last executing test programs: 1m24.035326526s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x10000, &(0x7f0000000000)={[{@nolazytime}]}, 0x1, 0x84d, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1m23.516148252s ago: executing program 0 (id=6): syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$eJzs3c9rHGUfAPDvbJOmb9vXpODBimCgBwulG5vWUkGkogcpVop689Bud7ehZLdbspvShIpWFMGTSPHsj5M3/wFRBL15FDx7kkKRUi+CsDLb2bjt7jabNJtV9/OBCc8zM5tnvjszz/Mkz8NMAGNrNv2Ri9gfER8lEdPZ+iQiJlupiYiTd/e7c/taMV2SaDZf/y1p7ZPmo+MzqT1Z5rGI+O79iEO57nLrK6uLhUqlvJTl5xrVy3P1ldXDF6uFhfJC+dL88WePzp+Yf+bE/JbF+sd7r54/9dVLX9x498dfXnvr1JNJnIy92bbOOLbKbMxm38lk+hXe48WtLmzEklEfAJuS3po77t7lsT+mY0crBQD8l70dEU0AYMwk2n8AGDPt/wO0x/aGMQ72T3brhYjY1Sv+iWzMbldrHHT3neSekZEkIma2oPzZiLj65gdfp0sMaRwSoJd3rkfEuZnZ7vov6ZqzsFFPD7DP7H159R9sn2/T/s+JXv2f3Fr/J3r0f6Z63Lubsf79n7u5BcX0lfb/nuvZ/12btDazI8v9v9Xnm0wuXKyU07rtkYg4GJNTaf7IA8o49vHzP/Tb1tn/S5e0/HZfMDuOmxNT936mVGgUHibmTreuRzw+0Sv+ZO38J336v2cGLKPx/ROf99u2fvzD1fws4qme5//vGW1Jx/zEqeianzjXuh7m2ldFt/yH0/v6lT/q+NPzv/vB8c8knfM16xsv46dP/ny537bNXv87kzda6Z3ZuquFRmPpSMTO5JXu9R1TSNv59v5p/AcPPLj+63X9p38Tnhsw/sVPvzy/+fiHK42/tKHzv/HEgZ+/6R1PM5ttvO75P9ZKHczWDFL/DXqAD/PdAQAAAAAAAAAAAAAAAAAAAAAAAMCgchGxN5Jcfi2dy+Xzd9/h/WjszlVq9cahC7XlS6VovSt7JiZz7SddTnc8D/VI9jz8dn7+vvzRiNgXETem/tfK54u1SmnUwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZk+f9/+nfp0a9dEBAEOza9QHAABsO+0/AIwf7T8AjB/tPwCMH+0/AIwf7T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDdub06XRp/n77WjHNl66sLC/WrhwuleuL+epyMV+sLV3OL9RqC5Vyvlirrvf7KrXa5fnjsXx1rlGuN+bqK6tnq7XlS42zF6uFhfLZ8uS2RAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1NfWV0sVCrlJQkJCYm1xKhrJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/h78CAAD//6LRHug=") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) fallocate(r2, 0x10, 0x2, 0x7fff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 1m20.228223554s ago: executing program 0 (id=35): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x700, 0x12) 1m19.10242706s ago: executing program 0 (id=48): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r1, 0x2000000}, 0x38) 1m19.070926341s ago: executing program 32 (id=48): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r1, 0x2000000}, 0x38) 30.304731622s ago: executing program 4 (id=546): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000001280)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800d02b7030000000000008500000019000000bf090000000000005509010000000000950000000000000007090000080080ffbf91000000000000b7020000000000008500000085000000b70600000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x1}, 0x94) 30.106375031s ago: executing program 4 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) 30.014119676s ago: executing program 4 (id=548): close(0x4) 29.906255171s ago: executing program 4 (id=550): syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) fallocate(r2, 0x10, 0x2, 0x7fff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 29.025991265s ago: executing program 4 (id=563): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}}, 0x0) 28.571707648s ago: executing program 1 (id=566): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x3, 0x2) 28.479511132s ago: executing program 1 (id=567): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44800) 28.31233328s ago: executing program 1 (id=568): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r3, 0x0, 0x4000040) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000300)={r2, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x8001, 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x8000, 0x1, 0x0, 0x6, {{0x19, 0x4, 0x0, 0x9, 0x64, 0x64, 0x0, 0xe, 0x29, 0x0, @remote, @private=0xa010101, {[@end, @noop, @cipso={0x86, 0x2a, 0x2, [{0x5, 0xb, "b9881a6b726ffd171e"}, {0x0, 0x2}, {0x5, 0x6, "9351288c"}, {0x1, 0x11, "acd60b6585447b5f43d69170fbbdf5"}]}, @timestamp_prespec={0x44, 0x24, 0xdb, 0x3, 0x5, [{@loopback, 0x625}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@loopback, 0x5}, {@multicast2, 0x9}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x6a, 0x42, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x8, 0x7, 0x7, 0x6}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'tunl0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 28.270285492s ago: executing program 4 (id=569): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 28.018600395s ago: executing program 33 (id=569): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 27.524316939s ago: executing program 1 (id=573): syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) fallocate(r2, 0x10, 0x2, 0x7fff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 24.422094323s ago: executing program 1 (id=590): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socket$inet(0x2, 0x3, 0x2) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x4) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x2c}}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) 23.543236116s ago: executing program 1 (id=600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x20000001}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 23.172685304s ago: executing program 34 (id=600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x20000001}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 6.604865823s ago: executing program 6 (id=749): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{0x0}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="ee619d8a73c26bf3b585bfee56570c3b11c6b1ca1389", 0x16}], 0x1, 0x0, 0x0, 0x4044040}}], 0x1, 0x20000000) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="b00000000502010129bd7000fedbdf2505000008100074800c009a00ed00000000000000e1ee7f841dfe68fd320a5ef25164a1d73dd7179f41537015909b35ae5465e24e849146eaefdd83c4952fd8d8a71d7945a237d8ea030937df831512ccd16bbf59ef29be2293497f0ac62df1c5662b94bcf17789187000ec98c9795689bdf64bb50d0d114d3562539eab10ea401e8a73649f8a021d323d92d56227dfe689953bcd4a56aff3ec02d624cd23000087fd05cb94a05e9fb4e73bdc794257744e29fd42063a49748433144fdf810d23f92f65838f3110481c1bfcf02d"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0xc4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xf3c, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) recvmsg(r6, &(0x7f0000001bc0)={&(0x7f0000000740)=@x25={0x9, @remote}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/240, 0xf0}, {&(0x7f0000000800)=""/66, 0x42}, {&(0x7f00000006c0)=""/64, 0x40}, {&(0x7f0000001980)=""/215, 0xd7}], 0x4, &(0x7f0000001ac0)=""/200, 0xc8}, 0x40000040) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="270e28bd700000003c0004070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa1e0180c20000000800450000b0000000000011907800000000e000000100004e20009c907801000000040000000000143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000400649a3bfbc1f39cb307b3472eb9cdb0f67d544af6e8dafe09000000000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x4832}, &(0x7f0000000480)=0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe73}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001c00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3f}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd8, 0x0, 0x1, 0x9, 0x1, 0x400, 0x4, 0x3}}, {0xa, 0x2, [0xa29, 0x1ff, 0x2]}}]}]}, 0x58}}, 0x20) 6.346675626s ago: executing program 6 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd23, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x2400}, {}, {0x3, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) 5.86256046s ago: executing program 6 (id=758): chdir(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r3, 0x10, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x1}, 0x1c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x3, 0x12) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x50, r5, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44800) r8 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r8, &(0x7f0000000280), 0xff9d) sendfile(r0, r8, &(0x7f0000000100)=0x40, 0xe1b9) fcntl$addseals(r8, 0x409, 0x8) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000000)=0xfff) r10 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x7, r10, 0x0, 0x0, 'syz1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 4.619505461s ago: executing program 6 (id=771): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r1}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000286dd605f1060004a2f00fc000000000000000000000000000000ff"], 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x22020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="09000000010001", 0x7) connect$can_bcm(r2, 0x0, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010013bd7000fcdbdf25010000000500afef420000000800030006000000050005"], 0x2c}}, 0x24000806) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20008804}, 0xc2cc66ca1526115c) sendmsg$netlink(r2, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000c4}, 0x0) accept4$ax25(r0, 0x0, 0x0, 0x800) syz_emit_ethernet(0xab, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x75, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x0, "fe906d"}]}}}}}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x1) 3.928079965s ago: executing program 3 (id=780): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(0x4) 3.746311734s ago: executing program 3 (id=782): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x800}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000013c0)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000200a}, 0xc0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f0000000100), 0xfffffeda}], 0x2}, 0x4804) 3.701026316s ago: executing program 6 (id=783): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x500, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000002480)={{r2}, 0x0, 0x0, @unused, @subvolid=0xad}) ioctl$FITRIM(r1, 0xc4009420, &(0x7f0000000180)={0x5, 0x204}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073"], 0xd8}, 0x1, 0x0, 0x0, 0x10048010}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @inherit={0x68, 0x0}, @subvolid=0x3}) creat(&(0x7f0000000140)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) write$tun(r4, &(0x7f0000003480)={@val={0x0, 0x17}, @val={0x2, 0x1, 0x7f, 0x2, 0x4, 0xff00}, @ipv6=@dccp_packet={0x4, 0x6, "55fa96", 0x10ea, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, {[@dstopts={0x1, 0x5, '\x00', [@pad1, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @ra={0x5, 0x2, 0x9}]}, @srh={0x3c, 0x14, 0x4, 0xa, 0x8, 0x60, 0xfff7, [@local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private1, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x6, "7af290", 0x80, "4d331e"}, "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"}}}}, 0x1120) 3.353463754s ago: executing program 3 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1401000001010101000000000000000000000007500001800c00028005000100880000002c00018014000300fe8000000000000000000000000000bb14000400000000000000000000000000000000000c000280050001003a0000000600034000000000080003400000040008001a"], 0x114}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000a010000000000000001000005fdffffff000000000200"/76], 0x0, 0x4e, 0x0, 0x1}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x25) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 2.858846138s ago: executing program 3 (id=788): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffe, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) 1.857792518s ago: executing program 3 (id=796): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r1, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x1) 1.546030313s ago: executing program 5 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x8000) 1.391024461s ago: executing program 5 (id=799): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x5, 0x3, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x440c4) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={0x44, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x25, 0x2, 0x0, 0x0, @binary="70f08a55491f4faa95478a82e7a6c96eaeefbc8ef12c0ba4b7825e7d046e71a327"}]}, 0x44}}, 0x80) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) socket$nl_crypto(0x10, 0x3, 0x15) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000000540)) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 1.230121219s ago: executing program 5 (id=800): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8010) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x5) sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) unshare(0x62040200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)=0x1) 863.607216ms ago: executing program 7 (id=802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'erspan0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)=0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x80, 0x4e21, 0x5, 0xa, 0x0, 0x60, 0x0, 0x0, r4}, {0x5, 0x3, 0x5f6, 0x6, 0x3, 0x40, 0x2, 0x9}, {0x2, 0x9ce, 0x8}, 0x5, 0x0, 0x2, 0x0, 0x4, 0x3}, {{@in=@private=0xa010101, 0x4d5, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x3506, 0x3, 0x3, 0x7, 0x6, 0x5, 0x6}}, 0xe8) recvmsg$qrtr(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x10000}, 0x38, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="2f0f25bd7000fcdbdf2501000000c00002803c00018008000100070000000800010003000000080001000100000008000100020000000800010004000000080001000400000008000100060000001c0001800800010001000000080001000400000008000100030000004400018008000183008ac1e86946d7ffff22a118000000080001000200000008000100000000000800010001000000080001000200000008000100040000000800010012a7016b08000100070000001c000180080001000000000008000100030000000898e78fabcd95"], 0xd4}, 0x1, 0x0, 0x0, 0x4004081}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {0x4, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc884}, 0x2) 741.932993ms ago: executing program 5 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x30, 0x43, 0x1, 0xfffffffe, 0x25dfdbf8, {0x2, 0x7c}, [@nested={0x4, 0x149}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xd3, 0x0, 0x0, @ipv6=@loopback}, @generic]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc044}, 0xc000) 715.666924ms ago: executing program 2 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 617.405839ms ago: executing program 2 (id=806): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) 526.451583ms ago: executing program 7 (id=807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xe}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 505.262434ms ago: executing program 5 (id=808): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 469.189016ms ago: executing program 2 (id=809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000002400)="80", 0x1, 0x8044, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) 418.475389ms ago: executing program 7 (id=810): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0)={0x2, {{0xa, 0x4e20, 0x4, @empty, 0xfff}}, {{0xa, 0x4e21, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}}}, 0x108) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 309.892204ms ago: executing program 6 (id=811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 301.680235ms ago: executing program 7 (id=812): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xf9}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0xff72}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 282.953395ms ago: executing program 5 (id=813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@generic={0x8906, "c1cf0ee4bab33201d20bdab735089ba8ee278e968aaebf33851d7fd997ceb211fb7acda30e873aed"}}}}, 0x3a) 214.471129ms ago: executing program 2 (id=814): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004090) 167.219461ms ago: executing program 7 (id=815): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="050300000000000000000700000008000300", @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x24044080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x9}, {}, {}, {}, {}]}, @func, @volatile, @volatile={0x80000}]}}, 0x0, 0x8a, 0x0, 0x0, 0x7ff}, 0x28) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r7, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="6bc1351f65eaebf124f489680253287cb7d644643e15e42b97ad8c7082cb052de628cec2de949f185c80474306ffda3e891e4932eb91934bffd34020919cecf4160a5c86b0fd10d97200d1869fdc80adf5710994cd99ff152ecb35aa22719a5a7c9f437a543312", 0x67}], 0x1, &(0x7f0000000a40)=[{0x98, 0x10c, 0x6, "67652661c0e66f6cfc0246fbf015abf9c9c764fee115f23ac05e51dfeebe354454ce08764dd023893fb86f10986dc6415f84d9fd8ad8cecab65007e2ad74a672536d250724d46b687b9392105428488fa05a44ae1106b2512ac8b40fb81b00949066055fd11fde6265375d1d482e484c7bf58e1b25c1c38dc7db1e32623caa67dc3fbb3b48"}, {0xa0, 