last executing test programs: 3.193358243s ago: executing program 2 (id=1123): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.945254989s ago: executing program 1 (id=1128): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x9, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 2.884087374s ago: executing program 1 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0500080000000000090007009bfe99d06c0000000a000600ffffffffffff000004000b0008000900"], 0x50}}, 0x0) 2.824615326s ago: executing program 0 (id=1131): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)={0x2c, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}}, 0x0) 2.784513545s ago: executing program 1 (id=1132): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x10d, 0x4, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r3, 0x4004743b, 0x20002500) fcntl$setstatus(r2, 0x4, 0x6000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r8, 0x400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x7, 0x13, r5, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x32f, 0x2, 0x2, "7637336ee4719dfa90a0a85ba57323dda642b5d1c7467b32ec7fdd4edffdbc85", 0x30314752}) io_setup(0x202, &(0x7f0000000200)) ftruncate(r2, 0x81fd) mmap$snddsp(&(0x7f00009a8000/0x3000)=nil, 0x3000, 0x3, 0x4010, r6, 0x6000) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.735732974s ago: executing program 0 (id=1133): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000680)=ANY=[], 0x0) 2.654804564s ago: executing program 0 (id=1134): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b031407e0ff25000200475400f6a13bb1002b00080088a84803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2.613225521s ago: executing program 1 (id=1135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000012000000000000000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setpgid(r2, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x3863116}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x10}, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 2.4887374s ago: executing program 4 (id=1136): r0 = creat(&(0x7f0000000600)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x104) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x8}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/98, 0x62}], 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) io_setup(0x81, &(0x7f0000000180)=0x0) r7 = open(&(0x7f0000000780)='./bus\x00', 0x1051fc, 0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x0, r7, &(0x7f0000000300)="70bf3e7e8fe7e90f80000000000000001ab3f3115f", 0x15, 0x401}]) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) 2.472377486s ago: executing program 0 (id=1137): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x10d, 0x4, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r3, 0x4004743b, 0x20002500) fcntl$setstatus(r2, 0x4, 0x6000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r8, 0x400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='leases_conflict\x00', r7}, 0x6) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x7, 0x13, r5, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x32f, 0x2, 0x2, "7637336ee4719dfa90a0a85ba57323dda642b5d1c7467b32ec7fdd4edffdbc85", 0x30314752}) io_setup(0x202, &(0x7f0000000200)) ftruncate(r2, 0x81fd) mmap$snddsp(&(0x7f00009a8000/0x3000)=nil, 0x3000, 0x3, 0x4010, r6, 0x6000) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.517229783s ago: executing program 0 (id=1138): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000008c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x8, 0x446c, &(0x7f0000004780)="$eJzs281vFOcdB/DfrN1iU6B+4x2kVXuo1VbWmlNbDqXgtkKqSu2+qOoBa/0CuF17LXtdcahUqt6RIuUQ5ZwLKPcITvwLOYRrjhxIDrlEySWOdnfW3pn1hhXy2sH5fCQYzzPzvMhfz+zz6LELqdq9lc3iymaxvFasLt7ZvFL8d7WytbochQNy2P3Tm37kJPvDc+vG7/78tysR9z8a+8H29vZ21I3Enqbbvv78s/8sth9bCrk69Xb3bm2//CMiJiJiKPLjGYiIv38QkUTEaFo2lh6HI+JENK/9//1Hc0P7NJqBF49nH83OPHzycvX58I3bxa43JhHvVs7//O7qJz8euPrxT/epewAA+Ea/n7v11z+VpuNZEqeeDnbO18+mx27z42168uv+RwkAAABd7a7/R5JC0rn+n0iPXbYEw8L2zXbzj7dmfluaTvd/k47rv0iLPv3NQGMPNb/vm9//Hc3V33v/t7Of19UaX6vfkUgKU5nzQmFqKmL6evP8XHK8UKlu1n52p7q1trRvw3hjZfNv7t5n0kk39HvNfyzXfv/3/8c7fprq58X9+xE70rL5D3S9773/JT3lP56rdxD58/qy+Q82yn7UfkOx+QKo5//W4Kvzn8i136/8T9Xf7Ul9rEOZN0B9DlMv7zZfISub//caZZlXZ/qN7Pb8f5nL/3Su/cN6/09e72+vR0U2/+83yrK/tLb7/I8WXv38n8m1fxj518c/6fO/J9n8jzULsy/Pxney1/f/2Vz7fcr/QbqtGnEqifG23zp9Otj8cGjtVzeWNPXL630YxRGQzb9zl393/Vfoaf53Llf/oNZ/rX5b67/WOmQyaa7/2Fs2/+Gu9/X6/J/P1ev7+z8ZSlcA2//taz9HVDb/483CPSaAveZ/Idd+v/JvvPGHWvnvDvirY83ykvlfT7L5p1FlPgYeNP5vzP+Szty/yOV/Mdd+W/75Pw3ZJ53zv/r4J/vU21GTzf9E1/vq+X/Yw+f/pVy9/s//I0rm+q8tm//Jrvc1nv+hV+d/OVev3/n/pJ+NAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8B4ylx5FIClOZ80JhaipiPD0/F8eThfLS/EKluvivzYiJtLwYY8ndSnWhXJlfWasuLc+XK5XqYsTp9PpEDCWblWptfrW8fmanreHk3nJ5o7awXK5FxNm0/FKcbLW1sFJbLa837m1d+2GhurF+r7w2v7Sy8atSqVSK8ztjGE2W79eW12rN3ptXIy7s1B1J2gbXuHxxZywnkn9WtzbWypVG+aW2OpXqYrnSVudyeu3tGE1qG1tri+Xa8nylerfV32G6lh5nbs79Ze4P0x3Xi0nzOHawwwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgW+bZ1V++ExGDzbNCRFxrfZGk/zIGXjyefTQ78/DJy9XnwzduF/e6BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADga3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8cqDUNRGIDPvQoKLuroEziFZHNVFHExIvgEvkSHvmYfo0PHLqXQ3kBIGujS0uH7lkPyc+85cA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJfj87f9+6mbiBS3m5uI2eLxrp8/lVq/HT5/dYYZOZ2v7/b9o27Ku6dR/lJ+LV/zLl2v5v9R6nXvu9MM9mS4T3vjPkNT+zY1X9f3PlKuIuKh5M8p56o67i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbszaEJgGAQx9E7wWSzuIZOYVQE9zA6nks4jybBYBC++l46OH78AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCfcZnWuR/iyKiuzNjPtnn/u+fYvvssm6/LcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICbHTiQAQAAABDmb51H+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIMCAAD//+N8zQE=") mkdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(0x0, 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) 1.303687928s ago: executing program 4 (id=1140): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.249768459s ago: executing program 1 (id=1141): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000000180)) 1.099144694s ago: executing program 4 (id=1144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x3c, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x2}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}}, 0x0) 1.045405342s ago: executing program 1 (id=1145): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d49fbc0000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x0, 0x0, 0x28, "7e9fbf946d0949f9baeb413c9fbbafaf87f4bb1bf83e311ada708fcc3a68efc68ab4419a84c1ad54"}, 0x0, 0x0, 0x0, 0x0}) 1.017648915s ago: executing program 4 (id=1147): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c00048008"], 0x34}}, 0x0) 920.362179ms ago: executing program 4 (id=1149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b1"}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x28}}, 0x0) 882.754421ms ago: executing program 4 (id=1150): r0 = creat(&(0x7f0000000600)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x104) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x8}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/98, 0x62}], 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) io_setup(0x81, &(0x7f0000000180)=0x0) r7 = open(&(0x7f0000000780)='./bus\x00', 0x1051fc, 0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x0, r7, &(0x7f0000000300)="70bf3e7e8fe7e90f80000000000000001ab3f3115f", 0x15, 0x401}]) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) 681.538739ms ago: executing program 3 (id=1154): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x11) 605.393252ms ago: executing program 3 (id=1155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 303.354356ms ago: executing program 3 (id=1156): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000361003426c780bf51a16a800128009000100785b056d000000000c"], 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffd, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW]}, 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) 237.307573ms ago: executing program 3 (id=1157): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 216.633847ms ago: executing program 2 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b, @device_a, @random="fd96285310d1"}, @addba_resp}}]}, 0x44}}, 0x0) 169.400589ms ago: executing program 0 (id=1159): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc3}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000006"], 0x24d8}], 0x1}, 0x0) 140.814225ms ago: executing program 2 (id=1160): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000a00)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x310) 140.315105ms ago: executing program 3 (id=1161): mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009efc999cb8e4f0cdce9c9a4fdad84c2e3960c1300048a048c368365ef94e332b02d40bed954c83f0a26e0ee1db78b31a4167b44e556d0a2f087280c307b00ce1f180023d16f055d895a2e0b10451824c36da45d2870bd20fdeb3269a503e6455df2e12db00000000000000000000000000000000d55e"], 0x0, 0x237, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 91.339845ms ago: executing program 2 (id=1162): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.409205ms ago: executing program 2 (id=1163): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1204160020fc020002004788800809103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 13.240108ms ago: executing program 3 (id=1164): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 0s ago: executing program 2 (id=1165): r0 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c00)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d800000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c5cfd6587d452d46b7cc957d77578f4c35235138d5521f9453559c3421eed73d56601000000c66c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe3e26e7a23129d6606f8a6b989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae89d24e1cebfba2f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6df2aed4afe1f44ccb19e81087d7900a820b6327944e9a217b9800e02a92895614cd50cbe48dddea37688148004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a57b669596e9e08679b3ce48e90defb6670c3d62ad0a97aec773713a66b223fa8b148871c8d31d24291c25449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed200ada12f7a1525320e71666f472a97214d0b2874df30ed5eb1affb873a55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff08000000e1ff000500e59de7621e348955735264f34b1046a1813668297a7eda1d74ef106ae7fcbb25090f17d0baadeb8aee9f569435ea9e3217eff89309e190a1fb5a315f8347fb037965950000000000000022000000000000000000000099a614a5af8650f913058e015bbaf36ab388ba54ece08b332f7a542f8587f2fd973b9aa8269be75569e3471094035c83808103aa9ca15e2f59f49864210e94ea00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): cd [ 259.801020][ T9926] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 259.815581][ T9954] vim2m vim2m.0: vidioc_s_fmt queue busy [ 259.816380][ T9926] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 259.860023][ T8599] syz-executor: attempt to access beyond end of device [ 259.860023][ T8599] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.866641][ T9956] loop4: detected capacity change from 0 to 256 [ 259.875809][ T8599] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 259.881026][ T9956] exfat: Deprecated parameter 'utf8' [ 259.893441][ T9956] exfat: Deprecated parameter 'namecase' [ 259.915794][ T9956] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x96e02a54, utbl_chksum : 0xe619d30d) [ 259.979301][ T5286] usb 2-1: Using ep0 maxpacket: 16 [ 259.985890][ T5286] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.997757][ T5286] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.009956][ T5286] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.010264][ T937] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 260.023855][ T5286] usb 2-1: config 0 interface 0 has no altsetting 0 [ 260.041791][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 260.059769][ T5286] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 260.072084][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.091811][ T5286] usb 2-1: config 0 descriptor?? [ 260.291098][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 260.296516][ T937] usb 3-1: Using ep0 maxpacket: 8 [ 260.313676][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.374370][ T937] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=8a.18 [ 260.430970][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.502690][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.525903][ T29] audit: type=1800 audit(250.211:266): pid=9970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.842" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 260.648520][ T25] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 260.722354][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.732386][ T25] usb 4-1: config 0 descriptor?? [ 260.739529][ T937] usb 3-1: config 0 descriptor?? [ 260.748723][ T5286] hid (null): usage index exceeded [ 260.749451][ T937] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 260.755456][ T5286] hid-generic 0003:045E:05DA.000D: ignoring exceeding usage max [ 260.760451][ T937] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 260.782450][ T5286] hid-generic 0003:045E:05DA.000D: ignoring exceeding usage max [ 260.790716][ T5286] hid-generic 0003:045E:05DA.000D: usage index exceeded [ 260.793961][ T9975] loop4: detected capacity change from 0 to 2048 [ 260.797655][ T5286] hid-generic 0003:045E:05DA.000D: item 0 4 2 0 parsing failed [ 260.798007][ T5286] hid-generic 0003:045E:05DA.000D: probe with driver hid-generic failed with error -22 [ 260.866800][ T9975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 260.910633][ T9077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.035879][ T937] usb 2-1: USB disconnect, device number 8 [ 261.158270][ T9980] loop0: detected capacity change from 0 to 1024 [ 261.364338][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 261.409668][ T940] usb 3-1: USB disconnect, device number 13 [ 261.436319][ T25] corsair 0003:1B1C:1B09.000E: item fetching failed at offset 2/5 [ 261.445394][ T25] corsair 0003:1B1C:1B09.000E: parse failed [ 261.453279][ T25] corsair 0003:1B1C:1B09.000E: probe with driver corsair failed with error -22 [ 261.666315][ T25] usb 4-1: USB disconnect, device number 14 [ 261.864830][ T8599] hfsplus: bad catalog entry type [ 262.888691][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 262.950358][T10009] netlink: 'syz.4.857': attribute type 3 has an invalid length. [ 263.007162][ T8569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.455715][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.481904][T10012] loop4: detected capacity change from 0 to 4096 [ 263.488442][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.499350][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.512205][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 263.521368][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.529540][T10012] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 263.550668][ T8] usb 2-1: config 0 descriptor?? [ 263.573231][ T29] audit: type=1800 audit(253.016:267): pid=10014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.855" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 263.624891][ T8569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.686140][T10012] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 263.846233][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.854358][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.863691][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.873520][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.883881][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.925211][T10023] loop3: detected capacity change from 0 to 1024 [ 263.936181][ T937] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 263.950160][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.024660][T10012] ntfs3: Cannot use different iocharset when remounting! [ 264.144719][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 264.174511][ T8569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.193426][ T8] pyra 0003:1E7D:2C24.