last executing test programs: 6m2.69230201s ago: executing program 3 (id=57): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 6m1.677832225s ago: executing program 3 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r3, &(0x7f0000000f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000700)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpgid(0x0) kcmp(r6, r6, 0x5, r5, r4) madvise(&(0x7f00003a6000/0x3000)=nil, 0x3000, 0x14) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) unshare(0x400) r7 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) 6m0.541758202s ago: executing program 3 (id=61): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x69c780}) io_uring_enter(r3, 0x3516, 0x4, 0x0, 0x0, 0x0) 5m59.35448502s ago: executing program 3 (id=63): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24004000) socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 5m58.504494672s ago: executing program 3 (id=65): syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) io_uring_setup(0x3ea4, &(0x7f00000000c0)={0x0, 0x86f7, 0x10, 0x2, 0x378}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x19, 0x4004, @fd_index=0x2, 0x8, 0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 5m54.527639912s ago: executing program 3 (id=73): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) 5m39.25058526s ago: executing program 32 (id=73): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) 5m33.90504241s ago: executing program 2 (id=114): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 5m32.824075636s ago: executing program 2 (id=116): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='io_uring_req_failed\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x12, 0x60d, 0x1f0, 0x202, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x168, 0x1c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x800, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) ptrace$pokeuser(0x6, r3, 0x358, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x31) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 5m31.165559381s ago: executing program 2 (id=117): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x240940, 0x1c) 5m29.953789129s ago: executing program 2 (id=121): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5m28.57737029s ago: executing program 2 (id=124): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200aaaaaaaaaaaa}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 5m26.832399766s ago: executing program 2 (id=126): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000a80)={0x40, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000480)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query], &(0x7f0000000500)='GPL\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x4, 0x10, 0x8aa6, 0x7}, 0x10, 0xb1ec, 0xffffffffffffffff, 0x0, &(0x7f0000000680), &(0x7f0000000800), 0x10, 0x4, @void, @value}, 0x94) tkill(r7, 0xb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 5m10.989708752s ago: executing program 33 (id=126): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000a80)={0x40, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000480)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query], &(0x7f0000000500)='GPL\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x4, 0x10, 0x8aa6, 0x7}, 0x10, 0xb1ec, 0xffffffffffffffff, 0x0, &(0x7f0000000680), &(0x7f0000000800), 0x10, 0x4, @void, @value}, 0x94) tkill(r7, 0xb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 19.577311247s ago: executing program 5 (id=663): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000c004) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2990070911be0083000f020057a90da1f60b00000400041865ba19dd5eba61aa1ecd6691"], 0x0}, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="07000000040000000800000140000000001800", @ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000000000000000000000000000000000deffffffffffdabe70567a1c5cde22a12e50799185ffff00"], 0x50) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r3, 0x0) r4 = getpgid(r3) setpgid(0x0, r4) chdir(&(0x7f0000000140)='./file0\x00') r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x101) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000100)=""/95) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x8, 0x1, 0x9a5d, 0x10, {{0x29, 0x4, 0x1, 0x4, 0xa4, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0xb, 0xc0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_addr={0x44, 0xc, 0x67, 0x1, 0xa, [{@empty, 0x2}]}, @cipso={0x86, 0x5a, 0x1, [{0x6, 0x6, "fa65fb1e"}, {0x7, 0x9, "60d3ea581144ec"}, {0x7, 0xa, "76d099fd826ef63a"}, {0x1, 0x11, "e92478e9f196d53336ef073fc1d317"}, {0x5, 0x5, "d1e22e"}, {0x6, 0x12, "1a7dbf3d42f51b58ae1724992a518743"}, {0x6, 0x4, "3c04"}, {0x1, 0x5, "14af7f"}, {0x7, 0xa, "5d772f9623ebaa5b"}]}, @cipso={0x86, 0x18, 0x1, [{0x5, 0xf, "414a6bad870449a5a1ba537137"}, {0x2, 0x3, "9e"}]}, @generic={0x94, 0x6, "1ec93cd9"}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={@rand_addr=' \x01\x00', @remote, @dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x0, 0x0, 0x400, 0x0, 0x80040306, r7}) r8 = syz_open_dev$I2C(&(0x7f0000000380), 0x0, 0x101000) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0x85, 0x6e01, 0x1, &(0x7f00000006c0)="af"}], 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) 17.674064595s ago: executing program 4 (id=669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.298308521s ago: executing program 1 (id=671): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x1, 0x2000008}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 16.155834118s ago: executing program 4 (id=674): socket$netlink(0x10, 0x3, 0x10) timer_create(0x4, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$snapshot(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_create_ruleset(0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x8000, 0x0) 14.229817237s ago: executing program 5 (id=675): r0 = socket$igmp6(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x0, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) close(0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() r4 = epoll_create(0x20003fd) r5 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r5, &(0x7f0000000080)={r4, r5}) pwrite64(r0, &(0x7f0000000340)="901ef7c8b8b93ded44bba4cf29ea801b401aa8dae9acc14cd7f7b7c386cf1f9b13e6ed37969c2675ba06a323c4d2a11e5300d3c63d0e427c0d20ed564f5519d1da73fb549f10efa4836b623a01cfe92418d35069f6298f98fa0a7f4880f130cdf2827a1788bdf6bcaa735d222e77e4c0ceeef7641f9089bc0b0c6e7f5027ccd8699b40a904da0548c78240f72e9da558f0f222abe4f1a4942b872a414281ac3365b7d6834e9f0dc1a9860dc8db629123a9e48f", 0xb3, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="010000050000000000000f00000008000300", @ANYBLOB="0500330003000000080034"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}}, 0x0) 14.068354869s ago: executing program 1 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@resuid}, {@abort}, {}, {@block_validity}, {@bsdgroups}, {@grpid}, {@abort}, {}, {@journal_dev={'journal_dev', 0x3d, 0x8}}]}, 0xfc, 0x57b, &(0x7f0000000480)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10b142, 0x1fe) fallocate(r3, 0x10, 0x2000, 0x7fff) timer_create(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1c0) write$P9_RUNLINKAT(r4, &(0x7f00000000c0)={0x48, 0x4d, 0x2}, 0xfff2) 11.030994815s ago: executing program 4 (id=678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80800) readv(r1, &(0x7f0000004f00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x46042, 0x288) write$FUSE_OPEN(r3, &(0x7f0000000080)={0x20, 0xfffffffffffffffe}, 0x20) sendfile(r3, r2, 0x0, 0x2c62) 10.785701639s ago: executing program 1 (id=680): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 10.090132849s ago: executing program 4 (id=681): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x8, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 9.959506451s ago: executing program 5 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x8, 0x0, 0x0) 9.785678383s ago: executing program 6 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0x2020) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001840), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 9.34970359s ago: executing program 0 (id=684): listen(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x41000000}], 0x0) 8.841606338s ago: executing program 4 (id=685): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000c004) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2990070911be0083000f020057a90da1f60b00000400041865ba19dd5eba61aa1ecd6691"], 0x0}, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) getdents64(r2, &(0x7f0000000080)=""/124, 0x7c) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="07000000040000000800000140000000001800", @ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000000000000000000000000000000000deffffffffffdabe70567a1c5cde22a12e50799185ffff00"], 0x50) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r3, 0x0) r4 = getpgid(r3) setpgid(0x0, r4) chdir(&(0x7f0000000140)='./file0\x00') r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x101) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000100)=""/95) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x8, 0x1, 0x9a5d, 0x10, {{0x29, 0x4, 0x1, 0x4, 0xa4, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0xb, 0xc0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_addr={0x44, 0xc, 0x67, 0x1, 0xa, [{@empty, 0x2}]}, @cipso={0x86, 0x5a, 0x1, [{0x6, 0x6, "fa65fb1e"}, {0x7, 0x9, "60d3ea581144ec"}, {0x7, 0xa, "76d099fd826ef63a"}, {0x1, 0x11, "e92478e9f196d53336ef073fc1d317"}, {0x5, 0x5, "d1e22e"}, {0x6, 0x12, "1a7dbf3d42f51b58ae1724992a518743"}, {0x6, 0x4, "3c04"}, {0x1, 0x5, "14af7f"}, {0x7, 0xa, "5d772f9623ebaa5b"}]}, @cipso={0x86, 0x18, 0x1, [{0x5, 0xf, "414a6bad870449a5a1ba537137"}, {0x2, 0x3, "9e"}]}, @generic={0x94, 0x6, "1ec93cd9"}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={@rand_addr=' \x01\x00', @remote, @dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x0, 0x0, 0x400, 0x0, 0x80040306, r7}) r8 = syz_open_dev$I2C(&(0x7f0000000380), 0x0, 0x101000) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0x85, 0x6e01, 0x1, &(0x7f00000006c0)="af"}], 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) 7.645216095s ago: executing program 0 (id=686): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 6.64330294s ago: executing program 6 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r1, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) socketpair(0x1, 0x100000005, 0x0, 0x0) 6.273344116s ago: executing program 6 (id=688): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x8000) 6.239611347s ago: executing program 0 (id=689): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 6.080625879s ago: executing program 1 (id=690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x810, 0xffffffffffffffff, 0x33) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(r3, &(0x7f0000000080)=@un=@abs, 0x80) 5.943741411s ago: executing program 6 (id=691): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80800) readv(r1, &(0x7f0000004f00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x46042, 0x288) write$FUSE_OPEN(r3, &(0x7f0000000080)={0x20, 0xfffffffffffffffe}, 0x20) sendfile(r3, r2, 0x0, 0x2c62) 5.943388221s ago: executing program 0 (id=692): r0 = socket$igmp6(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x0, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) close(0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() r4 = epoll_create(0x20003fd) r5 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r5, &(0x7f0000000080)={r4, r5}) pwrite64(r0, &(0x7f0000000340)="901ef7c8b8b93ded44bba4cf29ea801b401aa8dae9acc14cd7f7b7c386cf1f9b13e6ed37969c2675ba06a323c4d2a11e5300d3c63d0e427c0d20ed564f5519d1da73fb549f10efa4836b623a01cfe92418d35069f6298f98fa0a7f4880f130cdf2827a1788bdf6bcaa735d222e77e4c0ceeef7641f9089bc0b0c6e7f5027ccd8699b40a904da0548c78240f72e9da558f0f222abe4f1a4942b872a414281ac3365b7d6834e9f0dc1a9860dc8db629123a9e48f", 0xb3, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="010000050000000000000f00000008000300", @ANYBLOB="0500330003000000080034"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}}, 0x0) 4.568258112s ago: executing program 1 (id=693): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket(0x10, 0x3, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044015}, 0x20000000) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6ed, &(0x7f0000000dc0)="$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") r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xa60) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x18, 0x0, 0x1, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000140)='./file0\x00', 0xee01, r5) write$cgroup_type(r2, &(0x7f0000000200), 0x175d9003) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 4.491922383s ago: executing program 6 (id=694): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1008801, &(0x7f00000000c0)=ANY=[], 0x1, 0x1f4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) 3.528547707s ago: executing program 6 (id=695): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x8, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 3.527799507s ago: executing program 4 (id=696): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3.395069779s ago: executing program 1 (id=697): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x14040, &(0x7f0000001e40)=ANY=[], 0xff, 0x5e92, &(0x7f0000018400)="$eJzs3U1vHVf9B/DfffD1Q/9No+qvKkQs3BRKS2nzHChPTVl0AQuQUNckct0qkAJKAqJVRFxlgdgALwE23bDoW+AF9DUgXgCRbFZdUAaNfU4yHl/nOiS+c6/P5yM5M785d3zP5Ovx3OuZuScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPj+Wz8+24uIK79OC45H/F8MIvoRy3W9GvXM5fz4YUSciO3meC4iBosR9frb/zwTcSEiPj0Wsbl1e61efO6A/bh45taNz3/wvb//7o93T/z0nZ983G7/0f+f/+T3dyKO//D1Tz6/82S2HQAAAEpRVVXVS2/zT6b39/2uOwUATEU+/ldJXq5Wq9XqJ1r/oT9b/VEXWjdV491pFhGx0Vynfs3gdDwAzJmN+KzrLtAh+RdtGBFPdd0JYKb1uu4Ah2Jz6/ZaL+Xbax4PVnfa898pd+W/0bt/f8d+00na15hM6+frbgzi2X36szylPsySnH+/nf+VnfZRetxh5z8t++U/2rn1qTg5/0E7/5Zd+f8pIuY2//7Y/EuV8x8+Sv4bgzne/+UPAAAAAMDRl//+f7zj87+Lj78pB/Kw87+rU+oDAAAAAAAAADxpjzv+333G/wMAAICZVb9Xr/352INl+30WW7387V7E063HA4VZbXw4IAAAAAAAAAAAAAAwHcOIlXRd/0JEPL2yUlVV/dXUrh/V464/70rffihZ17/kAQBgx6fHWvfy9yKWIuLt9Fl/CysrK1W1tLxSrVTLi/n17GhxqVpuvK/N03rZ4ugAL4iHo6r+ZkuN9ZomvV+e1N7+fvVzjarBATo2HR0GDgARsXM02nREOmKq6pno+lUO88H+f/TY/zmIrn9OAQAAgMNXVVXVSx/nfTKd8+933SkAYCry8b99XkCtVqvVavXRq5uq8e40i4jYaK5Tv2YwHD8AzJmN+KzrLtAh+RdtGBEnuu4EMNN6XXeAQ7G5dXutl/LtNY8Hqzvt+VqQXflv9LbXy+uPm07SvsZkWj9fd2MQz+7Tn+em1IdZkvPvt/O/stOeh/g/7PynZb/86+083kF/upbzH7Tzbzk6+ffH5l+qnP/wkfIfyB8AAAAAAGZY/vv/ced/8yYDAAAAAAAAwNzZ3Lq9lu97zef/vzjmcb3mnPs/j4ycf+/A+bv/9yjJ+ffb+bcuyBk05u+9+SD/f23dXvv41j+/kKczn//CYFQ/90KvPxima36qhXfjWlyP9Tiz5/HDXe1n97Qv7Go/N6H9/J72Ud2+vN3+Vl2vxS/ierxzv31xwoVRSxPaqwntOf+B/b9IOf9h46vOfyW191rT2r2P+nv2++Z03PNc/uu/X9y7d03f3Rjc37amevtOddCf7f+Tp0bxq5vrN177zdVbt26cjTTZtfRcpMkTlvNfSF85/5de2GnPv/eb++u9j0aPnP+suBvDffN/oTFfb+/LU+5bF3L+o/SV889HoPH7/zznv//+/0oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5erp1Usz1h+1Wq1WH926qRrvjWYREX9rrlO/ZvjtuG8GAMyy/0TEP7ruBJ2Rf8Hy5/3V0y913Rlgqm5+8OHPrl6/vn7jZtc9AQAAAAAAAAD+V3n8z9XG+M/b1wG1xo3eNf7rm7E6t+N/9keD7bHO0wY9Hw8f//tUPHz87+GE51uY0D6a0L44oX1pQvvYGz0acv7Pp4xz/ifThpU0/utLHfSnazn/U2ms55z/V1qPa+Zf/WWe8+/vyv/0rfd/efrmBx++eu39q++tv7f+87NnLl04f/HC+YsXT7977fr6mZ1/O+zx4cr557GvXQdalpx/zlz+Zcn5fznV8i9Lzv/FVMu/LDn//HpP/mXJ+ef3PvIvS87/5VTLvyw5/6+mWv5lyfm/kmr5lyXn/7VUy78sOf9XUy3/suT8X0u1/MuS8z+davmXJeefz3DJvyw5/3xlg/zLkvM/l2r5lyXnfz7V8i9Lzv9CquVflpz/xVTLvyw5/0upln9Zcv5fT7X8y5Lz/0aq5V+WnP/rqZZ/WXL+30y1/MuS8/9WquVflpz/t1Mt/7Lk/L+TavmXJef/3VTLvyw5/zdSLf+yPPj8fzNmzJjJM13/ZgIAAAAAAAAAAAAA2qZxOXHX2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/JcdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWHvXmPkKu/7gZ+92WtDgv+BcIsDtrkZWNhd38AhBpOE/CnphZKQNi2pcbxrs4lv9e5yEyqbQluiIBWpVUVfNE2iNIrUVqAqaqlEIqRGat81rxrxJmqlvPALqByUVEoV2OrMPM+zM7Ozc9aXsWfO+XyQ/fPunJl55syZ2fku+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Gjzx6f/ZCDLsvxP7a8NWXZx/u912d78y4VdF3qFAAAAwNl6t/b3312SvrF3FWdq2OZfr/n37y4uLi5mX3jn5Ht/triYTtiUZUNrs6x2WvRvv/j5YuM2wXPZ6MBgw9eDBVc/VHD6cMHpIwWnryk4fW3B6aMFpy/bAcusq/8+pnZh19f+uaG+S7PLspHaade3OddzA2sHB+PvcmoGaudZHDmYzWSHs+lsYtl5Bmr/Zdnrm/Pruj+L1zXYcF0bsyw79dNnDsQ1DIR9fH3WdGU1jffd2/dmm9756TMHvj331lXtZuFuWLbSLNu6JV/n81m29OuqbCBbm/ZJXOdgwzo3tlnnUNM6B2rny//dus5Tq1xnvN2jYZ0/7LDOjeF7T16XZdlCtuI2rZ7LBrP1Ldea9vdo/YjILyO/Kz+QDZ/WcbJ5FcdJfp6fXNd8nLQek3H/bw77ZHiFNTTeHW9/ec2y/X6mx0l+q3vhWM0v+8H8SkdHG3+12nSs5ts8c8PKx0Db+67NMZCO5YZjYEvRMTC4Zqh2DAwurXlL0zEwuew8g9lA7bpO3tD5GBifO3J8fPapp2+bObL/0PSh6aOTE7t2bN+5Y/vOneMHZw5PT9T/Pr1d2kfWZ4PpGNwSnmviMXhTy7aNh+TiN87d42C0Rx4H+W3/zI35gi4ezFY4xvNtnt969o+D9HO/4XEw3PA4aPuc2uZxMLyKx0G+zamtq/uZOdzwp90auvVcuKHhGLiQPw/z63zk5pWfCzeGdb1wy+n+PBxadgzEmzUQHnv5d9LrvdE7w35ZflxcnZ9w0Zpsfnb6xO1P7p+bOzGZhXFeXNpwX7UeL+sbblO27HgZPO3jZe/f/vLGq9t8f0PYV6O3dr6v8m12jHW+r2rP7u33Z9N3t2VhnGPne3+2+2mW78+UJTrsz3yb5287+9eCKZc0PP+NFD3/DY0M15//htLeGGl6/lt+1wzVVpZlp25b3fPfSPhzvp//LuuR5798Xz1ye+djIN/mhfHTPQaGOz7/XRfmQFjPzSExjDbk/vdqpy/UD9OG+7LwuBkeHgnHzXC8xubjZvuy8+SXll/31okzO262Xtd8XzW9binhcZPvqz+f6Hzc5Nu8MXn2zx3r4j8bnjvWFB0DI0Nr8vWOpIOg/ny3uC4eA7dnB7Jj2eFsKp0nv5fz6xrbtrpjYE34c76fO67skWMg31cvb+t8DOTb/GD7uX3ttDV8J23T8Nqp9fcLK2X+q4eXLq91t53rzJ+v8xM7Ov9uKN/mrR2nmzM676dbw3cuarOfWh8/Kx3TU9n52U9XhnUe3tn5d1P5NpftWuXxtDfLsjcn36z9viv8fvcf5v/ju02/9233O+U3J998YPyhH53O+gEAOHPv1f5eWFN/rdnwf6xX8///AQAAgL4Qc/9gmIn8DwAAAKURc/9QmIn8DwAAAKURc/9wmElF8v9jd+5+5d1ns/RugItBPD3uhgfvrm8XO94L4etNi0vy73/sWyOvfOXZ1V33YJZlv3zgQ223