0x109, 0x8, "7872643c4dc54b6000817cc3500132571ba0938eeddf28dc7e634ce3a8c384549013583ceeccdbd38a40b54131079ee6a5f7b9800707c9fc4ed92d3f283fa6d580a79611bbf3cfbb685732037f7a7b4b3da8399e7e52810fcbe064884cfd2e572fc7e86e8f422a76f35021855be6e4997eab9896b1e16c0e28c48d5ace8b99b689f31a1080aeb1faa7e4f8"}, {0x68, 0x109, 0x7, "f0aaa1331bd109c77006f1c426bee246c5a3e1a7fd3e20cb6042c891c4a280c454f2c371ea5d9d1410f86c46c9e158512cdf1cca1b67137c55ea8d0f0203d341e4d5b601c3ccc73ac87308ce0a55970ccb"}, {0xd0, 0x103, 0x6, "6ea42cec5aa915aea064c998b1202e3f1980c9317f4d614bfd3be9faf1e8e169f27bbd968ae5e255f6c419933c8ec9f88251f53b0a12d13ef657d781f8f65ed0f3b694aa59cac2d8ba8ddbd010ff26fb41325149006b9768e83a9c5356d2a25295ab21f49fe9228eb2558c996f41b09ab027932ac272dce9121f09e0402242939544ab13063dce9bf9be564e6c83b5a677124ab0f33128b015279fcbe3ecd4cba21b87660f54efd28c43d1ec728d9ee65bea9d2b2f51c23140109c7ffe"}, {0x10, 0x14, 0x3}, {0x108, 0x1, 0x772f, "f77ed3abf04218389c4b19cd6262039200e357d66602b456d70f766014acb6f8feb85d9d13cce5ddefc90776ae7cea52747d1df27e2a763277df64f06bab4625c6a09387a5d15554b8c9c691cefa4e1931700a4dbf6ba89198347fbe78284b578f5e88e856550c29f034a42db4f5c9273faa4ce844afd01b8e4fa096ac0d324daa8ed881ee8c92031e5aebfb18b4485c5e1ac4fae76fb9eb4a22102f18dd9ba299cc3b44b58109eb4e5b4c5e02b1a3c576d2a7ee819ae0e21059dcaeff87550a695a9e319352b8bc2e77894267c70b8ac25473392d4259df0f5729bf475066eed9db8e94891b7eb0618d12a598e87d2d90a8"}], 0x388}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) socket$inet6(0xa, 0xac733bfd5b65bec1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000484) 121.507164ms ago: executing program 2 (id=816): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 117.790094ms ago: executing program 3 (id=817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'erspan0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)=0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x80, 0x4e21, 0x5, 0xa, 0x0, 0x60, 0x0, 0x0, r4}, {0x5, 0x3, 0x5f6, 0x6, 0x3, 0x40, 0x2, 0x9}, {0x2, 0x9ce, 0x8}, 0x5, 0x0, 0x2, 0x0, 0x4, 0x3}, {{@in=@private=0xa010101, 0x4d5, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x3506, 0x3, 0x3, 0x7, 0x6, 0x5, 0x6}}, 0xe8) recvmsg$qrtr(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x10000}, 0x38, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="2f0f25bd7000fcdbdf2501000000c00002803c00018008000100070000000800010003000000080001000100000008000100020000000800010004000000080001000400000008000100060000001c0001800800010001000000080001000400000008000100030000004400018008000183008ac1e86946d7ffff22a118000000080001000200000008000100000000000800010001000000080001000200000008000100040000000800010012a7016b08000100070000001c000180080001000000000008000100030000000898e78fabcd95"], 0xd4}, 0x1, 0x0, 0x0, 0x4004081}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {0x4, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc884}, 0x2) 21.241788ms ago: executing program 7 (id=818): chdir(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r3, 0x10, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x1}, 0x1c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x3, 0x12) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x50, r5, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44800) r8 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r8, &(0x7f0000000280), 0xff9d) sendfile(r0, r8, &(0x7f0000000100)=0x40, 0xe1b9) fcntl$addseals(r8, 0x409, 0x8) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000000)=0xfff) getpid() r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 0s ago: executing program 2 (id=819): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) kernel console output (not intermixed with test programs): T4190] device bridge_slave_1 entered promiscuous mode [ 50.906801][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.913780][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.940038][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.952704][ T4184] team0: Port device team_slave_1 added [ 50.975221][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.990272][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.012327][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.019326][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.045244][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.058633][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.082410][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.092059][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.099204][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.125225][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.137971][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.149057][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.160192][ T4193] team0: Port device team_slave_0 added [ 51.173062][ T4193] team0: Port device team_slave_1 added [ 51.227869][ T4191] team0: Port device team_slave_0 added [ 51.245490][ T4188] device hsr_slave_0 entered promiscuous mode [ 51.252709][ T4188] device hsr_slave_1 entered promiscuous mode [ 51.274332][ T4190] team0: Port device team_slave_0 added [ 51.283990][ T4184] device hsr_slave_0 entered promiscuous mode [ 51.293944][ T4184] device hsr_slave_1 entered promiscuous mode [ 51.301067][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.309226][ T4184] Cannot create hsr debugfs directory [ 51.315768][ T4191] team0: Port device team_slave_1 added [ 51.331676][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.339049][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.365575][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.378219][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.385176][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.412304][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.425439][ T4190] team0: Port device team_slave_1 added [ 51.484395][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.491855][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.520324][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.539550][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.547262][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.577588][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.595742][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.603176][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.629373][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.655869][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.663018][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.689919][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.743583][ T4193] device hsr_slave_0 entered promiscuous mode [ 51.751145][ T4193] device hsr_slave_1 entered promiscuous mode [ 51.758382][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.766465][ T4193] Cannot create hsr debugfs directory [ 51.832264][ T4191] device hsr_slave_0 entered promiscuous mode [ 51.839846][ T4191] device hsr_slave_1 entered promiscuous mode [ 51.847283][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.855314][ T4191] Cannot create hsr debugfs directory [ 51.876747][ T4173] Bluetooth: hci0: command 0x0409 tx timeout [ 51.885381][ T4190] device hsr_slave_0 entered promiscuous mode [ 51.892629][ T4190] device hsr_slave_1 entered promiscuous mode [ 51.899390][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.907245][ T4190] Cannot create hsr debugfs directory [ 51.956670][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 51.963181][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 51.966213][ T1345] Bluetooth: hci3: command 0x0409 tx timeout [ 52.046187][ T1345] Bluetooth: hci4: command 0x0409 tx timeout [ 52.109455][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.121026][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.134311][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.173926][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.226602][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.244499][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.254603][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.280249][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.308856][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.321751][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.332643][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.344605][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.419632][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.444052][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.472948][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.482667][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.523592][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.546893][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.554845][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.565092][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.579366][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.593476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.605556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.622682][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.651681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.662415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.672620][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.680293][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.693360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.726146][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.735091][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.745054][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.752176][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.761405][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.782283][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.791361][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.809088][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.825449][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.837532][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.848592][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.870546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.879462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.895093][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.911006][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.921274][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.929834][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.940735][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.953145][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.979751][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.989255][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.999057][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.009135][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.018110][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.025271][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.034200][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.044480][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.054254][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.062189][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.070788][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.084592][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.112996][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.121201][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.131035][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.145181][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.155434][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.165883][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.175072][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.185733][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.194869][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.204041][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.211270][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.219381][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.227742][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.235722][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.258711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.267736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.278157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.292816][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.302328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.320904][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.335307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.351887][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.359184][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.388008][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.411641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.420135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.432010][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.440628][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.450198][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.459333][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.467938][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.475614][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.485265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.494266][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.503055][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.511734][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.518962][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.529733][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.538430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.547079][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.554390][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.563175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.572308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.581345][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.588422][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.596288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.605552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.615767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.624398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.632840][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.651593][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.662557][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.692249][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.701210][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.714028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.723013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.732320][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.741195][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.750834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.760105][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.770263][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.779889][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.788954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.798398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.808190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.816895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.825789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.833601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.847782][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.861484][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.873173][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.900281][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.914223][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.928740][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.940044][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.960711][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 53.962096][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.984397][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.994206][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.002970][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.012191][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.021387][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.030956][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.040344][ T4224] Bluetooth: hci3: command 0x041b tx timeout [ 54.040965][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.046935][ T4224] Bluetooth: hci1: command 0x041b tx timeout [ 54.061529][ T4223] Bluetooth: hci2: command 0x041b tx timeout [ 54.069527][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.078105][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.116706][ T4224] Bluetooth: hci4: command 0x041b tx timeout [ 54.117078][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.139412][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.149757][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.159942][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.185031][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.194398][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.203346][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.222730][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.251369][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.311337][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.337271][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.377050][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.384702][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.412335][ T4188] device veth0_vlan entered promiscuous mode [ 54.426970][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.434159][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.458810][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.474020][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.483861][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.516419][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.524559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.540021][ T4188] device veth1_vlan entered promiscuous mode [ 54.562700][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.584227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.595761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.610205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.619850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.629084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.636753][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.654611][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.671417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.680976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.690163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.700774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.709650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.718023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.734357][ T4184] device veth0_vlan entered promiscuous mode [ 54.742754][ T4188] device veth0_macvtap entered promiscuous mode [ 54.751916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.760999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.772358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.788482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.797894][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.813491][ T4184] device veth1_vlan entered promiscuous mode [ 54.829269][ T4188] device veth1_macvtap entered promiscuous mode [ 54.848044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.857761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.865859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.875248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.884284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.893609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.902052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.937829][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.945513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.954217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.962397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.972024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.982491][ T4193] device veth0_vlan entered promiscuous mode [ 54.994709][ T4191] device veth0_vlan entered promiscuous mode [ 55.010446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.019600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.029644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.038755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.047500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.055386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.063499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.071293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.080865][ T4190] device veth0_vlan entered promiscuous mode [ 55.094627][ T4191] device veth1_vlan entered promiscuous mode [ 55.110914][ T4193] device veth1_vlan entered promiscuous mode [ 55.124457][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.133735][ T4184] device veth0_macvtap entered promiscuous mode [ 55.147815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.157242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.165199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.173931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.182666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.192321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.200995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.212772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.221187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.234706][ T4190] device veth1_vlan entered promiscuous mode [ 55.244499][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.255696][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.264747][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.273765][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.284418][ T4184] device veth1_macvtap entered promiscuous mode [ 55.318788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.328215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.337864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.345756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.354627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.379424][ T4193] device veth0_macvtap entered promiscuous mode [ 55.389823][ T4193] device veth1_macvtap entered promiscuous mode [ 55.406343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.423237][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.434337][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.449463][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.467190][ T4190] device veth0_macvtap entered promiscuous mode [ 55.481302][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.500448][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.510550][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.521238][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.545084][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.562152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.573290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.584969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.593746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.603346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.612109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.621094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.631561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.640679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.651193][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.662256][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.673229][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.684046][ T4190] device veth1_macvtap entered promiscuous mode [ 55.693691][ T4191] device veth0_macvtap entered promiscuous mode [ 55.704470][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.715640][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.726899][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.738003][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.749102][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.762772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.771644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.780425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.789488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.800443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.809085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.824701][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.833736][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.843157][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.852138][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.865674][ T4191] device veth1_macvtap entered promiscuous mode [ 55.894729][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.903870][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.907052][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.921732][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.930882][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.939949][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.954444][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.966703][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.977013][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.987993][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.998077][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.008808][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.021263][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.038339][ T4223] Bluetooth: hci0: command 0x040f tx timeout [ 56.046723][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.055509][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.063497][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.072449][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.110213][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.121474][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 56.128562][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.129008][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 56.144484][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.144969][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 56.155193][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.155211][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.155226][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.159077][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.196607][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 56.201638][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.216806][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.227018][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.237666][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.248156][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.258943][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.270021][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.281934][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.292906][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.302347][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.311224][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.332260][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.341201][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.354465][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.363827][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.372954][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.384208][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.393131][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.402292][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.411296][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.436804][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.455521][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.466437][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.477618][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.488929][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.499627][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.510120][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.521980][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.533384][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.559221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.573371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.592901][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.613420][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.622582][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.631589][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.677045][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.684898][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.711671][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.768615][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.819403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.838547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.880669][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.881622][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.896830][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.907376][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.915908][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.933547][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.937853][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.959594][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.973289][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.984323][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.992608][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.001715][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.062403][ T4231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.097105][ T4231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.102062][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.104806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.136861][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.184349][ T4264] loop0: detected capacity change from 0 to 2048 [ 57.187944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.232741][ T4260] loop1: detected capacity change from 0 to 32768 [ 57.312662][ T4264] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 57.327817][ T4264] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.347160][ T4260] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4260) [ 57.407041][ T4260] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 57.419780][ T4260] BTRFS info (device loop1): using free space tree [ 57.434170][ T4260] BTRFS info (device loop1): has skinny extents [ 57.606185][ T4272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.665440][ T4282] bond1: (slave ip6gretap1): making interface the new active one [ 57.739477][ T4282] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 57.760146][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 57.772373][ T4263] loop4: detected capacity change from 0 to 40427 [ 57.793128][ T4287] device bond1 entered promiscuous mode [ 57.801708][ T4287] device ip6gretap1 entered promiscuous mode [ 57.818253][ T4260] BTRFS info (device loop1): enabling ssd optimizations [ 57.844758][ T4297] device bond1 left promiscuous mode [ 57.886195][ T4263] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 57.898464][ T4263] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 57.963113][ T4297] device ip6gretap1 left promiscuous mode [ 57.992503][ T4263] F2FS-fs (loop4): Found nat_bits in checkpoint [ 58.012240][ T4303] loop0: detected capacity change from 0 to 2048 [ 58.043967][ T4297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.089961][ T4303] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 58.118570][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 58.196353][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 58.207333][ T4303] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,mblk_io_submit,i_version,,errors=continue. Quota mode: none. [ 58.258716][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 58.276353][ T4263] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 58.283971][ T4263] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 58.351884][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 58.397999][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 