last executing test programs: 6m30.434558372s ago: executing program 4 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) 6m30.321483742s ago: executing program 4 (id=325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000300)={@remote, r2}, 0x14) 6m30.170382875s ago: executing program 4 (id=333): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000280)="5717c7", 0x3}], 0x1) 6m30.068982965s ago: executing program 4 (id=335): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @unused, @subvolid=0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x5000943f, &(0x7f0000001480)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid=0x40003}) 6m29.407357214s ago: executing program 4 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x100) 6m28.879898182s ago: executing program 4 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) 6m27.967609964s ago: executing program 32 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) 5m21.019102704s ago: executing program 2 (id=707): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2b27, 0x11, 0x0, 0x27) 5m19.959918979s ago: executing program 2 (id=713): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0x14, 0x7, 0x9}, 0x9c) 5m18.579355794s ago: executing program 2 (id=720): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x35c}, {&(0x7f0000000fc0)=""/4096, 0x1f4}, {&(0x7f0000000400)=""/106, 0x56c}, {&(0x7f0000000740)=""/73, 0x17}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m18.539448137s ago: executing program 2 (id=721): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x20000800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x0) r5 = open_tree(r4, &(0x7f0000000280)='\x00', 0x81000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kvm_dirty_ring_exit\x00', r5, 0x0, 0x7}, 0x18) renameat2(r5, &(0x7f0000000080)='./file1\x00', r5, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_usbip_server_init(0x1) socket(0x80000000000000a, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) 5m16.037913722s ago: executing program 2 (id=731): r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @unused, @subvolid=0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x5000943f, &(0x7f0000001480)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid=0x40003}) 5m15.555464696s ago: executing program 0 (id=732): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 5m15.483610082s ago: executing program 2 (id=733): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x35c}, {&(0x7f0000000fc0)=""/4096, 0x1f4}, {&(0x7f0000000400)=""/106, 0x56c}, {&(0x7f0000000740)=""/73, 0x17}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m14.666257426s ago: executing program 0 (id=736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c0e8b089b32323b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdc69c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d9560ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f733b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0185502, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x28002, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES64], 0x3, 0x276, &(0x7f00000008c0)="$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") 5m13.479282623s ago: executing program 0 (id=740): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x100) 5m4.843731661s ago: executing program 0 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0185502, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x28002, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES64], 0x3, 0x276, &(0x7f00000008c0)="$eJzs3E9LHGccB/DfdlddhbIeCtJS6JReelrU0rtSFEoXWlqWUumhUldadqzggrB78M+pb6Kl76A55hrIIeSSQ95ACAQTyCXeQghscHc1KquzMeiG+Plc5mH8fef3zDjMKOw+v326Vl9Zb6zu7+9FsZiLwlzMxYuIyfgg8tG1EwDA++R5ux3P2l3DngsAcDW8/wHg+hnw/f9Dd7N9VdMCAC6R//8B4Pr56Zel7+YrlYUfk6QYsfb3ZnWz2tmO9wpW489IoxbTUYqXEe0j3fHit5WF6eTA48morm338tub1e6nB+cP8zNRisl++dzCTNJ1Mj8SE738g4moxWyU4qP+/Wf75kfjyy+O9S9HKe7/HuuRxkocZF/nt2aS5JvvK0kU4lh+rFPXMd730vl7CQAAAAAAAAAAAAAAAAAAAACACysnR/qu31Mun/Xzbn7+7PWBiifXBzq9Pk8hPimEZQcBAAAAAAAAAAAAAAAAAAAgIhrNVn05TWsb5w3+uvv/7aya5t69nZ+zalr1XK9vdtPLHnz4+aN/zq7ZzWVfn1xGi3zvGG84sVufndrza36A4+R2BmhR7F397GnkM6Z6Z++Pj79qTH3dvyYfQ/idjpx3az0tRfRN7b519xtDvY0PzzqzeOrfueWbWw+fDHrkk8+JpbFLfhABAAAAAAAAAAAAAAAAAACd77cXLxK8UAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k2NZqu+nKa10Wi2/os0rW0c7jl3sDhAzdFg2OcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvAgAA///E5ZZq") 5m4.834903631s ago: executing program 3 (id=752): r0 = io_uring_setup(0x7ab1, &(0x7f0000000300)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close_range(r0, 0xffffffffffffffff, 0x0) 5m1.702086004s ago: executing program 0 (id=743): r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @unused, @subvolid=0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x5000943f, &(0x7f0000001480)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid=0x40003}) 5m1.673442506s ago: executing program 3 (id=745): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2b27, 0x11, 0x0, 0x27) 5m1.63350214s ago: executing program 3 (id=746): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 4m59.696941894s ago: executing program 33 (id=733): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x35c}, {&(0x7f0000000fc0)=""/4096, 0x1f4}, {&(0x7f0000000400)=""/106, 0x56c}, {&(0x7f0000000740)=""/73, 0x17}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4m59.689340415s ago: executing program 3 (id=748): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 4m59.679401326s ago: executing program 0 (id=759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000280)="5717c7", 0x3}], 0x1) 4m58.063115561s ago: executing program 3 (id=760): r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @unused, @subvolid=0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x5000943f, &(0x7f0000001480)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid=0x40003}) 4m57.96935745s ago: executing program 3 (id=763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 4m44.616028703s ago: executing program 34 (id=759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000280)="5717c7", 0x3}], 0x1) 4m42.385828533s ago: executing program 35 (id=763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 30.70475668s ago: executing program 8 (id=1794): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) 20.066832101s ago: executing program 8 (id=1799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0185502, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x28002, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES64], 0x3, 0x276, &(0x7f00000008c0)="$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") 20.018839065s ago: executing program 5 (id=1800): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$eJzs3E1PXNUbAPDnXqDNn/YvVfENW0VbW7QKQhU1MU3YuSC60IXbCVBs5EULJrYhBhIXbk3sB9C4tR/BaBNfNroy3arRhZoQU1g0sYsxd94Y6AztKPQa5vdL7vScO2d6zr1Pnzt3Tk9uAG2rP3tJIg5GxA8R0VOubm7QX/5j/erSRLYlUSy++mdSard2dWmi2rT6uQPZSxoxkEak7yfxYIN+F85feLMwMzN1rlIfWpx9a2jh/IWnzs4Wpqemp+aGTw2Pjj737PMjw9sNv+9gC8f60vfrv37S+fLcpxfX5q6dHunOxlv9fP1x7JT+6N98Lusc3+nOcnZPXTnpzHEgtKQjIrJwdZXyvyc6YiN4PfHNT7kODthVxcz+pm8vF4E9LIm8RwDko/pFn/3+rW4N7gP+Ku7WDQi5Wh0r/wBcq8ztrNfi3xlpufD28a++3PT7fif1R8Tr468cybbYpXkYAAAAgHb2xVhEPNlo/i+Ne+vaZeX7IuL+iHggIvoiSut6DkfEkYh4KCIerq4nasHW9lvmf5r/zyQ7YnUs4sW6tV3rdfGvONRRqf0/q0RXcubszNTTEXFHRAxE1/6svt0qrdk3Ct81e29j/u9yd3nP0kR1LrAyjj86t/wrmCwsFv7xAbPJ6kpEX2ej+Ce1lUBJRDwSEY/eyl/4dWlF3XTvpeu1XS98cPeVZs3r53+zLet/c/zZTcWPI040zP+VWptk+/WZQ6XrwVD1qnCjby+Oftasf/HPV5b/3Q3jX1u5eiipX6+70Hofl3t//rHZe9eLxeL28W98/d+XvFYa4L7KvncLi4vnhiP2JeM37h9pfcx7VfV8VM9XFv+Boxvx32iZxl2VUnZCj0bEsYh4rLJ2+UTpuz/i8Yh4IiJObtPn8vQvTe/j5H++svhPtpT/rRd+X/nwWLP+bx7/LP+fKQ1moLLH/d/N3WqA8h4nAAAAAAAAADsjLT0DL0kHa+U0HRwsP8OvN7rTmfmFxZNn5t+Zmyw/K+9QdKXVlV49detBh0vljfrIlvqpiLgzIj7q+F+pPjgxPzOZ98FDmzvQJP8zv3XkPTpg13leK7Qv+Q/tS/5D+5L/0L7kP7Qv+Q/tS/5D+6rk/3Le4wBuv63f/+9dGT997fPDl3IaDnAbuf+HtvRvnuunoKCwVwt5X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/hv+DgAA///vYdKh") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x0, 0x2, 0x0, 0x0, 0x9, 0x200}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 19.954840291s ago: executing program 7 (id=1802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 19.879420368s ago: executing program 1 (id=1804): r0 = socket$alg(0x26, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000005400)=[{{0x0, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a07", 0x2ff80}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x1ed}], 0x3}}], 0x4000000000001ee, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xb) 18.899253068s ago: executing program 8 (id=1806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x20000800) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x81000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kvm_dirty_ring_exit\x00', r3, 0x0, 0x7}, 0x18) r4 = syz_usbip_server_init(0x1) socket(0x80000000000000a, 0x2, 0x0) write$usbip_server(r4, &(0x7f00000000c0)=@ret_unlink={{0x4, 0x6, 0x0, 0x0, 0x400}, {0x6}}, 0x30) r5 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) 17.835865166s ago: executing program 5 (id=1807): io_uring_setup(0x497c, &(0x7f00000001c0)) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) 17.552504392s ago: executing program 5 (id=1809): mount(0x0, 0x0, 0x0, 0x10401, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r3, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4000}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {}, {}, {}, 0xfffffffc, 0x0, 0xa, 0x4, 0x0, 0x21}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 16.394278649s ago: executing program 5 (id=1811): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r2, 0x0) 16.128251864s ago: executing program 5 (id=1813): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffe}, {0x1}], 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900970004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r1, 0xc) 16.05376818s ago: executing program 5 (id=1814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x101100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) timer_create(0x3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) 15.892396976s ago: executing program 6 (id=1816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0185502, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x28002, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES64], 0x3, 0x276, &(0x7f00000008c0)="$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") 14.898652527s ago: executing program 6 (id=1817): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x77}, 0x8) 14.803970226s ago: executing program 6 (id=1818): openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}}) syz_emit_ethernet(0x46, &(0x7f0000000500)={@multicast, @remote, @void, {@mpls_uc={0x8847, {[{0x8000, 0x0, 0x1}, {}], @ipv4=@icmp={{0x7, 0x4, 0x1, 0x8, 0x30, 0x68, 0x0, 0x5, 0x1, 0x0, @empty, @loopback, {[@cipso={0x86, 0x6, 0x2}]}}, @timestamp={0xd, 0x0, 0x0, 0x2, 0x9, 0x8, 0x5, 0x1780000}}}}}}, 0x0) 14.551913799s ago: executing program 8 (id=1819): io_uring_setup(0x497c, &(0x7f00000001c0)) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), 0x0, 0x0, 0xfffffffffffffffe) 13.687604789s ago: executing program 6 (id=1820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/18, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2242}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x7ebb}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 13.66735412s ago: executing program 1 (id=1821): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 13.633691084s ago: executing program 8 (id=1822): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 12.618199107s ago: executing program 1 (id=1823): mount(0x0, 0x0, 0x0, 0x10401, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r3, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4000}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {}, {}, {}, 0xfffffffc, 0x0, 0xa, 0x4, 0x0, 0x21}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 12.611767458s ago: executing program 7 (id=1833): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11.546812086s ago: executing program 1 (id=1824): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffe}, {0x1}], 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900970004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) 11.516656659s ago: executing program 1 (id=1825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x100) 10.84989837s ago: executing program 7 (id=1826): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x0) 1.113592638s ago: executing program 6 (id=1827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0185502, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x28002, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES64], 0x3, 0x276, &(0x7f00000008c0)="$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") 1.094772809s ago: executing program 7 (id=1828): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r1, 0x77}, 0x8) 1.022931306s ago: executing program 8 (id=1829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x20000800) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x81000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kvm_dirty_ring_exit\x00', r3, 0x0, 0x7}, 0x18) r4 = syz_usbip_server_init(0x1) socket(0x80000000000000a, 0x2, 0x0) write$usbip_server(r4, &(0x7f00000000c0)=@ret_unlink={{0x4, 0x6, 0x0, 0x0, 0x400}, {0x6}}, 0x30) r5 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) 933.280274ms ago: executing program 36 (id=1814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x101100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) timer_create(0x3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) 876.986799ms ago: executing program 1 (id=1831): r0 = socket$alg(0x26, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000005400)=[{{0x0, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a07", 0x2ff80}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x1ed}], 0x3}}], 0x4000000000001ee, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xb) 162.029995ms ago: executing program 7 (id=1832): io_uring_setup(0x497c, &(0x7f00000001c0)) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), 0x0, 0x0, 0xfffffffffffffffe) 4.00571ms ago: executing program 7 (id=1834): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=1843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0185502, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x28002, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES64], 0x3, 0x276, &(0x7f00000008c0)="$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") kernel console output (not intermixed with test programs): tent configuration, please check. [ 223.667719][ T7671] tipc: Enabling of bearer rejected, already enabled [ 223.683435][ T7671] tipc: Bearer : already 2 bearers with priority 10 [ 223.686268][ T7671] tipc: Bearer : trying with adjusted priority [ 223.688080][ T7671] tipc: Enabling of bearer rejected, failed to enable media [ 223.691649][ T7671] tipc: Enabling of bearer rejected, already enabled [ 223.755508][ T4303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.761734][ T4303] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.764445][ T4303] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.768536][ T4303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.771816][ T4303] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.773663][ T4303] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.871600][ T7677] tipc: Enabling of bearer rejected, already enabled [ 223.944664][ T7682] loop5: detected capacity change from 0 to 128 [ 223.954605][ T7682] EXT4-fs: Ignoring removed nobh option [ 223.974084][ T7682] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 224.034658][ T7682] EXT4-fs error (device loop5): __ext4_remount:6449: comm syz.5.755: Abort forced by user [ 224.039180][ T7682] EXT4-fs (loop5): Remounting filesystem read-only [ 224.041079][ T7682] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 224.060141][ T5925] EXT4-fs (loop5): unmounting filesystem. [ 224.190146][ T4389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.471762][ T7689] loop5: detected capacity change from 0 to 256 [ 225.003839][ T4389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.186653][ T4389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.193796][ T7673] chnl_net:caif_netlink_parms(): no params data found [ 225.298070][ T4389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.906487][ T47] Bluetooth: hci5: command tx timeout [ 226.253237][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.260525][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.271205][ T7673] device bridge_slave_0 entered promiscuous mode [ 226.312005][ T7707] tipc: Enabling of bearer rejected, already enabled [ 226.315267][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.316934][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.319499][ T7673] device bridge_slave_1 entered promiscuous mode [ 226.353881][ T7707] tipc: Bearer : already 2 bearers with priority 10 [ 226.363232][ T7707] tipc: Bearer : trying with adjusted priority [ 226.364947][ T7707] tipc: Enabling of bearer rejected, failed to enable media [ 226.383170][ T7707] tipc: Enabling of bearer rejected, already enabled [ 226.397460][ T7673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.401297][ T7673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.466314][ T7673] team0: Port device team_slave_0 added [ 226.474143][ T7673] team0: Port device team_slave_1 added [ 226.528234][ T4389] tipc: Disabling bearer [ 226.532212][ T4389] tipc: Disabling bearer [ 226.533627][ T4389] tipc: Disabling bearer [ 226.535507][ T4389] tipc: Left network mode [ 226.555118][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.556498][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.572338][ T7673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.576249][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.577717][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.608473][ T7673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.616319][ T7714] tipc: Enabling of bearer rejected, already enabled [ 226.832551][ T7673] device hsr_slave_0 entered promiscuous mode [ 226.855310][ T7673] device hsr_slave_1 entered promiscuous mode [ 226.897172][ T7673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.899123][ T7673] Cannot create hsr debugfs directory [ 227.461682][ T7673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.578249][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.580553][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.595652][ T7673] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.600504][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.621469][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.623672][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.625175][ T4541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.642411][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.793110][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.795671][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.797798][ T4612] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.799595][ T4612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.801553][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.804056][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.833828][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.856443][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.859028][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.865472][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.876279][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.884082][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.886820][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.897965][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.900239][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.904217][ T7673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.929169][ T4303] Bluetooth: hci5: command tx timeout [ 228.882639][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.884387][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.929934][ T4389] device hsr_slave_0 left promiscuous mode [ 228.961032][ T4389] device hsr_slave_1 left promiscuous mode [ 229.010729][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.012478][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.014611][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.017090][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.029604][ T4389] device bridge_slave_1 left promiscuous mode [ 229.031042][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.079342][ T4389] device bridge_slave_0 left promiscuous mode [ 229.080789][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.220725][ T4389] device veth1_macvtap left promiscuous mode [ 229.222153][ T4389] device veth0_macvtap left promiscuous mode [ 229.223562][ T4389] device veth1_vlan left promiscuous mode [ 229.229072][ T4389] device veth0_vlan left promiscuous mode [ 230.004991][ T47] Bluetooth: hci5: command tx timeout [ 231.579824][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 231.728065][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 231.888320][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.076916][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.085314][ T4303] Bluetooth: hci5: command tx timeout [ 233.926804][ T4389] bond0 (unregistering): Released all slaves [ 234.190394][ T7673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.645138][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.647693][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.692588][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.695449][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.697754][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.700328][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.703677][ T7673] device veth0_vlan entered promiscuous mode [ 234.723225][ T7673] device veth1_vlan entered promiscuous mode [ 234.777116][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 234.779775][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 234.782028][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.784304][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.794371][ T7673] device veth0_macvtap entered promiscuous mode [ 234.799951][ T7673] device veth1_macvtap entered promiscuous mode [ 234.819248][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.821388][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.823431][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.845274][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.847303][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.849432][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.851543][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.853820][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.866146][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.868096][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.870218][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 234.872244][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.874468][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.887741][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.890014][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.892107][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.894239][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.904944][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.907299][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.909575][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.911855][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.936506][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.938582][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.941066][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.100149][ T4762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.102092][ T4762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.127959][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.174137][ T4762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.181801][ T4762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.188916][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 235.326423][ T7787] tipc: Enabling of bearer rejected, already enabled [ 235.370819][ T7790] tipc: Enabling of bearer rejected, already enabled [ 235.391996][ T7790] tipc: Enabling of bearer rejected, failed to enable media [ 235.411429][ T7790] tipc: Enabling of bearer rejected, already enabled [ 236.336968][ T7802] tipc: Enabling of bearer rejected, already enabled [ 236.353470][ T7805] tipc: Enabling of bearer rejected, already enabled [ 236.356704][ T7802] tipc: Bearer : already 2 bearers with priority 10 [ 236.358460][ T7802] tipc: Bearer : trying with adjusted priority [ 236.360135][ T7802] tipc: Enabling of bearer rejected, failed to enable media [ 236.387485][ T7802] tipc: Enabling of bearer rejected, already enabled [ 236.494124][ T7811] loop6: detected capacity change from 0 to 1024 [ 237.590922][ T47] Bluetooth: hci4: link tx timeout [ 237.592158][ T47] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 237.594032][ T47] Bluetooth: hci4: link tx timeout [ 237.595878][ T47] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 238.038988][ T7832] loop6: detected capacity change from 0 to 32768 [ 238.052284][ T7832] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.772 (7832) [ 238.068169][ T7832] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 238.070559][ T7832] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 238.072417][ T7832] BTRFS info (device loop6): enabling auto defrag [ 238.073910][ T7832] BTRFS info (device loop6): use no compression [ 238.088453][ T7832] BTRFS info (device loop6): force clearing of disk cache [ 238.090123][ T7832] BTRFS info (device loop6): max_inline at 4096 [ 238.091531][ T7832] BTRFS info (device loop6): disabling free space tree [ 238.223305][ T7832] BTRFS info (device loop6): enabling ssd optimizations [ 238.225820][ T7832] BTRFS info (device loop6): rebuilding free space tree [ 238.248555][ T7832] BTRFS info (device loop6): disabling free space tree [ 238.250209][ T7832] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 238.252438][ T7832] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 238.336588][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.343514][ T7673] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 238.348120][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.891053][ T7877] tipc: Enabling of bearer rejected, already enabled [ 238.910780][ T4306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.098301][ T4306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.390060][ T4296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.605435][ T4296] Bluetooth: hci4: command 0x0406 tx timeout [ 239.673327][ T4296] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.675745][ T4296] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 239.677565][ T4296] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.678244][ T7877] tipc: Bearer : already 2 bearers with priority 10 [ 239.704997][ T7877] tipc: Bearer : trying with adjusted priority [ 239.706705][ T7877] tipc: Enabling of bearer rejected, failed to enable media [ 239.710927][ T7877] tipc: Enabling of bearer rejected, already enabled [ 241.151407][ T4296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.159335][ T4296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.162079][ T4296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.165917][ T4296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.168548][ T4296] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.170460][ T4296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.184535][ T7880] chnl_net:caif_netlink_parms(): no params data found [ 241.419223][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.420798][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.423286][ T7880] device bridge_slave_0 entered promiscuous mode [ 241.428080][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.429641][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.431868][ T7880] device bridge_slave_1 entered promiscuous mode [ 241.450361][ T7917] loop6: detected capacity change from 0 to 32768 [ 241.464262][ T7917] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.791 (7917) [ 241.471972][ T7880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.477317][ T7880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.494584][ T7917] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 241.497226][ T7917] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 241.499146][ T7917] BTRFS info (device loop6): enabling auto defrag [ 241.500537][ T7917] BTRFS info (device loop6): use no compression [ 241.501817][ T7917] BTRFS info (device loop6): force clearing of disk cache [ 241.503467][ T7917] BTRFS info (device loop6): max_inline at 4096 [ 241.515335][ T7917] BTRFS info (device loop6): disabling free space tree [ 241.557256][ T7880] team0: Port device team_slave_0 added [ 241.571777][ T7880] team0: Port device team_slave_1 added [ 241.604183][ T7880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.606721][ T7880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.612308][ T7880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.620792][ T7880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.632618][ T7880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.660756][ T7880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.665066][ T7917] BTRFS info (device loop6): enabling ssd optimizations [ 241.668408][ T7917] BTRFS info (device loop6): rebuilding free space tree [ 241.694377][ T7917] BTRFS info (device loop6): disabling free space tree [ 241.721943][ T7917] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 241.724065][ T7917] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 241.765155][ T4296] Bluetooth: hci0: command tx timeout [ 241.846808][ T7880] device hsr_slave_0 entered promiscuous mode [ 241.852315][ T7673] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 241.886434][ T7880] device hsr_slave_1 entered promiscuous mode [ 242.080882][ T7922] chnl_net:caif_netlink_parms(): no params data found [ 242.233204][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.235936][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.238389][ T7922] device bridge_slave_0 entered promiscuous mode [ 242.317107][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.318911][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.324186][ T7922] device bridge_slave_1 entered promiscuous mode [ 242.358514][ T7974] tipc: Started in network mode [ 242.361938][ T7974] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 242.367117][ T7974] tipc: Enabled bearer , priority 10 [ 242.382465][ T7974] tipc: Enabling of bearer rejected, failed to enable media [ 242.399623][ T7974] tipc: New replicast peer: 255.255.255.255 [ 242.401517][ T7974] tipc: Enabled bearer , priority 10 [ 242.436062][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.461961][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.523895][ T7880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.534514][ T7914] loop5: detected capacity change from 0 to 131072 [ 242.542744][ T7914] F2FS-fs (loop5): QUOTA feature is enabled, so ignore jquota_fmt [ 242.571358][ T7914] F2FS-fs (loop5): Found nat_bits in checkpoint [ 242.589026][ T7914] F2FS-fs (loop5): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 242.597644][ T7922] team0: Port device team_slave_0 added [ 242.601044][ T7922] team0: Port device team_slave_1 added [ 242.618738][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.620191][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.625676][ T7922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.629436][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.630910][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.636684][ T7922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.663905][ T7914] F2FS-fs (loop5): Failed to read root inode [ 242.738078][ T7922] device hsr_slave_0 entered promiscuous mode [ 242.766439][ T7922] device hsr_slave_1 entered promiscuous mode [ 242.951271][ T7922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.958533][ T7922] Cannot create hsr debugfs directory [ 243.206630][ T4296] Bluetooth: hci2: command tx timeout [ 243.525344][ T4445] tipc: Node number set to 4269801491 [ 243.537989][ T7880] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.561915][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.564091][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.575787][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.578438][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.580610][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.582205][ T7649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.588276][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.597218][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.602833][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.604514][ T7649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.612165][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.614762][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.622981][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.626502][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.628919][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.631305][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.633800][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.637769][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.656910][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.659108][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.723686][ T7880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.735705][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.743280][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.747891][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.845133][ T4296] Bluetooth: hci0: command tx timeout [ 243.912895][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.943723][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.951892][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.958354][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.963517][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.980319][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.989208][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.990749][ T4444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.993097][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.068172][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.070966][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.073047][ T4612] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.074606][ T4612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.089340][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.092064][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.102905][ T7880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.108405][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.110161][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.120429][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.124198][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.133634][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.139241][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.142333][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.158189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.160917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.165106][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.190116][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.490388][ T7922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.085305][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.087873][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.101987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.104385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.108561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.110764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.118708][ T7880] device veth0_vlan entered promiscuous mode [ 245.122624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.124464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.130286][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.140946][ T7880] device veth1_vlan entered promiscuous mode [ 245.177438][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.180092][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.182269][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.184606][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.189085][ T7880] device veth0_macvtap entered promiscuous mode [ 245.193266][ T7880] device veth1_macvtap entered promiscuous mode [ 245.203687][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.206248][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.208306][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.210590][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.212727][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.223559][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.226177][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.228368][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.230409][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.232742][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.237997][ T7880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.239708][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.242240][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.244488][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.247618][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.253297][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.256080][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.258329][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.260472][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.262616][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.274668][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.277034][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.279343][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.281336][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.283486][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.294587][ T7880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.294918][ T47] Bluetooth: hci2: command tx timeout [ 245.297590][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.299975][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.309565][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.315241][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.337548][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.340119][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.342670][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.345442][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.352453][ T7922] device veth0_vlan entered promiscuous mode [ 245.363506][ T7922] device veth1_vlan entered promiscuous mode [ 245.400833][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.403188][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.406549][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.409018][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.416017][ T7922] device veth0_macvtap entered promiscuous mode [ 245.437459][ T7922] device veth1_macvtap entered promiscuous mode [ 245.460990][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.463336][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.463958][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.469248][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.471639][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.473979][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.477590][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.479955][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.482269][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.484525][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.487688][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.489995][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.492159][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.494356][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.499062][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.508401][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.510787][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.513024][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.515325][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.517611][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.524094][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.527513][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.529901][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.532170][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.534428][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.537432][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.539614][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.542059][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.544291][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.547346][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.549481][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.551925][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.557938][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.559572][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.562464][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.566600][ T4762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.568710][ T4762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.574549][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.721144][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.723266][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.621325][ T47] Bluetooth: hci0: command tx timeout [ 246.749089][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.752168][ T4612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.755617][ T4612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.760443][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.824015][ T8040] loop7: detected capacity change from 0 to 1024 [ 247.097318][ T8048] tipc: Enabling of bearer rejected, already enabled [ 247.102193][ T8048] tipc: Bearer : already 2 bearers with priority 10 [ 247.109680][ T8048] tipc: Bearer : trying with adjusted priority [ 247.113462][ T8048] tipc: Enabling of bearer rejected, failed to enable media [ 247.385037][ T4296] Bluetooth: hci2: command tx timeout [ 247.650883][ T8048] tipc: Enabling of bearer rejected, already enabled [ 248.002973][ T8042] loop1: detected capacity change from 0 to 32768 [ 249.575111][ T47] Bluetooth: hci0: command tx timeout [ 249.586743][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.588102][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.925530][ T4296] Bluetooth: hci2: command tx timeout [ 250.956796][ T8042] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.801 (8042) [ 251.165785][ T8081] tipc: Started in network mode [ 251.167117][ T8081] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 251.171989][ T8081] tipc: Enabled bearer , priority 10 [ 251.208031][ T8081] tipc: Enabling of bearer rejected, failed to enable media [ 251.216669][ T8081] tipc: New replicast peer: 255.255.255.255 [ 251.228562][ T8081] tipc: Enabled bearer , priority 10 [ 252.103727][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.115886][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.156636][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.158657][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.289988][ T4899] tipc: Node number set to 4269801491 [ 252.488427][ T8115] loop6: detected capacity change from 0 to 512 [ 253.462221][ T8128] loop8: detected capacity change from 0 to 256 [ 253.517772][ T8128] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 253.569358][ T8130] tipc: Enabling of bearer rejected, already enabled [ 253.582900][ T8130] tipc: Bearer : already 2 bearers with priority 10 [ 253.584675][ T8130] tipc: Bearer : trying with adjusted priority [ 253.595868][ T8130] tipc: Enabling of bearer rejected, failed to enable media [ 253.605574][ T8115] EXT4-fs (loop6): Test dummy encryption mode enabled [ 253.609244][ T8130] tipc: Enabling of bearer rejected, already enabled [ 253.609981][ T8112] loop7: detected capacity change from 0 to 32768 [ 253.958197][ T8115] EXT4-fs error (device loop6): __ext4_fill_super:5400: inode #2: comm syz.6.826: casefold flag without casefold feature [ 254.355075][ T8115] EXT4-fs (loop6): get root inode failed [ 254.407785][ T8115] EXT4-fs (loop6): mount failed [ 254.427355][ T8112] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 254.429594][ T8112] BTRFS info (device loop7): using sha256 (sha256-ce) checksum algorithm [ 254.431405][ T8112] BTRFS info (device loop7): enabling auto defrag [ 254.432776][ T8112] BTRFS info (device loop7): use no compression [ 254.434012][ T8112] BTRFS info (device loop7): force clearing of disk cache [ 254.448077][ T8112] BTRFS info (device loop7): max_inline at 4096 [ 254.469908][ T8112] BTRFS info (device loop7): disabling free space tree [ 257.511904][ T8112] BTRFS error (device loop7): open_ctree failed [ 257.735377][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.737489][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.743963][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.773406][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.803114][ T8187] loop1: detected capacity change from 0 to 256 [ 257.977290][ T8187] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 258.001378][ T8194] tipc: Enabling of bearer rejected, already enabled [ 258.004705][ T8194] tipc: Bearer : already 2 bearers with priority 10 [ 258.008592][ T8194] tipc: Bearer : trying with adjusted priority [ 258.010363][ T8194] tipc: Enabling of bearer rejected, failed to enable media [ 258.037992][ T8194] tipc: Enabling of bearer rejected, already enabled [ 258.926006][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.848'. [ 258.951908][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.953840][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.980557][ T8202] loop7: detected capacity change from 0 to 128 [ 260.657349][ T8215] xt_TCPMSS: Only works on TCP SYN packets [ 261.929405][ T8226] loop6: detected capacity change from 0 to 256 [ 264.781653][ T8256] loop7: detected capacity change from 0 to 256 [ 264.816012][ T8256] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 265.085105][ T8264] tipc: Started in network mode [ 265.086494][ T8264] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 265.099314][ T8264] tipc: Enabled bearer , priority 10 [ 265.123016][ T8264] tipc: Enabling of bearer rejected, failed to enable media [ 265.144099][ T8264] tipc: New replicast peer: 255.255.255.255 [ 265.150734][ T8264] tipc: Enabled bearer , priority 10 [ 266.206320][ T4980] tipc: Node number set to 4269801491 [ 266.525366][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.861'. [ 266.538555][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.8.865'. [ 266.546570][ T8290] loop8: detected capacity change from 0 to 16 [ 266.987479][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.991044][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.344029][ T8290] erofs: (device loop8): mounted with root inode @ nid 36. [ 268.451009][ T27] audit: type=1326 audit(268.050:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d14a068 code=0x7ffc0000 [ 268.590075][ T27] audit: type=1326 audit(268.050:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d14a068 code=0x7ffc0000 [ 268.706398][ T27] audit: type=1326 audit(268.450:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8d14a068 code=0x7ffc0000 [ 268.759678][ T27] audit: type=1326 audit(268.450:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d14a068 code=0x7ffc0000 [ 268.808097][ T27] audit: type=1326 audit(268.450:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d14a068 code=0x7ffc0000 [ 268.840515][ T27] audit: type=1326 audit(268.450:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8d14a068 