last executing test programs: 1m0.895524269s ago: executing program 0 (id=819): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000380)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x5213, 0x8, 0xb, 0x200, 0x6, 0x8, 0x6, r3}, 0x0) 59.942238122s ago: executing program 0 (id=829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 59.449700604s ago: executing program 0 (id=837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0xb}, @mss, @window={0x3, 0x6, 0xff81}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x800, 0x5}], 0x8) sendto$inet(r0, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec", 0x43, 0x810, 0x0, 0x0) 59.19095269s ago: executing program 0 (id=840): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=@raw=[@generic={0x7, 0x4, 0x0, 0x1, 0xfffffff8}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 58.904073267s ago: executing program 0 (id=844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000009400128009000100766c616e00000000840002800c00020008000000000000004c0004800c00010084000000030000000c00010000000000ffffffff0c00010405000000060000000c00010085ffffff080000000c00010002000000ff0f00000c000100ff030000ff0f00000400038006000500810000001c0003806700010002100000060000000c"], 0xc8}}, 0x0) 58.652429273s ago: executing program 0 (id=849): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 43.566737295s ago: executing program 32 (id=849): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 7.08005088s ago: executing program 2 (id=1051): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5.767938561s ago: executing program 2 (id=1059): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4072, &(0x7f0000000400)="$eJzszz1KK2EUBuA3yZ3rKIEgaCWIwcJOxs5qdpFesgYrCxVnJ5biAtyHe7DUJYwMMtFBLQNBnqc4nPO9fH9hs731TblaGiV5Wj7uJjmap6mqj/Bfn29/7q7OUuyU40yTXH4/fPGw1rcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbZutLPx4kN0ma56uTfi678r8ry4M013XOp0m5P0vuJinqw1H2kvnpD3dMkpckoySvSRaz9X0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhLLobj7XAc/xZ07o/T1MUqbdv2nd05JgAABoEY+GMN1iQmwQLsdwaSXmdf8uv6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDmQAAAAAhPlb59F+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmwIAAP//k10WsQ==") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, 0x0, 0x2000c800) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r3, 0x8970, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 5.327352951s ago: executing program 4 (id=1062): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002b40), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4087, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x3a, 0x1, 0x0, 0x30) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x4e24, @empty}, 0x2a0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001000), &(0x7f0000001040)=0x4) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="ad063c3fb584acc8acb9ade0f441bf546b71c62bb73913949f3e39e0f0043b73e1f74ce0c97b5099628f74b99f862387368e28e9d934c59f133680c00be5228ddca0804a1f880402fb4ac1362232e7a9099f434a73e342e6bb489e8be7556e9298f9f4660ebb6173c50a436b5cbfa4bfccdc7248af908600a44d8f269fef67e95051e4ad8a9c7f7f9172cbe7b1309223bbaaa10f", 0x94, 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYRESOCT=r9, @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f00000001c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000240), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 3.675996491s ago: executing program 1 (id=1063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 3.675674342s ago: executing program 4 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r3, &(0x7f00000002c0)=""/10, 0x5b) 3.671065462s ago: executing program 2 (id=1065): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000500)={r3}, &(0x7f0000000600)=0x8) 3.483188746s ago: executing program 5 (id=1067): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7e6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x163a42, 0x8) write(r0, &(0x7f0000000180)='10', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x20042, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 3.167544714s ago: executing program 2 (id=1068): ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.392041672s ago: executing program 4 (id=1069): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0xfffe, 0x8000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="60a00200000000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) 2.340333614s ago: executing program 5 (id=1070): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.07595342s ago: executing program 1 (id=1072): r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x82}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x3022, 0x0) 1.853396305s ago: executing program 4 (id=1074): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000b40)={0xa, 0x0, 0x81, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 1.743890608s ago: executing program 3 (id=1075): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002b40), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4087, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x3a, 0x1, 0x0, 0x30) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x4e24, @empty}, 0x2a0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)='\r\x00\x00\x00', 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001000), &(0x7f0000001040)=0x4) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="ad063c3fb584acc8acb9ade0f441bf546b71c62bb73913949f3e39e0f0043b73e1f74ce0c97b5099628f74b99f862387368e28e9d934c59f133680c00be5228ddca0804a1f880402fb4ac1362232e7a9099f434a73e342e6bb489e8be7556e9298f9f4660ebb6173c50a436b5cbfa4bfccdc7248af908600a44d8f269fef67e95051e4ad8a9c7f7f9172cbe7b1309223bbaaa10f", 0x94, 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYRESOCT=r9, @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f00000001c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000240), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 1.743620938s ago: executing program 1 (id=1076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4094) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.607061691s ago: executing program 4 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 1.464626944s ago: executing program 3 (id=1078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c8000000100001040240", @ANYRES32=0x0, @ANYBLOB="88d10100000000009400128009000100766c616e00000000840002800c00020008000000000000004c0004800c00010084000000030000000c00010000000000ffffffff0c00010405000000060000000c00010085ffffff080000000c00010002000000ff0f00000c000100ff030000ff0f00000400038006000500810000001c0003806700010002100000060000000c0001000c0000000700000014000300766c616e30"], 0xc8}}, 0x0) 1.314372798s ago: executing program 2 (id=1079): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x68, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="583513000000", 0x0, 0x10000, 0x30520cf7f25f0c64, 0x0, 0x0}) 1.188189871s ago: executing program 3 (id=1080): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x9000) 1.046658644s ago: executing program 5 (id=1081): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x11, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 1.023795615s ago: executing program 2 (id=1082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00'}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, 0x0, 0x5) 949.706617ms ago: executing program 1 (id=1083): setns(0xc9, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="736563757269747981000000000000000000000000000000000000001e00000006"], &(0x7f0000000080)=0x2e) 755.628581ms ago: executing program 5 (id=1084): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) close(0x3) 755.415761ms ago: executing program 3 (id=1085): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 598.968725ms ago: executing program 1 (id=1086): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0x7ce, 0x10000, 0xefc9, 0x8, 0x5, "000eb32b6b520000b6510000f6ffefff00", 0x10, 0x5}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 519.506187ms ago: executing program 5 (id=1087): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e656c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f00000003c0)="f68b76b70927e0541ec7ba872269dad6ec4eecc5000000000000000000af", 0x1e}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 397.89481ms ago: executing program 3 (id=1088): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002b40), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4087, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x3a, 0x1, 0x0, 0x30) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x4e24, @empty}, 0x2a0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)='\r\x00\x00\x00', 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001000), &(0x7f0000001040)=0x4) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="ad063c3fb584acc8acb9ade0f441bf546b71c62bb73913949f3e39e0f0043b73e1f74ce0c97b5099628f74b99f862387368e28e9d934c59f133680c00be5228ddca0804a1f880402fb4ac1362232e7a9099f434a73e342e6bb489e8be7556e9298f9f4660ebb6173c50a436b5cbfa4bfccdc7248af908600a44d8f269fef67e95051e4ad8a9c7f7f9172cbe7b1309223bbaaa10f", 0x94, 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYRESOCT=r9, @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f00000001c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000240), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 397.31515ms ago: executing program 4 (id=1089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d661", 0x18}], 0x2) 299.987682ms ago: executing program 1 (id=1090): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) 209.254274ms ago: executing program 5 (id=1091): r0 = socket(0x1e, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1}}], 0x1, 0x2140, 0x0) 0s ago: executing program 3 (id=1092): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x68, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="583513000000", 0x0, 0x10000, 0x30520cf7f25f0c64, 0x0, 0x0}) kernel console output (not intermixed with test programs): mes ready [ 94.312920][ T4408] device syzkaller0 entered promiscuous mode [ 94.323290][ T4408] tipc: Resetting bearer [ 94.341697][ T4392] tipc: Resetting bearer [ 95.999098][ T4442] input: syz1 as /devices/virtual/input/input6 [ 97.810347][ T4392] tipc: Disabling bearer [ 97.822827][ T22] tipc: Node number set to 2978457388 [ 97.851114][ T4451] tipc: Started in network mode [ 97.863983][ T4451] tipc: Node identity ac14140f, cluster identity 4711 [ 97.872861][ T4451] tipc: New replicast peer: 255.255.255.255 [ 97.935363][ T4451] tipc: Enabled bearer , priority 10 [ 97.948641][ T4452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 97.999949][ T4453] netlink: 'syz.4.25': attribute type 1 has an invalid length. [ 98.064462][ T4451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.25'. [ 98.103302][ T4451] device veth0 entered promiscuous mode [ 98.344459][ T4469] tipc: Enabling of bearer rejected, failed to enable media [ 98.714673][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 99.057619][ T4382] tipc: Node number set to 2886997007 [ 99.071951][ T4482] device syzkaller0 entered promiscuous mode [ 99.675415][ T4487] input: syz1 as /devices/virtual/input/input7 [ 100.722190][ T4494] Zero length message leads to an empty skb [ 101.153327][ T4507] netlink: 'syz.0.44': attribute type 4 has an invalid length. [ 101.222000][ T4507] xt_hashlimit: max too large, truncated to 1048576 [ 101.248161][ T4507] xt_hashlimit: overflow, try lower: 0/0 [ 102.474795][ T4533] xt_hashlimit: size too large, truncated to 1048576 [ 103.083458][ C0] sched: RT throttling activated [ 103.273725][ T4516] input: syz1 as /devices/virtual/input/input8 [ 103.299189][ T4534] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.011581][ T4534] device bridge_slave_0 left promiscuous mode [ 105.034213][ T4534] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.084066][ T4551] tipc: Enabling of bearer rejected, failed to enable media [ 105.370751][ T26] audit: type=1800 audit(1786494170.365:2): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="zoned" dev="configfs" ino=34415 res=0 errno=0 [ 105.444367][ T26] audit: type=1800 audit(1786494170.385:3): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="size" dev="configfs" ino=34419 res=0 errno=0 [ 105.498736][ T26] audit: type=1800 audit(1786494170.385:4): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="power" dev="configfs" ino=34420 res=0 errno=0 [ 105.530937][ T4577] netlink: 84 bytes leftover after parsing attributes in process `syz.0.60'. [ 105.606344][ T4570] null_blk: disk my_nullb created [ 105.736419][ T4579] device syzkaller0 entered promiscuous mode [ 105.778796][ T4583] loop3: detected capacity change from 0 to 1024 [ 105.819577][ T4583] ext4: Unknown parameter 'uid' [ 107.529996][ T4589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.64'. [ 107.605243][ T4589] device vlan0 entered promiscuous mode [ 107.757881][ T4573] loop1: detected capacity change from 0 to 32768 [ 107.811114][ T4573] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.56 (4573) [ 107.882573][ T4573] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.933778][ T4573] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 107.942667][ T4573] BTRFS info (device loop1): using free space tree [ 108.183711][ T4573] BTRFS info (device loop1): enabling ssd optimizations [ 108.475147][ T4570] BTRFS info (device loop1): disk added /dev/nullb0 [ 108.923231][ T4283] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.109645][ T4626] lo speed is unknown, defaulting to 1000 [ 109.159024][ T4626] lo speed is unknown, defaulting to 1000 [ 109.195748][ T4626] lo speed is unknown, defaulting to 1000 [ 109.228196][ T4626] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.302630][ T4626] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.487111][ T4626] lo speed is unknown, defaulting to 1000 [ 109.515071][ T4626] lo speed is unknown, defaulting to 1000 [ 109.532182][ T4626] lo speed is unknown, defaulting to 1000 [ 109.568303][ T4626] lo speed is unknown, defaulting to 1000 [ 109.668671][ T4637] loop3: detected capacity change from 0 to 1024 [ 109.699694][ T4637] ext4: Unknown parameter 'uid' [ 109.720067][ T4626] lo speed is unknown, defaulting to 1000 [ 111.458616][ T4647] xt_hashlimit: max too large, truncated to 1048576 [ 111.514226][ T4647] xt_hashlimit: overflow, try lower: 0/0 [ 112.263995][ T4666] device syzkaller0 entered promiscuous mode [ 