f+zuuK6643GdH2n+/jJXXruq63/04aXtGt8/4dTu+uXH27PawyB2lV8f31a73E1PTdbmGw9ktfnQwgvP1S+//nXc/uT2+vZ/Fd60ZO/Bgabzbw3ruT7MTeE9ZR7cu7Qf8hnP98rGa/7l0s8uXV8838CW99du5st/UL/c+B5RL11a3z7e7pXW/72vfueVfPsnb2i//mcH26//ZLjcn4T5iz317Rv3+Vca1v9HYf3x+uL5bv/m99uu/9Ur6tu/Go6Lr4fZuv57//TD77a7v+L17L2rfr54/RP/s6N2vnh58fJb1z/67GTT/mi9/DfeqV/Onsd/NtS4ffx+vJ7o0buaj++BcP829cizLPvOH2dN+zn7aP18/9yy/nh5x+9qv/5bW9Z5fODa2vmXbs+Gptv1tb/Z1vb2xvXs/fsNTbfnpfvC/ntn/Af55Z58KByP4fT//WH98lrfy/TV+5qfb+L2X99Qf9zGyxtvWf9LLetfuDbfd8Xrv/+d+vpfvWdt0/r3fjIcT/fXZ9H6D/31JU3n/8a36/fHiSfGjh6bnZ+ZatirjY/jtaPr1l908fvef0l4Lm39et+xucemT2ya2DSRZZv68C0Du73+b4b53/WxcO6voe5HP6sfdy9+qv5z66af179+KXz/0XB/xp+PX/vLkabjtfV+X7inPs92/beEdazWFV/9r2tXteHJz78+/09/+Fbr64J4e45/cLR2+17efHnttIE36qe3Pl8V+c8PNj+ufzw8UZuvhf26GN6Zecvl9etrvfz43iQvfrr++I2v5OL5s5b3E9kw1Hw7znb9Pw6vY75/ZfPzXzw+Xnu25d2cN2QD+RIWwvNDtlA/PW4V9/eLpy5ve33xfXiyhatOZ5krmn1qdvzwzNH5J8fnpmfnxmefenrfkWPzR+f21d67dN8Xi86/9PheX3t8T03v2pHVHu3H6qPLLvT6jz98YOqOiRunpg/unz849/Dx6ROHDszOHpiemr1x/8GD008UnX9mas/ktt3b79g2dmhmas+du3dv3z02c/RYvoz6ogrsmvjS2NET+2pnmd2zY/fkzp07JsaOHJua3nPHxMTYfNH5az+bxvJzPz52Yvrw/rmZI9NjszNPT++Z3L1r17bCd388cvzg7KbxE/NHx+dnp0+M12/Lprnat/OffUXnpxpmj4XnuxYD4dX5527dld4fN/etL694UfVNml+eZm+H94KKP9+Kvo65fyTMpCL5HwAAAKog5v7wxv9LJ8j/AAAAUBox968NM5H/AQAAoDRi7h8NM6lI/tf/1//X/1+h//+P39P/1//X/z8H9P/1/zvR/9f/7+f16//r/1Os1/r/Mfevy7JK5n8AAACogpj714eZyP8AAABQGjH3XxRmIv8DAABAacTcf3GYSTXy/0jrP/X/9f/1/xs//z9uq/+f6f/r/58h/X/9/070/0vc/39v8Jys8YKtvz/7/+v0/+k1vdb/j7n/fWEm1cj/AAAAUAkx978/zET+BwAAgNKIuf+SMBP5HwAAAEoj5v4NYSYVyf8+/1//X/+/U//f5/830v/X/z8T+v/6/53o/5e4/+/z/33+P/Rg/z/m/v8XZlKR/A8AAABVEHP/B8JM5H8AAAAojZj7Lw0zkf8BAACgNGLuvyzMpCL5X/9f/1//X/9f/1//v5v0//X/O9H/1//v5/Xr/+v/U6zX+v8x938wzKQi+R8AAACqIOb+y8NM5H8AAAAojZj7rwgzkf8BAACgNGLuvzLMpCL5X/9f/1//X/9f/1//v5v0//X/O9H/1//v5/Xr/+v/U6zX+v8x918VZlKR/A8AAABVEHP/1WEm8j8AAACURsz9Hwozkf8BAACgNGLu3xhmUpH8r/+v/6//r/+v/6//30391f8fXPEU/f86/f9m+v/6/+es/5+/FNf/p4R6rf8fc/+Hw0wqkv8BAACgCmLuvybMRP4HAACA0oi5/9owE/kfAAAASiPm/k1hJhXJ//r/+v/6/73c/6/f0mr2/1/7i9b9qf+v/9+Oz//X/8/0/8/Yhe7P9/v6ff6//j/Feq3/H3P/5jCTiuR/AAAAqIKY+7eEmcj/AAAAUBox918XZiL/AwAAQGnE3H99mElF8r/+v/6//n8v9/99/n+m/6//X0D/X/8/0/8/Yxe6P9/v69f/X13/f03RBVFq57H/P5ytov8fc/8NYSYVyf8AAABQBTH33xhmIv8DAABAacTcf1OYifwPAAAApRFz/9Ywk4rkf/1//X/9f/1//X/9/27S/9f/70T/X/+/n9ev/+/z/ynWa5//H3P/zWEmFcn/AAAAUAUx998SZiL/AwAAQGnE3H9rmIn8DwAAAKURc/9YmElF8r/+v/6//r/+v/6//n83lbX/n55H9f/1//X/9f/1//X/WVGv9f9j7r8tzKQi+R8AAACqIOb+28NM5H8AAAAojZj7x8NM5H8AAAAojZj7J8JMKpL/9f/1//X/9f/1//X/u6ms/X+f/6//n+n/6//r/+v/U6jX+v8x90+GmVQk/wMAAEAVxNy/LcxE/gcAAIDSiLl/e5iJ/A8AAAClEXP/jjCTiuR//X/9f/1//X/9f/3/btL/1//vRP9f/7+f16//r/9Ps8E23+u1/n/M/TvDTCqS/wEAAKAKYu7fFWYi/wMAAEBpxNx/R5iJ/A8AAAClEXP/nWEmFcn/+v/6//r/+v/6//r/3aT/r//fif6//n8/r1//X/+fYr3W/4+5f3eYSUXyPwAAAFRBzP0fCTOR/wEAAKA0Yu6/K8xE/gcAAIC+0u5zCKOY+z8aZlKR/K//X/b+/+Ja/X/9f/3/zuvX/+8u/X/9/070//X/+3n9+v/6/xTrtf5/zP17wkwqkv8BAACgCmLuvzvMRP4HAACA0oi5/54wE/kfAAAASiPm/r1hJhXJ//r/Ze//+/x//X/9/6L16/93l/6//n8n+v/92f8PL1v0/3uo/58fQ/r/9KJe6//H3H9vmElF8j8AAABUQcz9Hwszkf8BAACgNGLu/3iYifwPAAAApRFz/yfCTCqS//X/9f/1//X/9f/1/7tJ/1//vxP9//7s/0f6/73T//f5//SqXuv/x9x/X5hJRfI/AAAAVEHM/Z8MM5H/AQAAoDRi7v//YSbyPwAAAJRGzP33h5lUJP/r/+v/6//r/+v/6/93k/6//n8n+v/6//28fv1//X+K9Vr/P+b+XwkzqUj+BwAAgCqIuf+BMBP5HwAAAEoj5v5PhZnI/wAAAFAaMff/aphJRfK//v/56f8PpsvX/9f/1//X/9f/P5f0//X/M/3/M3ah+/P9vn79f/1/ivVa/z/m/l8LM6lI/gcAAIAqiLn/18NM5H8AAAAojZj7fyPMRP4HAACA0oi5/8Ewk4rkf/1/n/+v/6//r/+v/99N+v/6/53o/+v/9/P69f/1/ynWa/3/mPt/M8ykIvkfAAAAqiDm/ofCTOR/AAAAKI2Y+z8dZiL/AwAAQGnE3P+ZMJOK5H/9f/1//X/9f/1//f9u0v/X/+9E/1//v5/Xr/+v/0+xXuv/x9z/cJhJRfI/AAAAVEHM/Z8NM5H/AQAAoDRi7v+tMBP5HwAAAEoj5v7fDjOpSP7X/9f/1//X/9f/1//vJv3/5f3//DnsQvb/16xmQ/3/VdH/1//X/9f/p7Ne6//H3P+5MJOK5H8AAACogpj7fyfMRP4HAACA0oi5/3fDTOR/AAAAKI2Y+x8JM6lI/tf/1//X/9f/1//vdv//Df1//X+f/78C/X/9/35ev/6//j/Feq3/H3P/58NMKpL/AQAAoApi7v+9MBP5HwAAAEoj5v59YSbyPwAAAJRGzP2PhplUJP/r/+v/X7D+fziP/v/S+fT/w/1auv6/z//X/9f/X4n+v/5/P69f/1//n2K91v+PuX9/mElF8j8AAABUQcz9Xwgzkf8BAACgNGLuPxBmIv8DAABAacTcPxVmUpH8r/+v/+/z//X/9f/1/7tJ/1//vxP9f/3/fl6//r/+P8V6rf8fc/90mElF8j8AAABUQcz9B8NM5H8AAAAojZj7D4WZyP8AAABQGjH3PxZmUpH8r/+v/6//r/+v/6//3036//r/nej/6//38/r1//X/KdZr/f+Y+2fCTCqS/wEAAKAKYu7/YpiJ/A8AAAClEXP/l8JM5H8AAAAojZj7D4eZVCT/6//r/+v/6/+36//XD0n9f/3/s6f/r//fif6//n8/r1//X/+fYr3W/4+5/0iYSUXyPwAAAFRBzP1Hw0zkfwAAACiNmPuPhZnI/wAAAFAaMfcfDzOpSP7X/9f/1//X//f5//r/3aT/r//fif6//n8/r1//X/+fYr3W/4+5//fDTCqS/wEAAKAKYu4/EWYi/wMAAEBpxNw/G2Yi/wMAAEBpxNw/F2ZSmP/XdXFV54/+v/6//r/+v/6//n836f/r/3ei/6//38/r1//X/6dYr/X/Y+6fDzPx//8BAACgNGLufzzMRP4HAACA0oi5/4kwE/kfAID/Y++udwW7qjiO35a0JSGEZ+EJeASegbfA3Yq7u7u7u7u7OxSKa1ICd601ZTrdZ+xw99nr8/lnBTrt7Mz965fJNweAZeTuv2fc0mT/6//1//r/afr/085P/6//1/9fEv2//v9E/3/ZzrqfP/r79f/6f7bN1v/n7r9X3NJk/wMAAEAHufvvHbfY/wAAALCM3P33iVvsfwAAAFhG7v77xi1N9r/+X/+v/5+m//f9//y56v/1/5dA/6//P9H/X7az7ueP/n79v/6fbbP1/7n77xe3NNn/AAAA0EHu/vvHLfY/AAAALCN3/wPiFvsfAAAAlpG7/4FxS5P9r//X/+v/9f/6f/3/nvT/+v8R/b/+/8jv1//r/9k2W/+fu/9BcUuT/Q8AAAAd5O5/cNxi/wMAAMAycvc/JG6x/wEAAGAZufsfGrc02f/6f/2//l//r//X/+9J/6//H9H/6/+P/H79v/6fbbP1/7n7Hxa3NNn/AAAA0EHu/ofHLfY/AAAALCN3/yPiFvsfAAAAlpG7/5FxS5P9r//X/+v/9f/6f/3/nvT/+v8R/b/+/8jv1//r/9m2e/9/9xv/ey+2/8/df2Pc0mT/AwAAQAe5+x8Vt9j/AAAAsIzc/Y+OW+x/AAAAWEbu/sfELU32v/5f/3+u/7/lGv2//l//f+7/1/9fHfp//f+I/n/W/v/i/iT0//p//T9bdu//N3r/8/937v7Hxi1N9j8AAAB0kLv/cXGL/Q8AAADLyN3/+LjF/gcAAIBl5O5/QtzSZP/r//X/vv+v/9f/6//3pP/X/4/o/2ft/33//0r7/7tdxPv1/3QwW/+fu/+JcUuT/Q8AAAAd5O5/Utxi/wMAAMAycvc/OW6x/wEAAGAZufufErc02f/6f/2//l//r//X/+9J/6//H9H/6/+P/H7f/9f/s222/j93/1Pjlib7HwAAADrI3f+0uMX+BwAAgGXk7n963GL/AwAAwDJy9z8jbmmy//X/+n/9v/7/ivr/O+j/9f9j+n/9/4j+X/9/5PdfYv9/w/n/vv6fDmbr/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAWEbu/mfHLfY/AAAALCN3/3Pilib7X/+v/9f/6/99/1//vyf9/3L9/zX6/3P0//p/3//X/zM2W/+fu/+5cUuT/Q8AAAAd5O5/Xtxi/wMAAMAycvc/P26x/wEAAGAZuftfELc02f/6f/2//l//r//X/+9J/79c/+/7/7ei/9f/6//1/4zN1v/n7n9h3NJk/wMAAEAHuftfFLfY/wAAALCM3P0vjlvsfwAAAFhG7v6XxC1N9v+U/f91+v9j9P/Xn5yc6P/1//p//f+Y/l//P6L/v3D/f8fb+f30/3O9X/+v/2fbbP1/7v6Xxi1N9j8AAAB0kLv/ZXGL/Q8AAADLyN3/8rjF/gcAAIBl5O5/RdzSZP/fXv9/851O/7nv/1+cnv2/7//r///3Pfp//f+F6P/1/yP6f9//P/L79f/6f7bN1v/n7n9l3NJk/wMAAEAHuftfFbfY/wAAALCM3P2vjlvsfwAAAFhG7v7XxC1N9v+U3//X/+v/9f/139H/6//1/2P6f/3/if7/sp11P3/09+v/9f9sm63/z93/2rilyf4HAACADnL3vy5usf8BAABgGbn7Xx+32P8AAACwjNz9b4hbmux//b/+/8z7/2v1/0n/Hz9X/b/+/xLo//X/J/r/y3bW/fzR36//1/+zbbb+P3f/G+OWJvsfAAAAOsjd/6a4xf4HAACAZeTuf3PcYv8DAADAMnL3vyVuabL/9f/6/zPv/33/v+j/4+e6Q///nz9D/f/Z0P/r/0f0//r/I79f/6//Z9ts/X/u/rfGLU32PwAAAHSQu/9tcYv9DwAAAMvI3f/2uMX+BwAAgGXk7n9H3NJk/+v/9f/6f/1/h/5/9H79/770//r/Ef2//v/I79f/6//ZNlv/n7v/nXFLk/0PAAAAHeTuf1fcYv8DAADAMnL3vztusf8BAABgGbn73xO3NNn/+v+j9//3uCleoP/X/+v/9f9T0v/r/0f0//r/I79f/6//Z9ts/X/u/vfGLU32PwAAAHSQu/99cYv9DwAAAMvI3f/+uMX+BwAAgGXk7v9A3NJk//fo/6+7zS9bp//3/X/9v/5f/z83/b/+f0T/r/8/8vv1//p/ts3W/+fu/2Dc0mT/AwAAQAe5+z8Ut9j/AAAAsIzc/R+OW+x/AAAAWEbu/o/ELU32f4/+/7b0/6euev9/y130//r/ov/X/5/o//X/G/T/+v8jv1//r/9n22z9f+7+j8YtTfY/AAAAdJC7/2Nxi/0PAAAAy8jd//G4xf4HAACAZeTu/0TccNc7n92T/q/0//p/3//X/+v/9f970v/r/0f0//r/I79f/6//Z9ts/X/u/k/GLf7+HwAAAJaRu/9TcYv9DwAAAMvI3f/puMX+BwAAgGXk7v9M3NJk/+v/9f/6/2P3/9fq//X/k9P/6/9H9P/6/yO/X/+v/2fbbP1/7v7Pxi1N9j8AAAB0kLv/c3GL/Q8AAADLyN3/+bjF/gcAAIBl5O7/QtzSZP/r//X/+v9j9/++/6//n53+X/8/ov/X/x/5/fp//T/bZuv/c/d/MW5psv8BAACgg9z9X4pb7H8AAABYRu7+L8ct9j8AAAAsI3f/V+KWJvtf/6//1//r//X/+v896f/1/yP6f/3/kd+v/9f/s222/j93/1fjlib7HwAAADrI3f+1uMX+BwAAgGXk7v963GL/AwAAwDJy938jbmmy/1fu/0e/TP9/Sv+v/z/R/+v/d6b/1/+P6P/1/0d+v/5f/8+22fr/3P3fjFua7H8AAADoIHf/t+IW+x8AAACWkbv/23GL/Q8AAADLyN3/nbilyf5fuf8f0f+f0v/r/0/0//r/nen/9f8j+n/9/5Hfr//X/7Nttv4/d/9345Ym+x8AAAA6yN3/vbjF/gcAAIBl5O7/ftxi/wMAAMAycvf/IG5psv/1//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/zBuabL/AQAAoIPc/T+KW+x/AAAAWEbu/h/HLfY/AAAALCN3/0/ilib7X/+v/9f/6//1//r/Pen/9f8j+n/9/5Hfr//X/7Nttv4/d/9P45Ym+x8AAAA6yN3/s7jF/gcAAIBl5O7/edxi/wMAAMAycvf/Im5psv/1//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/zJuabL/AQAAoIPc/b+KW+x/AAAAWEbu/l/HLfY/AAAALCN3/2/ilib7X/+v/9f/6/8b9v/X3/r30//vS/+v/x/R/+v/j/x+/b/+n21Xrf/PX3CF/X/u/pvilib7HwAAADrI3f/buMX+BwAAgGXk7v9d3GL/AwAAwDJy998ctzTZ//p//f+S/f8N+n/9v+//z0L/r/8f0f/r/4/8fv2//p9ts33/P3f/7+OWJvsfAAAAOsjd/4e4xf4HAACAZeTu/2PcYv8DAADAMnL3/yluabL/9f/6/yX7f9//1//r/6eh/9f/j+j/9f9Hfr/+X//Pttn6/9z9f45bmux/AAAA6CB3/1/iFvsfAAAAlpG7/69xi/0PAAAAy8jd/7e45cL7//xs9PD0//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/z1u8ff/AAAAsIzc/f+IW+x/AAAAWEbu/n/GLfY/AAAALCN3/7/ilib7X/+v/9f/6//1//r/Pen/9f8j+n/9/5Hfr//X/7Nttv4/d/+/AwAA//+foDTn") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 3.31174106s ago: executing program 5 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0x2020) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001840), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 2.603321701s ago: executing program 5 (id=699): pselect6(0x0, 0x0, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x8}, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r1, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) socketpair(0x1, 0x100000005, 0x0, 0x0) 1.652045235s ago: executing program 5 (id=700): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.171646772s ago: executing program 0 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001940)="1f18e395312d0af6d9de516f9695d0191a15a3d0c6def581b80f341767d56ac6", 0x20) 0s ago: executing program 0 (id=702): openat$nullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7, @void, @value}, 0x14) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000180)=0xd0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) kernel console output (not intermixed with test programs): interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.226905][ T5073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.906527][ T5073] device hsr_slave_0 entered promiscuous mode [ 175.053268][ T5073] device hsr_slave_1 entered promiscuous mode [ 175.250527][ T4322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.480535][ T4322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.881071][ T4322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.078248][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.111835][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.785975][ T4322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.898034][ T4823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.131747][ T4933] kworker/u4:15: attempt to access beyond end of device [ 178.131747][ T4933] loop4: rw=1048577, sector=145, nr_sectors = 32 limit=128 [ 178.701791][ T5073] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.281711][ T5073] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 181.406958][ T5073] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 181.463193][ T5225] loop0: detected capacity change from 0 to 128 [ 181.519718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.614287][ T5225] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 181.699300][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.233100][ T5073] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.326321][ T4504] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.509115][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.525445][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.596592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.628696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.373367][ T4823] device veth0_vlan entered promiscuous mode [ 183.809937][ T5234] loop1: detected capacity change from 0 to 32768 [ 183.853220][ T5234] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.178 (5234) [ 183.871080][ T5234] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 183.883605][ T5234] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 183.893413][ T5234] BTRFS info (device loop1): enabling auto defrag [ 183.900250][ T5234] BTRFS info (device loop1): setting nodatacow, compression disabled [ 183.909343][ T5234] BTRFS info (device loop1): use no compression [ 183.916980][ T5234] BTRFS info (device loop1): force clearing of disk cache [ 183.925747][ T5234] BTRFS info (device loop1): turning on flush-on-commit [ 183.936706][ T5234] BTRFS info (device loop1): max_inline at 4096 [ 183.943522][ T5234] BTRFS info (device loop1): disabling free space tree [ 184.002081][ T4823] device veth1_vlan entered promiscuous mode [ 184.179085][ T4823] device veth0_macvtap entered promiscuous mode [ 184.332787][ T5234] BTRFS info (device loop1): enabling ssd optimizations [ 184.341550][ T5234] BTRFS info (device loop1): rebuilding free space tree [ 184.360744][ T5234] BTRFS info (device loop1): disabling free space tree [ 184.368524][ T5234] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 184.379305][ T5234] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 184.402622][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.553583][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.639095][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.737166][ T4823] device veth1_macvtap entered promiscuous mode [ 185.472974][ T4251] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.226751][ T5290] loop0: detected capacity change from 0 to 16 [ 187.286460][ T5290] erofs: (device loop0): mounted with root inode @ nid 36. [ 187.360314][ T5290] syz.0.184: attempt to access beyond end of device [ 187.360314][ T5290] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 188.012456][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.073745][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.476916][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.617312][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.692763][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.782792][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.851463][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.136327][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.150658][ T4823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.165293][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.177702][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.299603][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.598653][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.859446][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.948911][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.012822][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.101437][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.133756][ T4823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.169533][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.197471][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.233439][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.271633][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.360398][ T4823] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.435620][ T4823] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.454209][ T4823] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.463987][ T4383] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 190.551674][ T4823] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.964242][ T4383] usb 2-1: Using ep0 maxpacket: 8 [ 191.431297][ T4383] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 191.472302][ T4383] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.517741][ T4383] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.570856][ T4383] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.610275][ T4383] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.722238][ T4383] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.782730][ T4383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.199551][ T4383] usb 2-1: usb_control_msg returned -32 [ 192.221865][ T4383] usbtmc 2-1:16.0: can't read capabilities [ 193.280918][ T4322] device hsr_slave_0 left promiscuous mode [ 193.354757][ T4322] device hsr_slave_1 left promiscuous mode [ 193.395504][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.415213][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.443695][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.470365][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.498060][ T4322] device bridge_slave_1 left promiscuous mode [ 193.515503][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.556232][ T4322] device bridge_slave_0 left promiscuous mode [ 193.594592][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.759658][ T4322] device veth1_macvtap left promiscuous mode [ 193.778302][ T4322] device veth0_macvtap left promiscuous mode [ 193.832023][ T4322] device veth1_vlan left promiscuous mode [ 193.835274][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.850543][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.861624][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.861655][ T4322] device veth0_vlan left promiscuous mode [ 193.890777][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.899770][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.908493][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.051994][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.060056][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.330091][ T4260] usb 2-1: USB disconnect, device number 5 [ 195.762911][ T5037] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 195.963310][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 196.082905][ T5037] usb 1-1: Using ep0 maxpacket: 8 [ 196.142559][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 196.149593][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 196.156126][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 196.233446][ T5037] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 