsr_slave_0: left promiscuous mode [ 59.662069][ T40] hsr_slave_1: left promiscuous mode [ 59.662385][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.662401][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.663532][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.663542][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.674333][ T40] veth1_macvtap: left promiscuous mode [ 59.674386][ T40] veth0_macvtap: left promiscuous mode [ 59.674503][ T40] veth1_vlan: left promiscuous mode [ 59.674565][ T40] veth0_vlan: left promiscuous mode [ 59.944713][ T5425] binder: 5424:5425 tried to acquire reference to desc 0, got 1 instead [ 59.947071][ T5425] binder: 5424:5425 got transaction with invalid data ptr [ 59.949725][ T5425] binder: 5424:5425 transaction call to 5424:0 failed 40/29201/-14, code 0 size 0-24 line 3511 [ 59.964279][ T40] team0 (unregistering): Port device team_slave_1 removed [ 59.974309][ T40] team0 (unregistering): Port device team_slave_0 removed [ 60.110265][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 60.802491][ T4823] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.802528][ T4823] binder: release 5424:5426 transaction 41 out, still active [ 60.802554][ T4823] binder: undelivered TRANSACTION_COMPLETE [ 60.806846][ T5425] syz.3.150 (5425): drop_caches: 2 [ 60.888589][ T4823] binder: send failed reply for transaction 41, target dead [ 60.971283][ T4718] Bluetooth: hci5: command tx timeout [ 61.182094][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 62.065677][ T5487] syzkaller0: entered promiscuous mode [ 62.066952][ T5487] syzkaller0: entered allmulticast mode [ 62.088386][ T5485] syzkaller0: entered promiscuous mode [ 62.090437][ T5485] syzkaller0: entered allmulticast mode [ 62.389267][ T5489] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 62.420431][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 62.520476][ T5502] syzkaller0: entered promiscuous mode [ 62.520511][ T5502] syzkaller0: entered allmulticast mode [ 62.885576][ T5516] tipc: Started in network mode [ 62.885615][ T5516] tipc: Node identity dec1b258d16f, cluster identity 4711 [ 62.885678][ T5516] tipc: Enabled bearer , priority 0 [ 62.886865][ T5516] syzkaller0: entered promiscuous mode [ 62.886881][ T5516] syzkaller0: entered allmulticast mode [ 62.924013][ T5516] tipc: Resetting bearer [ 62.927848][ T5515] tipc: Resetting bearer [ 62.994833][ T5515] tipc: Disabling bearer [ 63.001352][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 63.051226][ T4718] Bluetooth: hci5: command tx timeout [ 63.402165][ T5532] syzkaller0: entered promiscuous mode [ 63.403428][ T5532] syzkaller0: entered allmulticast mode [ 63.409113][ T5532] tipc: Enabled bearer , priority 0 [ 63.413269][ T5532] tipc: Resetting bearer [ 63.423450][ T5531] tipc: Resetting bearer [ 63.678254][ T5531] tipc: Disabling bearer [ 63.755880][ T5538] loop1: detected capacity change from 0 to 128 [ 63.756470][ T5538] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.756728][ T5538] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.249353][ T5549] syzkaller0: entered promiscuous mode [ 64.251729][ T5549] syzkaller0: entered allmulticast mode [ 64.263653][ T5549] tipc: Started in network mode [ 64.263684][ T5549] tipc: Node identity 32b9e8e74b8f, cluster identity 4711 [ 64.266225][ T5549] tipc: Enabled bearer , priority 0 [ 64.279563][ T5549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.172'. [ 64.283622][ T5549] tipc: Resetting bearer [ 64.293633][ T5548] tipc: Resetting bearer [ 64.300029][ T5548] tipc: Disabling bearer [ 64.347951][ T30] audit: type=1326 audit(64.320:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5556 comm="syz.4.174" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb077a168 code=0x0 [ 64.371703][ T5559] loop5: detected capacity change from 0 to 512 [ 64.372868][ T5559] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.492762][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494102][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.498058][ T1018] cfg80211: failed to load regulatory.db [ 64.847835][ T5569] loop0: detected capacity change from 0 to 1024 [ 64.848195][ T5569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.848205][ T5569] EXT4-fs: inline encryption not supported [ 64.848214][ T5569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.864328][ T5569] EXT4-fs (loop0): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 64.877858][ T5569] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.177: bg 0: block 112: padding at end of block bitmap is not set [ 65.857911][ T5583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.179'. [ 65.857945][ T5583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.179'. [ 65.857974][ T5583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.179'. [ 66.333052][ T4717] EXT4-fs (loop0): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 66.335933][ T5587] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 66.337754][ T3771] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.337873][ T3771] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.337922][ T3771] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.337952][ T3771] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.834463][ T5579] syzkaller0: tun_net_xmit 76 [ 66.834557][ T5579] syzkaller0: tun_net_xmit 48 [ 66.854858][ T5596] loop5: detected capacity change from 0 to 8192 [ 66.862612][ T4807] syzkaller0: tun_net_xmit 76 [ 66.962288][ T5595] syzkaller0: create flow: hash 622372728 index 2 [ 66.967065][ T4807] syzkaller0: tun_net_xmit 76 [ 66.999090][ T5595] syzkaller0: delete flow: hash 622372728 index 2 [ 67.001502][ T4807] syzkaller0: tun_net_xmit 76 [ 67.829359][ T5621] syzkaller0: entered promiscuous mode [ 67.831068][ T5621] syzkaller0: entered allmulticast mode [ 67.864058][ T5624] tipc: Enabled bearer , priority 0 [ 67.950122][ T5613] tipc: Resetting bearer [ 67.958443][ T5612] tipc: Resetting bearer [ 68.431843][ T5612] tipc: Disabling bearer [ 68.457537][ T5639] loop3: detected capacity change from 0 to 4096 [ 68.469562][ T5639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.848630][ T5650] loop1: detected capacity change from 0 to 1024 [ 68.855459][ T5650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.855491][ T5650] EXT4-fs: inline encryption not supported [ 68.855515][ T5650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.855871][ T5651] loop0: detected capacity change from 0 to 1024 [ 68.857304][ T5651] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.857316][ T5651] EXT4-fs: inline encryption not supported [ 68.857326][ T5651] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.957043][ T5651] EXT4-fs (loop0): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.961750][ T5650] EXT4-fs (loop1): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.180013][ T5651] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.194: bg 0: block 112: padding at end of block bitmap is not set [ 69.186156][ T4800] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0002: unknown main item tag 0x1 [ 69.186249][ T4800] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0002: reserved main item tag 0xd [ 69.186260][ T4800] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0002: item fetching failed at offset 23/30 [ 69.186412][ T4800] hid-generic 03FF:FFFFFFFD:FFFFFFF7.0002: probe with driver hid-generic failed with error -22 [ 69.203901][ T5650] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.193: bg 0: block 112: padding at end of block bitmap is not set [ 69.317044][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.339716][ T5678] syzkaller0: entered promiscuous mode [ 70.345866][ T5678] syzkaller0: entered