code=0x7ffc0000 [ 268.866745][ T27] audit: type=1326 audit(268.450:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d14a068 code=0x7ffc0000 [ 268.871786][ T27] audit: type=1326 audit(268.450:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d14a068 code=0x7ffc0000 [ 268.986402][ T27] audit: type=1326 audit(268.450:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=90 compat=0 ip=0xffff8d14a068 code=0x7ffc0000 [ 269.030738][ T27] audit: type=1326 audit(268.450:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d14a068 code=0x7ffc0000 [ 269.321334][ T8318] loop6: detected capacity change from 0 to 256 [ 271.610748][ T8331] tipc: Bearer : already 2 bearers with priority 10 [ 271.612457][ T8331] tipc: Bearer : trying with adjusted priority [ 271.614169][ T8331] tipc: Enabled bearer , priority 9 [ 271.662809][ T8331] tipc: Enabling of bearer rejected, already enabled [ 271.712261][ T8330] tipc: Disabling bearer [ 271.733863][ T8337] loop1: detected capacity change from 0 to 256 [ 271.826045][ T8337] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 271.907895][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.880'. [ 271.944741][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.950273][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.973849][ T8348] loop1: detected capacity change from 0 to 128 [ 273.111997][ T8364] xt_TCPMSS: Only works on TCP SYN packets [ 274.207233][ T8353] tipc: Enabling of bearer rejected, already enabled [ 277.440111][ T8410] loop1: detected capacity change from 0 to 256 [ 281.263690][ T8422] loop5: detected capacity change from 0 to 256 [ 281.319805][ T8422] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 281.336503][ T8424] tipc: Bearer : already 2 bearers with priority 10 [ 281.338310][ T8424] tipc: Bearer : trying with adjusted priority [ 281.340012][ T8424] tipc: Enabled bearer , priority 9 [ 281.362563][ T8424] tipc: Enabling of bearer rejected, already enabled [ 281.371903][ T8423] tipc: Disabling bearer [ 281.550101][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.552185][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.569784][ T8430] loop8: detected capacity change from 0 to 128 [ 282.220952][ T8435] xt_TCPMSS: Only works on TCP SYN packets [ 285.446205][ T8477] loop1: detected capacity change from 0 to 256 [ 285.465996][ T8477] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 285.939363][ T8481] loop6: detected capacity change from 0 to 256 [ 287.911706][ T8497] tipc: Bearer : already 2 bearers with priority 10 [ 287.913466][ T8497] tipc: Bearer : trying with adjusted priority [ 287.926523][ T8497] tipc: Enabled bearer , priority 9 [ 287.944913][ T8497] tipc: Enabling of bearer rejected, already enabled [ 287.968002][ T8496] tipc: Disabling bearer [ 288.048103][ T4296] block nbd8: Receive control failed (result -32) [ 288.053822][ T47] block nbd8: Receive control failed (result -32) [ 288.063110][ T8494] block nbd8: shutting down sockets [ 288.269288][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.278749][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.049062][ T8543] loop6: detected capacity change from 0 to 256 [ 291.071855][ T8543] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 291.172002][ T8517] loop7: detected capacity change from 0 to 32768 [ 291.174459][ T8517] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.934 (8517) [ 291.195653][ T8517] BTRFS error (device loop7): open_ctree failed [ 291.604844][ T8563] loop6: detected capacity change from 0 to 256 [ 292.761880][ T8568] tipc: Bearer : already 2 bearers with priority 10 [ 292.775892][ T8568] tipc: Bearer : trying with adjusted priority [ 292.786443][ T8568] tipc: Enabled bearer , priority 9 [ 292.809619][ T8568] tipc: Enabling of bearer rejected, already enabled [ 292.964383][ T8566] tipc: Disabling bearer [ 293.039945][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.8.936'. [ 293.971320][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 294.004047][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.029050][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.070235][ T8595] loop1: detected capacity change from 0 to 256 [ 294.092477][ T8595] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 294.895016][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 294.895032][ T27] audit: type=1326 audit(294.330:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.6.941" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f4a068 code=0x0 [ 295.543615][ T8598] loop8: detected capacity change from 0 to 32768 [ 295.562278][ T8598] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.944 (8598) [ 295.569593][ T8623] loop6: detected capacity change from 0 to 16 [ 295.742394][ T8598] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 295.884207][ T8598] BTRFS info (device loop8): using sha256 (sha256-ce) checksum algorithm [ 295.941183][ T8598] BTRFS info (device loop8): enabling auto defrag [ 295.999698][ T8598] BTRFS info (device loop8): use no compression [ 296.004888][ T8623] erofs: (device loop6): mounted with root inode @ nid 36. [ 296.048395][ T8598] BTRFS info (device loop8): force clearing of disk cache [ 296.139666][ T8598] BTRFS info (device loop8): max_inline at 4096 [ 296.250032][ T8598] BTRFS info (device loop8): disabling free space tree [ 296.517969][ T8635] tipc: Bearer : already 2 bearers with priority 10 [ 296.519781][ T8635] tipc: Bearer : trying with adjusted priority [ 296.521424][ T8635] tipc: Enabled bearer , priority 9 [ 296.546238][ T8635] tipc: Enabling of bearer rejected, already enabled [ 296.570549][ T8633] tipc: Disabling bearer [ 296.591156][ T8598] BTRFS info (device loop8): enabling ssd optimizations [ 296.597736][ T8598] BTRFS info (device loop8): rebuilding free space tree [ 296.608661][ T8598] BTRFS info (device loop8): disabling free space tree [ 296.612733][ T8598] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 296.699783][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 296.702865][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 296.705071][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 296.708353][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 296.710431][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 296.712668][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 296.715084][ T8653] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 296.716900][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 296.718695][ T8653] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 296.720556][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 296.724916][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 296.726776][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 296.728900][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 296.730872][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 296.732661][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 296.734478][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 296.736523][ T8653] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 296.738538][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 296.740764][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 296.742580][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 296.745508][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 296.747431][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 296.749537][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 296.751721][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 296.753777][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 296.755969][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 296.758463][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 296.760291][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 296.762110][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 296.764101][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 296.766201][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 296.768069][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 296.770178][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 296.772452][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 296.774667][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 296.777451][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 296.779516][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 296.781853][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 296.783975][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 296.786424][ T8653] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 296.788306][ T8653] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 296.791892][ T8653] syz.6.950: attempt to access beyond end of device [ 296.791892][ T8653] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 296.795305][ T8653] syz.6.950: attempt to access beyond end of device [ 296.795305][ T8653] loop6: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 296.798283][ T8653] syz.6.950: attempt to access beyond end of device [ 296.798283][ T8653] loop6: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 296.801590][ T8653] syz.6.950: attempt to access beyond end of device [ 296.801590][ T8653] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 296.804760][ T8653] syz.6.950: attempt to access beyond end of device [ 296.804760][ T8653] loop6: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 296.807977][ T8653] syz.6.950: attempt to access beyond end of device [ 296.807977][ T8653] loop6: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 296.811011][ T8653] syz.6.950: attempt to access beyond end of device [ 296.811011][ T8653] loop6: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 296.814280][ T8653] syz.6.950: attempt to access beyond end of device [ 296.814280][ T8653] loop6: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 296.817814][ T8653] syz.6.950: attempt to access beyond end of device [ 296.817814][ T8653] loop6: rw=524288, sector=790384, nr_sectors = 16 limit=16 [ 296.821116][ T8653] syz.6.950: attempt to access beyond end of device [ 296.821116][ T8653] loop6: rw=524288, sector=72, nr_sectors = 16 limit=16 [ 296.914180][ T8598] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 297.271926][ T7922] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 297.316273][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.956'. [ 297.324553][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 297.779866][ T8674] loop6: detected capacity change from 0 to 64 [ 297.783549][ T8674] hfs: invalid gid -1 [ 297.787207][ T8674] hfs: unable to parse mount options [ 297.972525][ T8676] loop8: detected capacity change from 0 to 256 [ 298.235145][ T27] audit: type=1326 audit(298.210:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.5.961" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ff4a068 code=0x0 [ 299.434628][ T8657] loop7: detected capacity change from 0 to 32768 [ 299.587482][ T8685] tipc: Bearer : already 2 bearers with priority 10 [ 299.589264][ T8685] tipc: Bearer : trying with adjusted priority [ 299.590868][ T8685] tipc: Enabled bearer , priority 9 [ 299.594051][ T8685] tipc: Enabling of bearer rejected, already enabled [ 299.598968][ T8682] tipc: Disabling bearer [ 299.607921][ T8657] XFS (loop7): Mounting V5 Filesystem [ 299.785386][ T8657] XFS (loop7): Ending clean mount [ 300.556867][ T7880] XFS (loop7): Unmounting Filesystem [ 301.635350][ T47] Bluetooth: hci4: link tx timeout [ 301.636547][ T47] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 301.638140][ T47] Bluetooth: hci4: link tx timeout [ 301.639235][ T47] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 301.694488][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.969'. [ 301.708814][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 302.007385][ T8717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.153855][ T8722] tipc: Bearer : already 2 bearers with priority 10 [ 302.174996][ T8722] tipc: Bearer : trying with adjusted priority [ 302.176863][ T8722] tipc: Enabled bearer , priority 9 [ 302.199379][ T8717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.201932][ T8722] tipc: Enabling of bearer rejected, already enabled [ 302.235491][ T8721] tipc: Disabling bearer [ 302.254455][ T8717] loop1: detected capacity change from 0 to 128 [ 302.406738][ T8724] loop6: detected capacity change from 0 to 256 [ 302.961391][ T8699] loop8: detected capacity change from 0 to 32768 [ 303.041252][ T8699] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.965 (8699) [ 303.114231][ T8699] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 303.126075][ T8699] BTRFS info (device loop8): using sha256 (sha256-ce) checksum algorithm [ 303.127898][ T8699] BTRFS info (device loop8): enabling auto defrag [ 303.129263][ T8699] BTRFS info (device loop8): use no compression [ 303.130685][ T8699] BTRFS info (device loop8): force clearing of disk cache [ 303.132251][ T8699] BTRFS info (device loop8): max_inline at 4096 [ 303.133548][ T8699] BTRFS info (device loop8): disabling free space tree [ 303.235285][ T8726] xt_TCPMSS: Only works on TCP SYN packets [ 304.035793][ T8699] BTRFS error (device loop8): open_ctree failed [ 304.062692][ T8747] tipc: Bearer : already 2 bearers with priority 10 [ 304.064446][ T8747] tipc: Bearer : trying with adjusted priority [ 304.072710][ T8747] tipc: Enabled bearer , priority 9 [ 304.079138][ T8747] tipc: Enabling of bearer rejected, already enabled [ 304.090657][ T8744] tipc: Disabling bearer [ 304.735386][ T27] audit: type=1326 audit(304.690:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8748 comm="syz.7.977" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb4a068 code=0x0 [ 305.083431][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.982'. [ 305.282689][ T8766] tipc: Enabling of bearer rejected, already enabled [ 305.672821][ T8772] loop8: detected capacity change from 0 to 32768 [ 306.120791][ T8772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.979 (8772) [ 306.860904][ T8772] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.863166][ T8772] BTRFS info (device loop8): using crc32c (crc32c-generic) checksum algorithm [ 306.865561][ T8772] BTRFS info (device loop8): metadata ratio 2 [ 306.867160][ T8772] BTRFS info (device loop8): force zlib compression, level 3 [ 306.868698][ T8772] BTRFS info (device loop8): enabling auto defrag [ 306.870169][ T8772] BTRFS info (device loop8): max_inline at 0 [ 306.871443][ T8772] BTRFS info (device loop8): using free space tree [ 308.805731][ T8772] BTRFS error (device loop8): open_ctree failed [ 308.862840][ T8802] tipc: Bearer : already 2 bearers with priority 10 [ 308.864733][ T8802] tipc: Bearer : trying with adjusted priority [ 308.870508][ T8802] tipc: Enabled bearer , priority 9 [ 308.881263][ T8802] tipc: Enabling of bearer rejected, already enabled [ 308.888031][ T8799] tipc: Disabling bearer [ 309.776123][ T8812] loop1: detected capacity change from 0 to 256 [ 310.285979][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.287559][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.517960][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.995'. [ 310.526547][ T8816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.528534][ T8816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.545698][ T8805] loop5: detected capacity change from 0 to 32768 [ 310.548257][ T8805] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.990 (8805) [ 310.559458][ T8805] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 310.561732][ T8805] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 310.563680][ T8805] BTRFS info (device loop5): enabling auto defrag [ 310.587619][ T8816] loop8: detected capacity change from 0 to 128 [ 310.590074][ T8805] BTRFS info (device loop5): use no compression [ 310.591540][ T8805] BTRFS info (device loop5): force clearing of disk cache [ 310.593282][ T8805] BTRFS info (device loop5): max_inline at 4096 [ 310.626294][ T8805] BTRFS info (device loop5): disabling free space tree [ 310.630320][ T8818] tipc: Enabling of bearer rejected, already enabled [ 311.949217][ T8832] xt_TCPMSS: Only