196.268066][ T5037] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 196.312762][ T5037] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.364435][ T5037] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.432836][ T5037] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.462881][ T5037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.743624][ T5037] usb 1-1: GET_CAPABILITIES returned 0 [ 196.749894][ T5037] usbtmc 1-1:16.0: can't read capabilities [ 198.053063][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 199.621771][ T4813] usb 1-1: USB disconnect, device number 5 [ 200.130835][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 200.137392][ T4813] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 200.259245][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 200.365802][ T4813] usb 1-1: config 0 has no interfaces? [ 200.404183][ T4813] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.420632][ T4813] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.433435][ T4813] usb 1-1: Product: syz [ 200.438947][ T4813] usb 1-1: Manufacturer: syz [ 200.466274][ T4813] usb 1-1: config 0 descriptor?? [ 200.509845][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 200.720638][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.744547][ T4260] usb 1-1: USB disconnect, device number 6 [ 201.841440][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.268608][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 204.991069][ T4322] bond0 (unregistering): Released all slaves [ 205.783026][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 206.969858][ T5379] device hsr_slave_1 left promiscuous mode [ 207.058565][ T5397] loop4: detected capacity change from 0 to 16 [ 207.077709][ T5397] erofs: (device loop4): mounted with root inode @ nid 36. [ 207.104447][ T5397] syz.4.212: attempt to access beyond end of device [ 207.104447][ T5397] loop4: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 207.963025][ T5073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.167492][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.263353][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.079442][ T5073] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.123670][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.133907][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.144237][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.151926][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.209073][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.222437][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.283049][ T4383] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 209.292298][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.303759][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.310937][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.327054][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.370739][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.438622][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.483193][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.495651][ T4383] usb 5-1: config 0 has no interfaces? [ 209.506127][ T4383] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.540112][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.562886][ T4383] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.571674][ T4383] usb 5-1: Product: syz [ 209.594590][ T4383] usb 5-1: Manufacturer: syz [ 209.615862][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.634725][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.643514][ T4383] usb 5-1: config 0 descriptor?? [ 209.739288][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.754004][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.777702][ T5073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.809322][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.877462][ T4383] usb 5-1: USB disconnect, device number 2 [ 209.884368][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.915053][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.098628][ T4322] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.216174][ T5327] chnl_net:caif_netlink_parms(): no params data found [ 210.317798][ T4322] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.586727][ T4322] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.643599][ T5429] loop2: detected capacity change from 0 to 7 [ 210.718786][ T5429] Dev loop2: unable to read RDB block 7 [ 210.773166][ T5429] loop2: AHDI p2 p3 [ 210.790173][ T5429] loop2: partition table partially beyond EOD, truncated [ 210.812486][ T4322] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.871581][ T5429] loop2: p2 start 1702059890 is beyond EOD, truncated [ 211.935545][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.978016][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.000998][ T5327] device bridge_slave_0 entered promiscuous mode [ 212.015452][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.039487][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.121586][ T5073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.173228][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.243267][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.727988][ T5327] device bridge_slave_1 entered promiscuous mode [ 213.841507][ T5327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.991145][ T5327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.635489][ T5456] process 'syz.4.220' launched './file1' with NULL argv: empty string added [ 215.168591][ T5327] team0: Port device team_slave_0 added [ 215.209766][ T5327] team0: Port device team_slave_1 added [ 216.404640][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.412215][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.520633][ T5327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.572214][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.602744][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.700214][ T5327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.742855][ T4570] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 216.987040][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.011269][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.061512][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.081527][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.091865][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.100997][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.154254][ T4570] usb 2-1: config 0 has no interfaces? [ 217.430514][ T4570] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.585140][ T4570] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.779270][ T4570] usb 2-1: Product: syz [ 217.793667][ T4570] usb 2-1: Manufacturer: syz [ 217.828701][ T4570] usb 2-1: config 0 descriptor?? [ 217.936023][ T5327] device hsr_slave_0 entered promiscuous mode [ 217.984782][ T5327] device hsr_slave_1 entered promiscuous mode [ 217.995473][ T5327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.012133][ T5327] Cannot create hsr debugfs directory [ 218.019571][ T5073] device veth0_vlan entered promiscuous mode [ 218.071235][ T4813] usb 2-1: USB disconnect, device number 6 [ 218.219845][ T5073] device veth1_vlan entered promiscuous mode [ 218.512816][ T126] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 218.742859][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 218.805384][ T126] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 218.927956][ T126] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 219.000328][ T126] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.093243][ T126] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.173244][ T126] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.202714][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.465839][ T126] usb 5-1: GET_CAPABILITIES returned 0 [ 219.472500][ T126] usbtmc 5-1:16.0: can't read capabilities [ 219.492295][ T5073] device veth0_macvtap entered promiscuous mode [ 220.095229][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.138059][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.181380][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.953133][ T4322] device hsr_slave_0 left promiscuous mode [ 220.961300][ T4322] device hsr_slave_1 left promiscuous mode [ 220.983929][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.992413][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.024901][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.042769][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.063573][ T4322] device bridge_slave_1 left promiscuous mode [ 221.071468][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.102403][ T4322] device bridge_slave_0 left promiscuous mode [ 221.116622][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.136462][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.149699][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.159887][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.170650][ T4270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.182158][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.191556][ T4270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.280023][ T4813] usb 5-1: USB disconnect, device number 3 [ 221.303105][ T4322] device veth1_macvtap left promiscuous mode [ 221.356671][ T4322] device veth0_macvtap left promiscuous mode [ 221.534755][ T4322] device veth1_vlan left promiscuous mode [ 221.541730][ T4322] device veth0_vlan left promiscuous mode [ 224.182754][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 224.644471][ T5529] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 225.382360][ T5536] loop4: detected capacity change from 0 to 128 [ 225.433216][ T5536] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 226.496666][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 227.142582][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 227.236374][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 227.331586][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.457992][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.202780][ T5549] loop0: detected capacity change from 0 to 32768 [ 228.214442][ T5549] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.242 (5549) [ 228.232509][ T5549] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 228.246481][ T5549] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 228.256135][ T5549] BTRFS info (device loop0): enabling auto defrag [ 228.262972][ T5549] BTRFS info (device loop0): setting nodatacow, compression disabled [ 228.271383][ T5549] BTRFS info (device loop0): use no compression [ 228.278144][ T5549] BTRFS info (device loop0): force clearing of disk cache [ 228.285644][ T5549] BTRFS info (device loop0): turning on flush-on-commit [ 228.293637][ T5549] BTRFS info (device loop0): max_inline at 4096 [ 228.300438][ T5549] BTRFS info (device loop0): disabling free space tree [ 228.481949][ T4322] bond0 (unregistering): Released all slaves [ 228.520039][ T5549] BTRFS info (device loop0): enabling ssd optimizations [ 228.528968][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 228.537435][ T5549] BTRFS info (device loop0): rebuilding free space tree [ 228.567123][ T5549] BTRFS info (device loop0): disabling free space tree [ 228.575721][ T5549] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 228.589022][ T5549] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 229.754209][ T4262] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 230.610593][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 231.740867][ T5327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.082163][ T5327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.150976][ T5327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.232264][ T5327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.727560][ T5505] chnl_net:caif_netlink_parms(): no params data found [ 232.864133][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.898354][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.928859][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.106317][ T5327] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.248295][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.309890][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.338886][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.346669][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.391594][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.443956][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.462004][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.488552][ T5505] device bridge_slave_0 entered promiscuous mode [ 233.603672][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.634195][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.701065][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.708989][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.938023][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.958499][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.154476][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 234.757123][ T5505] device bridge_slave_1 entered promiscuous mode [ 234.922587][ T5634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'. [ 235.001860][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.205572][ T5637] loop1: detected capacity change from 0 to 128 [ 235.221164][ T5637] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 236.419380][ T5641] loop0: detected capacity change from 0 to 32768 [ 236.428124][ T5641] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.253 (5641) [ 236.456113][ T5641] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 236.466852][ T5641] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 236.476057][ T5641] BTRFS info (device loop0): enabling auto defrag [ 236.482919][ T5641] BTRFS info (device loop0): setting nodatacow, compression disabled [ 236.491352][ T5641] BTRFS info (device loop0): use no compression [ 236.497990][ T5641] BTRFS info (device loop0): force clearing of disk cache [ 236.505488][ T5641] BTRFS info (device loop0): turning on flush-on-commit [ 236.512937][ T5641] BTRFS info (device loop0): max_inline at 4096 [ 236.519507][ T5641] BTRFS info (device loop0): disabling free space tree [ 236.632986][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.723348][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.830889][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.891748][ T5661] loop2: detected capacity change from 0 to 7 [ 236.933948][ T5661] Dev loop2: unable to read RDB block 7 [ 236.934312][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.940513][ T5661] loop2: AHDI p1 p2 p3 [ 236.979025][ T5641] BTRFS info (device loop0): enabling ssd optimizations [ 236.987811][ T5641] BTRFS info (device loop0): rebuilding free space tree [ 237.005249][ T5641] BTRFS info (device loop0): disabling free space tree [ 237.012317][ T5641] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.023029][ T5641] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.042884][ T5661] loop2: partition table partially beyond EOD, truncated [ 237.061894][ T5661] loop2: p1 start 1601398130 is beyond EOD, truncated [ 237.236728][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.246757][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.256732][ T5661] loop2: p2 start 1702059890 is beyond EOD, truncated [ 237.267621][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.379377][ T5505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.471769][ T5327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.574089][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.600285][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.617222][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.654913][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.709377][ T5505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.725153][ T5668] loop1: detected capacity change from 0 to 2048 [ 237.858694][ T5505] team0: Port device team_slave_0 added [ 237.935499][ T5505] team0: Port device team_slave_1 added [ 237.962295][ T5668] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 238.409940][ T5505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.428539][ T5505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.544397][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 238.551461][ T5505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.659253][ T5505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.676009][ T5505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.792828][ T5505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.861816][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.898424][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.017601][ T5327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.094720][ T5505] device hsr_slave_0 entered promiscuous mode [ 239.123183][ T5505] device hsr_slave_1 entered promiscuous mode [ 239.146518][ T5505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.159045][ T5505] Cannot create hsr debugfs directory [ 242.247479][ T4262] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 243.787779][ T5735] loop1: detected capacity change from 0 to 128 [ 243.866801][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.894601][ T5735] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 