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.1-1/input0 [ 264.200928][ T937] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 264.246577][ T937] usb 3-1: Dual-Role OTG device on HNP port [ 264.254850][ T937] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 264.269456][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.279699][ T937] usb 3-1: Product: syz [ 264.286584][ T937] usb 3-1: Manufacturer: syz [ 264.293778][ T937] usb 3-1: SerialNumber: syz [ 264.300076][ T937] usb 3-1: config 0 descriptor?? [ 264.302100][ T8569] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.307073][ T937] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 264.373635][T10029] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 264.395217][ T937] usb 2-1: USB disconnect, device number 9 [ 264.487879][ T8569] bridge_slave_1: left allmulticast mode [ 264.494152][ T8569] bridge_slave_1: left promiscuous mode [ 264.502367][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.534316][ T8569] bridge_slave_0: left allmulticast mode [ 264.540868][ T8569] bridge_slave_0: left promiscuous mode [ 264.546728][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.568687][ T5286] usb 3-1: USB disconnect, device number 14 [ 264.640124][ T9113] hfsplus: bad catalog entry type [ 264.778120][ T8569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.803912][ T8569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.849383][ T8569] bond0 (unregistering): Released all slaves [ 264.905957][T10021] chnl_net:caif_netlink_parms(): no params data found [ 265.212538][T10021] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.219782][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.251528][T10021] bridge_slave_0: entered allmulticast mode [ 265.270067][T10021] bridge_slave_0: entered promiscuous mode [ 265.302365][T10021] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.320134][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.338359][T10021] bridge_slave_1: entered allmulticast mode [ 265.360927][T10021] bridge_slave_1: entered promiscuous mode [ 265.381365][ T8569] hsr_slave_0: left promiscuous mode [ 265.399255][ T8569] hsr_slave_1: left promiscuous mode [ 265.430285][ T8569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.438971][ T8569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.447706][ T8569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.458727][ T8569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.471172][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 265.494572][ T8569] veth1_macvtap: left promiscuous mode [ 265.500103][ T8569] veth0_macvtap: left promiscuous mode [ 265.506162][ T8569] veth1_vlan: left promiscuous mode [ 265.511435][ T8569] veth0_vlan: left promiscuous mode [ 265.648485][ T25] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 265.666130][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.673525][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 265.677304][ T25] usb 2-1: config 0 descriptor?? [ 265.682347][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 265.693715][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.701427][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.710738][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 265.718047][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.734079][ T8569] team0 (unregistering): Port device team_slave_1 removed [ 265.746036][ T8569] team0 (unregistering): Port device team_slave_0 removed [ 265.753336][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 265.848976][ T937] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 265.859576][T10021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.876388][T10021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.905378][T10021] team0: Port device team_slave_0 added [ 265.920509][T10021] team0: Port device team_slave_1 added [ 265.938981][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.950065][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.959992][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.962130][T10021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.973099][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.973125][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.982383][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.024153][T10021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.024832][ T8] usb 3-1: config 0 descriptor?? [ 266.044053][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 266.051291][T10021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.051829][ T937] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 266.060563][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.066261][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 266.094419][T10021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.105021][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 266.130754][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 266.149194][ T937] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 266.158844][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.169213][ T937] usb 5-1: Product: syz [ 266.173486][ T937] usb 5-1: Manufacturer: syz [ 266.180578][T10021] hsr_slave_0: entered promiscuous mode [ 266.182012][ T937] usb 5-1: SerialNumber: syz [ 266.194725][ T937] usb 5-1: config 0 descriptor?? [ 266.200262][T10065] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 266.207501][ T5241] Bluetooth: hci1: command tx timeout [ 266.210299][T10065] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 266.222669][T10021] hsr_slave_1: entered promiscuous mode [ 266.230236][T10021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.237832][T10021] Cannot create hsr debugfs directory [ 266.259185][ T937] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 266.266332][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 266.266401][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 266.364656][ T25] ath6kl: Failed to read usb control message: -71 [ 266.372470][ T25] ath6kl: Unable to read the bmi data from the device: -71 [ 266.379969][ T25] ath6kl: unable to read target info byte count: -71 [ 266.386910][ T25] ath6kl: Failed to init ath6kl core: -71 [ 266.394385][ T25] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 266.409565][ T25] usb 2-1: USB disconnect, device number 10 [ 266.419072][ T8569] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.500174][ T8569] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.516443][ T8] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 266.527747][T10066] chnl_net:caif_netlink_parms(): no params data found [ 266.535730][ T8] plantronics 0003:047F:FFFF.0010: unbalanced collection at end of report description [ 266.550109][ T8] plantronics 0003:047F:FFFF.0010: parse failed [ 266.556606][ T8] plantronics 0003:047F:FFFF.0010: probe with driver plantronics failed with error -22 [ 266.578767][ T937] usb 5-1: USB disconnect, device number 15 [ 266.585326][ T937] mcba_usb 5-1:0.0 can0: device disconnected [ 266.624431][ T8569] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.677993][ T8569] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.695826][T10066] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.703018][T10066] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.710539][T10066] bridge_slave_0: entered allmulticast mode [ 266.717347][T10066] bridge_slave_0: entered promiscuous mode [ 266.724713][T10066] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.734767][T10066] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.743528][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.743567][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.770826][ T5322] usb 3-1: USB disconnect, device number 15 [ 266.772544][T10066] bridge_slave_1: entered allmulticast mode [ 266.790473][T10066] bridge_slave_1: entered promiscuous mode [ 266.852568][T10066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.903486][T10066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.982458][ T8569] bridge_slave_1: left allmulticast mode [ 266.988388][ T8569] bridge_slave_1: left promiscuous mode [ 266.994068][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.004821][ T8569] bridge_slave_0: left allmulticast mode [ 267.017150][ T8569] bridge_slave_0: left promiscuous mode [ 267.023403][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.121656][ T8569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.132030][ T8569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.142332][ T8569] bond0 (unregistering): Released all slaves [ 267.152151][T10066] team0: Port device team_slave_0 added [ 267.165149][T10066] team0: Port device team_slave_1 added [ 267.228738][T10021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.238158][T10021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.249712][T10021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.258702][T10021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.280473][ T5285] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 267.292650][T10066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.302524][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.331296][T10066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.343490][ T8569] tipc: Left network mode [ 267.355174][T10066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.362123][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.389776][T10066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.667413][ T29] audit: type=1800 audit(256.801:268): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.875" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 267.843907][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 267.846618][T10066] hsr_slave_0: entered promiscuous mode [ 267.869127][T10066] hsr_slave_1: entered promiscuous mode [ 267.881923][T10066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.907124][T10066] Cannot create hsr debugfs directory [ 267.931077][T10091] netlink: 'syz.1.874': attribute type 10 has an invalid length. [ 267.938858][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.874'. [ 267.948333][ T5241] Bluetooth: hci0: command tx timeout [ 267.992185][T10091] batman_adv: batadv0: Adding interface: virt_wifi0 [ 268.003127][T10091] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.033687][T10091] batman_adv: batadv0: Interface activated: virt_wifi0 [ 268.045356][ T5285] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.065795][ T5285] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 268.079213][ T5285] usb 2-1: can't read configurations, error -71 [ 268.222521][T10115] loop4: detected capacity change from 0 to 1024 [ 268.233188][ T937] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 268.484765][ T5241] Bluetooth: hci1: command tx timeout [ 268.490442][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 268.493399][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.511968][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.522043][ T937] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 268.531400][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.552200][T10021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.567256][T10021] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.585070][ T937] usb 3-1: config 0 descriptor?? [ 268.594273][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.601581][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.610852][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.617999][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.641337][ T8569] hsr_slave_0: left promiscuous mode [ 268.651397][ T8569] hsr_slave_1: left promiscuous mode [ 268.658144][ T8569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.668514][ T8569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.676261][ T8569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.683916][ T8569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.695665][ T8569] veth1_macvtap: left promiscuous mode [ 268.701298][ T8569] veth0_macvtap: left promiscuous mode [ 268.707037][ T8569] veth1_vlan: left promiscuous mode [ 268.712385][ T8569] veth0_vlan: left promiscuous mode [ 268.821538][ T8569] team0 (unregistering): Port device team_slave_1 removed [ 268.835785][ T8569] team0 (unregistering): Port device team_slave_0 removed [ 268.928404][ T9077] hfsplus: bad catalog entry type [ 269.044513][ T937] steelseries 0003:1038:12B6.0011: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 269.101982][T10021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.141936][T10021] veth0_vlan: entered promiscuous mode [ 269.158847][T10021] veth1_vlan: entered promiscuous mode [ 269.184354][T10021] veth0_macvtap: entered promiscuous mode [ 269.305511][T10021] veth1_macvtap: entered promiscuous mode [ 269.327275][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.361001][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.370933][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.381532][ T937] steelseries 0003:1038:12B6.0011: hid_hw_raw_request() failed with -71 [ 269.401896][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.403299][ T937] usb 3-1: USB disconnect, device