58.431932][ T26] audit: type=1800 audit(2000000001.270:2): pid=4303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 58.626165][ T4323] loop_set_status: loop0 () has still dirty pages (nrpages=4) [ 58.682974][ T26] audit: type=1800 audit(2000000001.520:3): pid=4325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 58.882441][ T4332] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14'. [ 58.941255][ T4263] ODEBUG: Out of memory. ODEBUG disabled [ 58.943301][ T4332] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14'. [ 59.039131][ T4336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14'. [ 59.129866][ T4339] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14'. [ 59.775399][ T4363] hsr0: VLAN not yet supported [ 59.897649][ T4343] loop1: detected capacity change from 0 to 32768 [ 59.987050][ T4343] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.11 (4343) [ 60.288298][ T4374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 60.702509][ T4343] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 60.733097][ T4343] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 60.772791][ T4343] BTRFS info (device loop1): use zstd compression, level 3 [ 60.801159][ T4343] BTRFS info (device loop1): using free space tree [ 60.816084][ T4343] BTRFS info (device loop1): has skinny extents [ 61.102983][ T4343] BTRFS info (device loop1): enabling ssd optimizations [ 61.224119][ T4184] EXT4-fs error (device loop0): __ext4_iget:4912: inode #17: block 1803188595: comm syz-executor: invalid block [ 61.265755][ T26] audit: type=1800 audit(2000000004.100:4): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 61.298614][ T4184] EXT4-fs error (device loop0): __ext4_iget:4912: inode #17: block 1803188595: comm syz-executor: invalid block [ 61.498045][ T4263] syz.4.5 (4263): drop_caches: 2 [ 62.181494][ T4239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.372412][ T4239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.405487][ T4451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 62.506605][ T4239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.606983][ T4239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.791703][ T4446] chnl_net:caif_netlink_parms(): no params data found [ 62.899114][ T4466] netlink: 'syz.3.58': attribute type 13 has an invalid length. [ 63.025808][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.064951][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.113750][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.398057][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.465651][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.510844][ T4446] device bridge_slave_0 entered promiscuous mode [ 63.575888][ T4512] Zero length message leads to an empty skb [ 63.588519][ T4511] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.613076][ T4505] netlink: 288 bytes leftover after parsing attributes in process `syz.3.68'. [ 63.633044][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.646220][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.664791][ T4446] device bridge_slave_1 entered promiscuous mode [ 63.788256][ T4446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.856316][ T4446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.030814][ T4446] team0: Port device team_slave_0 added [ 64.074964][ T4446] team0: Port device team_slave_1 added [ 64.160561][ T4446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.186120][ T4446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.268017][ T4446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.364948][ T4541] device macvlan1 entered promiscuous mode [ 64.397088][ T4446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.404255][ T4446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.418095][ T4514] loop4: detected capacity change from 0 to 32768 [ 64.440680][ T4446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.447051][ T4438] Bluetooth: hci0: command 0x0409 tx timeout [ 64.453993][ T4543] netlink: 132 bytes leftover after parsing attributes in process `syz.3.83'. [ 64.556443][ T4514] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.71 (4514) [ 64.612809][ T4514] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 64.631507][ T4446] device hsr_slave_0 entered promiscuous mode [ 64.662209][ T4514] BTRFS info (device loop4): using free space tree [ 64.674076][ T4446] device hsr_slave_1 entered promiscuous mode [ 64.685589][ T4514] BTRFS info (device loop4): has skinny extents [ 64.695767][ T4446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.708630][ T4446] Cannot create hsr debugfs directory [ 65.032460][ T4514] BTRFS info (device loop4): enabling ssd optimizations [ 65.523869][ T4446] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.624074][ T4446] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.816468][ T4239] device hsr_slave_0 left promiscuous mode [ 65.849842][ T4624] netlink: 'syz.2.99': attribute type 29 has an invalid length. [ 65.875028][ T4239] device hsr_slave_1 left promiscuous mode [ 65.887112][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.943207][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.978190][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.035381][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.059905][ T4239] device bridge_slave_1 left promiscuous mode [ 66.072598][ T4609] BTRFS info (device loop4): balance: start -d -m [ 66.078245][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.122656][ T4239] device bridge_slave_0 left promiscuous mode [ 66.162693][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.243759][ T4609] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 66.315747][ T4239] device veth1_macvtap left promiscuous mode [ 66.383139][ T4239] device veth0_macvtap left promiscuous mode [ 66.405386][ T4239] device veth1_vlan left promiscuous mode [ 66.422800][ T4239] device veth0_vlan left promiscuous mode [ 66.516204][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 66.532238][ T4609] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 66.805829][ T4609] BTRFS info (device loop4): found 13 extents, stage: move data extents [ 66.932822][ T4609] BTRFS info (device loop4): found 1 extents, stage: update data pointers [ 66.936731][ T4239] team0 (unregistering): Port device team_slave_1 removed [ 66.976670][ T4239] team0 (unregistering): Port device team_slave_0 removed [ 67.001878][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.022109][ T4609] BTRFS info (device loop4): balance: ended with status: 0 [ 67.038654][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.214760][ T4239] bond0 (unregistering): Released all slaves [ 67.353588][ T4446] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.368775][ T4624] netlink: 'syz.2.99': attribute type 29 has an invalid length. [ 67.394834][ T4446] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.644607][ T4446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.684678][ T4446] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.726041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.736557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.616118][ T4173] Bluetooth: hci0: command 0x040f tx timeout [ 68.678009][ T4660] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.686834][ T4660] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.278566][ T4660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.323493][ T4660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.731206][ T4660] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.741319][ T4660] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.752446][ T4660] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.763034][ T4660] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.015665][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.035610][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.087946][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.095202][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.150837][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.214856][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.254195][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.279948][ T4703] netlink: 128 bytes leftover after parsing attributes in process `syz.2.122'. [ 70.295173][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.302361][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.310834][ T4703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.122'. [ 70.333680][ T4704] virt_wifi0 speed is unknown, defaulting to 1000 [ 70.343114][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 70.361216][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.378269][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.416242][ T4704] virt_wifi0 speed is unknown, defaulting to 1000 [ 70.520170][ T4704] virt_wifi0 speed is unknown, defaulting to 1000 [ 70.546517][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.558491][ T4704] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 70.580088][ T4717] netlink: 224 bytes leftover after parsing attributes in process `syz.4.124'. [ 70.590227][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.596644][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.637077][ T4704] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 70.637241][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.678029][ T4678] Bluetooth: hci0: command 0x0419 tx timeout [ 70.706802][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.736961][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.753836][ T4446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.804554][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.862740][ T4704] virt_wifi0 speed is unknown, defaulting to 1000 [ 70.869905][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.888307][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.907252][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.946138][ T4704] virt_wifi0 speed is unknown, defaulting to 1000 [ 70.971743][ T4704] virt_wifi0 speed is unknown, defaulting to 1000 [ 71.005108][ T4704] virt_wifi0 speed is unknown, defaulting to 1000 [ 71.054027][ T4704] virt_wifi0 speed is unknown, defaulting to 1000 [ 71.330926][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.339032][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.401935][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.416570][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.450221][ T4446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.575707][ T4746] netlink: 84 bytes leftover after parsing attributes in process `syz.3.132'. [ 72.048207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.073021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.111543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.147190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.162999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.190687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.229227][ T4446] device veth0_vlan entered promiscuous mode [ 72.298137][ T4446] device veth1_vlan entered promiscuous mode [ 72.382892][ T4778] virt_wifi0 speed is unknown, defaulting to 1000 [ 72.401973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.413951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.442869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.499840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.552688][ T4446] device veth0_macvtap entered promiscuous mode [ 72.592411][ T4446] device veth1_macvtap entered promiscuous mode [ 72.801958][ T4446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.842621][ T4446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.887977][ T4446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.947442][ T4446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.968395][ T4446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.998065][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 73.018880][ T4446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.052325][ T4446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.092568][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.125746][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.176795][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.239666][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.279194][ T4446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.302101][ T4446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.318439][ T4446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.356489][ T4446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.385893][ T4446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.405138][ T4446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.418207][ T4446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.471549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.497268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.523669][ T4446] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.547057][ T4446] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.594137][ T4446] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.624196][ T4446] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.845105][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.867718][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.933703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.972719][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.005185][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.045696][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.662586][ T4869] netlink: 16 bytes leftover after parsing attributes in process `syz.5.163'. [ 74.965440][ T4889] device syzkaller0 entered promiscuous mode [ 75.315632][ T4914] syz.5.171 uses obsolete (PF_INET,SOCK_PACKET) [ 75.392347][ T4908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.171'. [ 75.424836][ T4908] netlink: 48 bytes leftover after parsing attributes in process `syz.5.171'. [ 75.739471][ T4912] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.747048][ T4912] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.146824][ T4912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.180115][ T4912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.441216][ T1110] cfg80211: failed to load regulatory.db [ 76.539750][ T4912] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.554455][ T4912] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.563973][ T4912] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.581618][ T4912] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.757790][ T4439] Bluetooth: hci0: command 0x0407 tx timeout [ 77.044379][ T4939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'. [ 77.068313][ T4938] netlink: 'syz.4.176': attribute type 1 has an invalid length. [ 77.125571][ T4938] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 77.137110][ T4938] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 77.196988][ T4944] bond1: (slave gretap1): making interface the new active one [ 77.207664][ T4944] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 77.234114][ T4944] device macvlan2 entered promiscuous mode [ 77.245617][ T4944] device bond1 entered promiscuous mode [ 77.254558][ T4944] device gretap1 entered promiscuous mode [ 77.262058][ T4944] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.282712][ T4944] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 77.326493][ T4944] device bond1 left promiscuous mode [ 77.331820][ T4944] device gretap1 left promiscuous mode [ 77.465688][ T4944] syz.4.176 (4944) used greatest stack depth: 19480 bytes left [ 77.651744][ T4974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 77.842544][ T4974] syz.2.184 (4974) used greatest stack depth: 18512 bytes left [ 77.936128][ T4986] IPVS: Scheduler module ip_vs_sip not found [ 78.510454][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 78.538584][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'. [ 78.552339][ T4971] netlink: 'syz.3.183': attribute type 3 has an invalid length. [ 78.576104][ T4971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 78.590419][ T5016] device bridge0 entered promiscuous mode [ 78.636210][ T5016] device macvtap1 entered promiscuous mode [ 78.920985][ T5031] device bond_slave_0 entered promiscuous mode [ 78.927973][ T5031] device bond_slave_1 entered promiscuous mode [ 78.935096][ T5031] device vlan2 