112.543884][ T4675] loop4: detected capacity change from 0 to 1024 [ 112.551266][ T4675] ext4: Unknown parameter 'uid' [ 114.485222][ T4693] netlink: 'syz.2.91': attribute type 4 has an invalid length. [ 114.550184][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 114.637413][ T4696] tipc: Enabling of bearer rejected, failed to enable media [ 114.674836][ T4693] xt_hashlimit: max too large, truncated to 1048576 [ 114.703074][ T4693] xt_hashlimit: overflow, try lower: 0/0 [ 115.180334][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.231358][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.259735][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.484230][ T4724] device syzkaller0 entered promiscuous mode [ 115.594073][ T4726] device syzkaller0 entered promiscuous mode [ 115.838817][ T4734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 116.409781][ T4741] input: syz1 as /devices/virtual/input/input9 [ 117.563656][ T4361] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.671968][ T4752] Bluetooth: MGMT ver 1.22 [ 117.689175][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 117.722233][ T4752] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 117.773703][ T4361] usb 3-1: Using ep0 maxpacket: 16 [ 117.818534][ T4361] usb 3-1: config 206 has an invalid interface number: 66 but max is 0 [ 117.860088][ T4361] usb 3-1: config 206 has no interface number 0 [ 117.873869][ T4361] usb 3-1: config 206 interface 66 has no altsetting 0 [ 117.905848][ T4361] usb 3-1: string descriptor 0 read error: -22 [ 117.938788][ T4361] usb 3-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 117.961146][ T4361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.050655][ T4361] dw2102: su3000_identify_state [ 118.076725][ T4361] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 118.097837][ T4361] dw2102: su3000_power_ctrl: 1, initialized 0 [ 118.117733][ T4361] dvb-usb: bulk message failed: -22 (2/0) [ 118.157403][ T4361] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.178634][ T4361] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 118.197316][ T4361] usb 3-1: media controller created [ 118.209532][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 118.230821][ T4361] dw2102: i2c transfer failed. [ 118.240106][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 118.253523][ T4361] dw2102: i2c transfer failed. [ 118.263961][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 118.280113][ T4361] dw2102: i2c transfer failed. [ 118.290059][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 118.322987][ T4361] dw2102: i2c transfer failed. [ 118.333128][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 118.339404][ T4773] xt_hashlimit: max too large, truncated to 1048576 [ 118.353641][ T4361] dw2102: i2c transfer failed. [ 118.358558][ T4773] xt_hashlimit: overflow, try lower: 0/0 [ 118.364662][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 118.381839][ T4361] dw2102: i2c transfer failed. [ 118.390836][ T4361] dvb-usb: MAC address: 02:02:02:02:02:02 [ 118.431583][ T4361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.476083][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 118.481885][ T4361] dw2102: command 0x51 transfer failed. [ 118.493721][ T4771] netlink: 'syz.0.110': attribute type 4 has an invalid length. [ 118.669095][ T4361] DVB: Unable to find symbol m88rs2000_attach() [ 118.677946][ T4361] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 118.771301][ T4782] device syzkaller0 entered promiscuous mode [ 118.890945][ T4790] device syzkaller0 entered promiscuous mode [ 118.899055][ T4788] device syzkaller0 entered promiscuous mode [ 118.910736][ T4361] rc_core: IR keymap rc-su3000 not found [ 118.916946][ T4361] Registered IR keymap rc-empty [ 118.927867][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.947040][ T4361] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 118.960765][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.972720][ T4361] input: TeVii S632 USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input10 [ 118.990570][ T4361] dvb-usb: schedule remote query interval to 150 msecs. [ 119.000392][ T4361] dw2102: su3000_power_ctrl: 0, initialized 1 [ 119.006947][ T4361] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 119.065364][ T4788] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 119.154931][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 119.160911][ T4361] dw2102: i2c transfer failed. [ 119.863519][ T4800] input: syz1 as /devices/virtual/input/input11 [ 120.633148][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 120.639083][ T4361] dw2102: i2c transfer failed. [ 120.803732][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 120.810380][ T4361] dw2102: i2c transfer failed. [ 120.816786][ T4806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 120.973539][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 120.979329][ T4361] dw2102: i2c transfer failed. [ 121.190711][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 121.239156][ T4361] dw2102: i2c transfer failed. [ 121.390671][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 121.408146][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 121.423990][ T4320] dw2102: i2c transfer failed. [ 121.468034][ T4819] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 121.603544][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 121.609498][ T4320] dw2102: i2c transfer failed. [ 121.759223][ T4320] usb 3-1: USB disconnect, device number 2 [ 121.925840][ T4320] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 121.937510][ T4838] netlink: 'syz.2.125': attribute type 4 has an invalid length. [ 122.015340][ T4838] xt_hashlimit: max too large, truncated to 1048576 [ 122.022014][ T4838] xt_hashlimit: overflow, try lower: 0/0 [ 122.042819][ T4839] device syzkaller0 entered promiscuous mode [ 123.430058][ T4847] input: syz1 as /devices/virtual/input/input12 [ 123.604418][ T4842] device syzkaller0 entered promiscuous mode [ 123.841910][ T4860] device syzkaller0 entered promiscuous mode [ 123.854262][ T4857] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 124.152817][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 124.249315][ T4872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 124.339358][ T4872] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 124.973725][ T4325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.163516][ T4325] usb 4-1: Using ep0 maxpacket: 16 [ 125.170631][ T4325] usb 4-1: config 206 has an invalid interface number: 66 but max is 0 [ 125.218636][ T4325] usb 4-1: config 206 has no interface number 0 [ 125.243730][ T4325] usb 4-1: config 206 interface 66 has no altsetting 0 [ 125.290461][ T4325] usb 4-1: string descriptor 0 read error: -22 [ 125.317115][ T4325] usb 4-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 125.373560][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.409461][ T4325] dw2102: su3000_identify_state [ 125.423546][ T4325] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 125.434021][ T4325] dw2102: su3000_power_ctrl: 1, initialized 0 [ 125.440142][ T4325] dvb-usb: bulk message failed: -22 (2/0) [ 125.473144][ T4325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.503340][ T4325] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 125.516643][ T4325] usb 4-1: media controller created [ 125.521936][ T4325] dvb-usb: bulk message failed: -22 (6/0) [ 125.545553][ T4325] dw2102: i2c transfer failed. [ 125.563595][ T4325] dvb-usb: bulk message failed: -22 (6/0) [ 125.569372][ T4325] dw2102: i2c transfer failed. [ 125.583569][ T4325] dvb-usb: bulk message failed: -22 (6/0) [ 125.593696][ T4325] dw2102: i2c transfer failed. [ 125.614302][ T4325] dvb-usb: bulk message failed: -22 (6/0) [ 125.630390][ T4325] dw2102: i2c transfer failed. [ 125.635537][ T4325] dvb-usb: bulk message failed: -22 (6/0) [ 125.645468][ T4325] dw2102: i2c transfer failed. [ 125.650291][ T4325] dvb-usb: bulk message failed: -22 (6/0) [ 125.666474][ T4325] dw2102: i2c transfer failed. [ 125.683942][ T4325] dvb-usb: MAC address: 02:02:02:02:02:02 [ 125.754912][ T4325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.832013][ T4325] dvb-usb: bulk message failed: -22 (1/0) [ 125.858523][ T4325] dw2102: command 0x51 transfer failed. [ 126.027119][ T4325] DVB: Unable to find symbol m88rs2000_attach() [ 126.043488][ T4325] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 126.253551][ T4325] rc_core: IR keymap rc-su3000 not found [ 126.259456][ T4325] Registered IR keymap rc-empty [ 126.273694][ T4325] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 126.294439][ T4325] input: TeVii S632 USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input13 [ 126.311592][ T4941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.325893][ T4325] dvb-usb: schedule remote query interval to 150 msecs. [ 126.344586][ T4941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.353768][ T4325] dw2102: su3000_power_ctrl: 0, initialized 1 [ 126.359881][ T4325] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 126.513554][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 126.519344][ T4361] dw2102: i2c transfer failed. [ 126.693532][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 126.699332][ T4361] dw2102: i2c transfer failed. [ 126.873655][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 126.879452][ T4361] dw2102: i2c transfer failed. [ 127.053536][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 127.059341][ T4361] dw2102: i2c transfer failed. [ 127.233536][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 127.239313][ T7] dw2102: i2c transfer failed. [ 127.423538][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 127.429312][ T4361] dw2102: i2c transfer failed. [ 127.603554][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 127.609349][ T4361] dw2102: i2c transfer failed. [ 127.783542][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 127.789338][ T4361] dw2102: i2c transfer failed. [ 127.963639][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 127.969462][ T4361] dw2102: i2c transfer failed. [ 128.017316][ T4914] device syzkaller0 entered promiscuous mode [ 128.093940][ T4927] device syzkaller0 entered promiscuous mode [ 128.148656][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 128.154612][ T4320] dw2102: i2c transfer failed. [ 128.323556][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 128.329429][ T7] dw2102: i2c transfer failed. [ 128.344123][ T4959] device syzkaller0 entered promiscuous mode [ 129.683898][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 129.688399][ T4959] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 129.712685][ T4361] dw2102: i2c transfer failed. [ 129.780731][ T4320] usb 4-1: USB disconnect, device number 2 [ 129.925869][ T4320] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 129.947559][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 130.435365][ T4987] device syzkaller0 entered promiscuous mode [ 130.458350][ T4991] ip_tables: iptables: counters copy to user failed while replacing table [ 130.574521][ T4991] device syzkaller1 entered promiscuous mode [ 130.656055][ T4994] loop2: detected capacity change from 0 to 1024 [ 130.704521][ T4994] ext4: Unknown parameter 'uid' [ 133.629799][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.636542][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.886405][ T5007] input: syz1 as /devices/virtual/input/input14 [ 133.977044][ T5008] device syzkaller0 entered promiscuous mode [ 134.609285][ T5012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 134.754970][ T5015] device syzkaller0 entered promiscuous mode [ 134.800952][ T5016] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 135.099547][ T5023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.164'. [ 135.781806][ T5039] device syzkaller0 entered promiscuous mode [ 135.912335][ T5041] device syzkaller0 entered promiscuous mode [ 135.944851][ T5045] loop4: detected capacity change from 0 to 1024 [ 135.971596][ T5045] ext4: Unknown parameter 'uid' [ 137.528515][ T5049] ip_tables: iptables: counters copy to user failed while replacing table [ 138.300523][ T5056] input: syz1 as /devices/virtual/input/input15 [ 139.245635][ T5049] device syzkaller1 entered promiscuous mode [ 139.388403][ T5060] netlink: 72 bytes leftover after parsing attributes in process `syz.1.171'. [ 139.607249][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 139.951248][ T5071] device syzkaller0 entered promiscuous mode [ 140.003312][ T5071] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 143.142135][ T5100] device syzkaller0 entered promiscuous mode [ 143.274878][ T5108] loop2: detected capacity change from 0 to 1024 [ 143.314448][ T5108] ext4: Unknown parameter 'uid' [ 147.050066][ T5138] device syzkaller0 entered promiscuous mode [ 147.242990][ T5166] ip_tables: iptables: counters copy to user failed while replacing table [ 149.556267][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 149.568058][ T5170] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 149.584023][ T5166] device syzkaller1 entered promiscuous mode [ 151.275572][ T5194] loop3: detected capacity change from 0 to 1024 [ 151.284417][ T5194] ext4: Unknown parameter 'uid' [ 151.344888][ T4362] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.342494][ T5220] device syzkaller0 entered promiscuous mode [ 153.911030][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 154.152407][ T5242] ip_tables: iptables: counters copy to user failed while replacing table [ 155.507860][ T5242] device syzkaller1 entered promiscuous mode [ 155.722514][ T5246] device syzkaller0 entered promiscuous mode [ 155.789842][ T5247] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 155.897569][ T5249] device syzkaller0 entered promiscuous mode [ 156.403212][ T5272] device syzkaller0 entered promiscuous mode [ 156.827353][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 156.890377][ T5284] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 157.198759][ T5305] ip_tables: iptables: counters copy to user failed while replacing table [ 157.418341][ T5306] device syzkaller0 entered promiscuous mode [ 157.455675][ T5305] device syzkaller1 entered promiscuous mode [ 159.504668][ T5329] device syzkaller0 entered promiscuous mode [ 159.796441][ T5358] device syzkaller0 entered promiscuous mode [ 159.917909][ T5365] device syzkaller0 