number 16 [ 269.413823][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.647366][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.813634][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.825535][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.861469][T10021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.924162][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.938749][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.950046][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.960595][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.970531][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.981119][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.991068][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.002168][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.012952][T10021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.027833][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.036177][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.036285][T10021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.043513][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.057879][T10021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.060281][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.068646][T10021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.078503][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.086567][T10021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.091855][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.130707][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.197239][ T5237] Bluetooth: hci0: command tx timeout [ 270.228015][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.251311][T10066] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.264069][T10066] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.275658][T10066] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.291706][ T8569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.305728][ T8569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.329609][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.343031][T10066] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.372404][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.394628][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.407571][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.475210][ T8] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 270.628444][T10149] chnl_net:caif_netlink_parms(): no params data found [ 270.652960][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.675156][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.686573][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 270.714660][ T5237] Bluetooth: hci1: command tx timeout [ 270.758291][T10188] loop0: detected capacity change from 0 to 2048 [ 270.761437][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 270.797696][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 270.810860][ T8] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 270.820245][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.833791][ T8] usb 2-1: config 0 descriptor?? [ 270.852175][ T11] bridge_slave_1: left allmulticast mode [ 270.858066][ T11] bridge_slave_1: left promiscuous mode [ 270.863760][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.874704][T10188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.877744][ T11] bridge_slave_0: left allmulticast mode [ 270.893238][ T11] bridge_slave_0: left promiscuous mode [ 270.899687][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.925764][T10021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.097233][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.107522][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.118041][ T11] bond0 (unregistering): Released all slaves [ 271.140853][T10066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.201028][ T937] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 271.244145][T10066] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.389704][ T937] usb 3-1: Using ep0 maxpacket: 8 [ 271.439968][ T29] audit: type=1800 audit(260.244:269): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.890" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 271.501972][ T8] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 271.564658][ T8] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 271.572485][ T8] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 271.579510][ T8] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 271.586710][ T8] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 271.600099][ T8] ntrig 0003:1B96:000A.0012: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 271.614029][ T8] usb 2-1: USB disconnect, device number 13 [ 271.622165][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.629304][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.648823][T10192] netlink: 'syz.2.889': attribute type 10 has an invalid length. [ 271.652474][T10212] cifs: Bad value for 'port' [ 271.668600][T10192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.889'. [ 271.708124][ T937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 271.735344][ T937] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 271.761323][T10217] [U] VÔ3¸ÂFÙ¾"WÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 271.769658][T10217] [U] J"—E:ÀÆ" [ 271.769687][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.780376][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.796907][ T937] usb 3-1: can't read configurations, error -71 [ 271.873803][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.880931][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.898485][T10149] bridge_slave_0: entered allmulticast mode [ 271.905623][T10149] bridge_slave_0: entered promiscuous mode [ 271.920035][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.927780][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.934982][T10149] bridge_slave_1: entered allmulticast mode [ 271.943855][T10149] bridge_slave_1: entered promiscuous mode [ 272.018793][ T11] hsr_slave_0: left promiscuous mode [ 272.042589][ T11] hsr_slave_1: left promiscuous mode [ 272.053396][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.063486][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.093619][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.122038][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.153722][ T11] veth1_macvtap: left promiscuous mode [ 272.162175][ T11] veth0_macvtap: left promiscuous mode [ 272.177528][ T11] veth1_vlan: left promiscuous mode [ 272.187536][ T11] veth0_vlan: left promiscuous mode [ 272.210286][T10242] loop0: detected capacity change from 0 to 512 [ 272.237764][T10242] EXT4-fs: Ignoring removed nobh option [ 272.247280][T10242] EXT4-fs (loop0): can't mount with both data=journal and dax [ 272.358750][ T11] team0 (unregistering): Port device team_slave_1 removed [ 272.361631][ T5237] Bluetooth: hci4: command tx timeout [ 272.383993][ T11] team0 (unregistering): Port device team_slave_0 removed [ 272.415688][ T5283] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 272.449657][ T5237] Bluetooth: hci0: command tx timeout [ 272.477581][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.496076][T10149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.539332][T10149] team0: Port device team_slave_0 added [ 272.548702][T10149] team0: Port device team_slave_1 added [ 272.578476][T10149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.585739][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.613612][T10245] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 272.623004][T10149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.626083][ T5283] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 272.662606][T10149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.683806][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.727927][T10149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.744595][T10247] Bluetooth: MGMT ver 1.23 [ 272.759406][T10066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.821609][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.823856][T10149] hsr_slave_0: entered promiscuous mode [ 272.844789][ T5283] usb 2-1: config 0 descriptor?? [ 272.856373][T10149] hsr_slave_1: entered promiscuous mode [ 272.872544][T10149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.915219][T10149] Cannot create hsr debugfs directory [ 272.967506][ T5237] Bluetooth: hci1: command tx timeout [ 273.087183][T10261] loop2: detected capacity change from 0 to 1024 [ 273.138179][T10261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.160600][T10066] veth0_vlan: entered promiscuous mode [ 273.242250][T10066] veth1_vlan: entered promiscuous mode [ 273.268710][ T8555] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.329753][T10066] veth0_macvtap: entered promiscuous mode [ 273.350794][ T5283] playstation 0003:054C:0DF2.0013: item fetching failed at offset 2/5 [ 273.364609][T10066] veth1_macvtap: entered promiscuous mode [ 273.376449][ T5283] playstation 0003:054C:0DF2.0013: Parse failed [ 273.382885][ T5283] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -22 [ 273.386331][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.407532][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.417775][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.428479][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.439107][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.449770][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.459719][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.470272][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.481473][T10066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.499351][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.510009][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.520227][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.531002][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.540928][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.552392][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.562305][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.572872][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.573289][ T5283] usb 2-1: USB disconnect, device number 14 [ 273.587855][T10066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.598250][ T937] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 273.609043][T10066] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.617837][T10066] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.626530][T10066] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.635296][T10066] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.711614][ T2532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.724214][ T2532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.739865][T10149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.752693][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.753099][T10149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.771387][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.771865][ T937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.792866][T10149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.799839][ T937] usb 3-1: config 0 has no interfaces? [ 273.809901][ T937] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 273.819954][ T937] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 273.830199][T10149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.864982][ T937] usb 3-1: Manufacturer: syz [ 273.887394][ T937] usb 3-1: config 0 descriptor?? [ 273.989680][T10149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.010263][T10149] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.023284][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.030461][ T2567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.043723][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.050853][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.400888][ T29] audit: type=1800 audit(262.994:270): pid=10300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.871" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 274.492230][ T940] usb 3-1: USB disconnect, device number 19 [ 274.617016][ T5237] Bluetooth: hci4: command tx timeout [ 274.667264][T10149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.703758][ T5237] Bluetooth: hci0: command tx timeout [ 274.826961][T10149] veth0_vlan: entered promiscuous mode [ 274.839720][T10149] veth1_vlan: entered promiscuous mode [ 274.858403][T10149] veth0_macvtap: entered promiscuous mode [ 274.870305][T10149] veth1_macvtap: entered promiscuous mode [ 274.884718][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.895181][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.898617][T10309] loop1: detected capacity change from 0 to 32768 [ 274.905220][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.922250][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.932263][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.942891][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.952883][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.963864][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.973812][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.984294][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.995577][T10149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.005871][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.005934][T10309] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.016322][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.016340][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.016353][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.016364][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.016380][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.016393][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.016405][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.016415][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.016425][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.017209][T10149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.126657][T10149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.135646][T10149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.144495][T10149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.153418][T10149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.214431][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.224823][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.230567][T10309] XFS (loop1): Ending clean mount [ 