last executing test programs: 5m55.231443782s ago: executing program 1 (id=22): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x521, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 5m46.554608465s ago: executing program 1 (id=27): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lchown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 5m37.524755776s ago: executing program 1 (id=40): ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) syz_open_procfs(0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r6, 0xc0386105, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0xffffffffffffff40, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x8, 0xf, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000780)=""/15, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 5m31.033872296s ago: executing program 1 (id=46): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200012, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000080)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1641f, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 5m21.372316291s ago: executing program 1 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 5m12.791191342s ago: executing program 1 (id=59): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x2, {0x1, 0x0, 0x6}}, 0x18) r10 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r10, 0xc2604110, &(0x7f0000000300)={0x2, [[0x9ef8, 0xf1, 0x0, 0x1, 0xfffffffc, 0x7, 0xe, 0x80014], [0xe000, 0x4, 0x0, 0x0, 0x20000000, 0x4, 0xffffffff], [0x5, 0x1000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf7}, {0x0, 0x10000}, {0xffffdfff}, {0x4, 0x5, 0x0, 0x1}, {0x7b, 0xffffff7e}, {0x0, 0x80000001}, {0xffffffff, 0xa}, {0xcea7e06}, {0x0, 0xffff}, {0x2, 0x10000000}, {0x9, 0xd78}, {0xfffffff8, 0x2}], '\x00', 0x4, 0x0, 0x0, 0xf8}) mq_open(&(0x7f0000000040)='kfree\x00', 0x40, 0x5, &(0x7f0000000080)={0xffffffffffffff88, 0x3}) bind$can_j1939(r8, &(0x7f0000000180)={0x1d, r7, 0x3, {0x2, 0xf0, 0x1}, 0x1}, 0x18) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480b95c", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback}}}], 0x18}, 0x0) 4m34.666067986s ago: executing program 2 (id=115): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 4m33.447219933s ago: executing program 2 (id=117): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4685, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb300000000000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954d661c4e85c3bd409af9b77444610960f86577adec70a7a1ce19ff1bf805a3dd0b5f2765f7f86398a766ff07c62f3a45e98473718993877bb0b0b55af14"], 0x20}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7f, @mcast2, 0x7f}, 0x1c, 0x0}}], 0x1, 0x4041400) getrlimit(0xe, 0x0) 4m29.750128924s ago: executing program 2 (id=121): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002180000"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x141842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1281, 0x15) sendfile(r5, r4, 0x0, 0x40001) 4m25.721782422s ago: executing program 2 (id=125): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x6a040000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700840000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000007c0)='1', 0x1}], 0x1, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x40054}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x39000, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f00000003c0)=0x8000, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000240)) landlock_restrict_self(r3, 0xa) 4m10.39562159s ago: executing program 33 (id=125): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x6a040000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700840000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000007c0)='1', 0x1}], 0x1, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x40054}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x39000, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f00000003c0)=0x8000, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000240)) landlock_restrict_self(r3, 0xa) 22.388127255s ago: executing program 4 (id=394): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x804e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000100)='./file1\x00', 0x100) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r4, 0x0, 0x0, 0xe7b, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 18.562744371s ago: executing program 4 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) 17.682714011s ago: executing program 4 (id=399): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 16.086500518s ago: executing program 4 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 12.587670249s ago: executing program 3 (id=402): r0 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x5, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000002c0)={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000003c0)={r6, 0x8}, &(0x7f0000000400)=0x8) r7 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080)) 9.637287939s ago: executing program 0 (id=404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) 9.361515004s ago: executing program 3 (id=405): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x804e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000100)='./file1\x00', 0x100) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r4, 0x0, 0x0, 0xe7b, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 7.170919813s ago: executing program 0 (id=406): ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) syz_open_procfs(0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r7, 0xc0386105, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0xffffffffffffff40, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x8, 0xf, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000780)=""/15, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 7.170585494s ago: executing program 4 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) 6.537901772s ago: executing program 3 (id=408): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 5.641535179s ago: executing program 0 (id=409): syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x1, @remote, @local, {[@routing={0x3b, 0x0, 0x1, 0x5}], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 5.115478584s ago: executing program 3 (id=410): socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x400000000010, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) setpriority(0x2, 0x0, 0x5) unshare(0x24060400) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) 5.052955755s ago: executing program 0 (id=411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.507757438s ago: executing program 0 (id=412): openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 2.918010242s ago: executing program 4 (id=413): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.80340592s ago: executing program 3 (id=414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) 60.235161ms ago: executing program 3 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 0s ago: executing program 0 (id=416): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x804e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000100)='./file1\x00', 0x100) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r4, 0x0, 0x0, 0xe7b, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) kernel console output (not intermixed with test programs): red blocking state [ 170.527773][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.535314][ T5588] bridge_slave_1: entered allmulticast mode [ 170.543711][ T5588] bridge_slave_1: entered promiscuous mode [ 170.580124][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.654679][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.661762][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.688072][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.723779][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.731108][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.759952][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.806200][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.823972][ T5589] team0: Port device team_slave_0 added [ 170.896213][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.912706][ T5589] team0: Port device team_slave_1 added [ 170.925943][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.944881][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.960096][ T5594] team0: Port device team_slave_0 added [ 171.042164][ T5594] team0: Port device team_slave_1 added [ 171.161879][ T5584] team0: Port device team_slave_0 added [ 171.169770][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.177317][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.203501][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.246503][ T5588] team0: Port device team_slave_0 added [ 171.280947][ T5584] team0: Port device team_slave_1 added [ 171.288887][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.297111][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.323803][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.348527][ T5579] hsr_slave_0: entered promiscuous mode [ 171.356748][ T5579] hsr_slave_1: entered promiscuous mode [ 171.371153][ T5588] team0: Port device team_slave_1 added [ 171.378926][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.386148][ T5591] Bluetooth: hci0: command tx timeout [ 171.386289][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.417828][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.511032][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.518501][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.544888][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.580002][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.587340][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.613855][ T5591] Bluetooth: hci1: command tx timeout [ 171.615395][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.695595][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.703284][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.729699][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.764400][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.771773][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.773956][ T5591] Bluetooth: hci2: command tx timeout [ 171.799042][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.820039][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.827484][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.854148][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.854494][ T5591] Bluetooth: hci3: command tx timeout [ 171.937072][ T5589] hsr_slave_0: entered promiscuous mode [ 171.945231][ T5589] hsr_slave_1: entered promiscuous mode [ 171.953392][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 171.959288][ T5589] Cannot create hsr debugfs directory [ 172.014214][ T5591] Bluetooth: hci4: command tx timeout [ 172.092869][ T5594] hsr_slave_0: entered promiscuous mode [ 172.101252][ T5594] hsr_slave_1: entered promiscuous mode [ 172.109209][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 172.115072][ T5594] Cannot create hsr debugfs directory [ 172.306648][ T5584] hsr_slave_0: entered promiscuous mode [ 172.315466][ T5584] hsr_slave_1: entered promiscuous mode [ 172.323118][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 172.328961][ T5584] Cannot create hsr debugfs directory [ 172.391380][ T5588] hsr_slave_0: entered promiscuous mode [ 172.399627][ T5588] hsr_slave_1: entered promiscuous mode [ 172.407579][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 172.413523][ T5588] Cannot create hsr debugfs directory [ 173.416273][ T5579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.438261][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.450774][ T5579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.462653][ T5591] Bluetooth: hci0: command tx timeout [ 173.477496][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.489653][ T5579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.505836][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.532890][ T5579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.551570][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.639357][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.674241][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.684576][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.693691][ T5591] Bluetooth: hci1: command tx timeout [ 173.707697][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.717527][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.734116][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.743994][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.765447][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.858050][ T5591] Bluetooth: hci2: command tx timeout [ 173.932872][ T5591] Bluetooth: hci3: command tx timeout [ 173.949154][ T5588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.972237][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.997144][ T5588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.016600][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.050570][ T5588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.068796][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.079594][ T5588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.096491][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.105407][ T5591] Bluetooth: hci4: command tx timeout [ 174.302321][ T5594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.320004][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.373649][ T5594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.390355][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.400501][ T5594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.423397][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.433358][ T5594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.453854][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.603982][ T5584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.626183][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.639703][ T5584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.658853][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.689657][ T5584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.708581][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.718526][ T5584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.744223][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.904933][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.053390][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.110836][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.218109][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.225459][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.281604][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.311068][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.318551][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.333635][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.340889][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.444364][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.451664][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.550801][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.780192][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.812362][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.909569][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.917104][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.948980][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.073712][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.081283][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.117834][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.249556][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.271335][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.278862][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.357676][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.365213][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.407990][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.415540][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.561388][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.568994][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.536902][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.121945][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.319323][ T5579] veth0_vlan: entered promiscuous mode [ 179.458049][ T5579] veth1_vlan: entered promiscuous mode [ 179.905501][ T5589] veth0_vlan: entered promiscuous mode [ 180.068128][ T5579] veth0_macvtap: entered promiscuous mode [ 180.099397][ T5589] veth1_vlan: entered promiscuous mode [ 180.136699][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.168598][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.194731][ T5579] veth1_macvtap: entered promiscuous mode [ 180.215038][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.411797][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.507938][ T5589] veth0_macvtap: entered promiscuous mode [ 180.545713][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.651776][ T5589] veth1_macvtap: entered promiscuous mode [ 180.704119][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.715938][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.776274][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.789538][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.962068][ T5594] veth0_vlan: entered promiscuous mode [ 180.988318][ T5584] veth0_vlan: entered promiscuous mode [ 181.129004][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.181389][ T5584] veth1_vlan: entered promiscuous mode [ 181.199758][ T5594] veth1_vlan: entered promiscuous mode [ 181.288651][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.397988][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.412019][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.464793][ T5701] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.476675][ T5701] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.748322][ T5588] veth0_vlan: entered promiscuous mode [ 181.827056][ T5584] veth0_macvtap: entered promiscuous mode [ 181.868608][ T5594] veth0_macvtap: entered promiscuous mode [ 181.931515][ T5584] veth1_macvtap: entered promiscuous mode [ 181.981573][ T5594] veth1_macvtap: entered promiscuous mode [ 182.024912][ T5588] veth1_vlan: entered promiscuous mode [ 182.315552][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.379398][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.446517][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.509622][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.584918][ T5701] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.600227][ T5701] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.628664][ T5701] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.641185][ T5701] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.739879][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.761692][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.795876][ T5588] veth0_macvtap: entered promiscuous mode [ 182.829624][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.862902][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.939062][ T5588] veth1_macvtap: entered promiscuous mode [ 183.235296][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.358211][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.497890][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.519449][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.553386][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.593725][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.660817][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.695556][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.900842][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.942919][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.362718][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.393952][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.456434][ T5579] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.600441][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.621921][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.539148][ T5830] loop2: detected capacity change from 0 to 1024 [ 187.752711][ T5830] hfsplus: bad catalog entry type [ 188.744150][ T5682] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 188.908704][ T5701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.923258][ T5701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.952011][ T5682] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 188.970570][ T5682] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 189.006647][ T5682] usb 3-1: config 220 has an invalid descriptor of length 157, skipping remainder of the config [ 189.042673][ T5682] usb 3-1: config 220 has no interface number 2 [ 189.058436][ T5682] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 189.098978][ T5682] usb 3-1: config 220 interface 0 has no altsetting 0 [ 189.115751][ T5682] usb 3-1: config 220 interface 76 has no altsetting 0 [ 189.123779][ T5682] usb 3-1: config 220 interface 1 has no altsetting 0 [ 189.147825][ T5682] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 189.173318][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.175393][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.210416][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.212925][ T5682] usb 3-1: Product: syz [ 189.266100][ T5682] usb 3-1: Manufacturer: syz [ 189.276957][ T5682] usb 3-1: SerialNumber: syz [ 189.413156][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.433775][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.552040][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.576366][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.590558][ T5682] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 189.611273][ T5682] uvcvideo 3-1:220.0: No valid video chain found. [ 189.643039][ T5682] usb 3-1: selecting invalid altsetting 0 [ 189.739458][ T5682] usb 3-1: selecting invalid altsetting 0 [ 189.757710][ T5682] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 189.810780][ T5682] usb 3-1: USB disconnect, device number 2 [ 189.937248][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.997493][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.314271][ T5701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.349284][ T5701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.204444][ T5873] syzkaller0: entered promiscuous mode [ 191.229801][ T5873] syzkaller0: entered allmulticast mode [ 192.107843][ T5884] loop1: detected capacity change from 0 to 512 [ 192.170260][ T5884] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 192.303301][ T5884] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 192.464072][ T5884] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 192.566029][ T5884] EXT4-fs (loop1): 1 truncate cleaned up [ 192.616917][ T5884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.203655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 193.305444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 198.717162][ T5584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.849101][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.862766][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.139122][ T5908] netlink: 87 bytes leftover after parsing attributes in process `syz.3.17'. [ 201.172970][ T5908] evm: overlay not supported [ 211.997491][ T5927] loop4: detected capacity change from 0 to 64 [ 212.753232][ T5925] loop1: detected capacity change from 0 to 32768 [ 212.781779][ T5925] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.22 (5925) [ 213.561891][ T5927] hfs: request for non-existent node 131072 in B*Tree [ 215.442049][ T5927] hfs: request for non-existent node 131072 in B*Tree [ 215.833196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 215.935749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 219.550491][ T5962] loop0: detected capacity change from 0 to 512 [ 219.653589][ T5962] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 219.701466][ T5962] EXT4-fs (loop0): invalid journal inode [ 219.750876][ T5962] EXT4-fs (loop0): can't get journal size [ 219.848001][ T5965] loop1: detected capacity change from 0 to 512 [ 219.865415][ T5965] EXT4-fs (loop1): Test dummy encryption mode enabled [ 219.867504][ T5962] EXT4-fs (loop0): 1 truncate cleaned up [ 219.883318][ T5965] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 219.971891][ T5965] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.27: bad orphan inode 131083 [ 219.991712][ T5965] loop1: lost filesystem error report for type 5 error -117 [ 219.992600][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 220.006716][ C0] EXT4-fs (loop1): initial error at time 1779949260: ext4_orphan_get:1423 [ 220.015361][ T5962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.020813][ T5965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.027676][ C0] EXT4-fs (loop1): last error at time 1779949260: ext4_orphan_get:1423 [ 222.599267][ T5971] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 223.141421][ T5579] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.923047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 223.940100][ T5978] loop3: detected capacity change from 0 to 32768 [ 224.000211][ T5978] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 443f01a7-2379-4aab-8a2e-aa61b679e3e5 [ 224.010789][ T5978] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.37 (5978) [ 224.036532][ T5978] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.046866][ T5978] BTRFS info (device loop3): using sha256 checksum algorithm [ 224.158311][ T5584] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.185511][ T5978] BTRFS info (device loop3): setting nodatasum [ 224.191867][ T5978] BTRFS info (device loop3): enabling ssd optimizations [ 224.199112][ T5978] BTRFS info (device loop3): turning on async discard [ 224.206095][ T5978] BTRFS info (device loop3): enabling free space tree [ 224.704300][ T29] audit: type=1800 audit(1779949265.518:2): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.37" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 226.398089][ T5594] BTRFS info (device loop3): last unmount of filesystem 443f01a7-2379-4aab-8a2e-aa61b679e3e5 [ 230.017469][ T6016] ceph: No mds server is up or the cluster is laggy [ 230.033857][ T24] libceph: connect (1)[c::]:6789 error -101 [ 230.040279][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 230.303881][ T24] libceph: connect (1)[c::]:6789 error -101 [ 230.361873][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 231.305882][ T5682] libceph: connect (1)[c::]:6789 error -101 [ 231.325177][ T5682] libceph: mon0 (1)[c::]:6789 connect error [ 235.912610][ T6034] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 241.944480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 242.253270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 242.354625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 242.764194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 243.174169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 248.982971][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 249.175013][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 249.209318][ T24] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 249.249431][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.283319][ T24] usb 3-1: config 0 has no interface number 0 [ 249.304695][ T24] usb 3-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 249.359205][ T24] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.422992][ T5682] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 249.491969][ T24] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 249.518570][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.568146][ T24] usb 3-1: Product: syz [ 249.586541][ T24] usb 3-1: Manufacturer: syz [ 249.598573][ T24] usb 3-1: SerialNumber: syz [ 249.614477][ T5682] usb 1-1: Using ep0 maxpacket: 16 [ 249.637970][ T24] usb 3-1: config 0 descriptor?? [ 249.680032][ T5682] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 249.696730][ T24] asix 3-1:0.34: probe with driver asix failed with error -22 [ 249.723563][ T5682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.786886][ T5682] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 249.797016][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.820816][ T5682] usb 1-1: Product: syz [ 249.845688][ T5682] usb 1-1: Manufacturer: syz [ 249.862646][ T5682] usb 1-1: SerialNumber: syz [ 249.889246][ T5682] usb 1-1: config 0 descriptor?? [ 249.963207][ T5682] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 249.998000][ T5682] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 250.257216][ T6090] loop3: detected capacity change from 0 to 1024 [ 250.535229][ T5682] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 250.567976][ T5682] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 250.759145][ T6100] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 250.808587][ T5682] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 250.837644][ T5682] em28xx 1-1:0.0: No AC97 audio processor [ 251.914906][ T5671] usb 3-1: USB disconnect, device number 3 [ 252.299901][ T5682] usb 1-1: USB disconnect, device number 2 [ 252.332824][ T5682] em28xx 1-1:0.0: Disconnecting em28xx [ 252.416647][ T5682] em28xx 1-1:0.0: Freeing device [ 255.326704][ T6128] ptrace attach of "ci-upstream-kmsan-gce-root/syz-executor exec"[5589] was attempted by "ci-upstream-kmsan-gce-root/syz-executor exec"[6128] [ 260.264110][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.284668][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.463149][ T6146] random: crng reseeded on system resumption [ 264.364272][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 264.556989][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 264.645384][ T24] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 264.718768][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.811410][ T24] usb 4-1: config 0 has no interface number 0 [ 264.897561][ T24] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 265.011500][ T24] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.139236][ T6151] loop0: detected capacity change from 0 to 32768 [ 265.149055][ T6151] btrfs: Deprecated parameter 'usebackuproot' [ 265.155556][ T6151] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 265.276663][ T6151] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.81 (6151) [ 265.824954][ T6151] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.835484][ T6151] BTRFS info (device loop0): using crc32c checksum algorithm [ 265.852313][ T24] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 265.961771][ T6170] IPVS: fo: FWM 3 0x00000003 - no destination available [ 266.066203][ T5671] IPVS: starting estimator thread 0... [ 266.101066][ T5918] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 266.256648][ T6151] BTRFS error (device loop0): failed to load root extent [ 266.264252][ T6151] BTRFS warning (device loop0): try to load backup roots slot 1 [ 266.272899][ T6171] IPVS: using max 192 ests per chain, 9600 per kthread [ 266.323035][ T52] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 266.441737][ T6151] BTRFS warning (device loop0): couldn't read tree root [ 266.449377][ T6151] BTRFS warning (device loop0): try to load backup roots slot 2 [ 266.462027][ T154] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 266.829970][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.838385][ T24] usb 4-1: Product: syz [ 266.842779][ T24] usb 4-1: Manufacturer: syz [ 266.847525][ T24] usb 4-1: SerialNumber: syz [ 266.861563][ T24] usb 4-1: config 0 descriptor?? [ 267.189422][ T6151] BTRFS warning (device loop0): couldn't read tree root [ 267.196770][ T6151] BTRFS warning (device loop0): try to load backup roots slot 3 [ 268.709209][ T6151] BTRFS error (device loop0): open_ctree failed: -4 [ 268.959315][ T24] usb 4-1: can't set config #0, error -71 [ 269.037167][ T24] usb 4-1: USB disconnect, device number 2 [ 269.409933][ T6180] xt_hashlimit: size too large, truncated to 1048576 [ 269.583217][ T4875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.599198][ T4875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.657918][ T4875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.699937][ T4875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.719060][ T4875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.092698][ T6191] 9p: Bad value for 'rfdno' [ 271.774346][ T4875] Bluetooth: hci5: command tx timeout [ 273.853204][ T5591] Bluetooth: hci5: command tx timeout [ 274.085819][ T6206] random: crng reseeded on system resumption [ 275.933705][ T5591] Bluetooth: hci5: command tx timeout [ 278.103664][ T5591] Bluetooth: hci5: command tx timeout [ 278.639424][ T5671] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 280.473042][ T5671] usb 4-1: Using ep0 maxpacket: 16 [ 280.491199][ T5671] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 280.511579][ T5671] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 280.540835][ T5671] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 280.558869][ T5671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.579814][ T5671] usb 4-1: Product: syz [ 280.585359][ T5671] usb 4-1: Manufacturer: syz [ 280.592274][ T5671] usb 4-1: SerialNumber: syz [ 280.655811][ T5671] usb 4-1: config 0 descriptor?? [ 280.777423][ T5701] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.004232][ T5671] usb 4-1: can't set config #0, error -71 [ 281.040509][ T5671] usb 4-1: USB disconnect, device number 3 [ 281.275496][ T5701] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.090471][ T6246] loop2: detected capacity change from 0 to 32768 [ 282.104129][ T6246] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 64cf1345-a071-4f50-a924-04639d2b5c1b [ 282.105779][ T5701] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.114577][ T6246] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.104 (6246) [ 282.163963][ T6246] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.174548][ T6246] BTRFS info (device loop2): using sha256 checksum algorithm [ 282.470346][ T6265] loop3: detected capacity change from 0 to 1024 [ 282.558128][ T6265] hfsplus: Unknown parameter 'f_u' [ 282.584705][ T6246] BTRFS info (device loop2): setting nodatasum [ 282.591208][ T6246] BTRFS info (device loop2): enabling ssd optimizations [ 282.603531][ T6246] BTRFS info (device loop2): turning on async discard [ 282.610481][ T6246] BTRFS info (device loop2): enabling free space tree [ 283.423408][ T29] audit: type=1800 audit(1779949324.158:3): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.104" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 284.163037][ T5701] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.287308][ T5589] BTRFS info (device loop2): last unmount of filesystem 64cf1345-a071-4f50-a924-04639d2b5c1b [ 284.517673][ T6276] loop3: detected capacity change from 0 to 512 [ 284.581288][ T6276] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 284.672765][ T6276] EXT4-fs (loop3): invalid journal inode [ 284.717420][ T6276] EXT4-fs (loop3): can't get journal size [ 284.750562][ T6276] EXT4-fs (loop3): 1 truncate cleaned up [ 284.788779][ T6276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.876333][ T6285] loop4: detected capacity change from 0 to 512 [ 284.890540][ T6285] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 284.939262][ T6285] EXT4-fs (loop4): invalid journal inode [ 285.019663][ T6285] EXT4-fs (loop4): can't get journal size [ 285.085885][ T6285] EXT4-fs (loop4): 1 truncate cleaned up [ 285.113233][ T6285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.298066][ T6299] xt_CT: No such helper "pptp" [ 287.849351][ T5594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.944667][ T6294] Bluetooth: hci0: command 0x0406 tx timeout [ 287.951342][ T6294] Bluetooth: hci3: command 0x0406 tx timeout [ 287.960394][ T6294] Bluetooth: hci2: command 0x0406 tx timeout [ 287.966684][ T6294] Bluetooth: hci4: command 0x0406 tx timeout [ 287.969740][ T5701] bridge_slave_1: left allmulticast mode [ 288.027109][ T5701] bridge_slave_1: left promiscuous mode [ 288.034081][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.043613][ T6310] block device autoloading is deprecated and will be removed. [ 289.517688][ T5701] bridge_slave_0: left allmulticast mode [ 289.673213][ T5701] bridge_slave_0: left promiscuous mode [ 289.732675][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.689431][ T6312] loop3: detected capacity change from 0 to 32768 [ 290.765885][ T6312] BTRFS info: device /dev/loop3 (7:3) using temp-fsid eceeb837-f73d-45d5-bec0-3fd99219a383 [ 290.776376][ T6312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.119 (6312) [ 290.805009][ T6312] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 290.816104][ T6312] BTRFS info (device loop3): using sha256 checksum algorithm [ 290.903803][ T5588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.126748][ T6312] BTRFS info (device loop3): setting nodatasum [ 291.133316][ T6312] BTRFS info (device loop3): enabling ssd optimizations [ 291.140509][ T6312] BTRFS info (device loop3): turning on async discard [ 291.147557][ T6312] BTRFS info (device loop3): enabling free space tree [ 292.076121][ T29] audit: type=1800 audit(1779949332.778:4): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.119" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 292.671455][ T6334] netlink: 87 bytes leftover after parsing attributes in process `syz.2.121'. [ 293.510331][ T5594] BTRFS info (device loop3): last unmount of filesystem eceeb837-f73d-45d5-bec0-3fd99219a383 [ 293.606204][ T5701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.835614][ T5701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.959052][ T5701] bond0 (unregistering): Released all slaves [ 297.806770][ T6340] overlayfs: failed to resolve './file0': -2 [ 298.813956][ T6351] xt_CT: No such helper "pptp" [ 299.109513][ T5701] hsr_slave_0: left promiscuous mode [ 299.128128][ T5701] hsr_slave_1: left promiscuous mode [ 299.142145][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.142224][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.160554][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.160631][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.370244][ T5701] veth1_macvtap: left promiscuous mode [ 299.370384][ T5701] veth0_macvtap: left promiscuous mode [ 299.370668][ T5701] veth1_vlan: left promiscuous mode [ 299.370874][ T5701] veth0_vlan: left promiscuous mode [ 299.638134][ T6364] loop4: detected capacity change from 0 to 512 [ 299.654747][ T6364] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 299.669084][ T6364] EXT4-fs (loop4): invalid journal inode [ 299.669215][ T6364] EXT4-fs (loop4): can't get journal size [ 299.741984][ T6364] EXT4-fs (loop4): 1 truncate cleaned up [ 299.754526][ T6364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.037915][ T6379] loop3: detected capacity change from 0 to 32768 [ 303.040980][ T5588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.059385][ T6379] BTRFS info: device /dev/loop3 (7:3) using temp-fsid c6c85623-db7b-4a1f-b519-947d40ce0bbb [ 303.070662][ T6379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.131 (6379) [ 303.100843][ T6379] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 303.111551][ T6379] BTRFS info (device loop3): using sha256 checksum algorithm [ 303.213325][ T6379] BTRFS info (device loop3): setting nodatasum [ 303.219679][ T6379] BTRFS info (device loop3): enabling ssd optimizations [ 303.227026][ T6379] BTRFS info (device loop3): turning on async discard [ 303.234024][ T6379] BTRFS info (device loop3): enabling free space tree [ 303.271341][ T29] audit: type=1800 audit(1779949344.128:5): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.131" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 303.827779][ T5594] BTRFS info (device loop3): last unmount of filesystem c6c85623-db7b-4a1f-b519-947d40ce0bbb [ 303.964864][ T6397] loop4: detected capacity change from 0 to 1024 [ 304.088938][ T6397] hfsplus: Unknown parameter 'f_u' [ 305.245009][ T5701] team0 (unregistering): Port device team_slave_1 removed [ 305.389734][ T5701] team0 (unregistering): Port device team_slave_0 removed [ 305.501585][ T6408] xt_connbytes: Forcing CT accounting to be enabled [ 306.381688][ T5230] 8021q: adding VLAN 0 to HW filter on device eth1 [ 310.571604][ T6184] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.604571][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.629198][ T6184] bridge_slave_0: entered allmulticast mode [ 310.686946][ T6184] bridge_slave_0: entered promiscuous mode [ 310.914875][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.944590][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.976655][ T6184] bridge_slave_1: entered allmulticast mode [ 311.021723][ T6184] bridge_slave_1: entered promiscuous mode [ 311.831648][ T6184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.019814][ T6440] loop0: detected capacity change from 0 to 32768 [ 312.032314][ T6440] BTRFS info: device /dev/loop0 (7:0) using temp-fsid d68351fa-5e6e-47aa-9065-304c99417b21 [ 312.042810][ T6440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.142 (6440) [ 312.075283][ T6440] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.088890][ T6440] BTRFS info (device loop0): using sha256 checksum algorithm [ 312.200867][ T6440] BTRFS info (device loop0): setting nodatasum [ 312.207702][ T6440] BTRFS info (device loop0): enabling ssd optimizations [ 312.214971][ T6440] BTRFS info (device loop0): turning on async discard [ 312.221892][ T6440] BTRFS info (device loop0): enabling free space tree [ 312.278435][ T29] audit: type=1800 audit(1779949353.138:6): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.142" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 312.343123][ T6184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.533055][ T6408] Cannot find set identified by id 0 to match [ 312.805534][ T5579] BTRFS info (device loop0): last unmount of filesystem d68351fa-5e6e-47aa-9065-304c99417b21 [ 312.938371][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.951161][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.965356][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.978611][ T5591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.036669][ T5591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.978191][ T6184] team0: Port device team_slave_0 added [ 314.017868][ T6184] team0: Port device team_slave_1 added [ 314.514556][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.570692][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.818963][ T6184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.968539][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.171312][ T5591] Bluetooth: hci1: command tx timeout [ 315.379363][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.407718][ T6184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.990928][ T6184] hsr_slave_0: entered promiscuous mode [ 316.000863][ T6184] hsr_slave_1: entered promiscuous mode [ 316.090316][ T6184] debugfs: 'hsr0' already exists in 'hsr' [ 316.103002][ T6184] Cannot create hsr debugfs directory [ 316.704904][ T5230] 8021q: adding VLAN 0 to HW filter on device eth2 [ 317.303913][ T5591] Bluetooth: hci1: command tx timeout [ 319.373620][ T5591] Bluetooth: hci1: command tx timeout [ 321.452749][ T5591] Bluetooth: hci1: command tx timeout [ 321.717024][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.723714][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.190610][ T6184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 323.411731][ T6184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.577017][ T6184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 324.086836][ T6507] loop0: detected capacity change from 0 to 32768 [ 324.207477][ T6507] BTRFS info: device /dev/loop0 (7:0) using temp-fsid ea7d7f9b-8271-41c0-92fd-4e1d76d54953 [ 324.217960][ T6507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.151 (6507) [ 324.448133][ T6507] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 324.459357][ T6507] BTRFS info (device loop0): using sha256 checksum algorithm [ 324.702421][ T6519] xt_connbytes: Forcing CT accounting to be enabled [ 324.937713][ T6184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.120474][ T6184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.818644][ T6507] BTRFS info (device loop0): setting nodatasum [ 325.825161][ T6507] BTRFS info (device loop0): enabling ssd optimizations [ 325.832251][ T6507] BTRFS info (device loop0): turning on async discard [ 325.839334][ T6507] BTRFS info (device loop0): enabling free space tree [ 326.999742][ T5579] BTRFS info (device loop0): last unmount of filesystem ea7d7f9b-8271-41c0-92fd-4e1d76d54953 [ 327.016190][ T6184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.494126][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.503714][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 328.517794][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 328.535444][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 328.547128][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 328.593940][ T6542] capability: warning: `syz.4.155' uses deprecated v2 capabilities in a way that may be insecure [ 330.523564][ T6519] Cannot find set identified by id 0 to match [ 330.573161][ T48] Bluetooth: hci6: command tx timeout [ 331.277892][ T6353] Set syz1 is full, maxelem 65536 reached [ 332.713204][ T48] Bluetooth: hci6: command tx timeout [ 334.919668][ T6584] loop3: detected capacity change from 0 to 32768 [ 334.963734][ T48] Bluetooth: hci6: command tx timeout [ 335.336862][ T6584] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 457874e9-5cad-45ff-a0e8-2edb91737114 [ 335.347390][ T6584] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.162 (6584) [ 336.326151][ T6584] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 336.337014][ T6584] BTRFS info (device loop3): using sha256 checksum algorithm [ 336.481373][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.580984][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.672091][ T6459] bridge_slave_0: entered allmulticast mode [ 336.788515][ T6459] bridge_slave_0: entered promiscuous mode [ 336.975202][ T48] Bluetooth: hci6: command tx timeout [ 337.085303][ T6584] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 337.086246][ T6584] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 337.096498][ T6584] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 337.107001][ T6584] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 337.116699][ T6584] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 337.126413][ T6584] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 337.136104][ T6584] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 337.146271][ T6584] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 337.155845][ T6584] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 337.166148][ T6584] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 337.182180][ T6584] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 337.193706][ T6584] BTRFS error (device loop3): open_ctree failed: -12 [ 337.431121][ T5230] 8021q: adding VLAN 0 to HW filter on device eth3 [ 337.530314][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.597116][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.651814][ T6459] bridge_slave_1: entered allmulticast mode [ 337.713152][ T6459] bridge_slave_1: entered promiscuous mode [ 337.888428][ T6611] loop0: detected capacity change from 0 to 64 [ 337.966027][ T6612] loop4: detected capacity change from 0 to 128 [ 338.032643][ T6612] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 338.168804][ T6611] hfs: request for non-existent node 131072 in B*Tree [ 338.211432][ T6611] hfs: request for non-existent node 131072 in B*Tree [ 338.264363][ T6613] hfs: request for non-existent node 131072 in B*Tree [ 338.308793][ T6613] hfs: request for non-existent node 131072 in B*Tree [ 338.358532][ T6611] hfs: request for non-existent node 131072 in B*Tree [ 338.397832][ T6611] hfs: request for non-existent node 131072 in B*Tree [ 338.458547][ T6613] hfs: request for non-existent node 131072 in B*Tree [ 338.495811][ T6613] hfs: request for non-existent node 131072 in B*Tree [ 339.203066][ T6619] xt_TCPMSS: Only works on TCP SYN packets [ 339.454631][ T6611] hfs: request for non-existent node 131072 in B*Tree [ 340.469846][ T6459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.665171][ T6611] hfs: request for non-existent node 131072 in B*Tree [ 342.286690][ T6459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.764554][ T5900] bridge_slave_1: left allmulticast mode [ 342.791961][ T5900] bridge_slave_1: left promiscuous mode [ 342.828538][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.936422][ T5900] bridge_slave_0: left allmulticast mode [ 342.967187][ T5900] bridge_slave_0: left promiscuous mode [ 343.016176][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.118495][ T6626] overlayfs: failed to resolve './file0': -2 [ 344.420205][ T6632] loop3: detected capacity change from 0 to 32768 [ 344.431159][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 344.439196][ T5900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.484781][ T5900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.515845][ T5900] bond0 (unregistering): Released all slaves [ 344.604563][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 344.625642][ T24] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 344.644393][ T24] usb 5-1: config 0 has no interface number 0 [ 344.683264][ T24] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 344.741465][ T24] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 344.814300][ T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 344.846738][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.886927][ T24] usb 5-1: Product: syz [ 344.917044][ T24] usb 5-1: Manufacturer: syz [ 344.925039][ T6459] team0: Port device team_slave_0 added [ 344.961188][ T24] usb 5-1: SerialNumber: syz [ 344.977358][ T6632] BTRFS info: device /dev/loop3 (7:3) using temp-fsid b8fedaba-073e-4ffa-8143-9e9b07e11e0b [ 344.992793][ T6632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.173 (6632) [ 345.921024][ T6632] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 345.922199][ T24] usb 5-1: config 0 descriptor?? [ 345.931695][ T6632] BTRFS info (device loop3): using sha256 checksum algorithm [ 345.961516][ T6630] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 346.118176][ T6630] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 346.133651][ T6459] team0: Port device team_slave_1 added [ 346.461929][ T5900] hsr_slave_0: left promiscuous mode [ 346.519974][ T5900] hsr_slave_1: left promiscuous mode [ 346.554594][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.626363][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.671209][ T6632] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 346.671990][ T6632] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 346.681860][ T6632] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 346.691739][ T6632] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 346.705781][ T6632] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 346.722168][ T6632] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 346.731780][ T6632] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 346.742066][ T6632] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 346.752639][ T6632] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 346.765609][ T6632] BTRFS error (device loop3): open_ctree failed: -12 [ 347.016011][ T24] asix 5-1:0.34: probe with driver asix failed with error -71 [ 347.059798][ T24] usb 5-1: USB disconnect, device number 2 [ 347.438797][ T6657] syz.3.175 uses obsolete (PF_INET,SOCK_PACKET) [ 349.200007][ T5900] team0 (unregistering): Port device team_slave_1 removed [ 349.376835][ T5900] team0 (unregistering): Port device team_slave_0 removed [ 350.872277][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.872348][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.880885][ T6459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.931087][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.931153][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.931284][ T6459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.523355][ T6688] loop0: detected capacity change from 0 to 32768 [ 351.533529][ T48] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 351.542432][ T48] Bluetooth: hci0: Injecting HCI hardware error event [ 351.544601][ T6688] BTRFS info: device /dev/loop0 (7:0) using temp-fsid bb1670d4-5bc2-4c03-b76a-2722d085bb9b [ 351.550313][ T48] Bluetooth: hci0: hardware error 0x00 [ 351.560715][ T6688] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.183 (6688) [ 351.609610][ T6688] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.622702][ T6688] BTRFS info (device loop0): using sha256 checksum algorithm [ 351.811174][ T6688] BTRFS info (device loop0): setting nodatasum [ 351.820802][ T6688] BTRFS info (device loop0): enabling ssd optimizations [ 351.828073][ T6688] BTRFS info (device loop0): turning on async discard [ 351.835141][ T6688] BTRFS info (device loop0): enabling free space tree [ 352.483119][ T6459] hsr_slave_0: entered promiscuous mode [ 352.586168][ T6459] hsr_slave_1: entered promiscuous mode [ 352.652433][ T6459] debugfs: 'hsr0' already exists in 'hsr' [ 352.658576][ T6459] Cannot create hsr debugfs directory [ 352.701448][ T29] audit: type=1800 audit(1779949393.558:7): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.183" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 352.960381][ T5230] 8021q: adding VLAN 0 to HW filter on device eth4 [ 353.334628][ T5900] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.696389][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 354.667394][ T5579] BTRFS info (device loop0): last unmount of filesystem bb1670d4-5bc2-4c03-b76a-2722d085bb9b [ 355.570161][ T5900] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.077831][ T5900] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.197172][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 357.175176][ T5900] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.838199][ T6755] loop3: detected capacity change from 0 to 32768 [ 358.849318][ T6755] BTRFS info: device /dev/loop3 (7:3) using temp-fsid b5368f9e-66ee-48fb-81c7-0c420004b206 [ 358.859833][ T6755] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.194 (6755) [ 358.911601][ T6755] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.922063][ T6755] BTRFS info (device loop3): using sha256 checksum algorithm [ 359.064692][ T6755] BTRFS info (device loop3): setting nodatasum [ 359.071053][ T6755] BTRFS info (device loop3): enabling ssd optimizations [ 359.081020][ T6755] BTRFS info (device loop3): turning on async discard [ 359.091245][ T6755] BTRFS info (device loop3): enabling free space tree [ 359.980006][ T29] audit: type=1800 audit(1779949400.838:8): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.194" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 360.169816][ T5900] bridge_slave_1: left allmulticast mode [ 360.211799][ T5900] bridge_slave_1: left promiscuous mode [ 360.248853][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.335090][ T5900] bridge_slave_0: left allmulticast mode [ 360.366396][ T5900] bridge_slave_0: left promiscuous mode [ 360.390870][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.139394][ T6801] loop4: detected capacity change from 0 to 512 [ 361.318604][ T6801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.394586][ T6801] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.570184][ T6801] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.201: iget: bad i_size value: 2533274857506816 [ 361.640830][ T5594] BTRFS info (device loop3): last unmount of filesystem b5368f9e-66ee-48fb-81c7-0c420004b206 [ 361.770779][ T5900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.866238][ T5900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.921761][ T5900] bond0 (unregistering): Released all slaves [ 362.031148][ T5588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.051972][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 363.027775][ T6821] loop0: detected capacity change from 0 to 256 [ 363.030683][ T6821] ======================================================= [ 363.030683][ T6821] WARNING: The mand mount option has been deprecated and [ 363.030683][ T6821] and is ignored by this kernel. Remove the mand [ 363.030683][ T6821] option from the mount to silence this warning. [ 363.030683][ T6821] ======================================================= [ 363.168154][ T6821] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 363.264522][ T6459] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 363.372319][ T6459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.385199][ T6459] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 363.506923][ T6459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.518459][ T6459] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 363.586203][ T6459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.649398][ T6459] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 363.764871][ T6459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.473569][ T5900] hsr_slave_0: left promiscuous mode [ 364.504993][ T5900] hsr_slave_1: left promiscuous mode [ 364.556650][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.602969][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.648777][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.677282][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.757708][ T5900] veth1_macvtap: left promiscuous mode [ 364.782154][ T5900] veth0_macvtap: left promiscuous mode [ 364.799216][ T5900] veth1_vlan: left promiscuous mode [ 364.829876][ T5900] veth0_vlan: left promiscuous mode [ 365.542707][ T5682] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 365.721523][ T5682] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.764820][ T5682] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 365.810235][ T5682] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 365.853381][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.911427][ T5682] usb 1-1: config 0 descriptor?? [ 365.941282][ T6843] loop3: detected capacity change from 0 to 32768 [ 365.986121][ T6843] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 1ee81674-5a7b-493d-bda0-70693fe3af70 [ 365.997397][ T6843] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.210 (6843) [ 366.010410][ T5682] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 366.025278][ T6843] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 366.035766][ T6843] BTRFS info (device loop3): using sha256 checksum algorithm [ 366.065258][ T5682] dvb-usb: bulk message failed: -22 (3/0) [ 366.127853][ T6843] BTRFS info (device loop3): setting nodatasum [ 366.132171][ T5682] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 366.134342][ T6843] BTRFS info (device loop3): enabling ssd optimizations [ 366.134435][ T6843] BTRFS info (device loop3): turning on async discard [ 366.162087][ T6843] BTRFS info (device loop3): enabling free space tree [ 366.187292][ T6845] dvb-usb: bulk message failed: -22 (2/0) [ 366.219662][ T5682] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 366.253238][ T5682] usb 1-1: media controller created [ 366.346777][ T5682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.536831][ T5682] dvb-usb: bulk message failed: -22 (6/0) [ 366.606417][ T5682] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 366.729434][ T5682] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 366.877063][ T5682] dvb-usb: schedule remote query interval to 150 msecs. [ 366.937171][ T5682] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 366.937978][ T29] audit: type=1800 audit(1779949407.798:9): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.210" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 367.031508][ T5682] usb 1-1: USB disconnect, device number 3 [ 367.272968][ T5682] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 367.983712][ T5900] team0 (unregistering): Port device team_slave_1 removed [ 368.093677][ T5900] team0 (unregistering): Port device team_slave_0 removed [ 370.002364][ T5594] BTRFS info (device loop3): last unmount of filesystem 1ee81674-5a7b-493d-bda0-70693fe3af70 [ 370.311823][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.312171][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.317938][ T6539] bridge_slave_0: entered allmulticast mode [ 370.325630][ T6539] bridge_slave_0: entered promiscuous mode [ 370.426996][ T5230] 8021q: adding VLAN 0 to HW filter on device eth5 [ 370.431446][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 370.511378][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.511714][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.512243][ T6539] bridge_slave_1: entered allmulticast mode [ 370.543863][ T6539] bridge_slave_1: entered promiscuous mode [ 370.805926][ T6877] loop3: detected capacity change from 0 to 4096 [ 370.855834][ T6877] EXT4-fs: inline encryption not supported [ 370.855949][ T6877] EXT4-fs: Ignoring removed mblk_io_submit option [ 370.856058][ T6877] EXT4-fs: Ignoring removed bh option [ 370.895236][ T6877] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002] [ 370.895772][ T6877] System zones: 0-5 [ 370.953045][ T6877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.018482][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.135759][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.549531][ T6539] team0: Port device team_slave_0 added [ 373.749305][ T6539] team0: Port device team_slave_1 added [ 374.175409][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.219378][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.704751][ T5594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.900067][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.121759][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.202016][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.258567][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.042861][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'. [ 377.055936][ T6898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.221'. [ 378.558860][ T6539] hsr_slave_0: entered promiscuous mode [ 378.778089][ T6539] hsr_slave_1: entered promiscuous mode [ 378.788909][ T6539] debugfs: 'hsr0' already exists in 'hsr' [ 378.796464][ T6539] Cannot create hsr debugfs directory [ 379.178264][ T5591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.191619][ T5591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.205555][ T5591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.224464][ T5591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.239132][ T5591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.156551][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 381.213470][ T5682] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 381.293293][ T5591] Bluetooth: hci3: command tx timeout [ 381.378982][ T5682] usb 4-1: Using ep0 maxpacket: 16 [ 381.412398][ T5682] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 381.413069][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 381.437179][ T5682] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 381.437318][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.437433][ T5682] usb 4-1: Product: syz [ 381.437526][ T5682] usb 4-1: Manufacturer: syz [ 381.437619][ T5682] usb 4-1: SerialNumber: syz [ 381.480469][ T5682] usb 4-1: config 0 descriptor?? [ 381.546242][ T5682] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 381.546401][ T5682] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 382.169324][ T5682] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 382.186881][ T5682] em28xx 4-1:0.0: Config register raw data: 0x41 [ 382.207474][ T6539] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.301168][ T6539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.347386][ T6539] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 382.397248][ T5682] usb 4-1: USB disconnect, device number 4 [ 382.430024][ T5682] em28xx 4-1:0.0: Disconnecting em28xx [ 382.472951][ T6539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.505650][ T5682] em28xx 4-1:0.0: Freeing device [ 382.517989][ T6539] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 382.652967][ T6539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.716619][ T6539] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 382.800352][ T6539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.157015][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.167621][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.403262][ T5591] Bluetooth: hci3: command tx timeout [ 386.024287][ T5591] Bluetooth: hci3: command tx timeout [ 388.092904][ T5591] Bluetooth: hci3: command tx timeout [ 392.143736][ T6979] bridge1: entered promiscuous mode [ 392.193170][ T6979] bridge1: entered allmulticast mode [ 392.560087][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.588375][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.604457][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.626150][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.643223][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.228418][ T5682] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 393.453394][ T5682] usb 5-1: Using ep0 maxpacket: 16 [ 393.481131][ T5682] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 393.481279][ T5682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 393.523438][ T5682] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 393.523582][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.523698][ T5682] usb 5-1: Product: syz [ 393.523790][ T5682] usb 5-1: Manufacturer: syz [ 393.523883][ T5682] usb 5-1: SerialNumber: syz [ 393.623355][ T5682] usb 5-1: config 0 descriptor?? [ 393.701011][ T5682] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 393.701167][ T5682] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 393.780899][ T5900] bridge_slave_1: left allmulticast mode [ 393.780998][ T5900] bridge_slave_1: left promiscuous mode [ 393.781931][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.819588][ T5900] bridge_slave_0: left allmulticast mode [ 393.819683][ T5900] bridge_slave_0: left promiscuous mode [ 393.820602][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.355458][ T5682] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 394.365878][ T5682] em28xx 5-1:0.0: Config register raw data: 0x41 [ 394.594410][ T5682] usb 5-1: USB disconnect, device number 3 [ 394.596284][ T5682] em28xx 5-1:0.0: Disconnecting em28xx [ 394.660162][ T5682] em28xx 5-1:0.0: Freeing device [ 394.745802][ T48] Bluetooth: hci1: command tx timeout [ 395.396139][ T5900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.488455][ T5900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.680295][ T5900] bond0 (unregistering): Released all slaves [ 397.242939][ T48] Bluetooth: hci1: command tx timeout [ 398.712281][ T5900] hsr_slave_0: left promiscuous mode [ 398.773811][ T5900] hsr_slave_1: left promiscuous mode [ 398.792433][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.804341][ T7035] loop3: detected capacity change from 0 to 512 [ 398.848438][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.292936][ T48] Bluetooth: hci1: command tx timeout [ 401.204290][ T5900] team0 (unregistering): Port device team_slave_1 removed [ 401.255352][ T5900] team0 (unregistering): Port device team_slave_0 removed [ 401.373538][ T48] Bluetooth: hci1: command tx timeout [ 402.524798][ T5230] 8021q: adding VLAN 0 to HW filter on device eth9 [ 402.999860][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.000193][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.000595][ T6907] bridge_slave_0: entered allmulticast mode [ 403.004374][ T6907] bridge_slave_0: entered promiscuous mode [ 403.014053][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.014398][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.015012][ T6907] bridge_slave_1: entered allmulticast mode [ 403.029083][ T6907] bridge_slave_1: entered promiscuous mode [ 403.570809][ T6907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.573263][ T5671] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 403.782987][ T6907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.799734][ T5671] usb 4-1: Using ep0 maxpacket: 16 [ 403.827642][ T5671] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 403.880624][ T5671] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 403.934660][ T5671] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 403.956011][ T7074] overlayfs: statfs failed on './file0' [ 403.976020][ T5671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.006728][ T5671] usb 4-1: Product: syz [ 404.021661][ T5671] usb 4-1: Manufacturer: syz [ 404.056814][ T5671] usb 4-1: SerialNumber: syz [ 404.115506][ T5671] usb 4-1: config 0 descriptor?? [ 404.161780][ T5671] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 404.190322][ T5671] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 404.367571][ T6907] team0: Port device team_slave_0 added [ 404.584638][ T6907] team0: Port device team_slave_1 added [ 405.364955][ T7085] loop4: detected capacity change from 0 to 32768 [ 405.383654][ T7085] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 74f60cb2-729b-479c-95aa-be2a6624a4d0 [ 405.395371][ T7085] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.255 (7085) [ 405.410691][ T5671] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 405.425431][ T5671] em28xx 4-1:0.0: Config register raw data: 0x41 [ 405.452019][ T7085] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 405.462710][ T7085] BTRFS info (device loop4): using sha256 checksum algorithm [ 405.487174][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.531300][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.574969][ T6907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.637802][ T40] usb 4-1: USB disconnect, device number 5 [ 405.657913][ T40] em28xx 4-1:0.0: Disconnecting em28xx [ 405.667541][ T7085] BTRFS info (device loop4): setting nodatasum [ 405.674108][ T7085] BTRFS info (device loop4): enabling ssd optimizations [ 405.685362][ T7085] BTRFS info (device loop4): turning on async discard [ 405.692306][ T7085] BTRFS info (device loop4): enabling free space tree [ 405.748765][ T40] em28xx 4-1:0.0: Freeing device [ 406.238173][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.301772][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.376527][ T6907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.650822][ T29] audit: type=1800 audit(1779949447.408:10): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.255" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 410.111696][ T5588] BTRFS info (device loop4): last unmount of filesystem 74f60cb2-729b-479c-95aa-be2a6624a4d0 [ 410.513239][ T6907] hsr_slave_0: entered promiscuous mode [ 410.579796][ T6907] hsr_slave_1: entered promiscuous mode [ 410.635381][ T6907] debugfs: 'hsr0' already exists in 'hsr' [ 410.660566][ T6907] Cannot create hsr debugfs directory [ 410.769177][ T5900] bridge_slave_1: left allmulticast mode [ 410.791593][ T7121] loop3: detected capacity change from 0 to 512 [ 410.792157][ T5900] bridge_slave_1: left promiscuous mode [ 410.837339][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.901026][ T5900] bridge_slave_0: left allmulticast mode [ 410.940212][ T5900] bridge_slave_0: left promiscuous mode [ 410.948316][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.970606][ T7121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 410.980117][ T7121] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.187647][ T7121] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 411.194265][ T7121] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 411.194498][ T7121] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.261: Failed to acquire dquot type 0 [ 411.198016][ T7121] overlayfs: failed to set uuid (/file0, err=-117); falling back to uuid=null. [ 411.199479][ T7121] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 411.202161][ T7121] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 411.202365][ T7121] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.261: Failed to acquire dquot type 0 [ 411.205429][ T7121] overlayfs: failed to verify upper root origin [ 411.515956][ T5594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 412.473126][ T5900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.531334][ T5900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.062025][ T5900] bond0 (unregistering): Released all slaves [ 414.121129][ T5900] hsr_slave_0: left promiscuous mode [ 414.196989][ T5900] hsr_slave_1: left promiscuous mode [ 414.238036][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.940849][ T7150] loop4: detected capacity change from 0 to 32768 [ 414.957073][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.982307][ T7150] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 358b3324-f3d2-401e-bbe4-f08d8b186751 [ 414.992858][ T7150] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.268 (7150) [ 415.022176][ T7150] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 415.033097][ T7150] BTRFS info (device loop4): using sha256 checksum algorithm [ 415.102742][ T40] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 415.294218][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 415.367698][ T40] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 415.406164][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 415.487829][ T40] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 415.531203][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.561031][ T40] usb 1-1: Product: syz [ 415.580974][ T40] usb 1-1: Manufacturer: syz [ 415.631159][ T40] usb 1-1: SerialNumber: syz [ 415.681397][ T40] usb 1-1: config 0 descriptor?? [ 415.778105][ T40] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 415.844083][ T40] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 416.030020][ T7150] BTRFS info (device loop4): setting nodatasum [ 416.036855][ T7150] BTRFS info (device loop4): enabling ssd optimizations [ 416.046714][ T7150] BTRFS info (device loop4): turning on async discard [ 416.053903][ T7150] BTRFS info (device loop4): enabling free space tree [ 417.110305][ T40] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 417.175164][ T40] em28xx 1-1:0.0: Config register raw data: 0x7a [ 418.134650][ T5900] team0 (unregistering): Port device team_slave_1 removed [ 418.148140][ T40] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 418.177111][ T40] em28xx 1-1:0.0: No AC97 audio processor [ 419.155953][ T40] usb 1-1: USB disconnect, device number 4 [ 419.997884][ T5900] team0 (unregistering): Port device team_slave_0 removed [ 420.704995][ T5588] BTRFS info (device loop4): last unmount of filesystem 358b3324-f3d2-401e-bbe4-f08d8b186751 [ 422.351879][ T7181] loop0: detected capacity change from 0 to 1024 [ 422.612770][ T7181] hfsplus: invalid catalog max_key_len 0 [ 422.622839][ T7181] hfsplus: failed to load catalog file [ 426.100249][ T6907] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 426.222017][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.269138][ T6907] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 