243.922221][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.309173][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.924271][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.110394][ T5327] device veth0_vlan entered promiscuous mode [ 245.266466][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.319239][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.320100][ T5746] loop2: detected capacity change from 0 to 7 [ 245.515427][ T5746] Dev loop2: unable to read RDB block 7 [ 245.596184][ T5746] loop2: AHDI p1 p2 p3 [ 245.663488][ T5746] loop2: partition table partially beyond EOD, truncated [ 245.753179][ T5746] loop2: p1 start 1601398130 is beyond EOD, truncated [ 245.762020][ T5746] loop2: p2 start 1702059890 is beyond EOD, truncated [ 245.926487][ T5327] device veth1_vlan entered promiscuous mode [ 246.013547][ T4322] device hsr_slave_0 left promiscuous mode [ 246.233632][ T4322] device hsr_slave_1 left promiscuous mode [ 246.255122][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.279957][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.305232][ T4322] device bridge_slave_1 left promiscuous mode [ 246.322369][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.364252][ T4322] device bridge_slave_0 left promiscuous mode [ 246.370749][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.553190][ T5768] loop4: detected capacity change from 0 to 32768 [ 247.577454][ T5768] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.269 (5768) [ 247.595350][ T5768] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 247.606800][ T5768] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 247.616609][ T5768] BTRFS info (device loop4): enabling auto defrag [ 247.624295][ T5768] BTRFS info (device loop4): setting nodatacow, compression disabled [ 247.634360][ T5768] BTRFS info (device loop4): use no compression [ 247.642395][ T5768] BTRFS info (device loop4): force clearing of disk cache [ 247.650656][ T5768] BTRFS info (device loop4): turning on flush-on-commit [ 247.659401][ T5768] BTRFS info (device loop4): max_inline at 4096 [ 247.667672][ T5768] BTRFS info (device loop4): disabling free space tree [ 247.817574][ T4322] device veth0_macvtap left promiscuous mode [ 247.824410][ T4322] device veth1_vlan left promiscuous mode [ 247.831710][ T4322] device veth0_vlan left promiscuous mode [ 247.868492][ T5768] BTRFS info (device loop4): enabling ssd optimizations [ 247.877479][ T5768] BTRFS info (device loop4): rebuilding free space tree [ 247.898333][ T5768] BTRFS info (device loop4): disabling free space tree [ 247.906135][ T5768] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 247.918056][ T5768] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 248.202563][ T4252] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 249.850282][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 249.933463][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 250.016717][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.242508][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.288039][ T4322] bond0 (unregistering): Released all slaves [ 251.475326][ T5808] loop0: detected capacity change from 0 to 128 [ 251.515126][ T5808] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 251.861841][ T5327] device veth0_macvtap entered promiscuous mode [ 252.811678][ T5327] device veth1_macvtap entered promiscuous mode [ 253.076040][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.098989][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.114212][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.136747][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.435653][ T5505] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.448606][ T5505] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.470357][ T5505] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.495281][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 253.722580][ T5824] loop2: detected capacity change from 0 to 7 [ 253.946671][ T5505] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.973869][ T5824] Dev loop2: unable to read RDB block 7 [ 253.991748][ T5824] loop2: AHDI p2 p3 [ 254.034918][ T5824] loop2: partition table partially beyond EOD, truncated [ 254.075759][ T5824] loop2: p2 start 1702059890 is beyond EOD, truncated [ 254.519855][ T5829] loop1: detected capacity change from 0 to 32768 [ 254.553976][ T5829] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.278 (5829) [ 254.606908][ T5829] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 254.617461][ T5829] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 254.626725][ T5829] BTRFS info (device loop1): enabling auto defrag [ 254.633301][ T5829] BTRFS info (device loop1): setting nodatacow, compression disabled [ 254.641467][ T5829] BTRFS info (device loop1): use no compression [ 254.647849][ T5829] BTRFS info (device loop1): force clearing of disk cache [ 254.655086][ T5829] BTRFS info (device loop1): turning on flush-on-commit [ 254.662108][ T5829] BTRFS info (device loop1): max_inline at 4096 [ 254.668484][ T5829] BTRFS info (device loop1): disabling free space tree [ 255.028070][ T5851] loop0: detected capacity change from 0 to 1024 [ 255.559943][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.571740][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.882776][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.893319][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.902858][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.917720][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.926949][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.936665][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.963656][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.971867][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.983138][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.994394][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.003637][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 256.011514][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.086103][ T5836] fuse: Unknown parameter 'us00000000000000000000' [ 256.209675][ T5829] BTRFS info (device loop1): enabling ssd optimizations [ 256.218180][ T5829] BTRFS info (device loop1): rebuilding free space tree [ 256.407714][ T5505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.419454][ T5829] BTRFS info (device loop1): disabling free space tree [ 256.429813][ T5829] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 256.440625][ T5829] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 257.435160][ T4251] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 258.042854][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 258.102504][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.145306][ T4322] hfsplus: b-tree write err: -5, ino 4 [ 258.193181][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.217877][ T5505] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.229062][ T5875] loop1: detected capacity change from 0 to 128 [ 258.264652][ T5875] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 258.298870][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.482501][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.491888][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.499556][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.592036][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.339170][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.364220][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.714664][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.722132][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.122839][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 260.180299][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.240322][ T5891] loop2: detected capacity change from 0 to 7 [ 260.319162][ T5891] Dev loop2: unable to read RDB block 7 [ 260.371141][ T5891] loop2: AHDI p2 p3 [ 260.376128][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.412530][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.416639][ T5891] loop2: partition table partially beyond EOD, truncated [ 260.485323][ T5891] loop2: p2 start 1702059890 is beyond EOD, truncated [ 260.502346][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.699439][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.714755][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.743847][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.771751][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.791177][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.204552][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.826618][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.862109][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.204284][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 262.215969][ T5908] loop4: detected capacity change from 0 to 32768 [ 262.231533][ T5908] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.292 (5908) [ 262.385941][ T5908] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 262.398668][ T5908] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 262.408088][ T5908] BTRFS info (device loop4): enabling auto defrag [ 262.415101][ T5908] BTRFS info (device loop4): setting nodatacow, compression disabled [ 262.424596][ T5908] BTRFS info (device loop4): use no compression [ 262.431664][ T5908] BTRFS info (device loop4): force clearing of disk cache [ 262.439196][ T5908] BTRFS info (device loop4): turning on flush-on-commit [ 262.446949][ T5908] BTRFS info (device loop4): max_inline at 4096 [ 262.453753][ T5908] BTRFS info (device loop4): disabling free space tree [ 264.283761][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 264.489723][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 264.652229][ T5941] loop1: detected capacity change from 0 to 128 [ 264.701700][ T5908] BTRFS info (device loop4): enabling ssd optimizations [ 264.711595][ T5908] BTRFS info (device loop4): rebuilding free space tree [ 264.729763][ T5908] BTRFS info (device loop4): disabling free space tree [ 264.737029][ T5908] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 264.746974][ T5908] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 264.802265][ T5941] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 266.154386][ T4252] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 270.361753][ T5505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.529618][ T5986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.302'. [ 271.898269][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.912949][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.591072][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.603197][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.613330][ T5854] device bridge_slave_0 entered promiscuous mode [ 273.654372][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.549451][ T6008] loop0: detected capacity change from 0 to 32768 [ 274.557738][ T6008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.308 (6008) [ 274.568234][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.603823][ T6008] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.615717][ T6008] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 274.626027][ T6008] BTRFS info (device loop0): enabling auto defrag [ 274.632533][ T6008] BTRFS info (device loop0): setting nodatacow, compression disabled [ 274.640882][ T6008] BTRFS info (device loop0): use no compression [ 274.647749][ T6008] BTRFS info (device loop0): force clearing of disk cache [ 274.655605][ T6008] BTRFS info (device loop0): turning on flush-on-commit [ 274.664456][ T6008] BTRFS info (device loop0): max_inline at 4096 [ 274.665538][ T5854] device bridge_slave_1 entered promiscuous mode [ 274.673278][ T6008] BTRFS info (device loop0): disabling free space tree [ 274.841633][ T6024] loop4: detected capacity change from 0 to 128 [ 274.932796][ T6008] BTRFS info (device loop0): enabling ssd optimizations [ 274.941896][ T6008] BTRFS info (device loop0): rebuilding free space tree [ 274.943539][ T6024] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 274.976121][ T6008] BTRFS info (device loop0): disabling free space tree [ 274.983315][ T6008] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 274.993669][ T6008] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 275.077500][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.096982][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.115125][ T6006] loop1: detected capacity change from 0 to 32768 [ 276.164326][ T6006] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.306 (6006) [ 276.299121][ T6006] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 276.344181][ T6006] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 276.355476][ T6040] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.310'. [ 276.373247][ T6006] BTRFS info (device loop1): using free space tree [ 276.446715][ T4262] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 276.618963][ T6006] BTRFS error (device loop1): open_ctree failed: -12 [ 277.986341][ T5854] team0: Port device team_slave_0 added [ 278.188724][ T5854] team0: Port device team_slave_1 added [ 279.236071][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.362753][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.812896][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.038496][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.069495][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.086202][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.102192][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.226723][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.848469][ T5854] device hsr_slave_0 entered promiscuous mode [ 281.051772][ T5854] device hsr_slave_1 entered promiscuous mode [ 281.335511][ T6097] loop4: detected capacity change from 0 to 128 [ 281.456662][ T6097] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 281.491140][ T6095] loop1: detected capacity change from 0 to 32768 [ 281.500651][ T6095] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.318 (6095) [ 281.515465][ T5227] device hsr_slave_0 left promiscuous mode [ 281.525719][ T6095] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 281.536293][ T6095] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 281.545238][ T6095] BTRFS info (device loop1): enabling auto defrag [ 281.551907][ T6095] BTRFS info (device loop1): setting nodatacow, compression disabled [ 281.560188][ T6095] BTRFS info (device loop1): use no compression [ 281.567344][ T6095] BTRFS info (device loop1): force clearing of disk cache [ 281.575741][ T6095] BTRFS info (device loop1): turning on flush-on-commit [ 281.583197][ T6095] BTRFS info (device loop1): max_inline at 4096 [ 281.589594][ T6095] BTRFS info (device loop1): disabling free space tree [ 281.619368][ T5227] device hsr_slave_1 left promiscuous mode [ 281.684616][ T5227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.900296][ T5227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.058365][ T5227] device bridge_slave_1 left promiscuous mode [ 282.291274][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.367385][ T6095] BTRFS info (device loop1): enabling ssd optimizations [ 282.376439][ T6095] BTRFS info (device loop1): rebuilding free space tree [ 282.395107][ T6095] BTRFS info (device loop1): disabling free space tree [ 282.402379][ T6095] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 282.413378][ T6095] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 282.483737][ T5227] device bridge_slave_0 left promiscuous mode [ 282.490451][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.518040][ T4270] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.528905][ T4270] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.541254][ T4270] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.551673][ T4270] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.565054][ T4268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.573296][ T4268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.608107][ T6126] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.320'. [ 282.728893][ T5227] device veth1_macvtap left promiscuous mode [ 282.804765][ T5227] device veth0_macvtap left promiscuous mode [ 282.811607][ T5227] device veth1_vlan left promiscuous mode [ 282.817579][ T5227] device veth0_vlan left promiscuous mode [ 283.342244][ T4251] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 284.604018][ T4268] Bluetooth: hci5: command 0x0409 tx timeout [ 284.948892][ T6141] loop1: detected capacity change from 0 to 1024 [ 285.060872][ T6140] fuse: Unknown parameter 'us00000000000000000000' [ 285.565312][ T56] hfsplus: b-tree write err: -5, ino 4 [ 286.447655][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'. [ 286.692882][ T4268] Bluetooth: hci5: command 0x041b tx timeout [ 286.935551][ T5227] team0 (unregistering): Port device team_slave_1 removed [ 287.065474][ T5227] team0 (unregistering): Port device team_slave_0 removed [ 287.146667][ T5227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.302072][ T6160] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.329'. [ 287.373142][ T5227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.093492][ T6166] loop0: detected capacity change from 0 to 32768 [ 288.127366][ T6166] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.331 (6166) [ 288.154008][ T6166] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 