entered promiscuous mode [ 78.941010][ T5031] device bond0 entered promiscuous mode [ 79.009715][ T5034] netlink: 76 bytes leftover after parsing attributes in process `syz.1.204'. [ 79.088148][ T5039] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.410320][ T5056] Illegal XDP return value 4294967274, expect packet loss! [ 79.649479][ T5068] netlink: 48 bytes leftover after parsing attributes in process `syz.1.217'. [ 79.680721][ T5068] device macvlan0 entered promiscuous mode [ 79.745565][ T5073] team0: No ports can be present during mode change [ 80.201332][ T5097] netlink: 'syz.2.227': attribute type 4 has an invalid length. [ 80.232323][ T5097] netlink: 'syz.2.227': attribute type 4 has an invalid length. [ 80.283017][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807963f000: rx timeout, send abort [ 80.379216][ T5106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.231'. [ 80.400197][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 80.784482][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807963e800: rx timeout, send abort [ 80.793011][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807963f000: abort rx timeout. Force session deactivation [ 81.195497][ T5155] netlink: 76 bytes leftover after parsing attributes in process `syz.2.243'. [ 81.273483][ T5161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'. [ 81.292898][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807963e800: abort rx timeout. Force session deactivation [ 81.340402][ T5155] device syzkaller0 entered promiscuous mode [ 81.511079][ T5173] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 81.540614][ T5170] virt_wifi0 speed is unknown, defaulting to 1000 [ 81.633410][ T5173] sctp: [Deprecated]: syz.3.247 (pid 5173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.633410][ T5173] Use struct sctp_sack_info instead [ 81.951595][ T5192] ipt_CLUSTERIP: Please specify destination IP [ 82.052616][ T5199] netlink: 3 bytes leftover after parsing attributes in process `syz.3.256'. [ 82.374417][ T5213] loop3: detected capacity change from 0 to 512 [ 82.461426][ T5213] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.474955][ T5213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.679498][ T5213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 82.687949][ T5213] System zones: 1-12 [ 82.785258][ T5213] EXT4-fs (loop3): 1 truncate cleaned up [ 82.791173][ T5213] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug,block_validity,errors=remount-ro,debug,. Quota mode: none. [ 83.616477][ T5224] loop2: detected capacity change from 0 to 512 [ 83.696399][ T5224] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.823721][ T5224] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 83.832124][ T5224] System zones: 1-12 [ 83.843445][ T5224] EXT4-fs (loop2): 1 truncate cleaned up [ 83.849192][ T5224] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug,block_validity,errors=remount-ro,debug,. Quota mode: none. [ 84.263770][ T5233] netlink: 192 bytes leftover after parsing attributes in process `syz.1.265'. [ 84.484009][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 84.620206][ T5249] netlink: 'syz.2.269': attribute type 15 has an invalid length. [ 84.728619][ T5251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.271'. [ 84.762430][ T5251] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.769927][ T5251] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.937453][ T5256] Cannot find map_set index 135 as target [ 86.402068][ T5329] virt_wifi0 speed is unknown, defaulting to 1000 [ 87.186837][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 87.286411][ T5377] loop1: detected capacity change from 0 to 256 [ 87.327183][ T5377] exfat: Deprecated parameter 'namecase' [ 87.332975][ T5377] exfat: Deprecated parameter 'namecase' [ 87.371311][ T5381] netlink: 'syz.3.310': attribute type 10 has an invalid length. [ 87.419355][ T5377] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) [ 87.437775][ T5381] team0: Port device dummy0 added [ 87.767591][ T5395] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.900965][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 88.151595][ T5426] netlink: 'syz.2.327': attribute type 16 has an invalid length. [ 88.178165][ T5426] netlink: 'syz.2.327': attribute type 17 has an invalid length. [ 88.202323][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 88.221438][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 88.243726][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 88.278220][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 88.312511][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 88.387486][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 88.429780][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 88.472717][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 88.513107][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 88.545581][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 88.565816][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 88.589146][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.614752][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.632342][ T5426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.645718][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 88.690643][ T5426] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.699952][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 88.710340][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 88.719314][ T5426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.744015][ T5434] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.751397][ T5434] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.943763][ T5473] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.336'. [ 89.158808][ T5483] device wg1 entered promiscuous mode [ 89.464379][ T5501] netlink: 'syz.3.349': attribute type 49 has an invalid length. [ 89.674059][ T5514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.355'. [ 90.019151][ T5488] loop5: detected capacity change from 0 to 32768 [ 90.196048][ T4678] Bluetooth: hci2: command 0x0401 tx timeout [ 90.278617][ T5543] device bond_slave_0 entered promiscuous mode [ 90.284868][ T5543] device bond_slave_1 entered promiscuous mode [ 90.308480][ T5543] device vlan2 entered promiscuous mode [ 90.314327][ T5543] device bond0 entered promiscuous mode [ 90.600859][ T5556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.367'. [ 90.986737][ T5570] virt_wifi0 speed is unknown, defaulting to 1000 [ 91.188154][ T5581] tipc: Started in network mode [ 91.193169][ T5581] tipc: Node identity f6f916483b44, cluster identity 4711 [ 91.258143][ T5581] tipc: Enabled bearer , priority 0 [ 91.280291][ T5583] device syzkaller0 entered promiscuous mode [ 91.350081][ T5581] tipc: Resetting bearer [ 91.403339][ T5579] tipc: Resetting bearer [ 91.439650][ T5579] tipc: Disabling bearer [ 91.505429][ T5592] netlink: 132 bytes leftover after parsing attributes in process `syz.3.381'. [ 91.531498][ T5591] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.381'. [ 91.553814][ T5591] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 92.112724][ T5615] device syzkaller0 entered promiscuous mode [ 92.401865][ T5628] device syzkaller1 entered promiscuous mode [ 92.793243][ T5649] unsupported nlmsg_type 40 [ 92.939832][ T5658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.022197][ T5663] bond2: (slave geneve2): making interface the new active one [ 93.057096][ T5663] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 93.073516][ T5669] bridge0: port 3(syz_tun) entered blocking state [ 93.087481][ T5669] bridge0: port 3(syz_tun) entered disabled state [ 93.097272][ T5669] device syz_tun entered promiscuous mode [ 93.137218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 93.190773][ T5676] loop5: detected capacity change from 0 to 128 [ 93.212305][ T5672] device syzkaller0 entered promiscuous mode [ 93.262757][ T5658] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 93.282483][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 93.435760][ T5679] attempt to access beyond end of device [ 93.435760][ T5679] loop5: rw=2049, want=153, limit=128 [ 93.528200][ T5682] bridge0: port 3(syz_tun) entered blocking state [ 93.535215][ T5682] bridge0: port 3(syz_tun) entered disabled state [ 93.557415][ T5676] attempt to access beyond end of device [ 93.557415][ T5676] loop5: rw=524288, want=153, limit=128 [ 93.598756][ T5676] attempt to access beyond end of device [ 93.598756][ T5676] loop5: rw=0, want=153, limit=128 [ 93.627713][ T5682] device syz_tun entered promiscuous mode [ 93.634774][ T5682] bridge0: port 3(syz_tun) entered blocking state [ 93.641792][ T5682] bridge0: port 3(syz_tun) entered forwarding state [ 94.283800][ T5685] loop3: detected capacity change from 0 to 32768 [ 94.322568][ T5685] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.410 (5685) [ 94.384416][ T5685] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 94.408729][ T5685] BTRFS info (device loop3): force clearing of disk cache [ 94.429867][ T5685] BTRFS info (device loop3): metadata ratio 0 [ 94.444003][ T5685] BTRFS info (device loop3): enabling ssd optimizations [ 94.465676][ T5685] BTRFS info (device loop3): using spread ssd allocation scheme [ 94.481662][ T5685] BTRFS info (device loop3): using free space tree [ 94.503985][ T5685] BTRFS info (device loop3): has skinny extents [ 94.826307][ T5685] BTRFS info (device loop3): clearing free space tree [ 94.843440][ T5685] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.895374][ T5685] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.971857][ T5746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.417'. [ 95.022673][ T5685] BTRFS info (device loop3): creating free space tree [ 95.037770][ T5685] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.086009][ T5685] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.173090][ T5754] bridge0: port 3(syz_tun) entered blocking state [ 95.206279][ T5754] bridge0: port 3(syz_tun) entered disabled state [ 95.249134][ T5754] device syz_tun entered promiscuous mode [ 95.255506][ T5754] bridge0: port 3(syz_tun) entered blocking state [ 95.262421][ T5754] bridge0: port 3(syz_tun) entered forwarding state [ 95.366106][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.419604][ T5761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.571745][ T5764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.685711][ T5764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.768369][ T5764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.803553][ T5764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.847791][ T5764] bond1: (slave geneve2): making interface the new active one [ 95.892340][ T5764] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 95.912473][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 95.928298][ T9] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 96.143953][ T5785] netlink: 'syz.5.424': attribute type 1 has an invalid length. [ 96.282300][ T5785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.380054][ T5785] sctp: [Deprecated]: syz.5.424 (pid 5785) Use of int in maxseg socket option. [ 96.380054][ T5785] Use struct sctp_assoc_value instead [ 96.574029][ T5785] bond2: (slave bridge1): making interface the new active one [ 96.582733][ T5785] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 96.593339][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 96.725697][ T5806] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 97.056056][ T5827] bond1: option mode: unable to set because the bond device has slaves [ 97.064557][ T5829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.434'. [ 97.119717][ T5827] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 97.396184][ T4678] Bluetooth: hci0: command 0x0405 tx timeout [ 97.494940][ T5844] virt_wifi0 speed is unknown, defaulting to 1000 [ 98.670648][ T5884] loop5: detected capacity change from 0 to 32768 [ 98.704485][ T5884] ======================================================= [ 98.704485][ T5884] WARNING: The mand mount option has been deprecated and [ 98.704485][ T5884] and is ignored by this kernel. Remove the mand [ 98.704485][ T5884] option from the mount to silence this warning. [ 98.704485][ T5884] ======================================================= [ 98.892334][ T5884] JBD2: Ignoring recovery information on journal [ 99.029804][ T5908] rdma_rxe: rxe_register_device failed with error -23 [ 99.079034][ T5908] rdma_rxe: failed to add syz_tun [ 99.092344][ T5884] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 99.124551][ T5646] Set syz1 is full, maxelem 65536 reached [ 99.502071][ T5900] loop2: detected capacity change from 0 to 32768 [ 99.561060][ T26] audit: type=1804 audit(2000000042.400:5): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.451" name="/newroot/49/file1/bus" dev="loop5" ino=17058 res=1 errno=0 [ 99.717073][ T5900] JBD2: Ignoring recovery information on journal [ 99.915883][ T5900] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 100.164085][ T5920] loop1: detected capacity change from 0 to 32768 [ 100.232444][ T26] audit: type=1326 audit(2000000043.070:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.4.457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae76cbe799 code=0x0 [ 100.255221][ T5920] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.459 (5920) [ 100.317530][ T5920] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 100.349708][ T5920] BTRFS info (device loop1): allowing degraded mounts [ 100.369498][ T5920] BTRFS info (device loop1): unrecognized rescue option 'ignoremetacsums' [ 100.387381][ T5920] BTRFS error (device loop1): unrecognized rescue value ignoremetacsums [ 100.441190][ T5920] BTRFS error (device loop1): open_ctree failed: -22 [ 100.557709][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 100.864666][ T5917] loop3: detected capacity change from 0 to 32768 [ 100.964507][ T5917] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 101.026019][ T5917] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 101.110153][ T4446] ocfs2: Unmounting device (7,5) on (node local) [ 101.130188][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.131699][ T5917] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 101.181859][ T5938] bond0: (slave rose0): Enslaving as an active interface with an up link [ 101.207838][ T4439] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 101.211285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 101.215124][ T4439] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 101.262799][ T4439] attempt to access beyond end of device [ 101.262799][ T4439] loop3: rw=0, want=137438956088, limit=32768 [ 101.486163][ T4439] gfs2: fsid=syz:syz.0: jid=0: Failed [ 101.519072][ T5917] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 101.642723][ T5936] loop4: detected capacity change from 0 to 32768 [ 101.728790][ T5920] loop1: detected capacity change from 0 to 32768 [ 101.741388][ T5936] JBD2: Ignoring recovery information on journal [ 101.776509][ T5955] device syzkaller0 entered promiscuous mode [ 101.855283][ T5920] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.459 (5920) [ 102.024335][ T5936] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 102.033810][ T5920] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 102.056179][ T5920] BTRFS info (device loop1): unrecognized rescue option 'ignoremetacsums' [ 102.105459][ T5920] BTRFS error (device loop1): unrecognized rescue value ignoremetacsums [ 102.150463][ T5920] BTRFS error (device loop1): open_ctree failed: -22 [ 102.243744][ T26] audit: type=1800 audit(2000000045.080:7): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.461" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 102.688776][ T5983] virt_wifi0 speed is unknown, defaulting to 1000 [ 102.804510][ T5989] rdma_rxe: rxe_register_device failed with error -23 [ 102.847056][ T5989] rdma_rxe: failed to add syz_tun [ 103.600941][ T6018] device syzkaller1 entered promiscuous mode [ 103.900218][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 103.932366][ T4185] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 103.979016][ T26] audit: type=1326 audit(2000000046.820:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.3.472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f274936a799 code=0x0 [ 104.597241][ T6029] loop5: detected capacity change from 