last executing test programs: 4.36871926s ago: executing program 0 (id=1404): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140002000061746164765f736c6166655f3100000900010073"], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000400)={0x20, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 4.297918205s ago: executing program 0 (id=1405): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x44}}, 0x0) 4.245776401s ago: executing program 0 (id=1406): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 4.184294161s ago: executing program 0 (id=1409): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES64], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r3, @ANYBLOB="00500600c31006003800128008000100736974002c", @ANYRES32, @ANYBLOB="08000300e0faff01050009000000000006000d00"], 0x58}}, 0x0) 3.980467264s ago: executing program 4 (id=1410): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x209, &(0x7f0000000a00)={@multicast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0xe, 0x1fb, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast1, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x33, 0x1, [0x7300, 0x4], "7d34b823e423bcf92bacac16d4b70673ca309751f09f38e32756b3e2d476072c268a2d0b36bef1f28011f649247ae3e2ad6226"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x1ff, 0x4000], "e65489c2c92bd4ac8166fdafc0eb183a4c33a901239f961a1cc016354f33e3b568fea2b909e4a911cbbeb4760f90bd5242d675772b598bd90f3caff9ccb17ae8c5d30614c5d6b8a1a425bf3c47c01e7aa5"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "a8d3f7c793471d1e50dc775167fafe533e5d86afa23fcf2dd601b833daacad20692d2eb6c635155ebe078d6e932319e83ab2a825ae154dcc9d472a8bccb309cd36625a4c2eebfc6b802ef85c6f306d8307d5b746517fa009730fc5e7c6679dc7f8577589"}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0x7, 0x3, 0x0, 0x1, 0x7, 0x7}, 0x1, {0xfffffffb}}}, {0x8, 0x22eb, 0x1, {{0xa, 0x2, 0x4, 0x3, 0x0, 0x3, 0x3, 0x5}, 0x2, {0x4, 0x8, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "8a51366f5f22f2ed10f68bc24c14ec447e6dc34458d8aa02ede77c7f19db6b253ba549d3050d262b31fec8d2bf59ca1f93403cdf11452c6e058cb7f839c8afd32b8eacb5ec7401515293b0a9f9ede164f48c23bc933567713ad185997020417d536bf6d487a7c7e8ccea2396f2a4038b5ed917242bab74259519f8b68ee69bb9ea9a61ed792ce71147be28c0f7e60ecc12dec07510695bf98d4f8628825684265721ca67b3cd500317fce76eb0292dc7673d4b"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001b80)={0x0, {{0x2, 0x4e23, @multicast1}}, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x4, 0x4dc, 0xb, 0xfffffff9, 0x9, 0xfffffffd, 0xfffff7f4}, &(0x7f0000000740)=0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x66, @dev={0xfe, 0x80, '\x00', 0x44}}, @in6={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x6, @remote, 0x1}, @in6={0xa, 0x4e24, 0x85d362a5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast1}], 0xa0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000380), 0x4) 3.67635973s ago: executing program 0 (id=1412): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) eventfd2(0x0, 0x0) io_getevents(r2, 0x2, 0x0, 0x0, 0x0) 2.539214649s ago: executing program 3 (id=1425): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f00000003c0)=0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x90) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 2.0783765s ago: executing program 4 (id=1433): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES64], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r3, @ANYBLOB="00500600c31006003800128008000100736974002c00028008", @ANYRES32, @ANYBLOB="08000300e0faff01050009000000000006000d00"], 0x58}}, 0x0) 1.833245877s ago: executing program 0 (id=1435): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.807416861s ago: executing program 4 (id=1436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa80020ffffffffffffffffffe7ee000000000000000002000000070000000000000000000000ec39759e74", 0x4d}], 0x1) 1.74055228s ago: executing program 1 (id=1438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 1.726327258s ago: executing program 4 (id=1439): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x24}}, 0x0) 1.658520232s ago: executing program 4 (id=1440): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f000000ac80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x145f, 0x212, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0x6, 0x2, {0x2, 0xe}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.656389979s ago: executing program 1 (id=1441): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1.60165498s ago: executing program 1 (id=1442): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)="e9238f39a43187439f27c5f1934623afdd629cc94cf3be0f9711a92624b53ce57e19619703c972362d53ef4350678550ec12185e6e86add58e30c12d31019af3b21782533276b7964c988eeabec9404faa96e8ebc06a1ed9774bf5320dacb262ed", 0x61}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.532581129s ago: executing program 1 (id=1443): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x209, &(0x7f0000000a00)={@multicast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0xe, 0x1fb, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast1, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x33, 0x1, [0x7300, 0x4], "7d34b823e423bcf92bacac16d4b70673ca309751f09f38e32756b3e2d476072c268a2d0b36bef1f28011f649247ae3e2ad6226"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x1ff, 0x4000], "e65489c2c92bd4ac8166fdafc0eb183a4c33a901239f961a1cc016354f33e3b568fea2b909e4a911cbbeb4760f90bd5242d675772b598bd90f3caff9ccb17ae8c5d30614c5d6b8a1a425bf3c47c01e7aa5"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "a8d3f7c793471d1e50dc775167fafe533e5d86afa23fcf2dd601b833daacad20692d2eb6c635155ebe078d6e932319e83ab2a825ae154dcc9d472a8bccb309cd36625a4c2eebfc6b802ef85c6f306d8307d5b746517fa009730fc5e7c6679dc7f8577589"}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0x7, 0x3, 0x0, 0x1, 0x7, 0x7}, 0x1, {0xfffffffb}}}, {0x8, 0x22eb, 0x1, {{0xa, 0x2, 0x4, 0x3, 0x0, 0x3, 0x3, 0x5}, 0x2, {0x4, 0x8, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "8a51366f5f22f2ed10f68bc24c14ec447e6dc34458d8aa02ede77c7f19db6b253ba549d3050d262b31fec8d2bf59ca1f93403cdf11452c6e058cb7f839c8afd32b8eacb5ec7401515293b0a9f9ede164f48c23bc933567713ad185997020417d536bf6d487a7c7e8ccea2396f2a4038b5ed917242bab74259519f8b68ee69bb9ea9a61ed792ce71147be28c0f7e60ecc12dec07510695bf98d4f8628825684265721ca67b3cd500317fce76eb0292dc7673d4b"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001b80)={0x0, {{0x2, 0x4e23, @multicast1}}, 0x1}, 0x90) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x66, @dev={0xfe, 0x80, '\x00', 0x44}}, @in6={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x6, @remote, 0x1}, @in6={0xa, 0x4e24, 0x85d362a5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast1}], 0xa0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000380), 0x4) 1.212576978s ago: executing program 3 (id=1444): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x380c8c0, &(0x7f0000000100)={[{@abort}, {@jqfmt_vfsv0}, {@grpquota}]}, 0x0, 0x5f8, &(0x7f0000000680)="$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") mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b00, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) 1.167971656s ago: executing program 1 (id=1445): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) eventfd2(0x0, 0x0) io_getevents(r3, 0x2, 0x0, 0x0, 0x0) 1.142166096s ago: executing program 2 (id=1446): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES64], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r3, @ANYBLOB="00500600c31006003800128008000100736974002c00028008", @ANYRES32, @ANYBLOB="08000300e0faff01050009000000000006000d00"], 0x58}}, 0x0) 1.007838749s ago: executing program 4 (id=1447): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@acl}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x443b, &(0x7f0000004480)="$eJzs3c9vE1ceAPA3k7AkLLAJy4GVVlpLi7Sr3VWUcNrdIBFCICSQZUULqnoxTmIgrROjxKl64JDekHqq1EPVA2ql3nJCOfRK/4ReeqRnpPbQS6VKiFS2x4lnYituFCeFfj4Hj+f9tr8z4zeRJi9OVO4vrOQWVnKFpVx57u7Kudx75dLqYjHEB6Rl/0ey/V84sPHQWjeOk8M+9n7Lbly68sbtcyF8Nf/N883Nzc1Q1RtaGml6/+MPD+eatw1xpk613dat7Ze3Qwind4yrqieE8NaXIUQhhItJ2niy7Q8hnAj1vNsPP7yT26fRPHlWPJ9/MfNoY/Ts9PrjjfafPQrh09Kf/nVv8bu/9ox++4996h4AAAAAAAAAAAAAAAAAgFfc5M0bt/4/PBKeRqF3Pdr5vO5ksm33fOzmvvlL9z8sAAAAAAAAAAAAAAAAAAAA/EptP/+fi061eP5/ItmOtam/eaH7Y6R7pv53Y+Ly8Eiy/nu0I//fSdL3F3vCYIt137Prv1/M1G+9/vvOfvaqMb5GvwMhiodS+3E8NBTC58nC72eiY3GpvFL5593y6tL8vg3jlZWOf331/lR0kgX9O4n/y6b19Ru6v/7/H3ccTdX9O/t3iL3W0vHvaVvuiw+ijs7/S5l6BxF/9i4d/95aWn9zgbH6BaAa/496d4//RKb9bsX/ZAghF1XHmktdAapzmGp6u/kKaen4H6mlpS6dyRfZ7vz/KRP/y5n2D+v6vzYeNo92t+PXQjr+v6ul9aVKbJ//g/Hu5/+VTPuHEf/q+Nf8/nckHf/kjOlNFal9k51e/ycz7Xcr/rfiZJwno9QRsB7V09v9vzrS0vHv25G/ff8XdzT/u5qpf1D3f41+G/d/jfuQv0f1+z9aS8e/v225Ts//qUy9bl//x2rzP/YqHf9jtbT03Hmg9tpp/Kcz7Xcr/rVZSV+UxH/7evLyaH0C8Fn2DxG0lI7/7+uJcXOJtdprbf4X7T7/v5Zp/zDmf9Xxr8Xd7fV1kY7/8bblqvH/uoPf/+uZet2PfwjD5vp7lo7/ibblaud/3+7xn8nU63b8/9bNxgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeAePJdiBE8VBqP46HhkK4lOyfCcei2cJ8frZUnnt3JYSJJD0XTkX3SuXZQim/sFSeL+YLpVJ5LoTLSf7p0BetlMqV/GLhwZWttvqj+8XCcmW2WKiEECaT9D+HE422Zhcqi4UHIYSrW3l/iMvLD+4XlvLzC8v/HR4eHg5TW2MYjIrvV4pLlXrv9dwQprfqDkRNg6tlX9say/HonfLq8lKhVEu/3lSnVJ4rlJrqzCR5H4fBqLK8ujRXqBTzpfK9Rn+HaSzZTkzdfPPm9ZEd+Xei+nb8YIcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC/0dPQ/n4QQeut7cQhhrPEmalX+ybPi+fyLmUcbo2en1x9vPG9XDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAn9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLh2jNBBEYQB+MxZq5zGslt3OdkURLVwRPIEew8PoUbyEd0iRIm2KEEhmIWx2YZuk+r7mwfzMvAfzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmeXrvPt7qJiLF1eYy4u/rf3GYv5T6cz9+/+IMM3I6z6/dw2PdlH9PR/ldOVq2eZeuV9+fMVJ7v4M9Ge7TXt/nenKuqX2bmq/vexMpVxHRlvw25VxV894CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC27MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbR9G3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArwAAAP//k4shUA==") 1.006819633s ago: executing program 2 (id=1448): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140002000061746164765f736c6166655f3100000900010073"], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x28}}, 0x0) 987.771693ms ago: executing program 3 (id=1449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa80020ffffffffffffffffffe7ee000000000000000002000000070000000000000000000000ec39759e74a9fa137c0dbc", 0x53}], 0x1) 913.651525ms ago: executing program 2 (id=1450): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x24}}, 0x0) 908.503546ms ago: executing program 3 (id=1451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 807.737666ms ago: executing program 2 (id=1452): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)=')', 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40), 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x401}, 0xc) 795.752037ms ago: executing program 3 (id=1453): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x2}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x50}}}}}, 0x30}}, 0x0) 717.022502ms ago: executing program 3 (id=1454): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f00000003c0)=0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x90) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 672.548315ms ago: executing program 2 (id=1455): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x209, &(0x7f0000000a00)={@multicast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0xe, 0x1fb, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast1, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x33, 0x1, [0x7300, 0x4], "7d34b823e423bcf92bacac16d4b70673ca309751f09f38e32756b3e2d476072c268a2d0b36bef1f28011f649247ae3e2ad6226"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x1ff, 0x4000], "e65489c2c92bd4ac8166fdafc0eb183a4c33a901239f961a1cc016354f33e3b568fea2b909e4a911cbbeb4760f90bd5242d675772b598bd90f3caff9ccb17ae8c5d30614c5d6b8a1a425bf3c47c01e7aa5"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "a8d3f7c793471d1e50dc775167fafe533e5d86afa23fcf2dd601b833daacad20692d2eb6c635155ebe078d6e932319e83ab2a825ae154dcc9d472a8bccb309cd36625a4c2eebfc6b802ef85c6f306d8307d5b746517fa009730fc5e7c6679dc7f8577589"}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0x7, 0x3, 0x0, 0x1, 0x7, 0x7}, 0x1, {0xfffffffb}}}, {0x8, 0x22eb, 0x1, {{0xa, 0x2, 0x4, 0x3, 0x0, 0x3, 0x3, 0x5}, 0x2, {0x4, 0x8, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "8a51366f5f22f2ed10f68bc24c14ec447e6dc34458d8aa02ede77c7f19db6b253ba549d3050d262b31fec8d2bf59ca1f93403cdf11452c6e058cb7f839c8afd32b8eacb5ec7401515293b0a9f9ede164f48c23bc933567713ad185997020417d536bf6d487a7c7e8ccea2396f2a4038b5ed917242bab74259519f8b68ee69bb9ea9a61ed792ce71147be28c0f7e60ecc12dec07510695bf98d4f8628825684265721ca67b3cd500317fce76eb0292dc7673d4b"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) r1 = socket$inet6(0xa, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x66, @dev={0xfe, 0x80, '\x00', 0x44}}, @in6={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x6, @remote, 0x1}, @in6={0xa, 0x4e24, 0x85d362a5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast1}], 0xa0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000380), 0x4) 44.522421ms ago: executing program 1 (id=1456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) close(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x10000, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) 0s ago: executing program 2 (id=1457): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f000000ac80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x145f, 0x212, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0x6, 0x2, {0x2, 0xe}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): ne [ 55.168301][ T7577] bcachefs (loop3): going read-write [ 55.178240][ T7577] bcachefs (loop3): journal_replay... done [ 55.252675][ T7577] bcachefs (loop3): check_alloc_info... done [ 55.303621][ T7577] bcachefs (loop3): check_lrus... done [ 55.312268][ T7577] bcachefs (loop3): check_extents_to_backpointers... done [ 55.350185][ T7577] bcachefs (loop3): check_alloc_to_lru_refs... done [ 55.365415][ T7577] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 55.372308][ T7577] bcachefs (loop3): check_alloc_info... done [ 55.383850][ T7577] bcachefs (loop3): check_lrus... done [ 55.393503][ T7577] bcachefs (loop3): check_extents_to_backpointers... done [ 55.399814][ T7577] bcachefs (loop3): check_alloc_to_lru_refs... done [ 55.417322][ T7577] bcachefs (loop3): done starting filesystem [ 55.499970][ T6423] bcachefs (loop3): shutting down [ 55.501198][ T6423] bcachefs (loop3): going read-only [ 55.502302][ T6423] bcachefs (loop3): finished waiting for writes to stop [ 55.530556][ T6423] bcachefs (loop3): flushing journal and stopping allocators, journal seq 28 [ 55.532645][ T6423] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 28 [ 55.545586][ T6423] bcachefs (loop3): shutdown complete, journal seq 29 [ 55.552379][ T6423] bcachefs (loop3): marking filesystem clean [ 55.559227][ T7700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.588112][ T6423] bcachefs (loop3): shutdown complete [ 55.597437][ T7700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.617287][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.646175][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.695642][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.716228][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.864050][ T6426] Bluetooth: hci3: Ignoring error of Inquiry Cancel command [ 55.894897][ T7714] loop3: detected capacity change from 0 to 128 [ 56.228755][ T7718] loop0: detected capacity change