275.235562][T10326] loop2: detected capacity change from 0 to 512 [ 275.241844][T10309] XFS (loop1): Quotacheck needed: Please wait. [ 275.257484][T10309] XFS (loop1): Quotacheck: Done. [ 275.262690][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.271268][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.288816][T10326] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.298238][T10326] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 275.329064][ T5285] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 275.341684][T10326] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 275.349897][T10326] System zones: 0-2, 18-18, 34-34 [ 275.364429][ T8907] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.374031][T10326] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 275.389753][T10326] EXT4-fs (loop2): 1 truncate cleaned up [ 275.402643][T10326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.476590][ T8555] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.516504][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.528498][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.544955][T10338] netlink: 56 bytes leftover after parsing attributes in process `syz.2.915'. [ 275.559374][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.562700][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 275.574161][ T5285] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 275.591869][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.605856][ T5285] usb 4-1: config 0 descriptor?? [ 275.675601][ T940] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 275.731325][T10342] loop2: detected capacity change from 0 to 8192 [ 275.740125][T10342] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.842714][ T940] usb 5-1: Using ep0 maxpacket: 8 [ 275.859364][ T940] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 275.869173][ T940] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 275.881146][ T940] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 275.891259][ T940] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 275.907470][ T940] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 275.919022][ T940] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 275.930471][ T940] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 275.945400][ T940] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 275.949074][T10353] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 275.954306][ T940] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 275.962386][T10353] netlink: 201364 bytes leftover after parsing attributes in process `syz.2.922'. [ 275.971478][ T940] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 275.988111][ T940] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 276.000260][ T940] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 276.012213][ T940] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 276.023640][ T940] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 276.041112][ T940] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 276.053802][ T940] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 276.061778][ T940] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 276.072664][ T5285] saitek 0003:06A3:0621.0014: item fetching failed at offset 5/7 [ 276.081066][ T5285] saitek 0003:06A3:0621.0014: parse failed [ 276.086976][ T940] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 276.098751][ T5285] saitek 0003:06A3:0621.0014: probe with driver saitek failed with error -22 [ 276.108190][ T940] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 276.121862][ T940] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 276.133040][ T940] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 276.156060][ T940] usb 5-1: string descriptor 0 read error: -22 [ 276.162429][ T940] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 276.172182][ T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.194048][ T940] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 276.640384][ T29] audit: type=1800 audit(265.080:271): pid=10361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.924" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 276.714390][ T5322] usb 4-1: USB disconnect, device number 15 [ 276.740119][T10363] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 276.870355][ T5237] Bluetooth: hci4: command tx timeout [ 276.883420][T10369] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 277.362279][T10393] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 277.795050][T10398] netlink: 436 bytes leftover after parsing attributes in process `syz.2.939'. [ 277.877299][T10404] loop0: detected capacity change from 0 to 2048 [ 277.901318][T10404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.917522][T10404] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.941: bg 0: block 265: padding at end of block bitmap is not set [ 277.956909][T10021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.000395][T10408] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 278.013637][T10410] netlink: 536 bytes leftover after parsing attributes in process `syz.1.943'. [ 278.065587][T10414] loop0: detected capacity change from 0 to 64 [ 278.135275][ T5287] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 278.297573][ T5287] usb 3-1: Using ep0 maxpacket: 8 [ 278.304168][T10400] netlink: 'syz.2.940': attribute type 10 has an invalid length. [ 278.312213][T10400] netlink: 40 bytes leftover after parsing attributes in process `syz.2.940'. [ 278.319609][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 278.338123][ T5287] usb 3-1: unable to get BOS descriptor or descriptor too short [ 278.347419][ T5287] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 278.437600][ T5287] usb 3-1: can't read configurations, error -71 [ 278.514547][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 278.527861][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.554237][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.672891][ T25] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 278.695181][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.756269][ T25] usb 2-1: config 0 descriptor?? [ 278.784212][ T29] audit: type=1800 audit(267.064:272): pid=10422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.947" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 278.881353][T10424] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 279.045568][ T5322] usb 5-1: USB disconnect, device number 16 [ 279.122131][ T5237] Bluetooth: hci4: command tx timeout [ 279.138848][T10437] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 279.147950][T10437] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 279.190557][T10439] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 279.271328][ T25] aquacomputer_d5next 0003:0C70:F00D.0015: unknown main item tag 0x0 [ 279.279849][ T25] aquacomputer_d5next 0003:0C70:F00D.0015: unknown main item tag 0x0 [ 279.288584][ T25] aquacomputer_d5next 0003:0C70:F00D.0015: unknown main item tag 0x0 [ 279.367734][ T25] aquacomputer_d5next 0003:0C70:F00D.0015: unknown main item tag 0x0 [ 279.383874][ T25] aquacomputer_d5next 0003:0C70:F00D.0015: unknown main item tag 0x0 [ 279.393982][T10446] loop2: detected capacity change from 0 to 512 [ 279.401452][T10446] EXT4-fs: Ignoring removed nobh option [ 279.407407][ T25] aquacomputer_d5next 0003:0C70:F00D.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0 [ 279.420449][T10446] EXT4-fs (loop2): can't mount with both data=journal and dax [ 279.885023][ T29] audit: type=1800 audit(267.923:273): pid=10450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.958" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 279.910203][ T25] usb 2-1: USB disconnect, device number 15 [ 280.290993][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 280.486025][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 280.492526][ T8] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.502473][ T8] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 280.514000][ T8] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 280.527354][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.534362][ T8] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 280.544259][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.553969][ T8] usb 5-1: config 0 descriptor?? [ 280.626860][ T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 280.681218][ T940] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 280.789312][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 280.796345][T10471] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 280.804487][T10471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.966'. [ 280.819816][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 280.831170][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 280.838826][ T25] usb 3-1: can't read configurations, error -71 [ 280.876111][ T940] usb 2-1: Using ep0 maxpacket: 32 [ 280.889741][ T940] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 280.899073][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.907137][ T940] usb 2-1: Product: syz [ 280.911771][ T940] usb 2-1: Manufacturer: syz [ 280.916402][ T940] usb 2-1: SerialNumber: syz [ 280.922617][ T940] usb 2-1: config 0 descriptor?? [ 281.001184][ T8] hid-thrustmaster 0003:044F:B65D.0016: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 281.215485][ T8] hid-thrustmaster 0003:044F:B65D.0016: setup data couldn't be sent [ 281.226398][ C0] hid-thrustmaster 0003:044F:B65D.0016: URB to get model id failed with error -71 [ 281.240693][ T8] usb 5-1: USB disconnect, device number 17 [ 281.526507][ T5285] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 281.585358][ T940] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 281.624680][ T940] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 281.634617][ T940] usb 2-1: USB disconnect, device number 16 [ 281.691493][ T5285] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.701593][ T5285] usb 4-1: config 0 has no interface number 0 [ 281.709390][ T5285] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 281.719684][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.728801][ T5285] usb 4-1: Product: syz [ 281.733205][ T5285] usb 4-1: Manufacturer: syz [ 281.737804][ T5285] usb 4-1: SerialNumber: syz [ 281.743450][ T5285] usb 4-1: config 0 descriptor?? [ 281.969483][ T5285] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 281.978094][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 281.988922][ T5285] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.999331][ T5285] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 282.007389][ T5285] usb 4-1: media controller created [ 282.018306][ T5285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.089503][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 282.144932][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.163258][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.181338][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 282.191496][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.191935][ T5285] usb 4-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 282.201152][ T25] usb 3-1: config 0 descriptor?? [ 282.216077][ T5285] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 282.250370][ T5285] DVB: Unable to find symbol mxl5005s_attach() [ 282.279818][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 282.298345][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 282.308973][ T8] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 282.323230][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.334253][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.346130][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.357433][ T8] usb 5-1: Product: syz [ 282.363708][ T8] usb 5-1: Manufacturer: syz [ 282.368464][ T8] usb 5-1: SerialNumber: syz [ 282.474761][ T5322] usb 4-1: USB disconnect, device number 16 [ 282.544562][T10497] loop1: detected capacity change from 0 to 32768 [ 282.564883][T10497] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 282.573243][T10497] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 282.597224][T10497] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 282.606152][ T5284] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 282.613181][ T5284] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 282.644831][ T5284] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 29ms [ 282.654722][ T5284] gfs2: fsid=syz:syz.0: jid=0: Done [ 282.659992][T10497] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 282.677934][ T25] wacom 0003:056A:0000.0017: unknown main item tag 0x0 [ 282.687431][ T25] wacom 0003:056A:0000.0017: unknown main item tag 0x0 [ 282.694335][ T25] wacom 0003:056A:0000.0017: unknown main item tag 0x0 [ 282.701554][ T25] wacom 0003:056A:0000.0017: unknown main item tag 0x0 [ 282.710360][ T25] wacom 0003:056A:0000.0017: unknown main item tag 0x0 [ 282.717253][ T25] wacom 0003:056A:0000.0017: unknown main item tag 0x0 [ 282.726484][ T25] wacom 0003:056A:0000.0017: unknown main item tag 0x0 [ 282.735869][ T25] wacom 0003:056A:0000.0017: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 282.750528][ T25] wacom 0003:056A:0000.0017: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.2-1/input0 [ 282.772944][ T25] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0000.0017/input/input43 [ 282.893044][T10497] gfs2: fsid=syz:syz.0: found 1 quota changes [ 282.911411][ T25] usb 3-1: USB disconnect, device number 23 [ 283.038198][ T8] usb 5-1: 0:2 : does not exist [ 283.057759][ T8] usb 5-1: USB disconnect, device number 18 [ 283.075797][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.385987][T10515] loop3: detected capacity change from 0 to 1024 [ 283.653082][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 283.688740][T10519] loop4: detected capacity change from 0 to 256 [ 284.028774][ T5284] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 284.066878][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 284.068414][T10066] hfsplus: bad catalog entry type [ 284.142031][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 284.191397][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 284.204906][T10521] netlink: 'syz.2.985': attribute type 10 has an invalid length. [ 284.212742][T10521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.985'. [ 284.236223][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.239560][ T5284] usb 3-1: unable to get BOS descriptor or descriptor too short [ 284.251255][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.255739][ T5284] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 