0 to 32768 [ 104.622253][ T6061] virt_wifi0 speed is unknown, defaulting to 1000 [ 104.691424][ T6029] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 104.705789][ T6029] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 104.746336][ T6029] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 104.784817][ T4223] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 104.796201][ T4439] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.803876][ T4223] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 104.854766][ T4223] attempt to access beyond end of device [ 104.854766][ T4223] loop5: rw=0, want=137438956088, limit=32768 [ 104.920102][ T4223] gfs2: fsid=syz:syz.0: jid=0: Failed [ 104.941719][ T6029] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 105.046022][ T4439] usb 4-1: Using ep0 maxpacket: 16 [ 105.196881][ T4439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 105.353225][ T26] audit: type=1326 audit(2000000048.190:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.4.495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae76cbe799 code=0x0 [ 105.386231][ T4439] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.399336][ T4439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.415986][ T4439] usb 4-1: Product: syz [ 105.426079][ T4439] usb 4-1: Manufacturer: syz [ 105.441086][ T4439] usb 4-1: SerialNumber: syz [ 105.457537][ T4439] usb 4-1: config 0 descriptor?? [ 105.515158][ T4439] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 105.546205][ T4439] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 105.612153][ T6075] loop5: detected capacity change from 0 to 32768 [ 105.728895][ T6075] JBD2: Ignoring recovery information on journal [ 105.832633][ T6075] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 105.856131][ T4439] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 105.951299][ T6058] loop3: detected capacity change from 0 to 64 [ 106.006265][ T4439] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 106.015026][ T4439] em28xx 4-1:0.0: board has no eeprom [ 106.021865][ T26] audit: type=1800 audit(2000000048.860:10): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.492" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 106.028741][ T6058] hfs: unable to parse mount options [ 106.186118][ T4439] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 106.211012][ T4439] em28xx 4-1:0.0: dvb set to bulk mode. [ 106.297956][ T6084] rdma_rxe: rxe_register_device failed with error -23 [ 106.306524][ T6084] rdma_rxe: failed to add syz_tun [ 106.316317][ T6058] em28xx 4-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 106.337505][ T4439] usb 4-1: USB disconnect, device number 2 [ 106.365493][ T4439] em28xx 4-1:0.0: Disconnecting em28xx [ 106.388536][ T4678] em28xx 4-1:0.0: Binding DVB extension [ 106.474119][ T4678] em28xx 4-1:0.0: Registering input extension [ 106.495299][ T4439] em28xx 4-1:0.0: Closing input extension [ 106.576143][ T4439] em28xx 4-1:0.0: Freeing device [ 107.194736][ T6096] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.218014][ T6094] device syzkaller0 entered promiscuous mode [ 107.360267][ T6048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.522589][ T6101] smc: net device wlan0 applied user defined pnetid SYZ0 [ 107.677911][ T26] audit: type=1326 audit(2000000050.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.2.507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16e3736799 code=0x0 [ 108.636748][ T6136] netlink: 'syz.4.519': attribute type 3 has an invalid length. [ 108.755499][ T6117] loop3: detected capacity change from 0 to 32768 [ 108.775799][ T6117] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.510 (6117) [ 108.848287][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 108.879196][ T6117] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 108.918285][ T6117] BTRFS info (device loop3): using free space tree [ 108.924822][ T6117] BTRFS info (device loop3): has skinny extents [ 108.976338][ T6139] bridge0: port 3(syz_tun) entered disabled state [ 109.021428][ T6139] device syz_tun left promiscuous mode [ 109.069553][ T6139] bridge0: port 3(syz_tun) entered disabled state [ 109.226469][ T6117] BTRFS info (device loop3): enabling ssd optimizations [ 110.649467][ T6209] virt_wifi0 speed is unknown, defaulting to 1000 [ 110.668498][ T4446] ocfs2: Unmounting device (7,5) on (node local) [ 110.842599][ T6191] loop2: detected capacity change from 0 to 32768 [ 110.858294][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 110.889683][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 110.930396][ T6191] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.536 (6191) [ 110.995566][ T6216] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.005418][ T6216] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.014200][ T6216] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.023005][ T6216] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.065844][ T6191] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 111.087718][ T6191] BTRFS info (device loop2): using free space tree [ 111.094455][ T6191] BTRFS info (device loop2): has skinny extents [ 111.145634][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 111.166373][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 111.336321][ T6236] loop4: detected capacity change from 0 to 2048 [ 111.410613][ T6236] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 111.491715][ T6257] sctp: [Deprecated]: syz.3.554 (pid 6257) Use of int in max_burst socket option deprecated. [ 111.491715][ T6257] Use struct sctp_assoc_value instead [ 111.514173][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.554'. [ 111.547353][ T6236] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,mblk_io_submit,i_version,,errors=continue. Quota mode: none. [ 111.594554][ T6191] BTRFS info (device loop2): enabling ssd optimizations [ 111.644927][ T6266] rdma_rxe: rxe_register_device failed with error -23 [ 111.654684][ T26] audit: type=1800 audit(2000000054.490:12): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.550" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 111.675446][ T6266] rdma_rxe: failed to add syz_tun [ 111.806232][ T6272] loop_set_status: loop4 () has still dirty pages (nrpages=4) [ 111.881924][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 111.910471][ T26] audit: type=1800 audit(2000000054.750:13): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.550" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 112.148141][ T4193] EXT4-fs error (device loop4): __ext4_iget:4912: inode #17: block 1803188595: comm syz-executor: invalid block [ 112.202136][ T4193] EXT4-fs error (device loop4): __ext4_iget:4912: inode #17: block 1803188595: comm syz-executor: invalid block [ 112.229386][ T6285] tipc: Enabled bearer , priority 10 [ 112.596066][ T26] audit: type=1326 audit(2000000055.430:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.3.557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f274936a799 code=0x0 [ 112.671274][ T6278] loop5: detected capacity change from 0 to 32768 [ 112.762771][ T6278] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.560 (6278) [ 112.913668][ T6278] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 112.976616][ T6278] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.008547][ T6278] BTRFS info (device loop5): use zstd compression, level 3 [ 113.038251][ T6278] BTRFS info (device loop5): using free space tree [ 113.084965][ T6278] BTRFS info (device loop5): has skinny extents [ 113.348507][ T1110] tipc: Node number set to 3451721288 [ 113.355553][ T6278] BTRFS info (device loop5): enabling ssd optimizations [ 113.408352][ T26] audit: type=1800 audit(2000000056.250:15): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.560" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 113.531317][ T6327] virt_wifi0 speed is unknown, defaulting to 1000 [ 113.618946][ T6336] IPv6: addrconf: prefix option has invalid lifetime [ 113.644303][ T6334] loop1: detected capacity change from 0 to 2048 [ 113.736326][ T6334] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 114.015226][ T6334] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,mblk_io_submit,i_version,,errors=continue. Quota mode: none. [ 114.154442][ T26] audit: type=1800 audit(2000000056.990:16): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.573" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 114.306088][ T6356] loop_set_status: loop1 () has still dirty pages (nrpages=4) [ 114.333155][ T26] audit: type=1800 audit(2000000057.170:17): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.573" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 114.467597][ T6327] chnl_net:caif_netlink_parms(): no params data found [ 114.652887][ T6365] rdma_rxe: rxe_register_device failed with error -23 [ 114.706108][ T6365] rdma_rxe: failed to add syz_tun [ 114.712287][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.754173][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.805390][ T6327] device bridge_slave_0 entered promiscuous mode [ 114.815057][ T6353] loop5: detected capacity change from 0 to 32768 [ 114.852524][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.895069][ T6353] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.572 (6353) [ 114.908289][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.917845][ T6327] device bridge_slave_1 entered promiscuous mode [ 114.942557][ T6353] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 114.961965][ T6353] BTRFS info (device loop5): using free space tree [ 115.008252][ T6327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.017414][ T6353] BTRFS info (device loop5): has skinny extents [ 115.049117][ T6327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.207325][ T6327] team0: Port device team_slave_0 added [ 115.318102][ T6327] team0: Port device team_slave_1 added [ 115.326250][ T6353] BTRFS info (device loop5): enabling ssd optimizations [ 115.476719][ T4435] Bluetooth: hci4: command 0x0409 tx timeout [ 115.487159][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.494375][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.536976][ T6327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.595118][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.611628][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.709172][ T6327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.061621][ T26] audit: type=1326 audit(2000000058.900:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16e3736799 code=0x0 [ 116.168859][ T6327] device hsr_slave_0 entered promiscuous mode [ 116.209315][ T6327] device hsr_slave_1 entered promiscuous mode [ 116.233907][ T6327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.259813][ T6327] Cannot create hsr debugfs directory [ 116.359879][ T4239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.501388][ T4239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.620149][ T4239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.704543][ T4239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.982708][ T6428] loop2: detected capacity change from 0 to 32768 [ 117.011935][ T4188] EXT4-fs error (device loop1): __ext4_iget:4912: inode #17: block 1803188595: comm syz-executor: invalid block [ 117.031566][ T4188] EXT4-fs error (device loop1): __ext4_iget:4912: inode #17: block 1803188595: comm syz-executor: invalid block [ 117.048566][ T6428] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.587 (6428) [ 117.114168][ T6428] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 117.125881][ T6428] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 117.135420][ T6428] BTRFS info (device loop2): use zstd compression, level 3 [ 117.170492][ T6428] BTRFS info (device loop2): using free space tree [ 117.189164][ T6428] BTRFS info (device loop2): has skinny extents [ 117.277324][ T6327] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.314174][ T6327] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.376891][ T6327] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.423519][ T4239] bond2: (slave ip6gretap1): Releasing active interface [ 117.434605][ T4239] device geneve2 entered promiscuous mode [ 117.442977][ T6461] rdma_rxe: rxe_register_device failed with error -23 [ 117.450222][ T6461] rdma_rxe: failed to add syz_tun [ 117.465538][ T6327] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.584027][ T6428] BTRFS info (device loop2): enabling ssd optimizations [ 117.611231][ T1110] Bluetooth: hci4: command 0x041b tx timeout [ 117.621701][ T6327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.704897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.726812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.756646][ T26] audit: type=1800 audit(2000000060.600:19): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.587" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 117.798634][ T6327] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.834336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.875402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.918924][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.926082][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.956762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.994611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.053364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.107748][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.115420][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.324927][ T26] audit: type=1326 audit(2000000061.160:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f274936a799 code=0x0 [ 118.455137][ T4257] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (4257) [ 118.482590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.531762][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.577797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.621794][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.648735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.707092][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.735250][ T6487] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.738438][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.828976][ T6327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.848364][ T6327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.865890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.886691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.895275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.904894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.913499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.063266][ T6487] chnl_net:caif_netlink_parms(): no params data found [ 119.165835][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.180644][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.202962][ T6327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.223300][ T4239] bond1: (slave gretap1): Releasing active interface [ 119.263655][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.271847][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.280428][ T6487] device bridge_slave_0 entered promiscuous mode [ 119.289240][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.296422][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.304505][ T6487] device bridge_slave_1 entered promiscuous mode [ 119.354572][ T6487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.367394][ T6487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.398371][ T6487] team0: Port device team_slave_0 added [ 119.414346][ T6487] team0: Port device team_slave_1 added [ 119.450554][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.457968][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.513511][ T6487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.544246][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.552139][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.588890][ T6487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.660216][ T6487] device hsr_slave_0 entered promiscuous mode [ 119.667199][ T6487] device hsr_slave_1 entered promiscuous mode [ 119.673848][ T6487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.681770][ T6487] Cannot create hsr debugfs directory [ 119.691611][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.703939][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.716587][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 