426.360867][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.700034][ T6907] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 426.799119][ T7203] overlayfs: failed to get inode (-116) [ 426.819413][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.834654][ T7203] overlayfs: failed to get inode (-116) [ 426.856590][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.903853][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.949569][ T6987] bridge_slave_0: entered allmulticast mode [ 427.001720][ T6987] bridge_slave_0: entered promiscuous mode [ 427.047505][ T6907] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 427.179105][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.266194][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.311726][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.355376][ T6987] bridge_slave_1: entered allmulticast mode [ 427.466611][ T6987] bridge_slave_1: entered promiscuous mode [ 427.911439][ T7208] loop0: detected capacity change from 0 to 32768 [ 427.922797][ T7208] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 116806de-ad05-4662-9779-711f2c349996 [ 427.933176][ T7208] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.279 (7208) [ 427.986142][ T7208] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 427.996551][ T7208] BTRFS info (device loop0): using sha256 checksum algorithm [ 428.120608][ T7208] BTRFS info (device loop0): setting nodatasum [ 428.127149][ T7208] BTRFS info (device loop0): enabling ssd optimizations [ 428.134481][ T7208] BTRFS info (device loop0): turning on async discard [ 428.141428][ T7208] BTRFS info (device loop0): enabling free space tree [ 428.447999][ T7230] loop3: detected capacity change from 0 to 256 [ 428.869820][ T6987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.100403][ T7230] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 429.167951][ T6987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.718081][ T6987] team0: Port device team_slave_0 added [ 429.829969][ T6987] team0: Port device team_slave_1 added [ 430.249784][ T7238] loop3: detected capacity change from 0 to 1024 [ 430.439615][ T7238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 430.546710][ T7238] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.717405][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.088549][ T5579] BTRFS info (device loop0): last unmount of filesystem 116806de-ad05-4662-9779-711f2c349996 [ 431.357718][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.386026][ T6987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.430118][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.531231][ T7249] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.282: bg 0: block 112: padding at end of block bitmap is not set [ 431.712293][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.868090][ T7249] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 431.880936][ T7249] EXT4-fs (loop3): This should not happen!! Data will be lost [ 431.880936][ T7249] [ 431.891145][ T7249] EXT4-fs (loop3): Total free blocks count 0 [ 431.898519][ T7249] EXT4-fs (loop3): Free/Dirty block details [ 431.904698][ T7249] EXT4-fs (loop3): free_blocks=0 [ 431.909777][ T7249] EXT4-fs (loop3): dirty_blocks=64 [ 431.915149][ T7249] EXT4-fs (loop3): Block reservation details [ 431.921259][ T7249] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 432.003015][ T6987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.031963][ T6987] hsr_slave_0: entered promiscuous mode [ 433.135854][ T6987] hsr_slave_1: entered promiscuous mode [ 433.219931][ T6987] debugfs: 'hsr0' already exists in 'hsr' [ 433.337111][ T6987] Cannot create hsr debugfs directory [ 433.705406][ T5594] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 433.722218][ T5594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 434.161940][ T7264] loop3: detected capacity change from 0 to 128 [ 434.247417][ T5230] 8021q: adding VLAN 0 to HW filter on device eth10 [ 438.208125][ T4875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 438.217652][ T4875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 438.235127][ T4875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 438.256539][ T4875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 438.269489][ T4875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 438.624887][ T7279] loop3: detected capacity change from 0 to 256 [ 438.753825][ T7279] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 438.809598][ T7281] netlink: 'syz.4.291': attribute type 46 has an invalid length. [ 440.343056][ T4875] Bluetooth: hci5: command tx timeout [ 440.491612][ T7293] loop0: detected capacity change from 0 to 1024 [ 441.143840][ T7293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 441.261696][ T7293] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.493121][ T4875] Bluetooth: hci5: command tx timeout [ 442.805181][ T29] audit: type=1800 audit(1779949483.658:11): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.295" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 443.577462][ T5579] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 443.825397][ T6987] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 443.936136][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.118739][ T6987] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 444.208101][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.222429][ T6987] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 444.567700][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.602254][ T6987] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 444.612039][ T48] Bluetooth: hci5: command tx timeout [ 444.619955][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.620401][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.054195][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.667733][ T4875] Bluetooth: hci5: command tx timeout [ 447.728531][ T5774] bridge_slave_1: left allmulticast mode [ 447.761867][ T5774] bridge_slave_1: left promiscuous mode [ 447.803668][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.906115][ T5774] bridge_slave_0: left allmulticast mode [ 447.940746][ T5774] bridge_slave_0: left promiscuous mode [ 447.975326][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.757736][ T5774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.920374][ T5774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.185460][ T5774] bond0 (unregistering): Released all slaves [ 453.475632][ T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 453.532999][ T7351] loop3: detected capacity change from 0 to 256 [ 453.664616][ T7351] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 453.702065][ T5230] 8021q: adding VLAN 0 to HW filter on device eth11 [ 453.703487][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 453.817127][ T11] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 453.925523][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 454.067125][ T11] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 454.178352][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.258442][ T11] usb 5-1: Product: syz [ 454.328931][ T11] usb 5-1: Manufacturer: syz [ 454.390557][ T11] usb 5-1: SerialNumber: syz [ 454.518729][ T11] usb 5-1: config 0 descriptor?? [ 454.700546][ T11] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 454.769152][ T11] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 455.355284][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 455.373137][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 455.393441][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 455.430244][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 455.452314][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 455.469138][ T11] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 455.535911][ T11] em28xx 5-1:0.0: Config register raw data: 0x7a [ 455.582137][ T11] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 455.618457][ T11] em28xx 5-1:0.0: No AC97 audio processor [ 455.679064][ T5774] hsr_slave_0: left promiscuous mode [ 455.750576][ T5774] hsr_slave_1: left promiscuous mode [ 455.781447][ T11] usb 5-1: USB disconnect, device number 4 [ 455.807510][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.871463][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.534177][ T4875] Bluetooth: hci3: command tx timeout [ 457.742771][ T5774] team0 (unregistering): Port device team_slave_1 removed [ 457.897639][ T5774] team0 (unregistering): Port device team_slave_0 removed [ 459.618698][ T4875] Bluetooth: hci3: command tx timeout [ 461.693787][ T4875] Bluetooth: hci3: command tx timeout [ 463.783302][ T4875] Bluetooth: hci3: command tx timeout [ 465.155561][ T7406] loop3: detected capacity change from 0 to 256 [ 465.305743][ T7406] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 466.387699][ T5774] bridge_slave_1: left allmulticast mode [ 466.576871][ T5774] bridge_slave_1: left promiscuous mode [ 466.654494][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.820893][ T5774] bridge_slave_0: left allmulticast mode [ 466.877876][ T5774] bridge_slave_0: left promiscuous mode [ 466.927539][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.274793][ T11] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 467.345861][ T7422] loop4: detected capacity change from 0 to 1024 [ 467.463128][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 467.491150][ T7422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 467.491866][ T11] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 467.556388][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 467.565383][ T7422] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.576472][ T11] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 467.600189][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.618361][ T11] usb 1-1: Product: syz [ 467.623084][ T11] usb 1-1: Manufacturer: syz [ 467.627926][ T11] usb 1-1: SerialNumber: syz [ 467.644088][ T11] usb 1-1: config 0 descriptor?? [ 467.698356][ T11] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 467.717422][ T11] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 467.747334][ T5774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.787855][ T5774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.852201][ T5774] bond0 (unregistering): Released all slaves [ 468.301915][ T11] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 468.312388][ T11] em28xx 1-1:0.0: Config register raw data: 0x7a [ 468.337051][ T7425] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 468.373170][ T11] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 468.485568][ T7436] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.315: bg 0: block 112: padding at end of block bitmap is not set [ 468.887786][ T5774] hsr_slave_0: left promiscuous mode [ 468.919486][ T7436] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 468.932842][ T7436] EXT4-fs (loop4): This should not happen!! Data will be lost [ 468.932842][ T7436] [ 468.942782][ T7436] EXT4-fs (loop4): Total free blocks count 0 [ 468.948919][ T7436] EXT4-fs (loop4): Free/Dirty block details [ 468.955058][ T7436] EXT4-fs (loop4): free_blocks=0 [ 468.960128][ T7436] EXT4-fs (loop4): dirty_blocks=64 [ 468.966733][ T7436] EXT4-fs (loop4): Block reservation details [ 468.973044][ T7436] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 468.987093][ T5774] hsr_slave_1: left promiscuous mode [ 469.014947][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.048024][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.361196][ T11] em28xx 1-1:0.0: No AC97 audio processor [ 469.481530][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 470.357080][ T11] usb 1-1: USB disconnect, device number 5 [ 470.567200][ T5588] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 470.623546][ T5588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 471.314521][ T5774] team0 (unregistering): Port device team_slave_1 removed [ 471.439086][ T5774] team0 (unregistering): Port device team_slave_0 removed [ 471.802925][ T5230] 8021q: adding VLAN 0 to HW filter on device eth12 [ 472.148771][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.172155][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.207510][ T7271] bridge_slave_0: entered allmulticast mode [ 472.248826][ T7271] bridge_slave_0: entered promiscuous mode [ 472.278555][ T7464] loop2: detected capacity change from 0 to 7 [ 472.301551][ T7464] Dev loop2: unable to read RDB block 7 [ 472.319467][ T7464] loop2: unable to read partition table [ 472.349402][ T7464] loop2: partition table beyond EOD, truncated [ 472.367130][ T7464] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 472.392878][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.413336][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.432866][ T7271] bridge_slave_1: entered allmulticast mode [ 472.451861][ T7271] bridge_slave_1: entered promiscuous mode [ 473.660368][ T7271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.662052][ T7473] loop3: detected capacity change from 0 to 256 [ 473.759207][ T7271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.796906][ T7473] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 474.116311][ T7271] team0: Port device team_slave_0 added [ 474.326181][ T7271] team0: Port device team_slave_1 added [ 474.419676][ T7457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.584259][ T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 474.747971][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.791670][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.857076][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 474.894675][ T11] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 474.955506][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 474.991396][ T7271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.057281][ T11] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 475.089566][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.099230][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.139056][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.170466][ T11] usb 1-1: Product: syz [ 475.192315][ T11] usb 1-1: Manufacturer: syz [ 475.216067][ T11] usb 1-1: SerialNumber: syz [ 475.269483][ T7491] loop4: detected capacity change from 0 to 1024 [ 475.328238][ T11] usb 1-1: config 0 descriptor?? [ 475.339632][ T7271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.799485][ T7271] hsr_slave_0: entered promiscuous mode [ 475.847386][ T7491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 475.849201][ T11] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 475.884874][ T7491] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.912004][ T11] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 475.912096][ T7271] hsr_slave_1: entered promiscuous mode [ 475.968277][ T7271] debugfs: 'hsr0' already exists in 'hsr' [ 475.993669][ T7271] Cannot create hsr debugfs directory [ 476.245210][ T11] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 476.274494][ T11] em28xx 1-1:0.0: Config register raw data: 0x7a [ 476.300970][ T11] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 