284.281999][ T5284] usb 3-1: can't read configurations, error -71 [ 284.295177][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 284.306650][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.324076][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.338629][ T8] usb 5-1: config 0 descriptor?? [ 284.392757][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.479008][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.500832][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.508699][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.516143][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.524834][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.533458][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 284.543014][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.552884][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.658408][T10537] chnl_net:caif_netlink_parms(): no params data found [ 284.668205][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 284.670832][ T76] bridge_slave_1: left allmulticast mode [ 284.682779][ T76] bridge_slave_1: left promiscuous mode [ 284.688838][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.697725][ T76] bridge_slave_0: left allmulticast mode [ 284.703732][ T76] bridge_slave_0: left promiscuous mode [ 284.709532][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.764877][T10543] loop0: detected capacity change from 0 to 128 [ 284.791910][ T8] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 284.801885][ T8] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0018/input/input46 [ 284.829322][ T8] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 284.844361][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 284.860598][T10545] loop0: detected capacity change from 0 to 256 [ 284.868855][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.884686][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.904681][T10545] FAT-fs (loop0): Directory bread(block 64) failed [ 284.911445][ T25] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 284.911560][T10545] FAT-fs (loop0): Directory bread(block 65) failed [ 284.920692][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.921910][ T25] usb 2-1: config 0 descriptor?? [ 284.928199][T10545] FAT-fs (loop0): Directory bread(block 66) failed [ 284.948770][T10545] FAT-fs (loop0): Directory bread(block 67) failed [ 284.955531][T10545] FAT-fs (loop0): Directory bread(block 68) failed [ 284.962231][T10545] FAT-fs (loop0): Directory bread(block 69) failed [ 284.968943][T10545] FAT-fs (loop0): Directory bread(block 70) failed [ 284.969215][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.976316][T10545] FAT-fs (loop0): Directory bread(block 71) failed [ 284.991199][T10545] FAT-fs (loop0): Directory bread(block 72) failed [ 284.998760][T10545] FAT-fs (loop0): Directory bread(block 73) failed [ 285.005893][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.041854][ T76] bond0 (unregistering): Released all slaves [ 285.044178][ T937] usb 5-1: USB disconnect, device number 19 [ 285.054287][T10547] loop2: detected capacity change from 0 to 1024 [ 285.170453][T10547] hfsplus: bad catalog entry type [ 285.192350][ T12] hfsplus: b-tree write err: -5, ino 4 [ 285.312067][T10553] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 285.478975][T10561] loop0: detected capacity change from 0 to 1024 [ 285.702148][ T25] wacom 0003:056A:5000.0019: unknown main item tag 0x0 [ 285.721836][T10537] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.754604][ T25] wacom 0003:056A:5000.0019: unknown main item tag 0x0 [ 285.761705][ T25] wacom 0003:056A:5000.0019: unknown main item tag 0x0 [ 285.768932][T10537] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.769112][T10537] bridge_slave_0: entered allmulticast mode [ 285.786039][ T25] wacom 0003:056A:5000.0019: unknown main item tag 0x0 [ 285.797865][ T25] wacom 0003:056A:5000.0019: unknown main item tag 0x0 [ 285.802156][T10537] bridge_slave_0: entered promiscuous mode [ 285.805429][ T25] wacom 0003:056A:5000.0019: unknown main item tag 0x0 [ 285.830737][ T25] wacom 0003:056A:5000.0019: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.1-1/input0 [ 285.856625][ T25] usb 2-1: USB disconnect, device number 17 [ 285.868348][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 285.891183][T10537] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.911911][T10537] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.922850][T10537] bridge_slave_1: entered allmulticast mode [ 285.933798][T10537] bridge_slave_1: entered promiscuous mode [ 285.962823][ T76] hsr_slave_0: left promiscuous mode [ 285.981736][ T76] hsr_slave_1: left promiscuous mode [ 285.992805][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.021420][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.037073][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.050469][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.069186][ T76] veth1_macvtap: left promiscuous mode [ 286.093253][ T76] veth0_macvtap: left promiscuous mode [ 286.119225][ T76] veth1_vlan: left promiscuous mode [ 286.132851][ T76] veth0_vlan: left promiscuous mode [ 286.207649][T10021] hfsplus: bad catalog entry type [ 286.370047][T10577] loop4: detected capacity change from 0 to 1024 [ 286.600242][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'. [ 286.660619][T10565] loop2: detected capacity change from 0 to 32768 [ 286.713106][T10565] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.723587][ T76] team0 (unregistering): Port device team_slave_1 removed [ 286.742664][ T76] team0 (unregistering): Port device team_slave_0 removed [ 286.750066][ T5237] Bluetooth: hci0: command tx timeout [ 286.785608][T10565] XFS (loop2): Ending clean mount [ 286.808433][ T29] audit: type=1800 audit(274.476:274): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1000" name="bus" dev="loop2" ino=9289 res=0 errno=0 [ 286.829479][ T8555] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 287.005531][T10537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.123177][T10591] tipc: Started in network mode [ 287.129062][T10591] tipc: Node identity 5f5f2eaa, cluster identity 4711 [ 287.138037][T10591] tipc: Enabling of bearer rejected, failed to enable media [ 287.155497][T10537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.644012][T10589] loop1: detected capacity change from 0 to 32768 [ 287.649827][T10597] loop2: detected capacity change from 0 to 256 [ 287.662423][T10537] team0: Port device team_slave_0 added [ 287.679701][T10589] JBD2: Ignoring recovery information on journal [ 287.700523][T10537] team0: Port device team_slave_1 added [ 287.762173][T10589] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 287.791254][T10537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.798243][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.832498][T10597] FAT-fs (loop2): Directory bread(block 64) failed [ 287.839063][T10597] FAT-fs (loop2): Directory bread(block 65) failed [ 287.855338][T10597] FAT-fs (loop2): Directory bread(block 66) failed [ 287.855415][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.862960][T10597] FAT-fs (loop2): Directory bread(block 67) failed [ 287.871706][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.878824][T10537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.883281][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.893763][T10597] FAT-fs (loop2): Directory bread(block 68) failed [ 287.903388][T10537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.914224][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.941357][T10537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.952745][T10589] (syz.1.1003,10589,1):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume. [ 287.954664][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.972754][T10597] FAT-fs (loop2): Directory bread(block 69) failed [ 287.979503][T10597] FAT-fs (loop2): Directory bread(block 70) failed [ 287.986175][T10597] FAT-fs (loop2): Directory bread(block 71) failed [ 287.986360][T10589] (syz.1.1003,10589,1):ocfs2_group_add:511 ERROR: status = -22 [ 287.992738][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 288.003019][T10597] FAT-fs (loop2): Directory bread(block 72) failed [ 288.014128][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.027745][T10597] FAT-fs (loop2): Directory bread(block 73) failed [ 288.187731][ T8907] ocfs2: Unmounting device (7,1) on (node local) [ 288.204416][T10537] hsr_slave_0: entered promiscuous mode [ 288.226502][T10537] hsr_slave_1: entered promiscuous mode [ 288.238924][T10537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.252865][T10537] Cannot create hsr debugfs directory [ 288.270336][T10618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1013'. [ 288.288510][T10618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1013'. [ 288.313861][T10618] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 288.323949][T10618] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744071562199068) [ 288.525383][T10626] loop2: detected capacity change from 0 to 1024 [ 288.759658][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 288.985320][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.002216][ T5241] Bluetooth: hci0: command tx timeout [ 289.133189][T10638] loop4: detected capacity change from 0 to 1024 [ 289.444274][ T8555] hfsplus: bad catalog entry type [ 289.473004][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 289.485236][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.497034][T10637] loop1: detected capacity change from 0 to 4096 [ 289.525714][T10603] chnl_net:caif_netlink_parms(): no params data found [ 289.528310][T10641] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.558014][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.626775][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.753301][T10603] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.765327][T10603] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.834400][T10603] bridge_slave_0: entered allmulticast mode [ 289.859754][T10603] bridge_slave_0: entered promiscuous mode [ 289.876927][T10603] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.899988][T10603] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.909201][T10603] bridge_slave_1: entered allmulticast mode [ 289.922579][ T5286] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 289.931924][T10603] bridge_slave_1: entered promiscuous mode [ 289.970590][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.985160][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.992641][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.002122][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.020475][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.027710][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.056137][T10603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.097862][T10603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.098733][ T5286] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 290.116004][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.124258][ T5286] usb 2-1: Product: syz [ 290.128553][ T5286] usb 2-1: Manufacturer: syz [ 290.133157][ T5286] usb 2-1: SerialNumber: syz [ 290.142882][ T5286] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 290.150917][ T76] bridge_slave_1: left allmulticast mode [ 290.169719][ T76] bridge_slave_1: left promiscuous mode [ 290.169726][ T8] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 290.199725][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.210753][ T76] bridge_slave_0: left allmulticast mode [ 290.216717][ T76] bridge_slave_0: left promiscuous mode [ 290.222504][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.226188][ T5237] Bluetooth: hci1: command tx timeout [ 290.364506][T10654] loop4: detected capacity change from 0 to 32768 [ 290.414854][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.426945][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.442375][ T76] bond0 (unregistering): Released all slaves [ 290.469950][T10654] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 290.486318][T10603] team0: Port device team_slave_0 added [ 290.499784][T10537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.513721][T10654] XFS (loop4): Ending clean mount [ 290.528474][T10537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.538398][T10603] team0: Port device team_slave_1 added [ 290.570495][T10537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.578759][T10149] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 290.589679][T10537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.662839][T10603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.669829][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.696263][T10603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.707135][T10682] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 290.708489][T10603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.722279][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.748551][T10603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.836257][ T5284] usb 2-1: USB disconnect, device number 18 [ 290.880674][T10603] hsr_slave_0: entered promiscuous mode [ 290.921776][T10603] hsr_slave_1: entered promiscuous mode [ 290.928523][T10692] loop4: detected capacity change from 0 to 64 [ 290.936487][T10603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.984561][T10603] Cannot create hsr debugfs directory [ 290.993190][T10697] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 291.007685][T10656] chnl_net:caif_netlink_parms(): no params data found [ 291.024949][ T76] hsr_slave_0: left promiscuous mode [ 291.036175][ T76] hsr_slave_1: left promiscuous mode [ 291.059985][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.070240][T10702] program syz.4.1026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.080329][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.094714][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.102232][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.159012][ T76] veth1_macvtap: left promiscuous mode [ 291.164570][ T76] veth0_macvtap: left promiscuous mode [ 291.178934][ T76] veth1_vlan: left promiscuous mode [ 291.184434][ T76] veth0_vlan: left promiscuous mode [ 291.255382][ T5237] Bluetooth: hci0: command tx timeout [ 291.380562][ T76] team0 (unregistering): Port device team_slave_1 removed [ 291.401534][ T76] team0 (unregistering): Port device team_slave_0 removed [ 291.515239][ T8] usb 2-1: Service connection timeout for: 256 [ 291.522464][ T8] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 