last executing test programs: 1m18.757413678s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x50007a2) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0xbed, 0x0) 1m14.816139869s ago: executing program 3 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xfe, r2}, [@IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x30}}, 0x0) 1m1.950886978s ago: executing program 3 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xfe, r2}, [@IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x30}}, 0x0) 47.985813215s ago: executing program 3 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xfe, r2}, [@IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x30}}, 0x0) 39.144070894s ago: executing program 1 (id=184): close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x100c400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 37.897086351s ago: executing program 1 (id=185): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x5bf, &(0x7f0000000300)={0x0, 0x2da0, 0x8, 0x1, 0x25}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x22e6, 0x39, 0x2c, 0x0, 0x0) 37.755911731s ago: executing program 1 (id=187): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) read$snddsp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r4 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0xc08e) close(0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="050000000000000001"], 0x20) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={0x24, r1, 0x419, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) 36.869189669s ago: executing program 1 (id=197): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000240)={[{@datacow}, {@nodatasum}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1}}, {@ssd}, {}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=") renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x8000000) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)=0x28) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xdb, 0x9d, 0x1b, 0x8, 0x12d1, 0xfae2, 0x708b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4, 0x1a}}]}}]}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @unused=[0x0, 0x2, 0x9, 0xfff], @subvolid=0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000000)={0x50d000, 0x0, '\x00', 0x1, 0x0}) 34.122007692s ago: executing program 1 (id=203): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000001dc0)={0xa, 0x4e21, 0x1, @remote, 0x1ff}, 0x1c) 32.735899689s ago: executing program 1 (id=208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r1, 0x1, 0x20, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cb1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x44}}, 0x0) 32.477770818s ago: executing program 32 (id=208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r1, 0x1, 0x20, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cb1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x44}}, 0x0) 32.232046377s ago: executing program 3 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xfe, r2}, [@IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x30}}, 0x0) 11.708314829s ago: executing program 4 (id=286): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000030601010000000000000000f40000000900000000000000000000000500010007"], 0x28}}, 0x20010004) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, &(0x7f0000000140), &(0x7f0000000180)='GPL\x00', 0x8, 0xa7, &(0x7f0000000280)=""/167, 0x41000, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x10, 0x80000001, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4000080) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 10.887668557s ago: executing program 3 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xfe, r2}, [@IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x30}}, 0x0) 10.245293405s ago: executing program 4 (id=289): socket(0x10, 0x3, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 10.135854705s ago: executing program 4 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x40000) r3 = socket$inet6(0xa, 0x40000080806, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r3, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r6, 0x0, 0x4800) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) 9.777731824s ago: executing program 4 (id=292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{0x0}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) 7.511748428s ago: executing program 5 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4048048}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = fanotify_init(0x0, 0x0) r10 = dup(0xffffffffffffffff) fanotify_mark(r9, 0x1, 0x1029, r10, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_misc(r8, &(0x7f0000000b00), 0x91) splice(r7, 0x0, r6, 0x0, 0x4, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) pidfd_getfd(r12, 0xffffffffffffffff, 0x0) close(r4) 6.429000556s ago: executing program 5 (id=301): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000480)='./bus\x00', 0x300000a, &(0x7f0000000740)={[{@nossd}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@noflushoncommit}, {@compress_force}, {@acl}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@discard_async}, {@nodatacow}]}, 0x1, 0x55a3, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000280)={0x84, @loopback, 0x0, 0x0, 'nq\x00'}, 0x2c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0xfc) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 6.362472196s ago: executing program 2 (id=303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x40000) r2 = socket$inet6(0xa, 0x40000080806, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x4800) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) 6.080048445s ago: executing program 0 (id=306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) read$snddsp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r3 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0xc08e) close(0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 5.747551274s ago: executing program 4 (id=307): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000004840)=[{&(0x7f0000000880)="4f3bf5cb8031e51b257f38308e5458a7eb86c3b92b6bca18ecc3c38b6201000e15446d487f5506eb672a77f8680ed11a835f2583b1962a90a92e7cfdc5b593a6922bb9c52cd77acb6401eddd1f099ce6e5b3a05d61a959f373fa989b4a", 0x5d}], 0x1) 5.568644764s ago: executing program 4 (id=308): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 5.421018763s ago: executing program 2 (id=309): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8008af26, &(0x7f0000000740)) 5.247522283s ago: executing program 2 (id=310): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setgid(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [], {0x20, 0x1}, [], {0x10, 0x2}}, 0x24, 0x2) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000100)) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x10, 0x6, 0x4ec, 0x190, 0x33c, 0x190, 0x190, 0xc8, 0x424, 0x424, 0x424, 0x424, 0x424, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg\x00', 'veth1_macvtap\x00'}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0xffffffff, 0xffffff00, 0xff000000, 0xff], [], 'sit0\x00', 'gretap0\x00', {}, {0xff}, 0x67, 0x0, 0x1, 0x40}, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "24390d4d8e6abaf968029911108a220a07a511dec200"}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x3f, 0x9, 0x4, 0x13}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x548) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 5.050774573s ago: executing program 0 (id=311): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 4.876658602s ago: executing program 0 (id=312): getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x9, 0x8, 0x0, 0x3, 0x5]}, &(0x7f0000000040)=0x54) openat$tun(0xffffffffffffff9c, 0x0, 0x404901, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x5) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000002200)=[{r2}], 0x1, &(0x7f0000002240)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x30}}, 0x20000840) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='1', 0xffffffffffffff78) 4.750577352s ago: executing program 5 (id=313): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xffffffffffffff14, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000003c0)={0x18, 0x0, {0x11ff, @remote, 'bond_slave_1\x00'}}, 0x1e) socket$kcm(0x10, 0x2, 0x0) r5 = io_uring_setup(0x4a92, &(0x7f0000000340)={0x0, 0x0, 0x400, 0x2, 0x4000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000000)=[0x5, 0x4000000], 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 2.931810348s ago: executing program 2 (id=314): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 2.928816598s ago: executing program 2 (id=315): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2, 0xa, 0xe, 0x3, 0x3, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0x9}]}, 0x18}}, 0x8890) getpeername(r6, 0x0, &(0x7f0000000400)) bind$x25(r5, &(0x7f0000000080), 0x12) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00'}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback, 0x13, 0x0, 0x5, &(0x7f00000006c0), 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x9, 0xffffffffffffffff, @void, @value, @void, @void, r9}, 0x20) r10 = openat$cgroup_root(0xffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYRES32=r4, @ANYBLOB="0800005802000000000000", @ANYRES32=r3, @ANYBLOB, @ANYRES64=r9], 0x20) getsockopt$sock_int(r8, 0x1, 0x9, 0x0, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140003000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4efef3d9300"/216, 0xd8}], 0x1}, 0x0) 2.788334017s ago: executing program 0 (id=316): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x6a98047402e98331}, 0x14}}, 0x0) 2.327177186s ago: executing program 5 (id=317): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x8, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(r2, &(0x7f00000024c0)=""/65, 0x41) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000b00000000000019078ac1e0001ac1414aa030490780000000045f00000000004de00010000ac141400ac1414aa94040000440c0003e000000200000000890f0000000000ffffffffffffffff444c0001ac1e000100000000000000000000000000000000000000000000000400000000e000000200000000ffffffff00000003ffffffff000000004414000000000007b40c991ce27167d500"/190], 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) r5 = socket(0x2, 0x80805, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.040899973s ago: executing program 2 (id=318): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 975.875253ms ago: executing program 5 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) 822.296413ms ago: executing program 0 (id=320): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x40000) r2 = socket$inet6(0xa, 0x40000080806, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x4800) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) write$nbd(r5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xd6) 796.541413ms ago: executing program 0 (id=321): r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 0s ago: executing program 5 (id=322): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf258900000008000300", @ANYBLOB="0819cd308f001d802b000080"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4000880) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x404c0a0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.174345][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.177971][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.209254][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.211395][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.987834][ T4118] Bluetooth: hci0: command 0x0419 tx timeout [ 52.989504][ T4118] Bluetooth: hci1: command 0x0419 tx timeout [ 52.991140][ T4118] Bluetooth: hci3: command 0x0419 tx timeout [ 52.992702][ T4118] Bluetooth: hci2: command 0x0419 tx timeout [ 52.994160][ T4118] Bluetooth: hci4: command 0x0419 tx timeout [ 53.040275][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.067281][ T1603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.073060][ T1603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.082691][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.162011][ T4136] loop0: detected capacity change from 0 to 16 [ 53.388219][ T4136] erofs: (device loop0): mounted with root inode @ nid 36. [ 53.958395][ T4147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 53.961976][ T4144] loop4: detected capacity change from 0 to 256 [ 55.059411][ T4160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 55.084153][ T4160] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 55.158772][ T4162] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 55.381930][ T4164] loop0: detected capacity change from 0 to 512 [ 55.523621][ T4164] EXT4-fs (loop0): Ignoring removed orlov option [ 55.852309][ T4164] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 55.855607][ T4164] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 55.858189][ T4164] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.18: Corrupt directory, running e2fsck is recommended [ 55.982719][ T4164] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 55.985212][ T4164] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.18: corrupted in-inode xattr [ 55.991165][ T4164] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.18: couldn't read orphan inode 15 (err -117) [ 55.995883][ T4164] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,nogrpid,orlov,bsddf,grpjquota=.noinit_itable,init_itable,jqfmt=vfsold,stripe=0x0000000000000800,,,errors=continue. Quota mode: writeback. [ 57.778541][ T4175] loop1: detected capacity change from 0 to 512 [ 58.499027][ T4175] EXT4-fs (loop1): Ignoring removed orlov option [ 58.513209][ T4175] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 58.516334][ T4175] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 58.518935][ T4175] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.20: Corrupt directory, running e2fsck is recommended [ 58.539088][ T4175] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 58.541358][ T4175] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.20: corrupted in-inode xattr [ 58.544991][ T4175] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.20: couldn't read orphan inode 15 (err -117) [ 58.548491][ T4175] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,nogrpid,orlov,bsddf,grpjquota=.noinit_itable,init_itable,jqfmt=vfsold,stripe=0x0000000000000800,,,errors=continue. Quota mode: writeback. [ 58.652614][ T4183] loop0: detected capacity change from 0 to 2048 [ 58.666608][ T4181] netlink: 'syz.2.24': attribute type 10 has an invalid length. [ 