476.321783][ T11] em28xx 1-1:0.0: No AC97 audio processor [ 476.520763][ T11] usb 1-1: USB disconnect, device number 6 [ 476.810481][ T7503] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.328: bg 0: block 112: padding at end of block bitmap is not set [ 477.063220][ T7503] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 477.075852][ T7503] EXT4-fs (loop4): This should not happen!! Data will be lost [ 477.075852][ T7503] [ 477.085810][ T7503] EXT4-fs (loop4): Total free blocks count 0 [ 477.091926][ T7503] EXT4-fs (loop4): Free/Dirty block details [ 477.098014][ T7503] EXT4-fs (loop4): free_blocks=0 [ 477.103158][ T7503] EXT4-fs (loop4): dirty_blocks=64 [ 477.108401][ T7503] EXT4-fs (loop4): Block reservation details [ 477.116679][ T7503] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 478.953900][ T5588] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 479.192086][ T5588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 479.229222][ T7514] xt_CT: No such helper "pptp" [ 481.614004][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.649158][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.693824][ T7361] bridge_slave_0: entered allmulticast mode [ 481.733565][ T7361] bridge_slave_0: entered promiscuous mode [ 481.857677][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.892204][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.901395][ T7361] bridge_slave_1: entered allmulticast mode [ 481.923131][ T7532] loop3: detected capacity change from 0 to 256 [ 481.928306][ T7361] bridge_slave_1: entered promiscuous mode [ 482.054052][ T7532] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 482.771765][ T7361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.868155][ T7361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.170125][ T7361] team0: Port device team_slave_0 added [ 483.226437][ T7361] team0: Port device team_slave_1 added [ 483.346972][ T7542] loop4: detected capacity change from 0 to 1024 [ 483.528449][ T7542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 483.613117][ T7542] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.035868][ T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 484.283024][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 484.308947][ T11] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 484.354110][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 484.407758][ T11] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 484.448008][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.476285][ T11] usb 4-1: Product: syz [ 484.480116][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.497047][ T11] usb 4-1: Manufacturer: syz [ 484.510881][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.518269][ T11] usb 4-1: SerialNumber: syz [ 484.551622][ T7361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.609094][ T11] usb 4-1: config 0 descriptor?? [ 484.657216][ T11] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 484.666293][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.683138][ T11] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 484.689305][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.756686][ T7361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.287266][ T7361] hsr_slave_0: entered promiscuous mode [ 485.287805][ T11] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 485.304642][ T11] em28xx 4-1:0.0: Config register raw data: 0x7a [ 485.325090][ T11] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 485.338722][ T7361] hsr_slave_1: entered promiscuous mode [ 485.344945][ T11] em28xx 4-1:0.0: No AC97 audio processor [ 485.365259][ T7361] debugfs: 'hsr0' already exists in 'hsr' [ 485.385963][ T7361] Cannot create hsr debugfs directory [ 485.720391][ T11] usb 4-1: USB disconnect, device number 6 [ 485.825387][ T7356] udevd[7356]: setting mode of /dev/bus/usb/004/006 to 020664 failed: No such file or directory [ 485.924695][ T7356] udevd[7356]: setting owner of /dev/bus/usb/004/006 to uid=0, gid=0 failed: No such file or directory [ 486.024589][ T7271] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 486.149283][ T7271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.540412][ T7567] xt_CT: No such helper "pptp" [ 487.248431][ T7271] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.362164][ T7271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.449631][ T7271] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 487.883630][ T7547] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 488.744505][ T5588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 488.824851][ T7271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.123967][ T7271] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 489.235687][ T7271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.406024][ T7585] loop3: detected capacity change from 0 to 256 [ 489.463459][ T5671] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 489.506007][ T7585] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 489.665103][ T5671] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 489.718604][ T5671] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 489.755093][ T5671] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 489.814260][ T5671] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 489.851509][ T5671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.936771][ T5671] usb 5-1: config 0 descriptor?? [ 489.984577][ T7583] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 490.817327][ T5671] usbhid 5-1:0.0: can't add hid device: -71 [ 490.856246][ T5671] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 490.928445][ T5671] usb 5-1: USB disconnect, device number 5 [ 492.330117][ T5671] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 492.598944][ T7611] hub 8-0:1.0: USB hub found [ 492.607397][ T7611] hub 8-0:1.0: 1 port detected [ 492.645497][ T7611] loop0: detected capacity change from 0 to 16 [ 492.708413][ T7611] erofs (device loop0): mounted with root inode @ nid 36. [ 492.748783][ T5671] usb 5-1: Using ep0 maxpacket: 16 [ 492.768856][ T5671] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 493.427395][ T5671] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 493.470448][ T5671] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 493.500655][ T5671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.767100][ T7616] xt_CT: No such helper "pptp" [ 494.097181][ T7361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 494.254171][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.327409][ T7361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 494.449462][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.486269][ T5671] usb 5-1: Product: syz [ 494.503624][ T5671] usb 5-1: Manufacturer: syz [ 494.508481][ T5671] usb 5-1: SerialNumber: syz [ 495.492911][ T5671] usb 5-1: config 0 descriptor?? [ 495.892223][ T7361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 496.161388][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 496.245013][ T7361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 496.433008][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.533794][ T5671] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 497.516535][ T5671] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 497.974431][ T4875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.985321][ T4875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.993967][ T5671] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 498.003811][ T5671] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 498.068699][ T4875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.224089][ T4875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.275297][ T5671] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 498.329049][ T4875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.349780][ T5671] em28xx 5-1:0.0: No AC97 audio processor [ 498.420780][ T5671] usb 5-1: USB disconnect, device number 6 [ 498.430845][ T5671] em28xx 5-1:0.0: Disconnecting em28xx [ 498.485114][ T5671] em28xx 5-1:0.0: Freeing device [ 498.960986][ T7636] loop0: detected capacity change from 0 to 256 [ 499.136928][ T7636] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 500.096041][ T7361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.412937][ T4875] Bluetooth: hci1: command tx timeout [ 500.440144][ T7646] loop4: detected capacity change from 0 to 32768 [ 500.451445][ T7646] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 41a45f00-add5-4998-9229-db33b9a28a19 [ 500.461966][ T7646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.359 (7646) [ 500.491896][ T7646] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 500.507524][ T7646] BTRFS info (device loop4): using sha256 checksum algorithm [ 500.555161][ T7361] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.650085][ T7646] BTRFS info (device loop4): setting nodatasum [ 500.656661][ T7646] BTRFS info (device loop4): enabling ssd optimizations [ 500.657198][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.664041][ T7646] BTRFS info (device loop4): turning on async discard [ 500.671248][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.677961][ T7646] BTRFS info (device loop4): enabling free space tree [ 500.944183][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.951853][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.118398][ T7651] loop0: detected capacity change from 0 to 1764 [ 501.472943][ T29] audit: type=1800 audit(1779949542.328:12): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.359" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 502.503272][ T4875] Bluetooth: hci1: command tx timeout [ 503.016698][ T5588] BTRFS info (device loop4): last unmount of filesystem 41a45f00-add5-4998-9229-db33b9a28a19 [ 503.994905][ T40] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 504.194766][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 504.237793][ T40] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 504.286661][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.361594][ T40] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 504.402153][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.441129][ T40] usb 4-1: Product: syz [ 504.467982][ T40] usb 4-1: Manufacturer: syz [ 504.485239][ T40] usb 4-1: SerialNumber: syz [ 504.622961][ T4875] Bluetooth: hci1: command tx timeout [ 504.863220][ T40] usb 4-1: config 0 descriptor?? [ 504.945566][ T7688] xt_CT: No such helper "pptp" [ 505.037725][ T40] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 505.102742][ T40] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 505.595259][ T40] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 505.629043][ T40] em28xx 4-1:0.0: Config register raw data: 0x7a [ 505.680646][ T40] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 505.771333][ T40] em28xx 4-1:0.0: No AC97 audio processor [ 505.963740][ T40] usb 4-1: USB disconnect, device number 7 [ 506.035977][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.060510][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.655792][ T4875] Bluetooth: hci1: command tx timeout [ 508.037324][ T7704] xt_connbytes: Forcing CT accounting to be enabled [ 508.044731][ T7704] set match dimension is over the limit! [ 510.255429][ T1153] bridge_slave_1: left allmulticast mode [ 510.307087][ T1153] bridge_slave_1: left promiscuous mode [ 510.341436][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.393105][ T1153] bridge_slave_0: left allmulticast mode [ 510.430516][ T1153] bridge_slave_0: left promiscuous mode [ 510.475393][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.728118][ T7713] loop3: detected capacity change from 0 to 256 [ 510.870551][ T7713] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 511.961731][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.098922][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.249736][ T1153] bond0 (unregistering): Released all slaves [ 512.338921][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 513.296157][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 513.315573][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 513.340188][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 513.359419][ T1153] hsr_slave_0: left promiscuous mode [ 513.366155][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 514.526273][ T1153] hsr_slave_1: left promiscuous mode [ 514.582328][ T7737] xt_CT: No such helper "pptp" [ 514.705057][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.849618][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.186968][ T7740] loop3: detected capacity change from 0 to 1024 [ 515.396696][ T7740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 515.409267][ T7740] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.673331][ T7747] Cannot find set identified by id 0 to match [ 516.748950][ T48] Bluetooth: hci5: command tx timeout [ 518.870071][ T48] Bluetooth: hci5: command tx timeout [ 520.585774][ T7745] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 520.893496][ T48] Bluetooth: hci5: command tx timeout [ 520.930443][ T5594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 521.332022][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 521.485060][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 522.278961][ T7768] netlink: 224 bytes leftover after parsing attributes in process `syz.4.381'. [ 522.384416][ C1] Unknown status report in ack skb [ 522.981824][ T48] Bluetooth: hci5: command tx timeout [ 524.763673][ T7783] xt_CT: No such helper "pptp" [ 526.230077][ T7794] loop4: detected capacity change from 0 to 1024 [ 526.717806][ T7800] Cannot find set identified by id 0 to match [ 527.003049][ T7794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 527.091385][ T7794] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.716368][ T5588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 534.414484][ T40] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 534.614327][ T40] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 534.646368][ T40] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 534.686297][ T40] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 534.706551][ T40] usb 5-1: config 220 has no interface number 2 [ 534.714166][ T40] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 534.750323][ T40] usb 5-1: config 220 interface 0 has no altsetting 0 [ 534.796235][ T40] usb 5-1: config 220 interface 76 has no altsetting 0 [ 534.848976][ T40] usb 5-1: config 220 interface 1 has no altsetting 0 [ 534.959670][ T40] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 535.057791][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.143066][ T40] usb 5-1: Product: syz [ 535.193562][ T40] usb 5-1: Manufacturer: syz [ 535.245949][ T40] usb 5-1: SerialNumber: syz [ 535.749274][ T40] usb 5-1: selecting invalid altsetting 0 [ 535.810128][ T40] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 535.859393][ T40] uvcvideo 5-1:220.0: No valid video chain found. [ 537.566633][ T40] usb 5-1: selecting invalid altsetting 0 [ 537.574172][ T40] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 537.591498][ T40] usb 5-1: USB disconnect, device