291.551734][ T8] ath9k_htc: Failed to initialize the device [ 291.563820][ T5284] usb 2-1: ath9k_htc: USB layer deinitialized [ 291.682775][T10723] loop1: detected capacity change from 0 to 1024 [ 291.801158][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 292.038759][T10705] loop4: detected capacity change from 0 to 32768 [ 292.072826][T10705] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 292.090693][T10705] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 292.111779][T10705] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 292.205463][T10705] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 292.305311][ T5237] Bluetooth: hci3: command tx timeout [ 292.357568][T10656] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.364853][T10656] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.372465][T10656] bridge_slave_0: entered allmulticast mode [ 292.379161][T10656] bridge_slave_0: entered promiscuous mode [ 292.397797][T10537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.406493][T10656] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.433226][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.441328][T10656] bridge_slave_1: entered allmulticast mode [ 292.448172][T10656] bridge_slave_1: entered promiscuous mode [ 292.469593][ T5237] Bluetooth: hci1: command tx timeout [ 292.519395][T10745] loop4: detected capacity change from 0 to 4096 [ 292.534700][T10656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.554335][T10537] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.587558][T10656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.628933][T10745] ntfs3(loop4): failed to convert "0000" to iso8859-14 [ 292.644049][ T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.665007][T10745] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 292.684832][T10745] ntfs3(loop4): failed to convert name for inode 1e. [ 292.715921][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.723067][ T2567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.757422][T10656] team0: Port device team_slave_0 added [ 292.790306][T10656] team0: Port device team_slave_1 added [ 292.812129][ T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.830671][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.837799][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.889930][ T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.923496][T10656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.942756][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.990626][T10656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.015248][T10656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.032160][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.068237][T10748] loop1: detected capacity change from 0 to 32768 [ 293.076561][T10656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.105639][T10748] gfs2: fsid=\]+_.)!]^\: Trying to join cluster "lock_nolock", "\]+_.)!]^\" [ 293.106033][ T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.119173][T10748] gfs2: fsid=\]+_.)!]^\: Now mounting FS (format 0)... [ 293.140558][T10748] gfs2: fsid=\]+_.)!]^\.s: journal 0 mapped with 3 extents in 0ms [ 293.230821][T10748] gfs2: fsid=\]+_.)!]^\.s: first mount done, others may mount [ 293.256121][T10656] hsr_slave_0: entered promiscuous mode [ 293.260322][T10762] loop4: detected capacity change from 0 to 32768 [ 293.268393][T10656] hsr_slave_1: entered promiscuous mode [ 293.275513][T10656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.275825][T10762] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 293.283554][T10656] Cannot create hsr debugfs directory [ 293.298698][T10762] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 293.340714][T10603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.371258][T10762] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 293.385204][T10603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.395727][T10603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.417445][ T940] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 293.428449][ T940] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 293.450179][ T76] bridge_slave_1: left allmulticast mode [ 293.456761][ T76] bridge_slave_1: left promiscuous mode [ 293.462449][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.467950][ T940] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 293.480259][ T940] gfs2: fsid=syz:syz.0: jid=0: Done [ 293.480470][ T76] bridge_slave_0: left allmulticast mode [ 293.485486][T10762] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 293.498221][ T76] bridge_slave_0: left promiscuous mode [ 293.504445][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.515426][ T5237] Bluetooth: hci0: command tx timeout [ 293.551346][T10770] loop1: detected capacity change from 0 to 1024 [ 293.562401][T10770] EXT4-fs (loop1): Test dummy encryption mode enabled [ 293.570800][T10770] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 293.598846][T10770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.648524][ T8907] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.698230][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.700486][T10774] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 293.718530][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.753684][ T76] bond0 (unregistering): Released all slaves [ 293.773873][T10537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.789059][T10603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.849950][T10603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.862647][ T76] tipc: Left network mode [ 293.920127][T10603] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.009211][ T945] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.016338][ T945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.029033][ T940] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 294.043820][ T945] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.050966][ T945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.095694][T10537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.135733][T10603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.195127][T10537] veth0_vlan: entered promiscuous mode [ 294.205179][ T940] usb 2-1: Using ep0 maxpacket: 16 [ 294.211601][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.239535][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.253225][ T76] hsr_slave_0: left promiscuous mode [ 294.272611][ T940] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.286232][ T76] hsr_slave_1: left promiscuous mode [ 294.303186][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.311269][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.318765][ T940] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 294.331057][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.331614][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.349561][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.357359][ T940] usb 2-1: config 0 descriptor?? [ 294.379906][ T76] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 294.397154][ T76] batman_adv: batadv0: Removing interface: virt_wifi0 [ 294.413847][ T76] veth1_macvtap: left promiscuous mode [ 294.420553][ T76] veth0_macvtap: left promiscuous mode [ 294.426128][ T76] veth1_vlan: left promiscuous mode [ 294.435146][ T76] veth0_vlan: left promiscuous mode [ 294.538847][T10785] loop4: detected capacity change from 0 to 32768 [ 294.548479][T10785] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1035 (10785) [ 294.558799][ T5237] Bluetooth: hci3: command tx timeout [ 294.586218][T10785] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 294.597716][T10785] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 294.606726][T10785] BTRFS info (device loop4): using free-space-tree [ 294.625247][ T76] team0 (unregistering): Port device team_slave_1 removed [ 294.642508][ T76] team0 (unregistering): Port device team_slave_0 removed [ 294.713572][ T29] audit: type=1800 audit(281.777:275): pid=10785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1035" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 294.723069][ T5237] Bluetooth: hci1: command tx timeout [ 294.752419][T10537] veth1_vlan: entered promiscuous mode [ 294.772950][T10537] veth0_macvtap: entered promiscuous mode [ 294.786519][T10149] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 294.824618][T10537] veth1_macvtap: entered promiscuous mode [ 294.845295][ T940] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0 [ 294.854045][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.856652][ T940] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0 [ 294.872737][ T940] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0 [ 294.880473][ T940] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0 [ 294.884615][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.888233][ T940] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0 [ 294.906299][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.916743][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.931160][ T940] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0 [ 294.941720][ T940] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0 [ 294.943578][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.949389][ T940] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0 [ 294.949424][ T940] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0 [ 294.949450][ T940] hid-multitouch 0003:0457:07DA.001A: unknown main item tag 0x0 [ 294.980517][ T940] hid-multitouch 0003:0457:07DA.001A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 294.984029][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.984902][T10537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.090004][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.101678][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.111533][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.129561][ T940] usb 2-1: USB disconnect, device number 19 [ 295.144742][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.154599][T10537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.171490][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.182977][T10537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.213354][T10603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.227516][T10537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.255990][T10537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.270902][T10537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.286327][T10537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.792785][T10603] veth0_vlan: entered promiscuous mode [ 295.833822][T10656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 295.851984][T10656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 295.869919][T10603] veth1_vlan: entered promiscuous mode [ 295.890869][T10656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.901025][T10656] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.903385][ T8569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.925488][ T8569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.976521][ T8569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.984503][ T8569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.994617][T10603] veth0_macvtap: entered promiscuous mode [ 296.012344][T10603] veth1_macvtap: entered promiscuous mode [ 296.036473][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.047308][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.057408][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.067954][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.081156][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.091778][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.102182][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.113006][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.124264][T10603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.137146][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.148007][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.158850][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.169946][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.179811][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.190473][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.200594][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.211463][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.222294][T10603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.233063][T10603] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.244922][T10603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.253743][T10603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.262579][T10603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.337324][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 296.507309][T10656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.584491][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.612602][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.710359][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 296.782566][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.805441][ T5237] Bluetooth: hci3: command tx timeout [ 296.829621][T10656] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.874539][ T8] usb 2-1: config 0 descriptor?? [ 296.892247][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.915815][T10843] loop4: detected capacity change from 0 to 40427 [ 296.932544][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.935091][ T2532] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.947095][ T2532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.967862][T10843] F2FS-fs (loop4): invalid crc value [ 296.974235][ T2532] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.981380][ T2532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.988951][ T5237] Bluetooth: hci1: command tx timeout [ 297.025792][T10656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.036309][T10656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.078908][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.109011][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.135067][T10843] F2FS-fs (loop4): Found nat_bits in checkpoint [ 297.291007][T10656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.347681][T10843] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 297.359902][ T8] kone 0003:1E7D:2CED.001B: item fetching failed at offset 2/5 [ 297.379629][ T8] kone 0003:1E7D:2CED.001B: parse failed [ 297.385343][ T8] kone 0003:1E7D:2CED.001B: probe with driver kone failed with error -22 [ 