allmulticast mode [ 71.331483][ T4717] EXT4-fs (loop0): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 71.826861][ T5687] loop3: detected capacity change from 0 to 256 [ 72.033945][ T4712] EXT4-fs (loop1): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 72.121099][ T5692] syzkaller0: entered promiscuous mode [ 72.121138][ T5692] syzkaller0: entered allmulticast mode [ 72.151743][ T5697] syzkaller0: entered promiscuous mode [ 72.151769][ T5697] syzkaller0: entered allmulticast mode [ 72.164379][ T5697] simple: bas]9oς>Q/ic_2 [ 72.164405][ T5697] simple: bas]9oς>Q/ic_4 [ 72.164422][ T5697] simple: bas]9oς>Q/ic_6 [ 72.164427][ T5697] simple: bas]9oς>Q/ic_8 [ 72.164432][ T5697] simple: bas]9oς>Q/ic_10 [ 72.164437][ T5697] simple: bas]9oς>Q/ic_12 [ 72.164441][ T5697] simple: bas]9oς>Q/ic_14 [ 72.164445][ T5697] simple: bas]9oς>Q/ic_16 [ 72.164450][ T5697] simple: bas]9oς>Q/ic_18 [ 72.164454][ T5697] simple: bas]9oς>Q/ic_20 [ 72.164458][ T5697] simple: bas]9oς>Q/ic_22 [ 72.164463][ T5697] simple: bas]9oς>Q/ic_24 [ 72.164467][ T5697] simple: bas]9oς>Q/ic_26 [ 72.164471][ T5697] simple: bas]9oς>Q/ic_28 [ 72.164475][ T5697] simple: bas]9oς>Q/ic_30 [ 72.164479][ T5697] simple: bas]9oς>Q/ic_32 [ 72.164484][ T5697] simple: bas]9oς>Q/ic_34 [ 72.164488][ T5697] simple: bas]9oς>Q/ic_36 [ 72.164492][ T5697] simple: bas]9oς>Q/ic_38 [ 72.164497][ T5697] simple: bas]9oς>Q/ic_40 [ 72.164501][ T5697] simple: bas]9oς>Q/ic_42 [ 72.164505][ T5697] simple: bas]9oς>Q/ic_44 [ 72.164509][ T5697] simple: bas]9oς>Q/ic_46 [ 72.164514][ T5697] simple: bas]9oς>Q/ic_48 [ 72.164518][ T5697] simple: bas]9oς>Q/ic_50 [ 72.164522][ T5697] simple: bas]9oς>Q/ic_52 [ 72.164527][ T5697] simple: bas]9oς>Q/ic_54 [ 72.164531][ T5697] simple: bas]9oς>Q/ic_56 [ 72.164535][ T5697] simple: bas]9oς>Q/ic_58 [ 72.164539][ T5697] simple: bas]9oς>Q/ic_60 [ 72.164543][ T5697] simple: bas]9oς>Q/ic_62 [ 72.164548][ T5697] simple: bas]9oς>Q/ic_64 [ 72.164554][ T5697] TC_ACT_REPEAT abuse ? [ 72.757167][ T5714] loop0: detected capacity change from 0 to 1024 [ 72.761418][ T5714] ext4: Unknown parameter 'fsname' [ 73.217384][ T5729] tipc: Started in network mode [ 73.217480][ T5729] tipc: Node identity 4ebc55a27342, cluster identity 4711 [ 73.217529][ T5729] tipc: Enabled bearer , priority 0 [ 73.217819][ T5729] syzkaller0: entered promiscuous mode [ 73.217830][ T5729] syzkaller0: entered allmulticast mode [ 73.219266][ T5729] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 73.228167][ T5729] tipc: Resetting bearer [ 73.229755][ T5727] tipc: Resetting bearer [ 73.234168][ T5727] tipc: Disabling bearer [ 73.238974][ T5728] syzkaller0: entered promiscuous mode [ 73.240134][ T5728] syzkaller0: entered allmulticast mode [ 73.311412][ T5731] loop3: detected capacity change from 0 to 512 [ 73.312255][ T5731] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.427771][ T5736] loop4: detected capacity change from 0 to 1024 [ 73.428221][ T5736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.429951][ T5736] EXT4-fs: inline encryption not supported [ 73.429994][ T5736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.459135][ T5736] EXT4-fs (loop4): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.820225][ T5736] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.212: bg 0: block 112: padding at end of block bitmap is not set [ 74.453736][ T5748] tipc: Enabled bearer , priority 0 [ 74.454264][ T5748] syzkaller0: entered promiscuous mode [ 74.454293][ T5748] syzkaller0: entered allmulticast mode [ 75.451880][ T24] tipc: Node number set to 2033641703 [ 75.495705][ T5766] tipc: Resetting bearer [ 75.514494][ T5747] tipc: Resetting bearer [ 75.569754][ T4711] EXT4-fs (loop4): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 75.605742][ T5747] tipc: Disabling bearer [ 75.932108][ T4823] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 75.969431][ T5787] loop5: detected capacity change from 0 to 512 [ 75.973211][ T5787] EXT4-fs: Ignoring removed orlov option [ 75.984832][ T5787] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 75.984895][ T5787] EXT4-fs (loop5): mount failed [ 76.085497][ T4823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.085544][ T4823] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 76.085556][ T4823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.088475][ T4823] usb 1-1: config 0 descriptor?? [ 77.242504][ T4823] usb 1-1: string descriptor 0 read error: -71 [ 77.243585][ T4823] cypress_m8 1-1:0.0: DeLorme Earthmate USB converter detected [ 77.244469][ T4823] earthmate ttyUSB0: required endpoint is missing [ 77.358074][ T4823] usb 1-1: USB disconnect, device number 2 [ 77.359530][ T4823] cypress_m8 1-1:0.0: device disconnected [ 78.375726][ T5847] loop5: detected capacity change from 0 to 512 [ 78.386929][ T5847] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 78.388505][ T5847] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 78.389005][ T5847] EXT4-fs (loop5): orphan cleanup on readonly fs [ 78.398565][ T5847] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.230: bg 0: block 361: padding at end of block bitmap is not set [ 78.398662][ T5847] loop5: lost filesystem error report for type 5 error -117 [ 78.399457][ T5847] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 78.399486][ T5847] loop5: lost filesystem error report for type 5 error -117 [ 78.399943][ T5847] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.230: attempt to clear invalid blocks 33619980 len 1 [ 78.400014][ T5847] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.400820][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 78.400845][ C0] EXT4-fs (loop5): initial error at time 78: ext4_validate_block_bitmap:441 [ 78.400878][ C0] EXT4-fs (loop5): last error at time 78: ext4_clear_blocks:876: inode 11 [ 78.401338][ T5847] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.230: invalid indirect mapped block 1811939328 (level 0) [ 78.401360][ T5847] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.401446][ T5847] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.230: invalid indirect mapped block 2185560079 (level 1) [ 78.401464][ T5847] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.401818][ T5847] EXT4-fs (loop5): 1 truncate cleaned up [ 78.402450][ T5847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 78.503157][ T5851] loop4: detected capacity change from 0 to 1024 [ 78.510704][ T5851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.510716][ T5851] EXT4-fs: inline encryption not supported [ 78.510725][ T5851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.538820][ T5857] syzkaller0: entered promiscuous mode [ 78.539967][ T5857] syzkaller0: entered allmulticast mode [ 78.763203][ T5861] usb3503 0-0008: unknown mode is requested [ 78.763472][ T5861] usb3503 0-0008: usb3503_probe: probed in standby mode [ 78.765561][ T5861] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 78.776060][ T5861] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 78.864668][ T5851] EXT4-fs (loop4): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.880373][ T5851] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.229: bg 0: block 112: padding at end of block bitmap is not set [ 79.505411][ T5291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 80.192474][ T4711] EXT4-fs (loop4): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 81.509156][ T5909] netlink: 'syz.0.244': attribute type 24 has an invalid length. [ 81.644645][ T5913] binder: 5912:5913 tried to acquire reference to desc 0, got 1 instead [ 81.661533][ T4800] binder: undelivered TRANSACTION_COMPLETE [ 81.661568][ T4800] binder: undelivered TRANSACTION_COMPLETE [ 81.661620][ T4800] binder: undelivered transaction 47, process