119.781826][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.790555][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.799244][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.807644][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.821638][ T6327] device veth0_vlan entered promiscuous mode [ 119.861584][ T6327] device veth1_vlan entered promiscuous mode [ 119.923454][ T4239] device hsr_slave_0 left promiscuous mode [ 119.930631][ T4239] device hsr_slave_1 left promiscuous mode [ 119.942604][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.950505][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.959651][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.967683][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.975548][ T4239] device bridge_slave_1 left promiscuous mode [ 119.982392][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.992074][ T4239] device bridge_slave_0 left promiscuous mode [ 120.004341][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.018835][ T4239] device bridge0 left promiscuous mode [ 120.025269][ T4239] device veth1_macvtap left promiscuous mode [ 120.038802][ T4239] device veth0_macvtap left promiscuous mode [ 120.044914][ T4239] device veth1_vlan left promiscuous mode [ 120.055349][ T4239] device veth0_vlan left promiscuous mode [ 120.165707][ T4239] bond2 (unregistering): (slave geneve2): Releasing active interface [ 120.183062][ T4239] device geneve2 left promiscuous mode [ 120.194056][ T4239] bond2 (unregistering): Released all slaves [ 120.229667][ T4239] bond1 (unregistering): Released all slaves [ 120.302888][ T4239] team0 (unregistering): Port device team_slave_1 removed [ 120.315468][ T4239] team0 (unregistering): Port device team_slave_0 removed [ 120.331518][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.340476][ T4239] device bond_slave_1 left promiscuous mode [ 120.351359][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.361290][ T4239] device bond_slave_0 left promiscuous mode [ 120.413012][ T4239] bond0 (unregistering): Released all slaves [ 120.436161][ T4333] Bluetooth: hci1: command 0x0409 tx timeout [ 120.527578][ T6327] device veth0_macvtap entered promiscuous mode [ 120.534790][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.543224][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.552192][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.570308][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.590012][ T6327] device veth1_macvtap entered promiscuous mode [ 120.609513][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.620098][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.631554][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.642287][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.654047][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.667745][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.681310][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.690546][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.708188][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.719158][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.737666][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.754704][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.772757][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.799351][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.812650][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.844551][ T6487] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 120.855682][ T6327] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.865496][ T6327] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.875390][ T6327] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.884459][ T6327] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.896177][ T6487] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 120.915015][ T6487] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 120.936801][ T6487] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 121.076944][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.084797][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.111086][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.125335][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.150661][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.166527][ T6487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.175429][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.224145][ T6487] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.247385][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.267003][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.320755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.344100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.406903][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.414002][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.465229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.482171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.496431][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.503601][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.534439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.573827][ T6487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.606010][ T6487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.669322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.686962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.714776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.748666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.780535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.796759][ T4223] Bluetooth: hci4: command 0x0419 tx timeout [ 121.797447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.846832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.885248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.917787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.935202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.958499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.977125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.173238][ T6620] device syzkaller0 entered promiscuous mode [ 122.342161][ T6628] netlink: 'syz.2.621': attribute type 3 has an invalid length. [ 122.477046][ T6635] rdma_rxe: rxe_register_device failed with error -23 [ 122.526213][ T6635] rdma_rxe: failed to add syz_tun [ 122.526752][ T6194] Bluetooth: hci1: command 0x041b tx timeout [ 122.605158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.618769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.653557][ T6487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.242447][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.274062][ T26] audit: type=1326 audit(2000000000.150:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.6.623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4057d7799 code=0x0 [ 123.275348][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.478276][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.519350][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.563633][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.617081][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.656217][ T6487] device veth0_vlan entered promiscuous mode [ 123.697578][ T6487] device veth1_vlan entered promiscuous mode [ 123.800242][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.874375][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.901468][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.921046][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.942960][ T6487] device veth0_macvtap entered promiscuous mode [ 123.967423][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.640'. [ 124.011135][ T6487] device veth1_macvtap entered promiscuous mode [ 124.054284][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.086432][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.142203][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.167163][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.184225][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.214144][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.266751][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.291966][ T6672] loop5: detected capacity change from 0 to 40427 [ 124.299256][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.326546][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.344016][ T6672] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 124.347019][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.378587][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.387865][ T6672] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 124.407607][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.439968][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.473784][ T6672] F2FS-fs (loop5): Found nat_bits in checkpoint [ 124.481025][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.505829][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 124.521967][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.537948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.564712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.594240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.606108][ T4223] Bluetooth: hci1: command 0x040f tx timeout [ 124.624506][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.655744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.675712][ T6487] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.687899][ T6672] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 124.698023][ T6487] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.707310][ T6672] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 124.735998][ T6487] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.783224][ T6189] hid-generic 0005:4C4A:5508.0001: item fetching failed at offset 0/1 [ 124.792295][ T6487] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.814012][ T6735] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 124.855668][ T6189] hid-generic: probe of 0005:4C4A:5508.0001 failed with error -22 [ 124.867113][ T6738] rdma_rxe: rxe_register_device failed with error -23 [ 124.874057][ T6738] rdma_rxe: failed to add syz_tun [ 124.967921][ T6735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.150897][ T6740] bond1: (slave veth3): Enslaving as an active interface with a down link [ 125.195170][ T6735] bond1: (slave gretap1): making interface the new active one [ 125.247921][ T6735] device gretap1 entered promiscuous mode [ 125.274958][ T6735] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 125.326308][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 125.463914][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.519865][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.559468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.648710][ T4231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.669674][ T4231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.698805][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.774376][ T26] audit: type=1326 audit(2000000002.650:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f274936a799 code=0x0 [ 125.813522][ T6765] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 125.873679][ T6672] syz.5.630 (6672): drop_caches: 2 [ 126.095441][ T4239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.137554][ T6774] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.193120][ T6778] netlink: 'syz.6.661': attribute type 16 has an invalid length. [ 126.212007][ T6778] netlink: 'syz.6.661': attribute type 17 has an invalid length. [ 126.265031][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.273165][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.314572][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.344596][ T6778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.412196][ T4239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.538794][ T4239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.635488][ T4239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.676335][ T6189] Bluetooth: hci1: command 0x0419 tx timeout [ 126.683759][ T6800] netlink: 24 bytes leftover after parsing attributes in process `syz.6.665'. [ 126.808938][ T6805] atomic_op ffff8880258ad998 conn xmit_atomic 0000000000000000 [ 126.875351][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 127.044325][ T4239] tipc: Disabling bearer [ 127.060297][ T4239] tipc: Left network mode [ 127.117316][ T6820] rdma_rxe: rxe_register_device failed with error -23 [ 127.163002][ T6820] rdma_rxe: failed to add syz_tun [ 127.300870][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 127.674007][ T26] audit: type=1326 audit(2000000004.550:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.2.672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16e3736799 code=0x0 [ 127.882862][ T4239] device hsr_slave_0 left promiscuous mode [ 127.891233][ T4239] device hsr_slave_1 left promiscuous mode [ 127.898897][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.906721][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.914956][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.923006][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.930959][ T4239] device bridge_slave_1 left promiscuous mode [ 127.938196][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.946506][ T4239] device bridge_slave_0 left promiscuous mode [ 127.952843][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.968228][ T4239] device veth1_macvtap left promiscuous mode [ 127.974270][ T4239] device veth0_macvtap left promiscuous mode [ 127.980488][ T4239] device veth1_vlan left promiscuous mode [ 127.986954][ T4239] device veth0_vlan left promiscuous mode [ 128.122201][ T4239] team0 (unregistering): Port device team_slave_1 removed [ 128.137901][ T4239] team0 (unregistering): Port device team_slave_0 removed [ 128.151721][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.165693][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.229277][ T4239] bond0 (unregistering): Released all slaves [ 130.048737][ T6813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.453887][ T6882] batman_adv: batadv0: Adding interface: dummy0 [ 130.489196][ T6882] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 130.576061][ T6882] batman_adv: batadv0: Interface activated: dummy0 [ 130.653876][ T6882] batadv0: mtu less than device minimum [ 130.686093][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 130.699232][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 130.711890][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 130.724193][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 130.736514][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 130.748702][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 130.760837][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 131.275353][ T6919] netlink: 56 bytes leftover after parsing attributes in process `syz.2.698'. [ 131.285670][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.699'. [ 131.341016][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 131.359549][ T6924] rdma_rxe: rxe_register_device failed with error -23 [ 131.366975][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.698'. [ 131.375879][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 131.377250][ T6924] rdma_rxe: failed to add syz_tun [ 131.900298][ T6949] virt_wifi0 speed is unknown, defaulting to 1000 [ 132.231599][ T26] audit: type=1326 audit(2000000009.110:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.5.700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd37ff18799 code=0x0 [ 132.336957][ T6967] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.502261][ T6967] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.662164][ T6967] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.769313][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.780772][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.782729][ T6967] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.009761][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.7.720'. [ 133.120149][ T6967] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.185768][ T6967] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.215770][ T6967] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.238483][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 133.271180][ T6967] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.330312][ T7019] rdma_rxe: rxe_register_device failed with error -23 [ 133.380773][ T7019] rdma_rxe: failed to add syz_tun [ 133.433409][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.6.729'. [ 133.924527][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 133.967697][ T26] audit: type=1326 audit(2000000010.850:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.7.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fdf244799 code=0x0 [ 134.060356][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.738'. [ 134.368400][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.745'. [ 134.394916][ T7082] siw: device registration error -23 [ 134.593088][ T7079] syz.5.745 (7079) used greatest stack depth: 18128 bytes left [ 134.642852][ T7087] IPVS: Scheduler module ip_vs_sip not found [ 134.949574][ T7100] team0: Port device dummy0 removed [ 134.969932][ T7100] batman_adv: batadv0: Adding interface: dummy0 [ 134.982813][ T7100] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.075293][ T7100] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 135.283988][ T7129] rdma_rxe: rxe_register_device failed with error -23 [ 135.331202][ T7129] rdma_rxe: failed to add syz_tun [ 135.348378][ T7136] netlink: 'syz.5.761': attribute type 1 has an invalid length. [ 135.575734][ T7142] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.596934][ T7142] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 135.745330][ T7146] bond3: (slave gretap1): making interface the new active one [ 135.784093][ T7146] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 135.845593][ T7136] device macvlan2 entered promiscuous mode [ 135.862964][ T7136] device bond3 entered promiscuous mode [ 135.872130][ T7136] device gretap1 entered promiscuous mode [ 135.886698][ T7136] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.909347][ T7136] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 135.931570][ T7136] device bond3 left promiscuous mode [ 135.945379][ T26] audit: type=1326 audit(2000000012.830:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.6.758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4057d7799 code=0x0 [ 135.945810][ T7136] device gretap1 left promiscuous mode [ 136.058224][ T7160] device syzkaller0 entered promiscuous mode [ 136.143525][ T7136] syz.5.761 (7136) used greatest stack depth: 17872 bytes left [ 136.421855][ T7176] __nla_validate_parse: 2 callbacks suppressed [ 136.421874][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.7.769'. [ 136.478845][ T7176] device macsec0 entered promiscuous mode [ 136.585953][ T7174] virt_wifi0 speed is unknown, defaulting to 1000 [ 136.678212][ T7189] smc: net device wlan0 erased user defined pnetid SYZ0 [ 136.896251][ T155] device gretap1 left promiscuous mode [ 136.923163][ T7203] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 137.243614][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.7.779'. [ 137.261870][ T7222] rdma_rxe: rxe_register_device failed with error -23 [ 137.274686][ T7222] rdma_rxe: failed to add syz_tun [ 137.856673][ T7241] netlink: 128 bytes leftover after parsing attributes in process `syz.3.784'. [ 138.040023][ T26] audit: type=1326 audit(2000000014.920:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.5.781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd37ff18799 code=0x0 [ 138.181025][ T7231] loop6: detected capacity change from 0 to 32768 [ 138.300600][ T7231] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.783 (7231) [ 138.308960][ T7257] net_ratelimit: 12 callbacks suppressed [ 138.309012][ T7257] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 138.412219][ T7231] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 138.434701][ T7231] BTRFS info (device loop6): using free space tree [ 138.460525][ T7231] BTRFS info (device loop6): has skinny extents [ 138.769815][ T7231] BTRFS info (device loop6): enabling ssd optimizations [ 139.571266][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.798'. [ 139.675286][ T7316] BTRFS info (device loop6): balance: start -d -m [ 139.693464][ T7316] BTRFS info (device loop6): relocating block group 6881280 flags data|metadata [ 139.792532][ T7327] netlink: 'syz.5.799': attribute type 10 has an invalid length. [ 139.821469][ T7327] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 140.014241][ T7335] virt_wifi0 speed is unknown, defaulting to 1000 [ 140.104323][ T7340] netlink: 128 bytes leftover after parsing attributes in process `syz.2.801'. [ 140.132050][ T7316] BTRFS info (device loop6): found 1 extents, stage: move data extents [ 140.233667][ T7316] BTRFS info (device loop6): relocating block group 5242880 flags data|metadata [ 140.328549][ T7316] BTRFS info (device loop6): balance: canceled [ 140.775487][ T7361] IPVS: Scheduler module ip_vs_sip not found [ 141.139051][ T7389] rdma_rxe: rxe_register_device failed with error -23 [ 141.149560][ T7391] ================================================================== [ 141.161890][ T7391] BUG: KASAN: use-after-free in ax25_addr_ax25dev+0x55/0x160 [ 141.169323][ T7391] Read of size 8 at addr ffff88805a3f6208 by task syz.2.819/7391 [ 141.177055][ T7391] [ 141.179409][ T7391] CPU: 0 PID: 7391 Comm: syz.2.819 Not tainted syzkaller #0 [ 141.186911][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.197003][ T7391] Call Trace: [ 141.200308][ T7391] [ 141.203288][ T7391] dump_stack_lvl+0x188/0x250 [ 141.208008][ T7391] ? show_regs_print_info+0x20/0x20 [ 141.213355][ T7391] ? _printk+0xda/0x130 [ 141.213675][ T7389] rdma_rxe: failed to add syz_tun [ 141.217548][ T7391] ? ax25_addr_ax25dev+0x55/0x160 [ 141.227867][ T7391] ? load_image+0x400/0x400 [ 141.232658][ T7391] print_address_description+0x60/0x2d0 [ 141.238372][ T7391] ? ax25_addr_ax25dev+0x55/0x160 [ 141.243516][ T7391] kasan_report+0xdf/0x130 [ 141.248231][ T7391] ? ax25_addr_ax25dev+0x55/0x160 [ 141.253358][ T7391] ax25_addr_ax25dev+0x55/0x160 [ 141.258270][ T7391] ax25_rt_ioctl+0x6c6/0x13e0 [ 141.263055][ T7391] ? lock_chain_count+0x20/0x20 [ 141.268106][ T7391] ? __ax25_put_route+0x40/0x40 [ 141.272988][ T7391] ? __local_bh_enable_ip+0x136/0x1c0 [ 141.278386][ T7391] ? bpf_lsm_capable+0x5/0x10 [ 141.283088][ T7391] ? security_capable+0x85/0xb0 [ 141.288074][ T7391] ax25_ioctl+0x7e8/0xc10 [ 141.292433][ T7391] ? kfree+0xef/0x2a0 [ 141.296511][ T7391] ? ax25_getname+0x3c0/0x3c0 [ 141.301216][ T7391] ? tomoyo_path_number_perm+0x5b4/0x660 [ 141.306883][ T7391] ? verify_lock_unused+0x140/0x140 [ 141.312116][ T7391] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 141.317619][ T7391] sock_do_ioctl+0xfb/0x320 [ 141.322163][ T7391] ? sock_show_fdinfo+0xb0/0xb0 [ 141.327060][ T7391] sock_ioctl+0x4d2/0x710 [ 141.331478][ T7391] ? sock_poll+0x410/0x410 [ 141.335923][ T7391] ? bpf_lsm_file_ioctl+0x5/0x10 [ 141.340894][ T7391] ? security_file_ioctl+0x7c/0xa0 [ 141.346035][ T7391] ? sock_poll+0x410/0x410 [ 141.350814][ T7391] __se_sys_ioctl+0xfa/0x170 [ 141.355699][ T7391] do_syscall_64+0x4c/0xa0 [ 141.360351][ T7391] ? clear_bhb_loop+0x30/0x80 [ 141.365136][ T7391] ? clear_bhb_loop+0x30/0x80 [ 141.369829][ T7391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.375842][ T7391] RIP: 0033:0x7f16e3736799 [ 141.380448][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.400244][ T7391] RSP: 002b:00007f16e1990028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.408759][ T7391] RAX: ffffffffffffffda RBX: 00007f16e39affa0 RCX: 00007f16e3736799 [ 141.416828][ T7391] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004 [ 141.424809][ T7391] RBP: 00007f16e37ccc99 R08: 0000000000000000 R09: 0000000000000000 [ 141.432924][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.440907][ T7391] R13: 00007f16e39b0038 R14: 00007f16e39affa0 R15: 00007ffd38e115d8 [ 141.449344][ T7391] [ 141.452374][ T7391] [ 141.454693][ T7391] Allocated by task 7053: [ 141.459191][ T7391] __kasan_kmalloc+0xb5/0xf0 [ 141.463797][ T7391] ax25_dev_device_up+0x50/0x580 [ 141.468753][ T7391] ax25_device_event+0x483/0x4f0 [ 141.473809][ T7391] raw_notifier_call_chain+0xcb/0x160 [ 141.479409][ T7391] __dev_notify_flags+0x194/0x300 [ 141.484551][ T7391] dev_change_flags+0xe3/0x1a0 [ 141.489340][ T7391] dev_ifsioc+0x130/0xd50 [ 141.493685][ T7391] dev_ioctl+0x545/0xe30 [ 141.497939][ T7391] sock_do_ioctl+0x245/0x320 [ 141.502675][ T7391] sock_ioctl+0x4d2/0x710 [ 141.507108][ T7391] __se_sys_ioctl+0xfa/0x170 [ 141.511801][ T7391] do_syscall_64+0x4c/0xa0 [ 141.516324][ T7391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.522238][ T7391] [ 141.524565][ T7391] Freed by task 7311: [ 141.528544][ T7391] kasan_set_track+0x4b/0x70 [ 141.533147][ T7391] kasan_set_free_info+0x1f/0x40 [ 141.538223][ T7391] ____kasan_slab_free+0xd5/0x110 [ 141.543360][ T7391] slab_free_freelist_hook+0xea/0x170 [ 141.548957][ T7391] kfree+0xef/0x2a0 [ 141.552781][ T7391] ax25_release+0x661/0x870 [ 141.557290][ T7391] sock_close+0xd5/0x240 [ 141.561535][ T7391] __fput+0x234/0x930 [ 141.565864][ T7391] task_work_run+0x125/0x1a0 [ 141.570570][ T7391] get_signal+0x1222/0x12c0 [ 141.575159][ T7391] arch_do_signal_or_restart+0xe7/0x12c0 [ 141.580793][ T7391] exit_to_user_mode_loop+0x9e/0x130 [ 141.586157][ T7391] exit_to_user_mode_prepare+0xee/0x180 [ 141.591682][ T7391] syscall_exit_to_user_mode+0x16/0x40 [ 141.597337][ T7391] do_syscall_64+0x58/0xa0 [ 141.601847][ T7391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.607725][ T7391] [ 141.610027][ T7391] Last potentially related work creation: [ 141.615719][ T7391] kasan_save_stack+0x35/0x60 [ 141.620522][ T7391] kasan_record_aux_stack+0xb8/0x100 [ 141.625817][ T7391] kvfree_call_rcu+0x105/0x7d0 [ 141.630673][ T7391] hash_netportnet6_add+0x2956/0x37b0 [ 141.636128][ T7391] hash_netportnet6_uadt+0xb7f/0xf20 [ 141.641406][ T7391] call_ad+0x359/0xa00 [ 141.645462][ T7391] ip_set_ad+0x816/0x9c0 [ 141.649777][ T7391] nfnetlink_rcv_msg+0xbb0/0x11f0 [ 141.654795][ T7391] netlink_rcv_skb+0x1f5/0x440 [ 141.659631][ T7391] nfnetlink_rcv+0x2b4/0x2460 [ 141.664294][ T7391] netlink_unicast+0x774/0x920 [ 141.669128][ T7391] netlink_sendmsg+0x8ba/0xbe0 [ 141.673876][ T7391] ____sys_sendmsg+0x5b7/0x8f0 [ 141.678722][ T7391] ___sys_sendmsg+0x236/0x2e0 [ 141.683645][ T7391] __se_sys_sendmsg+0x1af/0x290 [ 141.688597][ T7391] do_syscall_64+0x4c/0xa0 [ 141.692998][ T7391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.698986][ T7391] [ 141.701331][ T7391] The buggy address belongs to the object at ffff88805a3f6200 [ 141.701331][ T7391] which belongs to the cache kmalloc-192 of size 192 [ 141.715366][ T7391] The buggy address is located 8 bytes inside of [ 141.715366][ T7391] 192-byte region [ffff88805a3f6200, ffff88805a3f62c0) [ 141.728547][ T7391] The buggy address belongs to the page: [ 141.734247][ T7391] page:ffffea000168fd80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a3f6 [ 141.744391][ T7391] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 141.752030][ T7391] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016c41a00 [ 141.760686][ T7391] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 141.769441][ T7391] page dumped because: kasan: bad access detected [ 141.776040][ T7391] page_owner tracks the page as allocated [ 141.781912][ T7391] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 5636, ts 94029870131, free_ts 92833000663 [ 141.799352][ T7391] get_page_from_freelist+0x1bbd/0x1ca0 [ 141.804977][ T7391] __alloc_pages+0x1ee/0x480 [ 141.809639][ T7391] new_slab+0xc0/0x4b0 [ 141.813693][ T7391] ___slab_alloc+0x80a/0xdd0 [ 141.818266][ T7391] __kmalloc+0x1cd/0x330 [ 141.822491][ T7391] hash_netportnet6_resize+0xdb8/0x1e60 [ 141.828108][ T7391] call_ad+0x440/0xa00 [ 141.832159][ T7391] ip_set_ad+0x816/0x9c0 [ 141.836474][ T7391] nfnetlink_rcv_msg+0xbb0/0x11f0 [ 141.841499][ T7391] netlink_rcv_skb+0x1f5/0x440 [ 141.846244][ T7391] nfnetlink_rcv+0x2b4/0x2460 [ 141.850904][ T7391] netlink_unicast+0x774/0x920 [ 141.855743][ T7391] netlink_sendmsg+0x8ba/0xbe0 [ 141.860488][ T7391] ____sys_sendmsg+0x5b7/0x8f0 [ 141.865332][ T7391] ___sys_sendmsg+0x236/0x2e0 [ 141.869996][ T7391] __se_sys_sendmsg+0x1af/0x290 [ 141.874836][ T7391] page last free stack trace: [ 141.879494][ T7391] free_unref_page_prepare+0x637/0x6c0 [ 141.884936][ T7391] free_unref_page+0x8f/0x2a0 [ 141.889703][ T7391] __vunmap+0x8b9/0xa50 [ 141.893849][ T7391] kcov_mmap+0x89/0x120 [ 141.897991][ T7391] mmap_file+0x5d/0xb0 [ 141.902138][ T7391] mmap_region+0xf88/0x1650 [ 141.906628][ T7391] do_mmap+0x819/0xe90 [ 141.910681][ T7391] vm_mmap_pgoff+0x1c1/0x2d0 [ 141.915285][ T7391] ksys_mmap_pgoff+0x54b/0x790 [ 141.920030][ T7391] do_syscall_64+0x4c/0xa0 [ 141.924431][ T7391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.930315][ T7391] [ 141.932629][ T7391] Memory state around the buggy address: [ 141.938238][ T7391] ffff88805a3f6100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 141.946291][ T7391] ffff88805a3f6180: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 141.954349][ T7391] >ffff88805a3f6200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.962400][ T7391] ^ [ 141.966889][ T7391] ffff88805a3f6280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 141.974927][ T7391] ffff88805a3f6300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 141.982975][ T7391] ================================================================== [ 141.991099][ T7391] Disabling lock debugging due to kernel taint [ 141.997415][ T7391] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.004604][ T7391] CPU: 0 PID: 7391 Comm: syz.2.819 Tainted: G B syzkaller #0 [ 142.013483][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.023526][ T7391] Call Trace: [ 142.026804][ T7391] [ 142.029727][ T7391] dump_stack_lvl+0x188/0x250 [ 142.034404][ T7391] ? show_regs_print_info+0x20/0x20 [ 142.039589][ T7391] ? load_image+0x400/0x400 [ 142.044081][ T7391] panic+0x2e5/0x810 [ 142.048110][ T7391] ? bpf_jit_dump+0xd0/0xd0 [ 142.052624][ T7391] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 142.058526][ T7391] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 142.064428][ T7391] ? _raw_spin_unlock+0x40/0x40 [ 142.069367][ T7391] ? print_memory_metadata+0x314/0x400 [ 142.074825][ T7391] ? ax25_addr_ax25dev+0x55/0x160 [ 142.079843][ T7391] check_panic_on_warn+0x80/0xa0 [ 142.084865][ T7391] ? ax25_addr_ax25dev+0x55/0x160 [ 142.089901][ T7391] end_report+0x6d/0xf0 [ 142.094043][ T7391] kasan_report+0x102/0x130 [ 142.098721][ T7391] ? ax25_addr_ax25dev+0x55/0x160 [ 142.103732][ T7391] ax25_addr_ax25dev+0x55/0x160 [ 142.108654][ T7391] ax25_rt_ioctl+0x6c6/0x13e0 [ 142.113322][ T7391] ? lock_chain_count+0x20/0x20 [ 142.118158][ T7391] ? __ax25_put_route+0x40/0x40 [ 142.122999][ T7391] ? __local_bh_enable_ip+0x136/0x1c0 [ 142.128452][ T7391] ? bpf_lsm_capable+0x5/0x10 [ 142.133116][ T7391] ? security_capable+0x85/0xb0 [ 142.138067][ T7391] ax25_ioctl+0x7e8/0xc10 [ 142.142389][ T7391] ? kfree+0xef/0x2a0 [ 142.146614][ T7391] ? ax25_getname+0x3c0/0x3c0 [ 142.151545][ T7391] ? tomoyo_path_number_perm+0x5b4/0x660 [ 142.157249][ T7391] ? verify_lock_unused+0x140/0x140 [ 142.162437][ T7391] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 142.167880][ T7391] sock_do_ioctl+0xfb/0x320 [ 142.172547][ T7391] ? sock_show_fdinfo+0xb0/0xb0 [ 142.177388][ T7391] sock_ioctl+0x4d2/0x710 [ 142.181704][ T7391] ? sock_poll+0x410/0x410 [ 142.186116][ T7391] ? bpf_lsm_file_ioctl+0x5/0x10 [ 142.191035][ T7391] ? security_file_ioctl+0x7c/0xa0 [ 142.196148][ T7391] ? sock_poll+0x410/0x410 [ 142.200633][ T7391] __se_sys_ioctl+0xfa/0x170 [ 142.205233][ T7391] do_syscall_64+0x4c/0xa0 [ 142.209722][ T7391] ? clear_bhb_loop+0x30/0x80 [ 142.214385][ T7391] ? clear_bhb_loop+0x30/0x80 [ 142.219142][ T7391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.225135][ T7391] RIP: 0033:0x7f16e3736799 [ 142.229539][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.249250][ T7391] RSP: 002b:00007f16e1990028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.257737][ T7391] RAX: ffffffffffffffda RBX: 00007f16e39affa0 RCX: 00007f16e3736799 [ 142.265789][ T7391] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004 [ 142.273756][ T7391] RBP: 00007f16e37ccc99 R08: 0000000000000000 R09: 0000000000000000 [ 142.281719][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.289687][ T7391] R13: 00007f16e39b0038 R14: 00007f16e39affa0 R15: 00007ffd38e115d8 [ 142.297657][ T7391] [ 142.301117][ T7391] Kernel Offset: disabled [ 142.305435][ T7391] Rebooting in 86400 seconds..