works on TCP SYN packets [ 313.832750][ T8805] BTRFS error (device loop5): open_ctree failed [ 314.130021][ T8855] loop8: detected capacity change from 0 to 256 [ 314.165618][ T8855] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 315.395625][ T8863] loop5: detected capacity change from 0 to 65536 [ 315.794968][ T8863] XFS (loop5): Mounting V5 Filesystem [ 316.040781][ T8863] XFS (loop5): Ending clean mount [ 316.048618][ T8849] loop6: detected capacity change from 0 to 32768 [ 316.051201][ T8863] XFS (loop5): Quotacheck needed: Please wait. [ 316.051864][ T8849] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1010 (8849) [ 316.099963][ T8863] XFS (loop5): Quotacheck: Done. [ 316.708809][ T8849] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 316.716104][ T8849] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 316.718220][ T8849] BTRFS info (device loop6): enabling auto defrag [ 316.746834][ T8849] BTRFS info (device loop6): use no compression [ 316.748310][ T8849] BTRFS info (device loop6): force clearing of disk cache [ 316.749812][ T8849] BTRFS info (device loop6): max_inline at 4096 [ 316.751164][ T8849] BTRFS info (device loop6): disabling free space tree [ 316.774619][ T8881] tipc: Bearer : already 2 bearers with priority 10 [ 316.793399][ T8884] loop7: detected capacity change from 0 to 32768 [ 316.797036][ T8884] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1006 (8884) [ 316.815265][ T8881] tipc: Bearer : trying with adjusted priority [ 316.817183][ T8881] tipc: Enabled bearer , priority 9 [ 316.826758][ T8881] tipc: Enabling of bearer rejected, already enabled [ 316.937906][ T8884] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.940354][ T8884] BTRFS info (device loop7): using crc32c (crc32c-generic) checksum algorithm [ 316.942391][ T8884] BTRFS info (device loop7): metadata ratio 2 [ 316.944222][ T8884] BTRFS info (device loop7): force zlib compression, level 3 [ 316.946084][ T8884] BTRFS info (device loop7): enabling auto defrag [ 316.947518][ T8884] BTRFS info (device loop7): max_inline at 0 [ 316.948320][ T8879] tipc: Disabling bearer [ 316.948793][ T8884] BTRFS info (device loop7): using free space tree [ 317.702798][ T5925] XFS (loop5): Unmounting Filesystem [ 317.713793][ T8849] BTRFS error (device loop6): open_ctree failed [ 317.715696][ T8910] tipc: Enabling of bearer rejected, already enabled [ 317.770745][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 317.922063][ T7880] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.946849][ T8935] loop7: detected capacity change from 0 to 256 [ 318.986255][ T8935] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 319.056491][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.058487][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.090376][ T8941] loop6: detected capacity change from 0 to 128 [ 319.257972][ T8946] VFS: could not find a valid V7 on nullb0. [ 320.466618][ T8950] xt_TCPMSS: Only works on TCP SYN packets [ 321.868380][ T8957] tipc: Enabling of bearer rejected, already enabled [ 322.051517][ T8961] tipc: Enabled bearer , priority 10 [ 322.812594][ T8960] tipc: Disabling bearer [ 323.096010][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1029'. [ 323.174406][ T8982] loop8: detected capacity change from 0 to 256 [ 323.220651][ T8982] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 323.506334][ T8974] loop6: detected capacity change from 0 to 32768 [ 323.868162][ T8987] loop8: detected capacity change from 0 to 65536 [ 323.878808][ T8974] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1026 (8974) [ 324.391540][ T8972] loop7: detected capacity change from 0 to 40427 [ 324.514279][ T8972] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 324.516242][ T8972] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 324.521660][ T8972] F2FS-fs (loop7): invalid crc value [ 324.522289][ T8974] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 324.528517][ T8987] XFS (loop8): Mounting V5 Filesystem [ 324.531385][ T8974] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 324.533224][ T8974] BTRFS info (device loop6): enabling auto defrag [ 324.534628][ T8974] BTRFS info (device loop6): use no compression [ 324.536787][ T8974] BTRFS info (device loop6): force clearing of disk cache [ 324.538255][ T8974] BTRFS info (device loop6): max_inline at 4096 [ 324.539775][ T8974] BTRFS info (device loop6): disabling free space tree [ 324.561645][ T8972] F2FS-fs (loop7): Found nat_bits in checkpoint [ 324.598239][ T8987] XFS (loop8): Ending clean mount [ 324.601158][ T8987] XFS (loop8): Quotacheck needed: Please wait. [ 324.633154][ T9004] tipc: Enabling of bearer rejected, already enabled [ 324.643816][ T8972] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 324.645620][ T8972] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 324.656536][ T8987] XFS (loop8): Quotacheck: Done. [ 325.302698][ T8974] BTRFS info (device loop6): enabling ssd optimizations [ 325.533560][ T8974] BTRFS info (device loop6): rebuilding free space tree [ 325.633547][ T39] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 325.743114][ T39] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 325.755087][ T7922] XFS (loop8): Unmounting Filesystem [ 325.797247][ T8974] BTRFS info (device loop6): disabling free space tree [ 325.798896][ T8974] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 325.800895][ T8974] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 325.975556][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.986636][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.012492][ T9031] loop1: detected capacity change from 0 to 128 [ 327.381179][ T9041] loop5: detected capacity change from 0 to 256 [ 327.392063][ T9038] xt_TCPMSS: Only works on TCP SYN packets [ 329.149910][ T7673] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 329.635154][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1041'. [ 330.066196][ T9056] tipc: Bearer : already 2 bearers with priority 10 [ 330.068103][ T9056] tipc: Bearer : trying with adjusted priority [ 330.069912][ T9056] tipc: Enabled bearer , priority 9 [ 330.073345][ T9056] tipc: Enabling of bearer rejected, already enabled [ 330.962296][ T9052] tipc: Disabling bearer [ 331.038649][ T9059] tipc: Enabling of bearer rejected, already enabled [ 331.131204][ T9061] loop1: detected capacity change from 0 to 1024 [ 331.230437][ T9061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 331.346376][ T9072] EXT4-fs (loop1): shut down requested (0) [ 331.431583][ T9075] 9pnet_fd: Insufficient options for proto=fd [ 332.609647][ T9078] loop7: detected capacity change from 0 to 65536 [ 332.627500][ T9078] XFS (loop7): Mounting V5 Filesystem [ 332.638188][ T39] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 332.641678][ T39] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1960 with error 28 [ 332.644662][ T39] EXT4-fs (loop1): This should not happen!! Data will be lost [ 332.644662][ T39] [ 332.647369][ T39] EXT4-fs (loop1): Total free blocks count 0 [ 332.649071][ T39] EXT4-fs (loop1): Free/Dirty block details [ 332.650593][ T39] EXT4-fs (loop1): free_blocks=68451041280 [ 332.651971][ T39] EXT4-fs (loop1): dirty_blocks=1968 [ 332.653238][ T39] EXT4-fs (loop1): Block reservation details [ 332.654763][ T39] EXT4-fs (loop1): i_reserved_data_blocks=123 [ 332.797746][ T9093] loop5: detected capacity change from 0 to 256 [ 333.240503][ T9078] XFS (loop7): Ending clean mount [ 333.395308][ T9078] XFS (loop7): Quotacheck needed: Please wait. [ 333.475145][ T9078] XFS (loop7): Quotacheck: Done. [ 333.563751][ T9073] loop8: detected capacity change from 0 to 32768 [ 333.588883][ T9073] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.1050 (9073) [ 333.674134][ T9073] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 333.676582][ T9073] BTRFS info (device loop8): using sha256 (sha256-ce) checksum algorithm [ 333.678453][ T9073] BTRFS info (device loop8): enabling auto defrag [ 333.679939][ T9073] BTRFS info (device loop8): use no compression [ 333.682315][ T9073] BTRFS info (device loop8): force clearing of disk cache [ 333.687630][ T9073] BTRFS info (device loop8): max_inline at 4096 [ 333.689001][ T9073] BTRFS info (device loop8): disabling free space tree [ 334.092071][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 334.094772][ T9100] tipc: Bearer : already 2 bearers with priority 10 [ 334.101463][ T9100] tipc: Bearer : trying with adjusted priority [ 334.105014][ T9100] tipc: Enabled bearer , priority 9 [ 334.116473][ T9100] tipc: Enabling of bearer rejected, already enabled [ 334.133514][ T9099] tipc: Disabling bearer [ 334.189631][ T9073] BTRFS info (device loop8): enabling ssd optimizations [ 334.192066][ T9073] BTRFS info (device loop8): rebuilding free space tree [ 334.212348][ T9073] BTRFS info (device loop8): disabling free space tree [ 334.218493][ T9073] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 334.224342][ T9073] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 334.353057][ T7880] XFS (loop7): Unmounting Filesystem [ 334.353864][ T9123] tipc: Enabled bearer , priority 10 [ 334.397050][ T9123] tipc: Enabling of bearer rejected, already enabled [ 334.406903][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.419042][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.426203][ T9122] tipc: Disabling bearer [ 334.450072][ T9127] loop5: detected capacity change from 0 to 128 [ 334.470948][ T7922] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 334.628469][ T9131] 9pnet_fd: Insufficient options for proto=fd [ 335.136975][ T9133] xt_TCPMSS: Only works on TCP SYN packets [ 336.589590][ T9142] loop6: detected capacity change from 0 to 256 [ 337.344116][ T9148] tipc: Enabling of bearer rejected, already enabled [ 337.545313][ T9156] loop7: detected capacity change from 0 to 1024 [ 338.332422][ T9156] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 338.476665][ T9165] EXT4-fs (loop7): shut down requested (0) [ 338.700992][ T9042] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 338.710854][ T9042] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 338.720819][ T9042] EXT4-fs (loop7): This should not happen!! Data will be lost [ 338.720819][ T9042] [ 338.746145][ T9042] EXT4-fs (loop7): Total free blocks count 0 [ 338.747459][ T9042] EXT4-fs (loop7): Free/Dirty block details [ 338.748604][ T9042] EXT4-fs (loop7): free_blocks=68451041280 [ 338.749998][ T9042] EXT4-fs (loop7): dirty_blocks=2400 [ 338.751105][ T9042] EXT4-fs (loop7): Block reservation details [ 338.752279][ T9042] EXT4-fs (loop7): i_reserved_data_blocks=150 [ 338.859573][ T9164] loop1: detected capacity change from 0 to 32768 [ 338.862221][ T9164] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1072 (9164) [ 338.867659][ T9164] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 338.872305][ T9164] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 338.876429][ T9164] BTRFS info (device loop1): enabling auto defrag [ 338.878979][ T9164] BTRFS info (device loop1): use no compression [ 338.882521][ T9164] BTRFS info (device loop1): force clearing of disk cache [ 338.884513][ T9164] BTRFS info (device loop1): max_inline at 4096 [ 338.889734][ T9164] BTRFS info (device loop1): disabling free space tree [ 338.926398][ T9178] tipc: Bearer : already 2 bearers with priority 10 [ 338.928313][ T9178] tipc: Bearer : trying with adjusted priority [ 338.930189][ T9178] tipc: Enabled bearer , priority 9 [ 338.933646][ T9178] tipc: Enabling of bearer rejected, already enabled [ 338.943708][ T9171] tipc: Disabling bearer [ 338.946816][ T9164] BTRFS info (device loop1): enabling ssd optimizations [ 338.949766][ T9164] BTRFS info (device loop1): rebuilding free space tree [ 338.970446][ T9164] BTRFS info (device loop1): disabling free space tree [ 338.975363][ T9164] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 338.980968][ T9164] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 339.144498][ T5166] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 339.214383][ T9190] 9pnet_fd: Insufficient options for proto=fd [ 339.541816][ T9199] loop8: detected capacity change from 0 to 256 [ 340.533969][ T9204] tipc: Enabling of bearer rejected, already enabled [ 340.889400][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.891489][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.901820][ T9213] loop1: detected capacity change from 0 to 128 [ 341.237564][ T9220] xt_TCPMSS: Only works on TCP SYN packets [ 342.955545][ T9223] tipc: Bearer : already 2 bearers with priority 10 [ 342.957298][ T9223] tipc: Bearer : trying with adjusted priority [ 342.959004][ T9223] tipc: Enabled bearer , priority 9 [ 342.962213][ T9223] tipc: Enabling of bearer rejected, already enabled [ 342.968246][ T9222] tipc: Disabling bearer [ 343.905810][ T27] audit: type=1326 audit(343.350:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.7.1091" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb4a068 code=0x0 [ 344.080986][ T9239] tipc: Enabling of bearer rejected, already enabled [ 344.209964][ T9227] loop5: detected capacity change from 0 to 32768 [ 344.352148][ T9227] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1089 (9227) [ 344.924944][ T9227] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 344.928080][ T9227] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 344.936534][ T9227] BTRFS info (device loop5): enabling auto defrag [ 344.940100][ T9227] BTRFS info (device loop5): use no compression [ 344.945228][ T9227] BTRFS info (device loop5): force clearing of disk cache [ 344.976270][ T9227] BTRFS info (device loop5): max_inline at 4096 [ 344.977738][ T9227] BTRFS info (device loop5): disabling free space tree [ 345.052054][ T9260] tipc: Bearer : already 2 bearers with priority 10 [ 345.062415][ T9260] tipc: Bearer : trying with adjusted priority [ 345.063934][ T9260] tipc: Enabled bearer , priority 9 [ 345.068519][ T9260] tipc: Enabling of bearer rejected, already enabled [ 345.073762][ T9259] tipc: Disabling bearer [ 345.117581][ T9227] BTRFS info (device loop5): enabling ssd optimizations [ 345.119763][ T9227] BTRFS info (device loop5): rebuilding free space tree [ 345.284750][ T9280] loop8: detected capacity change from 0 to 256 [ 347.199177][ T9227] BTRFS info (device loop5): disabling free space tree [ 347.212050][ T9227] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 347.224314][ T9227] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 347.355284][ T5925] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 347.378970][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.391233][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.418892][ T9287] loop6: detected capacity change from 0 to 128 [ 348.126373][ T9294] xt_TCPMSS: Only works on TCP SYN packets [ 348.773116][ T4296] Bluetooth: hci5: command 0x0406 tx timeout [ 349.172748][ T9296] loop8: detected capacity change from 0 to 736 [ 349.211973][ T9298] tipc: Enabling of bearer rejected, already enabled [ 351.787015][ T9322] usb usb8: usbfs: process 9322 (syz.5.1105) did not claim interface 0 before use [ 352.509688][ T27] audit: type=1326 audit(351.860:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9313 comm="syz.6.1112" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f4a068 code=0x0 [ 352.546533][ T9322] rtc-efi rtc-efi.0: write status is 3 [ 352.634964][ T9328] tipc: Enabling of bearer rejected, already enabled [ 352.655709][ T9328] tipc: Bearer : already 2 bearers with priority 10 [ 352.670397][ T9328] tipc: Bearer : trying with adjusted priority [ 352.672181][ T9328] tipc: Enabled bearer , priority 9 [ 352.690846][ T9328] tipc: Enabling of bearer rejected, already enabled [ 352.717806][ T9325] tipc: Disabling bearer [ 352.943292][ T9338] tipc: Enabling of bearer rejected, already enabled [ 353.117862][ T9345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.125706][ T9345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.155245][ T9345] loop5: detected capacity change from 0 to 128 [ 353.362788][ T9349] loop8: detected capacity change from 0 to 256 [ 353.531147][ T9351] xt_TCPMSS: Only works on TCP SYN packets [ 354.890026][ T9331] loop6: detected capacity change from 0 to 32768 [ 354.892334][ T9331] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1116 (9331) [ 354.927186][ T9331] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 354.929320][ T9331] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 354.930987][ T9331] BTRFS info (device loop6): enabling auto defrag [ 354.932329][ T9331] BTRFS info (device loop6): use no compression [ 354.954940][ T9331] BTRFS info (device loop6): force clearing of disk cache [ 354.956777][ T9331] BTRFS info (device loop6): max_inline at 4096 [ 354.958332][ T9331] BTRFS info (device loop6): disabling free space tree [ 355.009091][ T9331] BTRFS info (device loop6): enabling ssd optimizations [ 355.012898][ T9331] BTRFS info (device loop6): rebuilding free space tree [ 355.026462][ T9331] BTRFS info (device loop6): disabling free space tree [ 355.028083][ T9331] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 355.030484][ T9331] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 355.880591][ T7673] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 356.585105][ T27] audit: type=1326 audit(356.180:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.7.1127" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb4a068 code=0x0 [ 356.841236][ T9395] tipc: Enabling of bearer rejected, already enabled [ 356.844705][ T9395] tipc: Enabled bearer , priority 10 [ 356.850143][ T9395] tipc: Enabling of bearer rejected, already enabled [ 356.886582][ T9392] tipc: Disabling bearer [ 356.889825][ T9394] tipc: Enabling of bearer rejected, already enabled [ 357.249072][ T9408] loop7: detected capacity change from 0 to 256 [ 357.966799][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.969033][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.050975][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.056990][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.227387][ T9433] loop6: detected capacity change from 0 to 128 [ 359.486897][ T27] audit: type=1326 audit(359.440:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.8.1145" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f34a068 code=0x0 [ 359.864647][ T9436] xt_TCPMSS: Only works on TCP SYN packets [ 359.970072][ T9438] tipc: Enabling of bearer rejected, already enabled [ 360.137188][ T9446] tipc: Enabling of bearer rejected, already enabled [ 360.150428][ T9446] tipc: Bearer : already 2 bearers with priority 10 [ 360.153289][ T9446] tipc: Bearer : trying with adjusted priority [ 360.160356][ T9446] tipc: Enabled bearer , priority 9 [ 360.168943][ T9446] tipc: Enabling of bearer rejected, already enabled [ 360.201949][ T9445] tipc: Disabling bearer [ 360.575666][ T9460] loop1: detected capacity change from 0 to 256 [ 362.022189][ T9465] tipc: Enabling of bearer rejected, already enabled [ 362.156445][ T9473] tipc: Enabling of bearer rejected, already enabled [ 362.465775][ T27] audit: type=1326 audit(362.330:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.1.1159" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d14a068 code=0x0 [ 363.050658][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.052714][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.440797][ T4303] Bluetooth: hci0: command 0x0406 tx timeout [ 364.445448][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 364.594613][ T4306] Bluetooth: hci4: link tx timeout [ 364.595826][ T4306] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 364.597387][ T4306] Bluetooth: hci4: link tx timeout [ 364.598433][ T4306] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.720688][ T9502] tipc: Enabling of bearer rejected, already enabled [ 364.736051][ T9502] tipc: Enabling of bearer rejected, already enabled [ 365.139032][ T9510] loop7: detected capacity change from 0 to 256 [ 365.826779][ T9512] tipc: Enabling of bearer rejected, already enabled [ 366.416876][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.675212][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.732884][ T9519] loop1: detected capacity change from 0 to 128 [ 366.927268][ T9537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.929466][ T9537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.048895][ T9538] xt_TCPMSS: Only works on TCP SYN packets [ 367.849021][ T9544] tipc: Enabling of bearer rejected, already enabled [ 367.858889][ T9544] tipc: Enabling of bearer rejected, already enabled [ 367.889705][ T9546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.897748][ T9546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.332323][ T9555] loop6: detected capacity change from 0 to 256 [ 370.132340][ T9553] tipc: Enabling of bearer rejected, already enabled [ 371.665897][ T9579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.679777][ T9579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.689917][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.691398][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.716074][ T9581] tipc: Enabling of bearer rejected, already enabled [ 371.825589][ T9581] tipc: Enabling of bearer rejected, already enabled [ 371.874618][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.876653][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.904963][ T9587] loop6: detected capacity change from 0 to 128 [ 372.194162][ T9597] xt_TCPMSS: Only works on TCP SYN packets [ 372.958611][ T9599] tipc: Enabling of bearer rejected, already enabled [ 373.294663][ T9607] loop1: detected capacity change from 0 to 256 [ 375.375720][ T9620] tipc: Enabling of bearer rejected, already enabled [ 375.402184][ T9620] tipc: Enabling of bearer rejected, already enabled [ 375.737295][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.739334][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.722335][ T9649] loop6: detected capacity change from 0 to 256 [ 377.249579][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.029936][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.063527][ T9654] loop1: detected capacity change from 0 to 128 [ 378.236121][ T9661] tipc: Enabling of bearer rejected, already enabled [ 378.278583][ T9661] tipc: Enabling of bearer rejected, already enabled [ 378.407883][ T9671] xt_TCPMSS: Only works on TCP SYN packets [ 380.184316][ T9697] loop7: detected capacity change from 0 to 256 [ 381.052758][ T9705] tipc: Enabling of bearer rejected, already enabled [ 381.060211][ T9705] tipc: Enabling of bearer rejected, already enabled [ 382.406602][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.416814][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.444331][ T9728] loop1: detected capacity change from 0 to 128 [ 382.870236][ T9734] xt_TCPMSS: Only works on TCP SYN packets [ 384.987470][ T9745] loop6: detected capacity change from 0 to 256 [ 385.514014][ T9744] tipc: Enabling of bearer rejected, already enabled [ 385.554714][ T9744] tipc: Enabling of bearer rejected, already enabled [ 387.245067][ T9783] loop5: detected capacity change from 0 to 256 [ 388.570928][ T9786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.580242][ T9786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.592151][ T9786] loop7: detected capacity change from 0 to 128 [ 389.651666][ T9793] tipc: Enabling of bearer rejected, already enabled [ 389.801127][ T9042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.816053][ T9791] tipc: Enabling of bearer rejected, already enabled [ 390.216581][ T9042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.704466][ T9822] loop5: detected capacity change from 0 to 256 [ 391.087142][ T9042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.491788][ T9042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.029475][ T9838] tipc: Enabling of bearer rejected, already enabled [ 392.066034][ T9838] tipc: Enabling of bearer rejected, already enabled [ 392.143512][ T9849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.152549][ T9849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.166137][ T9849] loop6: detected capacity change from 0 to 128 [ 393.444718][ T9042] tipc: Disabling bearer [ 393.453839][ T9042] tipc: Disabling bearer [ 393.467146][ T9042] tipc: Disabling bearer [ 393.468609][ T9042] tipc: Left network mode [ 393.598396][ T9867] loop8: detected capacity change from 0 to 256 [ 395.087905][ T9899] tipc: Enabling of bearer rejected, already enabled [ 395.235890][ T9899] tipc: Enabling of bearer rejected, already enabled [ 395.523536][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'. [ 395.585293][ T9920] loop5: detected capacity change from 0 to 256 [ 397.332170][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.336869][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.344584][ T9953] loop8: detected capacity change from 0 to 128 [ 407.979786][ T9965] tipc: Enabling of bearer rejected, already enabled [ 407.981496][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1325'. [ 408.254097][ T9986] loop5: detected capacity change from 0 to 256 [ 409.375950][T10006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.377898][T10006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.400343][T10006] loop8: detected capacity change from 0 to 128 [ 409.499265][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1340'. [ 409.896950][T10035] loop6: detected capacity change from 0 to 256 [ 410.182132][T10032] tipc: Enabling of bearer rejected, already enabled [ 410.760866][T10062] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1351'. [ 410.854065][T10069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.865169][T10069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.889687][T10069] loop5: detected capacity change from 0 to 128 [ 411.767721][ T9042] device hsr_slave_0 left promiscuous mode [ 411.855385][ T9042] device hsr_slave_1 left promiscuous mode [ 412.065358][ T9042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.067148][ T9042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.067505][T10093] loop8: detected capacity change from 0 to 256 [ 412.071560][ T9042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.075762][ T9042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.091468][ T9042] device bridge_slave_1 left promiscuous mode [ 412.092943][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.132294][ T9042] device bridge_slave_0 left promiscuous mode [ 412.133870][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.385215][ T9042] device veth1_macvtap left promiscuous mode [ 412.386684][ T9042] device veth0_macvtap left promiscuous mode [ 412.388198][ T9042] device veth1_vlan left promiscuous mode [ 412.389497][ T9042] device veth0_vlan left promiscuous mode [ 414.658590][ T9042] team0 (unregistering): Port device team_slave_1 removed [ 414.838901][ T9042] team0 (unregistering): Port device team_slave_0 removed [ 415.025831][ T9042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.266711][ T9042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.100332][ T9042] bond0 (unregistering): Released all slaves [ 418.342177][T10096] tipc: Enabling of bearer rejected, already enabled [ 418.344167][T10092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1364'. [ 418.417250][T10122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.419278][T10122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.476492][T10122] loop1: detected capacity change from 0 to 128 [ 419.492418][T10138] 9pnet_fd: Insufficient options for proto=fd [ 419.846190][T10149] loop1: detected capacity change from 0 to 256 [ 419.927202][T10153] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1381'. [ 419.985806][T10124] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 420.329320][T10176] tipc: Enabling of bearer rejected, already enabled [ 420.332671][T10176] tipc: Bearer : already 2 bearers with priority 10 [ 420.334540][T10176] tipc: Bearer : trying with adjusted priority [ 420.337382][T10176] tipc: Enabled bearer , priority 9 [ 420.350499][T10175] tipc: Disabling bearer [ 420.474054][T10184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.488224][T10184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.501569][T10184] loop8: detected capacity change from 0 to 128 [ 420.679902][T10190] 9pnet_fd: Insufficient options for proto=fd [ 421.633520][T10205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1395'. [ 422.115298][T10229] loop7: detected capacity change from 0 to 256 [ 422.477000][T10228] 9pnet_fd: Insufficient options for proto=fd [ 422.571960][T10237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.574011][T10237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.581272][T10237] loop1: detected capacity change from 0 to 128 [ 422.662658][T10223] tipc: Enabling of bearer rejected, already enabled [ 422.889784][ T9042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.050717][ T9042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.087080][T10255] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1410'. [ 423.217487][ T9042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.332252][ T9042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.626326][T10279] loop1: detected capacity change from 0 to 256 [ 423.804387][T10281] tipc: Bearer : already 2 bearers with priority 10 [ 423.806558][T10281] tipc: Bearer : trying with adjusted priority [ 423.815902][T10281] tipc: Enabled bearer , priority 9 [ 424.180747][T10280] tipc: Disabling bearer [ 424.471130][ T9042] tipc: Disabling bearer [ 424.472343][ T9042] tipc: Disabling bearer [ 424.473572][ T9042] tipc: Left network mode [ 424.590920][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.592958][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.606690][T10303] loop7: detected capacity change from 0 to 128 [ 424.982715][T10309] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1423'. [ 425.209091][T10333] loop6: detected capacity change from 0 to 256 [ 425.422451][T10346] tipc: Enabling of bearer rejected, already enabled [ 425.429447][T10346] tipc: Bearer : already 2 bearers with priority 10 [ 425.431378][T10346] tipc: Bearer : trying with adjusted priority [ 425.433209][T10346] tipc: Enabled bearer , priority 9 [ 425.446869][T10345] tipc: Disabling bearer [ 425.819833][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1438'. [ 425.982949][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.997968][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.059874][T10364] loop5: detected capacity change from 0 to 128 [ 426.486592][T10375] loop1: detected capacity change from 0 to 256 [ 426.664521][T10391] tipc: Enabling of bearer rejected, already enabled [ 426.667655][T10391] tipc: Enabled bearer , priority 10 [ 426.682386][T10390] tipc: Disabling bearer [ 427.280908][T10405] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1449'. [ 427.575452][T10421] loop6: detected capacity change from 0 to 256 [ 427.769609][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.777773][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.820406][T10429] loop7: detected capacity change from 0 to 128 [ 428.032360][T10435] tipc: Enabling of bearer rejected, already enabled [ 428.153964][ T9042] device hsr_slave_0 left promiscuous mode [ 428.372806][ T9042] device hsr_slave_1 left promiscuous mode [ 428.476848][ T9042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.479156][ T9042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.481712][ T9042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.483495][ T9042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.493043][ T9042] device bridge_slave_1 left promiscuous mode [ 428.497928][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.542118][ T9042] device bridge_slave_0 left promiscuous mode [ 428.543738][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.575682][T10474] loop6: detected capacity change from 0 to 256 [ 428.665548][ T9042] device veth1_macvtap left promiscuous mode [ 428.667045][ T9042] device veth0_macvtap left promiscuous mode [ 428.668485][ T9042] device veth1_vlan left promiscuous mode [ 428.669860][ T9042] device veth0_vlan left promiscuous mode [ 430.990171][ T9042] team0 (unregistering): Port device team_slave_1 removed [ 431.187717][ T9042] team0 (unregistering): Port device