entered promiscuous mode [ 160.033672][ T4361] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.219436][ T5380] ip_tables: iptables: counters copy to user failed while replacing table [ 160.243570][ T4361] usb 3-1: Using ep0 maxpacket: 16 [ 160.254438][ T4361] usb 3-1: config 206 has an invalid interface number: 66 but max is 0 [ 160.298841][ T4361] usb 3-1: config 206 has no interface number 0 [ 160.318872][ T4361] usb 3-1: config 206 interface 66 has no altsetting 0 [ 160.366735][ T4361] usb 3-1: string descriptor 0 read error: -22 [ 160.405755][ T4361] usb 3-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 160.453902][ T4361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.525830][ T4361] dw2102: su3000_identify_state [ 160.530751][ T4361] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 160.573047][ T4361] dw2102: su3000_power_ctrl: 1, initialized 0 [ 160.595045][ T4361] dvb-usb: bulk message failed: -22 (2/0) [ 160.643636][ T4361] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.660513][ T4361] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 160.678865][ T4361] usb 3-1: media controller created [ 160.730590][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 160.741809][ T4361] dw2102: i2c transfer failed. [ 160.748018][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 160.755764][ T4361] dw2102: i2c transfer failed. [ 160.760655][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 160.789197][ T4361] dw2102: i2c transfer failed. [ 160.813862][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 160.830497][ T4361] dw2102: i2c transfer failed. [ 160.836016][ T5393] device syzkaller0 entered promiscuous mode [ 160.848043][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 160.853891][ T5384] device syzkaller1 entered promiscuous mode [ 160.876928][ T4361] dw2102: i2c transfer failed. [ 160.888344][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 160.913700][ T4361] dw2102: i2c transfer failed. [ 160.931208][ T4361] dvb-usb: MAC address: 02:02:02:02:02:02 [ 160.972642][ T4361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.023054][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 161.030776][ T4361] dw2102: command 0x51 transfer failed. [ 161.232177][ T5406] netlink: 'syz.1.234': attribute type 4 has an invalid length. [ 161.260388][ T4361] DVB: Unable to find symbol m88rs2000_attach() [ 161.273972][ T4361] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 161.297310][ T5406] xt_hashlimit: max too large, truncated to 1048576 [ 161.328975][ T5406] xt_hashlimit: overflow, try lower: 0/0 [ 161.337796][ T5408] tipc: Enabled bearer , priority 0 [ 161.360535][ T5408] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 161.415750][ T5408] tipc: Resetting bearer [ 161.439790][ T5411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.475507][ T5407] tipc: Disabling bearer [ 161.503727][ T5411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.533494][ T4361] rc_core: IR keymap rc-su3000 not found [ 161.543607][ T4361] Registered IR keymap rc-empty [ 161.584112][ T4361] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 161.610925][ T4361] input: TeVii S632 USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input16 [ 161.651942][ T4361] dvb-usb: schedule remote query interval to 150 msecs. [ 161.675511][ T4361] dw2102: su3000_power_ctrl: 0, initialized 1 [ 161.692133][ T4361] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 161.834085][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 161.864850][ T4361] dw2102: i2c transfer failed. [ 161.898013][ T5413] device syzkaller0 entered promiscuous mode [ 161.941105][ T5422] device syzkaller0 entered promiscuous mode [ 162.046640][ T4293] dvb-usb: bulk message failed: -22 (1/0) [ 162.052483][ T4293] dw2102: i2c transfer failed. [ 162.261028][ T4293] dvb-usb: bulk message failed: -22 (1/0) [ 162.272622][ T4293] dw2102: i2c transfer failed. [ 162.433564][ T4293] dvb-usb: bulk message failed: -22 (1/0) [ 162.443505][ T4293] dw2102: i2c transfer failed. [ 162.643600][ T4293] dvb-usb: bulk message failed: -22 (1/0) [ 162.649670][ T4293] dw2102: i2c transfer failed. [ 162.776640][ T4382] usb 3-1: USB disconnect, device number 3 [ 162.842896][ T4382] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 163.914152][ T5439] device syzkaller0 entered promiscuous mode [ 164.039588][ T5460] device syzkaller0 entered promiscuous mode [ 164.073104][ T5472] ip_tables: iptables: counters copy to user failed while replacing table [ 164.368512][ T5490] xt_hashlimit: max too large, truncated to 1048576 [ 164.397496][ T5490] xt_hashlimit: overflow, try lower: 0/0 [ 165.973299][ T5479] netlink: 'syz.4.248': attribute type 4 has an invalid length. [ 165.992641][ T5491] tipc: Enabling of bearer rejected, failed to enable media [ 166.454554][ T5526] device syzkaller0 entered promiscuous mode [ 166.594434][ T5528] device syzkaller0 entered promiscuous mode [ 166.841305][ T5540] ip_tables: iptables: counters copy to user failed while replacing table [ 166.931352][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 166.982786][ T5537] device syzkaller0 entered promiscuous mode [ 167.017034][ T5544] device syzkaller0 entered promiscuous mode [ 167.228754][ T5558] tipc: Started in network mode [ 167.246425][ T5558] tipc: Node identity ca21023803b6, cluster identity 4711 [ 167.307552][ T5558] tipc: Enabled bearer , priority 0 [ 167.329273][ T5545] device syzkaller1 entered promiscuous mode [ 167.349655][ T5562] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 167.591250][ T5562] tipc: Resetting bearer [ 167.629441][ T5555] tipc: Disabling bearer [ 167.771304][ T5576] netlink: 'syz.0.266': attribute type 4 has an invalid length. [ 167.864607][ T5576] xt_hashlimit: max too large, truncated to 1048576 [ 167.871387][ T5576] xt_hashlimit: overflow, try lower: 0/0 [ 168.164910][ T5589] device syzkaller0 entered promiscuous mode [ 168.351586][ T5594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.274'. [ 168.370021][ T5602] ip_tables: iptables: counters copy to user failed while replacing table [ 168.532805][ T5605] device syzkaller0 entered promiscuous mode [ 168.652266][ T5608] device syzkaller0 entered promiscuous mode [ 171.641830][ T5603] device syzkaller1 entered promiscuous mode [ 171.656247][ T5621] tipc: Enabling of bearer rejected, failed to enable media [ 171.769480][ T5641] netlink: 'syz.4.282': attribute type 4 has an invalid length. [ 171.793149][ T5641] xt_hashlimit: max too large, truncated to 1048576 [ 171.800137][ T5641] xt_hashlimit: overflow, try lower: 0/0 [ 172.215647][ T5653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.288'. [ 172.271474][ T5655] device syzkaller0 entered promiscuous mode [ 172.335383][ T5655] tipc: Enabling of bearer rejected, failed to enable media [ 172.347488][ T5659] device syzkaller0 entered promiscuous mode [ 172.539609][ T5665] device syzkaller0 entered promiscuous mode [ 172.573687][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 172.673064][ T5671] ip_tables: iptables: counters copy to user failed while replacing table [ 172.708436][ T5671] device syzkaller1 entered promiscuous mode [ 172.773857][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 172.785379][ T22] usb 5-1: config 206 has an invalid interface number: 66 but max is 0 [ 172.813584][ T22] usb 5-1: config 206 has no interface number 0 [ 172.820185][ T22] usb 5-1: config 206 interface 66 has no altsetting 0 [ 172.842126][ T22] usb 5-1: string descriptor 0 read error: -22 [ 172.851154][ T22] usb 5-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 172.872653][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.905258][ T22] dw2102: su3000_identify_state [ 172.922191][ T22] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 172.929676][ T22] dw2102: su3000_power_ctrl: 1, initialized 0 [ 172.944550][ T22] dvb-usb: bulk message failed: -22 (2/0) [ 172.971918][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.032111][ T22] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 173.053606][ T22] usb 5-1: media controller created [ 173.058964][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 173.073367][ T22] dw2102: i2c transfer failed. [ 173.078744][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 173.085977][ T22] dw2102: i2c transfer failed. [ 173.091035][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 173.101529][ T22] dw2102: i2c transfer failed. [ 173.106654][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 173.112679][ T22] dw2102: i2c transfer failed. [ 173.125567][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 173.131442][ T22] dw2102: i2c transfer failed. [ 173.136959][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 173.142945][ T22] dw2102: i2c transfer failed. [ 173.148294][ T22] dvb-usb: MAC address: 02:02:02:02:02:02 [ 173.167858][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.201467][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 173.209151][ T22] dw2102: command 0x51 transfer failed. [ 173.228112][ T5682] device syzkaller0 entered promiscuous mode [ 173.263863][ T5688] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 173.309184][ T5687] xt_hashlimit: max too large, truncated to 1048576 [ 173.324203][ T5687] xt_hashlimit: overflow, try lower: 0/0 [ 173.332383][ T5689] tipc: Started in network mode [ 173.343628][ T5689] tipc: Node identity a64e80396664, cluster identity 4711 [ 173.350997][ T5689] tipc: Enabled bearer , priority 0 [ 173.385018][ T5674] tipc: Resetting bearer [ 173.448865][ T22] DVB: Unable to find symbol m88rs2000_attach() [ 173.456801][ T5674] tipc: Disabling bearer [ 173.459199][ T22] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 173.517738][ T5701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.303'. [ 173.783561][ T22] rc_core: IR keymap rc-su3000 not found [ 173.789289][ T22] Registered IR keymap rc-empty [ 173.819045][ T22] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 173.828829][ T5711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.861648][ T22] input: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input17 [ 173.880041][ T5711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.898667][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 173.907048][ T22] dw2102: su3000_power_ctrl: 0, initialized 1 [ 173.914053][ T22] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 173.999800][ T5710] device syzkaller0 entered promiscuous mode [ 174.008295][ T5716] tipc: Enabling of bearer rejected, failed to enable media [ 174.017114][ T5717] device syzkaller0 entered promiscuous mode [ 174.081568][ T4378] dvb-usb: bulk message failed: -22 (1/0) [ 174.087781][ T4378] dw2102: i2c transfer failed. [ 174.119779][ T5714] device syzkaller0 entered promiscuous mode [ 174.243512][ T4378] dvb-usb: bulk message failed: -22 (1/0) [ 174.252666][ T4378] dw2102: i2c transfer failed. [ 174.300113][ T5721] ip_tables: iptables: counters copy to user failed while replacing table [ 174.366952][ T5721] device syzkaller1 entered promiscuous mode [ 174.449196][ T4378] dvb-usb: bulk message failed: -22 (1/0) [ 174.459320][ T4378] dw2102: i2c transfer failed. [ 174.567232][ T5733] netlink: 'syz.1.314': attribute type 4 has an invalid length. [ 174.589596][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 174.633934][ T4378] dvb-usb: bulk message failed: -22 (1/0) [ 174.641683][ T4378] dw2102: i2c transfer failed. [ 174.653730][ T5733] xt_hashlimit: max too large, truncated to 1048576 [ 174.660682][ T5733] xt_hashlimit: overflow, try lower: 0/0 [ 174.693891][ T5737] device syzkaller0 entered promiscuous mode [ 174.707407][ T5737] tipc: Enabled bearer , priority 0 [ 174.736752][ T5735] tipc: Resetting bearer [ 174.780833][ T5735] tipc: Disabling bearer [ 174.803711][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 174.816037][ T22] dw2102: i2c transfer failed. [ 174.993735][ T4378] dvb-usb: bulk message failed: -22 (1/0) [ 175.000271][ T4378] dw2102: i2c transfer failed. [ 175.017427][ T5745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'. [ 175.173724][ T4378] dvb-usb: bulk message failed: -22 (1/0) [ 175.193614][ T4378] dw2102: i2c transfer failed. [ 175.211248][ T5749] device syzkaller0 entered promiscuous mode [ 175.235182][ T5749] tipc: Enabling of bearer rejected, failed to enable media [ 175.336601][ T5754] device syzkaller0 entered promiscuous mode [ 175.363864][ T4378] dvb-usb: bulk message failed: -22 (1/0) [ 175.370865][ T4378] dw2102: i2c transfer failed. [ 175.445538][ T4320] usb 5-1: USB disconnect, device number 2 [ 175.559556][ T4320] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 175.586786][ T5759] ip_tables: iptables: counters copy to user failed while replacing table [ 175.660457][ T5759] device syzkaller1 entered promiscuous mode [ 176.047936][ T5780] device syzkaller0 entered promiscuous mode [ 176.315283][ T5789] device syzkaller0 entered promiscuous mode [ 176.450395][ T5789] tipc: Enabling of bearer rejected, failed to enable media [ 176.460040][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 176.498705][ T5791] device syzkaller0 entered promiscuous mode [ 176.657251][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 176.695269][ T22] usb 5-1: config 206 has an invalid interface number: 66 but max is 0 [ 176.731473][ T22] usb 5-1: config 206 has no interface number 0 [ 176.743767][ T22] usb 5-1: config 206 interface 66 has no altsetting 0 [ 176.774235][ T22] usb 5-1: string descriptor 0 read error: -22 [ 176.780526][ T22] usb 5-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 176.831477][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.851174][ T5802] netlink: 72 bytes leftover after parsing attributes in process `syz.2.344'. [ 176.863032][ T22] dw2102: su3000_identify_state [ 176.869015][ T22] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 176.876435][ T22] dw2102: su3000_power_ctrl: 1, initialized 0 [ 176.882566][ T22] dvb-usb: bulk message failed: -22 (2/0) [ 176.888913][ T5803] device syzkaller0 entered promiscuous mode [ 176.897778][ T5806] device syzkaller0 entered promiscuous mode [ 176.909637][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.922939][ T5802] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 176.930155][ T22] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 176.937632][ T22] usb 5-1: media controller created [ 176.943047][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 