died. [ 81.661639][ T4800] binder: undelivered transaction 46, process died. [ 82.331640][ T5923] loop3: detected capacity change from 0 to 1024 [ 82.331996][ T5923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.332027][ T5923] EXT4-fs: inline encryption not supported [ 82.332044][ T5923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.360380][ T5923] EXT4-fs (loop3): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.397854][ T5923] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.249: bg 0: block 112: padding at end of block bitmap is not set [ 84.087203][ T4721] EXT4-fs (loop3): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 84.355184][ T5961] loop1: detected capacity change from 0 to 2048 [ 84.597482][ T5961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.617381][ T5950] tipc: Enabled bearer , priority 10 [ 85.109740][ T5978] loop5: detected capacity change from 0 to 1024 [ 85.113149][ T5978] EXT4-fs: quotafile must be on filesystem root [ 85.479221][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.640666][ T5988] loop1: detected capacity change from 0 to 128 [ 85.641597][ T5988] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.641929][ T5988] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.731768][ T9] tipc: Node number set to 1040078242 [ 86.017113][ T5995] loop1: detected capacity change from 0 to 1024 [ 86.020364][ T5995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.023556][ T5995] EXT4-fs: inline encryption not supported [ 86.024745][ T5995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.104200][ T5995] EXT4-fs (loop1): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 86.119514][ T5995] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.265: bg 0: block 112: padding at end of block bitmap is not set [ 86.968483][ T6013] loop0: detected capacity change from 0 to 512 [ 87.131937][ T6013] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.278: iget: bad i_size value: 38620345925642 [ 87.131975][ T6013] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.132892][ T6013] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.278: couldn't read orphan inode 15 (err -117) [ 87.132922][ T6013] loop0: lost filesystem error report for type 5 error -117 [ 87.133747][ T6013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.399894][ T6023] tipc: Cannot configure node identity twice [ 87.964552][ T4712] EXT4-fs (loop1): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 87.968049][ T6029] loop3: detected capacity change from 0 to 512 [ 88.094209][ T6029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.116595][ T6029] EXT4-fs (loop3): shut down requested (2) [ 88.124143][ T6030] loop5: detected capacity change from 0 to 4096 [ 88.130943][ T6030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.234213][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.269736][ T5579] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 88.285704][ T5579] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 616 with error 28 [ 88.286182][ T5579] EXT4-fs (loop0): This should not happen!! Data will be lost [ 88.286182][ T5579] [ 88.287167][ T5579] EXT4-fs (loop0): Total free blocks count 0 [ 88.287565][ T5579] EXT4-fs (loop0): Free/Dirty block details [ 88.287876][ T5579] EXT4-fs (loop0): free_blocks=0 [ 88.288316][ T5579] EXT4-fs (loop0): dirty_blocks=620 [ 88.288669][ T5579] EXT4-fs (loop0): Block reservation details [ 88.288925][ T5579] EXT4-fs (loop0): i_reserved_data_blocks=620 [ 89.222387][ T4717] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 89.223787][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.252094][ T6045] loop4: detected capacity change from 0 to 128 [ 89.252603][ T6045] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.261929][ T6045] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.271343][ T6047] openvswitch: netlink: Key 6 has unexpected len 245 expected 2 [ 89.413041][ T6054] devpts: Bad value for 'gid' [ 89.413076][ T6054] devpts: Bad value for 'gid' [ 89.445654][ T6051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.279'. [ 89.842357][ T5291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.200013][ T6073] loop1: detected capacity change from 0 to 128 [ 90.364742][ T6075] binder: 6072:6075 tried to acquire reference to desc 0, got 1 instead [ 90.366581][ T6075] binder: 6072:6075 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 90.366632][ T6075] binder: 6075 RLIMIT_NICE not set [ 90.366839][ T6075] binder: 6075 RLIMIT_NICE not set [ 90.366969][ T6075] binder: send failed reply for transaction 52 to 6072:6075 [ 90.367138][ T6075] binder: 6072:6075 transaction 52 fd fixups failed 29201/-12, line 5098 [ 91.108081][ T24] binder: undelivered TRANSACTION_COMPLETE [ 91.108186][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.503922][ T6089] loop1: detected capacity change from 0 to 1024 [ 91.636077][ T6089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.083256][ T6102] binder: 6098:6102 tried to acquire reference to desc 0, got 1 instead [ 92.084752][ T6102] binder: 6098:6102 got transaction with invalid data ptr [ 92.084784][ T6102] binder: 6098:6102 transaction call to 6098:0 failed 58/29201/-14, code 0 size 0-24 line 3511 [ 92.121661][ T6102] syz.5.290 (6102): drop_caches: 2 [ 92.156602][ T4807] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.292693][ T6108] loop4: detected capacity change from 0 to 128 [ 92.294349][ T6108] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.296437][ T6108] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 93.352309][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.154497][ T6145] loop4: detected capacity change from 0 to 128 [ 95.527675][ T6145] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.566265][ T6162] binder: 6161:6162 tried to acquire reference to desc 0, got 1 instead [ 95.568422][ T6162] binder: 6161:6162 got transaction with invalid data ptr [ 95.569943][ T6162] binder: 6161:6162 transaction call to 6161:0 failed 63/29201/-14, code 0 size 0-24 line 3511 [ 95.578569][ T6162] syz.1.303 (6162): drop_caches: 2 [ 95.586789][ T4800] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.730177][ T6167] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 95.826920][ T6166] loop5: detected capacity change from 0 to 256 [ 96.311749][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.330390][ T6172] loop3: detected capacity change from 0 to 4096 [ 96.332810][ T6172] EXT4-fs: inline encryption not supported [ 96.335034][ T6172] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.336495][ T6172] EXT4-fs: Ignoring removed bh option [ 96.340854][ T6172] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.346014][ T6172] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 96.346082][ T6172] System zones: 0-5 [ 96.346894][ T6172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.354641][ T6177] loop4: detected capacity change from 0 to 128 [ 96.356598][ T6177] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.845658][ T6182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.316'. [ 96.975168][ T6177] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.342985][ T6187] loop1: detected capacity change from 0 to 128 [ 97.347089][ T6187] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.552619][ T6187] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.606648][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.682408][ T6191] loop4: detected capacity change from 0 to 1024 [ 97.685251][ T6191] EXT4-fs: quotafile must be on filesystem root [ 98.165123][ T1259] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.581947][ T6212] loop4: detected capacity change from 0 to 128 [ 98.583905][ T6212] Smack: duplicate mount options [ 99.136255][ T6220] binder: 6219:6220 tried to acquire reference to desc 0, got 1 instead [ 99.139324][ T6220] binder: 6219:6220 got transaction with invalid data ptr [ 99.140966][ T6220] binder: 6219:6220 transaction call to 6219:0 failed 68/29201/-14, code 0 size 0-24 line 3511 [ 99.153792][ T6220] syz.0.317 (6220): drop_caches: 2 [ 99.223652][ T6222] loop3: detected capacity change from 0 to 1024 [ 99.226186][ T4800] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.429857][ T6230] overlayfs: missing 'workdir' [ 99.573191][ T6231] input: syz0 as /devices/virtual/input/input3 [ 99.649566][ T6232] loop1: detected capacity change from 0 to 512 [ 99.658573][ T6232] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 99.777444][ T6232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 99.778213][ T6232] EXT4-fs (loop1): orphan cleanup on readonly fs [ 99.779849][ T6232] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.321: bg 0: block 361: padding at end of block bitmap is not set [ 99.780121][ T6232] loop1: lost filesystem error report for type 5 error -117 [ 99.780904][ T6232] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 99.780928][ T6232] loop1: lost filesystem error report for type 5 error -117 [ 99.781573][ T6232] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.321: attempt to clear invalid blocks 33619980 len 1 [ 99.781780][ T6232] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 99.781999][ T6232] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.321: invalid indirect mapped block 1811939328 (level 0) [ 99.782013][ T6232] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 99.782383][ T6232] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.321: invalid indirect mapped block 2185560079 (level 1) [ 99.782399][ T6232] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 99.790793][ C1] EXT4-fs (loop1): error count since last fsck: 5 [ 99.790808][ C1] EXT4-fs (loop1): initial error at time 99: ext4_validate_block_bitmap:441 [ 99.790820][ C1] EXT4-fs (loop1): last error at time 99: ext4_free_branches:1023: inode 11 [ 99.803107][ T6232] EXT4-fs (loop1): 1 truncate cleaned up [ 99.805919][ T6232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 100.139944][ T6237] loop0: detected capacity change from 0 to 128 [ 100.140465][ T6237] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.549451][ T6246] loop4: detected capacity change from 0 to 256 [ 100.732229][ T6237] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.029785][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 101.738388][ T6261] loop0: detected capacity change from 0 to 1024 [ 101.752353][ T6261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.752384][ T6261] EXT4-fs: inline encryption not supported [ 101.760937][ T6261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.780632][ T6261] EXT4-fs (loop0): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.834715][ T6261] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.329: bg 0: block 112: padding at end of block bitmap is not set [ 103.008671][ T6277] loop3: detected capacity change from 0 to 1024 [ 103.023426][ T6277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.100468][ T4717] EXT4-fs (loop0): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 103.620620][ T6295] sctp: [Deprecated]: syz.0.334 (pid 6295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.620620][ T6295] Use struct sctp_sack_info instead [ 103.747652][ T6297] bridge0: port 3(netdevsim1) entered blocking state [ 103.747942][ T6297] bridge0: port 3(netdevsim1) entered disabled state [ 103.749731][ T6297] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 103.759060][ T6297] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 103.760537][ T6297] bridge0: port 3(netdevsim1) entered blocking state [ 103.760588][ T6297] bridge0: port 3(netdevsim1) entered forwarding state [ 103.927910][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.034149][ T6304] loop1: detected capacity change from 0 to 256 [ 104.601764][ T6308] loop0: detected capacity change from 0 to 128 [ 104.604766][ T6308] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.607701][ T6308] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.627135][ T6310] loop4: detected capacity change from 0 to 1024 [ 104.630385][ T6310] ext2: Unknown parameter 'subj_type' [ 104.728717][ T6314] configfs-gadget.g1 gadget.1: HOST MAC da:ea:ef:e3:6a:b4 [ 104.728757][ T6314] configfs-gadget.g1 gadget.1: MAC 4a:f9:91:60:39:3b [ 104.729958][ T6314] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 104.809244][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 105.089608][ T6322] loop3: detected capacity change from 0 to 1024 [ 105.089959][ T6322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.089969][ T6322] EXT4-fs: inline encryption not supported [ 105.089977][ T6322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.119723][ T6322] EXT4-fs (loop3): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.164206][ T6322] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.344: bg 0: block 112: padding at end of block bitmap is not set [ 105.230398][ T6325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.230624][ T6325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.251249][ T6337] loop5: detected capacity change from 0 to 8 [ 106.008191][ T6347] loop4: detected capacity change from 0 to 1024 [ 106.108229][ T6347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.872942][ T4721] EXT4-fs (loop3): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 106.889010][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.957513][ T6370] loop0: detected capacity change from 0 to 128 [ 106.959494][ T6370] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.980510][ T6370] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.290537][ T6404] nbd: must specify a size in bytes for the device [ 108.602289][ T6413] loop0: detected capacity change from 0 to 1024 [ 108.603893][ T6413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.605360][ T6413] EXT4-fs: inline encryption not supported [ 108.606431][ T6413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.671293][ T6413] EXT4-fs (loop0): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.693883][ T6413] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.360: bg 0: block 112: padding at end of block bitmap is not set [ 108.709371][ T6424] loop3: detected capacity change from 0 to 128 [ 108.709833][ T6424] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.737635][ T6424] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.082927][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.370'. [ 109.082971][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.370'. [ 109.083002][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.370'. [ 109.083023][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.370'. [ 109.083043][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.370'. [ 109.083062][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.370'. [ 109.083078][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.370'. [ 109.083094][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.370'. [ 109.083109][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.370'. [ 109.616726][ T6455] loop1: detected capacity change from 0 to 256 [ 110.063978][ T6455] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 110.064025][ T6455] FAT-fs (loop1): bogus number of directory entries (1) [ 110.064054][ T6455] FAT-fs (loop1): Can't find a valid FAT filesystem [ 110.690947][ T4717] EXT4-fs (loop0): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 110.739400][ T6474] loop3: detected capacity change from 0 to 128 [ 110.743414][ T6474] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.746836][ T6474] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.770394][ T6470] loop1: detected capacity change from 0 to 8192 [ 110.964578][ T6482] loop0: detected capacity change from 0 to 512 [ 111.075456][ T6482] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.195983][ T6482] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 111.199247][ T6482] EXT4-fs (loop0): Remounting filesystem read-only [ 111.199424][ T6482] EXT4-fs (loop0): 1 truncate cleaned up [ 111.199887][ T6482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.778914][ T6482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.782884][ T6481] loop5: detected capacity change from 0 to 1024 [ 111.793912][ T6481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.799535][ T6481] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.806091][ T6481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 111.921634][ T6481] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.385: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.921664][ T6481] loop5: lost filesystem error report for type 5 error -117 [ 111.931812][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 111.931828][ C0] EXT4-fs (loop5): initial error at time 111: ext4_free_blocks:6718 [ 111.931841][ C0] EXT4-fs (loop5): last error at time 111: ext4_free_blocks:6718 [ 111.940979][ T6481] EXT4-fs (loop5): Remounting filesystem read-only [ 111.941194][ T6481] EXT4-fs (loop5): 1 orphan inode deleted [ 111.941695][ T6481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.962102][ T2674] EXT4-fs (loop5): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 111.962142][ T2674] Quota error (device loop5): write_blk: dquota write failed [ 111.962204][ T2674] Quota error (device loop5): free_dqentry: Can't move quota data block (2) to free list [ 111.998947][ T5291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.072460][ T6500] __nla_validate_parse: 44 callbacks suppressed [ 112.075534][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 112.191477][ T6510] loop4: detected capacity change from 0 to 512 [ 112.195316][ T6510] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.394: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 112.195413][ T6510] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.199068][ T6510] EXT4-fs (loop4): Remounting filesystem read-only [ 112.200859][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 112.200873][ C0] EXT4-fs (loop4): initial error at time 112: ext4_iget_extra_inode:5180: inode 15 [ 112.200891][ C0] EXT4-fs (loop4): last error at time 112: ext4_iget_extra_inode:5180: inode 15 [ 112.207991][ T6510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.228987][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.289603][ T6513] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 112.347548][ T24] IPVS: starting estimator thread 0... [ 112.441016][ T6514] IPVS: using max 49 ests per chain, 117600 per kthread [ 112.479046][ T6516] loop5: detected capacity change from 0 to 128 [ 112.485855][ T6516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=e843c018, mo2=0102] [ 112.485908][ T6516] System zones: 1-3, 19-19, 35-36 [ 112.488048][ T6516] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.908235][ T6534] loop0: detected capacity change from 0 to 1024 [ 112.909364][ T6534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.927927][ T6534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.239677][ T30] audit: type=1326 audit(113.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.3.407" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8397a168 code=0x7ffc0000 [ 113.244382][ T30] audit: type=1326 audit(113.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.3.407" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8397a168 code=0x7ffc0000 [ 113.248918][ T30] audit: type=1326 audit(113.210:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.3.407" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8395d02c code=0x7ffc0000 [ 113.254183][ T30] audit: type=1326 audit(113.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.3.407" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8395d02c code=0x7ffc0000 [ 113.254221][ T30] audit: type=1326 audit(113.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.3.407" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8395d02c code=0x7ffc0000 [ 113.254248][ T30] audit: type=1326 audit(113.220:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.3.407" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8395d02c code=0x7ffc0000 [ 113.254271][ T30] audit: type=1326 audit(113.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.3.407" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8395d02c code=0x7ffc0000 [ 113.254296][ T30] audit: type=1326 audit(113.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.3.407" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8395d02c code=0x7ffc0000 [ 113.408775][ T5291] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.795833][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.845262][ T6574] netlink: 'syz.4.416': attribute type 2 has an invalid length. [ 113.845300][ T6574] netlink: 'syz.4.416': attribute type 1 has an invalid length. [ 113.934171][ T6583] loop0: detected capacity change from 0 to 256 [ 114.395695][ T6608] loop4: detected capacity change from 0 to 256 [ 114.397192][ T6606] loop1: detected capacity change from 0 to 256 [ 114.605252][ T6625] vlan0: entered promiscuous mode [ 114.909596][ T6636] loop5: detected capacity change from 0 to 128 [ 114.930004][ T6636] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 114.932623][ T6636] FAT-fs (loop5): Filesystem has been set read-only [ 114.989306][ T6646] loop5: detected capacity change from 0 to 512 [ 115.010887][ T6646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.017338][ T6648] loop1: detected capacity change from 0 to 1024 [ 115.038271][ T6648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.091994][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.094819][ T5291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.125543][ T6660] netlink: 'syz.1.451': attribute type 7 has an invalid length. [ 115.125579][ T6660] netlink: 'syz.1.451': attribute type 8 has an invalid length. [ 115.125591][ T6660] netlink: 'syz.1.451': attribute type 15 has an invalid length. [ 115.139930][ T6658] bridge_slave_0: left allmulticast mode [ 115.143492][ T6658] bridge_slave_0: left promiscuous mode [ 115.143623][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.278857][ T6671] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 115.280739][ T6665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.671298][ T6684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.711877][ T6696] netlink: 84 bytes leftover after parsing attributes in process `syz.1.465'. [ 115.727950][ T5291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.776202][ T6706] netlink: 20 bytes leftover after parsing attributes in process `syz.5.468'. [ 115.776240][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.468'. [ 115.801631][ T6708] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 115.803285][ T5579] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.803315][ T5579] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.803331][ T5579] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.803346][ T5579] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.823352][ T4718] Bluetooth: hci1: unexpected subevent 0x0e length: 5 < 15 [ 116.157074][ T6722] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 116.157548][ T6722] EXT4-fs (loop5): Remounting filesystem read-only [ 116.157677][ T6722] EXT4-fs (loop5): 