288.164341][ T6166] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 288.173129][ T6166] BTRFS info (device loop0): enabling auto defrag [ 288.179675][ T6166] BTRFS info (device loop0): setting nodatacow, compression disabled [ 288.188024][ T6166] BTRFS info (device loop0): use no compression [ 288.194611][ T6166] BTRFS info (device loop0): force clearing of disk cache [ 288.201925][ T6166] BTRFS info (device loop0): turning on flush-on-commit [ 288.209267][ T6166] BTRFS info (device loop0): max_inline at 4096 [ 288.215699][ T6166] BTRFS info (device loop0): disabling free space tree [ 288.462261][ T6166] BTRFS info (device loop0): enabling ssd optimizations [ 288.481328][ T6166] BTRFS info (device loop0): rebuilding free space tree [ 288.517615][ T6166] BTRFS info (device loop0): disabling free space tree [ 288.524874][ T6166] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 288.534781][ T6166] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 288.631645][ T5288] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 288.805000][ T4268] Bluetooth: hci5: command 0x040f tx timeout [ 288.828595][ T5288] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 288.870480][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.918615][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.928560][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 288.943453][ T5288] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 288.952565][ T5288] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 288.961340][ T5288] usb 2-1: Manufacturer: syz [ 288.982877][ T5288] usb 2-1: config 0 descriptor?? [ 289.300825][ T5227] bond0 (unregistering): Released all slaves [ 289.382261][ T4262] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 289.421102][ T5288] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 289.430428][ T5288] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 289.495972][ T5288] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 290.051232][ T6194] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 290.842861][ T4268] Bluetooth: hci5: command 0x0419 tx timeout [ 292.233545][ T4814] usb 2-1: USB disconnect, device number 7 [ 292.692304][ T6213] device veth0_vlan left promiscuous mode [ 292.699180][ T6213] device veth0_vlan entered promiscuous mode [ 292.711460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.535706][ T6216] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.338'. [ 293.614847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.668289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.718771][ T6123] chnl_net:caif_netlink_parms(): no params data found [ 293.865583][ T6222] loop1: detected capacity change from 0 to 2048 [ 294.012734][ T6222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 294.223648][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 294.233704][ T6208] loop0: detected capacity change from 0 to 40427 [ 294.252290][ T6208] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 294.282352][ T6208] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2 [ 294.297023][ T6208] F2FS-fs (loop0): invalid crc value [ 294.362173][ T6208] F2FS-fs (loop0): Found nat_bits in checkpoint [ 294.380357][ T5854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 294.558684][ T5854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 294.613811][ T5854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 294.728212][ T6208] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 294.852944][ T5854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 294.926863][ T27] audit: type=1800 audit(1743369668.793:20): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.336" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 294.948663][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.972970][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.981860][ T6123] device bridge_slave_0 entered promiscuous mode [ 295.023853][ T4262] syz-executor: attempt to access beyond end of device [ 295.023853][ T4262] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 295.064398][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.073924][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.103469][ T6123] device bridge_slave_1 entered promiscuous mode [ 295.612068][ T6246] netlink: 44 bytes leftover after parsing attributes in process `syz.4.342'. [ 295.671168][ T6123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.737120][ T6123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.945285][ T6123] team0: Port device team_slave_0 added [ 296.122186][ T6254] loop1: detected capacity change from 0 to 1024 [ 296.178338][ T6123] team0: Port device team_slave_1 added [ 296.771722][ T6253] fuse: Unknown parameter 'us00000000000000000000' [ 296.838992][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.884530][ T6258] loop0: detected capacity change from 0 to 128 [ 297.017550][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.032827][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.065150][ T9] hfsplus: b-tree write err: -5, ino 4 [ 297.076918][ T6258] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 297.102166][ T6258] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.142855][ T6123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.188284][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.443478][ T4262] EXT4-fs (loop0): unmounting filesystem. [ 298.750932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.775090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.829187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.857534][ T6273] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.347'. [ 298.908329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.918012][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.927250][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.936326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.945425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.954389][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.961639][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.970428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.001528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.068664][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.129937][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.168471][ T6123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.585973][ T6270] device veth0_vlan left promiscuous mode [ 301.594081][ T6270] device veth0_vlan entered promiscuous mode [ 301.974291][ T6291] loop0: detected capacity change from 0 to 32768 [ 301.988649][ T6291] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 301.997197][ T6291] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 302.022701][ T6291] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 302.077568][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.113824][ T6291] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 302.130741][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.264567][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.330448][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.383886][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.498175][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.047337][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.064968][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.110079][ T6123] device hsr_slave_0 entered promiscuous mode [ 303.126979][ T6123] device hsr_slave_1 entered promiscuous mode [ 303.169677][ T6123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.181926][ T6123] Cannot create hsr debugfs directory [ 303.258513][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.300782][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.330683][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.350456][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.796811][ T6314] loop0: detected capacity change from 0 to 1024 [ 303.941349][ T6314] fuse: Unknown parameter 'us00000000000000000000' [ 304.039792][ T5227] device hsr_slave_0 left promiscuous mode [ 304.090020][ T5227] device hsr_slave_1 left promiscuous mode [ 304.103240][ T5227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.121989][ T5227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.165613][ T5227] device bridge_slave_1 left promiscuous mode [ 304.192101][ T5048] hfsplus: b-tree write err: -5, ino 4 [ 304.202898][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.216177][ T5227] device bridge_slave_0 left promiscuous mode [ 304.226655][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.549562][ T6356] loop4: detected capacity change from 0 to 1024 [ 307.577484][ T5227] team0 (unregistering): Port device team_slave_1 removed [ 309.132546][ T5227] team0 (unregistering): Port device team_slave_0 removed [ 309.290892][ T5227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.390373][ T5227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.420815][ T4386] hfsplus: b-tree write err: -5, ino 4 [ 309.505075][ T4389] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 309.635566][ T6369] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.367'. [ 309.712768][ T4389] usb 2-1: Using ep0 maxpacket: 16 [ 309.720975][ T4389] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.740553][ T4389] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 309.768966][ T4389] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 309.779265][ T4389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.789776][ T4389] usb 2-1: config 0 descriptor?? [ 310.743709][ T6375] autofs4:pid:6375:autofs_fill_super: called with bogus options [ 310.963927][ T5227] bond0 (unregistering): Released all slaves [ 311.531840][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.575914][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.630925][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.824990][ T6123] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 312.878875][ T6123] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 312.945774][ T6123] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.001502][ T6123] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 314.683474][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.758851][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.777036][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.805175][ T5605] usb 2-1: USB disconnect, device number 8 [ 314.867010][ T6123] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.933778][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.944101][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.983921][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.991186][ T5227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.060568][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.124936][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.143858][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.169233][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.176565][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.189044][ T6424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.375'. [ 315.252200][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.267201][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.340359][ T6420] loop0: detected capacity change from 0 to 4096 [ 315.397051][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.433653][ T6428] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.376'. [ 315.444259][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.492320][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.562358][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.622026][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.657344][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.721806][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.774401][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.844317][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.149728][ T4262] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 316.884317][ T4262] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 316.927618][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.932962][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.933995][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.947082][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.957303][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.975606][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.986353][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 317.006496][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.444867][ T4389] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 318.190210][ T6451] device veth0_vlan left promiscuous mode [ 318.198005][ T6451] device veth0_vlan entered promiscuous mode [ 318.342675][ T4389] usb 5-1: Using ep0 maxpacket: 16 [ 318.356966][ T4389] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.393105][ T4389] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 318.432218][ T4389] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.442802][ T4389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.454329][ T4389] usb 5-1: config 0 descriptor?? [ 318.489344][ T6454] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«Q [ 318.667874][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.694356][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.707741][ T6123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.748952][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 319.035535][ T6462] block device autoloading is deprecated and will be removed. [ 319.083033][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 319.128426][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.153112][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.189459][ T6437] device bridge_slave_0 entered promiscuous mode [ 319.228301][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.251685][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.284013][ T6437] device bridge_slave_1 entered promiscuous mode [ 319.378422][ T6474] autofs4:pid:6474:autofs_fill_super: called with bogus options [ 319.890833][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.096252][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.339048][ T6437] team0: Port device team_slave_0 added [ 320.496927][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 320.531990][ T6483] device bridge0 entered promiscuous mode [ 320.548133][ T6483] device macsec1 entered promiscuous mode [ 320.572858][ T6437] team0: Port device team_slave_1 added [ 320.738653][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.773471][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.814200][ T6491] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.385'. [ 320.843683][ T6437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.943811][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.950938][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.031813][ T6437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.163792][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 321.181421][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.190647][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.378314][ T6502] loop0: detected capacity change from 0 to 1024 [ 322.230911][ T6502] fuse: Unknown parameter 'us00000000000000000000' [ 322.267517][ T129] usb 5-1: USB disconnect, device number 4 [ 322.347563][ T6437] device hsr_slave_0 entered promiscuous mode [ 322.392300][ T6437] device hsr_slave_1 entered promiscuous mode [ 322.453983][ T6437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.461618][ T6437] Cannot create hsr debugfs directory [ 322.543446][ T4479] hfsplus: b-tree write err: -5, ino 4 [ 322.731135][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.785460][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.934527][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.943474][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.909158][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 323.981093][ T6123] device veth0_vlan entered promiscuous mode [ 325.962788][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 326.281679][ T6123] device veth1_vlan entered promiscuous mode [ 326.346802][ T6524] device veth0_vlan left promiscuous mode [ 326.353525][ T6524] device veth0_vlan entered promiscuous mode [ 326.363206][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.387169][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.446339][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.622314][ T6535] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.394'. [ 326.919298][ T56] device hsr_slave_0 left promiscuous mode [ 327.045047][ T56] device hsr_slave_1 left promiscuous mode [ 327.298052][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.346866][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.840580][ T56] device bridge_slave_1 left promiscuous mode [ 328.893984][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.904560][ T6548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.398'. [ 328.970520][ T56] device bridge_slave_0 left promiscuous mode [ 328.978724][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.112836][ T4884] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 329.350091][ T4884] usb 1-1: Using ep0 maxpacket: 16 [ 329.362278][ T4884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.376585][ T4884] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.386601][ T4884] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 329.396417][ T4884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.415731][ T4884] usb 1-1: config 0 descriptor?? [ 329.571072][ T56] team0 (unregistering): Port device team_slave_1 removed [ 329.622264][ T56] team0 (unregistering): Port device team_slave_0 removed [ 329.672761][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.722389][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.564039][ T6563] autofs4:pid:6563:autofs_fill_super: called with bogus options [ 331.985025][ T56] bond0 (unregistering): Released all slaves [ 332.839012][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.863859][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.922275][ T6571] device veth0_vlan left promiscuous mode [ 332.929983][ T6571] device veth0_vlan entered promiscuous mode [ 332.983860][ T6123] device veth0_macvtap entered promiscuous mode [ 333.043171][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.246396][ T6123] device veth1_macvtap entered promiscuous mode [ 333.251713][ T6576] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.403'. [ 333.958221][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.040029][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.082641][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.144699][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.172962][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.209947][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.394184][ T6581] loop0: detected capacity change from 0 to 32768 [ 334.404598][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.415026][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.439755][ T6581] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.405 (6581) [ 334.439814][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.464427][ T6581] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 334.474725][ T6581] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 334.483633][ T6581] BTRFS info (device loop0): enabling auto defrag [ 334.490313][ T6581] BTRFS info (device loop0): setting nodatacow, compression disabled [ 334.498590][ T6581] BTRFS info (device loop0): use no compression [ 334.505030][ T6581] BTRFS info (device loop0): force clearing of disk cache [ 334.512283][ T6581] BTRFS info (device loop0): turning on flush-on-commit [ 334.519704][ T6581] BTRFS info (device loop0): max_inline at 4096 [ 334.526246][ T6581] BTRFS info (device loop0): disabling free space tree [ 334.776227][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.002835][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.100320][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.142517][ T6581] BTRFS info (device loop0): enabling ssd optimizations [ 335.182909][ T6581] BTRFS info (device loop0): rebuilding free space tree [ 335.203867][ T6581] BTRFS info (device loop0): disabling free space tree [ 335.210830][ T6581] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 335.220662][ T6581] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 335.235829][ T4565] usb 1-1: USB disconnect, device number 7 [ 335.253430][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.299454][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.353583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.363440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.379622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.430670][ T4262] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 335.434198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.470683][ T6123] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.490325][ T6123] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.501938][ T6123] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.515737][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.409'. [ 335.535372][ T6123] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.615884][ T6632] device veth0_vlan left promiscuous mode [ 338.624453][ T6632] device veth0_vlan entered promiscuous mode [ 338.719171][ T5048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.787013][ T5048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.805970][ T6437] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.847531][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.856494][ T6437] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.872043][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.916832][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 338.961197][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.008439][ T6437] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.050374][ T6437] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 339.136006][ T5037] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 339.444790][ T5037] usb 5-1: Using ep0 maxpacket: 16 [ 339.476477][ T5037] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.832814][ T5037] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 339.841865][ T5037] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.924796][ T5037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.958390][ T5037] usb 5-1: config 0 descriptor?? [ 340.035579][ T6437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.903232][ T6652] loop0: detected capacity change from 0 to 32768 [ 340.927578][ T6437] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.942874][ T6652] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.417 (6652) [ 340.958949][ T6652] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 340.969288][ T6652] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 340.978054][ T6652] BTRFS info (device loop0): enabling auto defrag [ 340.984597][ T6652] BTRFS info (device loop0): setting nodatacow, compression disabled [ 340.992814][ T6652] BTRFS info (device loop0): use no compression [ 340.999454][ T6652] BTRFS info (device loop0): force clearing of disk cache [ 341.007034][ T6652] BTRFS info (device loop0): turning on flush-on-commit [ 341.014118][ T6652] BTRFS info (device loop0): max_inline at 4096 [ 341.021918][ T6652] BTRFS info (device loop0): disabling free space tree [ 341.038630][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.048417][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.063806][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.073239][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.093135][ T5048] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.100299][ T5048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.126513][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.143820][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.168810][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.176071][ T5048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.207431][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.240396][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.289468][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.338991][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.359006][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.401289][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.464046][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.506861][ T6668] loop1: detected capacity change from 0 to 32768 [ 341.515349][ T6668] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.419 (6668) [ 341.536871][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.556376][ T6652] BTRFS info (device loop0): enabling ssd optimizations [ 341.566761][ T6652] BTRFS info (device loop0): rebuilding free space tree [ 341.585070][ T6652] BTRFS info (device loop0): disabling free space tree [ 341.592147][ T6652] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 341.602019][ T6652] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 341.624159][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.641629][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.852388][ T4253] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 341.886994][ T6683] autofs4:pid:6683:autofs_fill_super: called with bogus options [ 341.909520][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.234771][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.499584][ T4262] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 342.576966][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.817751][ T6709] loop0: detected capacity change from 0 to 128 [ 344.954798][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.962426][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.218150][ T6437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.037166][ T4389] usb 5-1: USB disconnect, device number 5 [ 346.393583][ T6725] bridge0: port 3(vlan2) entered blocking state [ 346.407580][ T6725] bridge0: port 3(vlan2) entered disabled state [ 346.447290][ T6725] device vlan2 entered promiscuous mode [ 346.465081][ T6725] bridge0: mtu less than device minimum [ 348.268920][ T6749] loop6: detected capacity change from 0 to 32768 [ 348.292350][ T6749] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.431 (6749) [ 348.307402][ T6749] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 348.317723][ T6749] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 348.326561][ T6749] BTRFS info (device loop6): enabling auto defrag [ 348.333112][ T6749] BTRFS info (device loop6): setting nodatacow, compression disabled [ 348.341609][ T6749] BTRFS info (device loop6): use no compression [ 348.348273][ T6749] BTRFS info (device loop6): force clearing of disk cache [ 348.355655][ T6749] BTRFS info (device loop6): turning on flush-on-commit [ 348.362907][ T6749] BTRFS info (device loop6): max_inline at 4096 [ 348.369215][ T6749] BTRFS info (device loop6): disabling free space tree [ 348.625014][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.650009][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.761142][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.780648][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.802935][ T6749] BTRFS info (device loop6): enabling ssd optimizations [ 348.811060][ T6749] BTRFS info (device loop6): rebuilding free space tree [ 348.828544][ T6749] BTRFS info (device loop6): disabling free space tree [ 348.835623][ T6749] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 348.845557][ T6749] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 348.849444][ T6437] device veth0_vlan entered promiscuous mode [ 348.867434][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.906288][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.974259][ T6437] device veth1_vlan entered promiscuous mode [ 349.433406][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.453832][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.564668][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.605343][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.677402][ T6437] device veth0_macvtap entered promiscuous mode [ 349.826077][ T6437] device veth1_macvtap entered promiscuous mode [ 349.917789][ T6123] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 349.984589][ T6779] loop0: detected capacity change from 0 to 32768 [ 349.993519][ T6779] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.434 (6779) [ 350.032115][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.061525][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.149263][ T4253] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 350.161231][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.224923][ T6742] loop1: detected capacity change from 0 to 40427 [ 350.271648][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.288428][ T6742] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 350.358726][ T6742] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 350.370511][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.467228][ T6742] F2FS-fs (loop1): invalid crc value [ 350.478547][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.497094][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.518038][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.572542][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.607163][ T6742] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 350.642359][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.680256][ T6742] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 350.743883][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.919899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.937533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.960173][ T6742] F2FS-fs (loop1): recover fsync data on readonly fs [ 350.970645][ T6742] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 350.983650][ T6742] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 351.001094][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.145491][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.220114][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.267908][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.305432][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.327572][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.338785][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.486169][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.529603][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.580196][ T6437] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.598246][ T6437] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.607569][ T6437] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.617096][ T6437] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.661580][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.822289][ T5038] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 352.384108][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.553441][ T5038] usb 7-1: Using ep0 maxpacket: 16 [ 352.585513][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.598593][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.611424][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.624591][ T5038] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.648395][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.655962][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.676378][ T5038] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 352.720056][ T5038] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 352.746667][ T5038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.822311][ T5038] usb 7-1: config 0 descriptor?? [ 352.861942][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.912320][ T6822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.442'. [ 355.206620][ T6838] loop4: detected capacity change from 0 to 32768 [ 355.257685][ T6838] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.444 (6838) [ 355.276248][ T6838] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 355.286820][ T6838] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 355.288037][ T5038] usb 7-1: USB disconnect, device number 2 [ 355.295615][ T6838] BTRFS info (device loop4): enabling auto defrag [ 355.307947][ T6838] BTRFS info (device loop4): setting nodatacow, compression disabled [ 355.316141][ T6838] BTRFS info (device loop4): use no compression [ 355.322437][ T6838] BTRFS info (device loop4): force clearing of disk cache [ 355.330890][ T6838] BTRFS info (device loop4): turning on flush-on-commit [ 355.338028][ T6838] BTRFS info (device loop4): max_inline at 4096 [ 355.344488][ T6838] BTRFS info (device loop4): disabling free space tree [ 355.750360][ T6863] loop1: detected capacity change from 0 to 128 [ 355.901398][ T6866] loop0: detected capacity change from 0 to 16 [ 355.954477][ T6866] erofs: (device loop0): mounted with root inode @ nid 36. [ 356.187876][ T6866] syz.0.445: attempt to access beyond end of device [ 356.187876][ T6866] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 356.334427][ T6863] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 356.816718][ T6838] BTRFS error (device loop4): open_ctree failed: -22 [ 359.255527][ T5038] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 359.463117][ T5038] usb 7-1: Using ep0 maxpacket: 16 [ 359.479329][ T5038] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.639260][ T5038] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.669217][ T5038] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 359.732728][ T5038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.794458][ T5038] usb 7-1: config 0 descriptor?? [ 360.828722][ T6929] autofs4:pid:6929:autofs_fill_super: called with bogus options [ 361.123884][ T6940] loop1: detected capacity change from 0 to 128 [ 361.162089][ T6940] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 362.499607][ T6955] random: crng reseeded on system resumption [ 362.509631][ T6950] loop0: detected capacity change from 0 to 16 [ 362.625786][ T6950] erofs: (device loop0): mounted with root inode @ nid 36. [ 362.769784][ T6950] syz.0.461: attempt to access beyond end of device [ 362.769784][ T6950] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 363.596126][ T6971] fuse: Bad value for 'fd' [ 364.219083][ T4300] usb 7-1: USB disconnect, device number 3 [ 364.533931][ T6977] netlink: 24 bytes leftover after parsing attributes in process `syz.6.473'. [ 365.921828][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.6.476'. [ 366.115041][ T6991] loop4: detected capacity change from 0 to 128 [ 366.169153][ T6991] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 367.561060][ T6997] loop1: detected capacity change from 0 to 32768 [ 367.570681][ T6997] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.478 (6997) [ 367.639509][ T6997] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 367.660731][ T6997] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 367.678594][ T6997] BTRFS info (device loop1): enabling auto defrag [ 367.685349][ T6997] BTRFS info (device loop1): setting nodatacow, compression disabled [ 367.693622][ T6997] BTRFS info (device loop1): use no compression [ 367.700000][ T6997] BTRFS info (device loop1): force clearing of disk cache [ 367.707274][ T6997] BTRFS info (device loop1): turning on flush-on-commit [ 367.715437][ T6997] BTRFS info (device loop1): max_inline at 4096 [ 367.721833][ T6997] BTRFS info (device loop1): disabling free space tree [ 368.582727][ T5038] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 370.085461][ T6997] BTRFS error (device loop1): open_ctree failed: -12 [ 370.481829][ T5038] usb 6-1: Using ep0 maxpacket: 16 [ 370.511874][ T5038] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.522352][ T5038] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 370.531575][ T5038] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 370.548481][ T5038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.903401][ T7047] loop6: detected capacity change from 0 to 1024 [ 371.079708][ T5038] usb 6-1: config 0 descriptor?? [ 371.510416][ T7047] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 371.647299][ T5038] usb 6-1: can't set config #0, error -71 [ 371.682301][ T5038] usb 6-1: USB disconnect, device number 2 [ 371.837495][ T6123] EXT4-fs (loop6): unmounting filesystem. [ 372.540954][ T7070] loop6: detected capacity change from 0 to 1024 [ 373.760856][ T7070] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 374.054755][ T6123] EXT4-fs (loop6): unmounting filesystem. [ 375.697657][ T4268] Bluetooth: hci0: link tx timeout [ 375.704562][ T4268] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 375.931512][ T7084] loop4: detected capacity change from 0 to 2048 [ 375.951619][ T7092] loop6: detected capacity change from 0 to 128 [ 376.033169][ T7092] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 376.411753][ T7084] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 376.742715][ T4389] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 376.953026][ T7109] syz.5.498 sent an empty control message without MSG_MORE. [ 377.086518][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 377.172737][ T4389] usb 1-1: Using ep0 maxpacket: 16 [ 377.193222][ T4389] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.292675][ T4389] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 377.348208][ T4389] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 377.396449][ T4389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.596237][ T4389] usb 1-1: config 0 descriptor?? [ 377.752989][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 378.438242][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.444688][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.616755][ T4810] usb 1-1: USB disconnect, device number 8 [ 381.805401][ T7151] loop1: detected capacity change from 0 to 128 [ 382.202778][ T7151] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 382.221471][ T7152] loop4: detected capacity change from 0 to 2048 [ 382.408399][ T7157] dccp_close: ABORT with 36 bytes unread [ 382.754475][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.6.512'. [ 383.285029][ T7152] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 383.505005][ T7168] Bluetooth: MGMT ver 1.22 [ 383.653603][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 385.008375][ T4300] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 385.192710][ T4300] usb 2-1: Using ep0 maxpacket: 16 [ 385.199987][ T4300] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.309418][ T4300] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 385.443545][ T4300] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 385.490516][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.575050][ T4300] usb 2-1: config 0 descriptor?? [ 387.234535][ T5038] usb 2-1: USB disconnect, device number 9 [ 387.272956][ T7211] loop6: detected capacity change from 0 to 128 [ 387.299789][ T7211] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 387.375957][ T4504] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 388.002413][ T7214] loop1: detected capacity change from 0 to 32768 [ 388.046342][ T7214] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.524 (7214) [ 388.402438][ T7214] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 388.412988][ T7214] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 388.421739][ T7214] BTRFS info (device loop1): enabling auto defrag [ 388.429261][ T7214] BTRFS info (device loop1): setting nodatacow, compression disabled [ 388.437516][ T7214] BTRFS info (device loop1): use no compression [ 388.443989][ T7214] BTRFS info (device loop1): force clearing of disk cache [ 388.451152][ T7214] BTRFS info (device loop1): turning on flush-on-commit [ 388.458294][ T7214] BTRFS info (device loop1): max_inline at 4096 [ 388.464668][ T7214] BTRFS info (device loop1): disabling free space tree [ 388.697366][ T7214] BTRFS info (device loop1): enabling ssd optimizations [ 388.705687][ T7214] BTRFS info (device loop1): rebuilding free space tree [ 388.718978][ T7214] BTRFS info (device loop1): disabling free space tree [ 388.726127][ T7214] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 388.736934][ T7214] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 389.383894][ T4251] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 389.605925][ T7254] random: crng reseeded on system resumption [ 389.803733][ T7257] loop2: detected capacity change from 0 to 7 [ 389.870965][ T7257] Dev loop2: unable to read RDB block 7 [ 389.891254][ T7257] loop2: AHDI p1 p2 p3 [ 389.895950][ T7257] loop2: partition table partially beyond EOD, truncated [ 389.946884][ T7257] loop2: p1 start 1601398130 is beyond EOD, truncated [ 389.972808][ T7257] loop2: p2 start 1702059890 is beyond EOD, truncated [ 391.253078][ T7269] loop1: detected capacity change from 0 to 2048 [ 391.613668][ T7269] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 392.764784][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 393.198977][ T4302] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 393.792046][ T7293] loop5: detected capacity change from 0 to 32768 [ 393.915672][ T7293] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.539 (7293) [ 393.941601][ T7298] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.537'. [ 393.967650][ T7293] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 393.978061][ T7293] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 393.986833][ T7293] BTRFS info (device loop5): enabling auto defrag [ 393.993390][ T7293] BTRFS info (device loop5): setting nodatacow, compression disabled [ 394.001504][ T7293] BTRFS info (device loop5): use no compression [ 394.007867][ T7293] BTRFS info (device loop5): force clearing of disk cache [ 394.015265][ T7293] BTRFS info (device loop5): turning on flush-on-commit [ 394.022941][ T7293] BTRFS info (device loop5): max_inline at 4096 [ 394.029239][ T7293] BTRFS info (device loop5): disabling free space tree [ 394.112856][ T4302] usb 5-1: Using ep0 maxpacket: 16 [ 394.133609][ T4302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.182718][ T4302] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.212770][ T4302] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 394.424245][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.441990][ T4302] usb 5-1: config 0 descriptor?? [ 394.462990][ T4302] usb 5-1: can't set config #0, error -71 [ 394.472327][ T4302] usb 5-1: USB disconnect, device number 6 [ 395.303772][ T7323] loop1: detected capacity change from 0 to 32768 [ 395.319404][ T7323] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.543 (7323) [ 395.444155][ T7293] BTRFS info (device loop5): enabling ssd optimizations [ 395.452686][ T7293] BTRFS info (device loop5): rebuilding free space tree [ 395.478639][ T7293] BTRFS info (device loop5): disabling free space tree [ 395.485711][ T7293] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 395.495499][ T7293] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 395.743245][ T5193] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 396.804246][ T6437] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 397.011022][ T7346] random: crng reseeded on system resumption [ 397.203216][ T7343] loop1: detected capacity change from 0 to 32768 [ 397.213146][ T7343] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.546 (7343) [ 397.255457][ T7339] loop6: detected capacity change from 0 to 4096 [ 398.279142][ T7354] loop1: detected capacity change from 0 to 512 [ 398.454932][ T7354] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 398.542927][ T7354] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.695943][ T7360] loop5: detected capacity change from 0 to 2048 [ 399.441648][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 399.478651][ T7360] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 399.749698][ T6437] EXT4-fs (loop5): unmounting filesystem. [ 399.850387][ T7371] loop6: detected capacity change from 0 to 128 [ 399.870330][ T7371] FAT-fs (loop6): Unrecognized mount option "dods" or missing value [ 400.606842][ T7377] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.553'. [ 402.604914][ T7392] loop0: detected capacity change from 0 to 32768 [ 402.646700][ T7392] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.557 (7392) [ 403.039626][ T7392] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 403.049971][ T7392] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 403.058856][ T7392] BTRFS info (device loop0): enabling auto defrag [ 403.065494][ T7392] BTRFS info (device loop0): setting nodatacow, compression disabled [ 403.074728][ T7392] BTRFS info (device loop0): use no compression [ 403.081067][ T7392] BTRFS info (device loop0): force clearing of disk cache [ 403.088423][ T7392] BTRFS info (device loop0): turning on flush-on-commit [ 403.095516][ T7392] BTRFS info (device loop0): max_inline at 4096 [ 403.101810][ T7392] BTRFS info (device loop0): disabling free space tree [ 403.229950][ T7401] loop4: detected capacity change from 0 to 32768 [ 403.328775][ T7401] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.559 (7401) [ 404.008041][ T7409] device veth0_vlan left promiscuous mode [ 404.015445][ T7409] device veth0_vlan entered promiscuous mode [ 404.285777][ T7392] BTRFS info (device loop0): enabling ssd optimizations [ 404.466934][ T7392] BTRFS info (device loop0): rebuilding free space tree [ 404.810038][ T7392] BTRFS info (device loop0): disabling free space tree [ 404.818151][ T7392] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 404.827989][ T7392] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 404.884765][ T7434] loop1: detected capacity change from 0 to 2048 [ 405.085338][ T7434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 405.663721][ T4262] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 405.678570][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 406.042771][ T4270] Bluetooth: hci5: command 0x0406 tx timeout [ 406.283011][ T7454] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.566'. [ 408.187840][ T7471] loop0: detected capacity change from 0 to 32768 [ 408.196124][ T7471] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.571 (7471) [ 408.212083][ T7471] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 408.222380][ T7471] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 408.231205][ T7471] BTRFS info (device loop0): enabling auto defrag [ 408.237714][ T7471] BTRFS info (device loop0): setting nodatacow, compression disabled [ 408.245875][ T7471] BTRFS info (device loop0): use no compression [ 408.252143][ T7471] BTRFS info (device loop0): force clearing of disk cache [ 408.259329][ T7471] BTRFS info (device loop0): turning on flush-on-commit [ 408.266416][ T7471] BTRFS info (device loop0): max_inline at 4096 [ 408.272773][ T7471] BTRFS info (device loop0): disabling free space tree [ 408.520496][ T7471] BTRFS info (device loop0): enabling ssd optimizations [ 408.541801][ T7471] BTRFS info (device loop0): rebuilding free space tree [ 408.558673][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.573'. [ 408.586491][ T7471] BTRFS info (device loop0): disabling free space tree [ 408.594146][ T7471] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 408.605051][ T7471] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 410.084594][ T4262] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 411.349200][ T7515] device veth0_vlan left promiscuous mode [ 411.356669][ T7515] device veth0_vlan entered promiscuous mode [ 412.808297][ T7527] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.580'. [ 413.652684][ T7540] loop0: detected capacity change from 0 to 32768 [ 413.661739][ T7540] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.577 (7540) [ 413.677932][ T7540] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 413.688249][ T7540] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 413.697037][ T7540] BTRFS info (device loop0): enabling auto defrag [ 413.703555][ T7540] BTRFS info (device loop0): setting nodatacow, compression disabled [ 413.711669][ T7540] BTRFS info (device loop0): use no compression [ 413.718046][ T7540] BTRFS info (device loop0): force clearing of disk cache [ 413.726400][ T7540] BTRFS info (device loop0): turning on flush-on-commit [ 413.733973][ T7540] BTRFS info (device loop0): max_inline at 4096 [ 413.740286][ T7540] BTRFS info (device loop0): disabling free space tree [ 415.352765][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.589'. [ 415.542189][ T7540] BTRFS info (device loop0): enabling ssd optimizations [ 415.552130][ T7540] BTRFS info (device loop0): rebuilding free space tree [ 415.571462][ T7540] BTRFS info (device loop0): disabling free space tree [ 415.578497][ T7540] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 415.588242][ T7540] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 416.080164][ T4270] Bluetooth: hci0: link tx timeout [ 416.085639][ T4270] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 416.207345][ T4270] Bluetooth: hci0: link tx timeout [ 416.214100][ T4270] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 416.546616][ T4270] Bluetooth: hci0: link tx timeout [ 416.552619][ T4270] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 416.932254][ T4270] Bluetooth: hci0: link tx timeout [ 416.937672][ T4270] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 417.216721][ T4262] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 417.498035][ T7602] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.595'. [ 417.765260][ T4270] Bluetooth: hci0: link tx timeout [ 417.770530][ T4270] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 418.625330][ T4270] Bluetooth: hci0: link tx timeout [ 418.630584][ T4270] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 419.560291][ T7620] loop0: detected capacity change from 0 to 164 [ 420.297090][ T7620] ISOFS: unable to read i-node block [ 420.314992][ T7620] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 423.346312][ T7648] loop6: detected capacity change from 0 to 32768 [ 423.355255][ T7648] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.604 (7648) [ 423.365133][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 423.380270][ T7648] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 423.390588][ T7648] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 423.399452][ T7648] BTRFS info (device loop6): enabling auto defrag [ 423.405992][ T7648] BTRFS info (device loop6): setting nodatacow, compression disabled [ 423.414373][ T7648] BTRFS info (device loop6): use no compression [ 423.420675][ T7648] BTRFS info (device loop6): force clearing of disk cache [ 423.427919][ T7648] BTRFS info (device loop6): turning on flush-on-commit [ 423.435014][ T7648] BTRFS info (device loop6): max_inline at 4096 [ 423.441324][ T7648] BTRFS info (device loop6): disabling free space tree [ 423.540645][ T7648] BTRFS info (device loop6): enabling ssd optimizations [ 423.548915][ T7648] BTRFS info (device loop6): rebuilding free space tree [ 423.568766][ T7648] BTRFS info (device loop6): disabling free space tree [ 423.575961][ T7648] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 423.585858][ T7648] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 424.481130][ T6123] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 426.894900][ T7693] loop4: detected capacity change from 0 to 1024 [ 430.217219][ T4322] hfsplus: b-tree write err: -5, ino 4 [ 430.232177][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.259102][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.278116][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.288851][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.303625][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.317591][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.336978][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.349268][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.372157][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.398640][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.415934][ T7712] device ipvlan2 entered promiscuous mode [ 430.546624][ T7725] loop2: detected capacity change from 0 to 7 [ 430.556815][ T7725] Dev loop2: unable to read RDB block 7 [ 430.566255][ T7725] loop2: AHDI p2 p3 [ 430.583809][ T7725] loop2: partition table partially beyond EOD, truncated [ 430.620287][ T7725] loop2: p2 start 1702059890 is beyond EOD, truncated [ 432.723894][ T27] audit: type=1326 audit(1743369806.593:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44c78d169 code=0x7ffc0000 [ 432.817848][ T7746] loop4: detected capacity change from 0 to 512 [ 432.888161][ T27] audit: type=1326 audit(1743369806.593:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff44c78d169 code=0x7ffc0000 [ 432.944621][ T7746] EXT4-fs (loop4): orphan cleanup on readonly fs [ 432.995342][ T7752] loop1: detected capacity change from 0 to 1764 [ 433.053863][ T27] audit: type=1326 audit(1743369806.593:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44c78d169 code=0x7ffc0000 [ 433.097312][ T27] audit: type=1326 audit(1743369806.593:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44c78d169 code=0x7ffc0000 [ 433.153851][ T7746] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.622: bg 0: block 248: padding at end of block bitmap is not set [ 433.159758][ T27] audit: type=1326 audit(1743369806.593:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff44c78d169 code=0x7ffc0000 [ 433.340470][ T7746] Quota error (device loop4): write_blk: dquota write failed [ 433.391868][ T27] audit: type=1326 audit(1743369806.593:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff44c78d1a3 code=0x7ffc0000 [ 433.422682][ T27] audit: type=1326 audit(1743369806.593:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff44c78bc1f code=0x7ffc0000 [ 433.441468][ T7746] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 433.480093][ T7746] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.622: Failed to acquire dquot type 1 [ 433.946999][ T7746] EXT4-fs (loop4): 1 truncate cleaned up [ 433.973256][ T27] audit: type=1326 audit(1743369806.593:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff44c78d1f7 code=0x7ffc0000 [ 434.093240][ T7746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 434.371632][ T4270] Bluetooth: hci0: link tx timeout [ 434.377162][ T4270] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 434.395027][ T4270] Bluetooth: hci0: link tx timeout [ 434.400275][ T4270] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 434.433537][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 435.284318][ T7790] loop4: detected capacity change from 0 to 1024 [ 435.675833][ T4297] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 436.037807][ T4270] Bluetooth: hci0: link tx timeout [ 436.043146][ T4270] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 436.051959][ T4270] Bluetooth: hci0: link tx timeout [ 436.063260][ T4270] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 436.303222][ T4297] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 436.327892][ T4297] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 436.383508][ T4297] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 436.408873][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.442432][ T4971] hfsplus: b-tree write err: -5, ino 4 [ 436.442667][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 436.454982][ T7782] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.775011][ T4297] usb 2-1: USB disconnect, device number 10 [ 439.134364][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.355716][ T7822] loop1: detected capacity change from 0 to 4096 [ 439.383795][ T7822] ntfs3: Unknown parameter 'windows_names' [ 439.809178][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.815633][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.967793][ T7832] 9pnet_fd: Insufficient options for proto=fd [ 441.277073][ T7847] loop4: detected capacity change from 0 to 1024 [ 444.269757][ T7865] loop2: detected capacity change from 0 to 7 [ 444.319717][ T7865] Dev loop2: unable to read RDB block 7 [ 444.519158][ T7865] loop2: AHDI p2 p3 [ 444.523790][ T7865] loop2: partition table partially beyond EOD, truncated [ 444.546538][ T7865] loop2: p2 start 1702059890 is beyond EOD, truncated [ 445.627390][ T4387] hfsplus: b-tree write err: -5, ino 4 [ 449.775154][ T7917] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 449.785831][ T7917] batman_adv: batadv0: Adding interface: gretap1 [ 449.792261][ T7917] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.817808][ T7917] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 451.122419][ T7928] loop0: detected capacity change from 0 to 256 [ 451.278033][ T7928] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 451.358422][ T7928] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 451.446923][ T7928] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 451.632861][ T4260] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 451.829244][ T7941] loop2: detected capacity change from 0 to 7 [ 451.845678][ T7941] Dev loop2: unable to read RDB block 7 [ 451.858268][ T7941] loop2: AHDI p2 p3 [ 451.880597][ T4260] usb 6-1: Using ep0 maxpacket: 16 [ 451.889063][ T4260] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.898941][ T7941] loop2: partition table partially beyond EOD, truncated [ 451.923286][ T7941] loop2: p2 start 1702059890 is beyond EOD, truncated [ 451.926830][ T4260] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 451.974217][ T4260] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.019681][ T4260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.123466][ T4260] usb 6-1: config 0 descriptor?? [ 453.121424][ T7958] autofs4:pid:7958:autofs_fill_super: called with bogus options [ 456.025158][ T7980] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 457.317640][ T7986] No buffer was provided with the request [ 457.412694][ T4268] Bluetooth: hci0: link tx timeout [ 457.417935][ T4268] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 457.425843][ T4268] Bluetooth: hci0: link tx timeout [ 457.430995][ T4268] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 457.456443][ T4389] usb 6-1: USB disconnect, device number 3 [ 457.622755][ T4268] Bluetooth: hci0: link tx timeout [ 457.627931][ T4268] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 457.636221][ T4268] Bluetooth: hci0: link tx timeout [ 457.641514][ T4268] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 457.704038][ T8001] loop1: detected capacity change from 0 to 1024 [ 459.390937][ T4268] Bluetooth: hci0: link tx timeout [ 459.396466][ T4268] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 459.404272][ T4268] Bluetooth: hci0: link tx timeout [ 459.409441][ T4268] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 459.774755][ T8001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 460.565386][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 461.895639][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.6.683'. [ 462.573222][ T4297] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 462.763123][ T4297] usb 5-1: Using ep0 maxpacket: 16 [ 462.773593][ T4297] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.840509][ T4297] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.907215][ T4297] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 462.966420][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.093213][ T4297] usb 5-1: config 0 descriptor?? [ 464.044892][ T8065] autofs4:pid:8065:autofs_fill_super: called with bogus options [ 466.347025][ T8099] loop6: detected capacity change from 0 to 16 [ 466.365143][ T8099] erofs: (device loop6): mounted with root inode @ nid 36. [ 466.622169][ T8102] loop1: detected capacity change from 0 to 1024 [ 467.323396][ T4240] usb 5-1: USB disconnect, device number 7 [ 467.463841][ T7372] hfsplus: b-tree write err: -5, ino 4 [ 467.708489][ T8112] netlink: 24 bytes leftover after parsing attributes in process `syz.5.698'. [ 468.404335][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 469.757590][ T8123] loop1: detected capacity change from 0 to 32768 [ 470.839596][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 470.839614][ T27] audit: type=1800 audit(1743369844.703:35): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.697" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 470.923080][ T8123] ================================================================================ [ 470.935980][ T8123] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:622:9 [ 470.973361][ T8123] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 471.042244][ T8123] CPU: 1 PID: 8123 Comm: syz.1.697 Not tainted 6.1.132-syzkaller #0 [ 471.050324][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 471.060467][ T8123] Call Trace: [ 471.063783][ T8123] [ 471.066760][ T8123] dump_stack_lvl+0x1e3/0x2cb [ 471.071513][ T8123] ? __get_metapage+0x9ae/0x1040 [ 471.076501][ T8123] ? nf_tcp_handle_invalid+0x647/0x647 [ 471.082016][ T8123] ? panic+0x764/0x764 [ 471.086158][ T8123] __ubsan_handle_out_of_bounds+0x118/0x140 [ 471.092134][ T8123] xtInsert+0x10bd/0x1180 [ 471.096534][ T8123] ? __lock_acquire+0x1f80/0x1f80 [ 471.101616][ T8123] ? xtSearch+0x1ca0/0x1ca0 [ 471.106195][ T8123] ? mark_lock+0x9a/0x340 [ 471.110571][ T8123] ? __dquot_drop+0x420/0x420 [ 471.115314][ T8123] ? rcu_is_watching+0x11/0xb0 [ 471.120125][ T8123] ? __mark_inode_dirty+0x430/0xf80 [ 471.125373][ T8123] extAlloc+0xa70/0x1000 [ 471.129679][ T8123] ? jfs_ioc_trim+0x6a0/0x6a0 [ 471.134401][ T8123] ? bio_add_page+0x3a4/0x750 [ 471.139146][ T8123] jfs_get_block+0x417/0xe50 [ 471.143789][ T8123] ? __iov_iter_get_pages_alloc+0x86e/0xa70 [ 471.149744][ T8123] ? jfs_dirty_inode+0x230/0x230 [ 471.154737][ T8123] ? iov_iter_get_pages2+0xcb/0x120 [ 471.159992][ T8123] ? iov_iter_gap_alignment+0x200/0x200 [ 471.165593][ T8123] ? jfs_dirty_inode+0x230/0x230 [ 471.170590][ T8123] __blockdev_direct_IO+0x1d00/0x4810 [ 471.176101][ T8123] ? sb_init_dio_done_wq+0x80/0x80 [ 471.181261][ T8123] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 471.187309][ T8123] ? jfs_dirty_inode+0x230/0x230 [ 471.192318][ T8123] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 471.198622][ T8123] ? ktime_get_real_ts64+0x460/0x460 [ 471.204025][ T8123] jfs_direct_IO+0xf6/0x1e0 [ 471.208594][ T8123] generic_file_direct_write+0x204/0x460 [ 471.214379][ T8123] __generic_file_write_iter+0x1c4/0x400 [ 471.220076][ T8123] generic_file_write_iter+0xab/0x310 [ 471.225501][ T8123] do_iter_write+0x6e6/0xc40 [ 471.230163][ T8123] ? vfs_iter_write+0xa0/0xa0 [ 471.234901][ T8123] ? vfs_iter_write+0x69/0xa0 [ 471.239593][ T8123] iter_file_splice_write+0x830/0xfc0 [ 471.245006][ T8123] ? splice_from_pipe+0x240/0x240 [ 471.250057][ T8123] ? splice_shrink_spd+0xb0/0xb0 [ 471.255024][ T8123] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 471.261633][ T8123] ? common_file_perm+0x17d/0x1d0 [ 471.266700][ T8123] ? splice_from_pipe+0x240/0x240 [ 471.271747][ T8123] direct_splice_actor+0xe3/0x1c0 [ 471.276812][ T8123] splice_direct_to_actor+0x4c7/0xc30 [ 471.282254][ T8123] ? direct_file_splice_eof+0xa0/0xa0 [ 471.287682][ T8123] ? pipe_to_sendpage+0x350/0x350 [ 471.292746][ T8123] ? fsnotify_perm+0x64/0x590 [ 471.297466][ T8123] ? security_file_permission+0x75/0xa0 [ 471.303052][ T8123] do_splice_direct+0x2a5/0x3e0 [ 471.307960][ T8123] ? splice_direct_to_actor+0xc30/0xc30 [ 471.313527][ T8123] ? rcu_read_lock_any_held+0xb3/0x160 [ 471.319008][ T8123] ? do_splice_direct+0x3e0/0x3e0 [ 471.324067][ T8123] do_sendfile+0x619/0xff0 [ 471.328516][ T8123] ? do_pwritev+0x360/0x360 [ 471.333055][ T8123] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 471.339107][ T8123] __se_sys_sendfile64+0x178/0x1e0 [ 471.344257][ T8123] ? __x64_sys_sendfile64+0xa0/0xa0 [ 471.349471][ T8123] ? syscall_enter_from_user_mode+0x2e/0x230 [ 471.355467][ T8123] ? lockdep_hardirqs_on+0x94/0x130 [ 471.360682][ T8123] ? syscall_enter_from_user_mode+0x2e/0x230 [ 471.366681][ T8123] do_syscall_64+0x3b/0xb0 [ 471.371124][ T8123] ? clear_bhb_loop+0x45/0xa0 [ 471.375826][ T8123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.381734][ T8123] RIP: 0033:0x7f876f98d169 [ 471.386173][ T8123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.405795][ T8123] RSP: 002b:00007f877079a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 471.414219][ T8123] RAX: ffffffffffffffda RBX: 00007f876fba5fa0 RCX: 00007f876f98d169 [ 471.422312][ T8123] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 471.430291][ T8123] RBP: 00007f876fa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 471.438294][ T8123] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 471.446294][ T8123] R13: 0000000000000000 R14: 00007f876fba5fa0 R15: 00007ffe7c6b3fa8 [ 471.454287][ T8123] [ 471.501140][ T8123] ================================================================================ [ 471.639917][ T8123] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 471.647230][ T8123] CPU: 0 PID: 8123 Comm: syz.1.697 Not tainted 6.1.132-syzkaller #0 [ 471.655254][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 471.665345][ T8123] Call Trace: [ 471.668648][ T8123] [ 471.671608][ T8123] dump_stack_lvl+0x1e3/0x2cb [ 471.676326][ T8123] ? nf_tcp_handle_invalid+0x647/0x647 [ 471.681826][ T8123] ? panic+0x764/0x764 [ 471.685944][ T8123] ? vscnprintf+0x59/0x80 [ 471.690312][ T8123] panic+0x318/0x764 [ 471.694248][ T8123] ? check_panic_on_warn+0x1d/0xa0 [ 471.699406][ T8123] ? memcpy_page_flushcache+0xfc/0xfc [ 471.704819][ T8123] ? dump_stack_lvl+0x24f/0x2cb [ 471.709719][ T8123] check_panic_on_warn+0x7e/0xa0 [ 471.714716][ T8123] __ubsan_handle_out_of_bounds+0x138/0x140 [ 471.720723][ T8123] xtInsert+0x10bd/0x1180 [ 471.725119][ T8123] ? __lock_acquire+0x1f80/0x1f80 [ 471.730199][ T8123] ? xtSearch+0x1ca0/0x1ca0 [ 471.734777][ T8123] ? mark_lock+0x9a/0x340 [ 471.739151][ T8123] ? __dquot_drop+0x420/0x420 [ 471.743908][ T8123] ? rcu_is_watching+0x11/0xb0 [ 471.748702][ T8123] ? __mark_inode_dirty+0x430/0xf80 [ 471.753940][ T8123] extAlloc+0xa70/0x1000 [ 471.758240][ T8123] ? jfs_ioc_trim+0x6a0/0x6a0 [ 471.762950][ T8123] ? bio_add_page+0x3a4/0x750 [ 471.767680][ T8123] jfs_get_block+0x417/0xe50 [ 471.772314][ T8123] ? __iov_iter_get_pages_alloc+0x86e/0xa70 [ 471.778266][ T8123] ? jfs_dirty_inode+0x230/0x230 [ 471.783251][ T8123] ? iov_iter_get_pages2+0xcb/0x120 [ 471.788584][ T8123] ? iov_iter_gap_alignment+0x200/0x200 [ 471.794167][ T8123] ? jfs_dirty_inode+0x230/0x230 [ 471.799143][ T8123] __blockdev_direct_IO+0x1d00/0x4810 [ 471.804644][ T8123] ? sb_init_dio_done_wq+0x80/0x80 [ 471.809788][ T8123] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 471.815818][ T8123] ? jfs_dirty_inode+0x230/0x230 [ 471.820810][ T8123] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 471.827094][ T8123] ? ktime_get_real_ts64+0x460/0x460 [ 471.832462][ T8123] jfs_direct_IO+0xf6/0x1e0 [ 471.837015][ T8123] generic_file_direct_write+0x204/0x460 [ 471.842712][ T8123] __generic_file_write_iter+0x1c4/0x400 [ 471.848399][ T8123] generic_file_write_iter+0xab/0x310 [ 471.853806][ T8123] do_iter_write+0x6e6/0xc40 [ 471.858453][ T8123] ? vfs_iter_write+0xa0/0xa0 [ 471.863182][ T8123] ? vfs_iter_write+0x69/0xa0 [ 471.867907][ T8123] iter_file_splice_write+0x830/0xfc0 [ 471.873350][ T8123] ? splice_from_pipe+0x240/0x240 [ 471.878418][ T8123] ? splice_shrink_spd+0xb0/0xb0 [ 471.883394][ T8123] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 471.890035][ T8123] ? common_file_perm+0x17d/0x1d0 [ 471.895100][ T8123] ? splice_from_pipe+0x240/0x240 [ 471.900164][ T8123] direct_splice_actor+0xe3/0x1c0 [ 471.905244][ T8123] splice_direct_to_actor+0x4c7/0xc30 [ 471.910669][ T8123] ? direct_file_splice_eof+0xa0/0xa0 [ 471.916173][ T8123] ? pipe_to_sendpage+0x350/0x350 [ 471.921268][ T8123] ? fsnotify_perm+0x64/0x590 [ 471.925992][ T8123] ? security_file_permission+0x75/0xa0 [ 471.931581][ T8123] do_splice_direct+0x2a5/0x3e0 [ 471.936565][ T8123] ? splice_direct_to_actor+0xc30/0xc30 [ 471.942152][ T8123] ? rcu_read_lock_any_held+0xb3/0x160 [ 471.947663][ T8123] ? do_splice_direct+0x3e0/0x3e0 [ 471.952744][ T8123] do_sendfile+0x619/0xff0 [ 471.957227][ T8123] ? do_pwritev+0x360/0x360 [ 471.961775][ T8123] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 471.967802][ T8123] __se_sys_sendfile64+0x178/0x1e0 [ 471.972965][ T8123] ? __x64_sys_sendfile64+0xa0/0xa0 [ 471.978207][ T8123] ? syscall_enter_from_user_mode+0x2e/0x230 [ 471.984234][ T8123] ? lockdep_hardirqs_on+0x94/0x130 [ 471.989490][ T8123] ? syscall_enter_from_user_mode+0x2e/0x230 [ 471.995542][ T8123] do_syscall_64+0x3b/0xb0 [ 472.000005][ T8123] ? clear_bhb_loop+0x45/0xa0 [ 472.004739][ T8123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.010686][ T8123] RIP: 0033:0x7f876f98d169 [ 472.015154][ T8123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.034836][ T8123] RSP: 002b:00007f877079a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 472.043298][ T8123] RAX: ffffffffffffffda RBX: 00007f876fba5fa0 RCX: 00007f876f98d169 [ 472.051335][ T8123] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 472.059346][ T8123] RBP: 00007f876fa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 472.067452][ T8123] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 472.075466][ T8123] R13: 0000000000000000 R14: 00007f876fba5fa0 R15: 00007ffe7c6b3fa8 [ 472.083500][ T8123] [ 472.086897][ T8123] Kernel Offset: disabled [ 472.091431][ T8123] Rebooting in 86400 seconds..