from 0 to 32768 [ 56.246275][ T7728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.487'. [ 56.390320][ T7718] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,recovery_pass_last=check_dirents,reconstruct_alloc [ 56.393593][ T7718] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 56.395444][ T7718] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 56.395444][ T7718] running recovery passes: check_allocations [ 56.409334][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.428287][ T7718] bcachefs (loop0): dropping and reconstructing all alloc info [ 56.444052][ T7722] loop3: detected capacity change from 0 to 32768 [ 56.446413][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.458096][ T7718] bcachefs (loop0): accounting_read... done [ 56.460281][ T7718] bcachefs (loop0): alloc_read... [ 56.532720][ T7743] loop1: detected capacity change from 0 to 8192 [ 56.585063][ T7718] done [ 56.585755][ T7718] bcachefs (loop0): stripes_read... done [ 56.587337][ T7718] bcachefs (loop0): snapshots_read... done [ 56.589124][ T7718] bcachefs (loop0): check_allocations... [ 56.621462][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.637238][ T7718] btree ptr not marked in member info btree allocated bitmap [ 56.637256][ T7718] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 56.735459][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.794026][ T7718] btree ptr not marked in member info btree allocated bitmap [ 56.795076][ T7718] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 57.244304][ T7718] btree ptr not marked in member info btree allocated bitmap [ 57.244323][ T7718] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 57.306514][ T7718] btree ptr not marked in member info btree allocated bitmap [ 57.306532][ T7718] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 57.342057][ T7718] bucket 0:34 gen 0 data type user has wrong fragmentation_lru: got 0, should be 67108864, fixing [ 57.344560][ T7718] bucket 0:36 gen 0 data type user has wrong fragmentation_lru: got 0, should be 67108864, fixing [ 57.398120][ T7718] done [ 57.426185][ T7718] bcachefs (loop0): going read-write [ 57.428461][ T7718] bcachefs (loop0): journal_replay... [ 57.489009][ T7753] loop1: detected capacity change from 0 to 32768 [ 57.541208][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.544231][ T7718] done [ 57.545498][ T7718] bcachefs (loop0): check_alloc_info... done [ 57.574534][ T7718] bcachefs (loop0): check_lrus... done [ 57.576292][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.588255][ T7753] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=crc64,data_checksum=none,compression=lz4,nojournal_transaction_names [ 57.592712][ T7718] bcachefs (loop0): check_extents_to_backpointers... [ 57.602315][ T7753] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 57.606213][ T7718] done [ 57.611310][ T7718] bcachefs (loop0): check_alloc_to_lru_refs... done [ 57.616083][ T7753] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 57.616083][ T7753] running recovery passes: check_allocations [ 57.616451][ T6421] Bluetooth: hci0: command tx timeout [ 57.629102][ T7718] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 57.631364][ T7718] bcachefs (loop0): check_alloc_info... [ 57.633954][ T7753] invalid bkey u64s 11 type alloc_v4 0:127:0 len 0 ver 0: [ 57.633984][ T7753] gen 0 oldest_gen 0 data_type sb [ 57.633992][ T7753] journal_seq 55834574849 [ 57.634000][ T7753] need_discard 1 [ 57.634008][ T7753] need_inc_gen 1 [ 57.634015][ T7753] dirty_sectors 256 [ 57.634023][ T7753] stripe_sectors 0 [ 57.634031][ T7753] cached_sectors 0 [ 57.634038][ T7753] stripe 17327 [ 57.634046][ T7753] stripe_redundancy 0 [ 57.634053][ T7753] io_time[READ] 1 [ 57.634061][ T7753] io_time[WRITE] 1 [ 57.634068][ T7753] fragmentation 0 [ 57.634075][ T7753] bp_start 8 [ 57.634083][ T7753] [ 57.634090][ T7753] invalid data type (got 1 should be 7): delete?, fixing [ 57.634143][ T7718] done [ 57.641205][ T7753] bcachefs (loop1): accounting_read... [ 57.642132][ T7718] bcachefs (loop0): check_lrus... [ 57.642635][ T7753] done [ 57.643727][ T7718] done [ 57.644254][ T7753] bcachefs (loop1): alloc_read... [ 57.652334][ T7718] bcachefs (loop0): check_extents_to_backpointers... done [ 57.655928][ T7753] done [ 57.658947][ T7753] bcachefs (loop1): stripes_read... done [ 57.660096][ T7753] bcachefs (loop1): snapshots_read... done [ 57.662490][ T7718] bcachefs (loop0): check_alloc_to_lru_refs... [ 57.662514][ T7753] bcachefs (loop1): check_allocations... [ 57.664454][ T7718] done [ 57.671081][ T7718] bcachefs (loop0): done starting filesystem [ 57.704163][ T7753] bcachefs (loop1): pointer to nonexistent bucket 65536:31 [ 57.706372][ T6424] bcachefs (loop0): shutting down [ 57.707580][ T6424] bcachefs (loop0): going read-only [ 57.708812][ T6424] bcachefs (loop0): finished waiting for writes to stop [ 57.710585][ T7753] bcachefs (loop1): bch2_gc_mark_key(): error EIO [ 57.712115][ T7753] bcachefs (loop1): bch2_gc_btree(): error EIO [ 57.713796][ T7753] btree node read error for alloc, fixing [ 57.715166][ T7753] bcachefs (loop1): running explicit recovery pass check_topology (1), currently at check_allocations (7) [ 57.719901][ T7787] netlink: 32 bytes leftover after parsing attributes in process `syz.2.507'. [ 57.727605][ T7753] bcachefs (loop1): bch2_gc_btrees(): error restart_recovery [ 57.729531][ T7753] bcachefs (loop1): bch2_check_allocations(): error restart_recovery [ 57.731601][ T7753] bcachefs (loop1): check_topology... done [ 57.733034][ T7753] bcachefs (loop1): accounting_read... done [ 57.739483][ T7753] bcachefs (loop1): alloc_read... done [ 57.741723][ T7753] bcachefs (loop1): stripes_read... done [ 57.752558][ T6424] bcachefs (loop0): flushing journal and stopping allocators, journal seq 30 [ 57.753317][ T7753] bcachefs (loop1): snapshots_read... [ 57.754723][ T6424] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 30 [ 57.754744][ T7753] done [ 57.761588][ T6424] bcachefs (loop0): shutdown complete, journal seq 31 [ 57.763834][ T6424] bcachefs (loop0): marking filesystem clean [ 57.764249][ T7753] bcachefs (loop1): check_allocations... [ 57.791978][ T6424] bcachefs (loop0): shutdown complete [ 57.825157][ T7753] bcachefs (loop1): pointer to nonexistent bucket 65536:31 [ 57.830836][ T7753] bcachefs (loop1): bch2_gc_mark_key(): error EIO [ 57.832307][ T7753] bcachefs (loop1): bch2_gc_btree(): error EIO [ 57.833705][ T7753] btree node read error for alloc, fixing [ 57.835423][ T7753] bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 57.835451][ T7753] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, fixing [ 57.859014][ T7753] btree ptr not marked in member info btree allocated bitmap [ 57.859032][ T7753] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 57.871289][ T7753] btree ptr not marked in member info btree allocated bitmap [ 57.871306][ T7753] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 57.901247][ T7753] bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 57.901265][ T7753] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 57.928660][ T7753] btree ptr not marked in member info btree allocated bitmap [ 57.928676][ T7753] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 57.964157][ T7753] btree ptr not marked in member info btree allocated bitmap [ 57.964176][ T7753] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 57.995654][ T7753] btree ptr not marked in member info btree allocated bitmap [ 57.995672][ T7753] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 58.008964][ T7799] netlink: 'syz.0.506': attribute type 1 has an invalid length. [ 58.575524][ T7753] bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 58.575552][ T7753] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 58.609072][ T7799] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 58.611788][ T7799] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 58.634013][ T7753] bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 58.634040][ T7753] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 58.654426][ T7753] bucket 0:26 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 58.663690][ T7753] bucket 0:26 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 58.670611][ T7799] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 58.676130][ T7753] bucket 0:31 gen 0 has wrong data_type: got free, should be btree, fixing [ 58.678694][ T7753] bucket 0:31 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 58.679624][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.682906][ T7753] bucket 0:34 gen 0 has wrong data_type: got free, should be user, fixing [ 58.685129][ T7753] bucket 0:34 gen 0 data type user has wrong dirty_sectors: got 0, should be 16, fixing [ 58.688342][ T7753] bucket 0:34 gen 0 data type user has wrong fragmentation_lru: got 0, should be 134217728, fixing [ 58.691816][ T7753] bucket 0:37 gen 0 has wrong data_type: got free, should be btree, fixing [ 58.693699][ T7753] bucket 0:37 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 58.698552][ T7753] bucket 0:42 gen 0 has wrong data_type: got free, should be btree, fixing [ 58.700470][ T7753] bucket 0:42 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 58.706083][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.709651][ T7753] bucket 0:127 gen 0 has wrong data_type: got free, should be sb, fixing [ 58.711470][ T7753] bucket 0:127 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 58.719153][ T7799] bond1 (unregistering): Released all slaves [ 58.763723][ T7753] done [ 58.765541][ T7753] bcachefs (loop1): going read-write [ 58.787830][ T7753] bcachefs (loop1): journal_replay... done [ 58.864015][ T7753] bcachefs (loop1): resume_logged_ops... done [ 58.865431][ T7753] bcachefs (loop1): delete_dead_inodes... done [ 58.872987][ T7753] bcachefs (loop1): done starting filesystem [ 58.934642][ T7753] bcachefs (loop1): non free bucket in freespace btree [ 58.934642][ T7753] freespace key u64s 5 type set 0:32:0 len 1 ver 0 [ 58.934642][ T7753] u64s 13 type alloc_v4 0:31:0 len 0 ver 0: [ 58.934642][ T7753] gen 0 oldest_gen 0 data_type btree [ 58.934642][ T7753] journal_seq 0 [ 58.934642][ T7753] need_discard 0 [ 58.934642][ T7753] need_inc_gen 0 [ 58.934642][ T7753] dirty_sectors 256 [ 58.934642][ T7753] stripe_sectors 0 [ 58.934642][ T7753] cached_sectors 0 [ 58.934642][ T7753] stripe 0 [ 58.934642][ T7753] stripe_redundancy 0 [ 58.934642][ T7753] io_time[READ] 0 [ 58.934642][ T7753] io_time[WRITE] 0 [ 58.934642][ T7753] fragmentation 0 [ 58.934642][ T7753] bp_start 8 [ 58.934642][ T7753] [ 58.951338][ T7753] transaction updates for bch2_truncate journal seq 0 [ 58.951370][ T7753] update: btree=logged_ops cached=0 bch2_logged_op_start+0x154/0x2c0 [ 58.951380][ T7753] old u64s 5 type deleted 0:1:0 len 0 ver 0 [ 58.951389][ T7753] new u64s 8 type logged_op_truncate 0:1:0 len 0 ver 0: subvol=1 inum=4101 new_i_size=0 [ 58.951399][ T7753] update: btree=logged_ops cached=1 bch2_logged_op_start+0x154/0x2c0 [ 58.951409][ T7753] old u64s 5 type deleted 0:1:0 len 0 ver 0 [ 58.951417][ T7753] new u64s 8 type logged_op_truncate 0:1:0 len 0 ver 0: subvol=1 inum=4101 new_i_size=0 [ 58.951427][ T7753] [ 58.963859][ T7753] bcachefs (loop1): bch2_btree_update_start(): error EIO [ 59.006017][ T6417] bcachefs (loop1): shutting down [ 59.007118][ T6417] bcachefs (loop1): going read-only [ 59.008354][ T6417] bcachefs (loop1): finished waiting for writes to stop [ 59.043174][ T7813] loop3: detected capacity change from 0 to 32768 [ 59.044992][ T7813] ======================================================= [ 59.044992][ T7813] WARNING: The mand mount option has been deprecated and [ 59.044992][ T7813] and is ignored by this kernel. Remove the mand [ 59.044992][ T7813] option from the mount to silence this warning. [ 59.044992][ T7813] ======================================================= [ 59.063010][ T6417] bcachefs (loop1): flushing journal and stopping allocators, journal seq 20 [ 59.094220][ T6417] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 21 [ 59.098170][ T6417] bcachefs (loop1): shutdown complete, journal seq 22 [ 59.100211][ T6417] bcachefs (loop1): done going read-only, filesystem not clean [ 59.127207][ T7811] loop2: detected capacity change from 0 to 32768 [ 59.145305][ T6417] bcachefs (loop1): shutdown complete [ 59.338893][ T7834] loop4: detected capacity change from 0 to 4096 [ 59.344065][ T7834] ntfs3: loop4: Primary boot: invalid sectors per cluster 9. [ 59.345894][ T7811] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,recovery_pass_last=check_dirents,reconstruct_alloc [ 59.349542][ T7811] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 59.349569][ T7834] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 59.366332][ T7811] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 59.366332][ T7811] running recovery passes: check_allocations [ 59.400111][ T7811] bcachefs (loop2): dropping and reconstructing all alloc info [ 59.414585][ T7811] bcachefs (loop2): accounting_read... done [ 59.419346][ T7811] bcachefs (loop2): alloc_read... done [ 59.420661][ T7811] bcachefs (loop2): stripes_read... done [ 59.421859][ T7811] bcachefs (loop2): snapshots_read... done [ 59.423188][ T7811] bcachefs (loop2): check_allocations... [ 59.436295][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.467129][ T7811] btree ptr not marked in member info btree allocated bitmap [ 59.467147][ T7811] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 59.482841][ T7811] btree ptr not marked in member info btree allocated bitmap [ 59.482858][ T7811] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 59.501582][ T7811] btree ptr not marked in member info btree allocated bitmap [ 59.501598][ T7811] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 59.539264][ T7811] btree ptr not marked in member info btree allocated bitmap [ 59.539282][ T7811] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 59.554040][ T7811] bucket 0:34 gen 0 data type user has wrong fragmentation_lru: got 0, should be 67108864, fixing [ 59.560395][ T7811] bucket 0:36 gen 0 data type user has wrong fragmentation_lru: got 0, should be 67108864, fixing [ 59.568872][ T7811] done [ 59.575345][ T7811] bcachefs (loop2): going read-write [ 59.713376][ T7811] bcachefs (loop2): journal_replay... [ 59.755608][ T27] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.759380][ T27] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.774732][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 59.784358][ T27] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 59.795683][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.947286][ T6426] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 59.949793][ T6426] Bluetooth: hci3: Injecting HCI hardware error event [ 59.953722][ T6421] Bluetooth: hci3: hardware error 0x00 [ 60.027128][ T27] usb 1-1: config 0 descriptor?? [ 60.355212][ T7811] done [ 60.357222][ T7811] bcachefs (loop2): check_alloc_info... done [ 60.399272][ T7811] bcachefs (loop2): check_lrus... [ 60.415469][ T7838] loop4: detected capacity change from 0 to 40427 [ 60.442601][ T7811] done [ 60.444051][ T7838] F2FS-fs (loop4): heap/no_heap options were deprecated [ 60.453071][ T7838] F2FS-fs (loop4): build fault injection attr: rate: 78, type: 0x1fffff [ 60.455542][ T7838] F2FS-fs (loop4): heap/no_heap options were deprecated [ 60.459192][ T7811] bcachefs (loop2): check_extents_to_backpointers... done [ 60.465417][ T7838] F2FS-fs (loop4): Image doesn't support compression [ 60.471801][ T7838] F2FS-fs (loop4): invalid crc value [ 60.511596][ T7838] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x114/0x7a8 [ 60.514042][ T7838] F2FS-fs (loop4): Failed to initialize F2FS node manager (-117) [ 60.525409][ T7811] bcachefs (loop2): check_alloc_to_lru_refs... done [ 60.543622][ T7851] loop1: detected capacity change from 0 to 32768 [ 60.544679][ T7811] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 60.554747][ T7811] bcachefs (loop2): check_alloc_info... done [ 60.561390][ T7811] bcachefs (loop2): check_lrus... done [ 60.562702][ T7811] bcachefs (loop2): check_extents_to_backpointers... done [ 60.565138][ T7811] bcachefs (loop2): check_alloc_to_lru_refs... done [ 60.568801][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.591395][ T7811] bcachefs (loop2): done starting filesystem [ 60.606039][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.662081][ T7851] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 60.664627][ T7851] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 60.672791][ T6418] bcachefs (loop2): shutting down [ 60.673955][ T6418] bcachefs (loop2): going read-only [ 60.675185][ T6418] bcachefs (loop2): finished waiting for writes to stop [ 60.681588][ T27] uclogic 0003:145F:0212.0001: interface is invalid, ignoring [ 60.724911][ T7851] bcachefs: bch2_fs_get_tree() error: EINVAL [ 60.734383][ T7866] syzkaller0: entered promiscuous mode [ 60.737473][ T6418] bcachefs (loop2): flushing journal and stopping allocators, journal seq 31 [ 60.739873][ T6418] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 31 [ 60.745056][ T7866] syzkaller0: entered allmulticast mode [ 60.765207][ T6418] bcachefs (loop2): shutdown complete, journal seq 32 [ 60.767622][ T6418] bcachefs (loop2): marking filesystem clean [ 60.801384][ T6418] bcachefs (loop2): shutdown complete [ 60.933861][ T27] usb 1-1: USB disconnect, device number 2 [ 60.987748][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.016375][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.026613][ T7873] random: crng reseeded on system resumption [ 62.093868][ T7887] loop3: detected capacity change from 0 to 32768 [ 62.144858][ T7893] binder: 7892:7893 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 62.148321][ T7893] binder: 7893 RLIMIT_NICE not set [ 62.179697][ T7887] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,recovery_pass_last=check_dirents,reconstruct_alloc [ 62.188436][ T7887] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 62.191628][ T7887] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 62.191628][ T7887] running recovery passes: check_allocations [ 62.202327][ T7887] bcachefs (loop3): dropping and reconstructing all alloc info [ 62.210044][ T7902] binder: 7892:7902 tried to acquire reference to desc 0, got 1 instead [ 62.213930][ T7893] binder: 7893 RLIMIT_NICE not set [ 62.223777][ T7887] bcachefs (loop3): accounting_read... done [ 62.225252][ T7887] bcachefs (loop3): alloc_read... done [ 62.229663][ T7887] bcachefs (loop3): stripes_read... done [ 62.230920][ T7887] bcachefs (loop3): snapshots_read... done [ 62.232210][ T7887] bcachefs (loop3): check_allocations... [ 62.250576][ T27] binder: release 7892:7902 transaction 5 out, still active [ 62.255993][ T6421] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 62.268037][ T27] binder: undelivered TRANSACTION_COMPLETE [ 62.270583][ T27] binder: release 7892:7893 transaction 5 in, still active [ 62.275525][ T7887] btree ptr not marked in member info btree allocated bitmap [ 62.275545][ T7887] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 62.294917][ T7911] loop1: detected capacity change from 0 to 512 [ 62.299625][ T7911] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.302315][ T7911] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.304708][ T7887] btree ptr not marked in member info btree allocated bitmap [ 62.304721][ T7887] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 62.306066][ T27] binder: send failed reply for transaction 5, target dead [ 62.315575][ T7887] btree ptr not marked in member info btree allocated bitmap [ 62.315591][ T7887] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 62.322484][ T7911] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.547: casefold flag without casefold feature [ 62.341248][ T7911] EXT4-fs (loop1): get root inode failed [ 62.342536][ T7911] EXT4-fs (loop1): mount failed [ 62.345095][ T7887] btree ptr not marked in member info btree allocated bitmap [ 62.345111][ T7887] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 62.363418][ T7887] bucket 0:34 gen 0 data type user has wrong fragmentation_lru: got 0, should be 67108864, fixing [ 62.372033][ T7887] bucket 0:36 gen 0 data type user has wrong fragmentation_lru: got 0, should be 67108864, fixing [ 62.382587][ T7887] done [ 62.394443][ T7887] bcachefs (loop3): going read-write [ 62.399182][ T7887] bcachefs (loop3): journal_replay... [ 62.467188][ T7921] loop1: detected capacity change from 0 to 64 [ 62.520411][ T7887] done [ 62.521664][ T7887] bcachefs (loop3): check_alloc_info... done [ 62.542644][ T7921] syz.1.551: attempt to access beyond end of device [ 62.542644][ T7921] loop1: rw=0, sector=163, nr_sectors = 1 limit=64 [ 62.544662][ T7887] bcachefs (loop3): check_lrus... done [ 62.545623][ T7921] Buffer I/O error on dev loop1, logical block 163, async page read [ 62.550079][ T7921] syz.1.551: attempt to access beyond end of device [ 62.550079][ T7921] loop1: rw=0, sector=164, nr_sectors = 1 limit=64 [ 62.550164][ T7887] bcachefs (loop3): check_extents_to_backpointers... [ 62.553104][ T7921] Buffer I/O error on dev loop1, logical block 164, async page read [ 62.564761][ T7921] syz.1.551: attempt to access beyond end of device [ 62.564761][ T7921] loop1: rw=0, sector=165, nr_sectors = 1 limit=64 [ 62.564797][ T7887] done [ 62.568509][ T7921] Buffer I/O error on dev loop1, logical block 165, async page read [ 62.570542][ T7921] syz.1.551: attempt to access beyond end of device [ 62.570542][ T7921] loop1: rw=0, sector=166, nr_sectors = 1 limit=64 [ 62.573672][ T7921] Buffer I/O error on dev loop1, logical block 166, async page read [ 62.577107][ T7887] bcachefs (loop3): check_alloc_to_lru_refs... done [ 62.585575][ T7887] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 62.591762][ T7887] bcachefs (loop3): check_alloc_info... done [ 62.597485][ T7887] bcachefs (loop3): check_lrus... done [ 62.600889][ T7887] bcachefs (loop3): check_extents_to_backpointers... done [ 62.603066][ T7887] bcachefs (loop3): check_alloc_to_lru_refs... done [ 62.612476][ T7887] bcachefs (loop3): done starting filesystem [ 62.643938][ T6423] bcachefs (loop3): shutting down [ 62.647423][ T6423] bcachefs (loop3): going read-only [ 62.651701][ T6423] bcachefs (loop3): finished waiting for writes to stop [ 62.690083][ T6423] bcachefs (loop3): flushing journal and stopping allocators, journal seq 33 [ 62.693706][ T6423] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 33 [ 62.711673][ T6423] bcachefs (loop3): shutdown complete, journal seq 34 [ 62.716510][ T6423] bcachefs (loop3): marking filesystem clean [ 62.731775][ T6423] bcachefs (loop3): shutdown complete [ 62.743441][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.796099][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.979513][ T7929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.553'. [ 64.499483][ T2342] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.501229][ T2342] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.633437][ T2249] cfg80211: failed to load regulatory.db [ 71.239449][ T6426] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.241960][ T6426] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.244218][ T6426] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.247438][ T6426] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.249430][ T6426] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.251124][ T6426] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.761570][ T6426] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.773592][ T6426] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.778153][ T6426] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.780262][ T6426] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.782026][ T6426] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 72.783705][ T6426] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.827632][ T6421] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.833349][ T6428] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.834127][ T6432] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 72.836418][ T6428] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.839057][ T6428] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.839527][ T6432] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 72.841449][ T6428] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.842946][ T6432] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 72.843977][ T6428] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.847162][ T6432] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 72.849191][ T6432] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 72.850828][ T6432] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 73.129259][ T7891] netlink: 'syz.0.543': attribute type 29 has an invalid length. [ 73.135963][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 73.155637][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 73.296024][ T6421] Bluetooth: hci5: command tx timeout [ 73.542953][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.574198][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.030716][ T2186] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.168990][ T2186] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.248314][ T2186] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.259066][ T7950] chnl_net:caif_netlink_parms(): no params data found [ 74.294546][ T7969] loop1: detected capacity change from 0 to 32768 [ 74.348315][ T2186] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.372473][ T7969] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,recovery_pass_last=check_dirents,reconstruct_alloc [ 74.375652][ T7969] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 74.380458][ T7969] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 74.380458][ T7969] running recovery passes: check_allocations [ 74.385098][ T7969] bcachefs (loop1): dropping and reconstructing all alloc info [ 74.402813][ T7969] bcachefs (loop1): accounting_read... done [ 74.406071][ T7969] bcachefs (loop1): alloc_read... done [ 74.407409][ T7969] bcachefs (loop1): stripes_read... done [ 74.408709][ T7969] bcachefs (loop1): snapshots_read... done [ 74.410096][ T7969] bcachefs (loop1): check_allocations... [ 74.436261][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.439275][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.440939][ T7950] bridge_slave_0: entered allmulticast mode [ 74.442816][ T7950] bridge_slave_0: entered promiscuous mode [ 74.445255][ T7951] chnl_net:caif_netlink_parms(): no params data found [ 74.454184][ T7948] chnl_net:caif_netlink_parms(): no params data found [ 74.457203][ T7969] btree ptr not marked in member info btree allocated bitmap [ 74.457219][ T7969] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 74.462688][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.462722][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.462848][ T7950] bridge_slave_1: entered allmulticast mode [ 74.463410][ T7950] bridge_slave_1: entered promiscuous mode [ 74.475434][ T7969] btree ptr not marked in member info btree allocated bitmap [ 74.475451][ T7969] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 74.488025][ T7969] btree ptr not marked in member info btree allocated bitmap [ 74.488042][ T7969] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 74.501030][ T7950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.510317][ T7969] btree ptr not marked in member info btree allocated bitmap [ 74.510335][ T7969] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 74.518541][ T7969] bucket 0:34 gen 0 data type user has wrong fragmentation_lru: got 0, should be 67108864, fixing [ 74.521319][ T7969] bucket 0:36 gen 0 data type user has wrong fragmentation_lru: got 0, should be 67108864, fixing [ 74.522807][ T7950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.525509][ T7969] done [ 74.527546][ T7969] bcachefs (loop1): going read-write [ 74.529593][ T7940] chnl_net:caif_netlink_parms(): no params data found [ 74.529874][ T7969] bcachefs (loop1): journal_replay... [ 74.597779][ T7950] team0: Port device team_slave_0 added [ 74.605407][ T7969] done [ 74.608439][ T7969] bcachefs (loop1): check_alloc_info... done [ 74.626739][ T7969] bcachefs (loop1): check_lrus... done [ 74.628665][ T7969] bcachefs (loop1): check_extents_to_backpointers... done [ 74.637611][ T7969] bcachefs (loop1): check_alloc_to_lru_refs... done [ 74.642804][ T7969] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 74.644927][ T7969] bcachefs (loop1): check_alloc_info... done [ 74.649796][ T7969] bcachefs (loop1): check_lrus... done [ 74.653745][ T7969] bcachefs (loop1): check_extents_to_backpointers... done [ 74.657956][ T7969] bcachefs (loop1): check_alloc_to_lru_refs... done [ 74.659406][ T7950] team0: Port device team_slave_1 added [ 74.662230][ T7969] bcachefs (loop1): done starting filesystem [ 74.690333][ T6417] bcachefs (loop1): shutting down [ 74.691536][ T6417] bcachefs (loop1): going read-only [ 74.692666][ T6417] bcachefs (loop1): finished waiting for writes to stop [ 74.705434][ T7951] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.707450][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.708909][ T7951] bridge_slave_0: entered allmulticast mode [ 74.710814][ T7951] bridge_slave_0: entered promiscuous mode [ 74.718843][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.720480][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.722018][ T7948] bridge_slave_0: entered allmulticast mode [ 74.723979][ T7948] bridge_slave_0: entered promiscuous mode [ 74.731916][ T6417] bcachefs (loop1): flushing journal and stopping allocators, journal seq 30 [ 74.733890][ T6417] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 30 [ 74.739580][ T6417] bcachefs (loop1): shutdown complete, journal seq 31 [ 74.741974][ T6417] bcachefs (loop1): marking filesystem clean [ 74.754027][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.755623][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.762196][ T7950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.765104][ T7940] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.766657][ T6417] bcachefs (loop1): shutdown complete [ 74.768699][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.770423][ T7940] bridge_slave_0: entered allmulticast mode [ 74.772387][ T7940] bridge_slave_0: entered promiscuous mode [ 74.775244][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.777500][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.779278][ T7940] bridge_slave_1: entered allmulticast mode [ 74.781191][ T7940] bridge_slave_1: entered promiscuous mode [ 74.789809][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.791425][ T7951] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.792986][ T7951] bridge_slave_1: entered allmulticast mode [ 74.794776][ T7951] bridge_slave_1: entered promiscuous mode [ 74.814056][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.815506][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.817230][ T6426] Bluetooth: hci6: command tx timeout [ 74.823667][ T7948] bridge_slave_1: entered allmulticast mode [ 74.825529][ T7948] bridge_slave_1: entered promiscuous mode [ 74.827545][ T2186] bridge_slave_1: left allmulticast mode [ 74.829103][ T2186] bridge_slave_1: left promiscuous mode [ 74.830606][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.843016][ T2186] bridge_slave_0: left allmulticast mode [ 74.844384][ T2186] bridge_slave_0: left promiscuous mode [ 74.845589][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.896061][ T6421] Bluetooth: hci7: command tx timeout [ 74.897896][ T6426] Bluetooth: hci8: command tx timeout [ 75.079250][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.119065][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.376069][ T6426] Bluetooth: hci5: command tx timeout [ 76.379485][ T2186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.419077][ T2186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.459202][ T2186] bond0 (unregistering): Released all slaves [ 76.464294][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.465760][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.471430][ T7950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.482751][ T7951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.526368][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 76.537262][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 76.683092][ T7940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.687034][ T7951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.690931][ T7948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.771764][ T7940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.798195][ T7948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.839168][ T7950] hsr_slave_0: entered promiscuous mode [ 76.886502][ T7950] hsr_slave_1: entered promiscuous mode [ 76.896014][ T6426] Bluetooth: hci6: command tx timeout [ 76.926101][ T7950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.927843][ T7950] Cannot create hsr debugfs directory [ 76.941001][ T7951] team0: Port device team_slave_0 added [ 76.944560][ T7951] team0: Port device team_slave_1 added [ 76.975965][ T6426] Bluetooth: hci8: command tx timeout [ 76.976306][ T6421] Bluetooth: hci7: command tx timeout [ 77.008596][ T7948] team0: Port device team_slave_0 added [ 77.010291][ T8029] netlink: 'syz.1.569': attribute type 29 has an invalid length. [ 77.013208][ T7948] team0: Port device team_slave_1 added [ 77.014623][ T8030] netlink: 'syz.1.569': attribute type 29 has an invalid length. [ 77.029410][ T7940] team0: Port device team_slave_0 added [ 77.040854][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.042380][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.048655][ T7951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.059592][ T8031] netlink: 'syz.1.569': attribute type 29 has an invalid length. [ 77.061561][ T8032] netlink: 'syz.1.569': attribute type 29 has an invalid length. [ 77.063357][ T8029] netlink: 'syz.1.569': attribute type 29 has an invalid length. [ 77.074346][ T7940] team0: Port device team_slave_1 added [ 77.103598][ T8034] loop1: detected capacity change from 0 to 512 [ 77.115201][ T8034] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.118925][ T8034] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.570: casefold flag without casefold feature [ 77.121913][ T8034] EXT4-fs (loop1): get root inode failed [ 77.123747][ T8034] EXT4-fs (loop1): mount failed [ 77.174691][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.216168][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.242370][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.243856][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.249983][ T7951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.273671][ T7940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.275093][ T7940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.280608][ T7940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.286457][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.288014][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.293509][ T7948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.298363][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.299953][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.305393][ T7948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.360873][ T7940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.362353][ T7940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.371413][ T7940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.440173][ T2186] hsr_slave_0: left promiscuous mode [ 77.462813][ T6421] Bluetooth: hci5: command tx timeout [ 77.546055][ T2186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.547704][ T2186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.551992][ T2186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.553523][ T2186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.564657][ T2186] hsr_slave_1: left promiscuous mode [ 77.566277][ T2186] veth1_macvtap: left promiscuous mode [ 77.567654][ T2186] veth0_macvtap: left promiscuous mode [ 77.568860][ T2186] veth1_vlan: left promiscuous mode [ 77.570041][ T2186] veth0_vlan: left promiscuous mode [ 77.745069][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.787008][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.999542][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.047072][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.975999][ T6421] Bluetooth: hci6: command tx timeout [ 79.055945][ T6421] Bluetooth: hci8: command tx timeout [ 79.057124][ T6421] Bluetooth: hci7: command tx timeout [ 79.399649][ T2186] team0 (unregistering): Port device team_slave_1 removed [ 79.536005][ T6426] Bluetooth: hci5: command tx timeout [ 79.558486][ T2186] team0 (unregistering): Port device team_slave_0 removed [ 81.056028][ T6426] Bluetooth: hci6: command tx timeout [ 81.146215][ T6426] Bluetooth: hci7: command tx timeout [ 81.147470][ T6426] Bluetooth: hci8: command tx timeout [ 81.751682][ T7951] hsr_slave_0: entered promiscuous mode [ 81.796246][ T7951] hsr_slave_1: entered promiscuous mode [ 81.836104][ T7951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.837680][ T7951] Cannot create hsr debugfs directory [ 81.877944][ C1] Unknown status report in ack skb [ 81.917942][ T7948] hsr_slave_0: entered promiscuous mode [ 81.956261][ T7948] hsr_slave_1: entered promiscuous mode [ 81.996076][ T7948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.997622][ T7948] Cannot create hsr debugfs directory [ 82.042075][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 82.050849][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 82.178714][ T7940] hsr_slave_0: entered promiscuous mode [ 82.216355][ T7940] hsr_slave_1: entered promiscuous mode [ 82.256326][ T7940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.257883][ T7940] Cannot create hsr debugfs directory [ 82.409090][ T7950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.481862][ T8069] netlink: 'syz.1.577': attribute type 29 has an invalid length. [ 82.542681][ T7950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.552373][ T8069] netlink: 'syz.1.577': attribute type 29 has an invalid length. [ 82.554365][ T8070] netlink: 'syz.1.577': attribute type 29 has an invalid length. [ 82.659412][ T7950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.664055][ T8069] netlink: 'syz.1.577': attribute type 29 has an invalid length. [ 82.672798][ T8070] netlink: 'syz.1.577': attribute type 29 has an invalid length. [ 82.737290][ T8075] loop1: detected capacity change from 0 to 512 [ 82.740848][ T8075] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.748747][ T8075] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.578: casefold flag without casefold feature [ 82.756040][ T8075] EXT4-fs (loop1): get root inode failed [ 82.757262][ T8075] EXT4-fs (loop1): mount failed [ 82.761537][ T7950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.325655][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.366500][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.438964][ T2186] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.508188][ T7940] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.568891][ T2186] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.628533][ T7940] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.699840][ T2186] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.739860][ T7940] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.789315][ T2186] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.867873][ T7940] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.919098][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 83.928530][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 84.217772][ T2186] bridge_slave_1: left allmulticast mode [ 84.219144][ T2186] bridge_slave_1: left promiscuous mode [ 84.221325][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.224651][ T2186] bridge_slave_0: left allmulticast mode [ 84.227689][ T2186] bridge_slave_0: left promiscuous mode [ 84.229326][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.234630][ T2186] team0: left allmulticast mode [ 84.237166][ T2186] team_slave_0: left allmulticast mode [ 84.238485][ T2186] team_slave_1: left allmulticast mode [ 84.239954][ T2186] team0: left promiscuous mode [ 84.241000][ T2186] team_slave_0: left promiscuous mode [ 84.242291][ T2186] team_slave_1: left promiscuous mode [ 84.243587][ T2186] bridge0: port 3(team0) entered disabled state [ 84.251821][ T2186] bridge_slave_1: left allmulticast mode [ 84.253245][ T2186] bridge_slave_1: left promiscuous mode [ 84.254456][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.259586][ T2186] bridge_slave_0: left allmulticast mode [ 84.260810][ T2186] bridge_slave_0: left promiscuous mode [ 84.262165][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.457641][ T2186] gretap0: left promiscuous mode [ 86.618800][ T2186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.658604][ T2186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.718379][ T2186] bond0 (unregistering): Released all slaves [ 87.419131][ T2186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.458660][ T2186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.498681][ T2186] bond0 (unregistering): Released all slaves [ 87.606027][ T8134] netlink: 'syz.1.584': attribute type 29 has an invalid length. [ 87.611175][ T8136] netlink: 'syz.1.584': attribute type 29 has an invalid length. [ 87.613762][ T8134] netlink: 'syz.1.584': attribute type 29 has an invalid length. [ 87.615735][ T8134] netlink: 'syz.1.584': attribute type 29 has an invalid length. [ 87.619943][ T8134] netlink: 'syz.1.584': attribute type 29 has an invalid length. [ 87.784840][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.846202][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.314294][ T7951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.335692][ T7951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.346890][ T7951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.480105][ T7951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.652693][ T8183] netlink: 'syz.1.591': attribute type 29 has an invalid length. [ 88.787398][ T8184] netlink: 'syz.1.591': attribute type 29 has an invalid length. [ 88.789654][ T8183] netlink: 'syz.1.591': attribute type 29 has an invalid length. [ 88.803101][ T8195] netlink: 'syz.1.591': attribute type 29 has an invalid length. [ 88.809611][ T8183] netlink: 'syz.1.591': attribute type 29 has an invalid length. [ 88.826760][ T7951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.835003][ T7951] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.854246][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.855680][ T721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.877207][ T721] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.878700][ T721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.954662][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.045599][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.123818][ T7951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.154801][ T2186] hsr_slave_0: left promiscuous mode [ 89.266342][ T2186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.267988][ T2186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.273566][ T2186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.275461][ T2186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.283035][ T2186] hsr_slave_0: left promiscuous mode [ 89.396516][ T2186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.398439][ T2186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.400751][ T2186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.402482][ T2186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.423081][ T2186] hsr_slave_1: left promiscuous mode [ 89.424403][ T2186] veth1_macvtap: left promiscuous mode [ 89.425673][ T2186] veth0_macvtap: left promiscuous mode [ 89.431556][ T2186] veth1_vlan: left promiscuous mode [ 89.432897][ T2186] veth0_vlan: left promiscuous mode [ 89.435240][ T2186] hsr_slave_1: left promiscuous mode [ 89.439059][ T2186] veth1_macvtap: left promiscuous mode [ 89.440219][ T2186] veth0_macvtap: left promiscuous mode [ 89.441468][ T2186] veth1_vlan: left promiscuous mode [ 89.442709][ T2186] veth0_vlan: left promiscuous mode [ 91.438852][ T2186] team0 (unregistering): Port device team_slave_1 removed [ 91.637413][ T2186] team0 (unregistering): Port device team_slave_0 removed [ 95.548915][ T2186] team0 (unregistering): Port device team_slave_1 removed [ 95.717027][ T2186] team0 (unregistering): Port device team_slave_0 removed [ 97.978018][ T8281] netlink: 'syz.1.598': attribute type 29 has an invalid length. [ 97.987546][ T7948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.998656][ T7948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.017551][ T7948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.054926][ T7948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.131154][ T7951] veth0_vlan: entered promiscuous mode [ 98.151369][ T7951] veth1_vlan: entered promiscuous mode [ 98.157643][ T7950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.169502][ T7950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.183095][ T7950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.202158][ T7948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.216424][ T7950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.234466][ T7951] veth0_macvtap: entered promiscuous mode [ 98.269943][ T7948] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.276804][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.278271][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.280828][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.282312][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.337246][ T7940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.340440][ T7940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.357493][ T7951] veth1_macvtap: entered promiscuous mode [ 98.385635][ T7940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.395351][ T7940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.411255][ T7948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.413680][ T7948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.463907][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.474604][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.477800][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.480339][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.483433][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.507418][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.509953][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.512196][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.514449][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.541352][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.570777][ T7950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.594472][ T7951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.599553][ T7951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.601527][ T7951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.603471][ T7951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.630954][ T7950] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.640922][ T7940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.662489][ T7940] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.665336][ T8307] loop1: detected capacity change from 0 to 32768 [ 98.697416][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.698947][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.718720][ T8307] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.601 (8307) [ 98.730212][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.731694][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.733975][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.735437][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.745429][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.747072][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.752979][ T8307] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.757379][ T8307] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 98.759338][ T8307] BTRFS info (device loop1): using free-space-tree [ 98.798352][ T7948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.852205][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.853875][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.872820][ T7940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.875311][ T7940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.883244][ T8307] BTRFS info (device loop1): rebuilding free space tree [ 98.911292][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.913027][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.936955][ T7948] veth0_vlan: entered promiscuous mode [ 98.941360][ T7948] veth1_vlan: entered promiscuous mode [ 99.000478][ T8307] BTRFS info (device loop1): balance: start -s [ 99.002680][ T7948] veth0_macvtap: entered promiscuous mode [ 99.003013][ T8307] BTRFS info (device loop1): left=0, need=98304, flags=2 [ 99.005722][ T8307] BTRFS info (device loop1): space_info SYSTEM has 0 free, is not full [ 99.008051][ T8307] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 99.011009][ T8307] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1441792 [ 99.013167][ T8307] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 99.014744][ T8307] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 99.016860][ T8307] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 99.017670][ T7948] veth1_macvtap: entered promiscuous mode [ 99.018658][ T8307] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0 [ 99.039141][ T7948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.041833][ T7948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.043899][ T7948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.064842][ T7948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.085152][ T7948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.091947][ T30] audit: type=1326 audit(99.070:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8355 comm="syz.3.560" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9414a6e8 code=0x0 [ 99.093831][ T8307] BTRFS info (device loop1): relocating block group 1048576 flags system [ 99.099140][ T7948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.102165][ T7948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.113670][ T7948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.121675][ T7948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.123793][ T7948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.155293][ T7948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.157712][ T7948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.160054][ T7948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.162968][ T7948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.196936][ T7940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.230104][ T7948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.231999][ T7948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.233683][ T7948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.235418][ T7948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.260350][ T8307] BTRFS info (device loop1): balance: ended with status: 0 [ 99.268680][ T7950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.368601][ T7950] veth0_vlan: entered promiscuous mode [ 99.394657][ T7950] veth1_vlan: entered promiscuous mode [ 99.459726][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.462245][ T7950] veth0_macvtap: entered promiscuous mode [ 99.472088][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.486643][ T7950] veth1_macvtap: entered promiscuous mode [ 99.504186][ T721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.507033][ T721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.539896][ T7940] veth0_vlan: entered promiscuous mode [ 99.545386][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.552484][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.555124][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.561192][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.563641][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.566385][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.568867][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.571243][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.574764][ T7950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.581329][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.583996][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.587637][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.590216][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.592521][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.594875][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.598049][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.600420][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.611244][ T7950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.622541][ T7950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.630775][ T7950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.633583][ T7950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.639298][ T7950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.657837][ T7940] veth1_vlan: entered promiscuous mode [ 99.729812][ T7940] veth0_macvtap: entered promiscuous mode [ 99.740002][ T7940] veth1_macvtap: entered promiscuous mode [ 99.762276][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.771427][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.773609][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.785162][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.787945][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.790339][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.792544][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.794827][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.797758][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.800274][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.803583][ T7940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.805437][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.807678][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.840443][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.842940][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.844009][ T6417] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.845260][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.845277][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.845302][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.855307][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.859393][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.863642][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.869786][ T7940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.873494][ T7940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.879666][ T7940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.887225][ T2133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.889027][ T2133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.898204][ T7940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.900397][ T7940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.902383][ T7940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.904216][ T7940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.047089][ T8401] netlink: 'syz.3.607': attribute type 3 has an invalid length. [ 100.049121][ T8401] netlink: 'syz.3.607': attribute type 3 has an invalid length. [ 100.056446][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.058111][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.093603][ T2133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.095451][ T2133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.148036][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.187024][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.226540][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.391313][ T8428] netlink: 'syz.3.617': attribute type 3 has an invalid length. [ 100.392941][ T8428] netlink: 'syz.3.617': attribute type 3 has an invalid length. [ 100.423171][ T27] usb 1-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 100.425134][ T27] usb 1-1: config 0 has an invalid interface number: 82 but max is 35 [ 100.428132][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 100.430007][ T27] usb 1-1: config 0 has no interface number 0 [ 100.436486][ T27] usb 1-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 100.438576][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.454394][ T27] usb 1-1: config 0 descriptor?? [ 100.459434][ T27] gspca_main: sunplus-2.14.0 probing 08ca:0104 [ 100.604656][ T8443] PKCS7: Unknown OID: [4] 2.19.1658752.0.0.0.0 [ 100.607273][ T8443] PKCS7: Only support pkcs7_signedData type [ 100.701810][ T8451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.746191][ T8451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.771507][ T8453] netlink: 'syz.2.629': attribute type 3 has an invalid length. [ 100.773362][ T8453] netlink: 'syz.2.629': attribute type 3 has an invalid length. [ 100.887600][ T27] gspca_sunplus: reg_r err -71 [ 100.888726][ T27] sunplus 1-1:0.82: probe with driver sunplus failed with error -71 [ 100.895003][ T27] usb 1-1: USB disconnect, device number 3 [ 100.967464][ T8468] loop1: detected capacity change from 0 to 512 [ 100.972091][ T8468] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 100.985654][ T8468] EXT4-fs (loop1): invalid journal inode [ 100.987826][ T8468] EXT4-fs (loop1): can't get journal size [ 100.996324][ T8468] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.999248][ T8468] EXT4-fs (loop1): 1 truncate cleaned up [ 101.001214][ T8468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.063374][ T6417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.153015][ T8480] netlink: 'syz.2.641': attribute type 3 has an invalid length. [ 101.155496][ T8480] netlink: 'syz.2.641': attribute type 3 has an invalid length. [ 101.481642][ T8478] loop1: detected capacity change from 0 to 32768 [ 101.485691][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.501261][ T8504] netlink: 'syz.4.653': attribute type 3 has an invalid length. [ 101.506314][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.580325][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.583870][ T8508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.616549][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.616814][ T8508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.936601][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.116972][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 102.121826][ T27] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 102.124449][ T27] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.130590][ T27] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.151355][ T27] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.158659][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.160962][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.162697][ T27] usb 1-1: Product: syz [ 102.163697][ T27] usb 1-1: Manufacturer: syz [ 102.185265][ T27] usb 1-1: SerialNumber: syz [ 102.395190][ T8554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.400904][ T8556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.426156][ T8556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.429526][ T8554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.448755][ T27] usb 1-1: USB disconnect, device number 4 [ 102.471639][ T8290] udevd[8290]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.233441][ T8599] validate_nla: 5 callbacks suppressed [ 103.233459][ T8599] netlink: 'syz.3.699': attribute type 3 has an invalid length. [ 103.287378][ T8599] netlink: 'syz.3.699': attribute type 3 has an invalid length. [ 103.456141][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.511905][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.770461][ T8632] netlink: 'syz.1.712': attribute type 3 has an invalid length. [ 103.832869][ T8632] netlink: 'syz.1.712': attribute type 3 has an invalid length. [ 104.253452][ C1] Unknown status report in ack skb [ 104.495526][ T8677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.732'. [ 104.704444][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.727474][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.119774][ T8714] netlink: 32 bytes leftover after parsing attributes in process `syz.2.749'. [ 105.402267][ T8740] loop0: detected capacity change from 0 to 512 [ 105.409961][ T8740] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 105.414342][ T8740] EXT4-fs (loop0): invalid journal inode [ 105.415701][ T8740] EXT4-fs (loop0): can't get journal size [ 105.419076][ T8739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.762'. [ 105.431707][ T8740] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.434591][ T8740] EXT4-fs (loop0): 1 truncate cleaned up [ 105.442567][ T8740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.483122][ T7948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.712763][ T8752] xt_CT: No such helper "syz0" [ 105.943241][ T8767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.773'. [ 106.127363][ T2249] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.521597][ T2249] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 106.528325][ T2249] usb 1-1: config 0 interface 0 has no altsetting 0 [ 106.557639][ T2249] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 106.559992][ T2249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.679097][ T2249] usb 1-1: config 0 descriptor?? [ 107.019164][ T2249] usb 1-1: string