297.391150][T10656] veth0_vlan: entered promiscuous mode [ 297.438182][T10149] syz-executor: attempt to access beyond end of device [ 297.438182][T10149] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 297.448749][T10656] veth1_vlan: entered promiscuous mode [ 297.474841][T10149] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 297.532223][T10656] veth0_macvtap: entered promiscuous mode [ 297.556341][T10656] veth1_macvtap: entered promiscuous mode [ 297.599061][ T8] usb 2-1: USB disconnect, device number 20 [ 297.613733][T10849] loop3: detected capacity change from 0 to 32768 [ 297.631201][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.660197][T10849] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 297.663967][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.684747][T10849] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 297.709739][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.731388][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.756338][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.779579][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.809972][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.825925][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.826671][T10849] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 297.847060][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.866308][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 297.873106][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 297.874874][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.901875][T10656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.924184][T10870] loop0: detected capacity change from 0 to 32768 [ 297.933073][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.945036][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 66ms [ 297.959560][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 297.970684][T10849] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 297.972402][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.009242][T10870] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 298.009951][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.037126][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.047066][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.057540][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.067759][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.078600][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.088490][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.098997][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.109990][T10656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.127673][T10870] (syz.0.1041,10870,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 298.144192][T10870] (syz.0.1041,10870,0):ocfs2_prepare_dir_for_insert:4277 ERROR: status = -2 [ 298.149442][T10656] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.153042][T10870] (syz.0.1041,10870,0):ocfs2_link:760 ERROR: status = -2 [ 298.178324][T10656] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.187057][T10656] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.202570][T10656] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.246532][T10870] (syz.0.1041,10870,1):ocfs2_link:838 ERROR: status = -2 [ 298.344233][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.353037][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.389794][T10603] ocfs2: Unmounting device (7,0) on (node local) [ 298.444732][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.490950][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.724818][T10914] loop1: detected capacity change from 0 to 1024 [ 298.980688][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 299.056214][ T5237] Bluetooth: hci3: command tx timeout [ 299.130117][ T29] audit: type=1804 audit(285.838:276): pid=10849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1040" name="/newroot/2/file0/bus" dev="loop3" ino=9378 res=1 errno=0 [ 299.251014][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 299.297638][T10927] loop3: detected capacity change from 0 to 1024 [ 299.322310][T10927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.347391][T10927] EXT4-fs error (device loop3): ext4_search_dir:1505: inode #12: block 7: comm syz.3.1048: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=65293, rec_len=0, size=56 fake=0 [ 299.387115][ T8907] hfsplus: bad catalog entry type [ 299.434420][T10537] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.478831][ T8] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 299.488051][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.505261][ T8] usb 5-1: Product: syz [ 299.510288][T10932] loop3: detected capacity change from 0 to 512 [ 299.518637][ T8] usb 5-1: Manufacturer: syz [ 299.524923][ T8] usb 5-1: SerialNumber: syz [ 299.529925][T10932] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.541778][ T8] usb 5-1: config 0 descriptor?? [ 299.572736][T10932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 299.656163][T10537] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 299.681842][ T76] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.779963][ T5285] usb 5-1: USB disconnect, device number 20 [ 299.793696][ T76] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.896913][ T76] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.018249][ T76] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.044961][T10941] loop0: detected capacity change from 0 to 128 [ 300.107073][ T29] audit: type=1800 audit(286.743:277): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1055" name="bus" dev="loop0" ino=1048928 res=0 errno=0 [ 300.107658][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.171889][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.180079][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.190050][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.197906][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 300.205371][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.233679][T10937] loop2: detected capacity change from 0 to 32768 [ 300.247625][T10937] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1053 (10937) [ 300.264273][ T76] bridge_slave_1: left allmulticast mode [ 300.276516][T10937] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 300.316932][ T76] bridge_slave_1: left promiscuous mode [ 300.317486][T10937] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 300.333550][T10937] BTRFS info (device loop2): using free-space-tree [ 300.336488][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.400083][T10939] loop3: detected capacity change from 0 to 32768 [ 300.415319][T10939] BTRFS: device /dev/loop3 (7:3) using temp-fsid 53a564bb-d78c-4f9d-8360-c86fb5dc8213 [ 300.428473][T10939] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1054 (10939) [ 300.442221][ T76] bridge_slave_0: left allmulticast mode [ 300.448866][ T76] bridge_slave_0: left promiscuous mode [ 300.457304][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.458461][T10939] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 300.487766][T10939] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 300.496455][T10939] BTRFS info (device loop3): using free-space-tree [ 300.710013][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.730403][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.742590][ T76] bond0 (unregistering): Released all slaves [ 300.828723][T10939] BTRFS info (device loop3): balance: start -f -d -m [ 300.838614][T10939] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 300.864389][T10939] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 300.937349][T10939] BTRFS info (device loop3): found 10 extents, stage: move data extents [ 301.059202][T10939] BTRFS info (device loop3): found 1 extents, stage: update data pointers [ 301.214952][T10656] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 301.305693][T10939] BTRFS info (device loop3): balance: ended with status: 0 [ 301.565689][T10537] BTRFS info (device loop3): last unmount of filesystem 53a564bb-d78c-4f9d-8360-c86fb5dc8213 [ 301.618564][ T76] hsr_slave_0: left promiscuous mode [ 301.680533][ T76] hsr_slave_1: left promiscuous mode [ 301.698816][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.709242][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.718670][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.723007][T11034] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 301.728927][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.796215][ T76] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 301.804438][ T76] batman_adv: batadv0: Removing interface: virt_wifi0 [ 301.815618][ T76] veth1_macvtap: left promiscuous mode [ 301.821210][ T76] veth0_macvtap: left promiscuous mode [ 301.826809][ T76] veth1_vlan: left promiscuous mode [ 301.832607][ T76] veth0_vlan: left promiscuous mode [ 301.868840][T11040] input: syz0 as /devices/virtual/input/input50 [ 301.997540][ T76] team0 (unregistering): Port device team_slave_1 removed [ 302.010428][ T76] team0 (unregistering): Port device team_slave_0 removed [ 302.091442][ T940] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 302.134739][T11048] loop4: detected capacity change from 0 to 64 [ 302.150733][T11036] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1065'. [ 302.162097][T11036] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1065'. [ 302.169630][T11048] hfs: Unknown parameter 'fileCumask' [ 302.250198][T10942] chnl_net:caif_netlink_parms(): no params data found [ 302.285406][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 302.305627][ T940] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=a2.43 [ 302.319455][ T5287] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 302.415997][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.436459][ T5237] Bluetooth: hci2: command tx timeout [ 302.442062][ T5237] Bluetooth: hci4: Malformed Event: 0x13 [ 302.495040][ T5287] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 302.845450][ T940] usb 3-1: Product: syz [ 302.849785][ T940] usb 3-1: Manufacturer: syz [ 302.854417][ T940] usb 3-1: SerialNumber: syz [ 302.859225][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.876023][ T940] usb 3-1: config 0 descriptor?? [ 302.885632][ T5287] usb 4-1: config 0 descriptor?? [ 302.939109][T10942] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.947338][T10942] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.982211][T10942] bridge_slave_0: entered allmulticast mode [ 303.010149][T10942] bridge_slave_0: entered promiscuous mode [ 303.025444][T10942] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.036460][T10942] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.044142][T10942] bridge_slave_1: entered allmulticast mode [ 303.057526][T10942] bridge_slave_1: entered promiscuous mode [ 303.107299][T10942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.135264][ T940] usb 3-1: Limiting number of CPorts to U8_MAX [ 303.142187][ T940] usb 3-1: Not enough endpoints found in device, aborting! [ 303.159849][T10942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.208082][ T29] audit: type=1800 audit(289.595:278): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1070" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 303.231657][T10942] team0: Port device team_slave_0 added [ 303.240251][T10942] team0: Port device team_slave_1 added [ 303.306187][T10942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.321727][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.331352][ T5287] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 303.364745][T10942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.388933][ T5285] usb 3-1: USB disconnect, device number 26 [ 303.419631][T10942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.428747][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.464459][T10942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.675298][T10942] hsr_slave_0: entered promiscuous mode [ 303.686918][T10942] hsr_slave_1: entered promiscuous mode [ 303.884587][ T5287] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 304.132458][ T5287] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 304.163936][ T5287] usb 4-1: USB disconnect, device number 17 [ 304.359293][T11097] netlink: 'syz.0.1074': attribute type 4 has an invalid length. [ 304.367990][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 304.587584][T11109] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 304.716435][ T5237] Bluetooth: hci2: command tx timeout [ 304.742699][T10942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.750967][T10942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.759422][T10942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.767762][T10942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.804370][T10942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.893012][T11101] loop0: detected capacity change from 0 to 32768 [ 304.916497][T10942] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.955934][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.963050][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.982392][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 304.999019][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.006133][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.009258][T11101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1076 (11101) [ 305.034975][T11101] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 305.045555][T11101] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 305.054519][T11101] BTRFS info (device loop0): using free-space-tree [ 305.078983][T11101] BTRFS info (device loop0): checking UUID tree [ 305.177456][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 305.184111][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.247415][T10603] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 305.284950][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.328318][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.360865][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 305.401254][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.421650][ T8] usb 4-1: config 0 descriptor?? [ 305.541611][T11149] loop2: detected capacity change from 0 to 64 [ 305.767964][T11159] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 305.777238][T10942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.179135][T10942] veth0_vlan: entered promiscuous mode [ 306.213596][ T8] ryos 0003:1E7D:31CE.