176.951251][ T5802] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 176.958742][ T22] dw2102: i2c transfer failed. [ 176.963999][ T5802] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 176.971314][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 176.980228][ T22] dw2102: i2c transfer failed. [ 176.985831][ T5802] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 176.993867][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 177.023846][ T5802] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 177.030809][ T22] dw2102: i2c transfer failed. [ 177.036468][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 177.039010][ T5802] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 177.055715][ T5802] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 177.072263][ T22] dw2102: i2c transfer failed. [ 177.080192][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 177.091961][ T22] dw2102: i2c transfer failed. [ 177.092696][ T5810] ip_tables: iptables: counters copy to user failed while replacing table [ 177.096903][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 177.118069][ T22] dw2102: i2c transfer failed. [ 177.125043][ T22] dvb-usb: MAC address: 02:02:02:02:02:02 [ 177.161334][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.229708][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 177.236750][ T22] dw2102: command 0x51 transfer failed. [ 177.254930][ T5810] device syzkaller1 entered promiscuous mode [ 177.410636][ T22] DVB: Unable to find symbol m88rs2000_attach() [ 177.423152][ T22] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 177.596229][ T5822] device syzkaller0 entered promiscuous mode [ 177.653610][ T22] rc_core: IR keymap rc-su3000 not found [ 177.659507][ T22] Registered IR keymap rc-empty [ 177.681988][ T22] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 177.701947][ T22] input: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input18 [ 177.743847][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 177.750877][ T22] dw2102: su3000_power_ctrl: 0, initialized 1 [ 177.768666][ T22] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 177.781589][ T5831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.174826][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 179.175599][ T5831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.180605][ T22] dw2102: i2c transfer failed. [ 179.312665][ T4293] usb 5-1: USB disconnect, device number 3 [ 179.411635][ T4293] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 179.807812][ T5855] netlink: 72 bytes leftover after parsing attributes in process `syz.4.360'. [ 179.849536][ T5855] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 179.906873][ T5855] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 179.972570][ T5855] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 179.986530][ T5855] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 180.069512][ T5855] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 180.134608][ T5855] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 180.162712][ T5855] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 180.194729][ T5855] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 180.221214][ T5855] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 180.270784][ T5846] device syzkaller0 entered promiscuous mode [ 180.697366][ T5876] device syzkaller0 entered promiscuous mode [ 180.714270][ T5878] ip_tables: iptables: counters copy to user failed while replacing table [ 180.793330][ T5868] device syzkaller0 entered promiscuous mode [ 180.811191][ T5878] device syzkaller1 entered promiscuous mode [ 182.783650][ T4361] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 182.990983][ T4361] usb 1-1: Using ep0 maxpacket: 16 [ 183.001703][ T4361] usb 1-1: config 206 has an invalid interface number: 66 but max is 0 [ 183.046620][ T4361] usb 1-1: config 206 has no interface number 0 [ 183.053053][ T4361] usb 1-1: config 206 interface 66 has no altsetting 0 [ 183.108977][ T4361] usb 1-1: string descriptor 0 read error: -22 [ 183.148085][ T4361] usb 1-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 183.167924][ T4361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.215150][ T4361] dw2102: su3000_identify_state [ 183.239114][ T4361] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 183.259339][ T4361] dw2102: su3000_power_ctrl: 1, initialized 0 [ 183.272247][ T4361] dvb-usb: bulk message failed: -22 (2/0) [ 183.290626][ T4361] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.312290][ T4361] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 183.334472][ T4361] usb 1-1: media controller created [ 183.345485][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 183.358278][ T4361] dw2102: i2c transfer failed. [ 183.369035][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 183.382446][ T4361] dw2102: i2c transfer failed. [ 183.392223][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 183.405949][ T4361] dw2102: i2c transfer failed. [ 183.420433][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 183.431928][ T4361] dw2102: i2c transfer failed. [ 183.437045][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 183.442932][ T4361] dw2102: i2c transfer failed. [ 183.448385][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 183.458678][ T4361] dw2102: i2c transfer failed. [ 183.465354][ T4361] dvb-usb: MAC address: 02:02:02:02:02:02 [ 183.489675][ T4361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.512001][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 183.518295][ T4361] dw2102: command 0x51 transfer failed. [ 183.647714][ T4361] DVB: Unable to find symbol m88rs2000_attach() [ 183.661524][ T4361] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 183.793640][ T4361] rc_core: IR keymap rc-su3000 not found [ 183.799370][ T4361] Registered IR keymap rc-empty [ 183.811701][ T4361] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 183.839500][ T4361] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input19 [ 183.859622][ T4361] dvb-usb: schedule remote query interval to 150 msecs. [ 183.878027][ T4361] dw2102: su3000_power_ctrl: 0, initialized 1 [ 183.893513][ T4361] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 184.043742][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 184.052177][ T4361] dw2102: i2c transfer failed. [ 184.124655][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.144088][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.223526][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 184.229434][ T4361] dw2102: i2c transfer failed. [ 184.403563][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 184.409508][ T4361] dw2102: i2c transfer failed. [ 184.585956][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 184.591758][ T4361] dw2102: i2c transfer failed. [ 184.773566][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 184.779631][ T4361] dw2102: i2c transfer failed. [ 184.963565][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 184.969452][ T4361] dw2102: i2c transfer failed. [ 185.134081][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 185.144582][ T4361] dw2102: i2c transfer failed. [ 185.214609][ T5936] netlink: 72 bytes leftover after parsing attributes in process `syz.2.373'. [ 185.231473][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 185.253377][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 185.263841][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 185.271335][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 185.286646][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 185.297278][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 185.317761][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 185.331433][ T4361] dw2102: i2c transfer failed. [ 185.336794][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 185.380745][ T5938] device syzkaller0 entered promiscuous mode [ 185.513597][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 185.519443][ T4361] dw2102: i2c transfer failed. [ 185.560940][ T4361] usb 1-1: USB disconnect, device number 2 [ 185.581158][ T5947] device syzkaller0 entered promiscuous mode [ 185.700651][ T4361] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 187.183887][ T5962] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 187.212911][ T5962] device syzkaller0 entered promiscuous mode [ 187.395527][ T5966] device syzkaller0 entered promiscuous mode [ 187.674909][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 187.716487][ T5973] netlink: 72 bytes leftover after parsing attributes in process `syz.4.388'. [ 187.747471][ T5977] netlink: 'syz.1.390': attribute type 4 has an invalid length. [ 187.768943][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 187.805894][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 187.839945][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 187.857979][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 187.916524][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 187.959476][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 188.000380][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 188.095966][ T5983] device syzkaller0 entered promiscuous mode [ 188.278038][ T5985] device syzkaller0 entered promiscuous mode [ 188.350747][ T5985] tipc: Enabled bearer , priority 0 [ 188.365052][ T5984] tipc: Resetting bearer [ 188.451666][ T5984] tipc: Disabling bearer [ 190.376323][ T6002] device syzkaller0 entered promiscuous mode [ 190.410506][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.401'. [ 190.449825][ T6013] device syzkaller0 entered promiscuous mode [ 192.246933][ T6028] netlink: 'syz.1.403': attribute type 4 has an invalid length. [ 192.306676][ T26] audit: type=1800 audit(1786494257.305:5): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.404" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 192.353955][ T6025] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 192.382408][ T6025] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 192.408154][ T6025] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 192.586926][ T6052] device syzkaller0 entered promiscuous mode [ 192.622473][ T6052] tipc: Started in network mode [ 193.955078][ T6052] tipc: Node identity 22f5f158f4fd, cluster identity 4711 [ 193.973623][ T6052] tipc: Enabled bearer , priority 0 [ 194.044251][ T6051] tipc: Resetting bearer [ 194.167121][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.173523][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.245143][ T6051] tipc: Disabling bearer [ 194.290888][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.413'. [ 194.668312][ T6082] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 194.694975][ T6082] device syzkaller0 entered promiscuous mode [ 194.730255][ T6085] netlink: 'syz.4.418': attribute type 4 has an invalid length. [ 194.817596][ T6086] xt_hashlimit: max too large, truncated to 1048576 [ 194.842455][ T6086] xt_hashlimit: overflow, try lower: 0/0 [ 194.971415][ T6088] device syzkaller0 entered promiscuous mode [ 196.453913][ T6092] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.175068][ T6108] device syzkaller0 entered promiscuous mode [ 198.217097][ T6108] tipc: Enabled bearer , priority 0 [ 198.255540][ T6107] tipc: Resetting bearer [ 198.365360][ T6107] tipc: Disabling bearer [ 198.385934][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.427'. [ 199.493516][ T4324] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 199.683514][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 203.085448][ T4324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.094053][ T4324] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 203.101786][ T4324] usb 5-1: can't read configurations, error -71 [ 204.770348][ T6155] device syzkaller0 entered promiscuous mode [ 204.819530][ T6155] tipc: Enabled bearer , priority 0 [ 204.882589][ T6154] tipc: Resetting bearer [ 204.975223][ T6154] tipc: Disabling bearer [ 205.079891][ T6165] device syzkaller0 entered promiscuous mode [ 205.107792][ T6165] tipc: Enabling of bearer rejected, failed to enable media [ 205.840167][ T4361] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 206.043484][ T4361] usb 4-1: Using ep0 maxpacket: 32 [ 206.351176][ T6196] device syzkaller0 entered promiscuous mode [ 208.464259][ T4361] usb 4-1: unable to get BOS descriptor or descriptor too short [ 208.498640][ T4361] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 208.506345][ T4361] usb 4-1: can't read configurations, error -71 [ 212.669753][ T6236] device syzkaller0 entered promiscuous mode [ 212.749330][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 213.365444][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 213.559332][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 215.309616][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 216.862420][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 216.871500][ T27] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 216.903520][ T27] usb 2-1: can't read configurations, error -71 [ 217.242601][ T6288] device syzkaller0 entered promiscuous mode [ 217.469098][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 220.051196][ T6339] device syzkaller0 entered promiscuous mode [ 220.231355][ T6350] device syzkaller0 entered promiscuous mode [ 220.738224][ T4324] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 220.933513][ T4324] usb 1-1: Using ep0 maxpacket: 32 [ 221.504218][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 221.799611][ T6401] device syzkaller0 entered promiscuous mode [ 221.822889][ T6403] tipc: Enabled bearer , priority 0 [ 221.874142][ T6403] device syzkaller0 entered promiscuous mode [ 221.880777][ T6403] tipc: Resetting bearer [ 223.362895][ T4324] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.380521][ T4324] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 223.392460][ T4324] usb 1-1: can't read configurations, error -71 [ 226.005323][ T6402] tipc: Resetting bearer [ 227.407721][ T6402] tipc: Disabling bearer [ 227.419805][ T6409] device syzkaller0 entered promiscuous mode [ 227.495299][ T4320] tipc: Node number set to 3382116920 [ 227.590348][ T6443] tipc: Enabled bearer , priority 0 [ 227.626133][ T6443] device syzkaller0 entered promiscuous mode [ 227.695565][ T6443] tipc: Resetting bearer [ 227.748562][ T6442] tipc: Resetting bearer [ 227.797519][ T6442] tipc: Disabling bearer [ 229.699721][ T6474] device syzkaller0 entered promiscuous mode [ 229.753160][ T6474] tipc: Enabled bearer , priority 0 [ 229.771762][ T6473] tipc: Resetting bearer [ 229.817174][ T4320] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 229.849216][ T6473] tipc: Disabling bearer [ 229.886922][ T6476] device syzkaller0 entered promiscuous mode [ 230.004701][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 231.693959][ T6488] tipc: Enabled bearer , priority 0 [ 231.714170][ T6488] device syzkaller0 entered promiscuous mode [ 231.754395][ T6488] tipc: Resetting bearer [ 231.775611][ T6487] tipc: Resetting bearer [ 231.892588][ T6487] tipc: Disabling bearer [ 232.051186][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.078784][ T4320] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 232.143546][ T4320] usb 2-1: can't read configurations, error -71 [ 233.782150][ T6507] device syzkaller0 entered promiscuous mode [ 236.170770][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'. [ 238.223633][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 239.763465][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 239.811442][ T7] usb 3-1: device descriptor read/all, error -71 [ 239.823674][ T6559] device syzkaller0 entered promiscuous mode [ 239.999006][ T6562] device syzkaller0 entered promiscuous mode [ 240.488240][ T6568] netlink: 'syz.3.536': attribute type 4 has an invalid length. [ 240.539568][ T6568] xt_hashlimit: max too large, truncated to 1048576 [ 240.557898][ T6568] xt_hashlimit: overflow, try lower: 0/0 [ 240.863782][ T4320] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 242.383342][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 242.403595][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 242.410736][ T4320] usb 2-1: config 206 has an invalid interface number: 66 but max is 0 [ 242.458375][ T4320] usb 2-1: config 206 has no interface number 0 [ 242.486894][ T4320] usb 2-1: config 206 interface 66 has no altsetting 0 [ 242.531061][ T4320] usb 2-1: string descriptor 0 read error: -22 [ 242.559811][ T4320] usb 2-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 242.601629][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.670868][ T4320] dw2102: su3000_identify_state [ 242.706796][ T4320] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 242.723464][ T4320] dw2102: su3000_power_ctrl: 1, initialized 0 [ 242.730857][ T4320] dvb-usb: bulk message failed: -22 (2/0) [ 242.771065][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.809229][ T4320] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 242.833187][ T4320] usb 2-1: media controller created [ 242.858177][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 242.882409][ T4320] dw2102: i2c transfer failed. [ 242.903633][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 242.913790][ T4320] dw2102: i2c transfer failed. [ 242.918632][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 242.947663][ T4320] dw2102: i2c transfer failed. [ 242.952535][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 242.977651][ T4320] dw2102: i2c transfer failed. [ 243.002256][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 243.038121][ T4320] dw2102: i2c transfer failed. [ 243.043702][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 243.049491][ T4320] dw2102: i2c transfer failed. [ 243.060200][ T4320] dvb-usb: MAC address: 02:02:02:02:02:02 [ 243.082747][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.135361][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 243.142087][ T4320] dw2102: command 0x51 transfer failed. [ 243.342709][ T4320] DVB: Unable to find symbol m88rs2000_attach() [ 243.358576][ T4320] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 243.543703][ T4320] rc_core: IR keymap rc-su3000 not found [ 243.549432][ T4320] Registered IR keymap rc-empty [ 243.567318][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.575610][ T4320] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 243.591050][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.626886][ T4320] input: TeVii S632 USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input20 [ 243.645811][ T4320] dvb-usb: schedule remote query interval to 150 msecs. [ 243.652847][ T4320] dw2102: su3000_power_ctrl: 0, initialized 1 [ 243.663499][ T4320] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 243.694104][ T4324] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 243.813583][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 243.820390][ T4320] dw2102: i2c transfer failed. [ 243.883630][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 243.993517][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 243.999323][ T4361] dw2102: i2c transfer failed. [ 244.173496][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 244.179313][ T4361] dw2102: i2c transfer failed. [ 244.353611][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 244.359423][ T4361] dw2102: i2c transfer failed. [ 244.487041][ T6620] netlink: 'syz.3.559': attribute type 4 has an invalid length. [ 244.505200][ T6620] xt_hashlimit: max too large, truncated to 1048576 [ 244.512022][ T6620] xt_hashlimit: overflow, try lower: 0/0 [ 244.533606][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 244.541796][ T4361] dw2102: i2c transfer failed. [ 244.639671][ T6623] device syzkaller0 entered promiscuous mode [ 244.724649][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 244.732810][ T4361] dw2102: i2c transfer failed. [ 244.904068][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 244.909973][ T7] dw2102: i2c transfer failed. [ 244.933799][ T7] usb 2-1: USB disconnect, device number 6 [ 245.032355][ T7] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 245.549428][ T6654] device syzkaller0 entered promiscuous mode [ 245.571683][ T6660] netlink: 'syz.3.572': attribute type 4 has an invalid length. [ 246.313641][ T4324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 246.332237][ T4324] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 246.351939][ T4324] usb 5-1: can't read configurations, error -71 [ 248.596042][ T6664] device syzkaller0 entered promiscuous mode [ 248.983592][ T4320] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 249.193631][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 249.215246][ T4320] usb 2-1: config 206 has an invalid interface number: 66 but max is 0 [ 249.230015][ T4320] usb 2-1: config 206 has no interface number 0 [ 249.246019][ T4320] usb 2-1: config 206 interface 66 has no altsetting 0 [ 249.272942][ T4320] usb 2-1: string descriptor 0 read error: -22 [ 249.291566][ T4320] usb 2-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 249.321530][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.370213][ T4320] dw2102: su3000_identify_state [ 249.378558][ T4320] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 249.405537][ T4320] dw2102: su3000_power_ctrl: 1, initialized 0 [ 249.411687][ T4320] dvb-usb: bulk message failed: -22 (2/0) [ 249.419902][ T6702] netlink: 'syz.2.584': attribute type 4 has an invalid length. [ 249.430965][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.450428][ T4320] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 249.464222][ T6702] xt_hashlimit: max too large, truncated to 1048576 [ 249.475220][ T4320] usb 2-1: media controller created [ 249.480496][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 249.501151][ T6702] xt_hashlimit: overflow, try lower: 0/0 [ 249.517873][ T4320] dw2102: i2c transfer failed. [ 249.527621][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 249.550570][ T4320] dw2102: i2c transfer failed. [ 249.573647][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 249.595859][ T4320] dw2102: i2c transfer failed. [ 249.608388][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 249.633807][ T4320] dw2102: i2c transfer failed. [ 249.643755][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 249.654985][ T4320] dw2102: i2c transfer failed. [ 249.660303][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 249.666413][ T4320] dw2102: i2c transfer failed. [ 249.671387][ T4320] dvb-usb: MAC address: 02:02:02:02:02:02 [ 249.705278][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.726872][ T6713] device syzkaller0 entered promiscuous mode [ 249.768365][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 249.784464][ T4320] dw2102: command 0x51 transfer failed. [ 250.012258][ T4320] DVB: Unable to find symbol m88rs2000_attach() [ 250.027054][ T4320] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 250.051801][ T6724] device syzkaller0 entered promiscuous mode [ 250.053689][ T4361] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 251.003876][ T4361] usb 4-1: Using ep0 maxpacket: 32 [ 251.077229][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.145811][ T6731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.753698][ T4320] rc_core: IR keymap rc-su3000 not found [ 251.769935][ T4320] Registered IR keymap rc-empty [ 251.786750][ T4320] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 251.821765][ T4320] input: TeVii S632 USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input21 [ 251.831460][ T6734] tipc: Enabled bearer , priority 0 [ 251.846571][ T6733] tipc: Disabling bearer [ 251.863722][ T4320] dvb-usb: schedule remote query interval to 150 msecs. [ 251.880756][ T4320] dw2102: su3000_power_ctrl: 0, initialized 1 [ 251.894953][ T4320] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 252.043650][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 252.050061][ T4320] dw2102: i2c transfer failed. [ 252.233939][ T4360] dvb-usb: bulk message failed: -22 (1/0) [ 252.239924][ T4360] dw2102: i2c transfer failed. [ 252.423576][ T4360] dvb-usb: bulk message failed: -22 (1/0) [ 252.429504][ T4360] dw2102: i2c transfer failed. [ 252.514070][ T4361] usb 4-1: unable to get BOS descriptor or descriptor too short [ 252.529812][ T4361] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 252.583589][ T4361] usb 4-1: can't read configurations, error -71 [ 252.623778][ T4360] dvb-usb: bulk message failed: -22 (1/0) [ 252.629663][ T4360] dw2102: i2c transfer failed. [ 252.669284][ T4360] usb 2-1: USB disconnect, device number 7 [ 252.826201][ T4360] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 253.077118][ T6760] device syzkaller0 entered promiscuous mode [ 253.207581][ T6767] device syzkaller0 entered promiscuous mode [ 253.225409][ T6769] netlink: 72 bytes leftover after parsing attributes in process `syz.2.603'. [ 254.778181][ T6773] tipc: Enabled bearer , priority 0 [ 255.599284][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.605827][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.470968][ T6776] device syzkaller0 entered promiscuous mode [ 256.479897][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 256.495217][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 256.502723][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 256.511212][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 256.519329][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 256.527189][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 256.535363][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 256.545994][ T6779] tipc: Resetting bearer [ 256.570093][ T6772] tipc: Resetting bearer [ 256.627793][ T6772] tipc: Disabling bearer [ 257.026628][ T6818] device syzkaller0 entered promiscuous mode [ 257.183548][ T4324] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 257.205664][ T6823] device syzkaller0 entered promiscuous mode [ 257.217846][ T4321] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 257.363506][ T4324] usb 3-1: Using ep0 maxpacket: 32 [ 257.403564][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 257.411958][ T4321] usb 1-1: config 206 has an invalid interface number: 66 but max is 0 [ 257.427504][ T4321] usb 1-1: config 206 has no interface number 0 [ 257.442447][ T4321] usb 1-1: config 206 interface 66 has no altsetting 0 [ 257.463259][ T4321] usb 1-1: string descriptor 0 read error: -22 [ 257.472677][ T4321] usb 1-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 257.482305][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.510449][ T4321] dw2102: su3000_identify_state [ 257.516400][ T4321] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 257.523065][ T4321] dw2102: su3000_power_ctrl: 1, initialized 0 [ 257.529997][ T4321] dvb-usb: bulk message failed: -22 (2/0) [ 257.541423][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.561726][ T4321] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 257.569334][ T4321] usb 1-1: media controller created [ 257.576328][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 257.582220][ T4321] dw2102: i2c transfer failed. [ 257.587811][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 257.594002][ T4321] dw2102: i2c transfer failed. [ 257.599107][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 257.605377][ T4321] dw2102: i2c transfer failed. [ 257.610509][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 257.616720][ T4321] dw2102: i2c transfer failed. [ 257.621830][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 257.628271][ T4321] dw2102: i2c transfer failed. [ 257.634444][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 257.640347][ T4321] dw2102: i2c transfer failed. [ 257.645821][ T4321] dvb-usb: MAC address: 02:02:02:02:02:02 [ 257.711041][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.745821][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 257.751785][ T4321] dw2102: command 0x51 transfer failed. [ 257.899838][ T4321] DVB: Unable to find symbol m88rs2000_attach() [ 257.923210][ T4321] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 258.093699][ T4321] rc_core: IR keymap rc-su3000 not found [ 258.099539][ T4321] Registered IR keymap rc-empty [ 258.106912][ T4321] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 258.119488][ T4321] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input22 [ 258.131807][ T4321] dvb-usb: schedule remote query interval to 150 msecs. [ 258.139297][ T4321] dw2102: su3000_power_ctrl: 0, initialized 1 [ 258.151336][ T4321] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 258.297525][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 258.303371][ T4321] dw2102: i2c transfer failed. [ 