team_slave_0 removed [ 431.376607][ T9042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.607215][ T9042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.136621][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.138093][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.379426][ T9042] bond0 (unregistering): Released all slaves [ 434.635419][T10454] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1466'. [ 434.661210][T10489] tipc: Enabling of bearer rejected, already enabled [ 434.694760][ T4306] Bluetooth: hci4: link tx timeout [ 434.695966][ T4306] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 434.697494][ T4306] Bluetooth: hci4: link tx timeout [ 434.698661][ T4306] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 434.910949][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.913061][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.936792][T10510] loop7: detected capacity change from 0 to 128 [ 435.111231][T10517] 9pnet_fd: Insufficient options for proto=fd [ 435.283873][T10527] loop6: detected capacity change from 0 to 256 [ 435.614581][T10542] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1490'. [ 435.903714][T10560] tipc: Enabling of bearer rejected, already enabled [ 435.907277][T10560] tipc: Bearer : already 2 bearers with priority 10 [ 435.909153][T10560] tipc: Bearer : trying with adjusted priority [ 435.910960][T10560] tipc: Enabled bearer , priority 9 [ 435.919682][T10559] tipc: Disabling bearer [ 436.261898][T10576] 9pnet_fd: Insufficient options for proto=fd [ 436.489609][T10580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.509001][T10580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.557887][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1501'. [ 436.564592][T10580] loop8: detected capacity change from 0 to 128 [ 436.754116][T10592] tipc: Enabling of bearer rejected, already enabled [ 436.762216][T10592] tipc: Bearer : already 2 bearers with priority 10 [ 436.764295][T10592] tipc: Bearer : trying with adjusted priority [ 436.813974][T10592] tipc: Enabled bearer , priority 9 [ 436.847185][T10591] tipc: Disabling bearer [ 436.875039][T10601] loop5: detected capacity change from 0 to 256 [ 437.069205][T10614] 9pnet_fd: Insufficient options for proto=fd [ 437.659316][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1516'. [ 437.787086][T10640] tipc: Enabling of bearer rejected, already enabled [ 437.791932][T10640] tipc: Bearer : already 2 bearers with priority 10 [ 437.797495][T10640] tipc: Bearer : trying with adjusted priority [ 437.802663][T10640] tipc: Enabled bearer , priority 9 [ 437.824719][T10639] tipc: Disabling bearer [ 437.886502][T10651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.889427][T10651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.914644][T10651] loop1: detected capacity change from 0 to 128 [ 438.886908][T10677] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1529'. [ 439.003736][T10683] loop7: detected capacity change from 0 to 256 [ 439.036518][T10687] tipc: Enabling of bearer rejected, already enabled [ 439.058024][T10687] tipc: Bearer : already 2 bearers with priority 10 [ 439.059759][T10687] tipc: Bearer : trying with adjusted priority [ 439.071290][T10687] tipc: Enabled bearer , priority 9 [ 439.085546][T10686] tipc: Disabling bearer [ 439.449440][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.453938][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.484355][T10709] loop1: detected capacity change from 0 to 128 [ 440.395857][T10731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1544'. [ 440.553155][T10743] tipc: Enabling of bearer rejected, already enabled [ 440.560908][T10743] tipc: Bearer : already 2 bearers with priority 10 [ 440.562581][T10743] tipc: Bearer : trying with adjusted priority [ 440.564316][T10743] tipc: Enabled bearer , priority 9 [ 440.580281][T10738] tipc: Disabling bearer [ 440.768726][T10757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.770797][T10757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.802141][T10794] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1559'. [ 441.979208][T10800] tipc: Enabling of bearer rejected, already enabled [ 441.983096][T10800] tipc: Bearer : already 2 bearers with priority 10 [ 441.988237][T10800] tipc: Bearer : trying with adjusted priority [ 441.990152][T10800] tipc: Enabled bearer , priority 9 [ 442.013748][T10798] tipc: Disabling bearer [ 442.220770][T10816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.232150][T10816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.345333][T10826] loop5: detected capacity change from 0 to 256 [ 454.226487][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1573'. [ 454.237771][T10853] tipc: Enabling of bearer rejected, already enabled [ 454.501619][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.503870][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.967497][T10890] loop1: detected capacity change from 0 to 256 [ 454.996320][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1587'. [ 455.277986][T10905] loop7: detected capacity change from 0 to 128 [ 455.296405][T10905] EXT4-fs: Ignoring removed nobh option [ 455.323796][T10905] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 455.417912][T10905] EXT4-fs error (device loop7): __ext4_remount:6449: comm syz.7.1589: Abort forced by user [ 455.439384][T10905] EXT4-fs (loop7): Remounting filesystem read-only [ 455.444319][T10905] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 455.560717][ T7880] EXT4-fs (loop7): unmounting filesystem. [ 455.665206][T10916] tipc: Enabling of bearer rejected, already enabled [ 455.673926][T10916] tipc: Bearer : already 2 bearers with priority 10 [ 455.676585][T10916] tipc: Bearer : trying with adjusted priority [ 455.678309][T10916] tipc: Enabled bearer , priority 9 [ 455.698665][T10915] tipc: Disabling bearer [ 456.176639][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1598'. [ 456.261121][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.274324][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.305605][T10938] loop6: detected capacity change from 0 to 128 [ 456.637293][T10957] tipc: Enabling of bearer rejected, already enabled [ 456.653572][T10957] tipc: Bearer : already 2 bearers with priority 10 [ 456.656787][T10957] tipc: Bearer : trying with adjusted priority [ 456.663107][T10957] tipc: Enabled bearer , priority 9 [ 456.677294][T10956] tipc: Disabling bearer [ 457.082517][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1611'. [ 457.521582][T11000] tipc: Enabling of bearer rejected, already enabled [ 457.524629][T11000] tipc: Bearer : already 2 bearers with priority 10 [ 457.549447][T11000] tipc: Bearer : trying with adjusted priority [ 457.551245][T11000] tipc: Enabled bearer , priority 9 [ 457.598063][T10999] tipc: Disabling bearer [ 457.631967][T11008] loop7: detected capacity change from 0 to 128 [ 457.727828][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1624'. [ 458.400502][T11034] loop7: detected capacity change from 0 to 256 [ 458.683612][T11046] tipc: Enabling of bearer rejected, already enabled [ 458.687933][T11050] loop5: detected capacity change from 0 to 128 [ 458.693909][T11046] tipc: Bearer : already 2 bearers with priority 10 [ 458.708612][T11046] tipc: Bearer : trying with adjusted priority [ 458.714048][T11046] tipc: Enabled bearer , priority 9 [ 458.719060][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1637'. [ 458.721811][T11046] tipc: Enabling of bearer rejected, already enabled [ 458.733684][T11043] tipc: Disabling bearer [ 459.488370][T11071] loop8: detected capacity change from 0 to 128 [ 459.490153][T11071] EXT4-fs: Ignoring removed nobh option [ 459.520567][T11071] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 459.527391][T11071] EXT4-fs error (device loop8): __ext4_remount:6449: comm syz.8.1645: Abort forced by user [ 459.542763][T11071] EXT4-fs (loop8): Remounting filesystem read-only [ 459.544607][T11071] EXT4-fs (loop8): re-mounted. Quota mode: none. [ 459.603686][ T7922] EXT4-fs (loop8): unmounting filesystem. [ 459.879343][T11088] loop6: detected capacity change from 0 to 128 [ 459.949274][T11090] tipc: Enabling of bearer rejected, already enabled [ 459.952882][T11090] tipc: Bearer : already 2 bearers with priority 10 [ 459.954660][T11090] tipc: Bearer : trying with adjusted priority [ 459.959570][T11090] tipc: Enabled bearer , priority 9 [ 459.982384][T11090] tipc: Enabling of bearer rejected, already enabled [ 459.992581][T11089] tipc: Disabling bearer [ 460.546144][T11115] loop6: detected capacity change from 0 to 128 [ 460.575813][T11115] EXT4-fs: Ignoring removed nobh option [ 460.656506][T11115] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 460.669016][T11115] EXT4-fs error (device loop6): __ext4_remount:6449: comm syz.6.1658: Abort forced by user [ 460.673240][T11115] EXT4-fs (loop6): Remounting filesystem read-only [ 460.683421][T11115] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 460.761570][ T7673] EXT4-fs (loop6): unmounting filesystem. [ 460.949219][T11130] loop1: detected capacity change from 0 to 128 [ 461.139468][T11140] tipc: Enabling of bearer rejected, already enabled [ 461.153110][T11140] tipc: Enabled bearer , priority 10 [ 461.167997][T11140] tipc: Enabling of bearer rejected, already enabled [ 461.181883][T11139] tipc: Disabling bearer [ 462.295569][T11160] loop1: detected capacity change from 0 to 128 [ 462.312962][T11160] EXT4-fs: Ignoring removed nobh option [ 462.334470][T11160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 462.499971][T11165] loop6: detected capacity change from 0 to 256 [ 462.548275][T11160] EXT4-fs error (device loop1): __ext4_remount:6449: comm syz.1.1673: Abort forced by user [ 462.553766][T11160] EXT4-fs (loop1): Remounting filesystem read-only [ 462.570486][T11160] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 462.571000][T11167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.573803][T11167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.617246][ T5166] EXT4-fs (loop1): unmounting filesystem. [ 463.260845][T11185] tipc: Enabling of bearer rejected, already enabled [ 463.263980][T11185] tipc: Bearer : already 2 bearers with priority 10 [ 463.272149][T11185] tipc: Bearer : trying with adjusted priority [ 463.276428][T11185] tipc: Enabled bearer , priority 9 [ 463.294362][T11185] tipc: Enabling of bearer rejected, already enabled [ 463.346783][T11184] tipc: Disabling bearer [ 464.306297][T11203] loop7: detected capacity change from 0 to 128 [ 464.308217][T11203] EXT4-fs: Ignoring removed nobh option [ 464.358542][T11203] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 464.403234][T11203] EXT4-fs error (device loop7): __ext4_remount:6449: comm syz.7.1687: Abort forced by user [ 464.419291][T11203] EXT4-fs (loop7): Remounting filesystem read-only [ 464.423439][T11203] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 464.575540][ T7880] EXT4-fs (loop7): unmounting filesystem. [ 464.600925][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.621341][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.741383][T11228] tipc: Enabling of bearer rejected, already enabled [ 464.750874][T11228] tipc: Bearer : already 2 bearers with priority 10 [ 464.771135][T11228] tipc: Bearer : trying with adjusted priority [ 464.772835][T11228] tipc: Enabled bearer , priority 9 [ 465.020777][T11228] tipc: Enabling of bearer rejected, already enabled [ 465.027560][T11227] tipc: Disabling bearer [ 465.037773][T11233] loop6: detected capacity change from 0 to 256 [ 466.216887][T11256] loop8: detected capacity change from 0 to 128 [ 466.218813][T11256] EXT4-fs: Ignoring removed nobh option [ 466.237224][T11256] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 466.269897][T11256] EXT4-fs error (device loop8): __ext4_remount:6449: comm syz.8.1709: Abort forced by user [ 466.279774][T11256] EXT4-fs (loop8): Remounting filesystem read-only [ 466.296147][T11256] EXT4-fs (loop8): re-mounted. Quota mode: none. [ 466.373227][ T7922] EXT4-fs (loop8): unmounting filesystem. [ 466.477690][T11261] tipc: Enabling of bearer rejected, already enabled [ 466.481064][T11261] tipc: Bearer : already 2 bearers with priority 10 [ 466.482894][T11261] tipc: Bearer : trying with adjusted priority [ 466.484578][T11261] tipc: Enabled bearer , priority 9 [ 466.578119][T11261] tipc: Enabling of bearer rejected, already enabled [ 466.583919][T11260] tipc: Disabling bearer [ 467.117856][T11295] loop6: detected capacity change from 0 to 512 [ 467.155229][T11295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 467.176156][T11295] EXT4-fs (loop6): orphan cleanup on readonly fs [ 467.200928][T11299] tipc: Enabling of bearer rejected, already enabled [ 467.216790][T11299] tipc: Bearer : already 2 bearers with priority 10 [ 467.218579][T11299] tipc: Bearer : trying with adjusted priority [ 467.220307][T11299] tipc: Enabled bearer , priority 9 [ 467.233052][T11295] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1721: bg 0: block 248: padding at end of block bitmap is not set [ 467.293980][T11295] Quota error (device loop6): write_blk: dquota write failed [ 467.300218][T11295] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 467.302411][T11295] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.1721: Failed to acquire dquot type 1 [ 467.310426][T11295] EXT4-fs (loop6): 1 truncate cleaned up [ 467.345756][T11295] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 467.364551][T11295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 467.366814][T11295] EXT4-fs error (device loop6): __ext4_remount:6449: comm syz.6.1721: Abort forced by user [ 467.552759][T11309] loop7: detected capacity change from 0 to 256 [ 467.706262][T11299] tipc: Enabling of bearer rejected, already enabled [ 468.084366][T11298] tipc: Disabling bearer [ 468.123631][ T7673] EXT4-fs (loop6): unmounting filesystem. [ 468.309492][T11312] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1726'. [ 468.993625][T11345] loop5: detected capacity change from 0 to 512 [ 469.020347][T11345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 469.042641][T11345] EXT4-fs (loop5): orphan cleanup on readonly fs [ 469.052618][T11345] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1735: bg 0: block 248: padding at end of block bitmap is not set [ 469.062026][T11345] Quota error (device loop5): write_blk: dquota write failed [ 469.063665][T11345] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 469.076278][T11345] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.1735: Failed to acquire dquot type 1 [ 469.112887][T11345] EXT4-fs (loop5): 1 truncate cleaned up [ 469.133798][T11345] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 469.164404][T11345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 469.171517][T11345] EXT4-fs error (device loop5): __ext4_remount:6449: comm syz.5.1735: Abort forced by user [ 469.257298][ T5925] EXT4-fs (loop5): unmounting filesystem. [ 469.951249][T11369] tipc: Enabling of bearer rejected, already enabled [ 469.963143][T11369] tipc: Enabled bearer , priority 10 [ 469.972704][T11369] tipc: Enabling of bearer rejected, already enabled [ 470.001976][T11368] tipc: Disabling bearer [ 470.260701][T11380] loop5: detected capacity change from 0 to 256 [ 470.965437][T11385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1739'. [ 472.441894][T11419] tipc: Enabling of bearer rejected, already enabled [ 472.458839][T11419] tipc: Bearer : already 2 bearers with priority 10 [ 472.460693][T11419] tipc: Bearer : trying with adjusted priority [ 472.462353][T11419] tipc: Enabled bearer , priority 9 [ 472.482400][T11419] tipc: Enabling of bearer rejected, already enabled [ 472.499116][T11422] loop8: detected capacity change from 0 to 512 [ 472.503470][T11418] tipc: Disabling bearer [ 472.521190][T11422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 472.531700][T11422] EXT4-fs (loop8): orphan cleanup on readonly fs [ 472.542611][T11422] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1750: bg 0: block 248: padding at end of block bitmap is not set [ 472.547695][T11422] Quota error (device loop8): write_blk: dquota write failed [ 472.549368][T11422] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 472.575250][T11422] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.1750: Failed to acquire dquot type 1 [ 472.582257][T11422] EXT4-fs (loop8): 1 truncate cleaned up [ 472.585814][T11422] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 472.669295][T11422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 472.671309][T11422] EXT4-fs error (device loop8): __ext4_remount:6449: comm syz.8.1750: Abort forced by user [ 473.002394][ T7922] EXT4-fs (loop8): unmounting filesystem. [ 473.011296][T11434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1752'. [ 473.139813][T11437] loop5: detected capacity change from 0 to 256 [ 474.123264][T11461] tipc: Enabling of bearer rejected, already enabled [ 475.355438][T11483] loop1: detected capacity change from 0 to 128 [ 475.362302][T11483] EXT4-fs: Ignoring removed nobh option [ 475.368336][T11483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 475.401136][T11483] EXT4-fs error (device loop1): __ext4_remount:6449: comm syz.1.1763: Abort forced by user [ 475.403732][T11483] EXT4-fs (loop1): Remounting filesystem read-only [ 475.406022][T11483] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 475.421951][ T5166] EXT4-fs (loop1): unmounting filesystem. [ 486.708971][T11461] tipc: Bearer : already 2 bearers with priority 10 [ 486.710755][T11461] tipc: Bearer : trying with adjusted priority [ 486.712319][T11461] tipc: Enabled bearer , priority 9 [ 486.723395][T11460] tipc: Disabling bearer [ 486.727355][T11492] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1766'. [ 487.405773][T11529] loop8: detected capacity change from 0 to 256 [ 488.784098][T11516] loop1: detected capacity change from 0 to 131072 [ 488.793287][T11567] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1777'. [ 488.837847][T11516] F2FS-fs (loop1): QUOTA feature is enabled, so ignore jquota_fmt [ 488.876430][T11516] F2FS-fs (loop1): Found nat_bits in checkpoint [ 488.896865][T11516] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 488.899670][T11516] F2FS-fs (loop1): Failed to read root inode [ 489.208936][T11582] loop7: detected capacity change from 0 to 256 [ 490.063511][T11611] loop1: detected capacity change from 0 to 512 [ 490.111358][T11611] EXT4-fs (loop1): Test dummy encryption mode enabled [ 490.125673][T11611] EXT4-fs error (device loop1): __ext4_fill_super:5400: inode #2: comm syz.1.1780: casefold flag without casefold feature [ 490.128942][T11611] EXT4-fs (loop1): get root inode failed [ 490.130227][T11611] EXT4-fs (loop1): mount failed [ 490.213676][T11616] tipc: Enabling of bearer rejected, already enabled [ 490.218895][T11616] tipc: Bearer : already 2 bearers with priority 10 [ 490.220766][T11616] tipc: Bearer : trying with adjusted priority [ 490.222498][T11616] tipc: Enabled bearer , priority 9 [ 490.246373][T11616] tipc: Enabling of bearer rejected, already enabled [ 490.272006][T11615] tipc: Disabling bearer [ 490.822175][T11629] loop7: detected capacity change from 0 to 256 [ 492.766697][T11650] loop7: detected capacity change from 0 to 131072 [ 492.776327][T11650] F2FS-fs (loop7): QUOTA feature is enabled, so ignore jquota_fmt [ 492.781359][T11650] F2FS-fs (loop7): Found nat_bits in checkpoint [ 492.792024][T11650] F2FS-fs (loop7): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 492.800792][T11650] F2FS-fs (loop7): Failed to read root inode [ 494.568745][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.570441][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.140231][T11645] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1790'. [ 503.160833][T11681] tipc: Enabling of bearer rejected, already enabled [ 503.396566][T11699] loop5: detected capacity change from 0 to 512 [ 503.398886][T11699] EXT4-fs (loop5): Test dummy encryption mode enabled [ 503.403304][T11699] EXT4-fs error (device loop5): __ext4_fill_super:5400: inode #2: comm syz.5.1800: casefold flag without casefold feature [ 503.414991][T11699] EXT4-fs (loop5): get root inode failed [ 503.416364][T11699] EXT4-fs (loop5): mount failed [ 503.645537][T11705] loop8: detected capacity change from 0 to 256 [ 505.752391][T11728] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1808'. [ 506.911379][ T4306] Bluetooth: hci4: link tx timeout [ 506.912627][ T4306] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 506.914253][ T4306] Bluetooth: hci4: link tx timeout [ 506.915425][ T4306] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 507.041041][T11764] tipc: Enabling of bearer rejected, already enabled [ 507.075785][T11764] tipc: Bearer : already 2 bearers with priority 10 [ 507.077515][T11764] tipc: Bearer : trying with adjusted priority [ 507.082116][T11764] tipc: Enabled bearer , priority 9 [ 507.109262][T11764] tipc: Enabling of bearer rejected, already enabled [ 507.142673][T11762] tipc: Disabling bearer [ 507.716889][T11777] loop6: detected capacity change from 0 to 256 [ 522.104245][T11789] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1820'. [ 522.114617][T11817] tipc: Enabling of bearer rejected, already enabled [ 522.502659][T11836] loop6: detected capacity change from 0 to 256 [ 523.266710][ T4303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 523.525177][T11850] loop6: detected capacity change from 0 to 256 [ 523.752244][ T4303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 523.949333][ T4303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 524.031554][ T4303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 524.584427][ T4303] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 524.671520][ T6615] ------------[ cut here ]------------ [ 524.672946][ T6615] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 524.674777][ T6615] WARNING: CPU: 0 PID: 6615 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x288 [ 524.676700][ T6615] Modules linked in: [ 524.677682][ T6615] CPU: 0 PID: 6615 Comm: kbnepd bnep0 Not tainted 6.1.116-syzkaller #0 [ 524.679514][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.681980][ T6615] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 524.683764][ T6615] pc : sysfs_remove_group+0x174/0x288 [ 524.685019][ T6615] lr : sysfs_remove_group+0x174/0x288 [ 524.686287][ T6615] sp : ffff8000219f7840 [ 524.687225][ T6615] x29: ffff8000219f7840 x28: 1fffe0001df230ca x27: 1fffe0001df23088 [ 524.689025][ T6615] x26: 0000000000000000 x25: 00000000ffffffff x24: 1ffff00002860bdc [ 524.690918][ T6615] x23: dfff800000000000 x22: dfff800000000000 x21: ffff0000ccc16820 [ 524.692754][ T6615] x20: ffff0000d53accb0 x19: ffff8000143065c0 x18: 1fffe0003679ed76 [ 524.694638][ T6615] x17: ffff8000159dd000 x16: ffff800008305dfc x15: ffff0001b3cf6bbc [ 524.696530][ T6615] x14: 1ffff00002b3c0b0 x13: dfff800000000000 x12: 0000000000000003 [ 524.698630][ T6615] x11: 0000000000ff0100 x10: 0000000000000003 x9 : 66eb202db087ec00 [ 524.700552][ T6615] x8 : 66eb202db087ec00 x7 : ffff80000827d390 x6 : 0000000000000000 [ 524.702521][ T6615] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 524.704343][ T6615] x2 : 0000000000000006 x1 : ffff8000123ec5e0 x0 : ffff80019e3c3000 [ 524.706150][ T6615] Call trace: [ 524.706943][ T6615] sysfs_remove_group+0x174/0x288 [ 524.708091][ T6615] netdev_queue_update_kobjects+0x3d4/0x470 [ 524.709402][ T6615] netdev_unregister_kobject+0x100/0x204 [ 524.710746][ T6615] unregister_netdevice_many+0x11b8/0x175c [ 524.711981][ T6615] unregister_netdev+0x178/0x1f0 [ 524.713099][ T6615] bnep_session+0x23c4/0x2584 [ 524.714142][ T6615] kthread+0x250/0x2d8 [ 524.715101][ T6615] ret_from_fork+0x10/0x20 [ 524.716074][ T6615] irq event stamp: 7132 [ 524.717054][ T6615] hardirqs last enabled at (7131): [] finish_lock_switch+0xbc/0x1e8 [ 524.719234][ T6615] hardirqs last disabled at (7132): [] el1_dbg+0x24/0x80 [ 524.721218][ T6615] softirqs last enabled at (7040): [] dev_mc_flush+0x1b4/0x1f8 [ 524.723414][ T6615] softirqs last disabled at (7038): [] local_bh_disable+0x10/0x34 [ 524.725354][ T6615] ---[ end trace 0000000000000000 ]--- [ 524.726593][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.738344][ T6615] ================================================================== [ 524.740099][ T6615] BUG: KASAN: use-after-free in device_for_each_child+0xa8/0x174 [ 524.741774][ T6615] Read of size 8 at addr ffff0000da5214c0 by task kbnepd bnep0/6615 [ 524.743546][ T6615] [ 524.744101][ T6615] CPU: 0 PID: 6615 Comm: kbnepd bnep0 Tainted: G W 6.1.116-syzkaller #0 [ 524.746072][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.748215][ T6615] Call trace: [ 524.748941][ T6615] dump_backtrace+0x1c8/0x1f4 [ 524.749906][ T6615] show_stack+0x2c/0x3c [ 524.750815][ T6615] dump_stack_lvl+0x108/0x170 [ 524.751886][ T6615] print_report+0x174/0x4c0 [ 524.752786][ T6615] kasan_report+0xd4/0x130 [ 524.753757][ T6615] __asan_report_load8_noabort+0x2c/0x38 [ 524.754923][ T6615] device_for_each_child+0xa8/0x174 [ 524.756131][ T6615] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 524.757446][ T6615] netdev_unregister_kobject+0x144/0x204 [ 524.758869][ T6615] unregister_netdevice_many+0x11b8/0x175c [ 524.760158][ T6615] unregister_netdev+0x178/0x1f0 [ 524.761224][ T6615] bnep_session+0x23c4/0x2584 [ 524.762209][ T6615] kthread+0x250/0x2d8 [ 524.763140][ T6615] ret_from_fork+0x10/0x20 [ 524.764103][ T6615] [ 524.764591][ T6615] Allocated by task 5925: [ 524.765579][ T6615] kasan_set_track+0x4c/0x80 [ 524.766543][ T6615] kasan_save_alloc_info+0x24/0x30 [ 524.767654][ T6615] __kasan_kmalloc+0xac/0xc4 [ 524.768687][ T6615] __kmalloc+0xd8/0x1c4 [ 524.769745][ T6615] hci_alloc_dev_priv+0x30/0x18a8 [ 524.770825][ T6615] vhci_create_device+0xf8/0x6d0 [ 524.772022][ T6615] vhci_write+0x318/0x3b8 [ 524.772992][ T6615] vfs_write+0x610/0x91c [ 524.773954][ T6615] ksys_write+0x15c/0x26c [ 524.774909][ T6615] __arm64_sys_write+0x7c/0x90 [ 524.776013][ T6615] invoke_syscall+0x98/0x2c0 [ 524.776974][ T6615] el0_svc_common+0x138/0x258 [ 524.778143][ T6615] do_el0_svc+0x64/0x218 [ 524.779081][ T6615] el0_svc+0x58/0x168 [ 524.779976][ T6615] el0t_64_sync_handler+0x84/0xf0 [ 524.781085][ T6615] el0t_64_sync+0x18c/0x190 [ 524.782328][ T6615] [ 524.782965][ T6615] Freed by task 5925: [ 524.783848][ T6615] kasan_set_track+0x4c/0x80 [ 524.784950][ T6615] kasan_save_free_info+0x38/0x5c [ 524.786049][ T6615] ____kasan_slab_free+0x144/0x1c0 [ 524.787284][ T6615] __kasan_slab_free+0x18/0x28 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 524.788340][ T6615] __kmem_cache_free+0x2c0/0x4b4 [ 524.789499][ T6615] kfree+0xcc/0x1b8 [ 524.790375][ T6615] hci_release_dev+0x1064/0x11cc [ 524.791538][ T6615] bt_host_release+0x70/0x88 [ 524.792674][ T6615] device_release+0x8c/0x1ac [ 524.793864][ T6615] kobject_put+0x2a8/0x41c [ 524.794889][ T6615] put_device+0x28/0x40 [ 524.795914][ T6615] hci_free_dev+0x24/0x34 [ 524.796921][ T6615] vhci_release+0x84/0xcc [ 524.798045][ T6615] __fput+0x1c8/0x7c8 [ 524.799114][ T6615] ____fput+0x20/0x30 [ 524.800103][ T6615] task_work_run+0x240/0x2f0 [ 524.801138][ T6615] do_exit+0x554/0x1a88 [ 524.802122][ T6615] do_group_exit+0x194/0x22c [ 524.803153][ T6615] get_signal+0x14a0/0x158c [ 524.804206][ T6615] do_notify_resume+0x3ac/0x3474 [ 524.805272][ T6615] el0_svc+0x9c/0x168 [ 524.806347][ T6615] el0t_64_sync_handler+0x84/0xf0 [ 524.807662][ T6615] el0t_64_sync+0x18c/0x190 [ 524.808953][ T6615] [ 524.809527][ T6615] Last potentially related work creation: [ 524.811026][ T6615] kasan_save_stack+0x40/0x70 [ 524.812067][ T6615] __kasan_record_aux_stack+0xcc/0xe8 [ 524.813339][ T6615] kasan_record_aux_stack_noalloc+0x14/0x20 [ 524.814771][ T6615] insert_work+0x64/0x384 [ 524.815862][ T6615] __queue_work+0xd48/0x136c [ 524.817026][ T6615] queue_work_on+0xc0/0x16c [ 524.818235][ T6615] hci_send_acl+0x904/0xc48 [ 524.819431][ T6615] l2cap_do_send+0x238/0x350 [ 524.820586][ T6615] l2cap_chan_send+0x190c/0x1e5c [ 524.821798][ T6615] l2cap_sock_sendmsg+0x184/0x2a8 [ 524.823078][ T6615] kernel_sendmsg+0x1c8/0x2a0 [ 524.824184][ T6615] bnep_session+0x1f28/0x2584 [ 524.825232][ T6615] kthread+0x250/0x2d8 [ 524.826181][ T6615] ret_from_fork+0x10/0x20 [ 524.827254][ T6615] [ 524.827783][ T6615] Second to last potentially related work creation: [ 524.829248][ T6615] kasan_save_stack+0x40/0x70 [ 524.830340][ T6615] __kasan_record_aux_stack+0xcc/0xe8 [ 524.831522][ T6615] kasan_record_aux_stack_noalloc+0x14/0x20 [ 524.832950][ T6615] insert_work+0x64/0x384 [ 524.833910][ T6615] __queue_work+0xd48/0x136c [ 524.835030][ T6615] queue_work_on+0xc0/0x16c [ 524.836010][ T6615] hci_send_acl+0x904/0xc48 [ 524.837094][ T6615] l2cap_do_send+0x238/0x350 [ 524.838214][ T6615] l2cap_chan_send+0x190c/0x1e5c [ 524.839392][ T6615] l2cap_sock_sendmsg+0x184/0x2a8 [ 524.840590][ T6615] kernel_sendmsg+0x1c8/0x2a0 [ 524.841611][ T6615] bnep_session+0x1f28/0x2584 [ 524.842620][ T6615] kthread+0x250/0x2d8 [ 524.843630][ T6615] ret_from_fork+0x10/0x20 [ 524.844687][ T6615] [ 524.845223][ T6615] The buggy address belongs to the object at ffff0000da520000 [ 524.845223][ T6615] which belongs to the cache kmalloc-8k of size 8192 [ 524.848510][ T6615] The buggy address is located 5312 bytes inside of [ 524.848510][ T6615] 8192-byte region [ffff0000da520000, ffff0000da522000) [ 524.851522][ T6615] [ 524.852074][ T6615] The buggy address belongs to the physical page: [ 524.853569][ T6615] page:000000007d006135 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000da524000 pfn:0x11a520 [ 524.856134][ T6615] head:000000007d006135 order:3 compound_mapcount:0 compound_pincount:0 [ 524.858000][ T6615] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 524.859829][ T6615] raw: 05ffc00000010200 fffffc0003101a08 fffffc0003bfd208 ffff0000c0002c00 [ 524.861811][ T6615] raw: ffff0000da524000 0000000000020001 00000001ffffffff 0000000000000000 [ 524.863779][ T6615] page dumped because: kasan: bad access detected [ 524.865371][ T6615] [ 524.865889][ T6615] Memory state around the buggy address: [ 524.867252][ T6615] ffff0000da521380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 524.869023][ T6615] ffff0000da521400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 524.870854][ T6615] >ffff0000da521480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 524.871598][ T4303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 524.872704][ T6615] ^ [ 524.872718][ T6615] ffff0000da521500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 524.877396][ T6615] ffff0000da521580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 524.879292][ T6615] ================================================================== [ 524.881202][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.885685][ T6615] Disabling lock debugging due to kernel taint [ 524.887041][ T6615] ================================================================================ [ 524.888959][ T6615] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 524.890706][ T6615] index 15401 is out of range for type 'unsigned long[8]' [ 524.892265][ T6615] CPU: 0 PID: 6615 Comm: kbnepd bnep0 Tainted: G B W 6.1.116-syzkaller #0 [ 524.894448][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.896718][ T6615] Call trace: [ 524.897554][ T6615] dump_backtrace+0x1c8/0x1f4 [ 524.898607][ T6615] show_stack+0x2c/0x3c [ 524.899618][ T6615] dump_stack_lvl+0x108/0x170 [ 524.900605][ T6615] dump_stack+0x1c/0x58 [ 524.901416][ T6615] __ubsan_handle_out_of_bounds+0xfc/0x148 [ 524.902886][ T6615] queued_spin_lock_slowpath+0x9fc/0xe48 [ 524.904208][ T6615] do_raw_spin_lock+0x330/0x358 [ 524.905322][ T6615] _raw_spin_lock_irqsave+0x74/0xb4 [ 524.906448][ T6615] klist_next+0x8c/0x2e4 [ 524.907437][ T6615] device_for_each_child+0xc0/0x174 [ 524.908558][ T6615] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 524.909932][ T6615] netdev_unregister_kobject+0x144/0x204 [ 524.911252][ T6615] unregister_netdevice_many+0x11b8/0x175c [ 524.912514][ T6615] unregister_netdev+0x178/0x1f0 [ 524.913665][ T6615] bnep_session+0x23c4/0x2584 [ 524.914632][ T6615] kthread+0x250/0x2d8 [ 524.915511][ T6615] ret_from_fork+0x10/0x20 [ 524.916502][ T6615] ================================================================================