58.689891][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.692567][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.727949][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.729777][ T4181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.732363][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.734267][ T4181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.738624][ T4181] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 58.796581][ T4183] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.826895][ T4183] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.833405][ T4183] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 58.843488][ T4183] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.843488][ T4183] [ 58.845934][ T4183] EXT4-fs (loop0): Total free blocks count 0 [ 58.847481][ T4183] EXT4-fs (loop0): Free/Dirty block details [ 58.849084][ T4183] EXT4-fs (loop0): free_blocks=2415919104 [ 58.850622][ T4183] EXT4-fs (loop0): dirty_blocks=48 [ 58.851954][ T4183] EXT4-fs (loop0): Block reservation details [ 58.853762][ T4183] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 58.899322][ T4183] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 58.945603][ T4183] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.945603][ T4183] [ 58.971748][ T4193] loop2: detected capacity change from 0 to 1024 [ 59.043831][ T4193] EXT4-fs (loop2): Ignoring removed orlov option [ 59.046021][ T4193] EXT4-fs (loop2): blocks per group (0) and clusters per group (32) inconsistent [ 59.363238][ T4137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.404076][ T4137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.184544][ T4137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.258286][ T4137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.378059][ T4205] chnl_net:caif_netlink_parms(): no params data found [ 61.398743][ T4233] Zero length message leads to an empty skb [ 61.560228][ T4236] netlink: 'syz.0.37': attribute type 21 has an invalid length. [ 61.562274][ T4236] netlink: 'syz.0.37': attribute type 20 has an invalid length. [ 61.564344][ T4236] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.576043][ T4205] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.577898][ T4205] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.580338][ T4205] device bridge_slave_0 entered promiscuous mode [ 61.580816][ T4242] syz.1.38 uses obsolete (PF_INET,SOCK_PACKET) [ 61.583754][ T4205] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.589132][ T4205] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.591708][ T4205] device bridge_slave_1 entered promiscuous mode [ 61.635482][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 61.651211][ T4205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.661124][ T4205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.724039][ T4205] team0: Port device team_slave_0 added [ 61.732905][ T4205] team0: Port device team_slave_1 added [ 61.829921][ T4205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.831784][ T4205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.862737][ T4205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.880026][ T4205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.881820][ T4205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.900324][ T4205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.914423][ T4265] loop1: detected capacity change from 0 to 2048 [ 62.004598][ T4265] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.010120][ T4205] device hsr_slave_0 entered promiscuous mode [ 62.025591][ T4205] device hsr_slave_1 entered promiscuous mode [ 62.043863][ T4265] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.062042][ T4265] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 62.069988][ T4265] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.069988][ T4265] [ 62.075810][ T4205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.077697][ T4205] Cannot create hsr debugfs directory [ 62.077784][ T4265] EXT4-fs (loop1): Total free blocks count 0 [ 62.081475][ T4265] EXT4-fs (loop1): Free/Dirty block details [ 62.083117][ T4265] EXT4-fs (loop1): free_blocks=2415919104 [ 62.084687][ T4265] EXT4-fs (loop1): dirty_blocks=48 [ 62.092841][ T4265] EXT4-fs (loop1): Block reservation details [ 62.097985][ T4265] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 62.111675][ T4285] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 62.210306][ T4285] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.210306][ T4285] [ 62.376455][ T4320] netlink: 'syz.4.40': attribute type 1 has an invalid length. [ 62.403275][ T4321] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 62.543697][ T4328] netlink: zone id is out of range [ 62.545465][ T4328] netlink: zone id is out of range [ 62.546786][ T4328] netlink: set zone limit has 8 unknown bytes [ 63.085342][ T4353] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 63.701172][ T4205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.715464][ T25] Bluetooth: hci2: command 0x041b tx timeout [ 63.727746][ T4205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.796958][ T4205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.867445][ T4205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.005082][ T4400] tipc: Started in network mode [ 64.006714][ T4400] tipc: Node identity e634adf60b13, cluster identity 4711 [ 64.008707][ T4400] tipc: Enabled bearer , priority 0 [ 64.131979][ T4398] device syzkaller0 entered promiscuous mode [ 64.387092][ T4393] tipc: Resetting bearer [ 64.479209][ T4393] tipc: Disabling bearer [ 64.559279][ T4420] device syzkaller1 entered promiscuous mode [ 64.641765][ T4137] device hsr_slave_0 left promiscuous mode [ 64.695894][ T4137] device hsr_slave_1 left promiscuous mode [ 64.796005][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.798215][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.802116][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.814553][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.835637][ T4137] device bridge_slave_1 left promiscuous mode [ 64.837767][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.896329][ T4137] device bridge_slave_0 left promiscuous mode [ 64.898577][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.067165][ T4137] device veth1_macvtap left promiscuous mode [ 65.069035][ T4137] device veth0_macvtap left promiscuous mode [ 65.071942][ T4137] device veth1_vlan left promiscuous mode [ 65.073621][ T4137] device veth0_vlan left promiscuous mode [ 65.554860][ T4137] team0 (unregistering): Port device team_slave_1 removed [ 65.567227][ T4137] team0 (unregistering): Port device team_slave_0 removed [ 65.576735][ T4137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.615653][ T4137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.767095][ T4137] bond0 (unregistering): Released all slaves [ 65.796221][ T4013] Bluetooth: hci2: command 0x040f tx timeout [ 66.033001][ T4205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.078232][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.080764][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.131841][ T4205] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.178561][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.181217][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.183861][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.186015][ T4130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.212598][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.224193][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.227928][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.227998][ T4472] sctp: [Deprecated]: syz.4.77 (pid 4472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.227998][ T4472] Use struct sctp_sack_info instead [ 66.229907][ T4130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.266584][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.269618][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.325697][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.329720][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.351572][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.358398][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.374271][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.598254][ T4205] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.601042][ T4205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.620588][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.623233][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.626314][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.629438][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.635786][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.645892][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.699443][ T4499] netlink: 'syz.1.84': attribute type 11 has an invalid length. [ 66.998567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.000822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.070670][ T4205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.133707][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.137573][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.261583][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 67.305933][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.311594][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.314499][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.339530][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.353983][ T4205] device veth0_vlan entered promiscuous mode [ 67.382537][ T4205] device veth1_vlan entered promiscuous mode [ 67.399604][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 67.465982][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.468447][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.470956][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.477307][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.495053][ T4205] device veth0_macvtap entered promiscuous mode [ 67.514061][ T4205] device veth1_macvtap entered promiscuous mode [ 67.554696][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.564470][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.572077][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.578286][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.654496][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.658075][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.664904][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.679664][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.697680][ T4205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.716025][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.728058][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.751527][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.770047][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.781244][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.825859][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.104029][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.391928][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.525792][ T4070] Bluetooth: hci2: command 0x0419 tx timeout [ 68.531906][ T4205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.605519][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.608020][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.610557][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.613203][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.668648][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.675878][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.690680][ T4205] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.693172][ T4205] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.703726][ T4205] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.706514][ T4205] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.023279][ T4566] dccp_close: ABORT with 28 bytes unread [ 69.035676][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.037987][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.055246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.098934][ T4575] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(142475867092894) <= P.seqno(0) <= S.SWH(142475867092968)) and (P.ackno exists or LAWL(200848686241648) <= P.ackno(200848686241649) <= S.AWH(200848686241649), sending SYNC... [ 69.112522][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.125751][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.132244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.640622][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.646419][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.439329][ T4598] loop0: detected capacity change from 0 to 1024 [ 70.476471][ T4598] ======================================================= [ 70.476471][ T4598] WARNING: The mand mount option has been deprecated and [ 70.476471][ T4598] and is ignored by this kernel. Remove the mand [ 70.476471][ T4598] option from the mount to silence this warning. [ 70.476471][ T4598] ======================================================= [ 70.724363][ T4598] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.113: Invalid block bitmap block 0 in block_group 0 [ 70.792167][ T4598] Quota error (device loop0): write_blk: dquota write failed [ 70.794398][ T4598] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 70.835324][ T4598] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.113: Failed to acquire dquot type 0 [ 70.838996][ T4598] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.113: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.874837][ T4598] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.113: Invalid inode bitmap blk 0 in block_group 0 [ 70.895866][ T4598] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 70.908712][ T148] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 70.910911][ T148] EXT4-fs error (device loop0): ext4_release_dquot:6220: comm kworker/u4:2: Failed to release dquot type 0 [ 70.915720][ T4598] EXT4-fs (loop0): 1 orphan inode deleted [ 70.917828][ T4598] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; sysvgroups,dax=never,auto_da_alloc,quota,nogrpid,norecovery,bsddf,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 71.258430][ T4606] loop1: detected capacity change from 0 to 32768 [ 71.260498][ T4620] netlink: 'syz.2.123': attribute type 4 has an invalid length. [ 71.308555][ T4606] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.118 (4606) [ 71.348981][ T4606] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 71.358130][ T4606] BTRFS info (device loop1): force zlib compression, level 3 [ 71.363544][ T4606] BTRFS info (device loop1): turning off barriers [ 71.371602][ T4606] BTRFS info (device loop1): turning on async discard [ 71.378006][ T4606] BTRFS info (device loop1): setting nodatacow [ 71.381938][ T4606] BTRFS info (device loop1): using free space tree [ 71.389310][ T4606] BTRFS info (device loop1): has skinny extents [ 71.563972][ T4614] loop4: detected capacity change from 0 to 32768 [ 71.622511][ T4614] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.122 (4614) [ 71.689788][ T4606] BTRFS info (device loop1): scrub: started on devid 1 [ 71.715019][ T4606] BTRFS info (device loop1): left=0, need=98304, flags=2 [ 71.737112][ T4606] BTRFS info (device loop1): space_info 2 has 0 free, is not full [ 71.739327][ T4606] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 71.742835][ T4606] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 851968 [ 71.745474][ T4606] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 71.747675][ T4606] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 71.749672][ T4606] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 71.751728][ T4606] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0 [ 71.833362][ T4606] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [ 72.181661][ T4614] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 72.184213][ T4614] BTRFS info (device loop4): use zlib compression, level 3 [ 72.201210][ T4614] BTRFS info (device loop4): using free space tree [ 72.203249][ T4614] BTRFS info (device loop4): has skinny extents [ 72.478216][ T4137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.562664][ T4614] BTRFS info (device loop4): enabling ssd optimizations [ 72.593277][ T4137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.782092][ T4137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.892279][ T4312] bond0: (slave bond_slave_0): interface is now down [ 72.894240][ T4312] bond0: (slave bond_slave_1): interface is now down [ 72.906705][ T4312] bond0: now running without any active interface! [ 72.958108][ T4137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.987732][ T4674] netlink: 'syz.1.126': attribute type 10 has an invalid length. [ 72.990088][ T4674] device syz_tun entered promiscuous mode [ 73.051860][ T4674] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 73.083821][ T148] bond0: (slave syz_tun): interface is now down [ 73.086181][ T148] bond0: now running without any active interface! [ 73.128513][ T4656] chnl_net:caif_netlink_parms(): no params data found [ 73.330748][ T4656] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.332856][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.335652][ T4656] device bridge_slave_0 entered promiscuous mode [ 73.347202][ T4656] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.349701][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.356116][ T4656] device bridge_slave_1 entered promiscuous mode [ 73.414987][ T4651] loop0: detected capacity change from 0 to 32768 [ 73.434797][ T4656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.457629][ T4656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.492307][ T4651] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.125 (4651) [ 73.509436][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 73.525605][ T4651] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 73.528029][ T4651] BTRFS info (device loop0): force zlib compression, level 3 [ 73.529942][ T4651] BTRFS info (device loop0): turning off barriers [ 73.531479][ T4651] BTRFS info (device loop0): turning on async discard [ 73.533250][ T4651] BTRFS info (device loop0): setting nodatacow [ 73.534737][ T4651] BTRFS info (device loop0): using free space tree [ 73.565671][ T4651] BTRFS info (device loop0): has skinny extents [ 73.644288][ T4656] team0: Port device team_slave_0 added [ 73.651138][ T4656] team0: Port device team_slave_1 added [ 73.712590][ T4656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.714441][ T4656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.755945][ T4656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.775420][ T4656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.777278][ T4656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.834947][ T4656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.838963][ T4651] BTRFS info (device loop0): scrub: started on devid 1 [ 73.847733][ T4651] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 73.849620][ T4651] BTRFS info (device loop0): space_info 2 has 0 free, is not full [ 73.851713][ T4651] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 73.855295][ T4651] BTRFS info (device loop0): global_block_rsv: size 851968 reserved 851968 [ 73.857558][ T4651] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 73.859627][ T4651] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 73.861653][ T4651] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 73.863658][ T4651] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 73.870083][ T4712] loop1: detected capacity change from 0 to 32768 [ 73.927988][ T4712] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.136 (4712) [ 74.007046][ T4712] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 74.009361][ T4712] BTRFS info (device loop1): setting nodatasum [ 74.010875][ T4712] BTRFS info (device loop1): force zlib compression, level 3 [ 74.012836][ T4712] BTRFS info (device loop1): metadata ratio 1 [ 74.014355][ T4712] BTRFS info (device loop1): enabling ssd optimizations [ 74.019019][ T4651] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 74.055578][ T4712] BTRFS info (device loop1): allowing degraded mounts [ 74.057415][ T4712] BTRFS info (device loop1): using free space tree [ 74.059108][ T4712] BTRFS info (device loop1): has skinny extents [ 74.097427][ T4656] device hsr_slave_0 entered promiscuous mode [ 74.135601][ T4656] device hsr_slave_1 entered promiscuous mode [ 74.372217][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 74.757857][ T1960] cfg80211: failed to load regulatory.db [ 75.298588][ T4761] loop0: detected capacity change from 0 to 32768 [ 75.340342][ T4761] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.138 (4761) [ 75.395073][ T4759] loop4: detected capacity change from 0 to 32768 [ 75.396421][ T4761] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 75.399607][ T4761] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 75.412966][ T4761] BTRFS info (device loop0): trying to use backup root at mount time [ 75.422302][ T4761] BTRFS info (device loop0): use no compression [ 75.429834][ T4761] BTRFS info (device loop0): use zlib compression, level 3 [ 75.431693][ T4761] BTRFS info (device loop0): force clearing of disk cache [ 75.433480][ T4761] BTRFS info (device loop0): enabling disk space caching [ 75.456400][ T4761] BTRFS info (device loop0): disk space caching is enabled [ 75.458167][ T4761] BTRFS info (device loop0): has skinny extents [ 75.510753][ T4759] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 75.560646][ T4759] XFS (loop4): Quotacheck needed: Please wait. [ 75.672448][ T4759] XFS (loop4): Quotacheck: Done. [ 75.703492][ T4656] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.794944][ T4656] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.955389][ T4761] BTRFS info (device loop0): enabling ssd optimizations [ 75.962088][ T4761] BTRFS info (device loop0): clearing free space tree [ 75.964169][ T4761] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.971169][ T4761] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.124962][ T4656] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.187208][ T4656] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.445278][ T4817] Bluetooth: hci2: command 0x041b tx timeout [ 77.803391][ T4656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.186970][ T4823] loop2: detected capacity change from 0 to 32768 [ 78.278702][ T4823] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.142 (4823) [ 78.368319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.370724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.374975][ T4656] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.392143][ T4823] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 78.394608][ T4823] BTRFS info (device loop2): setting nodatasum [ 78.396866][ T4823] BTRFS info (device loop2): force zlib compression, level 3 [ 78.398763][ T4823] BTRFS info (device loop2): metadata ratio 1 [ 78.400274][ T4823] BTRFS info (device loop2): enabling ssd optimizations [ 78.401973][ T4823] BTRFS info (device loop2): allowing degraded mounts [ 78.404527][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.407317][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.409796][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.411550][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.413335][ T4823] BTRFS info (device loop2): using free space tree [ 78.413587][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.423925][ T4823] BTRFS info (device loop2): has skinny extents [ 78.439968][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.442633][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.460275][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.462149][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.524576][ T4837] loop0: detected capacity change from 0 to 32768 [ 78.525453][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 78.583199][ T4656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.595865][ T4656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.601459][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.604185][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.609628][ T4837] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.143 (4837) [ 78.632368][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.639139][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.643998][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.656260][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.658981][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.667332][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.670812][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.676677][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.694114][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.716115][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.950297][ T4823] fs-verity: sha512 using implementation "sha512-arm64" [ 79.001762][ T4879] udc-core: couldn't find an available UDC or it's busy [ 79.003577][ T4879] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.393584][ T4837] loop0: detected capacity change from 0 to 40427 [ 79.423572][ T4837] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 79.445281][ T4837] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 79.462972][ T4837] F2FS-fs (loop0): invalid crc value [ 79.493735][ T4837] F2FS-fs (loop0): Found nat_bits in checkpoint [ 79.498425][ T4863] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.500468][ T4863] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.539111][ T4837] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 79.541205][ T4837] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.895395][ T1534] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.135513][ T1534] usb 1-1: Using ep0 maxpacket: 8 [ 80.193280][ T4863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.241186][ T4863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.337740][ T4823] fs-verity (loop2, inode 260): Error -4 building Merkle tree [ 80.354307][ T4823] BTRFS: error (device loop2) in rollback_verity:465: errno=-4 unknown (failed to drop verity items in rollback 260) [ 80.357949][ T4823] BTRFS info (device loop2): forced readonly [ 80.359571][ T4823] BTRFS error (device loop2): failed to rollback verity items: -4 [ 80.428200][ T1534] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 80.435427][ T1534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.437563][ T1534] usb 1-1: Product: syz [ 80.442734][ T1534] usb 1-1: Manufacturer: syz [ 80.444001][ T1534] usb 1-1: SerialNumber: syz [ 80.471468][ T1534] usb 1-1: config 0 descriptor?? [ 80.511127][ T1534] option 1-1:0.0: GSM modem (1-port) converter detected [ 80.595626][ T4819] Bluetooth: hci2: command 0x0419 tx timeout [ 80.627308][ T1960] usb 1-1: USB disconnect, device number 2 [ 80.631199][ T1960] option 1-1:0.0: device disconnected [ 80.714463][ T4863] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.717307][ T4863] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.719468][ T4863] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.721737][ T4863] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.852052][ T4887] ALSA: mixer_oss: invalid OSS volume '' [ 80.853741][ T4887] ALSA: mixer_oss: invalid OSS volume '' [ 81.019575][ T4893] loop0: detected capacity change from 0 to 128 [ 81.357825][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.359869][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.378707][ T4656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.478002][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.480727][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.548959][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.551581][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.614811][ T4889] loop2: detected capacity change from 0 to 32768 [ 81.649677][ T4656] device veth0_vlan entered promiscuous mode [ 81.652176][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.654551][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.707905][ T4137] device hsr_slave_0 left promiscuous mode [ 81.732273][ T4889] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 81.755397][ T4137] device hsr_slave_1 left promiscuous mode [ 81.761005][ T4889] XFS (loop2): Quotacheck needed: Please wait. [ 81.785984][ T4889] XFS (loop2): Quotacheck: Done. [ 81.825621][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.827665][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.836144][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.837961][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.841271][ T4137] device bridge_slave_1 left promiscuous mode [ 81.842996][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.861137][ T4903] loop0: detected capacity change from 0 to 32768 [ 81.955449][ T4903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.151 (4903) [ 81.959228][ T4137] device bridge_slave_0 left promiscuous mode [ 81.960820][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.037080][ T4903] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 82.039372][ T4903] BTRFS info (device loop0): force zlib compression, level 3 [ 82.041162][ T4903] BTRFS info (device loop0): turning off barriers [ 82.042773][ T4903] BTRFS info (device loop0): turning on async discard [ 82.068202][ T4903] BTRFS info (device loop0): setting nodatacow [ 82.069837][ T4903] BTRFS info (device loop0): using free space tree [ 82.071459][ T4903] BTRFS info (device loop0): has skinny extents [ 82.115701][ T4137] device veth1_macvtap left promiscuous mode [ 82.117369][ T4137] device veth0_macvtap left promiscuous mode [ 82.118895][ T4137] device veth1_vlan left promiscuous mode [ 82.120327][ T4137] device veth0_vlan left promiscuous mode [ 82.277637][ T4903] BTRFS info (device loop0): scrub: started on devid 1 [ 82.297133][ T4903] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 82.892444][ T4947] loop0: detected capacity change from 0 to 1024 [ 83.008112][ T4947] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 83.091256][ T4947] 9pnet_virtio: no channels available for device syz [ 83.168248][ T4137] team0 (unregistering): Port device team_slave_1 removed [ 83.229410][ T4137] team0 (unregistering): Port device team_slave_0 removed [ 83.252292][ T4137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.349887][ T4137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.561685][ T4137] bond0 (unregistering): Released all slaves [ 83.645231][ T4897] loop1: detected capacity change from 0 to 131072 [ 83.698146][ T4897] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945) [ 83.700240][ T4897] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 83.714969][ T4897] F2FS-fs (loop1): invalid crc value [ 83.750665][ T4656] device veth1_vlan entered promiscuous mode [ 83.751018][ T4952] loop0: detected capacity change from 0 to 32768 [ 83.767048][ T4897] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.785290][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.792096][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.831864][ T4952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.153 (4952) [ 83.842303][ T4952] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 83.844578][ T4952] BTRFS info (device loop0): setting nodatasum [ 83.853130][ T4897] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 83.856261][ T4952] BTRFS info (device loop0): force zlib compression, level 3 [ 83.862520][ T4952] BTRFS info (device loop0): metadata ratio 1 [ 83.863874][ T4952] BTRFS info (device loop0): enabling ssd optimizations [ 83.870372][ T4952] BTRFS info (device loop0): allowing degraded mounts [ 83.870867][ T4897] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 83.871962][ T4952] BTRFS info (device loop0): using free space tree [ 83.871982][ T4952] BTRFS info (device loop0): has skinny extents [ 83.882307][ T4897] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 83.885030][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.888591][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.910085][ T4656] device veth0_macvtap entered promiscuous mode [ 83.920344][ T4656] device veth1_macvtap entered promiscuous mode [ 83.940702][ T4897] overlayfs: missing 'lowerdir' [ 84.014016][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.016906][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.019306][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.021915][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.024216][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.027901][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.050084][ T4656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.053912][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.067563][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.087867][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.110194][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.125253][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.143387][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.177494][ T4656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.183441][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.186559][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.189468][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.192014][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.194834][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.198274][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.226854][ T4656] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.229027][ T4656] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.231035][ T4656] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.233140][ T4656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.523903][ T4130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.526754][ T4130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.553687][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.618593][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.631591][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.686606][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.725303][ T4819] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.965231][ T4819] usb 1-1: Using ep0 maxpacket: 8 [ 85.203745][ T4036] XFS (loop4): Unmounting Filesystem [ 85.265337][ T4819] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 85.267661][ T4819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.269711][ T4819] usb 1-1: Product: syz [ 85.270825][ T4819] usb 1-1: Manufacturer: syz [ 85.271935][ T4819] usb 1-1: SerialNumber: syz [ 85.280746][ T4819] usb 1-1: config 0 descriptor?? [ 85.316615][ T4819] option 1-1:0.0: GSM modem (1-port) converter detected [ 86.009612][ T5004] loop4: detected capacity change from 0 to 1024 [ 86.105709][ T5004] EXT4-fs (loop4): Unrecognized mount option "smackfsdef=%%" or missing value [ 87.145591][ T4952] fs-verity (loop0, inode 260): Error -4 building Merkle tree [ 87.149126][ T4952] BTRFS: error (device loop0) in rollback_verity:465: errno=-4 unknown (failed to drop verity items in rollback 260) [ 87.152274][ T4952] BTRFS info (device loop0): forced readonly [ 87.153807][ T4952] BTRFS error (device loop0): failed to rollback verity items: -4 [ 87.185261][ T4676] usb 1-1: USB disconnect, device number 3 [ 87.190626][ T4676] option 1-1:0.0: device disconnected [ 87.601147][ T5016] loop1: detected capacity change from 0 to 16 [ 88.145775][ T5016] erofs: (device loop1): mounted with root inode @ nid 36. [ 88.200179][ T5016] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36 [ 88.216655][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 312 @ nid 36 [ 88.218963][ T5016] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36 [ 88.221256][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 311 @ nid 36 [ 88.223468][ T5016] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36 [ 88.305258][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 310 @ nid 36 [ 88.307629][ T5016] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36 [ 88.309891][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 309 @ nid 36 [ 88.312145][ T5016] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36 [ 88.314943][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 308 @ nid 36 [ 88.328104][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 307 @ nid 36 [ 88.330546][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 306 @ nid 36 [ 88.332747][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 305 @ nid 36 [ 88.334926][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 304 @ nid 36 [ 88.340894][ T5011] chnl_net:caif_netlink_parms(): no params data found [ 88.380851][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 1245183 of nid 36 [ 88.383513][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 303 @ nid 36 [ 88.415941][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 1241087 of nid 36 [ 88.424801][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 302 @ nid 36 [ 88.430206][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 1236991 of nid 36 [ 88.444673][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 301 @ nid 36 [ 88.458073][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 1232895 of nid 36 [ 88.460677][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 300 @ nid 36 [ 88.463977][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 1228799 of nid 36 [ 88.479426][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 299 @ nid 36 [ 88.479636][ T5011] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.481925][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 1224703 of nid 36 [ 88.486278][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 298 @ nid 36 [ 88.497117][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 1220607 of nid 36 [ 88.499708][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 297 @ nid 36 [ 88.501904][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 1216511 of nid 36 [ 88.504477][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 296 @ nid 36 [ 88.511998][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 291 @ nid 36 [ 88.514635][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 290 @ nid 36 [ 88.517374][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 289 @ nid 36 [ 88.517905][ T4770] Bluetooth: hci2: command 0x0409 tx timeout [ 88.520395][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 288 @ nid 36 [ 88.526563][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 275 @ nid 36 [ 88.529002][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 274 @ nid 36 [ 88.531373][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 273 @ nid 36 [ 88.533639][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 272 @ nid 36 [ 88.535526][ T5011] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.536366][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 267 @ nid 36 [ 88.539064][ T5011] device bridge_slave_0 entered promiscuous mode [ 88.540014][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 266 @ nid 36 [ 88.550763][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 265 @ nid 36 [ 88.553072][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 264 @ nid 36 [ 88.570458][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 259 @ nid 36 [ 88.572959][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 258 @ nid 36 [ 88.578782][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 257 @ nid 36 [ 88.581346][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 256 @ nid 36 [ 88.583644][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 255 @ nid 36 [ 88.586545][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 254 @ nid 36 [ 88.595970][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 253 @ nid 36 [ 88.598435][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 252 @ nid 36 [ 88.600727][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 251 @ nid 36 [ 88.608828][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 250 @ nid 36 [ 88.611704][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 186 @ nid 36 [ 88.620206][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 185 @ nid 36 [ 88.623155][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 184 @ nid 36 [ 88.625443][ T5011] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.626572][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 183 @ nid 36 [ 88.629639][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 182 @ nid 36 [ 88.631988][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 181 @ nid 36 [ 88.634218][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 88.635230][ T5011] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.637277][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 179 @ nid 36 [ 88.639205][ T5011] device bridge_slave_1 entered promiscuous mode [ 88.640794][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 178 @ nid 36 [ 88.644793][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 177 @ nid 36 [ 88.657838][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 176 @ nid 36 [ 88.660409][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 88.662677][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 88.665033][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 88.678339][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 88.680726][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 151 @ nid 36 [ 88.682969][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 150 @ nid 36 [ 88.698621][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 88.700947][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 148 @ nid 36 [ 88.703203][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 147 @ nid 36 [ 88.708757][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 146 @ nid 36 [ 88.711069][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 145 @ nid 36 [ 88.733393][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 88.743533][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 589823 of nid 36 [ 88.757060][ T5011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.761563][ T5011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.764919][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 143 @ nid 36 [ 88.788816][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 585727 of nid 36 [ 88.791461][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 142 @ nid 36 [ 88.793906][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 581631 of nid 36 [ 88.819620][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 141 @ nid 36 [ 88.822118][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 577535 of nid 36 [ 88.824756][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 88.834224][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 573439 of nid 36 [ 88.847991][ T5011] team0: Port device team_slave_0 added [ 88.851983][ T5011] team0: Port device team_slave_1 added [ 88.866310][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 88.868538][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 569343 of nid 36 [ 88.871018][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 88.873468][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 565247 of nid 36 [ 88.893831][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 88.896075][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 561151 of nid 36 [ 88.898292][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 88.922665][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 115 @ nid 36 [ 88.924944][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 114 @ nid 36 [ 88.939056][ T5011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.940837][ T5011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.952236][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 113 @ nid 36 [ 88.954639][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 112 @ nid 36 [ 88.965303][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 111 @ nid 36 [ 88.967670][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 110 @ nid 36 [ 88.968778][ T5011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.969966][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 109 @ nid 36 [ 88.974801][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 108 @ nid 36 [ 88.983702][ T5011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.985639][ T5011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.992028][ T5011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.005482][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 107 @ nid 36 [ 89.007741][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 106 @ nid 36 [ 89.016111][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 89.038312][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 89.040715][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 89.059914][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 89.062230][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 89.064493][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 89.072422][ T4022] XFS (loop2): Unmounting Filesystem [ 89.074200][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 89.105179][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 89.107574][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 89.110044][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 89.112300][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 89.114348][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 67 @ nid 36 [ 89.117454][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 89.119819][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 89.122020][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 89.124267][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 89.127227][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 89.127422][ T5011] device hsr_slave_0 entered promiscuous mode [ 89.129520][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 89.134227][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 89.137462][ T5019] loop4: detected capacity change from 0 to 32768 [ 89.147140][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 89.149460][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36 [ 89.152030][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 89.154157][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36 [ 89.155090][ T5030] loop0: detected capacity change from 0 to 128 [ 89.165278][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 89.165925][ T5011] device hsr_slave_1 entered promiscuous mode [ 89.167586][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 89.177006][ T5019] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.162 (5019) [ 89.196184][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 89.198575][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 167935 of nid 36 [ 89.201133][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 89.203468][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 163839 of nid 36 [ 89.205478][ T5011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.206174][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 89.208916][ T5011] Cannot create hsr debugfs directory [ 89.210228][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 159743 of nid 36 [ 89.224069][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 89.239426][ T5019] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 89.241601][ T5019] BTRFS info (device loop4): force clearing of disk cache [ 89.243592][ T5019] BTRFS info (device loop4): force zlib compression, level 3 [ 89.244588][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 155647 of nid 36 [ 89.245510][ T5019] BTRFS info (device loop4): enabling auto defrag [ 89.254287][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 37 @ nid 36 [ 89.258788][ T5016] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 151551 of nid 36 [ 89.261252][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 89.263562][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 89.265389][ T5019] BTRFS info (device loop4): max_inline at 0 [ 89.268185][ T5019] BTRFS info (device loop4): using free space tree [ 89.269901][ T5019] BTRFS info (device loop4): has skinny extents [ 89.275927][ T5030] qnx6: invalid mount options. [ 89.288409][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 89.290722][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 89.293058][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 89.318458][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 89.320939][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 89.323136][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 89.342302][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 89.344724][ T5016] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 89.367460][ T5016] attempt to access beyond end of device [ 89.367460][ T5016] loop1: rw=524288, want=1049304, limit=16 [ 89.370366][ T5016] attempt to access beyond end of device [ 89.370366][ T5016] loop1: rw=524288, want=408, limit=16 [ 89.373189][ T5016] attempt to access beyond end of device [ 89.373189][ T5016] loop1: rw=524288, want=416, limit=16 [ 89.390742][ T5016] attempt to access beyond end of device [ 89.390742][ T5016] loop1: rw=524288, want=32, limit=16 [ 89.393686][ T5016] attempt to access beyond end of device [ 89.393686][ T5016] loop1: rw=524288, want=752, limit=16 [ 89.425103][ T5016] attempt to access beyond end of device [ 89.425103][ T5016] loop1: rw=524288, want=760, limit=16 [ 89.428258][ T5016] attempt to access beyond end of device [ 89.428258][ T5016] loop1: rw=524288, want=525176, limit=16 [ 89.430997][ T5016] attempt to access beyond end of device [ 89.430997][ T5016] loop1: rw=524288, want=525184, limit=16 [ 89.433867][ T5016] attempt to access beyond end of device [ 89.433867][ T5016] loop1: rw=524288, want=13478624064, limit=16 [ 89.485469][ T5016] attempt to access beyond end of device [ 89.485469][ T5016] loop1: rw=524288, want=13478624072, limit=16 [ 89.562866][ T5019] BTRFS info (device loop4): enabling ssd optimizations [ 89.567390][ T5019] BTRFS info (device loop4): clearing free space tree [ 89.569218][ T5019] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.571634][ T5019] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.587793][ T5028] loop0: detected capacity change from 0 to 32768 [ 89.622341][ T5019] BTRFS info (device loop4): creating free space tree [ 89.640184][ T5028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.164 (5028) [ 89.644549][ T5019] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.655579][ T5019] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.681109][ T5028] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 89.683417][ T5028] BTRFS info (device loop0): using free space tree [ 89.685002][ T5028] BTRFS info (device loop0): has skinny extents [ 89.734672][ T4137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.755398][ T5019] BTRFS warning (device loop4): 'nologreplay' is deprecated, use 'rescue=nologreplay' instead [ 89.758397][ T5019] BTRFS info (device loop4): disabling log replay at mount time [ 89.760328][ T5019] BTRFS error (device loop4): nologreplay must be used with ro mount option [ 89.880867][ T4137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.123063][ T5028] BTRFS info (device loop0): enabling ssd optimizations [ 90.186483][ T4137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.342177][ T5051] loop1: detected capacity change from 0 to 32768 [ 90.390484][ T4137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.699279][ T5088] loop2: detected capacity change from 0 to 512 [ 91.287992][ T4033] Bluetooth: hci2: command 0x041b tx timeout [ 91.307748][ T5088] EXT4-fs (loop2): Ignoring removed orlov option [ 91.683290][ T5087] loop4: detected capacity change from 0 to 32768 [ 91.746850][ T5088] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.749923][ T5088] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 91.752508][ T5088] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.170: Corrupt directory, running e2fsck is recommended [ 91.772985][ T5088] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 91.776709][ T5088] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.170: corrupted in-inode xattr [ 91.790245][ T5088] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.170: couldn't read orphan inode 15 (err -117) [ 91.796677][ T5088] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,nogrpid,orlov,bsddf,grpjquota=.noinit_itable,init_itable,jqfmt=vfsold,stripe=0x0000000000000800,,,errors=continue. Quota mode: writeback. [ 91.817806][ T5051] XFS (loop1): Mounting V5 Filesystem [ 91.890619][ T5087] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.172 (5087) [ 92.012610][ T5087] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 92.015089][ T5087] BTRFS info (device loop4): force zlib compression, level 3 [ 92.033190][ T5087] BTRFS info (device loop4): force clearing of disk cache [ 92.036732][ T5087] BTRFS info (device loop4): setting nodatasum [ 92.045392][ T5087] BTRFS info (device loop4): doing ref verification [ 92.047195][ T5087] BTRFS info (device loop4): allowing degraded mounts [ 92.054250][ T5087] BTRFS info (device loop4): enabling disk space caching [ 92.065338][ T4161] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4161) [ 92.075395][ T5087] BTRFS info (device loop4): disk space caching is enabled [ 92.080857][ T5087] BTRFS info (device loop4): has skinny extents [ 92.129013][ T5051] XFS (loop1): Ending clean mount [ 92.432105][ T5087] BTRFS info (device loop4): enabling ssd optimizations [ 92.438464][ T5087] BTRFS info (device loop4): clearing free space tree [ 92.440232][ T5087] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.442694][ T5087] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.634783][ T5011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.656910][ T4023] XFS (loop1): Unmounting Filesystem [ 92.697537][ T5011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.738019][ T5011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.777791][ T5011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.963620][ T5141] BTRFS info (device loop4): balance: start -d -m [ 93.009612][ T5141] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 93.113361][ T5011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.138062][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.144068][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.161054][ T5011] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.214760][ T5141] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 93.229724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.232773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.244185][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.246094][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.259560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.277261][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.278733][ T5141] BTRFS info (device loop4): balance: canceled [ 93.280214][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.283284][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.285093][ T4139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.325570][ T4676] Bluetooth: hci2: command 0x040f tx timeout [ 94.244572][ T5162] loop2: detected capacity change from 0 to 512 [ 94.251257][ T5161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 94.270332][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.273317][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.297155][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.301070][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.319751][ T5162] EXT4-fs (loop2): Ignoring removed orlov option [ 94.343721][ T5162] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 94.346887][ T5162] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 94.349552][ T5162] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.177: Corrupt directory, running e2fsck is recommended [ 94.368187][ T5162] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 94.375317][ T5162] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.177: corrupted in-inode xattr [ 94.378682][ T5162] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.177: couldn't read orphan inode 15 (err -117) [ 94.382678][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.384615][ T5162] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,nogrpid,orlov,bsddf,grpjquota=.noinit_itable,init_itable,jqfmt=vfsold,stripe=0x0000000000000800,,,errors=continue. Quota mode: writeback. [ 94.392390][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.406529][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.423686][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.453132][ T5110] loop0: detected capacity change from 0 to 32768 [ 94.459523][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.479676][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.502626][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.505441][ T5110] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.173 (5110) [ 94.546130][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.653615][ T5110] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 94.659235][ T5110] BTRFS info (device loop0): turning on sync discard [ 94.660980][ T5110] BTRFS info (device loop0): using free space tree [ 94.675322][ T5110] BTRFS info (device loop0): has skinny extents [ 95.855015][ T4118] Bluetooth: hci2: command 0x0419 tx timeout [ 96.002644][ T5110] BTRFS error (device loop0): open_ctree failed [ 96.143525][ T5011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.172648][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.174761][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.489636][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.492596][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.499387][ T5225] netlink: 'syz.2.193': attribute type 21 has an invalid length. [ 96.501405][ T5225] netlink: 'syz.2.193': attribute type 20 has an invalid length. [ 96.524064][ T5225] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.597129][ T5011] device veth0_vlan entered promiscuous mode [ 96.724547][ T5011] device veth1_vlan entered promiscuous mode [ 96.729096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.731831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.734616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.742343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.751337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.839672][ T5011] device veth0_macvtap entered promiscuous mode [ 96.844189][ T5011] device veth1_macvtap entered promiscuous mode [ 96.860690][ T4137] device hsr_slave_0 left promiscuous mode [ 96.886326][ T4137] device hsr_slave_1 left promiscuous mode [ 96.972516][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.974899][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.978145][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.981401][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.999423][ T4137] device bridge_slave_1 left promiscuous mode [ 97.009226][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.082161][ T4137] device bridge_slave_0 left promiscuous mode [ 97.083962][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.205507][ T4137] device veth1_macvtap left promiscuous mode [ 97.207173][ T4137] device veth0_macvtap left promiscuous mode [ 97.208570][ T4137] device veth1_vlan left promiscuous mode [ 97.209946][ T4137] device veth0_vlan left promiscuous mode [ 97.264230][ T5231] loop0: detected capacity change from 0 to 32768 [ 97.350959][ T5231] XFS (loop0): Mounting V5 Filesystem [ 97.438077][ T5231] XFS (loop0): Ending clean mount [ 97.513081][ T5249] loop2: detected capacity change from 0 to 128 [ 97.610314][ T5249] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.746924][ T4137] team0 (unregistering): Port device team_slave_1 removed [ 97.774900][ T4137] team0 (unregistering): Port device team_slave_0 removed [ 97.777096][ T5237] loop1: detected capacity change from 0 to 32768 [ 97.809505][ T4137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.851277][ T5237] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.197 (5237) [ 97.886936][ T4137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.901777][ T4029] XFS (loop0): Unmounting Filesystem [ 97.922307][ T5237] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 97.924633][ T5237] BTRFS info (device loop1): setting nodatasum [ 97.940763][ T5237] BTRFS info (device loop1): force zlib compression, level 3 [ 97.942711][ T5237] BTRFS info (device loop1): metadata ratio 1 [ 97.944259][ T5237] BTRFS info (device loop1): enabling ssd optimizations [ 97.971005][ T5237] BTRFS info (device loop1): allowing degraded mounts [ 97.972896][ T5237] BTRFS info (device loop1): using free space tree [ 97.974592][ T5237] BTRFS info (device loop1): has skinny extents [ 98.144359][ T5246] loop4: detected capacity change from 0 to 32768 [ 98.233099][ T4137] bond0 (unregistering): Released all slaves [ 98.245001][ T5246] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.198 (5246) [ 98.373227][ T5246] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 98.376096][ T5246] BTRFS info (device loop4): force zlib compression, level 3 [ 98.377970][ T5246] BTRFS info (device loop4): turning off barriers [ 98.379584][ T5246] BTRFS info (device loop4): turning on async discard [ 98.381348][ T5246] BTRFS info (device loop4): setting nodatacow [ 98.382934][ T5246] BTRFS info (device loop4): using free space tree [ 98.384602][ T5246] BTRFS info (device loop4): has skinny extents [ 98.387733][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.390371][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.393061][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.406183][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.413271][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.523134][ T5290] udc-core: couldn't find an available UDC or it's busy [ 98.531458][ T5290] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 98.589696][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.613199][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.633265][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.644107][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.657916][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.660494][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.769847][ T5011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.446032][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.452374][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.473345][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.505250][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.515226][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.518115][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.520553][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.523235][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.546666][ T5011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.556464][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.559078][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.566143][ T5246] BTRFS info (device loop4): scrub: started on devid 1 [ 99.566412][ T5011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.571663][ T5246] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 99.573500][ T5246] BTRFS info (device loop4): space_info 2 has 0 free, is not full [ 99.575838][ T5246] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 99.579384][ T5246] BTRFS info (device loop4): global_block_rsv: size 851968 reserved 851968 [ 99.581247][ T5011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.581558][ T5246] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 99.583853][ T5011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.583883][ T5011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.585974][ T5246] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 99.585998][ T5246] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 99.586015][ T5246] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 99.614158][ T5237] fs-verity (loop1, inode 260): Error -4 building Merkle tree [ 99.732290][ T5246] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 99.997441][ T1603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.999810][ T1603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.986561][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.996919][ T4139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.999172][ T4139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.011660][ T4023] bond0: (slave syz_tun): Releasing backup interface [ 101.080700][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.084190][ T5322] netlink: 'syz.4.205': attribute type 21 has an invalid length. [ 101.086807][ T5322] netlink: 'syz.4.205': attribute type 20 has an invalid length. [ 101.088827][ T5322] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.035558][ T5317] Bluetooth: hci1: command 0x0409 tx timeout [ 104.142645][ T5328] chnl_net:caif_netlink_parms(): no params data found [ 104.675254][ T5317] Bluetooth: hci2: command 0x0409 tx timeout [ 106.116659][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 106.178107][ T5338] chnl_net:caif_netlink_parms(): no params data found [ 106.204206][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.215347][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.218182][ T5328] device bridge_slave_0 entered promiscuous mode [ 106.225261][ T5374] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 106.259745][ T5374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.282514][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.284513][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.293297][ T5328] device bridge_slave_1 entered promiscuous mode [ 106.390103][ T5374] bond1: (slave veth3): Enslaving as an active interface with a down link [ 106.418920][ T5328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.457952][ T5328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.467116][ T5374] bond1: (slave ip6erspan0): making interface the new active one [ 106.471103][ T5374] device ip6erspan0 entered promiscuous mode [ 106.484805][ T5374] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 106.494452][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 106.537006][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.540344][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.543505][ T5338] device bridge_slave_0 entered promiscuous mode [ 106.554137][ T5328] team0: Port device team_slave_0 added [ 106.556535][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.558510][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.561845][ T5338] device bridge_slave_1 entered promiscuous mode [ 106.566370][ T5328] team0: Port device team_slave_1 added [ 106.601535][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.603484][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.610765][ T5328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.618799][ T5338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.624119][ T5338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.627468][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.629358][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.636606][ T5328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.724214][ T5338] team0: Port device team_slave_0 added [ 106.749153][ T5338] team0: Port device team_slave_1 added [ 106.755628][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 106.815251][ T5386] netlink: 'syz.4.222': attribute type 10 has an invalid length. [ 106.823120][ T5386] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.825595][ T5386] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.944076][ T5386] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.946074][ T5386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.948103][ T5386] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.949895][ T5386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.977814][ T5386] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 107.037306][ T5328] device hsr_slave_0 entered promiscuous mode [ 107.065531][ T5328] device hsr_slave_1 entered promiscuous mode [ 107.126846][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.128695][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.135641][ T5338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.140269][ T5389] netlink: 'syz.0.223': attribute type 21 has an invalid length. [ 107.142298][ T5389] netlink: 'syz.0.223': attribute type 20 has an invalid length. [ 107.154181][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.158126][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.175166][ T5338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.308356][ T5338] device hsr_slave_0 entered promiscuous mode [ 107.355512][ T5338] device hsr_slave_1 entered promiscuous mode [ 107.405826][ T5338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.407860][ T5338] Cannot create hsr debugfs directory [ 108.008639][ T4137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.189648][ T4137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.204285][ T5317] Bluetooth: hci1: command 0x040f tx timeout [ 108.266756][ T4137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.335723][ T4137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.452559][ T5407] loop4: detected capacity change from 0 to 32768 [ 108.460701][ T5415] device syzkaller0 entered promiscuous mode [ 108.503346][ T5407] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.228 (5407) [ 108.547982][ T5407] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 108.550403][ T5407] BTRFS info (device loop4): setting nodatasum [ 108.551970][ T5407] BTRFS info (device loop4): force zlib compression, level 3 [ 108.553871][ T5407] BTRFS info (device loop4): metadata ratio 1 [ 108.556857][ T5407] BTRFS info (device loop4): enabling ssd optimizations [ 108.558820][ T5407] BTRFS info (device loop4): allowing degraded mounts [ 108.560621][ T5407] BTRFS info (device loop4): using free space tree [ 108.562344][ T5407] BTRFS info (device loop4): has skinny extents [ 108.687818][ T5434] udc-core: couldn't find an available UDC or it's busy [ 108.689755][ T5434] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 108.845298][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 109.058422][ T5328] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.838861][ T5443] netlink: 'syz.2.233': attribute type 21 has an invalid length. [ 109.840968][ T5443] netlink: 'syz.2.233': attribute type 20 has an invalid length. [ 109.880592][ T5328] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.998024][ T5328] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.079511][ T5328] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.285503][ T5315] Bluetooth: hci1: command 0x0419 tx timeout [ 110.375931][ T5328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.390700][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.393308][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.436083][ T5328] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.451286][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.453954][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.457084][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.458927][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.483186][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.497120][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.516076][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.537357][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.539300][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.572866][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.622774][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.638927][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.643242][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.650221][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.724405][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.738633][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.748243][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.758488][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.764614][ T5328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.772045][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.785309][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.787782][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.883331][ T5338] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.917247][ T4944] Bluetooth: hci2: command 0x0419 tx timeout [ 110.938278][ T5468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 110.998517][ T5338] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.047621][ T5338] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.106783][ T5338] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.154467][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.171550][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.208752][ T5328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.234920][ T5407] fs-verity (loop4, inode 260): Error -4 building Merkle tree [ 111.275674][ T5407] BTRFS: error (device loop4) in rollback_verity:465: errno=-4 unknown (failed to drop verity items in rollback 260) [ 111.294051][ T5407] BTRFS info (device loop4): forced readonly [ 111.303268][ T5407] BTRFS error (device loop4): failed to rollback verity items: -4 [ 111.427178][ T5493] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(35812212720268) <= P.seqno(0) <= S.SWH(35812212720342)) and (P.ackno exists or LAWL(129319333154134) <= P.ackno(129319333154135) <= S.AWH(129319333154135), sending SYNC... [ 111.482749][ T5338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.519687][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.522192][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.539094][ T5338] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.557486][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.560932][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.563494][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.565463][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.583096][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.678338][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.681128][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.683833][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.685822][ T4130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.696103][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.708809][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.724531][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.744308][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.760358][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.800031][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.810191][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.825038][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.830496][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.865769][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.869323][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.875618][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.878222][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.050744][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.074192][ T5513] netlink: 'syz.0.244': attribute type 21 has an invalid length. [ 112.077520][ T5513] netlink: 'syz.0.244': attribute type 20 has an invalid length. [ 112.086441][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.089238][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.092022][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.094441][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.101751][ T5328] device veth0_vlan entered promiscuous mode [ 112.170918][ T5328] device veth1_vlan entered promiscuous mode [ 112.219864][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 112.259685][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.262251][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.264980][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.281508][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.291099][ T5328] device veth0_macvtap entered promiscuous mode [ 112.299140][ T5328] device veth1_macvtap entered promiscuous mode [ 112.400339][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.408332][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.417542][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.422433][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.438581][ T5338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.450341][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.453045][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.479119][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.493210][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.505208][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.507906][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.525332][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.528040][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.537365][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.551801][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.554702][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.572779][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.576632][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.579044][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.622373][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.625083][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.642690][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.645118][ T5328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.648162][ T5328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.655973][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.848378][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.851124][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.858796][ T5328] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.861100][ T5328] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.863375][ T5328] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.875221][ T5328] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.891249][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.894074][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.245003][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.255075][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.276840][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.289453][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.378784][ T5338] device veth0_vlan entered promiscuous mode [ 113.486086][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.488354][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.492571][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.496784][ T5338] device veth1_vlan entered promiscuous mode [ 113.590777][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.593446][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.596591][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.608868][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.682272][ T5338] device veth0_macvtap entered promiscuous mode [ 113.692942][ T4130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.712308][ T5338] device veth1_macvtap entered promiscuous mode [ 113.716526][ T4130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.746354][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.754530][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.767826][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.851477][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.854221][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.875178][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.878085][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.880655][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.883234][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.905195][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.908116][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.910687][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.913305][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.926805][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.938056][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.943133][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.984978][ T4137] device hsr_slave_0 left promiscuous mode [ 114.006846][ T4137] device hsr_slave_1 left promiscuous mode [ 114.175835][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.177938][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.180536][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.182492][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.190128][ T4137] device bridge_slave_1 left promiscuous mode [ 114.191868][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.386776][ T4137] device bridge_slave_0 left promiscuous mode [ 114.391910][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.974077][ T4137] device hsr_slave_0 left promiscuous mode [ 115.055992][ T4137] device hsr_slave_1 left promiscuous mode [ 115.091418][ T5576] netlink: 40 bytes leftover after parsing attributes in process `syz.5.252'. [ 115.175559][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.192861][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.198096][ T4137] device bridge_slave_1 left promiscuous mode [ 115.199785][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.236759][ T4137] device bridge_slave_0 left promiscuous mode [ 115.238448][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.386177][ T4137] device veth1_macvtap left promiscuous mode [ 115.387817][ T4137] device veth0_macvtap left promiscuous mode [ 115.389293][ T4137] device veth1_vlan left promiscuous mode [ 115.395474][ T4137] device veth0_vlan left promiscuous mode [ 115.919879][ T5604] input: syz1 as /devices/virtual/input/input2 [ 115.993000][ T4137] team0 (unregistering): Port device team_slave_1 removed [ 116.031509][ T4137] team0 (unregistering): Port device team_slave_0 removed [ 116.068327][ T4137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.200316][ T4137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.202588][ T4137] bond0 (unregistering): Released all slaves [ 117.368844][ T4137] team0 (unregistering): Port device team_slave_1 removed [ 117.380440][ T4137] team0 (unregistering): Port device team_slave_0 removed [ 117.392752][ T4137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.453872][ T4137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.600076][ T4137] bond0 (unregistering): Released all slaves [ 117.701822][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.705642][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.708324][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.711188][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.713789][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.716554][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.719076][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.721763][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.728483][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.730582][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.733254][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.790287][ T5338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.792665][ T5338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.794897][ T5338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.825064][ T5338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.859695][ T5627] 9pnet_virtio: no channels available for device syz [ 117.967799][ T5634] fuse: Unknown parameter '0x0000000000000004' [ 117.979867][ T5634] Process accounting resumed [ 118.177703][ T4139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.180023][ T4139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.210759][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.222962][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.392115][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.405885][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.272402][ T153] device ip6erspan0 left promiscuous mode [ 120.891560][ T5669] loop0: detected capacity change from 0 to 32768 [ 120.997693][ T5669] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.276 (5669) [ 121.006043][ T5669] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 121.742992][ T5669] BTRFS info (device loop0): force zlib compression, level 3 [ 121.745062][ T5669] BTRFS info (device loop0): turning off barriers [ 121.754198][ T5669] BTRFS info (device loop0): turning on async discard [ 121.756424][ T5669] BTRFS info (device loop0): setting nodatacow [ 121.758015][ T5669] BTRFS info (device loop0): using free space tree [ 121.760394][ T5669] BTRFS info (device loop0): has skinny extents [ 122.083565][ T5712] fuse: Unknown parameter '0x0000000000000004' [ 122.087800][ T5712] Process accounting resumed [ 123.160946][ T5669] BTRFS info (device loop0): scrub: started on devid 1 [ 123.172628][ T5669] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 123.182775][ T5669] BTRFS info (device loop0): space_info 2 has 0 free, is not full [ 123.184937][ T5669] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 123.188885][ T5669] BTRFS info (device loop0): global_block_rsv: size 851968 reserved 851968 [ 123.191161][ T5669] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 123.193266][ T5669] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 123.195273][ T5669] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 123.197402][ T5669] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 123.261883][ T5669] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 124.896613][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 125.192855][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.194711][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.198394][ T5764] device bridge_slave_0 entered promiscuous mode [ 125.207153][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.209060][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.211696][ T5764] device bridge_slave_1 entered promiscuous mode [ 125.292644][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.298177][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.398422][ T5764] team0: Port device team_slave_0 added [ 125.417791][ T5764] team0: Port device team_slave_1 added [ 125.524553][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.555333][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.572679][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.607915][ T5800] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.610176][ T5800] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.612353][ T5800] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.614577][ T5800] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.663786][ T5800] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.666861][ T5800] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.669147][ T5800] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.671355][ T5800] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.825496][ T5800] device geneve2 entered promiscuous mode [ 125.908719][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.910521][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.945181][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.963827][ T5803] fuse: Unknown parameter 'fd0x0000000000000004' [ 126.013693][ T5803] Process accounting resumed [ 126.169140][ T5764] device hsr_slave_0 entered promiscuous mode [ 126.205568][ T4816] Bluetooth: hci2: command 0x0409 tx timeout [ 126.215619][ T5764] device hsr_slave_1 entered promiscuous mode [ 126.257041][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.258951][ T5764] Cannot create hsr debugfs directory [ 127.451918][ T5764] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.630451][ T5764] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.810308][ T5764] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.887039][ T5764] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.090975][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 128.137588][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 128.189064][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 128.213082][ T5850] fuse: Unknown parameter 'fd0x0000000000000004' [ 128.217566][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 128.225057][ T5831] loop5: detected capacity change from 0 to 32768 [ 128.252201][ T5850] Process accounting resumed [ 128.275409][ T4816] Bluetooth: hci2: command 0x041b tx timeout [ 128.300001][ T5831] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.301 (5831) [ 128.322308][ T5831] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 128.324669][ T5831] BTRFS info (device loop5): force zlib compression, level 3 [ 128.332968][ T5831] BTRFS info (device loop5): turning off barriers [ 128.340596][ T5831] BTRFS info (device loop5): turning on async discard [ 128.348188][ T5831] BTRFS info (device loop5): setting nodatacow [ 128.360645][ T5831] BTRFS info (device loop5): using free space tree [ 128.368020][ T5831] BTRFS info (device loop5): has skinny extents [ 128.518173][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.544005][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.547150][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.552104][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.558260][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.594435][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.618318][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.620179][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.643622][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.678893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.691270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.693799][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.695629][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.714704][ T144] Bluetooth: hci5: sending frame failed (-49) [ 128.814673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.828313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.831148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.866358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.888206][ T5831] BTRFS info (device loop5): scrub: started on devid 1 [ 128.905800][ T5831] BTRFS info (device loop5): left=0, need=98304, flags=2 [ 128.906637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.907637][ T5831] BTRFS info (device loop5): space_info 2 has 0 free, is not full [ 128.911281][ T5831] BTRFS info (device loop5): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 128.914588][ T5831] BTRFS info (device loop5): global_block_rsv: size 851968 reserved 851968 [ 128.916886][ T5831] BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0 [ 128.918802][ T5831] BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0 [ 128.920694][ T5831] BTRFS info (device loop5): delayed_block_rsv: size 0 reserved 0 [ 128.922640][ T5831] BTRFS info (device loop5): delayed_refs_rsv: size 0 reserved 0 [ 128.943833][ T5831] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [ 128.979203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.981992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.986421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.016935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.033481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.037178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.042482][ T5764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.664540][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.666752][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.702935][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.783179][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.786298][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.831289][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.834099][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.863532][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.869949][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.902654][ T5764] device veth0_vlan entered promiscuous mode [ 129.913035][ T5764] device veth1_vlan entered promiscuous mode [ 129.979629][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.982096][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.984954][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.995668][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.030301][ T5764] device veth0_macvtap entered promiscuous mode [ 130.040180][ T5764] device veth1_macvtap entered promiscuous mode [ 130.097308][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.100027][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.122743][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.135819][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.138194][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.140510][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.163309][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.172099][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.184981][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.198231][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.202187][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.204097][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.211764][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.231178][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.236074][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.276113][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.278890][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.285819][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.288322][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.290841][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.313817][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.323971][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.334096][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.344242][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.347259][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.355483][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.363137][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.365668][ T4770] Bluetooth: hci2: command 0x040f tx timeout [ 130.371423][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.423483][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.426137][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.428222][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.440775][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.611770][ T4139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.614061][ T4139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.624933][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.703194][ T4139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.710888][ T4139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.755627][ T4676] Bluetooth: hci5: command 0x1003 tx timeout [ 130.757254][ T144] Bluetooth: hci5: sending frame failed (-49) [ 130.785434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.898190][ T4137] device hsr_slave_0 left promiscuous mode [ 130.945756][ T4137] device hsr_slave_1 left promiscuous mode [ 131.020440][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.022460][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.027192][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.029120][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.043651][ T4137] device bridge_slave_1 left promiscuous mode [ 131.045656][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.077009][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.078680][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.087799][ T4137] device bridge_slave_0 left promiscuous mode [ 131.089396][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.365453][ T4137] device veth1_macvtap left promiscuous mode [ 131.367108][ T4137] device veth0_macvtap left promiscuous mode [ 131.368703][ T4137] device veth1_vlan left promiscuous mode [ 131.370218][ T4137] device veth0_vlan left promiscuous mode [ 132.374763][ T4137] team0 (unregistering): Port device team_slave_1 removed [ 132.413911][ T4137] team0 (unregistering): Port device team_slave_0 removed [ 132.438376][ T4137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.483157][ T4137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.683303][ T4137] bond0 (unregistering): Released all slaves [ 132.816418][ T5937] netlink: 'syz.2.315': attribute type 21 has an invalid length. [ 132.818527][ T5937] netlink: 'syz.2.315': attribute type 20 has an invalid length. [ 132.893656][ T4944] Bluetooth: hci5: command 0x1001 tx timeout [ 132.895933][ T144] Bluetooth: hci5: sending frame failed (-49) [ 133.932537][ T144] Bluetooth: hci1: Unknown advertising packet type: 0x3131 [ 133.932678][ T144] ================================================================== [ 133.937081][ T144] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xdf8/0x31c0 [ 133.939122][ T144] Read of size 2 at addr ffff0000d721f400 by task kworker/u5:0/144 [ 133.941213][ T144] [ 133.941821][ T144] CPU: 1 PID: 144 Comm: kworker/u5:0 Not tainted 5.15.177-syzkaller #0 [ 133.943851][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 133.946323][ T144] Workqueue: hci1 hci_rx_work [ 133.947573][ T144] Call trace: [ 133.948380][ T144] dump_backtrace+0x0/0x530 [ 133.949538][ T144] show_stack+0x2c/0x3c [ 133.950549][ T144] dump_stack_lvl+0x108/0x170 [ 133.951736][ T144] print_address_description+0x7c/0x3f0 [ 133.953268][ T144] kasan_report+0x174/0x1e4 [ 133.954395][ T144] __asan_report_load_n_noabort+0x40/0x4c [ 133.955874][ T144] hci_le_meta_evt+0xdf8/0x31c0 [ 133.957097][ T144] hci_event_packet+0xd34/0x12b4 [ 133.958356][ T144] hci_rx_work+0x1d0/0x830 [ 133.959554][ T144] process_one_work+0x790/0x11b8 [ 133.960783][ T144] worker_thread+0x910/0x1034 [ 133.961979][ T144] kthread+0x37c/0x45c [ 133.963002][ T144] ret_from_fork+0x10/0x20 [ 133.964142][ T144] [ 133.964706][ T144] Allocated by task 5962: [ 133.965790][ T144] ____kasan_kmalloc+0xbc/0xfc [ 133.967014][ T144] __kasan_kmalloc+0x10/0x1c [ 133.968261][ T144] __kmalloc_node_track_caller+0x234/0x448 [ 133.969729][ T144] kmalloc_reserve+0xe8/0x270 [ 133.971004][ T144] __alloc_skb+0x1a4/0x584 [ 133.972059][ T144] vhci_write+0xb8/0x3b8 [ 133.973102][ T144] vfs_write+0x884/0xb44 [ 133.974198][ T144] ksys_write+0x15c/0x26c [ 133.975358][ T144] __arm64_sys_write+0x7c/0x90 [ 133.976623][ T144] invoke_syscall+0x98/0x2b8 [ 133.977770][ T144] el0_svc_common+0x138/0x258 [ 133.978961][ T144] do_el0_svc+0x58/0x14c [ 133.980047][ T144] el0_svc+0x7c/0x1f0 [ 133.981060][ T144] el0t_64_sync_handler+0x84/0xe4 [ 133.982365][ T144] el0t_64_sync+0x1a0/0x1a4 [ 133.983522][ T144] [ 133.984141][ T144] The buggy address belongs to the object at ffff0000d721f000 [ 133.984141][ T144] which belongs to the cache kmalloc-1k of size 1024 [ 133.987809][ T144] The buggy address is located 0 bytes to the right of [ 133.987809][ T144] 1024-byte region [ffff0000d721f000, ffff0000d721f400) [ 133.991334][ T144] The buggy address belongs to the page: [ 133.992695][ T144] page:00000000eb2b3316 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117218 [ 133.995353][ T144] head:00000000eb2b3316 order:3 compound_mapcount:0 compound_pincount:0 [ 133.997593][ T144] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 133.999680][ T144] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002780 [ 134.001909][ T144] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 134.004152][ T144] page dumped because: kasan: bad access detected [ 134.005784][ T144] [ 134.006377][ T144] Memory state around the buggy address: [ 134.007808][ T144] ffff0000d721f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.009899][ T144] ffff0000d721f380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.012003][ T144] >ffff0000d721f400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.014066][ T144] ^ [ 134.015182][ T144] ffff0000d721f480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.017239][ T144] ffff0000d721f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.019236][ T144] ================================================================== [ 134.021381][ T144] Disabling lock debugging due to kernel taint [ 134.918294][ T4676] Bluetooth: hci5: command 0x1009 tx timeout [ 135.550117][ T4137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.600102][ T4137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.649587][ T4137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.703780][ T4137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.346043][ T4137] device hsr_slave_0 left promiscuous mode [ 137.379662][ T4137] device hsr_slave_1 left promiscuous mode [ 137.455423][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.457334][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.459680][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.461582][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.467841][ T4137] device bridge_slave_1 left promiscuous mode [ 137.469458][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.507354][ T4137] device bridge_slave_0 left promiscuous mode [ 137.508998][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.635571][ T4137] device veth1_macvtap left promiscuous mode [ 137.637252][ T4137] device veth0_macvtap left promiscuous mode [ 137.638851][ T4137] device veth1_vlan left promiscuous mode [ 137.640340][ T4137] device veth0_vlan left promiscuous mode [ 137.849718][ T4137] team0 (unregistering): Port device team_slave_1 removed [ 137.859160][ T4137] team0 (unregistering): Port device team_slave_0 removed [ 137.868046][ T4137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.924217][ T4137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.082613][ T4137] bond0 (unregistering): Released all slaves