descriptor 0 read error: -71 [ 107.021115][ T2249] usb 1-1: ucan: probing device on interface #0 [ 107.022543][ T2249] usb 1-1: ucan: invalid EP count (1) [ 107.023753][ T2249] usb 1-1: ucan: probe failed; try to update the device firmware [ 107.072402][ T2249] usb 1-1: USB disconnect, device number 5 [ 107.237926][ T8806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.786'. [ 107.619625][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.736030][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.842853][ T8837] netlink: 32 bytes leftover after parsing attributes in process `syz.1.802'. [ 108.762335][ T8855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.826187][ T8855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.898970][ T8861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.814'. [ 108.927725][ C0] Unknown status report in ack skb [ 110.095603][ C1] Unknown status report in ack skb [ 110.316814][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.356035][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.756076][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.323260][ T25] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 111.325732][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.328574][ T25] usb 1-1: Product: syz [ 111.329590][ T25] usb 1-1: Manufacturer: syz [ 111.330650][ T25] usb 1-1: SerialNumber: syz [ 111.333030][ T25] usb 1-1: config 0 descriptor?? [ 111.541604][ T25] hso 1-1:0.0: Failed to find BULK IN ep [ 111.549635][ T25] usb-storage 1-1:0.0: USB Mass Storage device detected [ 111.788721][ T6497] usb 1-1: USB disconnect, device number 6 [ 112.159846][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.310896][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.882830][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.906415][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.166341][ T9003] bridge0: port 3(syz_tun) entered blocking state [ 113.168781][ T9003] bridge0: port 3(syz_tun) entered disabled state [ 113.170946][ T9003] syz_tun: entered allmulticast mode [ 113.174072][ T9003] syz_tun: entered promiscuous mode [ 113.187347][ T9003] bridge0: port 3(syz_tun) entered blocking state [ 113.189139][ T9003] bridge0: port 3(syz_tun) entered forwarding state [ 114.156511][ T9037] bridge0: port 3(syz_tun) entered blocking state [ 114.157869][ T9037] bridge0: port 3(syz_tun) entered disabled state [ 114.159345][ T9037] syz_tun: entered allmulticast mode [ 114.160996][ T9037] syz_tun: entered promiscuous mode [ 114.162327][ T9037] bridge0: port 3(syz_tun) entered blocking state [ 114.163632][ T9037] bridge0: port 3(syz_tun) entered forwarding state [ 114.447327][ C1] Unknown status report in ack skb [ 114.513160][ T9054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.546005][ T9054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.585158][ T9058] loop1: detected capacity change from 0 to 2048 [ 114.599002][ T9058] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576 [ 114.612337][ T9058] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.618470][ T9060] bridge0: port 3(syz_tun) entered blocking state [ 114.620264][ T9060] bridge0: port 3(syz_tun) entered disabled state [ 114.622257][ T9060] syz_tun: entered allmulticast mode [ 114.624269][ T9060] syz_tun: entered promiscuous mode [ 114.627091][ T9060] bridge0: port 3(syz_tun) entered blocking state [ 114.628728][ T9060] bridge0: port 3(syz_tun) entered forwarding state [ 114.805948][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 114.996054][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.999400][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.001457][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 115.003605][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 115.020989][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 115.024942][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.034054][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.037229][ T10] usb 1-1: SerialNumber: syz [ 115.042021][ T9056] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 115.043735][ T9056] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 115.051701][ T10] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 115.054158][ T10] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 115.125222][ C1] Unknown status report in ack skb [ 115.201134][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.270064][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.422958][ T10] usb 1-1: USB disconnect, device number 7 [ 115.452745][ T9087] bridge0: port 3(syz_tun) entered blocking state [ 115.454579][ T9087] bridge0: port 3(syz_tun) entered disabled state [ 115.457484][ T9087] syz_tun: entered allmulticast mode [ 115.460592][ T9087] syz_tun: entered promiscuous mode [ 115.462276][ T9087] bridge0: port 3(syz_tun) entered blocking state [ 115.463808][ T9087] bridge0: port 3(syz_tun) entered forwarding state [ 115.839099][ T9105] netlink: 48 bytes leftover after parsing attributes in process `syz.2.906'. [ 116.344245][ T9134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.386241][ T9134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.590627][ T9139] netlink: 48 bytes leftover after parsing attributes in process `syz.2.920'. [ 116.976324][ T9154] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 117.220073][ T9168] vlan2: entered promiscuous mode [ 117.221351][ T9168] vlan2: entered allmulticast mode [ 117.228641][ T9168] hsr_slave_1: entered allmulticast mode [ 117.717204][ T9198] vlan2: entered promiscuous mode [ 117.722479][ T9198] vlan2: entered allmulticast mode [ 117.723735][ T9198] hsr_slave_1: entered allmulticast mode [ 117.825531][ T9182] loop1: detected capacity change from 0 to 32768 [ 117.943562][ T9182] (syz.1.939,9182,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x0, computed 0x7c295656. Applying ECC. [ 117.952382][ T9182] (syz.1.939,9182,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x0, computed 0x11ec0d13 [ 117.959165][ T9182] (syz.1.939,9182,0):ocfs2_verify_volume:2380 ERROR: status = -5 [ 117.961041][ T9182] (syz.1.939,9182,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 117.962919][ T9182] (syz.1.939,9182,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 118.344289][ T9224] vlan3: entered promiscuous mode [ 118.345441][ T9224] vlan3: entered allmulticast mode [ 118.360308][ T9224] hsr_slave_1: entered allmulticast mode [ 118.415988][ T6421] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 118.418052][ T6421] Bluetooth: hci5: Injecting HCI hardware error event [ 118.421031][ T6421] Bluetooth: hci5: hardware error 0x00 [ 118.450250][ T9230] loop2: detected capacity change from 0 to 2048 [ 118.465049][ T9230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.536738][ T9230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.708500][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.761133][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.323081][ T9275] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 119.327398][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.980'. [ 119.445919][ T6497] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.543962][ T9278] vlan3: entered promiscuous mode [ 119.545099][ T9278] vlan3: entered allmulticast mode [ 119.557112][ T9278] hsr_slave_1: entered allmulticast mode [ 119.647046][ T6497] usb 1-1: Using ep0 maxpacket: 16 [ 119.653367][ T6497] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.660126][ T6497] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 119.662278][ T6497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.663960][ T6497] usb 1-1: Product: syz [ 119.664961][ T6497] usb 1-1: Manufacturer: syz [ 119.686357][ T6497] usb 1-1: SerialNumber: syz [ 119.696988][ T6497] usb 1-1: config 0 descriptor?? [ 119.932380][ T6497] usb 1-1: Limiting number of CPorts to U8_MAX [ 119.945131][ T6497] usb 1-1: Not enough endpoints found in device, aborting! [ 119.979244][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.014697][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.139780][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.161417][ T10] usb 1-1: USB disconnect, device number 8 [ 120.206101][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.461113][ T9308] loop4: detected capacity change from 0 to 32768 [ 120.492702][ T9308] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 120.500505][ T9308] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 120.515341][ T9308] XFS (loop4): null uuid in log - IRIX style log [ 120.543127][ T9308] XFS (loop4): Starting recovery (logdev: internal) [ 120.555892][ T9308] XFS (loop4): log record CRC mismatch: found 0x1279d52, expected 0xc75c302f. [ 120.557779][ T9308] 00000000: fe ed ba be 00 00 00 00 00 00 00 02 00 00 00 00 ................ [ 120.559510][ T9308] 00000010: 00 00 00 00 00 00 00 41 00 00 00 01 00 00 00 30 .......A.......0 [ 120.561213][ T9308] XFS (loop4): Internal error xlog_recover_process at line 2931 of file fs/xfs/xfs_log_recover.c. Caller xlog_do_recovery_pass+0x858/0xbe0 [ 120.573453][ T9308] CPU: 0 UID: 0 PID: 9308 Comm: syz.4.995 Not tainted 6.11.0-rc7-syzkaller-g5f5673607153 #0 [ 120.575572][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 120.577725][ T9308] Call trace: [ 120.578395][ T9308] dump_backtrace+0x1b8/0x1e4 [ 120.579323][ T9308] show_stack+0x2c/0x3c [ 120.580187][ T9308] dump_stack_lvl+0xe4/0x150 [ 120.581099][ T9308] dump_stack+0x1c/0x28 [ 120.581953][ T9308] xfs_error_report+0xbc/0xec [ 120.582935][ T9308] xlog_recover_process+0x1a0/0x1e4 [ 120.584151][ T9308] xlog_do_recovery_pass+0x858/0xbe0 [ 120.585441][ T9308] xlog_do_log_recovery+0x60/0xbc [ 120.586412][ T9308] xlog_do_recover+0x128/0x5c8 [ 120.587548][ T9308] xlog_recover+0x388/0x4b4 [ 120.588547][ T9308] xfs_log_mount+0x208/0x39c [ 120.589620][ T9308] xfs_mountfs+0x9f8/0x1924 [ 120.590552][ T9308] xfs_fs_fill_super+0xea0/0x10b0 [ 120.591650][ T9308] get_tree_bdev+0x320/0x470 [ 120.592772][ T9308] xfs_fs_get_tree+0x28/0x38 [ 120.593845][ T9308] vfs_get_tree+0x90/0x28c [ 120.594849][ T9308] do_new_mount+0x278/0x900 [ 120.595962][ T9308] path_mount+0x590/0xe04 [ 120.596951][ T9308] __arm64_sys_mount+0x45c/0x5a8 [ 120.598329][ T9308] invoke_syscall+0x98/0x2b8 [ 120.599388][ T9308] el0_svc_common+0x130/0x23c [ 120.600659][ T9308] do_el0_svc+0x48/0x58 [ 120.601644][ T9308] el0_svc+0x54/0x168 [ 120.602589][ T9308] el0t_64_sync_handler+0x84/0xfc [ 120.603755][ T9308] el0t_64_sync+0x190/0x194 [ 120.635246][ T9308] XFS (loop4): log mount/recovery failed: error -117 [ 120.652377][ T9308] XFS (loop4): log mount failed [ 120.736818][ T6421] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 120.871757][ T9322] loop2: detected capacity change from 0 to 32768 [ 121.075093][ T9322] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=compression=zstd,norecovery,recovery_pass_last=check_dirents,nojournal_transaction_names,version_upgrade=none [ 121.079655][ T9348] vlan2: entered promiscuous mode [ 121.080842][ T9348] vlan2: entered allmulticast mode [ 121.085381][ T9348] hsr_slave_1: entered allmulticast mode [ 121.098114][ T9322] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 121.148628][ T9322] invalid bkey u64s 11 type alloc_v4 0:14:0 len 0 ver 0: [ 121.148647][ T9322] gen 0 oldest_gen 0 data_type journal [ 121.148656][ T9322] journal_seq 1 [ 121.148664][ T9322] need_discard 1 [ 121.148671][ T9322] need_inc_gen 1 [ 121.148679][ T9322] dirty_sectors 256 [ 121.148686][ T9322] stripe_sectors 0 [ 121.148694][ T9322] cached_sectors 0 [ 121.148701][ T9322] stripe 67108864 [ 121.148709][ T9322] stripe_redundancy 0 [ 121.148717][ T9322] io_time[READ] 1 [ 121.148724][ T9322] io_time[WRITE] 1 [ 121.148732][ T9322] fragmentation 0 [ 121.148739][ T9322] bp_start 8 [ 121.148747][ T9322] [ 121.148754][ T9322] invalid data type (got 2 should be 7): delete?, shutting down [ 121.224868][ T9322] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 7 [ 121.258774][ T9322] bcachefs (loop2): accounting_read... done [ 121.260721][ T9322] bcachefs (loop2): alloc_read... done [ 121.262062][ T9322] bcachefs (loop2): stripes_read... done [ 121.281950][ T9322] bcachefs (loop2): snapshots_read... done [ 121.284841][ T9322] bcachefs (loop2): going read-write [ 121.311031][ T9322] bcachefs (loop2): done starting filesystem [ 121.312982][ T6497] bcachefs (loop2): going read-only [ 121.314322][ T6497] bcachefs (loop2): finished waiting for writes to stop [ 121.359583][ T9370] binder: 9369:9370 tried to acquire reference to desc 0, got 1 instead [ 121.457007][ T6472] binder: send failed reply for transaction 10 to 9369:9370 [ 121.495917][ T2249] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.536529][ T6472] binder: undelivered TRANSACTION_COMPLETE [ 121.538047][ T6472] binder: undelivered TRANSACTION_ERROR: 29189 [ 121.564430][ T7950] bcachefs (loop2): shutting down [ 121.699155][ T2249] usb 1-1: Using ep0 maxpacket: 32 [ 121.705324][ T2249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.714125][ T2249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.716597][ T2249] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.718902][ T2249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.746419][ T2249] usb 1-1: config 0 descriptor?? [ 121.748747][ T2249] hub 1-1:0.0: USB hub found [ 121.801780][ T9402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.848363][ T9405] binder: 9404:9405 tried to acquire reference to desc 0, got 1 instead [ 121.851043][ T6470] binder: release 9404:9405 transaction 15 out, still active [ 121.854836][ T9402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.889970][ T6470] binder: undelivered TRANSACTION_COMPLETE [ 121.930975][ T6470] binder: send failed reply for transaction 15, target dead [ 121.957656][ T2249] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 122.163053][ T2249] usbhid 1-1:0.0: can't add hid device: -71 [ 122.164628][ T2249] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 122.217019][ T2249] usb 1-1: USB disconnect, device number 9 [ 122.437925][ T9430] binder: 9429:9430 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 122.441031][ T9430] binder: 9430 RLIMIT_NICE not set [ 122.444311][ T9430] binder: 9429:9430 got transaction to invalid handle, 1 [ 122.456082][ T9430] binder: 9430:9429 cannot find target node [ 122.457387][ T9430] binder: 9429:9430 transaction call to 0:0 failed 18/29201/-22, size 0-0 line 3144 [ 122.495958][ T2249] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.732432][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.776143][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.844120][ T9458] binder: 9457:9458 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 122.851339][ T9458] binder: 9458 RLIMIT_NICE not set [ 122.853017][ T9458] binder: 9457:9458 got transaction to invalid handle, 1 [ 122.854590][ T9458] binder: 9458:9457 cannot find target node [ 122.980554][ T9466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1061'. [ 123.245943][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.267319][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.599371][ T9499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.636213][ T9499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.654960][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 123.657500][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 124.656120][ T6421] Bluetooth: hci8: command tx timeout [ 124.705871][ T9525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.749008][ T9525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.136803][ T6421] Bluetooth: hci6: command tx timeout [ 125.328478][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.352295][ T9553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.378871][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.390359][ T9553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.657333][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.702586][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.945986][ T9562] binder: 9561:9562 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 125.946156][ T2342] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.948939][ T9562] binder: 9562 RLIMIT_NICE not set [ 125.950197][ T2342] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.422607][ T9565] binder: 9561:9565 tried to acquire reference to desc 0, got 1 instead [ 126.536271][ T9562] binder: 9562 RLIMIT_NICE not set [ 126.569073][ T6462] binder_debug: 2 callbacks suppressed [ 126.569091][ T6462] binder: release 9561:9565 transaction 26 out, still active [ 126.572171][ T6462] binder: undelivered TRANSACTION_COMPLETE [ 126.584030][ T6462] binder: release 9561:9562 transaction 26 in, still active [ 126.586088][ T6462] binder: send failed reply for transaction 26, target dead [ 127.218950][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.258710][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.841625][ T9609] binder: 9608:9609 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 127.844432][ T9609] binder: 9609 RLIMIT_NICE not set [ 127.883590][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.164054][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.166851][ T9612] binder: 9608:9612 tried to acquire reference to desc 0, got 1 instead [ 128.227127][ T9612] binder_alloc: 9608: binder_alloc_buf, no vma [ 128.276081][ T9612] binder: cannot allocate buffer: vma cleared, target dead or dying [ 128.330095][ T9612] binder: 9608:9612 transaction call to 9608:0 failed 31/29189/-3, size 0-0 line 3332 [ 128.716067][ T6472] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.968529][ T9631] smc: net device ip6gre0 applied user defined pnetid SYZ0 [ 129.006045][ T2249] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 129.112001][ T9639] loop3: detected capacity change from 0 to 2048 [ 129.154470][ T9639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.196667][ T2249] usb 1-1: Using ep0 maxpacket: 8 [ 129.199524][ T2249] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.203956][ T2249] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.206366][ T2249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.208763][ T2249] usb 1-1: Product: syz [ 129.209866][ T2249] usb 1-1: Manufacturer: syz [ 129.210994][ T2249] usb 1-1: SerialNumber: syz [ 129.239359][ T9639] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.256026][ T9639] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 129.261073][ T9639] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.261073][ T9639] [ 129.263419][ T9639] EXT4-fs (loop3): Total free blocks count 0 [ 129.264714][ T9639] EXT4-fs (loop3): Free/Dirty block details [ 129.268350][ T9639] EXT4-fs (loop3): free_blocks=2415919104 [ 129.271195][ T9639] EXT4-fs (loop3): dirty_blocks=32 [ 129.272607][ T9639] EXT4-fs (loop3): Block reservation details [ 129.273876][ T9639] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 129.334807][ T7951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.128025][ T9653] binder: 9652:9653 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 130.131273][ T9653] binder: 9653 RLIMIT_NICE not set [ 130.159422][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.182698][ T9660] binder: 9652:9660 tried to acquire reference to desc 0, got 1 instead [ 130.184923][ T9660] binder_alloc: 9652: binder_alloc_buf, no vma [ 130.193425][ T9660] binder: cannot allocate buffer: vma cleared, target dead or dying [ 130.193458][ T9660] binder: 9652:9660 transaction call to 9652:0 failed 36/29189/-3, size 0-0 line 3332 [ 130.196216][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.468462][ T2249] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 130.470395][ T2249] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 130.726008][ T9668] loop3: detected capacity change from 0 to 32768 [ 130.738062][ T9668] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1142 (9668) [ 130.780174][ T9668] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.785154][ T9668] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 130.790621][ T9668] BTRFS info (device loop3): using free-space-tree [ 130.908842][ T2249] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 131.006974][ T9693] loop1: detected capacity change from 0 to 128 [ 131.048516][ T10] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.050161][ T9693] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 131.104607][ T7951] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.115192][ T6462] usb 1-1: USB disconnect, device number 10 [ 131.117708][ T6462] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 131.169111][ T6417] sysv_free_block: flc_count > flc_size [ 131.171301][ T6417] sysv_free_block: flc_count > flc_size [ 131.173596][ T6417] sysv_free_block: flc_count > flc_size [ 131.176869][ T6417] sysv_free_block: flc_count > flc_size [ 131.181201][ T6417] sysv_free_block: flc_count > flc_size [ 131.187538][ T6417] sysv_free_block: flc_count > flc_size [ 131.192064][ T6417] sysv_free_block: flc_count > flc_size [ 131.195599][ T6417] sysv_free_block: flc_count > flc_size [ 131.201282][ T6417] sysv_free_block: flc_count > flc_size [ 131.208335][ T6417] sysv_free_block: flc_count > flc_size [ 131.230571][ T6417] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 131.310547][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.364740][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.747560][ T9711] loop3: detected capacity change from 0 to 32768 [ 131.941262][ T6426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.945240][ T6426] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.947696][ T9711] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 131.949712][ T9711] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 131.957172][ T6426] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.966775][ T6426] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.970988][ T6426] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 131.972778][ T6426] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.974837][ T9744] netlink: 'syz.1.1153': attribute type 3 has an invalid length. [ 131.984675][ T9744] netlink: 'syz.1.1153': attribute type 3 has an invalid length. [ 132.108777][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.121492][ T9711] bcachefs: bch2_fs_get_tree() error: EINVAL [ 132.140533][ T9749] binder: 9746:9749 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 132.143353][ T9749] binder: 9749 RLIMIT_NICE not set [ 132.173047][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.192552][ T9753] binder: 9746:9753 tried to acquire reference to desc 0, got 1 instead [ 132.194433][ T9753] binder_alloc: 9746: binder_alloc_buf, no vma [ 132.195949][ T9753] binder: cannot allocate buffer: vma cleared, target dead or dying [ 132.195978][ T9753] binder: 9746:9753 transaction call to 9746:0 failed 41/29189/-3, size 0-0 line 3332 [ 132.248854][ T9755] loop0: detected capacity change from 0 to 4096 [ 132.301452][ T9758] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.330104][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 132.576156][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.578312][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.581873][ T9732] bridge_slave_0: entered allmulticast mode [ 132.583655][ T9732] bridge_slave_0: entered promiscuous mode [ 132.596420][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.601031][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.602640][ T9732] bridge_slave_1: entered allmulticast mode [ 132.604499][ T9732] bridge_slave_1: entered promiscuous mode [ 132.637552][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.642151][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.695458][ T9732] team0: Port device team_slave_0 added [ 132.698329][ T9732] team0: Port device team_slave_1 added [ 132.711909][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.713384][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.718769][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.723715][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.725203][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.731239][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.798246][ T9732] hsr_slave_0: entered promiscuous mode [ 132.817030][ T9732] hsr_slave_1: entered promiscuous mode [ 133.016000][ T6462] binder: undelivered TRANSACTION_ERROR: 29189 [ 133.101040][ T9783] loop0: detected capacity change from 0 to 32768 [ 133.104822][ T9732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.200117][ T9783] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 133.203819][ T9783] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 133.286191][ T9732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.325165][ T9783] bcachefs: bch2_fs_get_tree() error: EINVAL [ 133.408622][ T9732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.424511][ T9804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1172'. [ 133.464859][ T9809] loop0: detected capacity change from 0 to 64 [ 133.538301][ T9732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.701314][ T9818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.755178][ T9818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.794186][ T9732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.808947][ T9732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.813526][ T9732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.817219][ T9732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.895998][ T9814] loop3: detected capacity change from 0 to 32768 [ 133.897931][ T9814] XFS: ikeep mount option is deprecated. [ 133.899076][ T9814] XFS: ikeep mount option is deprecated. [ 133.939125][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.944974][ T9814] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.963516][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.970525][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.971959][ T721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.980016][ T2093] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.981432][ T2093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.016159][ T6421] Bluetooth: hci0: command tx timeout [ 134.023504][ T9814] XFS (loop3): Ending clean mount [ 134.114674][ T7951] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.168836][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.202937][ T9732] veth0_vlan: entered promiscuous mode [ 134.235746][ T9732] veth1_vlan: entered promiscuous mode [ 134.257754][ T9732] veth0_macvtap: entered promiscuous mode [ 134.292171][ T9732] veth1_macvtap: entered promiscuous mode [ 134.320105][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.331757][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.338621][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.347151][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.356175][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.364477][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.369298][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.373952][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.376502][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.378958][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.381328][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.384027][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.387547][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.478222][ T9839] smc: net device ip6gre0 applied user defined pnetid SYZ0 [ 134.482095][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.494149][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.504108][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.506706][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.508912][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.511052][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.513091][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.515381][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.517902][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.519968][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.522170][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.524396][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.527594][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.531240][ T9732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.533136][ T9732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.534913][ T9732] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.536921][ T9732] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.638236][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.640010][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.670625][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.673021][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.673650][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1185'. [ 134.845026][ T9858] loop1: detected capacity change from 0 to 2048 [ 134.874979][ T9858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.919428][ T6417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.933326][ T9868] smc: net device ip6gre0 applied user defined pnetid SYZ0 [ 135.016307][ T9874] bridge0: port 3(syz_tun) entered blocking state [ 135.023839][ T9874] bridge0: port 3(syz_tun) entered disabled state [ 135.028736][ T9874] syz_tun: entered allmulticast mode [ 135.033858][ T9874] syz_tun: entered promiscuous mode [ 135.037549][ T9874] bridge0: port 3(syz_tun) entered blocking state [ 135.039097][ T9874] bridge0: port 3(syz_tun) entered forwarding state [ 135.157156][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 135.276445][ T9889] loop0: detected capacity change from 0 to 2048 [ 135.315638][ T9889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.469628][ T7948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.703768][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 136.095990][ T6421] Bluetooth: hci0: command tx timeout [ 136.252432][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 136.355169][ T9957] loop4: detected capacity change from 0 to 2048 [ 136.419506][ T9957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.495759][ T7940] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.534767][ T6421] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci8/hci8:0' [ 136.538181][ T6421] CPU: 1 UID: 0 PID: 6421 Comm: kworker/u9:2 Not tainted 6.11.0-rc7-syzkaller-g5f5673607153 #0 [ 136.540783][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 136.543097][ T6421] Workqueue: hci8 hci_rx_work [ 136.544163][ T6421] Call trace: [ 136.544802][ T6421] dump_backtrace+0x1b8/0x1e4 [ 136.545804][ T6421] show_stack+0x2c/0x3c [ 136.546863][ T6421] dump_stack_lvl+0xe4/0x150 [ 136.547892][ T6421] dump_stack+0x1c/0x28 [ 136.548765][ T6421] sysfs_create_dir_ns+0x278/0x318 [ 136.549999][ T6421] kobject_add_internal+0x598/0xb04 [ 136.551252][ T6421] kobject_add+0x14c/0x224 [ 136.552258][ T6421] device_add+0x3a0/0xa6c [ 136.553353][ T6421] hci_conn_add_sysfs+0xc4/0x1cc [ 136.554606][ T6421] le_conn_complete_evt+0x9a8/0xf0c [ 136.555788][ T6421] hci_le_conn_complete_evt+0x114/0x404 [ 136.557165][ T6421] hci_le_meta_evt+0x2a4/0x478 [ 136.558305][ T6421] hci_event_packet+0x890/0x106c [ 136.559586][ T6421] hci_rx_work+0x318/0xa80 [ 136.560637][ T6421] process_one_work+0x79c/0x15b8 [ 136.561721][ T6421] worker_thread+0x978/0xec4 [ 136.562891][ T6421] kthread+0x288/0x310 [ 136.563783][ T6421] ret_from_fork+0x10/0x20 [ 136.570676][ T6421] kobject: kobject_add_internal failed for hci8:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 136.573814][ T6421] Bluetooth: hci8: failed to register connection device [ 136.860370][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 137.358965][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 137.579142][ T9998] loop0: detected capacity change from 0 to 32768 [ 137.631872][ T9998] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1249 (9998) [ 137.684379][ T9998] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.705725][ T9998] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 137.710653][ T9998] BTRFS info (device loop0): using free-space-tree [ 137.925006][ T7948] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.176697][ T6426] Bluetooth: hci0: command tx timeout [ 138.493147][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 138.655945][ T6426] Bluetooth: hci8: command tx timeout [ 139.114059][T10080] loop0: detected capacity change from 0 to 32768 [ 139.122905][T10080] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1276 (10080) [ 139.135206][T10080] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.142536][T10080] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 139.144308][T10080] BTRFS info (device loop0): using free-space-tree [ 139.272344][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 139.490024][ T7948] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.939619][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 139.949614][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 140.256490][ T6426] Bluetooth: hci0: command tx timeout [ 140.334238][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 140.392999][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 140.479633][T10184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.550787][T10184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.861795][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'. [ 140.884293][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'. [ 141.482566][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 141.568993][T10240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.616560][T10240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.912951][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 141.979406][T10261] loop1: detected capacity change from 0 to 4096 [ 142.085753][T10268] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.186536][ T6462] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 142.376108][ T6462] usb 1-1: config 0 has an invalid interface number: 99 but max is 0 [ 142.377912][ T6462] usb 1-1: config 0 has no interface number 0 [ 142.385262][ T6462] usb 1-1: config 0 interface 99 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 142.405928][ T6462] usb 1-1: config 0 interface 99 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 142.411147][ T6462] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 142.413281][ T6462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.414975][ T6462] usb 1-1: Product: syz [ 142.428435][ T6462] usb 1-1: Manufacturer: syz [ 142.429688][ T6462] usb 1-1: SerialNumber: syz [ 142.437013][ T6462] usb 1-1: config 0 descriptor?? [ 142.448642][ T6462] usbtest 1-1:0.99: usb test device [ 142.449853][ T6462] usbtest 1-1:0.99: full-speed {control in/out iso-in} tests (+alt) [ 142.697658][ T6462] usb 1-1: USB disconnect, device number 11 [ 143.443598][T10298] netlink: 'syz.2.1364': attribute type 3 has an invalid length. [ 143.445629][T10298] netlink: 'syz.2.1364': attribute type 3 has an invalid length. [ 143.548836][T10292] loop3: detected capacity change from 0 to 32768 [ 143.550997][T10292] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1361 (10292) [ 143.565601][T10292] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.568691][T10292] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 143.570676][T10292] BTRFS info (device loop3): using free-space-tree [ 143.799595][ T7951] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.806217][ T6470] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 144.013448][ T6470] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.016384][ T6470] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.021602][ T6470] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.026508][ T6470] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 144.027966][T10334] __nla_validate_parse: 1 callbacks suppressed [ 144.027981][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 144.035354][ T6470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.046434][ T6470] usb 1-1: config 0 descriptor?? [ 144.519586][ T6470] usbhid 1-1:0.0: can't add hid device: -71 [ 144.521106][ T6470] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 144.533537][ T6470] usb 1-1: USB disconnect, device number 12 [ 144.835618][T10350] loop1: detected capacity change from 0 to 32768 [ 144.851017][T10350] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1380 (10350) [ 144.879984][T10350] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.882441][T10350] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 144.884423][T10350] BTRFS info (device loop1): using free-space-tree [ 145.001072][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 145.276584][ T6417] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.032287][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 146.062009][T10409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.126200][T10409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.542467][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1408'. [ 146.574673][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1408'. [ 146.672295][T10413] loop1: detected capacity change from 0 to 32768 [ 146.684982][T10413] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1399 (10413) [ 146.697715][T10413] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.700065][T10413] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 146.705021][T10413] BTRFS info (device loop1): using free-space-tree [ 146.844637][T10434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1409'. [ 147.364435][ T6417] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.893101][T10484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.897174][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 147.911430][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 147.947659][T10484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.065220][T10486] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1422'. [ 148.791799][T10510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1433'. [ 148.857642][T10513] netlink: 'syz.1.1434': attribute type 3 has an invalid length. [ 149.070116][T10527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.120760][T10527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.198214][ T6470] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 149.385911][ T6470] usb 1-1: Using ep0 maxpacket: 8 [ 149.390234][ T6470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.393790][ T6470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.398196][ T6470] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 149.401147][ T6470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.409029][ T6470] usb 1-1: config 0 descriptor?? [ 149.577154][T10535] loop3: detected capacity change from 0 to 512 [ 149.582594][T10535] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.601288][T10535] EXT4-fs error (device loop3): __ext4_fill_super:5435: inode #2: comm syz.3.1444: casefold flag without casefold feature [ 149.610831][T10535] EXT4-fs (loop3): get root inode failed [ 149.612173][T10535] EXT4-fs (loop3): mount failed [ 149.631930][T10539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1446'. [ 149.842122][ T6470] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 149.855984][ T6470] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 149.857406][ T6470] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 149.858826][ T6470] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 149.860391][ T6470] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 149.861820][ T6470] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 149.863178][ T6470] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 149.913576][ T6470] stadia 0003:18D1:9400.0002: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 149.920159][ T6470] stadia 0003:18D1:9400.0002: no inputs found [ 149.921336][ T6470] stadia 0003:18D1:9400.0002: force feedback init failed [ 150.317116][ T1757] usb 1-1: USB disconnect, device number 13 [ 150.562753][T10542] loop4: detected capacity change from 0 to 32768 [ 150.713662][T10542] (syz.4.1447,10542,0):ocfs2_read_blocks:240 ERROR: status = -12 [ 150.726109][T10542] [ 150.726661][T10542] ===================================== [ 150.727771][T10542] WARNING: bad unlock balance detected! [ 150.728898][T10542] 6.11.0-rc7-syzkaller-g5f5673607153 #0 Not tainted [ 150.730220][T10542] ------------------------------------- [ 150.731344][T10542] syz.4.1447/10542 is trying to release lock (&oi->ip_io_mutex) at: [ 150.732971][T10542] [] ocfs2_inode_cache_io_unlock+0x20/0x30 [ 150.734450][T10542] but there are no more locks to release! [ 150.735589][T10542] [ 150.735589][T10542] other info that might help us debug this: [ 150.737364][T10542] 1 lock held by syz.4.1447/10542: [ 150.738486][T10542] #0: ffff0000cbf140e0 (&type->s_umount_key#69/1){+.+.}-{3:3}, at: alloc_super+0x1b0/0x83c [ 150.740840][T10542] [ 150.740840][T10542] stack backtrace: [ 150.742099][T10542] CPU: 0 UID: 0 PID: 10542 Comm: syz.4.1447 Not tainted 6.11.0-rc7-syzkaller-g5f5673607153 #0 [ 150.744240][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 150.746353][T10542] Call trace: [ 150.747072][T10542] dump_backtrace+0x1b8/0x1e4 [ 150.748147][T10542] show_stack+0x2c/0x3c [ 150.749011][T10542] dump_stack_lvl+0xe4/0x150 [ 150.749993][T10542] dump_stack+0x1c/0x28 [ 150.750956][T10542] print_unlock_imbalance_bug+0x250/0x2a4 [ 150.752061][T10542] lock_release+0x4ec/0x9e8 [ 150.753055][T10542] __mutex_unlock_slowpath+0xe0/0x6b4 [ 150.754161][T10542] mutex_unlock+0x18/0x24 [ 150.755094][T10542] ocfs2_inode_cache_io_unlock+0x20/0x30 [ 150.756241][T10542] ocfs2_metadata_cache_io_unlock+0x6c/0x90 [ 150.757504][T10542] ocfs2_read_blocks+0x1164/0x1638 [ 150.758601][T10542] ocfs2_init_slot_info+0x904/0x1214 [ 150.759718][T10542] ocfs2_fill_super+0x2668/0x4740 [ 150.760897][T10542] mount_bdev+0x1d4/0x2a0 [ 150.761820][T10542] ocfs2_mount+0x44/0x58 [ 150.762760][T10542] legacy_get_tree+0xd4/0x16c [ 150.763789][T10542] vfs_get_tree+0x90/0x28c [ 150.764711][T10542] do_new_mount+0x278/0x900 [ 150.765820][T10542] path_mount+0x590/0xe04 [ 150.766778][T10542] __arm64_sys_mount+0x45c/0x5a8 [ 150.767793][T10542] invoke_syscall+0x98/0x2b8 [ 150.768729][T10542] el0_svc_common+0x130/0x23c [ 150.769682][T10542] do_el0_svc+0x48/0x58 [ 150.770520][T10542] el0_svc+0x54/0x168 [ 150.771384][T10542] el0t_64_sync_handler+0x84/0xfc [ 150.772510][T10542] el0t_64_sync+0x190/0x194 [ 150.790395][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.792234][T10542] (syz.4.1447,10542,1):ocfs2_map_slot_buffers:388 ERROR: status = -12 [ 150.794219][T10542] (syz.4.1447,10542,1):ocfs2_init_slot_info:426 ERROR: status = -12 [ 150.799813][T10542] (syz.4.1447,10542,1):ocfs2_initialize_super:2276 ERROR: status = -12 [ 150.801913][T10542] (syz.4.1447,10542,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 150.826028][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.566323][ T9367] Allocator stuck? Waited for 30 seconds [ 151.566338][ T9367] Allocator debug: [ 151.566345][ T9367] capacity1536 [ 151.566351][ T9367] reserved 31232 [ 151.566357][ T9367] hidden 0 [ 151.566363][ T9367] btree 0 [ 151.566369][ T9367] data 0 [ 151.566375][ T9367] cached 0 [ 151.566381][ T9367] reserved 0 [ 151.566387][ T9367] online_reserved 24 [ 151.566393][ T9367] nr_inodes 0 [ 151.566399][ T9367] [ 151.566405][ T9367] freelist_wait waiting [ 151.566411][ T9367] open buckets allocated1 [ 151.566417][ T9367] open buckets total 1024 [ 151.566423][ T9367] open_buckets_wait empty [ 151.566429][ T9367] open_buckets_btree 0 [ 151.566435][ T9367] open_buckets_user 0 [ 151.566441][ T9367] btree reserve cache 0 [ 151.566447][ T9367] [ 151.566452][ T9367] Dev 0: [ 151.566458][ T9367] buckets sectors fragmented [ 151.566465][ T9367] free 0 0 0 [ 151.566472][ T9367] sb 0 0 0 [ 151.566479][ T9367] journal 0 0 0 [ 151.566486][ T9367] btree 0 0 0 [ 151.566494][ T9367] user 0 0 0 [ 151.566501][ T9367] cached 0 0 0 [ 151.566508][ T9367] parity 0 0 0 [ 151.566515][ T9367] stripe 0 0 0 [ 151.566523][ T9367] need_gc_gens 0 0 0 [ 151.566530][ T9367] need_discard 0 0 0 [ 151.566537][ T9367] unstriped 0 0 0 [ 151.566544][ T9367] capacity 128 [ 151.566550][ T9367] [ 151.566556][ T9367] reserves: [ 151.566561][ T9367] stripe 60 [ 151.566567][ T9367] normal 58 [ 151.566573][ T9367] copygc 56 [ 151.566580][ T9367] btree 28 [ 151.566586][ T9367] btree_copygc 0 [ 151.566592][ T9367] reclaim 0 [ 151.566598][ T9367] interior_updates 0 [ 151.566604][ T9367] [ 151.566609][ T9367] open buckets 0 [ 151.566616][ T9367] buckets to invalidate 0 [ 151.566621][ T9367] [ 151.566627][ T9367] Copygc debug: [ 151.566632][ T9367] running: 1 [ 151.566638][ T9367] copygc_wait:0 [ 151.566644][ T9367] copygc_wait_at:0 [ 151.566650][ T9367] Currently waiting for:0 B [ 151.566656][ T9367] Currently waiting since:640 KiB [ 151.566662][ T9367] Currently calculated wait:0 B [ 151.566668][ T9367] [ 151.566674][ T9367] Journal debug: [ 151.566679][ T9367] flags: running,may_skip_flush,need_flush_write [ 151.566687][ T9367] dirty journal entries: 0/32768 [ 151.566693][ T9367] seq: 7 [ 151.566699][ T9367] seq_ondisk: 7 [ 151.566705][ T9367] last_seq: 8 [ 151.566711][ T9367] last_seq_ondisk: 8 [ 151.566717][ T9367] flushed_seq_ondisk: 7 [ 151.566723][ T9367] watermark: stripe [ 151.566730][ T9367] each entry reserved: 321 [ 151.566736][ T9367] nr flush writes: 0 [ 151.566742][ T9367] nr noflush writes: 0 [ 151.566748][ T9367] average write size: 0 B [ 151.566754][ T9367] nr direct reclaim: 0 [ 151.566760][ T9367] nr background reclaim: 0 [ 151.566766][ T9367] reclaim kicked: 0 [ 151.566772][ T9367] reclaim runs in: 0 ms [ 151.566778][ T9367] blocked: 0 [ 151.566784][ T9367] current entry sectors: 256 [ 151.566790][ T9367] current entry error: ok [ 151.566796][ T9367] current entry: error [ 151.566802][ T9367] unwritten entries: [ 151.566808][ T9367] last buf closed [ 151.566814][ T9367] space: [ 151.566819][ T9367] discarded 256:1792 [ 151.566825][ T9367] clean ondisk 256:1792 [ 151.566832][ T9367] clean 256:1792 [ 151.566838][ T9367] total 256:2048 [ 151.566844][ T9367] dev 0: [ 151.566849][ T9367] nr 8 [ 151.566856][ T9367] bucket size 256 [ 151.566862][ T9367] available 6:256 [ 151.566868][ T9367] discard_idx 0 [ 151.566874][ T9367] dirty_ondisk 0 (seq 0) [ 151.566880][ T9367] dirty_idx 0 (seq 0) [ 151.566896][ T9367] cur_idx 0 (seq 0) [ 151.566902][ T9367] [ 158.745959][ T6421] Bluetooth: hci2: command 0x0406 tx timeout