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.3-1/input0 [ 306.245744][T10942] veth1_vlan: entered promiscuous mode [ 306.335411][T10942] veth0_macvtap: entered promiscuous mode [ 306.356964][T10942] veth1_macvtap: entered promiscuous mode [ 306.431577][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.442306][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.452467][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.463158][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.473315][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.511823][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.521929][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.532553][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.542466][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.553604][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.564470][T10942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.575395][ T29] audit: type=1800 audit(292.669:279): pid=11164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1081" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 306.632427][ T5287] usb 4-1: USB disconnect, device number 18 [ 306.640085][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.657625][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.667794][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.678709][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.692057][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.702572][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.712884][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.723664][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.734170][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.744716][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.756391][T10942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.766339][T10942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.775298][T10942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.784047][T10942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.792786][T10942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.872186][T11179] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.894735][T11188] mmap: syz.0.1088 (11188) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 306.906055][T11185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1090'. [ 306.932842][T11190] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 306.982095][ T5237] Bluetooth: hci2: command tx timeout [ 307.047735][ T2567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.054177][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.063428][ T2567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.070756][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.142278][T11204] netlink: 'syz.1.1052': attribute type 25 has an invalid length. [ 307.168801][T11204] netlink: 'syz.1.1052': attribute type 44 has an invalid length. [ 307.596761][T11234] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1105'. [ 307.606021][T11234] openvswitch: netlink: Actions may not be safe on all matching packets [ 308.297120][T11209] loop4: detected capacity change from 0 to 32768 [ 308.336901][T11209] (syz.4.1096,11209,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 308.362087][T11209] (syz.4.1096,11209,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 308.402661][T11209] JBD2: Ignoring recovery information on journal [ 308.464102][T11209] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 308.528304][T11274] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 308.590182][ T937] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 308.616999][T10149] ocfs2: Unmounting device (7,4) on (node local) [ 308.765044][T11258] loop2: detected capacity change from 0 to 32768 [ 308.772507][T11258] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1110 (11258) [ 308.809629][ T937] usb 4-1: Using ep0 maxpacket: 32 [ 308.826117][ T937] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 308.841454][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.912311][ T937] usb 4-1: config 0 descriptor?? [ 308.942867][ T937] gspca_main: sunplus-2.14.0 probing 041e:400b [ 309.071616][T11258] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.104449][T11258] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 309.131788][T11258] BTRFS info (device loop2): using free-space-tree [ 309.196956][ T5237] Bluetooth: hci2: command tx timeout [ 309.375503][T10656] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.712542][T11339] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 309.782909][T11343] vxcan1: tx address claim with dest, not broadcast [ 309.813843][ T937] gspca_sunplus: reg_r err -71 [ 309.829949][ T937] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 309.849771][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 309.855072][ T937] usb 4-1: USB disconnect, device number 19 [ 309.917985][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 310.015100][T11363] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 310.043977][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.078074][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.098836][ T8] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 310.108681][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.127641][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 310.180219][ T8] usb 3-1: config 0 descriptor?? [ 310.325811][T11382] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 310.452426][T11383] loop1: detected capacity change from 0 to 1024 [ 311.301391][T11377] fuse: Bad value for 'fd' [ 311.306886][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 311.373473][ T8] hid-led 0003:27B8:01ED.001D: unknown main item tag 0x0 [ 311.399859][ T8] hid-led 0003:27B8:01ED.001D: unknown main item tag 0x0 [ 311.409539][ T8] hid-led 0003:27B8:01ED.001D: unknown main item tag 0x0 [ 311.416707][ T8] hid-led 0003:27B8:01ED.001D: unknown main item tag 0x0 [ 311.424314][ T8] hid-led 0003:27B8:01ED.001D: unknown main item tag 0x0 [ 311.586787][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 311.625636][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 311.720186][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 311.821495][ T8] hid-led 0003:27B8:01ED.001D: probe with driver hid-led failed with error -71 [ 311.832685][T11413] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 311.850741][ T8] usb 3-1: USB disconnect, device number 27 [ 311.879278][T11387] loop0: detected capacity change from 0 to 32768 [ 311.929568][T11387] JBD2: Ignoring recovery information on journal [ 312.000385][T11422] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1152'. [ 312.038855][ T940] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 312.043018][T11426] netlink: 'syz.3.1153': attribute type 3 has an invalid length. [ 312.052547][T11387] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 312.070459][T11387] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 312.092347][T11387] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 312.102265][T11387] OCFS2: Returning error to the calling process. [ 312.108980][T11387] (syz.0.1138,11387,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5 [ 312.117519][T11387] (syz.0.1138,11387,0):__ocfs2_claim_clusters:2412 ERROR: status = -5 [ 312.132432][T11387] (syz.0.1138,11387,0):__ocfs2_claim_clusters:2420 ERROR: status = -5 [ 312.142440][T11387] (syz.0.1138,11387,0):ocfs2_block_group_alloc_contig:437 ERROR: status = -5 [ 312.151790][T11387] (syz.0.1138,11387,0):ocfs2_block_group_alloc:709 ERROR: status = -5 [ 312.163785][T11387] (syz.0.1138,11387,0):ocfs2_block_group_alloc:762 ERROR: status = -5 [ 312.226850][ T940] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 312.260708][ T940] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 312.336834][T11387] (syz.0.1138,11387,0):ocfs2_reserve_suballoc_bits:837 ERROR: status = -5 [ 312.360895][ T940] usb 2-1: Manufacturer: syz [ 312.423911][T11387] (syz.0.1138,11387,0):ocfs2_reserve_suballoc_bits:854 ERROR: status = -5 [ 312.438732][T11387] (syz.0.1138,11387,1):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -5 [ 312.447397][ T940] usb 2-1: config 0 descriptor?? [ 312.452492][T11387] (syz.0.1138,11387,1):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -5 [ 312.463812][T11387] (syz.0.1138,11387,1):ocfs2_expand_inline_dir:2822 ERROR: status = -5 [ 312.472271][T11387] (syz.0.1138,11387,1):ocfs2_extend_dir:3186 ERROR: status = -5 [ 312.479233][T11434] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1156'. [ 312.480372][T11387] (syz.0.1138,11387,1):ocfs2_prepare_dir_for_insert:4291 ERROR: status = -5 [ 312.492779][T11434] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 312.502484][T11387] (syz.0.1138,11387,1):ocfs2_mknod:296 ERROR: status = -5 [ 312.513412][T11387] (syz.0.1138,11387,1):ocfs2_mknod:500 ERROR: status = -5 [ 312.520614][T11387] (syz.0.1138,11387,1):ocfs2_mkdir:657 ERROR: status = -5 [ 312.588385][T10603] ocfs2: Unmounting device (7,0) on (node local) [ 312.651469][T11442] loop3: detected capacity change from 0 to 128 [ 312.796667][T11450] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 312.800727][T11452] netlink: 'syz.0.1159': attribute type 1 has an invalid length. [ 312.809311][T11450] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 312.809345][T11450] CPU: 1 UID: 0 PID: 11450 Comm: syz.2.1165 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 312.809388][T11450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 312.809406][T11450] RIP: 0010:strlen+0x2c/0x70 [ 312.809434][T11450] Code: 1e fa 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 312.809451][T11450] RSP: 0018:ffffc9000303f8a8 EFLAGS: 00010246 [ 312.809469][T11450] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 312.817405][T11452] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.1159'. [ 312.825575][T11450] RDX: ffffc900090d9000 RSI: 0000000000001ae2 RDI: 0000000000000000 [ 312.825593][T11450] RBP: 0000000000000000 R08: ffffffff901d3f2f R09: 1ffffffff203a7e5 [ 312.825604][T11450] R10: dffffc0000000000 R11: fffffbfff203a7e6 R12: ffffffffffffffff [ 312.825618][T11450] R13: ffff888072012000 R14: 0000000000000000 R15: dffffc0000000000 [ 312.825636][T11450] FS: 00007ff8035596c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 312.825654][T11450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.825667][T11450] CR2: 000000110c32671a CR3: 0000000060f58000 CR4: 00000000003526f0 [ 312.825683][T11450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 312.825696][T11450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 312.825708][T11450] Call Trace: [ 312.825716][T11450] [ 312.825725][T11450] ? __die_body+0x5f/0xb0 [ 312.825757][T11450] ? die_addr+0xb0/0xe0 [ 312.825775][T11450] ? exc_general_protection+0x3dd/0x5d0 [ 312.825813][T11450] ? asm_exc_general_protection+0x26/0x30 [ 312.825840][T11450] ? strlen+0x2c/0x70 [ 312.825861][T11450] ? __kasan_kmalloc+0x98/0xb0 [ 312.825884][T11450] getname_kernel+0x1d/0x2f0 [ 312.825911][T11450] kern_path+0x1d/0x50 [ 312.825937][T11450] btrfs_scan_one_device+0x19e/0xd90 [ 312.825966][T11450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.825988][T11450] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 312.826013][T11450] ? __pfx___mutex_lock+0x10/0x10 [ 312.826040][T11450] btrfs_get_tree+0x30e/0x1920 [ 312.826067][T11450] ? lockdep_init_map_type+0xa1/0x910 [ 312.826091][T11450] ? __pfx_btrfs_get_tree+0x10/0x10 [ 312.826113][T11450] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 312.826138][T11450] ? rcu_is_watching+0x15/0xb0 [ 312.826161][T11450] vfs_get_tree+0x90/0x2b0 [ 312.826183][T11450] fc_mount+0x1b/0xb0 [ 312.826204][T11450] btrfs_get_tree+0x652/0x1920 [ 312.826232][T11450] ? __pfx_aa_get_newest_label+0x10/0x10 [ 312.826259][T11450] ? __mutex_lock+0x2ef/0xd70 [ 312.826281][T11450] ? __pfx_btrfs_get_tree+0x10/0x10 [ 312.826310][T11450] ? apparmor_capable+0x13b/0x1b0 [ 312.826334][T11450] vfs_get_tree+0x90/0x2b0 [ 312.826356][T11450] vfs_cmd_create+0xa0/0x1f0 [ 312.826381][T11450] ? __se_sys_fsconfig+0xa15/0xf70 [ 312.826408][T11450] __se_sys_fsconfig+0xa1f/0xf70 [ 312.826436][T11450] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 312.836811][T11452] netlink: 'syz.0.1159': attribute type 2 has an invalid length. [ 312.846692][T11450] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.846726][T11450] ? rcu_is_watching+0x15/0xb0 [ 313.133035][T11450] ? rcu_is_watching+0x15/0xb0 [ 313.137801][T11450] ? __x64_sys_fsconfig+0x20/0xc0 [ 313.142824][T11450] do_syscall_64+0xf3/0x230 [ 313.147321][T11450] ? clear_bhb_loop+0x35/0x90 [ 313.151991][T11450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.157914][T11450] RIP: 0033:0x7ff80277dff9 [ 313.162335][T11450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.181935][T11450] RSP: 002b:00007ff803559038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 313.190342][T11450] RAX: ffffffffffffffda RBX: 00007ff802935f80 RCX: 00007ff80277dff9 [ 313.198304][T11450] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 313.206268][T11450] RBP: 00007ff8027f0296 R08: 0000000000000000 R09: 0000000000000000 [ 313.214226][T11450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.222183][T11450] R13: 0000000000000000 R14: 00007ff802935f80 R15: 00007ffdc035d198 [ 313.230156][T11450] [ 313.233173][T11450] Modules linked in: [ 313.239179][T11450] ---[ end trace 0000000000000000 ]--- [ 313.248249][ T940] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 313.254086][T11452] netlink: 'syz.0.1159': attribute type 1 has an invalid length. [ 313.262623][T11450] RIP: 0010:strlen+0x2c/0x70 [ 313.268582][T11450] Code: 1e fa 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 313.289274][T11450] RSP: 0018:ffffc9000303f8a8 EFLAGS: 00010246 [ 313.295549][T11450] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 313.303751][T11450] RDX: ffffc900090d9000 RSI: 0000000000001ae2 RDI: 0000000000000000 [ 313.311959][T11450] RBP: 0000000000000000 R08: ffffffff901d3f2f R09: 1ffffffff203a7e5 [ 313.320174][T11450] R10: dffffc0000000000 R11: fffffbfff203a7e6 R12: ffffffffffffffff [ 313.328302][T11450] R13: ffff888072012000 R14: 0000000000000000 R15: dffffc0000000000 [ 313.336469][T11450] FS: 00007ff8035596c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 313.345468][T11450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.352571][T11450] CR2: 00007f5533117ff0 CR3: 0000000060f58000 CR4: 00000000003526f0 [ 313.367047][T11450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.375441][T11450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.387866][T11450] Kernel panic - not syncing: Fatal exception [ 313.394205][T11450] Kernel Offset: disabled [ 313.398520][T11450] Rebooting in 86400 seconds..