number 7 [ 537.654957][ T7837] lo speed is unknown, defaulting to 1000 [ 537.983109][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 538.376857][ T7837] lo speed is unknown, defaulting to 1000 [ 538.692079][ T7837] lo speed is unknown, defaulting to 1000 [ 538.780237][ T7837] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 539.235111][ T7837] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 539.312785][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.350547][ T7837] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 539.381241][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.431645][ T7627] bridge_slave_0: entered allmulticast mode [ 539.520517][ T7627] bridge_slave_0: entered promiscuous mode [ 539.553971][ T7837] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 539.660433][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.190175][ T7837] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 540.354943][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.377827][ T7627] bridge_slave_1: entered allmulticast mode [ 541.086790][ T7854] Cannot find set identified by id 0 to match [ 541.194903][ T7853] xt_CT: No such helper "pptp" [ 541.361420][ T7627] bridge_slave_1: entered promiscuous mode [ 542.702317][ T7837] lo speed is unknown, defaulting to 1000 [ 542.889455][ T7627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.945104][ T7627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.009351][ T7837] lo speed is unknown, defaulting to 1000 [ 543.119210][ T7862] tipc: Started in network mode [ 543.125957][ T7862] tipc: Node identity 9, cluster identity 4711 [ 543.134410][ T7862] tipc: Node number set to 9 [ 543.364504][ T7837] lo speed is unknown, defaulting to 1000 [ 543.687461][ T7837] lo speed is unknown, defaulting to 1000 [ 544.087715][ T40] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 544.463475][ T7627] team0: Port device team_slave_0 added [ 544.485278][ T7627] team0: Port device team_slave_1 added [ 544.505001][ T7837] lo speed is unknown, defaulting to 1000 [ 544.530520][ T1153] bridge_slave_1: left allmulticast mode [ 544.555042][ T1153] bridge_slave_1: left promiscuous mode [ 544.575969][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.588311][ T40] usb 4-1: Using ep0 maxpacket: 32 [ 544.619098][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.632707][ T40] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 544.645193][ T1153] bridge_slave_0: left allmulticast mode [ 544.646051][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.667258][ T1153] bridge_slave_0: left promiscuous mode [ 544.677336][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.704992][ T40] usb 4-1: config 0 descriptor?? [ 544.729409][ T40] hub 4-1:0.0: bad descriptor, ignoring hub [ 544.738243][ T40] hub 4-1:0.0: probe with driver hub failed with error -5 [ 544.793271][ T40] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 545.667923][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.686124][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.608963][ T1153] bond0 (unregistering): Released all slaves [ 546.713074][ T7837] lo speed is unknown, defaulting to 1000 [ 547.625276][ T5230] 8021q: adding VLAN 0 to HW filter on device eth7 [ 548.251906][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.259616][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.295194][ T807] usb 4-1: USB disconnect, device number 8 [ 548.407344][ T7627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.471723][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.487340][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.546387][ T7627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.649056][ T1153] hsr_slave_0: left promiscuous mode [ 548.682314][ T1153] hsr_slave_1: left promiscuous mode [ 548.716508][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.363413][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.477986][ T7902] set match dimension is over the limit! [ 553.013684][ T7904] xt_CT: No such helper "pptp" [ 556.117659][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 556.203153][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 556.845885][ T4875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 556.858146][ T4875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 556.873492][ T4875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 556.890555][ T4875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.081570][ T4875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 559.220957][ T4875] Bluetooth: hci3: command tx timeout [ 560.381983][ T7942] Cannot find set identified by id 0 to match [ 560.473348][ T807] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 561.117239][ T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.212894][ T807] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 561.289822][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.299061][ T4875] Bluetooth: hci3: command tx timeout [ 561.365735][ T807] usb 5-1: config 0 descriptor?? [ 561.417947][ T807] pwc: Askey VC010 type 2 USB webcam detected. [ 562.636216][ T807] pwc: recv_control_msg error -32 req 02 val 2b00 [ 563.405636][ T4875] Bluetooth: hci3: command tx timeout [ 563.537318][ T807] ===================================================== [ 563.544668][ T807] BUG: KMSAN: uninit-value in irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 563.553605][ T807] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 563.560187][ T807] irqentry_exit+0x82/0xa00 [ 563.565006][ T807] sysvec_call_function_single+0x4f/0x90 [ 563.570822][ T807] asm_sysvec_call_function_single+0x1f/0x30 [ 563.576981][ T807] __sanitizer_cov_trace_pc+0x5b/0x70 [ 563.582547][ T807] v4l2_ctrl_fill+0x37/0x2880 [ 563.587517][ T807] v4l2_ctrl_new_std+0x170/0x4e0 [ 563.592639][ T807] pwc_init_controls+0x25c/0x3580 [ 563.597934][ T807] usb_pwc_probe+0x2203/0x3330 [ 563.602862][ T807] usb_probe_interface+0xd51/0x1440 [ 563.608322][ T807] really_probe+0x4d5/0xe40 [ 563.613108][ T807] __driver_probe_device+0x2fb/0x410 [ 563.618568][ T807] driver_probe_device+0x70/0x8f0 [ 563.623788][ T807] __device_attach_driver+0x4ee/0x950 [ 563.629343][ T807] bus_for_each_drv+0x3e3/0x680 [ 563.634344][ T807] __device_attach+0x3c5/0x5f0 [ 563.639275][ T807] device_initial_probe+0x126/0x170 [ 563.644639][ T807] bus_probe_device+0x287/0x530 [ 563.649624][ T807] device_add+0x12e3/0x1c90 [ 563.654272][ T807] usb_set_configuration+0x3484/0x3b60 [ 563.659870][ T807] usb_generic_driver_probe+0xfc/0x290 [ 563.665563][ T807] usb_probe_device+0x38d/0x690 [ 563.670550][ T807] really_probe+0x4d5/0xe40 [ 563.675230][ T807] __driver_probe_device+0x2fb/0x410 [ 563.680684][ T807] driver_probe_device+0x70/0x8f0 [ 563.685880][ T807] __device_attach_driver+0x4ee/0x950 [ 563.691438][ T807] bus_for_each_drv+0x3e3/0x680 [ 563.696428][ T807] __device_attach+0x3c5/0x5f0 [ 563.701356][ T807] device_initial_probe+0x126/0x170 [ 563.706723][ T807] bus_probe_device+0x287/0x530 [ 563.711717][ T807] device_add+0x12e3/0x1c90 [ 563.716367][ T807] usb_new_device+0x106a/0x2120 [ 563.721453][ T807] hub_event+0x5404/0x77c0 [ 563.725992][ T807] process_scheduled_works+0xb65/0x1e40 [ 563.731722][ T807] worker_thread+0xee4/0x1590 [ 563.736546][ T807] kthread+0x53a/0x5f0 [ 563.740785][ T807] ret_from_fork+0x20f/0x8d0 [ 563.745539][ T807] ret_from_fork_asm+0x1a/0x30 [ 563.750460][ T807] [ 563.752837][ T807] Local variable def created at: [ 563.757837][ T807] pwc_init_controls+0x55/0x3580 [ 563.762947][ T807] usb_pwc_probe+0x2203/0x3330 [ 563.767867][ T807] [ 563.770289][ T807] CPU: 0 UID: 0 PID: 807 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(lazy) [ 563.779705][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.789875][ T807] Workqueue: usb_hub_wq hub_event [ 563.795052][ T807] ===================================================== [ 563.802073][ T807] Disabling lock debugging due to kernel taint [ 563.808303][ T807] Kernel panic - not syncing: kmsan.panic set ... [ 563.814827][ T807] CPU: 0 UID: 0 PID: 807 Comm: kworker/0:2 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 563.825841][ T807] Tainted: [B]=BAD_PAGE [ 563.830062][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.840245][ T807] Workqueue: usb_hub_wq hub_event [ 563.845445][ T807] Call Trace: [ 563.848801][ T807] [ 563.851805][ T807] __dump_stack+0x26/0x30 [ 563.856288][ T807] dump_stack_lvl+0x50/0x1c0 [ 563.861021][ T807] ? dump_stack+0x12/0x25 [ 563.865515][ T807] dump_stack+0x1e/0x25 [ 563.869842][ T807] vpanic+0x7b4/0x1430 [ 563.874132][ T807] panic+0x15d/0x160 [ 563.878257][ T807] kmsan_report+0x31a/0x320 [ 563.882953][ T807] ? finish_task_switch+0x3a8/0xbc0 [ 563.888315][ T807] ? __msan_warning+0x1b/0x30 [ 563.893157][ T807] ? irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 563.899924][ T807] ? irqentry_exit+0x82/0xa00 [ 563.904786][ T807] ? sysvec_call_function_single+0x4f/0x90 [ 563.910804][ T807] ? asm_sysvec_call_function_single+0x1f/0x30 [ 563.917130][ T807] ? __sanitizer_cov_trace_pc+0x5b/0x70 [ 563.922858][ T807] ? v4l2_ctrl_fill+0x37/0x2880 [ 563.927875][ T807] ? v4l2_ctrl_new_std+0x170/0x4e0 [ 563.933185][ T807] ? pwc_init_controls+0x25c/0x3580 [ 563.938568][ T807] ? usb_pwc_probe+0x2203/0x3330 [ 563.943664][ T807] ? usb_probe_interface+0xd51/0x1440 [ 563.949187][ T807] ? really_probe+0x4d5/0xe40 [ 563.954040][ T807] ? __driver_probe_device+0x2fb/0x410 [ 563.959676][ T807] ? driver_probe_device+0x70/0x8f0 [ 563.965062][ T807] ? __device_attach_driver+0x4ee/0x950 [ 563.970814][ T807] ? bus_for_each_drv+0x3e3/0x680 [ 563.975990][ T807] ? __device_attach+0x3c5/0x5f0 [ 563.981120][ T807] ? device_initial_probe+0x126/0x170 [ 563.986693][ T807] ? bus_probe_device+0x287/0x530 [ 563.991878][ T807] ? device_add+0x12e3/0x1c90 [ 563.996726][ T807] ? usb_set_configuration+0x3484/0x3b60 [ 564.002511][ T807] ? usb_generic_driver_probe+0xfc/0x290 [ 564.008291][ T807] ? usb_probe_device+0x38d/0x690 [ 564.013473][ T807] ? really_probe+0x4d5/0xe40 [ 564.018330][ T807] ? __driver_probe_device+0x2fb/0x410 [ 564.023968][ T807] ? driver_probe_device+0x70/0x8f0 [ 564.029346][ T807] ? __device_attach_driver+0x4ee/0x950 [ 564.035080][ T807] ? bus_for_each_drv+0x3e3/0x680 [ 564.040252][ T807] ? __device_attach+0x3c5/0x5f0 [ 564.045364][ T807] ? device_initial_probe+0x126/0x170 [ 564.050916][ T807] ? bus_probe_device+0x287/0x530 [ 564.056094][ T807] ? device_add+0x12e3/0x1c90 [ 564.060923][ T807] ? usb_new_device+0x106a/0x2120 [ 564.066128][ T807] ? hub_event+0x5404/0x77c0 [ 564.070848][ T807] ? process_scheduled_works+0xb65/0x1e40 [ 564.076742][ T807] ? worker_thread+0xee4/0x1590 [ 564.081745][ T807] ? kthread+0x53a/0x5f0 [ 564.086162][ T807] ? ret_from_fork+0x20f/0x8d0 [ 564.091085][ T807] ? ret_from_fork_asm+0x1a/0x30 [ 564.096221][ T807] ? kmsan_get_metadata+0xf1/0x160 [ 564.101517][ T807] ? kmsan_get_metadata+0xf1/0x160 [ 564.106807][ T807] ? kmsan_get_metadata+0xf1/0x160 [ 564.112112][ T807] __msan_warning+0x1b/0x30 [ 564.116774][ T807] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 564.123374][ T807] irqentry_exit+0x82/0xa00 [ 564.128061][ T807] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 564.134571][ T807] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 564.140829][ T807] sysvec_call_function_single+0x4f/0x90 [ 564.146665][ T807] asm_sysvec_call_function_single+0x1f/0x30 [ 564.153191][ T807] RIP: 0010:__sanitizer_cov_trace_pc+0x5b/0x70 [ 564.159546][ T807] Code: 00 74 2c 8b 91 98 1b 00 00 83 fa 02 75 21 48 8b 91 a0 1b 00 00 48 8b 32 48 8d 7e 01 8b 89 9c 1b 00 00 48 39 cf 73 08 48 89 3a <48> 89 44 f2 08 5d e9 4a ab fa 0e cc 66 0f 1f 84 00 00 00 00 00 90 [ 564.179407][ T807] RSP: 0018:ffff8881094ea930 EFLAGS: 00000287 [ 564.185620][ T807] RAX: ffffffff8b647db7 RBX: 0000000000980900 RCX: 0000000000100000 [ 564.193710][ T807] RDX: ffffc90015840000 RSI: 0000000000011838 RDI: 0000000000011839 [ 564.201796][ T807] RBP: ffff8881094ea930 R08: ffff8881094eaa48 R09: ffff8881094eaa50 [ 564.209894][ T807] R10: ffff888108ceaa58 R11: ffffffff8bbf139c R12: ffff888108a84ed8 [ 564.217986][ T807] R13: ffff8881094ea9f0 R14: ffff8881094eaa20 R15: ffff8881094eaa04 [ 564.226096][ T807] ? pwc_init_controls+0x25c/0x3580 [ 564.231499][ T807] ? v4l2_ctrl_fill+0x37/0x2880 [ 564.236528][ T807] v4l2_ctrl_fill+0x37/0x2880 [ 564.241394][ T807] v4l2_ctrl_new_std+0x170/0x4e0 [ 564.246568][ T807] pwc_init_controls+0x25c/0x3580 [ 564.252034][ T807] ? kmsan_get_metadata+0xf1/0x160 [ 564.257338][ T807] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 564.263437][ T807] ? pwc_set_video_mode+0x18f2/0x1a60 [ 564.269023][ T807] usb_pwc_probe+0x2203/0x3330 [ 564.274003][ T807] ? __pfx_usb_pwc_probe+0x10/0x10 [ 564.279294][ T807] usb_probe_interface+0xd51/0x1440 [ 564.284677][ T807] ? __pfx_usb_probe_interface+0x10/0x10 [ 564.290477][ T807] really_probe+0x4d5/0xe40 [ 564.295193][ T807] __driver_probe_device+0x2fb/0x410 [ 564.300690][ T807] driver_probe_device+0x70/0x8f0 [ 564.305912][ T807] ? kmsan_get_metadata+0xf1/0x160 [ 564.311206][ T807] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 564.317211][ T807] __device_attach_driver+0x4ee/0x950 [ 564.322802][ T807] bus_for_each_drv+0x3e3/0x680 [ 564.327805][ T807] ? __pfx___device_attach_driver+0x10/0x10 [ 564.333929][ T807] __device_attach+0x3c5/0x5f0 [ 564.338899][ T807] device_initial_probe+0x126/0x170 [ 564.344290][ T807] bus_probe_device+0x287/0x530 [ 564.349312][ T807] device_add+0x12e3/0x1c90 [ 564.354011][ T807] usb_set_configuration+0x3484/0x3b60 [ 564.359637][ T807] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 564.365718][ T807] usb_generic_driver_probe+0xfc/0x290 [ 564.371329][ T807] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 564.377547][ T807] usb_probe_device+0x38d/0x690 [ 564.382558][ T807] ? __pfx_usb_probe_device+0x10/0x10 [ 564.388085][ T807] really_probe+0x4d5/0xe40 [ 564.392798][ T807] __driver_probe_device+0x2fb/0x410 [ 564.398279][ T807] driver_probe_device+0x70/0x8f0 [ 564.403491][ T807] ? kmsan_get_metadata+0xf1/0x160 [ 564.408803][ T807] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 564.414804][ T807] __device_attach_driver+0x4ee/0x950 [ 564.420380][ T807] bus_for_each_drv+0x3e3/0x680 [ 564.425364][ T807] ? __pfx___device_attach_driver+0x10/0x10 [ 564.431458][ T807] __device_attach+0x3c5/0x5f0 [ 564.436401][ T807] device_initial_probe+0x126/0x170 [ 564.441776][ T807] bus_probe_device+0x287/0x530 [ 564.446781][ T807] device_add+0x12e3/0x1c90 [ 564.451457][ T807] usb_new_device+0x106a/0x2120 [ 564.456505][ T807] hub_event+0x5404/0x77c0 [ 564.461106][ T807] ? kmsan_get_metadata+0xf1/0x160 [ 564.466420][ T807] ? __pfx_hub_event+0x10/0x10 [ 564.471311][ T807] process_scheduled_works+0xb65/0x1e40 [ 564.477071][ T807] worker_thread+0xee4/0x1590 [ 564.481945][ T807] kthread+0x53a/0x5f0 [ 564.486196][ T807] ? __pfx_worker_thread+0x10/0x10 [ 564.491473][ T807] ? __pfx_kthread+0x10/0x10 [ 564.496222][ T807] ret_from_fork+0x20f/0x8d0 [ 564.500946][ T807] ? __switch_to+0x573/0x7a0 [ 564.505710][ T807] ? __pfx_kthread+0x10/0x10 [ 564.510471][ T807] ret_from_fork_asm+0x1a/0x30 [ 564.515417][ T807] [ 564.518788][ T807] Kernel Offset: disabled [ 564.523186][ T807] Rebooting in 86400 seconds..