1 truncate cleaned up [ 116.158224][ T6722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.181133][ T6720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.206542][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.328676][ T6743] EXT4-fs: inline encryption not supported [ 116.330558][ T6743] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 116.355356][ T6743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.392284][ T6747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.399347][ T6747] EXT4-fs warning (device loop1): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 116.407436][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.431968][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.516004][ T6765] mac80211_hwsim hwsim7 ..c: renamed from wlan1 (while UP) [ 116.974927][ T6722] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.990713][ T6780] set_capacity_and_notify: 6 callbacks suppressed [ 116.993720][ T6780] loop0: detected capacity change from 0 to 256 [ 117.160020][ T6787] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 117.920275][ T6790] loop4: detected capacity change from 0 to 512 [ 117.924527][ T6790] EXT4-fs: Ignoring removed oldalloc option [ 117.940909][ T6790] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.502: bad orphan inode 32 [ 117.940938][ T6790] loop4: lost filesystem error report for type 5 error -117 [ 117.941498][ T6790] ext4_test_bit(bit=31, block=4) = 0 [ 117.941522][ T6790] EXT4-fs (loop4): 1 truncate cleaned up [ 117.942021][ T6790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.970407][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.070176][ T6795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.078297][ T6801] loop1: detected capacity change from 0 to 512 [ 118.112875][ T6801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.154905][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.155263][ T6815] loop0: detected capacity change from 0 to 128 [ 118.155721][ T6815] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.162177][ T6815] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.338166][ T6837] binder: 6832:6837 ioctl 4018620d 0 returned -22 [ 119.340415][ T6837] binder: 6832:6837 got reply transaction with no transaction stack [ 119.345214][ T6837] binder: 6832:6837 transaction reply to 0:0 failed 69/29201/-71, code 0 size 0-0 line 3155 [ 119.357243][ T4807] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.359265][ T6838] loop3: detected capacity change from 0 to 512 [ 119.361682][ T6838] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.374717][ T6838] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.383458][ T6838] EXT4-fs (loop3): 1 truncate cleaned up [ 119.383929][ T6838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.454548][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.496235][ T6852] loop4: detected capacity change from 0 to 1024 [ 119.538355][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.541700][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.573796][ T6852] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 119.599385][ T6857] bridge_slave_0: left allmulticast mode [ 119.600556][ T6857] bridge_slave_0: left promiscuous mode [ 119.602174][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.605322][ T6857] bridge_slave_1: left allmulticast mode [ 119.606535][ T6857] bridge_slave_1: left promiscuous mode [ 119.607885][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.617261][ T6857] bond0: (slave bond_slave_0): Releasing backup interface [ 119.637861][ T6861] Cannot find set identified by id 0 to match [ 119.676625][ T6857] bond0: (slave bond_slave_1): Releasing backup interface [ 119.718304][ T6857] team0: Port device team_slave_0 removed [ 119.723065][ T6857] team0: Port device team_slave_1 removed [ 119.723412][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.723426][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.725099][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.725111][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.726836][ T6857] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.989730][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.535'. [ 119.989829][ T6870] block nbd0: not configured, cannot reconfigure [ 120.020165][ T6873] loop0: detected capacity change from 0 to 1024 [ 120.035226][ T6873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.082430][ T6885] loop5: detected capacity change from 0 to 512 [ 120.082964][ T6885] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.169005][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.614482][ T6914] loop1: detected capacity change from 0 to 512 [ 120.629737][ T6914] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 120.633386][ T6914] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.547: invalid indirect mapped block 256 (level 1) [ 120.633423][ T6914] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.637775][ T6919] bridge_slave_0: left allmulticast mode [ 120.638490][ T6914] EXT4-fs (loop1): Remounting filesystem read-only [ 120.638651][ T6914] EXT4-fs (loop1): 1 truncate cleaned up [ 120.639725][ T6914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.647043][ T6919] bridge_slave_0: left promiscuous mode [ 120.647162][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.653888][ T6919] bridge_slave_1: left allmulticast mode [ 120.655046][ T6919] bridge_slave_1: left promiscuous mode [ 120.656210][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.662966][ T6919] team0: Port device team_slave_0 removed [ 120.665993][ T6919] team0: Port device team_slave_1 removed [ 120.668334][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.668811][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.672063][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.675175][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.676670][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.690560][ T6918] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 120.694132][ T1259] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.694177][ T1259] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.694197][ T1259] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.694212][ T1259] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.694227][ T1259] netdevsim netdevsim100 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.739091][ T6925] loop3: detected capacity change from 0 to 128 [ 120.748961][ T6925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=e843c018, mo2=0102] [ 120.749020][ T6925] System zones: 1-3, 19-19, 35-36 [ 120.753222][ T6923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.753247][ T6923] EXT4-fs: inline encryption not supported [ 120.753269][ T6923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.754538][ T6925] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.768933][ T6923] EXT4-fs (loop1): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 120.788774][ T6923] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.551: bg 0: block 112: padding at end of block bitmap is not set [ 121.649462][ T4721] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.094443][ T4718] Bluetooth: Wrong link type (-57) [ 122.262962][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 122.266106][ T4712] EXT4-fs (loop1): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 122.323751][ T6969] set_capacity_and_notify: 1 callbacks suppressed [ 122.323797][ T6969] loop1: detected capacity change from 0 to 512 [ 122.324200][ T6969] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.359085][ T6974] loop5: detected capacity change from 0 to 8192 [ 122.393182][ T6974] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.764346][ T6987] loop4: detected capacity change from 0 to 512 [ 122.768325][ T6987] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.573: inode has both inline data and extents flags [ 122.768361][ T6987] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.772355][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 122.772376][ C1] EXT4-fs (loop4): initial error at time 122: ext4_orphan_get:1399: inode 15 [ 122.772405][ C1] EXT4-fs (loop4): last error at time 122: ext4_orphan_get:1399: inode 15 [ 122.780161][ T6982] loop3: detected capacity change from 0 to 8192 [ 122.784137][ T6987] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.573: couldn't read orphan inode 15 (err -117) [ 122.784173][ T6987] loop4: lost filesystem error report for type 5 error -117 [ 122.788286][ T6987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.801363][ T6982] loop3: p1 p2 p3 p4[EZD] [ 122.802849][ T6982] loop3: partition table partially beyond EOD, truncated [ 122.805769][ T6982] loop3: p1 start 16384 is beyond EOD, truncated [ 122.805820][ T6982] loop3: p2 size 150994944 extends beyond EOD, truncated [ 122.810071][ T6982] loop3: p3 start 67108864 is beyond EOD, truncated [ 122.811665][ T6982] loop3: p4 size 33555584 extends beyond EOD, truncated [ 122.830895][ T6987] EXT4-fs (loop4): Online defrag not supported for non-extent files [ 122.836553][ T6994] loop5: detected capacity change from 0 to 256 [ 122.858560][ T6996] loop0: detected capacity change from 0 to 1024 [ 122.862080][ T6996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.863385][ T6996] EXT4-fs: inline encryption not supported [ 122.864587][ T6996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.871733][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.873784][ T6996] EXT4-fs (loop0): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.896941][ T6996] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.576: bg 0: block 112: padding at end of block bitmap is not set [ 123.711092][ T7010] loop5: detected capacity change from 0 to 256 [ 123.724300][ T7010] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 123.724331][ T7010] FAT-fs (loop5): Filesystem has been set read-only [ 123.736933][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 123.738046][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 123.941514][ T4717] EXT4-fs (loop0): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 124.006180][ T7020] loop1: detected capacity change from 0 to 1024 [ 124.006545][ T7020] EXT4-fs: Ignoring removed bh option [ 124.059019][ T7020] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c028, mo2=0002] [ 124.059071][ T7020] System zones: 0-1, 3-8 [ 124.059639][ T7020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.101742][ T7020] EXT4-fs (loop1): re-mounted 00000000-0000-0006-0000-000000000000. [ 124.350645][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.381113][ T7031] loop1: detected capacity change from 0 to 512 [ 124.386483][ T7031] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.414431][ T7031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.442672][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.477345][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 124.485033][ T1018] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.509176][ T7036] fido_id[7036]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 124.537245][ T7038] loop1: detected capacity change from 0 to 2048 [ 124.555778][ T7038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.592462][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.622257][ T7042] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 124.624479][ T7042] unable to read xattr id index table [ 124.627531][ T7042] SQUASHFS error: zlib decompression failed, data probably corrupt [ 124.627561][ T7042] SQUASHFS error: Failed to read block 0x9b: -5 [ 124.627579][ T7042] SQUASHFS error: Unable to read metadata cache entry [99] [ 124.627590][ T7042] SQUASHFS error: Unable to read inode 0x127 [ 124.728036][ T7046] EXT4-fs: inline encryption not supported [ 124.728851][ T7046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.728862][ T7046] EXT4-fs (loop1): Test dummy encryption mode enabled [ 124.730478][ T7046] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 124.730518][ T7046] System zones: 0-5 [ 124.731556][ T7046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.739082][ T7046] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 124.756605][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.783093][ T4800] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.786965][ T4800] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.815098][ T7050] fido_id[7050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.028778][ T7016] syz_tun: entered allmulticast mode [ 125.032433][ T7022] pim6reg: entered allmulticast mode [ 125.243935][ T4712] ffs_data_put(): freeing [ 125.310076][ T7095] EXT4-fs: Ignoring removed bh option [ 125.310134][ T7095] EXT4-fs: Ignoring removed bh option [ 125.316373][ T7095] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 125.319316][ T7089] EXT4-fs (loop4): shut down requested (0) [ 125.343571][ T7101] process 'syz.0.612' launched './file1' with NULL argv: empty string added [ 125.391919][ T7095] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 125.573587][ T7123] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.705851][ T7136] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a85ec018, mo2=0002] [ 125.705907][ T7136] System zones: 0-2, 18-18, 34-35 [ 125.931883][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.999834][ T7141] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 125.999866][ T7141] unable to read xattr id index table [ 126.011045][ T4718] Bluetooth: hci5: command tx timeout [ 126.285639][ T7160] capability: warning: `syz.4.636' uses deprecated v2 capabilities in a way that may be insecure [ 126.364673][ T7171] netlink: 84 bytes leftover after parsing attributes in process `syz.4.639'. [ 126.697198][ T7175] evm: overlay not supported [ 126.779457][ T7186] xt_hashlimit: size too large, truncated to 1048576 [ 127.060652][ T7209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 127.060702][ T7209] System zones: 1-3, 19-19, 35-36 [ 127.062342][ T7209] EXT4-fs mount: 10 callbacks suppressed [ 127.062501][ T7209] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 127.064619][ T7209] EXT4-fs warning (device loop0): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 127.076667][ T7196] loop3: p1 p3 < > [ 127.079149][ T4717] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.183599][ T7212] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 127.183704][ T7212] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 127.183748][ T7212] ================================================================== [ 127.183755][ T7212] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x44/0x84 [ 127.183773][ T7212] Read of size 8 at addr ffff0000d62808f0 by task syz.4.654/7212 [ 127.183781][ T7212] [ 127.183787][ T7212] CPU: 1 UID: 0 PID: 7212 Comm: syz.4.654 Tainted: G L syzkaller #0 PREEMPT [ 127.183799][ T7212] Tainted: [L]=SOFTLOCKUP [ 127.183802][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 127.183808][ T7212] Call trace: [ 127.183811][ T7212] show_stack+0x2c/0x3c (C) [ 127.183826][ T7212] __dump_stack+0x30/0x40 [ 127.183838][ T7212] dump_stack_lvl+0xd8/0x12c [ 127.183850][ T7212] print_address_description+0xb0/0x238 [ 127.183860][ T7212] print_report+0x68/0x84 [ 127.183867][ T7212] kasan_report+0x8c/0xc4 [ 127.183878][ T7212] __asan_report_load8_noabort+0x20/0x2c [ 127.183890][ T7212] dummy_free_request+0x44/0x84 [ 127.183900][ T7212] usb_ep_free_request+0x108/0x3fc [ 127.183912][ T7212] uvc_function_bind+0xbb0/0x1230 [ 127.183923][ T7212] usb_add_function+0x1d0/0x6bc [ 127.183932][ T7212] configfs_composite_bind+0xb4c/0x10b8 [ 127.183943][ T7212] gadget_bind_driver+0x274/0x834 [ 127.183951][ T7212] really_probe+0x29c/0x800 [ 127.183963][ T7212] __driver_probe_device+0x1e0/0x350 [ 127.183974][ T7212] driver_probe_device+0x6c/0x19c [ 127.183985][ T7212] __driver_attach+0x168/0x384 [ 127.183996][ T7212] bus_for_each_dev+0x128/0x1b4 [ 127.184005][ T7212] driver_attach+0x50/0x60 [ 127.184015][ T7212] bus_add_driver+0x208/0x500 [ 127.184024][ T7212] driver_register+0x220/0x310 [ 127.184036][ T7212] usb_gadget_register_driver_owner+0xf0/0x25c [ 127.184049][ T7212] gadget_dev_desc_UDC_store+0x164/0x22c [ 127.184060][ T7212] configfs_write_iter+0x27c/0x354 [ 127.184072][ T7212] vfs_write+0x51c/0xa0c [ 127.184080][ T7212] ksys_write+0x12c/0x228 [ 127.184087][ T7212] __arm64_sys_write+0x84/0x98 [ 127.184095][ T7212] invoke_syscall+0x98/0x244 [ 127.184107][ T7212] el0_svc_common+0xec/0x23c [ 127.184118][ T7212] do_el0_svc+0x4c/0x5c [ 127.184135][ T7212] el0_svc+0x64/0x260 [ 127.184148][ T7212] el0t_64_sync_handler+0x48/0x148 [ 127.184160][ T7212] el0t_64_sync+0x198/0x19c [ 127.184169][ T7212] [ 127.184171][ T7212] Allocated by task 7201: [ 127.184176][ T7212] kasan_save_track+0x40/0x78 [ 127.184185][ T7212] kasan_save_alloc_info+0x44/0x54 [ 127.184194][ T7212] __kasan_kmalloc+0x9c/0xb4 [ 127.184202][ T7212] __kmalloc_cache_noprof+0x2e8/0x5ec [ 127.184211][ T7212] __hw_addr_create+0x70/0x234 [ 127.184219][ T7212] __hw_addr_add_ex+0x1b0/0x460 [ 127.184226][ T7212] dev_addr_init+0x12c/0x1f0 [ 127.184233][ T7212] alloc_netdev_mqs+0x22c/0xf2c [ 127.184243][ T7212] sit_init_net+0x13c/0x43c [ 127.184254][ T7212] ops_init+0x2cc/0x528 [ 127.184263][ T7212] setup_net+0x118/0x2fc [ 127.184271][ T7212] copy_net_ns+0x458/0x66c [ 127.184278][ T7212] create_new_namespaces+0x304/0x50c [ 127.184287][ T7212] unshare_nsproxy_namespaces+0x120/0x170 [ 127.184296][ T7212] ksys_unshare+0x3d4/0x6d8 [ 127.184303][ T7212] __arm64_sys_unshare+0x40/0x54 [ 127.184311][ T7212] invoke_syscall+0x98/0x244 [ 127.184321][ T7212] el0_svc_common+0xec/0x23c [ 127.184331][ T7212] do_el0_svc+0x4c/0x5c [ 127.184340][ T7212] el0_svc+0x64/0x260 [ 127.184349][ T7212] el0t_64_sync_handler+0x48/0x148 [ 127.184359][ T7212] el0t_64_sync+0x198/0x19c [ 127.184365][ T7212] [ 127.184367][ T7212] The buggy address belongs to the object at ffff0000d6280800 [ 127.184367][ T7212] which belongs to the cache kmalloc-128 of size 128 [ 127.184374][ T7212] The buggy address is located 136 bytes to the right of [ 127.184374][ T7212] allocated 104-byte region [ffff0000d6280800, ffff0000d6280868) [ 127.184382][ T7212] [ 127.184384][ T7212] The buggy address belongs to the physical page: [ 127.184388][ T7212] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116280 [ 127.184396][ T7212] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 127.184403][ T7212] page_type: f5(slab) [ 127.184411][ T7212] raw: 05ffc00000000000 ffff0000c0001a00 dead000000000100 dead000000000122 [ 127.184418][ T7212] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 127.184422][ T7212] page dumped because: kasan: bad access detected [ 127.184425][ T7212] [ 127.184427][ T7212] Memory state around the buggy address: [ 127.184431][ T7212] ffff0000d6280780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.184437][ T7212] ffff0000d6280800: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 127.184442][ T7212] >ffff0000d6280880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.184446][ T7212] ^ [ 127.184451][ T7212] ffff0000d6280900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.184456][ T7212] ffff0000d6280980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.184460][ T7212] ================================================================== [ 127.184482][ T7212] Disabling lock debugging due to kernel taint [ 127.184677][ T7212] ------------[ cut here ]------------ [ 127.184682][ T7212] WARNING: drivers/usb/gadget/udc/dummy_hcd.c:710 at dummy_free_request+0x7c/0x84, CPU#1: syz.4.654/7212 [ 127.271518][ T7212] Modules linked in: [ 127.272230][ T7212] CPU: 1 UID: 0 PID: 7212 Comm: syz.4.654 Tainted: G B L syzkaller #0 PREEMPT [ 127.273981][ T7212] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 127.274930][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 127.276722][ T7212] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 127.278105][ T7212] pc : dummy_free_request+0x7c/0x84 [ 127.279018][ T7212] lr : dummy_free_request+0x7c/0x84 [ 127.279907][ T7212] sp : ffff800095a174e0 [ 127.280597][ T7212] x29: ffff800095a174e0 x28: 0000000000000000 x27: ffff0000d9044528 [ 127.281990][ T7212] x26: ffff000104fa2800 x25: 1fffe0001b2088a5 x24: dfff800000000000 [ 127.283507][ T7212] x23: dfff800000000000 x22: ffff800088b07eb8 x21: ffff800087332280 [ 127.285030][ T7212] x20: ffff0000c99a4068 x19: ffff0000d62808f0 x18: 1fffe00035bc9e28 [ 127.286471][ T7212] x17: 0000000000000003 x16: ffff800088b07000 x15: ffff800088bbd0a0 [ 127.287873][ T7212] x14: ffff0001ade4f14c x13: 0000000000000001 x12: 0000000000000000 [ 127.289361][ T7212] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000032ea1 [ 127.290817][ T7212] x8 : ffff80009fbf3000 x7 : 0000000000000000 x6 : ffff8000803b8a6c [ 127.292278][ T7212] x5 : 0000000000000000 x4 : 0000000000000008 x3 : ffff8000802f7b34 [ 127.293712][ T7212] x2 : 0000000000000000 x1 : ffff0000db8aba80 x0 : 0000000000000001 [ 127.295116][ T7212] Call trace: [ 127.295660][ T7212] dummy_free_request+0x7c/0x84 (P) [ 127.296578][ T7212] usb_ep_free_request+0x108/0x3fc [ 127.297475][ T7212] uvc_function_bind+0xbb0/0x1230 [ 127.298339][ T7212] usb_add_function+0x1d0/0x6bc [ 127.299185][ T7212] configfs_composite_bind+0xb4c/0x10b8 [ 127.300147][ T7212] gadget_bind_driver+0x274/0x834 [ 127.300970][ T7212] really_probe+0x29c/0x800 [ 127.301730][ T7212] __driver_probe_device+0x1e0/0x350 [ 127.302617][ T7212] driver_probe_device+0x6c/0x19c [ 127.303530][ T7212] __driver_attach+0x168/0x384 [ 127.304350][ T7212] bus_for_each_dev+0x128/0x1b4 [ 127.305176][ T7212] driver_attach+0x50/0x60 [ 127.305923][ T7212] bus_add_driver+0x208/0x500 [ 127.306712][ T7212] driver_register+0x220/0x310 [ 127.307532][ T7212] usb_gadget_register_driver_owner+0xf0/0x25c [ 127.308637][ T7212] gadget_dev_desc_UDC_store+0x164/0x22c [ 127.309584][ T7212] configfs_write_iter+0x27c/0x354 [ 127.310400][ T7212] vfs_write+0x51c/0xa0c [ 127.311075][ T7212] ksys_write+0x12c/0x228 [ 127.311820][ T7212] __arm64_sys_write+0x84/0x98 [ 127.312635][ T7212] invoke_syscall+0x98/0x244 [ 127.313372][ T7212] el0_svc_common+0xec/0x23c [ 127.314161][ T7212] do_el0_svc+0x4c/0x5c [ 127.314895][ T7212] el0_svc+0x64/0x260 [ 127.315591][ T7212] el0t_64_sync_handler+0x48/0x148 [ 127.316440][ T7212] el0t_64_sync+0x198/0x19c [ 127.317211][ T7212] irq event stamp: 2329 [ 127.317914][ T7212] hardirqs last enabled at (2329): [] finish_task_switch+0x234/0x858 [ 127.319576][ T7212] hardirqs last disabled at (2328): [] __schedule+0x2f8/0x2d80 [ 127.321214][ T7212] softirqs last enabled at (1912): [] __alloc_skb+0x1c0/0x610 [ 127.322838][ T7212] softirqs last disabled at (1906): [] __alloc_skb+0x1a8/0x610 [ 127.324447][ T7212] ---[ end trace 0000000000000000 ]--- [ 127.327106][ T7212] udc dummy_udc.0: failed to start g1: -22 [ 127.327163][ T7212] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 127.328290][ T7212] UDC core: g1: couldn't find an available UDC or it's busy [ 127.793173][ T4718] Bluetooth: hci4: failed to read key size for handle 200 [ 127.829969][ T5300] udevd[5300]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 127.833507][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory