last executing test programs: 9.06094779s ago: executing program 4 (id=176): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002a80)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0xee}, 0x40}}}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008054}, 0x800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x40000040, 0x0, 0x0) write(r0, &(0x7f00000002c0)='6', 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 8.456319252s ago: executing program 0 (id=180): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x9, 0x0, 0x3, 0x3e, 0xffffffeb, 0x274, 0x40, 0x4000000027b, 0x0, 0x4, 0x38, 0x1, 0xfffe, 0x7fff, 0x3}, [{0x3, 0x7, 0x8, 0x2, 0x2000c, 0x7, 0x7ff, 0x3}]}, 0x78) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 7.811783443s ago: executing program 0 (id=183): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@upd={0xe0, 0x15, 0x1, 0x0, 0x0, {{'drbg_pr_sha384\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES64=0x0, @ANYRES64=r0], 0x0) 7.403707582s ago: executing program 4 (id=186): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x404c851) mount(&(0x7f0000000040)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x2400, &(0x7f0000000140)='block_validity') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@abort}, {@block_validity}, {@nobarrier}]}, 0x1, 0x77f, &(0x7f0000000840)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x1, 0x7}, 0x50, [0x2, 0x7, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x7, 0x9, 0x6, 0x4, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0x6, 0x3ff, 0x3, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x805, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x1005, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x802, 0xe, 0x0, 0x2329, 0x236c0, 0x3, 0x7, 0x6, 0x0, 0x24a, 0x2, 0xfffffff7, 0xfffffffe, 0x3, 0x5, 0x5, 0x84, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x5, 0xa, 0x5, 0x4, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x100, 0x8000003, 0xffff7ff7, 0x0, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x80007aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0xd6e, 0x7, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x0, 0x7fff, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xfffffeff, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x3, 0x2, 0x202, 0xfe, 0x9, 0x66608000, 0x5e82, 0x7fb, 0x3, 0x0, 0x5, 0x9, 0x0, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x900, 0x8, 0x20000000, 0x600000, 0x5, 0xb32a, 0xec000000, 0x8001, 0x1906, 0x0, 0xc, 0x8, 0x7ff, 0x27c, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x5, 0x9371, 0x4f8d, 0x7, 0x580, 0x200, 0x80, 0x6]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000180)) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x19d, &(0x7f0000000280)="$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") r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000)=0x4, 0x4) 6.400701221s ago: executing program 3 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) 6.127102951s ago: executing program 4 (id=193): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff00070581020002000705020200020007058302"], 0x0) syz_usb_connect$uac3(0x3, 0xae, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x499, 0x101d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0xf9, 0x90, 0x10, {0x8, 0xb, 0x1, 0x0, 0x1, 0x24}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x4, 0x0, {0xa, 0x25, 0x25, 0x2, 0xf7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf0, 0x3, 0xc5, 0xc, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x7f, 0x7, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0xaf, 0x9, 's'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x101, 0x8, 0x9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x3, 0x2, 0x1, '|'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xbd, 0x0, 0x7, {0xa, 0x25, 0x25, 0x2, 0x6}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0x7, 0xe9, 0x28, 0xff}, 0x1c6, &(0x7f0000000140)={0x5, 0xf, 0x1c6, 0x4, [@generic={0xb0, 0x10, 0x3, "79d77dadcbb6cc0c7e73f46e940df18c2067cbd9780b4cf199e70bba187149c7ce67272db8daafbc056208fb69e8b056a776ada50ba3de92eea07293752343bc91290510b0bd0b16a0e4ce3cce3587f06364da9a8e0432b255076ac6704a251ab54de6b7770820d6f51fc60ee23af79074d3962e187b6e41169c14377f26aa326a3e59ef673f404fb523a903c66b522b19a6b0e82f432124deb1081c71dd903de289393b304b16db093ac7034d"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x89, 0x58, 0x7, 0x4, 0x81}, @generic={0xf2, 0x10, 0x1, "f6f7984275cf3d8fdb72b91b7d4acb386671066b1dab5a714a9a55c885f99a716207c3c8eaa4bec64dfe52dbd45c43ea934949ad8b5ad87b452a667ae59c85fb9742ab6ca542f2bbc5402ec5c6b12e57a269edae9a155f58bb34fefd55d410f33b03cef91cd9f96da378bb115095e6ce6a11004fc344b557f62b869f0e8f930952b20fdf5b42c0b9f6b1b9486a32cb0ecc57b88f4a75bc7c546b2f4592bb9d943c21a422e17118bb574edcba8abc7110550380b7710cd50109d75704f27b40da25b9e6d392fe827e7d23ddc2bc514d5591ec1673e66ef26d2ca23dfbd23133c7bdc5e2864de8624cd3d8ee3d1e5850"}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "1bce8f018b24aba6a4985cab87fe758c"}]}, 0x8, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1004}}, {0xa1, &(0x7f00000003c0)=@string={0xa1, 0x3, "47c60d0ff81d276e823c08dca408f92bdacf6d514ad2796cf979e3e4840bf0117a886c2dacc247cae7b9486ef466ec623490b8f6fc6d64b02df4ddb59d2610fe000e7db51bf333127df6aed724d6f4715db524b3ce006a74e34714eef769a72a35e9ce42b284361e7ec3b8b24a65e8b7a607d9680c159ea4a9c667fdd92a3f7887b0916083e97c14bef25270266504c2d7bc3f61a8371ab393c254048dde9b"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1c4a}}]}) 6.096371178s ago: executing program 3 (id=194): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x9, 0x0, 0x3, 0x3e, 0xffffffeb, 0x274, 0x40, 0x4000000027b, 0x0, 0x4, 0x38, 0x1, 0xfffe, 0x7fff, 0x3}, [{0x3, 0x7, 0x8, 0x2, 0x2000c, 0x7, 0x7ff, 0x3}]}, 0x78) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 5.956783998s ago: executing program 3 (id=196): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002a80)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0xee}, 0x40}}}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008054}, 0x800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x40000040, 0x0, 0x0) write(r0, &(0x7f00000002c0)='6', 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 5.212135771s ago: executing program 1 (id=200): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xab5, &(0x7f0000000880)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) 5.204444362s ago: executing program 2 (id=201): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) epoll_create1(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dstopts={{0x18, 0x29, 0x37, {0x84}}}], 0x30}}], 0x1, 0x400c0c4) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000140)=0x1) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000000)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='2', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) 4.782669885s ago: executing program 3 (id=202): r0 = timerfd_create(0x8, 0x800) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r1, 0x110, 0x4, 0x0, 0x4) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x3b9ac9ff, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x5a6c103, 0x0, 0x8, 0x0, 0x5, 0x0, 0x8, 0xfffffffffffffffd, 0x4}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0xa61, 0x191, 0x0, 0x0, 0xdd9f83, 0x1, 0x2d, 0xf3, 0x2, 0x8, 0x725, 0xa, 0x407, 0x7f, 0x27, 0x34, {0x4000, 0x6fd8e86b}, 0x3, 0xed}}) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x600, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$LOOP_SET_FD(r8, 0x4c00, r9) 4.699957763s ago: executing program 1 (id=203): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[], 0xffe7) 4.289533433s ago: executing program 2 (id=204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) 4.228121426s ago: executing program 0 (id=205): sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@gettaction={0x74, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x62dd}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x48010}, 0x4048840) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x273, 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x4c8541, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100, &(0x7f0000000140)={0x7d, 0x1000f7, 0x140000, {r4}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) fstatfs(r3, &(0x7f00000005c0)=""/140) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') write$binfmt_misc(r5, &(0x7f0000000540)="f64b", 0x2) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4c015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 4.183737546s ago: executing program 2 (id=206): inotify_init1(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 4.159890991s ago: executing program 4 (id=207): inotify_init1(0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 4.132603207s ago: executing program 1 (id=208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000880)="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", 0x759, 0xfffffffffffffffd) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 4.092601416s ago: executing program 0 (id=209): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x0, 0x1, 0x8, 0x0, 0x2, 0x7, 0x6}}], 0x48}, 0x24004013) 4.082908318s ago: executing program 2 (id=210): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 3.998150246s ago: executing program 0 (id=211): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000000000000000000000700000044"], 0x38}, 0x140) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x80000) 3.974824011s ago: executing program 4 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002a80)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0xee}, 0x40}}}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008054}, 0x800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x40000040, 0x0, 0x0) write(r0, &(0x7f00000002c0)='6', 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 3.840208681s ago: executing program 2 (id=213): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xab5, &(0x7f0000000880)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) 3.699287102s ago: executing program 0 (id=214): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) epoll_create1(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dstopts={{0x18, 0x29, 0x37, {0x84}}}], 0x30}}], 0x1, 0x400c0c4) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000140)=0x1) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000000)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000000000)='./file0/file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) 3.349846398s ago: executing program 2 (id=215): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") (async) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000100)={&(0x7f00000000c0)=[{0xd, 0x7}], 0x1, 0x10, 0x5, 0xfe}) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x0, 0x24) lseek(r1, 0x0, 0x2) (async) syz_usb_connect(0x0, 0x4c, &(0x7f0000000040)=ANY=[], 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 1.879856109s ago: executing program 3 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) 1.561613709s ago: executing program 3 (id=217): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r1 = syz_io_uring_setup(0x4fff, &(0x7f0000000200)={0x0, 0xffcd, 0x10000, 0x1, 0x3d5}, &(0x7f0000000280), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000840)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000002140)={&(0x7f0000003000)={[{0x0}]}, 0x1, 0x1}, 0x1) r2 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x5c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r5, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0x8, 0x48003}}, 0x44) 1.409939332s ago: executing program 1 (id=218): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000c3000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3117a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd11e6ca750a6dc5dba2cd1d9fed1fb63bafef7d7bdd5bad81e40379623de9000000000054395605e46e00ded1acb26f8fa9c2702a8aac94fcbbdd2fbbba184bc337d5cb0c04a788fd76b402d5229125c274b171290fdfb32d00504a2a4f797a0103"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[], 0xffe7) 183.06792ms ago: executing program 1 (id=219): sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@gettaction={0x74, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x62dd}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x48010}, 0x4048840) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x273, 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x4c8541, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100, &(0x7f0000000140)={0x7d, 0x1000f7, 0x140000, {r4}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) fstatfs(r3, &(0x7f00000005c0)=""/140) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') write$binfmt_misc(r5, &(0x7f0000000540)="f64b", 0x2) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4c015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 14.017667ms ago: executing program 4 (id=220): inotify_init1(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 0s ago: executing program 1 (id=221): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x0, 0x1, 0x8, 0x0, 0x2, 0x7, 0x6}}], 0x48}, 0x24004013) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.198' (ED25519) to the list of known hosts. [ 56.113800][ T4172] cgroup: Unknown subsys name 'net' [ 56.241098][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.482829][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.960135][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 58.978748][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 58.994710][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 59.022948][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.085136][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 59.163567][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.171576][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.180002][ T4196] device bridge_slave_0 entered promiscuous mode [ 59.192138][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.199386][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.207724][ T4193] device bridge_slave_0 entered promiscuous mode [ 59.221608][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.228892][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.237289][ T4193] device bridge_slave_1 entered promiscuous mode [ 59.250864][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.258456][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.266363][ T4196] device bridge_slave_1 entered promiscuous mode [ 59.279983][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.287191][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.295658][ T4200] device bridge_slave_0 entered promiscuous mode [ 59.331251][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.338654][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.347508][ T4200] device bridge_slave_1 entered promiscuous mode [ 59.370265][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.377577][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.385740][ T4186] device bridge_slave_0 entered promiscuous mode [ 59.393405][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.400772][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.409286][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.422226][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.429797][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.437978][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.447448][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.459535][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.470646][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.480116][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.487537][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.495991][ T4186] device bridge_slave_1 entered promiscuous mode [ 59.527012][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.544209][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.555912][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.566972][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.598658][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.609806][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.626341][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.638467][ T4193] team0: Port device team_slave_0 added [ 59.652211][ T4193] team0: Port device team_slave_1 added [ 59.677024][ T4186] team0: Port device team_slave_0 added [ 59.685806][ T4200] team0: Port device team_slave_0 added [ 59.693985][ T4196] team0: Port device team_slave_0 added [ 59.712045][ T4186] team0: Port device team_slave_1 added [ 59.719344][ T4200] team0: Port device team_slave_1 added [ 59.731637][ T4196] team0: Port device team_slave_1 added [ 59.750863][ T4185] team0: Port device team_slave_0 added [ 59.764781][ T4185] team0: Port device team_slave_1 added [ 59.781995][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.789317][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.816433][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.829136][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.836553][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.863145][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.884953][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.892949][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.919641][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.931319][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.938497][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.965136][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.977717][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.984690][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.011689][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.023766][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.031205][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.058885][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.083237][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.091078][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.122257][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.134495][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.141934][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.169156][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.190627][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.197664][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.224259][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.261090][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.268565][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.295394][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.314621][ T4196] device hsr_slave_0 entered promiscuous mode [ 60.321575][ T4196] device hsr_slave_1 entered promiscuous mode [ 60.353062][ T4186] device hsr_slave_0 entered promiscuous mode [ 60.360459][ T4186] device hsr_slave_1 entered promiscuous mode [ 60.367613][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.375832][ T4186] Cannot create hsr debugfs directory [ 60.395067][ T4200] device hsr_slave_0 entered promiscuous mode [ 60.401963][ T4200] device hsr_slave_1 entered promiscuous mode [ 60.408647][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.417589][ T4200] Cannot create hsr debugfs directory [ 60.432687][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.442170][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.448930][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.460030][ T4185] Cannot create hsr debugfs directory [ 60.468870][ T4193] device hsr_slave_0 entered promiscuous mode [ 60.475954][ T4193] device hsr_slave_1 entered promiscuous mode [ 60.482893][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.490992][ T4193] Cannot create hsr debugfs directory [ 60.676456][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 60.683429][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 60.685949][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 60.701719][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 60.708834][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 60.815341][ T4196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.831143][ T4196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.841251][ T4196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.853237][ T4196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.882845][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.893726][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.923871][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.935713][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.954031][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.964118][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.988732][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.000940][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.032895][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.042369][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.053081][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.095900][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.141757][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.151239][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.170120][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.192033][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.248453][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.269311][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.301605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.312253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.325928][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.343418][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.354861][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.364279][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.375020][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.387072][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.412176][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.423301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.432278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.441667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.451813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.461113][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.468766][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.477858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.487496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.496430][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.503792][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.511843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.522432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.531317][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.538723][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.546686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.556816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.565480][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.572975][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.581318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.592732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.601189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.609756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.639046][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.651276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.661322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.672057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.683794][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.692070][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.700815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.710149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.720138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.729181][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.736634][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.745307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.754313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.763230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.771966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.781526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.792059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.801552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.811576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.821713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.829802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.838652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.871160][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.878316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.888110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.900526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.910964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.920231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.931598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.940832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.950054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.958800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.969284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.978646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.991300][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.007259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.016515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.025031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.033888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.045449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.054689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.087594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.097626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.109340][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.116907][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.127330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.136508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.147034][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.154298][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.162149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.171248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.181405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.189804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.198629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.208585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.217910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.227289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.235913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.244203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.253132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.265575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.274522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.283590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.299292][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.319448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.336516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.366586][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.373867][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.399721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.414035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.446744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.454943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.477643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.491857][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.499564][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.513682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.523012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.532083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.553989][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.572898][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.583093][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.599921][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.612107][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.626223][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.634288][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.643109][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.651237][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.673258][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.683898][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.699395][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.714059][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.726322][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.739024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.747909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.756779][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 62.761683][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.763208][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 62.770755][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 62.782624][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.789622][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 62.789654][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 62.814392][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.842561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.850627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.902087][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.912642][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.928696][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.944192][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.981989][ T4185] device veth0_vlan entered promiscuous mode [ 62.990585][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.005995][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.013526][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.035673][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.050951][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.070057][ T4185] device veth1_vlan entered promiscuous mode [ 63.083456][ T4196] device veth0_vlan entered promiscuous mode [ 63.092456][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.107440][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.120561][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.130101][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.139990][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.148967][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.161767][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.170136][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.189243][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.197584][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.215349][ T4185] device veth0_macvtap entered promiscuous mode [ 63.232268][ T4196] device veth1_vlan entered promiscuous mode [ 63.247478][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.256500][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.264949][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.273665][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.283191][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.293649][ T4185] device veth1_macvtap entered promiscuous mode [ 63.311830][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.343592][ T4196] device veth0_macvtap entered promiscuous mode [ 63.358186][ T4196] device veth1_macvtap entered promiscuous mode [ 63.365321][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.374292][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.384301][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.395867][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.404914][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.414215][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.432395][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.446529][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.454346][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.465419][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.474911][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.484601][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.494422][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.503552][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.512591][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.521615][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.553255][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.563309][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.572676][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.583386][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.614677][ T4193] device veth0_vlan entered promiscuous mode [ 63.630939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.640490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.650202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.661210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.677727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.687637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.696953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.705796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.716162][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.727540][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.739673][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.751990][ T4186] device veth0_vlan entered promiscuous mode [ 63.760236][ T4200] device veth0_vlan entered promiscuous mode [ 63.768417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.776835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.784527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.793113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.801302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.811814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.824238][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.834863][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.847657][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.858267][ T4196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.867509][ T4196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.877095][ T4196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.886026][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.903205][ T4193] device veth1_vlan entered promiscuous mode [ 63.910897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.919824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.929127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.950109][ T4186] device veth1_vlan entered promiscuous mode [ 63.982135][ T4200] device veth1_vlan entered promiscuous mode [ 64.051574][ T4186] device veth0_macvtap entered promiscuous mode [ 64.061001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.069086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.078662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.087891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.096301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.104310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.113369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.124489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.133496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.144644][ T4193] device veth0_macvtap entered promiscuous mode [ 64.166376][ T397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.177406][ T397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.194111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.204396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.216877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.227778][ T4193] device veth1_macvtap entered promiscuous mode [ 64.254200][ T4200] device veth0_macvtap entered promiscuous mode [ 64.265243][ T4186] device veth1_macvtap entered promiscuous mode [ 64.273854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.282900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.291707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.302082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.311245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.327324][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.335340][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.335462][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.362810][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.373442][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.384387][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.396559][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.416477][ T4200] device veth1_macvtap entered promiscuous mode [ 64.425332][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.434978][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.446916][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.471897][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.483395][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.494869][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.508068][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.521366][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.539170][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.555934][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.561735][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.563867][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.573996][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.574013][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.574022][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.574032][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.576218][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.634567][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.643822][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.654130][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.662826][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.673625][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.695844][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.707520][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.719196][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.730763][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.741035][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.752106][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.762942][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.773728][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.785960][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.794776][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.804679][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.814440][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.823815][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.836419][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 64.837860][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 64.842802][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 64.857172][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.868027][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.868460][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 64.878205][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.878224][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.889717][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 64.896948][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.922466][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.934352][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.950472][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.962040][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.975279][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.987371][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.008951][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.020880][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.031412][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.042332][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.053505][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.064996][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.075472][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.086889][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.098643][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.111453][ T4265] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.159495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.176182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.187823][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.199836][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.210270][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.221570][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.245829][ T397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.254372][ T397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.268755][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.281399][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.296512][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.317630][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.350745][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.481433][ T397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.497461][ T397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.697177][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.834719][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.900806][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.093648][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.104062][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.178601][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.345429][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.525197][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.598727][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.677359][ T4273] loop1: detected capacity change from 0 to 32768 [ 66.916140][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 67.087492][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 67.093874][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 67.093903][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.278704][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.421056][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.629027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.823128][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.864177][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.026991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.027673][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 68.042301][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 69.224102][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 69.233277][ T4300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 69.248901][ T4300] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.258097][ T4300] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.266920][ T4300] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.276077][ T4300] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.291950][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 69.301649][ T4300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 69.355724][ T4283] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.465598][ T4268] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.655671][ T4268] usb 5-1: Using ep0 maxpacket: 16 [ 70.688237][ T4313] FAULT_INJECTION: forcing a failure. [ 70.688237][ T4313] name failslab, interval 1, probability 0, space 0, times 1 [ 70.702055][ T4313] CPU: 0 PID: 4313 Comm: syz.3.10 Not tainted syzkaller #0 [ 70.709286][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.720340][ T4313] Call Trace: [ 70.724341][ T4313] [ 70.727294][ T4313] dump_stack_lvl+0x188/0x250 [ 70.732273][ T4313] ? show_regs_print_info+0x20/0x20 [ 70.737899][ T4313] ? load_image+0x410/0x410 [ 70.742613][ T4313] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 70.748873][ T4313] should_fail+0x383/0x4b0 [ 70.753782][ T4313] should_failslab+0x5/0x20 [ 70.758573][ T4313] slab_pre_alloc_hook+0x51/0xc0 [ 70.763632][ T4313] __kmalloc+0x6b/0x340 [ 70.767808][ T4313] ? hash_ipmark4_add+0x15cf/0x20f0 [ 70.773025][ T4313] hash_ipmark4_add+0x15cf/0x20f0 [ 70.778738][ T4313] hash_ipmark4_uadt+0x77c/0x9d0 [ 70.783849][ T4313] ? hash_ipmark4_uadt+0x9d0/0x9d0 [ 70.788993][ T4313] ? hash_ipmark4_kadt+0x4c0/0x4c0 [ 70.794206][ T4313] call_ad+0x182/0x9a0 [ 70.798582][ T4313] ? __nla_validate+0x50/0x50 [ 70.803410][ T4313] ? ip_set_ad+0x9c0/0x9c0 [ 70.807868][ T4313] ? __nla_parse+0x3c/0x50 [ 70.812588][ T4313] ip_set_ad+0x816/0x9c0 [ 70.817055][ T4313] ? ip_set_dump_done+0x2f0/0x2f0 [ 70.823390][ T4313] nfnetlink_rcv_msg+0xbf7/0x1180 [ 70.829117][ T4313] ? arch_stack_walk+0xf2/0x140 [ 70.834473][ T4313] ? nfnetlink_bind+0x280/0x280 [ 70.839818][ T4313] netlink_rcv_skb+0x1e9/0x430 [ 70.844738][ T4313] ? nfnetlink_bind+0x280/0x280 [ 70.849766][ T4313] ? netlink_ack+0xb10/0xb10 [ 70.854770][ T4313] ? bpf_lsm_capable+0x5/0x10 [ 70.859596][ T4313] ? security_capable+0x85/0xb0 [ 70.864516][ T4313] nfnetlink_rcv+0x2b4/0x2450 [ 70.869771][ T4313] ? __local_bh_enable_ip+0x136/0x1c0 [ 70.875938][ T4313] ? lockdep_hardirqs_on+0x94/0x140 [ 70.881849][ T4313] ? __local_bh_enable_ip+0x136/0x1c0 [ 70.887821][ T4313] ? _local_bh_enable+0xa0/0xa0 [ 70.893409][ T4313] ? __dev_queue_xmit+0x1b64/0x2e50 [ 70.898895][ T4313] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 70.904989][ T4313] ? dev_queue_xmit+0x20/0x20 [ 70.910112][ T4313] ? memcpy+0x3c/0x60 [ 70.914209][ T4313] ? __copy_skb_header+0x3ba/0x4f0 [ 70.919335][ T4313] ? skb_clone+0x1f1/0x350 [ 70.924090][ T4313] ? rcu_lock_release+0x5/0x20 [ 70.929299][ T4313] ? __lock_acquire+0x7b50/0x7b50 [ 70.935435][ T4313] netlink_unicast+0x78f/0x940 [ 70.940472][ T4313] netlink_sendmsg+0x8ba/0xbe0 [ 70.945863][ T4313] ? netlink_getsockopt+0x570/0x570 [ 70.951356][ T4313] ? aa_sock_msg_perm+0x94/0x150 [ 70.956698][ T4313] ? apparmor_socket_sendmsg+0x88/0x230 [ 70.962285][ T4313] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 70.968152][ T4313] ? security_socket_sendmsg+0x7c/0xa0 [ 70.974419][ T4313] ? netlink_getsockopt+0x570/0x570 [ 70.980103][ T4313] ____sys_sendmsg+0x5be/0x8f0 [ 70.985320][ T4313] ? __sys_sendmsg_sock+0x30/0x30 [ 70.990791][ T4313] ? import_iovec+0x6f/0xa0 [ 70.995577][ T4313] ___sys_sendmsg+0x236/0x2e0 [ 71.000709][ T4313] ? __sys_sendmsg+0x290/0x290 [ 71.005669][ T4313] __se_sys_sendmsg+0x1b7/0x2a0 [ 71.010724][ T4313] ? __x64_sys_sendmsg+0x80/0x80 [ 71.015788][ T4313] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 71.022228][ T4313] ? lockdep_hardirqs_on+0x94/0x140 [ 71.027726][ T4313] do_syscall_64+0x4c/0xa0 [ 71.032248][ T4313] ? clear_bhb_loop+0x30/0x80 [ 71.037681][ T4313] ? clear_bhb_loop+0x30/0x80 [ 71.042404][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.048723][ T4313] RIP: 0033:0x7f23baab4159 [ 71.053723][ T4313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.074997][ T4313] RSP: 002b:00007f23b8d0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.083746][ T4313] RAX: ffffffffffffffda RBX: 00007f23bad3bfa0 RCX: 00007f23baab4159 [ 71.092015][ T4313] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000007 [ 71.100074][ T4313] RBP: 00007f23bab4b06b R08: 0000000000000000 R09: 0000000000000000 [ 71.108344][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.116339][ T4313] R13: 00007f23bad3c038 R14: 00007f23bad3bfa0 R15: 00007fff6132b268 [ 71.124538][ T4313] [ 71.191854][ T4317] FAULT_INJECTION: forcing a failure. [ 71.191854][ T4317] name fail_futex, interval 1, probability 0, space 0, times 1 [ 71.210962][ T4268] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.213082][ T4317] CPU: 1 PID: 4317 Comm: syz.2.11 Not tainted syzkaller #0 [ 71.228712][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.238783][ T4317] Call Trace: [ 71.242073][ T4317] [ 71.245303][ T4317] dump_stack_lvl+0x188/0x250 [ 71.250015][ T4317] ? show_regs_print_info+0x20/0x20 [ 71.255371][ T4317] ? load_image+0x410/0x410 [ 71.259902][ T4317] ? skb_release_head_state+0x1e7/0x240 [ 71.265493][ T4317] should_fail+0x383/0x4b0 [ 71.269949][ T4317] get_futex_key+0x1a1/0x12d0 [ 71.274750][ T4317] ? put_pid+0xda/0x120 [ 71.279299][ T4317] ? netlink_sendmsg+0x8f5/0xbe0 [ 71.284617][ T4317] ? futex_wait_restart+0x250/0x250 [ 71.290332][ T4317] futex_wait_setup+0x4b/0x520 [ 71.295222][ T4317] ? apparmor_socket_sendmsg+0x88/0x230 [ 71.301615][ T4317] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 71.307164][ T4317] ? security_socket_sendmsg+0x7c/0xa0 [ 71.312844][ T4317] ? netlink_getsockopt+0x570/0x570 [ 71.318449][ T4317] futex_wait+0x22f/0x680 [ 71.322921][ T4317] ? do_futex+0x12b0/0x12b0 [ 71.327568][ T4317] ? verify_lock_unused+0x140/0x140 [ 71.332913][ T4317] ? verify_lock_unused+0x140/0x140 [ 71.338506][ T4317] do_futex+0xdc2/0x12b0 [ 71.343148][ T4317] ? futex_exit_release+0x1c0/0x1c0 [ 71.348498][ T4317] ? __context_tracking_exit+0x4c/0x80 [ 71.354068][ T4317] __se_sys_futex+0x389/0x420 [ 71.359098][ T4317] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 71.365185][ T4317] ? __x64_sys_futex+0xf0/0xf0 [ 71.369971][ T4317] ? __x64_sys_futex+0x1d/0xf0 [ 71.374919][ T4317] do_syscall_64+0x4c/0xa0 [ 71.379509][ T4317] ? clear_bhb_loop+0x30/0x80 [ 71.384193][ T4317] ? clear_bhb_loop+0x30/0x80 [ 71.388896][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.394898][ T4317] RIP: 0033:0x7faaddf6a159 [ 71.399422][ T4317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.419869][ T4317] RSP: 002b:00007faadc1c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.428626][ T4317] RAX: ffffffffffffffda RBX: 00007faade1f1fa8 RCX: 00007faaddf6a159 [ 71.436653][ T4317] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faade1f1fa8 [ 71.444883][ T4317] RBP: 00007faade1f1fa0 R08: 0000000000000000 R09: 0000000000000000 [ 71.453210][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.461365][ T4317] R13: 00007faade1f2038 R14: 00007ffc00e73690 R15: 00007ffc00e73778 [ 71.469437][ T4317] [ 71.479989][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.487951][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.494251][ T4302] ODEBUG: Out of memory. ODEBUG disabled [ 71.545861][ T4268] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 71.565861][ T4268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.594070][ T4268] usb 5-1: Product: syz [ 71.603473][ T4323] kAFS: No cell specified [ 71.607985][ T4268] usb 5-1: Manufacturer: syz [ 71.613693][ T4268] usb 5-1: SerialNumber: syz [ 71.642463][ T4268] usb 5-1: config 0 descriptor?? [ 71.692929][ T4268] sr9700: probe of 5-1:0.0 failed with error -22 [ 72.040214][ T4332] kAFS: No cell specified [ 72.142939][ T4334] loop1: detected capacity change from 0 to 2048 [ 72.256507][ T4334] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.359714][ T4229] FS-Cache: Duplicate cookie detected [ 72.365635][ T4229] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 72.373108][ T4229] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888024a8d000 [ 72.382537][ T4229] FS-Cache: O-key=[4] '73797a30' [ 72.387722][ T4229] FS-Cache: N-cookie c=00000008 [p=00000006 fl=2 nc=0 na=1] [ 72.395034][ T4229] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff8880242b3000 [ 72.403340][ T4229] FS-Cache: N-key=[4] '73797a30' [ 72.438192][ T4338] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.603237][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 72.641991][ T4341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19'. [ 72.660503][ T4341] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.670091][ T4341] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.679137][ T4341] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.688129][ T4341] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.715641][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 72.724901][ T4341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19'. [ 73.142029][ T4276] usb 5-1: USB disconnect, device number 2 [ 74.453887][ T4356] FAULT_INJECTION: forcing a failure. [ 74.453887][ T4356] name failslab, interval 1, probability 0, space 0, times 0 [ 74.578592][ T4356] CPU: 0 PID: 4356 Comm: syz.4.22 Not tainted syzkaller #0 [ 74.586292][ T4356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.596863][ T4356] Call Trace: [ 74.600308][ T4356] [ 74.603336][ T4356] dump_stack_lvl+0x188/0x250 [ 74.608211][ T4356] ? show_regs_print_info+0x20/0x20 [ 74.613430][ T4356] ? load_image+0x410/0x410 [ 74.617946][ T4356] ? __might_sleep+0xf0/0xf0 [ 74.622803][ T4356] ? __lock_acquire+0x7b50/0x7b50 [ 74.627883][ T4356] ? memset+0x1e/0x40 [ 74.632162][ T4356] should_fail+0x383/0x4b0 [ 74.636772][ T4356] should_failslab+0x5/0x20 [ 74.641393][ T4356] slab_pre_alloc_hook+0x51/0xc0 [ 74.646351][ T4356] ? security_inode_alloc+0x30/0x110 [ 74.651651][ T4356] kmem_cache_alloc+0x3d/0x280 [ 74.656615][ T4356] security_inode_alloc+0x30/0x110 [ 74.662092][ T4356] inode_init_always+0x8e5/0xc90 [ 74.667048][ T4356] new_inode_pseudo+0x8e/0x210 [ 74.672088][ T4356] new_inode+0x25/0x1d0 [ 74.676342][ T4356] ? resv_map_alloc+0x1a6/0x2a0 [ 74.681304][ T4356] hugetlbfs_get_inode+0x78/0x510 [ 74.686359][ T4356] hugetlb_file_setup+0x249/0x6f0 [ 74.691709][ T4356] ? __lock_acquire+0x7b50/0x7b50 [ 74.696839][ T4356] ksys_mmap_pgoff+0x229/0x790 [ 74.701993][ T4356] ? mmap_region+0x1730/0x1730 [ 74.706867][ T4356] ? lockdep_hardirqs_on+0x94/0x140 [ 74.712191][ T4356] do_syscall_64+0x4c/0xa0 [ 74.716711][ T4356] ? clear_bhb_loop+0x30/0x80 [ 74.721392][ T4356] ? clear_bhb_loop+0x30/0x80 [ 74.726079][ T4356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.732136][ T4356] RIP: 0033:0x7f8aa99b7159 [ 74.736563][ T4356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.756553][ T4356] RSP: 002b:00007f8aa7c0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 74.765347][ T4356] RAX: ffffffffffffffda RBX: 00007f8aa9c3efa0 RCX: 00007f8aa99b7159 [ 74.773333][ T4356] RDX: 0000000003000001 RSI: 000000000095c000 RDI: 0000200000000000 [ 74.781755][ T4356] RBP: 00007f8aa9a4e06b R08: ffffffffffffffff R09: 0000000000000000 [ 74.789916][ T4356] R10: 8c4b815a5465c2b1 R11: 0000000000000246 R12: 0000000000000000 [ 74.798034][ T4356] R13: 00007f8aa9c3f038 R14: 00007f8aa9c3efa0 R15: 00007ffc14523be8 [ 74.806035][ T4356] [ 75.955019][ T4380] loop1: detected capacity change from 0 to 2048 [ 76.016602][ T4380] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.057949][ T4381] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.189554][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 76.198790][ T4385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30'. [ 76.245984][ T4385] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.254998][ T4385] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.263847][ T4385] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.273019][ T4385] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.296100][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 76.316526][ T4385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30'. [ 76.336786][ T4302] Set syz0 is full, maxelem 65536 reached [ 76.575597][ T4261] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.434785][ T4399] kAFS: No cell specified [ 77.586606][ T4261] usb 4-1: Using ep0 maxpacket: 16 [ 77.651312][ T4405] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 77.670372][ T4405] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 77.690669][ T4405] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 77.705776][ T4261] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.885793][ T4261] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 77.915108][ T4403] loop1: detected capacity change from 0 to 32768 [ 77.926906][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.935482][ T4261] usb 4-1: Product: syz [ 77.943299][ T4261] usb 4-1: Manufacturer: syz [ 77.950550][ T4261] usb 4-1: SerialNumber: syz [ 77.960276][ T4261] usb 4-1: config 0 descriptor?? [ 77.967433][ T4228] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.986352][ T4403] ======================================================= [ 77.986352][ T4403] WARNING: The mand mount option has been deprecated and [ 77.986352][ T4403] and is ignored by this kernel. Remove the mand [ 77.986352][ T4403] option from the mount to silence this warning. [ 77.986352][ T4403] ======================================================= [ 78.037758][ T4261] sr9700: probe of 4-1:0.0 failed with error -22 [ 78.096489][ T4403] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 78.356021][ T4228] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.379530][ T4320] Set syz0 is full, maxelem 65536 reached [ 78.385995][ T4228] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.392893][ T4228] usb 1-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 78.413279][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.436442][ T4228] usb 1-1: config 0 descriptor?? [ 78.452288][ T4403] syz.1.39 (4403) used greatest stack depth: 18208 bytes left [ 78.567039][ T4196] ocfs2: Unmounting device (7,1) on (node local) [ 78.945447][ T4261] usb 4-1: USB disconnect, device number 2 [ 78.952726][ T4417] loop1: detected capacity change from 0 to 2048 [ 79.015199][ T4283] FS-Cache: Duplicate cookie detected [ 79.021175][ T4283] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 79.029168][ T4283] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888024a8d000 [ 79.037370][ T4283] FS-Cache: O-key=[4] '73797a30' [ 79.042373][ T4283] FS-Cache: N-cookie c=00000009 [p=00000006 fl=2 nc=0 na=1] [ 79.050048][ T4283] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff88807cc2d800 [ 79.058562][ T4417] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.068282][ T4283] FS-Cache: N-key=[4] '73797a30' [ 79.090015][ T4228] usbhid 1-1:0.0: can't add hid device: -71 [ 79.122960][ T4228] usbhid: probe of 1-1:0.0 failed with error -71 [ 79.134090][ T4421] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.194115][ T4228] usb 1-1: USB disconnect, device number 2 [ 79.293195][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 79.315398][ T4423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.43'. [ 79.327014][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 79.339872][ T4423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.43'. [ 79.653060][ T4437] kAFS: No cell specified [ 79.779373][ T4442] kAFS: No cell specified [ 80.414940][ T4276] FS-Cache: Duplicate cookie detected [ 80.420622][ T4276] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 80.428246][ T4276] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888024a8d000 [ 80.436822][ T4276] FS-Cache: O-key=[4] '73797a30' [ 80.441987][ T4276] FS-Cache: N-cookie c=0000000a [p=00000006 fl=2 nc=0 na=1] [ 80.449458][ T4276] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888024082800 [ 80.457979][ T4276] FS-Cache: N-key=[4] '73797a30' [ 80.482680][ T4455] kAFS: No cell specified [ 80.640719][ T4457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 80.664182][ T4457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.55'. [ 80.701458][ T4463] loop0: detected capacity change from 0 to 2048 [ 80.833117][ T4463] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.869119][ T4466] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.058151][ T4459] loop2: detected capacity change from 0 to 32768 [ 81.150822][ T4459] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 81.292851][ T4361] Set syz0 is full, maxelem 65536 reached [ 81.353592][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 82.091654][ T4487] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 82.102859][ T4487] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 82.118408][ T4487] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 82.259676][ T4482] loop4: detected capacity change from 0 to 2048 [ 82.375079][ T4482] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.425939][ T4228] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 82.602657][ T4494] Zero length message leads to an empty skb [ 82.740331][ T4494] input: syz0 as /devices/virtual/input/input8 [ 82.786176][ T4228] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.817907][ T4228] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.832194][ T4228] usb 3-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 82.852400][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.875349][ T4228] usb 3-1: config 0 descriptor?? [ 83.019211][ T4499] __nla_validate_parse: 2 callbacks suppressed [ 83.019227][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 83.035724][ T4499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 83.084099][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 83.107701][ T4503] loop0: detected capacity change from 0 to 2048 [ 83.114871][ T4499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 83.157082][ T4503] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.224212][ T4505] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.245132][ T4507] syz.4.70 uses obsolete (PF_INET,SOCK_PACKET) [ 83.378218][ T4510] netlink: 64 bytes leftover after parsing attributes in process `syz.4.70'. [ 83.378349][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.395397][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.422697][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.447573][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.565707][ T4228] usbhid 3-1:0.0: can't add hid device: -71 [ 83.571891][ T4228] usbhid: probe of 3-1:0.0 failed with error -71 [ 84.074580][ T4507] sctp: failed to load transform for md5: -2 [ 86.840730][ T1110] cfg80211: failed to load regulatory.db [ 86.880911][ T4228] usb 3-1: USB disconnect, device number 2 [ 87.877778][ T4426] Set syz0 is full, maxelem 65536 reached [ 88.328321][ T4536] loop0: detected capacity change from 0 to 32768 [ 88.686474][ T4228] FS-Cache: Duplicate cookie detected [ 88.692123][ T4228] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 88.700018][ T4228] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888024a8d000 [ 88.708924][ T4228] FS-Cache: O-key=[4] '73797a30' [ 88.714170][ T4228] FS-Cache: N-cookie c=0000000b [p=00000006 fl=2 nc=0 na=1] [ 88.721538][ T4228] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888028ea7800 [ 88.729786][ T4228] FS-Cache: N-key=[4] '73797a30' [ 88.794297][ T4547] kAFS: No cell specified [ 89.360485][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 89.405686][ T4228] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.440759][ T4555] loop0: detected capacity change from 0 to 2048 [ 89.449655][ T4549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 89.490510][ T4558] input: syz0 as /devices/virtual/input/input9 [ 89.503430][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 89.522988][ T4549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 89.523720][ T4552] loop4: detected capacity change from 0 to 32768 [ 89.553654][ T4552] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 0 transid 8 /dev/loop4 scanned by syz.4.84 (4552) [ 89.610189][ T4552] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 89.621290][ T4555] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.637581][ T4552] BTRFS error (device loop4): superblock checksum mismatch [ 89.668663][ T4552] BTRFS error (device loop4): open_ctree failed: -22 [ 89.679596][ T4560] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.718724][ T4175] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 0 transid 8 /dev/loop4 scanned by udevd (4175) [ 89.806824][ T4569] netlink: 64 bytes leftover after parsing attributes in process `syz.3.87'. [ 89.825885][ T4228] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.861035][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.869211][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.301832][ T4228] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 91.423799][ T4228] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 91.490629][ T4562] sctp: failed to load transform for md5: -2 [ 91.549607][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.593108][ T4228] usb 3-1: config 0 descriptor?? [ 91.617551][ T4228] usb 3-1: can't set config #0, error -71 [ 91.665054][ T4228] usb 3-1: USB disconnect, device number 3 [ 91.736187][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.743952][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.163920][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 93.239193][ T4599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'. [ 93.260024][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 93.269952][ T4599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'. [ 93.443151][ T4606] loop2: detected capacity change from 0 to 2048 [ 93.484977][ T4594] loop3: detected capacity change from 0 to 32768 [ 93.488550][ T4587] Set syz0 is full, maxelem 65536 reached [ 93.537282][ T4606] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 93.583374][ T4614] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.935669][ T4229] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 94.242887][ T4626] Set syz0 is full, maxelem 65536 reached [ 94.250827][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 94.335775][ T4229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.356345][ T4229] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 94.372439][ T4229] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 94.393824][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.424665][ T4229] usb 5-1: config 0 descriptor?? [ 94.509268][ T4229] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 94.573686][ T4229] dvb-usb: bulk message failed: -22 (3/0) [ 95.400510][ T4633] loop2: detected capacity change from 0 to 32768 [ 95.421498][ T4229] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 95.450020][ T4229] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 95.452468][ T4649] loop0: detected capacity change from 0 to 2048 [ 95.459796][ T4229] usb 5-1: media controller created [ 95.490205][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.501651][ T4649] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.524531][ T4633] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 95.563066][ T4229] dvb-usb: bulk message failed: -22 (6/0) [ 95.575643][ T4633] BTRFS error (device loop2): superblock checksum mismatch [ 95.586156][ T4229] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 95.604801][ T4633] BTRFS error (device loop2): open_ctree failed: -22 [ 95.627561][ T4177] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 0 transid 8 /dev/loop2 scanned by udevd (4177) [ 95.652787][ T4229] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 95.681253][ T4653] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.692417][ T4229] dvb-usb: schedule remote query interval to 150 msecs. [ 95.703803][ T4229] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.806420][ T4229] usb 5-1: USB disconnect, device number 3 [ 97.004754][ T4670] loop0: detected capacity change from 0 to 32768 [ 97.294662][ T4229] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 97.901832][ T4676] __nla_validate_parse: 3 callbacks suppressed [ 97.901847][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 97.995019][ T4654] Set syz0 is full, maxelem 65536 reached [ 98.014382][ T4676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.120'. [ 98.025463][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 98.035829][ T4676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.120'. [ 98.173332][ T4688] loop4: detected capacity change from 0 to 2048 [ 98.229895][ T4688] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 99.266178][ T4695] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.343404][ T4697] loop0: detected capacity change from 0 to 21 [ 99.534810][ T4704] loop0: detected capacity change from 0 to 8 [ 99.572288][ T4681] loop2: detected capacity change from 0 to 32768 [ 99.650578][ T4681] JBD2: Ignoring recovery information on journal [ 99.659372][ T4686] Set syz0 is full, maxelem 65536 reached [ 99.759799][ T4710] loop0: detected capacity change from 0 to 2048 [ 99.779096][ T4681] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 99.797524][ T4710] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.874071][ T26] audit: type=1800 audit(1790619110.016:2): pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.133" name="(" dev="loop0" ino=1367 res=0 errno=0 [ 99.995635][ T26] audit: type=1800 audit(1790619110.056:3): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.123" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 100.073233][ T4724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.136'. [ 100.095608][ T26] audit: type=1800 audit(1790619110.056:4): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.123" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 100.175425][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 100.193455][ T4724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.136'. [ 100.504070][ T4724] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.513328][ T4724] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.522753][ T4724] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.531669][ T4724] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.738249][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 101.253276][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 101.368468][ T4724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.136'. [ 101.481234][ T4733] loop0: detected capacity change from 0 to 32768 [ 102.160931][ T4743] loop2: detected capacity change from 0 to 2048 [ 102.238926][ T4743] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 102.276140][ T4751] loop1: detected capacity change from 0 to 256 [ 102.288943][ T4750] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.292896][ T4741] loop4: detected capacity change from 0 to 4096 [ 102.370164][ T4751] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 102.390656][ T4751] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 102.434566][ T4751] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 102.471615][ T4741] ntfs: volume version 3.1. [ 102.480835][ T4751] UDF-fs: Scanning with blocksize 512 failed [ 102.501398][ T4751] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 102.603104][ T4751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.838547][ T4762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 102.920243][ T4762] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.929313][ T4762] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.938357][ T4762] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.947222][ T4762] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.010599][ T4767] loop1: detected capacity change from 0 to 4096 [ 103.414551][ T4762] __nla_validate_parse: 2 callbacks suppressed [ 103.414563][ T4762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 103.514892][ T4762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.149'. [ 104.914157][ T4784] loop4: detected capacity change from 0 to 32768 [ 105.508046][ T4793] FAULT_INJECTION: forcing a failure. [ 105.508046][ T4793] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 105.522367][ T4793] CPU: 1 PID: 4793 Comm: syz.0.158 Not tainted syzkaller #0 [ 105.529940][ T4793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.540786][ T4793] Call Trace: [ 105.544106][ T4793] [ 105.547067][ T4793] dump_stack_lvl+0x188/0x250 [ 105.551746][ T4793] ? show_regs_print_info+0x20/0x20 [ 105.557032][ T4793] ? load_image+0x410/0x410 [ 105.561710][ T4793] ? __lock_acquire+0x7b50/0x7b50 [ 105.567027][ T4793] should_fail+0x383/0x4b0 [ 105.571448][ T4793] prepare_alloc_pages+0x1e3/0x5b0 [ 105.576738][ T4793] __alloc_pages+0x11b/0x480 [ 105.581439][ T4793] ? zone_statistics+0x170/0x170 [ 105.586647][ T4793] ? up_write+0x1b6/0x410 [ 105.590972][ T4793] alloc_pages_vma+0x2bc/0x790 [ 105.595913][ T4793] handle_mm_fault+0x23be/0x4440 [ 105.600864][ T4793] ? get_page+0xe0/0xe0 [ 105.605111][ T4793] ? vmacache_find+0x4f0/0x590 [ 105.610133][ T4793] ? vmacache_update+0xa0/0x100 [ 105.615341][ T4793] ? find_vma+0x1df/0x230 [ 105.619889][ T4793] do_user_addr_fault+0x494/0xc90 [ 105.624979][ T4793] exc_page_fault+0x60/0x100 [ 105.629694][ T4793] ? clear_bhb_loop+0x30/0x80 [ 105.634828][ T4793] asm_exc_page_fault+0x22/0x30 [ 105.639856][ T4793] RIP: 0033:0x7fee233a11a3 [ 105.644452][ T4793] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 105.664572][ T4793] RSP: 002b:00007fee21741470 EFLAGS: 00010206 [ 105.670652][ T4793] RAX: 0000000000000000 RBX: 00007fee21741530 RCX: 00007fee19322000 [ 105.679078][ T4793] RDX: 00007fee217416d0 RSI: 0000000000000005 RDI: 00007fee217415d0 [ 105.687056][ T4793] RBP: 0000000000000000 R08: 000000000000000a R09: 00000000000003b6 [ 105.695214][ T4793] R10: 00000000000003c8 R11: 00007fee21741530 R12: 000000000000011e [ 105.703395][ T4793] R13: 00007fee235a1100 R14: 00000000000000eb R15: 00007fee217415d0 [ 105.711378][ T4793] [ 105.749128][ T4793] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 105.775866][ T4791] loop1: detected capacity change from 0 to 2048 [ 105.809281][ T4791] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.902675][ T4795] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.908051][ T4793] loop0: detected capacity change from 0 to 4096 [ 106.025588][ T4797] FAULT_INJECTION: forcing a failure. [ 106.025588][ T4797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.055623][ T4797] CPU: 1 PID: 4797 Comm: syz.1.160 Not tainted syzkaller #0 [ 106.063043][ T4797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.073114][ T4797] Call Trace: [ 106.076494][ T4797] [ 106.080040][ T4797] dump_stack_lvl+0x188/0x250 [ 106.084923][ T4797] ? show_regs_print_info+0x20/0x20 [ 106.090238][ T4797] ? load_image+0x410/0x410 [ 106.095206][ T4797] ? __lock_acquire+0x7b50/0x7b50 [ 106.100603][ T4797] should_fail+0x383/0x4b0 [ 106.105324][ T4797] prepare_alloc_pages+0x1e3/0x5b0 [ 106.110476][ T4797] __alloc_pages+0x11b/0x480 [ 106.115261][ T4797] ? zone_statistics+0x170/0x170 [ 106.120395][ T4797] ? up_write+0x1b6/0x410 [ 106.124739][ T4797] alloc_pages_vma+0x2bc/0x790 [ 106.129517][ T4797] handle_mm_fault+0x23be/0x4440 [ 106.134625][ T4797] ? get_page+0xe0/0xe0 [ 106.138806][ T4797] ? vmacache_find+0x4f0/0x590 [ 106.143836][ T4797] ? vmacache_update+0xa0/0x100 [ 106.148876][ T4797] ? find_vma+0x1df/0x230 [ 106.153217][ T4797] do_user_addr_fault+0x494/0xc90 [ 106.158351][ T4797] exc_page_fault+0x60/0x100 [ 106.162959][ T4797] ? clear_bhb_loop+0x30/0x80 [ 106.167660][ T4797] asm_exc_page_fault+0x22/0x30 [ 106.172617][ T4797] RIP: 0033:0x7f963b76a1a3 [ 106.177039][ T4797] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 106.197138][ T4797] RSP: 002b:00007f9639b0a470 EFLAGS: 00010202 [ 106.203485][ T4797] RAX: 0000000000000000 RBX: 00007f9639b0a530 RCX: 00007f96316eb000 [ 106.211472][ T4797] RDX: 00007f9639b0a6d0 RSI: 0000000000000076 RDI: 00007f9639b0a5d0 [ 106.219564][ T4797] RBP: 0000000000000000 R08: 0000000000000008 R09: 00000000000000a9 [ 106.227822][ T4797] R10: 00000000000000cc R11: 00007f9639b0a530 R12: 000000000000011e [ 106.236063][ T4797] R13: 00007f963b96a100 R14: 0000000000000068 R15: 00007f9639b0a5d0 [ 106.244064][ T4797] [ 106.289795][ T4793] ntfs: volume version 3.1. [ 106.586084][ T4797] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 106.631384][ T4797] loop1: detected capacity change from 0 to 8 [ 106.730654][ T4806] FAULT_INJECTION: forcing a failure. [ 106.730654][ T4806] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.744572][ T4806] CPU: 1 PID: 4806 Comm: syz.0.163 Not tainted syzkaller #0 [ 106.752043][ T4806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.762227][ T4806] Call Trace: [ 106.765713][ T4806] [ 106.768648][ T4806] dump_stack_lvl+0x188/0x250 [ 106.773845][ T4806] ? show_regs_print_info+0x20/0x20 [ 106.780192][ T4806] ? load_image+0x410/0x410 [ 106.784777][ T4806] ? __lock_acquire+0x7b50/0x7b50 [ 106.790212][ T4806] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 106.795944][ T4806] should_fail+0x383/0x4b0 [ 106.800448][ T4806] _copy_to_user+0x2e/0x130 [ 106.804951][ T4806] simple_read_from_buffer+0xe3/0x150 [ 106.810496][ T4806] proc_fail_nth_read+0x1a6/0x220 [ 106.815517][ T4806] ? proc_fault_inject_write+0x310/0x310 [ 106.822281][ T4806] ? fsnotify_perm+0x254/0x560 [ 106.827230][ T4806] ? proc_fault_inject_write+0x310/0x310 [ 106.833014][ T4806] vfs_read+0x2ff/0xd50 [ 106.837512][ T4806] ? __lock_acquire+0x7b50/0x7b50 [ 106.842727][ T4806] ? kernel_read+0x1e0/0x1e0 [ 106.847319][ T4806] ? mutex_lock_nested+0x17/0x20 [ 106.852519][ T4806] ? __fdget_pos+0x2bf/0x370 [ 106.857211][ T4806] ? ksys_read+0x70/0x260 [ 106.861537][ T4806] ksys_read+0x153/0x260 [ 106.865856][ T4806] ? vfs_write+0xd70/0xd70 [ 106.870348][ T4806] ? lockdep_hardirqs_on+0x94/0x140 [ 106.876145][ T4806] do_syscall_64+0x4c/0xa0 [ 106.880822][ T4806] ? clear_bhb_loop+0x30/0x80 [ 106.885681][ T4806] ? clear_bhb_loop+0x30/0x80 [ 106.890369][ T4806] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.896614][ T4806] RIP: 0033:0x7fee234aa98e [ 106.901196][ T4806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.921409][ T4806] RSP: 002b:00007fee216fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.929912][ T4806] RAX: ffffffffffffffda RBX: 00007fee217006c0 RCX: 00007fee234aa98e [ 106.937917][ T4806] RDX: 000000000000000f RSI: 00007fee217000a0 RDI: 0000000000000007 [ 106.946059][ T4806] RBP: 00007fee21700090 R08: 0000000000000000 R09: 0000000000000000 [ 106.954046][ T4806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.962223][ T4806] R13: 00007fee23772218 R14: 00007fee23772180 R15: 00007ffffc9fea28 [ 106.970414][ T4806] [ 107.302015][ T4808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 107.376855][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 107.405642][ T4808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.164'. [ 107.427948][ T4716] Set syz0 is full, maxelem 65536 reached [ 107.439283][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 107.459344][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.474350][ T4808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.164'. [ 107.725564][ T4228] usb 5-1: Using ep0 maxpacket: 16 [ 107.846081][ T4228] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 107.885721][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.912385][ T4228] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.936439][ T4826] loop0: detected capacity change from 0 to 2048 [ 107.943109][ T4228] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 107.953517][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.966631][ T4228] usb 5-1: config 0 descriptor?? [ 108.008100][ T4228] pxrc 5-1:0.0: Could not find endpoint [ 108.014483][ T4228] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 108.024134][ T4826] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.147332][ T4834] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.266199][ T4174] usb 5-1: USB disconnect, device number 4 [ 109.040178][ T4845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.177'. [ 109.054845][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 109.063931][ T4845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.177'. [ 109.063937][ T4843] loop1: detected capacity change from 0 to 512 [ 109.074099][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 109.089254][ T4845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.177'. [ 109.571480][ T4843] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.804081][ T4843] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.000449][ T4843] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.102157][ T4843] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.174: invalid indirect mapped block 32768 (level 2) [ 110.129161][ T4843] EXT4-fs (loop1): Remounting filesystem read-only [ 110.164517][ T4843] EXT4-fs (loop1): 1 orphan inode deleted [ 110.245596][ T4843] EXT4-fs (loop1): 1 truncate cleaned up [ 110.251553][ T4843] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,errors=remount-ro,noblock_validity,lazytime,jqfmt=vfsv0,nolazytime,dioread_nolock,journal_ioprio=0x0000000000000006,. Quota mode: writeback. [ 110.415736][ T4843] EXT4-fs error (device loop1): ext4_search_dir:1551: inode #12: block 7: comm syz.1.174: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 110.468340][ T4871] loop3: detected capacity change from 0 to 2048 [ 110.526052][ T4843] EXT4-fs (loop1): Remounting filesystem read-only [ 110.543758][ T4873] EXT4-fs error (device loop1): ext4_check_all_de:667: inode #12: block 7: comm syz.1.174: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 110.558958][ T4871] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.575027][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 110.597337][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.681602][ T4878] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.707145][ T4875] loop4: detected capacity change from 0 to 2048 [ 110.817117][ T23] usb 1-1: device descriptor read/64, error -71 [ 111.175771][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.222870][ T4875] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,block_validity,nobarrier,,errors=continue. Quota mode: writeback. [ 111.445718][ T23] usb 1-1: device descriptor read/64, error -71 [ 111.506664][ T4875] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.601756][ T23] usb usb1-port1: attempt power cycle [ 111.821146][ T4894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 111.836658][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 111.848030][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'. [ 111.859773][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 111.878636][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'. [ 111.954716][ T4890] loop1: detected capacity change from 0 to 8192 [ 112.050312][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.065060][ T4890] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 112.081917][ T4890] REISERFS (device loop1): using ordered data mode [ 112.089090][ T4890] reiserfs: using flush barriers [ 112.107366][ T4890] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.165861][ T23] usb 1-1: device descriptor read/8, error -71 [ 112.260798][ T4890] REISERFS (device loop1): checking transaction log (loop1) [ 112.278642][ T4174] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.310160][ T4890] REISERFS (device loop1): Using r5 hash to sort names [ 112.343899][ T4890] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 112.436182][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.510351][ T4903] net_ratelimit: 56 callbacks suppressed [ 112.510369][ T4903] Set syz0 is full, maxelem 65536 reached [ 112.556700][ T23] usb 1-1: device descriptor read/8, error -71 [ 112.646856][ T4174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.665322][ T4174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 112.679127][ T4174] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 112.691104][ T4174] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 112.714028][ T4174] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 112.724975][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.735402][ T23] usb usb1-port1: unable to enumerate USB device [ 112.762822][ T4916] loop1: detected capacity change from 0 to 2048 [ 112.788359][ T4174] usb 5-1: probing VID:PID(0424:012C) [ 112.804751][ T4174] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 112.806871][ T4916] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.827457][ T4174] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 112.834360][ T4174] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 112.849808][ T4174] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 112.860407][ T4919] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.027598][ T4901] udc-core: couldn't find an available UDC or it's busy [ 113.070703][ T4901] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 113.649460][ T4174] vub300: probe of 5-1:1.0 failed with error -22 [ 113.668749][ T4174] usb 5-1: USB disconnect, device number 5 [ 113.685512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 114.246743][ T4954] loop2: detected capacity change from 0 to 2048 [ 114.290778][ T4954] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.372782][ T4957] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.605174][ T4961] loop0: detected capacity change from 0 to 32768 [ 116.385799][ T4229] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.615682][ T4229] usb 3-1: device descriptor read/64, error -71 [ 116.905640][ T4229] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.155858][ T4229] usb 3-1: device descriptor read/64, error -71 [ 117.259906][ T4963] loop2: detected capacity change from 0 to 4096 [ 117.286212][ T4229] usb usb3-port1: attempt power cycle [ 117.697108][ T4975] __nla_validate_parse: 5 callbacks suppressed [ 117.697595][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 117.713156][ T4229] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.795596][ C1] net_ratelimit: 50 callbacks suppressed [ 117.806631][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 117.816118][ T4975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.219'. [ 117.825621][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 117.834730][ T4975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.219'. [ 117.861480][ T4229] usb 3-1: device descriptor read/8, error -71 [ 117.933688][ T4977] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.160361][ T23] general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN [ 118.172734][ T23] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 118.181321][ T23] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted syzkaller #0 [ 118.188784][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.199090][ T23] Workqueue: kafsd afs_process_async_call [ 118.204923][ T23] RIP: 0010:rxrpc_kernel_get_srtt+0x28/0x100 [ 118.211077][ T23] Code: 00 00 55 41 57 41 56 41 54 53 48 89 d3 49 89 f6 49 bc 00 00 00 00 00 fc ff df e8 03 a2 71 f8 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 a9 d5 b6 f8 4d 8b 36 4d 8d be 98 [ 118.212354][ C0] virtqueue callback for ffff8880231ce600 (ffffffff85491a80) [ 118.231105][ T23] RSP: 0018:ffffc90000ddfa10 EFLAGS: 00010206 [ 118.238946][ C0] No more buffers in queue [ 118.244980][ T23] RAX: 0000000000000003 RBX: ffffc90000ddfaa0 RCX: ffff888017998000 [ 118.244996][ T23] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888073851200 [ 118.245008][ T23] RBP: ffffc90000ddfb10 R08: ffff88805f86241f R09: 1ffff1100bf0c483 [ 118.245020][ T23] R10: dffffc0000000000 R11: ffffed100bf0c484 R12: dffffc0000000000 [ 118.245032][ T23] R13: ffff888073851200 R14: 0000000000000018 R15: ffff88807e45b0f0 [ 118.249594][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 118.257553][ T23] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 118.257570][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.257582][ T23] CR2: 000000110c2f9d42 CR3: 000000001ebba000 CR4: 00000000003526e0 [ 118.257597][ T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.257607][ T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.265616][ C0] No more buffers in queue [ 118.273711][ T23] Call Trace: [ 118.273723][ T23] [ 118.273731][ T23] afs_vlserver_probe_result+0x5fd/0xaa0 [ 118.273759][ T23] ? afs_extract_vlserver_list+0x1980/0x1980 [ 118.281892][ C0] tcp_in_window: START [ 118.289762][ T23] ? afs_deliver_vl_get_capabilities+0x232/0x300 [ 118.289785][ T23] ? afs_extract_vlserver_list+0x1980/0x1980 [ 118.289802][ T23] afs_deliver_to_call+0xc13/0x1100 [ 118.289820][ T23] ? afs_wait_for_call_to_complete+0xc10/0xc10 [ 118.295635][ C0] tcp_in_window: [ 118.304512][ T23] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 118.304543][ T23] ? __lock_acquire+0x7b50/0x7b50 [ 118.304561][ T23] ? read_lock_is_recursive+0x10/0x10 [ 118.304580][ T23] afs_process_async_call+0x7e/0xe0 [ 118.311368][ C0] seq=1404941300 ack=2644883664+(0) sack=2644883664+(0) win=21513 end=1404941300 [ 118.319354][ T23] process_one_work+0x867/0xff0 [ 118.319381][ T23] ? worker_detach_from_pool+0x240/0x240 [ 118.319398][ T23] ? lockdep_hardirqs_off+0x70/0x100 [ 118.327411][ C0] tcp_in_window: sender end=1404941300 maxend=1406150004 maxwin=2753664 scale=7 receiver end=2644883664 maxend=2647637328 maxwin=1208704 scale=7 [ 118.335531][ T23] ? _raw_spin_lock_irq+0xb7/0xf0 [ 118.335557][ T23] ? _raw_spin_lock_irqsave+0x100/0x100 [ 118.335572][ T23] ? wq_worker_running+0x97/0x170 [ 118.335587][ T23] worker_thread+0xad7/0x12a0 [ 118.335610][ T23] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 118.335626][ T23] kthread+0x42e/0x520 [ 118.335640][ T23] ? rcu_lock_release+0x20/0x20 [ 118.340062][ C0] tcp_in_window: [ 118.343294][ T23] ? kthread_blkcg+0xd0/0xd0 [ 118.343314][ T23] ret_from_fork+0x1f/0x30 [ 118.346355][ C0] seq=1404941300 ack=2644883664+(0) sack=2644883664+(0) win=21513 end=1404941300 [ 118.352575][ T23] [ 118.352596][ T23] Modules linked in: [ 118.353433][ T23] ---[ end trace 8cc0cc77fa47e2cf ]--- [ 118.358715][ C0] tcp_in_window: sender end=1404941300 maxend=1406150004 maxwin=2753664 scale=7 receiver end=2644883664 maxend=2647637328 maxwin=1208704 scale=7 [ 118.358743][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 118.358756][ C0] tcp_in_window: res=1 sender end=1404941300 maxend=1406150004 maxwin=2753664 receiver end=2644883664 maxend=2647637328 maxwin=1208704 [ 118.358779][ C0] tcp_conntracks: [ 118.358786][ C0] syn=0 ack=1 fin=0 rst=1 old=3 new=8 [ 118.425866][ T4171] tcp_in_window: START [ 118.427551][ T23] RIP: 0010:rxrpc_kernel_get_srtt+0x28/0x100 [ 118.433301][ T4171] tcp_in_window: [ 118.438551][ T23] Code: 00 00 55 41 57 41 56 41 54 53 48 89 d3 49 89 f6 49 bc 00 00 00 00 00 fc ff df e8 03 a2 71 f8 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 a9 d5 b6 f8 4d 8b 36 4d 8d be 98 [ 118.438569][ T23] RSP: 0018:ffffc90000ddfa10 EFLAGS: 00010206 [ 118.453564][ T4171] seq=2360071255 ack=3638962612+(0) sack=3638962612+(0) win=501 end=2360071387 [ 118.458615][ T23] [ 118.458622][ T23] RAX: 0000000000000003 RBX: ffffc90000ddfaa0 RCX: ffff888017998000 [ 118.458636][ T23] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888073851200 [ 118.458646][ T23] RBP: ffffc90000ddfb10 R08: ffff88805f86241f R09: 1ffff1100bf0c483 [ 118.464286][ T4171] tcp_in_window: sender end=2360071255 maxend=2360135383 maxwin=64768 scale=7 receiver end=3638962612 maxend=3639026740 maxwin=65408 scale=7 [ 118.469272][ T23] R10: dffffc0000000000 R11: ffffed100bf0c484 R12: dffffc0000000000 [ 118.469288][ T23] R13: ffff888073851200 R14: 0000000000000018 R15: ffff88807e45b0f0 [ 118.469300][ T23] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 118.473987][ T4171] tcp_in_window: [ 118.479874][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.479891][ T23] CR2: 000000110c2f9d42 CR3: 000000001ebba000 CR4: 00000000003526e0 [ 118.483969][ T4171] seq=2360071255 ack=3638962612+(0) sack=3638962612+(0) win=501 end=2360071387 [ 118.488791][ T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.488805][ T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.492632][ T4171] tcp_in_window: sender end=2360071255 maxend=2360135383 maxwin=64768 scale=7 receiver end=3638962612 maxend=3639026740 maxwin=65408 scale=7 [ 118.497207][ T23] Kernel panic - not syncing: Fatal exception [ 118.502141][ T23] Kernel Offset: disabled [ 118.754714][ T23] Rebooting in 86400 seconds..