258.434376][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.444715][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.469284][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 258.475845][ T128] dw2102: i2c transfer failed. [ 258.636510][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 258.642324][ T128] dw2102: i2c transfer failed. [ 258.805480][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 258.816983][ T128] dw2102: i2c transfer failed. [ 258.974139][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 258.980141][ T128] dw2102: i2c transfer failed. [ 259.143671][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 259.149722][ T128] dw2102: i2c transfer failed. [ 259.323647][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 259.329492][ T128] dw2102: i2c transfer failed. [ 259.505214][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 259.511192][ T128] dw2102: i2c transfer failed. [ 259.541851][ T6837] netlink: 72 bytes leftover after parsing attributes in process `syz.4.621'. [ 259.564919][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 259.606260][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 259.624005][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 259.631394][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 259.654081][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 259.671865][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 259.681567][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 259.684916][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 259.705264][ T4321] dw2102: i2c transfer failed. [ 259.726719][ T6847] tipc: Enabled bearer , priority 0 [ 259.754723][ T6847] device syzkaller0 entered promiscuous mode [ 259.823980][ T6847] tipc: Resetting bearer [ 259.852382][ T4324] usb 3-1: unable to get BOS descriptor or descriptor too short [ 259.862571][ T4324] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 259.872243][ T4324] usb 3-1: can't read configurations, error -71 [ 259.879489][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 259.887705][ T128] dw2102: i2c transfer failed. [ 259.908206][ T6846] tipc: Resetting bearer [ 259.971417][ T6846] tipc: Disabling bearer [ 259.973285][ T4360] usb 1-1: USB disconnect, device number 5 [ 260.113290][ T4360] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 260.243912][ T6859] tipc: Enabled bearer , priority 0 [ 260.306552][ T6856] tipc: Disabling bearer [ 260.529751][ T6876] device syzkaller0 entered promiscuous mode [ 260.692335][ T6882] device syzkaller0 entered promiscuous mode [ 262.511378][ T4360] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 262.727581][ T4360] usb 4-1: Using ep0 maxpacket: 32 [ 262.939236][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 263.006447][ T6914] device syzkaller0 entered promiscuous mode [ 263.033268][ T6914] tipc: Enabled bearer , priority 0 [ 263.055980][ T6911] tipc: Resetting bearer [ 263.151448][ T6911] tipc: Disabling bearer [ 263.169388][ T6916] netlink: 72 bytes leftover after parsing attributes in process `syz.4.647'. [ 263.227728][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 263.251425][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 263.305865][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 263.348189][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 263.386341][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 263.394532][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 263.402478][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 263.523359][ T6930] device syzkaller0 entered promiscuous mode [ 263.567273][ T4382] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 263.757298][ T4382] usb 2-1: Using ep0 maxpacket: 16 [ 263.770509][ T4382] usb 2-1: config 206 has an invalid interface number: 66 but max is 0 [ 263.798163][ T4382] usb 2-1: config 206 has no interface number 0 [ 263.799914][ T4360] usb 4-1: unable to get BOS descriptor or descriptor too short [ 263.820220][ T4360] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 263.829899][ T4382] usb 2-1: config 206 interface 66 has no altsetting 0 [ 263.838169][ T4360] usb 4-1: can't read configurations, error -71 [ 263.858743][ T4382] usb 2-1: string descriptor 0 read error: -22 [ 263.865631][ T4382] usb 2-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 263.875277][ T4382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.901370][ T4382] dw2102: su3000_identify_state [ 263.908421][ T4382] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 263.915889][ T4382] dw2102: su3000_power_ctrl: 1, initialized 0 [ 263.922209][ T4382] dvb-usb: bulk message failed: -22 (2/0) [ 263.944900][ T4382] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 263.970891][ T4382] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 263.978331][ T4382] usb 2-1: media controller created [ 263.983851][ T4382] dvb-usb: bulk message failed: -22 (6/0) [ 263.989801][ T4382] dw2102: i2c transfer failed. [ 263.997821][ T4382] dvb-usb: bulk message failed: -22 (6/0) [ 264.003857][ T4382] dw2102: i2c transfer failed. [ 264.008855][ T4382] dvb-usb: bulk message failed: -22 (6/0) [ 264.014858][ T4382] dw2102: i2c transfer failed. [ 264.019886][ T4382] dvb-usb: bulk message failed: -22 (6/0) [ 264.032919][ T4382] dw2102: i2c transfer failed. [ 264.044608][ T4382] dvb-usb: bulk message failed: -22 (6/0) [ 264.063115][ T4382] dw2102: i2c transfer failed. [ 264.069519][ T4382] dvb-usb: bulk message failed: -22 (6/0) [ 264.079889][ T4382] dw2102: i2c transfer failed. [ 264.086045][ T4382] dvb-usb: MAC address: 02:02:02:02:02:02 [ 264.113224][ T4382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.160377][ T4382] dvb-usb: bulk message failed: -22 (1/0) [ 264.167624][ T4382] dw2102: command 0x51 transfer failed. [ 264.295832][ T4382] DVB: Unable to find symbol m88rs2000_attach() [ 264.302466][ T4382] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 264.433557][ T4382] rc_core: IR keymap rc-su3000 not found [ 264.440997][ T4382] Registered IR keymap rc-empty [ 264.458128][ T4382] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 264.482694][ T4382] input: TeVii S632 USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input23 [ 264.501698][ T4382] dvb-usb: schedule remote query interval to 150 msecs. [ 264.509084][ T4382] dw2102: su3000_power_ctrl: 0, initialized 1 [ 264.520816][ T4382] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 264.663563][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 264.669547][ T4321] dw2102: i2c transfer failed. [ 264.782433][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 264.832774][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.853478][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 264.859514][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.867812][ T4321] dw2102: i2c transfer failed. [ 264.913298][ T6960] device syzkaller0 entered promiscuous mode [ 264.940542][ T6960] tipc: Enabled bearer , priority 0 [ 265.033491][ T4382] dvb-usb: bulk message failed: -22 (1/0) [ 265.039461][ T4382] dw2102: i2c transfer failed. [ 265.203507][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 265.209416][ T128] dw2102: i2c transfer failed. [ 265.237369][ T6957] tipc: Resetting bearer [ 265.384738][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 265.391632][ T128] dw2102: i2c transfer failed. [ 265.563495][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 265.569322][ T128] dw2102: i2c transfer failed. [ 265.743495][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 265.749273][ T128] dw2102: i2c transfer failed. [ 265.923511][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 265.929319][ T128] dw2102: i2c transfer failed. [ 266.103537][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 266.109346][ T128] dw2102: i2c transfer failed. [ 266.283516][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 266.289312][ T4321] dw2102: i2c transfer failed. [ 266.463504][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 266.469273][ T4321] dw2102: i2c transfer failed. [ 266.643495][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 266.649311][ T4321] dw2102: i2c transfer failed. [ 266.823512][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 266.829326][ T4321] dw2102: i2c transfer failed. [ 267.003524][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 267.009338][ T4321] dw2102: i2c transfer failed. [ 267.183486][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 267.189288][ T4321] dw2102: i2c transfer failed. [ 267.363480][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 267.369290][ T4321] dw2102: i2c transfer failed. [ 267.543527][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 267.549413][ T4321] dw2102: i2c transfer failed. [ 267.723488][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 267.729316][ T4321] dw2102: i2c transfer failed. [ 267.895981][ T6957] tipc: Disabling bearer [ 267.903625][ T4360] usb 2-1: USB disconnect, device number 8 [ 267.903772][ T4321] dvb-usb: bulk message failed: -22 (1/0) [ 267.919962][ T4321] dw2102: i2c transfer failed. [ 268.013227][ T6976] device syzkaller0 entered promiscuous mode [ 268.057962][ T4360] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 268.697110][ T4320] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 268.888021][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 270.067287][ T6981] netlink: 72 bytes leftover after parsing attributes in process `syz.1.663'. [ 270.090850][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 270.107391][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 270.140065][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 270.165970][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 270.185156][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 270.229351][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 270.247182][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 270.269548][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 270.284918][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 270.308012][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 270.432459][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 271.333993][ T4320] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.352924][ T4320] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 271.366950][ T4320] usb 5-1: can't read configurations, error -71 [ 273.886815][ T7060] Driver unsupported XDP return value 0 on prog (id 94) dev N/A, expect packet loss! [ 273.904694][ T7060] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 274.074877][ T7062] device syzkaller0 entered promiscuous mode [ 274.116951][ T7062] tipc: Enabled bearer , priority 0 [ 274.158152][ T7061] tipc: Resetting bearer [ 274.254751][ T7061] tipc: Disabling bearer [ 274.265781][ T7064] netlink: 72 bytes leftover after parsing attributes in process `syz.0.684'. [ 274.299924][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 274.328478][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 274.379553][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 274.428207][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 274.463696][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 274.484303][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 274.518382][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 274.537230][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 274.605903][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 274.660820][ T7084] device syzkaller0 entered promiscuous mode [ 275.173536][ T4382] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 275.373517][ T4382] usb 4-1: Using ep0 maxpacket: 32 [ 277.831949][ T4382] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.863790][ T4382] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 277.881710][ T4382] usb 4-1: can't read configurations, error -71 [ 278.274304][ T7119] device syzkaller0 entered promiscuous mode [ 278.295431][ T7119] tipc: Enabled bearer , priority 0 [ 278.314644][ T7118] tipc: Resetting bearer [ 278.429240][ T7118] tipc: Disabling bearer [ 278.456739][ T7125] netlink: 72 bytes leftover after parsing attributes in process `syz.3.704'. [ 278.490955][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 278.553653][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 278.607577][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 278.655495][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 278.673664][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 278.707180][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 278.723868][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 278.741413][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 278.760598][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 278.793896][ T7139] netlink: 52 bytes leftover after parsing attributes in process `syz.4.708'. [ 278.848256][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.855746][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.876337][ T7139] netlink: 76 bytes leftover after parsing attributes in process `syz.4.708'. [ 278.888776][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.896065][ T7139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.904011][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.911169][ T7139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.922871][ T7139] netlink: 52 bytes leftover after parsing attributes in process `syz.4.708'. [ 278.965170][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.972370][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.141753][ T7147] device syzkaller0 entered promiscuous mode [ 279.316466][ T7152] device syzkaller0 entered promiscuous mode [ 279.479857][ T4324] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 279.613160][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 279.648150][ T7160] device syzkaller0 entered promiscuous mode [ 279.663694][ T4324] usb 4-1: Using ep0 maxpacket: 32 [ 279.778242][ T7164] device syzkaller0 entered promiscuous mode [ 279.818422][ T7164] tipc: Enabled bearer , priority 0 [ 279.874523][ T7163] tipc: Resetting bearer [ 279.962209][ T7163] tipc: Disabling bearer [ 279.996210][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 280.038288][ T7173] tipc: Enabled bearer , priority 0 [ 280.049408][ T7173] device syzkaller0 entered promiscuous mode [ 280.065322][ T7173] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 280.088178][ T7173] tipc: Resetting bearer [ 280.105879][ T7172] tipc: Resetting bearer [ 280.147198][ T7172] tipc: Disabling bearer [ 280.759234][ T7194] device syzkaller0 entered promiscuous mode [ 280.859426][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 281.024229][ T7202] device syzkaller0 entered promiscuous mode [ 281.042472][ T7202] tipc: Enabled bearer , priority 0 [ 281.050476][ T7200] tipc: Resetting bearer [ 281.089374][ T7200] tipc: Disabling bearer [ 281.251195][ T7206] tipc: Enabled bearer , priority 0 [ 281.260101][ T7206] device syzkaller0 entered promiscuous mode [ 281.274887][ T7206] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 281.301319][ T7206] tipc: Resetting bearer [ 281.310167][ T7205] tipc: Resetting bearer [ 281.332984][ T7205] tipc: Disabling bearer [ 281.477953][ T7209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.735'. [ 281.488079][ T7209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.735'. [ 281.497891][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.735'. [ 281.719300][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 281.789125][ T7217] tipc: Enabling of bearer rejected, failed to enable media [ 282.162374][ T4324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 282.181903][ T4324] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 282.219854][ T4324] usb 4-1: can't read configurations, error -71 [ 282.277605][ T7229] device syzkaller0 entered promiscuous mode [ 282.449377][ T7241] tipc: Enabled bearer , priority 0 [ 282.457331][ T7241] device syzkaller0 entered promiscuous mode [ 282.467383][ T7241] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 282.558087][ T7241] tipc: Resetting bearer [ 282.596549][ T7240] tipc: Resetting bearer [ 282.687570][ T7240] tipc: Disabling bearer [ 282.870783][ T7253] lo speed is unknown, defaulting to 1000 [ 283.271888][ T7271] device syzkaller0 entered promiscuous mode [ 283.304787][ T4325] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 283.506635][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 284.050705][ T7279] __nla_validate_parse: 5 callbacks suppressed [ 284.050725][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'. [ 284.073701][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.763'. [ 284.492131][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 285.024368][ T7314] netlink: 'syz.2.778': attribute type 3 has an invalid length. [ 285.043852][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.778'. [ 285.068837][ T7313] device syzkaller0 entered promiscuous mode [ 285.524961][ T7322] tipc: Enabled bearer , priority 0 [ 285.608496][ T7322] device syzkaller0 entered promiscuous mode [ 285.620677][ T7322] tipc: Resetting bearer [ 285.643081][ T7324] device syzkaller0 entered promiscuous mode [ 285.772521][ T33] tipc: Resetting bearer [ 285.786240][ T7321] tipc: Resetting bearer [ 285.978356][ T4325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 286.009486][ T4325] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 286.033478][ T4325] usb 5-1: can't read configurations, error -71 [ 287.535531][ T7321] tipc: Disabling bearer [ 287.836511][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.792'. [ 287.879413][ T7357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.792'. [ 287.901194][ T7355] device syzkaller0 entered promiscuous mode [ 288.150923][ T7367] tipc: Enabled bearer , priority 0 [ 288.201547][ T7365] tipc: Disabling bearer [ 288.216080][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.798'. [ 288.408372][ T7378] device syzkaller0 entered promiscuous mode [ 288.523514][ T4322] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 288.676070][ T7385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.694822][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'. [ 288.733471][ T4322] usb 4-1: Using ep0 maxpacket: 32 [ 288.846680][ T7392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.913063][ T7394] device syzkaller0 entered promiscuous mode [ 289.229711][ T7405] lo speed is unknown, defaulting to 1000 [ 289.636040][ T7414] device syzkaller0 entered promiscuous mode [ 289.698381][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 290.370089][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.824'. [ 290.594936][ T7436] device syzkaller0 entered promiscuous mode [ 290.632410][ T7436] tipc: Enabled bearer , priority 0 [ 290.650267][ T7435] tipc: Resetting bearer [ 290.694315][ T7435] tipc: Disabling bearer [ 290.709154][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 290.726116][ T7439] device syzkaller0 entered promiscuous mode [ 290.989508][ T7445] device syzkaller0 entered promiscuous mode [ 291.197596][ T4322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 291.217642][ T4322] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 291.238308][ T4322] usb 4-1: can't read configurations, error -71 [ 291.369182][ T7456] device geneve2 entered promiscuous mode [ 291.481497][ T7460] netlink: 'syz.4.838': attribute type 4 has an invalid length. [ 291.547072][ T7460] xt_hashlimit: max too large, truncated to 1048576 [ 291.583481][ T7460] xt_hashlimit: overflow, try lower: 0/0 [ 291.835673][ T7471] device syzkaller0 entered promiscuous mode [ 291.948664][ T7474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.844'. [ 291.964530][ T7474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.844'. [ 292.149209][ T7481] device syzkaller0 entered promiscuous mode [ 292.423497][ T4325] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 292.537292][ T7494] loop1: detected capacity change from 0 to 512 [ 292.613434][ T4325] usb 3-1: Using ep0 maxpacket: 32 [ 292.642405][ T7494] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.851: iget: bad i_size value: 38620345925642 [ 292.749908][ T7494] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.851: couldn't read orphan inode 15 (err -117) [ 292.769735][ T7494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 292.827434][ T7501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.854'. [ 292.911703][ T7494] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.851: bg 0: block 5: invalid block bitmap [ 292.978850][ T7494] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 164 with error 28 [ 293.034935][ T7494] EXT4-fs (loop1): This should not happen!! Data will be lost [ 293.034935][ T7494] [ 293.065229][ T7494] EXT4-fs (loop1): Total free blocks count 0 [ 293.080410][ T7494] EXT4-fs (loop1): Free/Dirty block details [ 293.096552][ T7494] EXT4-fs (loop1): free_blocks=0 [ 293.104440][ T7494] EXT4-fs (loop1): dirty_blocks=168 [ 293.109785][ T7494] EXT4-fs (loop1): Block reservation details [ 293.116665][ T7494] EXT4-fs (loop1): i_reserved_data_blocks=168 [ 293.227436][ T7509] device syzkaller0 entered promiscuous mode [ 293.270679][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 293.413302][ T7511] loop1: detected capacity change from 0 to 512 [ 294.112336][ T7526] capability: warning: `syz.1.864' uses deprecated v2 capabilities in a way that may be insecure [ 294.544077][ T7535] netlink: 'syz.3.868': attribute type 4 has an invalid length. [ 294.655052][ T7537] device syzkaller0 entered promiscuous mode [ 295.058289][ T4325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.078470][ T4325] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 295.098421][ T4325] usb 3-1: can't read configurations, error -71 [ 295.237300][ T7551] netlink: 72 bytes leftover after parsing attributes in process `syz.2.875'. [ 295.306400][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 295.336065][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 295.351125][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 295.359156][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 295.369992][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 295.377803][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 295.385763][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 295.400511][ T7557] tipc: Enabled bearer , priority 10 [ 295.409188][ T7556] device syzkaller0 entered promiscuous mode [ 295.428638][ T7553] tipc: Resetting bearer [ 295.504625][ T7553] tipc: Disabling bearer [ 295.535377][ T7556] tipc: Enabled bearer , priority 0 [ 295.597734][ T7556] tipc: Resetting bearer [ 295.651917][ T7555] tipc: Resetting bearer [ 295.718727][ T7555] tipc: Disabling bearer [ 295.791638][ T7561] device syzkaller0 entered promiscuous mode [ 295.832760][ T7563] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 296.000115][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'. [ 296.048165][ T7566] bridge: RTM_NEWNEIGH with invalid ether address [ 296.269247][ T7572] device syzkaller0 entered promiscuous mode [ 296.412886][ T7573] lo speed is unknown, defaulting to 1000 [ 296.956695][ T7586] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 297.003767][ T7589] device syzkaller0 entered promiscuous mode [ 297.043494][ T4293] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 297.090825][ T7590] rdma_rxe: rxe_register_device failed with error -23 [ 297.123918][ T7590] rdma_rxe: failed to add ip6gretap0 [ 297.233486][ T4293] usb 4-1: Using ep0 maxpacket: 32 [ 297.962072][ T7605] device syzkaller0 entered promiscuous mode [ 298.359249][ T7616] device syzkaller0 entered promiscuous mode [ 300.360384][ T7632] loop1: detected capacity change from 0 to 512 [ 300.372191][ T7632] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 300.403030][ T4293] usb 4-1: unable to get BOS descriptor or descriptor too short [ 300.424493][ T4293] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 300.432142][ T4293] usb 4-1: can't read configurations, error -71 [ 300.445135][ T7632] EXT4-fs (loop1): orphan cleanup on readonly fs [ 300.463662][ T7632] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.908: bad orphan inode 15 [ 300.532288][ T7632] ext4_test_bit(bit=14, block=18) = 1 [ 300.559703][ T7632] is_bad_inode(inode)=0 [ 300.569870][ T7632] NEXT_ORPHAN(inode)=1023 [ 300.581987][ T7637] device syzkaller0 entered promiscuous mode [ 300.590130][ T7632] max_ino=32 [ 300.600264][ T7632] i_nlink=0 [ 300.620539][ T7632] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2918: inode #15: comm syz.1.908: corrupted xattr block 19 [ 300.671328][ T7632] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 300.704590][ T7632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 300.846222][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 301.269695][ T7648] device syzkaller0 entered promiscuous mode [ 303.534563][ T4293] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 303.754184][ T4293] usb 2-1: Using ep0 maxpacket: 32 [ 303.921694][ T7677] device syzkaller0 entered promiscuous mode [ 304.068537][ T7683] loop4: detected capacity change from 0 to 512 [ 304.089905][ T7683] EXT4-fs: inline encryption not supported [ 304.128496][ T7683] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 304.178561][ T7683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 304.267588][ T7683] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 304.293107][ T7683] EXT4-fs (loop4): 1 truncate cleaned up [ 304.306854][ T7683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 304.380282][ T7689] loop3: detected capacity change from 0 to 512 [ 304.401755][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 304.449482][ T7689] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.929: inode has both inline data and extents flags [ 305.953820][ T7689] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.929: couldn't read orphan inode 15 (err -117) [ 305.981097][ T7698] tipc: Enabled bearer , priority 0 [ 306.001190][ T7698] device syzkaller0 entered promiscuous mode [ 306.008794][ T7689] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 306.027309][ T7698] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 306.149811][ T7699] tipc: Resetting bearer [ 306.181510][ T4293] usb 2-1: unable to get BOS descriptor or descriptor too short [ 306.206151][ T4293] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 306.219217][ T4293] usb 2-1: can't read configurations, error -71 [ 306.231744][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 306.246687][ T7697] tipc: Resetting bearer [ 306.360182][ T7697] tipc: Disabling bearer [ 306.554386][ T7705] netlink: 'syz.3.935': attribute type 4 has an invalid length. [ 306.603002][ T7705] xt_hashlimit: max too large, truncated to 1048576 [ 306.619831][ T7705] xt_hashlimit: overflow, try lower: 0/0 [ 306.814675][ T7712] device syzkaller0 entered promiscuous mode [ 306.929486][ T7714] loop4: detected capacity change from 0 to 512 [ 308.779563][ T7731] device syzkaller0 entered promiscuous mode [ 309.013461][ T4324] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 309.046339][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 309.186901][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.947'. [ 309.223636][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 309.473125][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.491363][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.500092][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.508412][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.533739][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 309.546220][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.594590][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.602057][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.609897][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.618084][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.626398][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 309.633788][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.809467][ T7738] lo speed is unknown, defaulting to 1000 [ 309.994621][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.061237][ T7749] qrtr: Invalid version 191 [ 310.062850][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.161618][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.204092][ T7752] device syzkaller0 entered promiscuous mode [ 310.350635][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.370122][ T4324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 310.384826][ T4324] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 310.410321][ T4324] usb 5-1: can't read configurations, error -71 [ 310.522669][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.552362][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 310.702558][ T7759] device syzkaller0 entered promiscuous mode [ 310.735862][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.958'. [ 310.755397][ T7738] chnl_net:caif_netlink_parms(): no params data found [ 311.252203][ T7788] xt_hashlimit: max too large, truncated to 1048576 [ 311.293539][ T7788] xt_hashlimit: overflow, try lower: 0/0 [ 311.688213][ T4291] Bluetooth: hci5: command 0x0409 tx timeout [ 312.173567][ T4322] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 312.363637][ T4322] usb 4-1: Using ep0 maxpacket: 32 [ 312.939030][ T7782] netlink: 'syz.2.962': attribute type 4 has an invalid length. [ 313.139782][ T7807] loop2: detected capacity change from 0 to 512 [ 313.378173][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.378240][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.379791][ T7738] device bridge_slave_0 entered promiscuous mode [ 313.382920][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.383072][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.392185][ T7738] device bridge_slave_1 entered promiscuous mode [ 313.444826][ T33] tipc: Left network mode [ 313.489099][ T7738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.502671][ T7738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.727809][ T7738] team0: Port device team_slave_0 added [ 313.754084][ T4291] Bluetooth: hci5: command 0x041b tx timeout [ 313.765249][ T7738] team0: Port device team_slave_1 added [ 313.942718][ T7820] lo speed is unknown, defaulting to 1000 [ 313.967173][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.989484][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.019882][ T7738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.076674][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.087301][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.193497][ T7738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.316665][ T7833] loop1: detected capacity change from 0 to 128 [ 314.536938][ T7838] loop2: detected capacity change from 0 to 2048 [ 314.763829][ T7738] device hsr_slave_0 entered promiscuous mode [ 314.884810][ T7738] device hsr_slave_1 entered promiscuous mode [ 314.962083][ T7738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.034705][ T7738] Cannot create hsr debugfs directory [ 315.292194][ T26] audit: type=1800 audit(1786494380.285:6): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.975" name="file2" dev="loop1" ino=1048598 res=0 errno=0 [ 315.327361][ T4322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 315.362924][ T7833] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 315.422495][ T4322] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 315.434487][ T4322] usb 4-1: can't read configurations, error -71 [ 315.463814][ T7833] FAT-fs (loop1): Filesystem has been set read-only [ 315.470713][ T7833] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 315.508592][ T7833] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 315.523284][ T7833] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 315.572757][ T7833] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 315.593626][ T7833] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 315.639626][ T7833] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 315.681144][ T7833] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 315.729005][ T7833] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 315.759116][ T7844] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 315.780470][ T7849] device syzkaller0 entered promiscuous mode [ 315.834053][ T4291] Bluetooth: hci5: command 0x040f tx timeout [ 315.902119][ T7846] device syzkaller0 entered promiscuous mode [ 316.721963][ T7877] loop1: detected capacity change from 0 to 2048 [ 316.848786][ T7877] Alternate GPT is invalid, using primary GPT. [ 316.855543][ T7877] loop1: p1 p2 p3 [ 317.038936][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.050146][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.525286][ T3639] Alternate GPT is invalid, using primary GPT. [ 317.531783][ T3639] loop1: p1 p2 p3 [ 317.628463][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 317.641755][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 317.655100][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 317.720932][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 317.734348][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 317.758362][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 317.830379][ T7890] loop1: detected capacity change from 0 to 2048 [ 317.918870][ T4291] Bluetooth: hci5: command 0x0419 tx timeout [ 317.971580][ T7890] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 318.170410][ T47] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 318.197617][ T47] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 318.217171][ T47] EXT4-fs (loop1): This should not happen!! Data will be lost [ 318.217171][ T47] [ 318.227528][ T47] EXT4-fs (loop1): Total free blocks count 0 [ 318.240516][ T47] EXT4-fs (loop1): Free/Dirty block details [ 318.259863][ T47] EXT4-fs (loop1): free_blocks=66060288 [ 318.266478][ T47] EXT4-fs (loop1): dirty_blocks=80 [ 318.282546][ T47] EXT4-fs (loop1): Block reservation details [ 318.298384][ T47] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 318.322620][ T47] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 318.903639][ T4293] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 319.093478][ T4293] usb 2-1: Using ep0 maxpacket: 32 [ 319.772861][ T7882] device syzkaller0 entered promiscuous mode [ 320.131910][ T33] device hsr_slave_0 left promiscuous mode [ 320.151311][ T33] device hsr_slave_1 left promiscuous mode [ 320.169353][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.194474][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.216194][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.234177][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.272780][ T33] device bridge_slave_1 left promiscuous mode [ 320.296553][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.341506][ T33] device bridge_slave_0 left promiscuous mode [ 320.363654][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.401396][ T7912] capability: warning: `syz.3.989' uses 32-bit capabilities (legacy support in use) [ 320.442402][ T7909] loop2: detected capacity change from 0 to 8192 [ 320.482047][ T7909] ======================================================= [ 320.482047][ T7909] WARNING: The mand mount option has been deprecated and [ 320.482047][ T7909] and is ignored by this kernel. Remove the mand [ 320.482047][ T7909] option from the mount to silence this warning. [ 320.482047][ T7909] ======================================================= [ 320.548584][ T33] device veth1_macvtap left promiscuous mode [ 320.575547][ T33] device veth0_macvtap left promiscuous mode [ 320.585787][ T33] device veth1_vlan left promiscuous mode [ 321.633885][ T4293] usb 2-1: unable to get BOS descriptor or descriptor too short [ 321.665932][ T4293] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 321.686185][ T4293] usb 2-1: can't read configurations, error -71 [ 322.670360][ T33] team0 (unregistering): Port device team_slave_1 removed [ 322.768582][ T33] team0 (unregistering): Port device team_slave_0 removed [ 322.848101][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.970761][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.584779][ T33] bond0 (unregistering): Released all slaves [ 323.816032][ T7969] device syzkaller0 entered promiscuous mode [ 326.210712][ T7738] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.224281][ T7988] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1000'. [ 326.243971][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 326.253301][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 326.265661][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 326.273007][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 326.289690][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 326.298222][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 326.310818][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 326.319483][ T7991] device syzkaller0 entered promiscuous mode [ 326.454192][ T7738] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.503024][ T7985] lo speed is unknown, defaulting to 1000 [ 326.512761][ T7738] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.572091][ T7738] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.870434][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.928628][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.946474][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.976863][ T7738] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.003007][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.022446][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.042040][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.049233][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.134406][ T4324] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 327.142601][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.154207][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.182613][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.191625][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.198799][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.237891][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.258301][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.279149][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.313139][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.343760][ T4324] usb 4-1: Using ep0 maxpacket: 32 [ 327.414397][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.427705][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.459920][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.511216][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.526316][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.549419][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.559267][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.576455][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.521122][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.568095][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.620069][ T7738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.754005][ T4324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 329.770642][ T4324] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 329.779258][ T4324] usb 4-1: can't read configurations, error -71 [ 331.629026][ T8057] device syzkaller0 entered promiscuous mode [ 331.861126][ T8097] device syzkaller0 entered promiscuous mode [ 332.162056][ T8103] lo speed is unknown, defaulting to 1000 [ 332.498011][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.515149][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.577060][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.604757][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.637768][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.669631][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.704529][ T7738] device veth0_vlan entered promiscuous mode [ 332.759678][ T7738] device veth1_vlan entered promiscuous mode [ 332.879481][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.915796][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.949931][ T7738] device veth0_macvtap entered promiscuous mode [ 332.984179][ T7738] device veth1_macvtap entered promiscuous mode [ 333.155668][ T8124] device syzkaller0 entered promiscuous mode [ 333.180140][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.213518][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.255787][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.298460][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.335568][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.366465][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.392803][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.420156][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.455436][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.490727][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.545378][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.583452][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.619072][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.636403][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.660872][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.694259][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.716402][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.740248][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.778654][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.787316][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.825597][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.874886][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.904341][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.913219][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.321819][ T7738] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.331064][ T7738] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.361785][ T7738] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.370827][ T7738] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.470737][ T8161] device syzkaller0 entered promiscuous mode [ 338.523111][ T8183] tipc: Enabled bearer , priority 0 [ 338.547790][ T8188] device syzkaller0 entered promiscuous mode [ 338.801405][ T5223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.829121][ T5223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.857173][ T8188] tipc: Resetting bearer [ 338.879323][ T8214] loop3: detected capacity change from 0 to 512 [ 338.930526][ T8188] tipc: Disabling bearer [ 338.949177][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.046702][ T4546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.087995][ T4546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.120808][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.341441][ T8221] device syzkaller0 entered promiscuous mode [ 339.544564][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1036'. [ 339.648323][ T4361] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 339.853579][ T4361] usb 6-1: Using ep0 maxpacket: 16 [ 339.860580][ T4361] usb 6-1: config 206 has an invalid interface number: 66 but max is 0 [ 339.899273][ T4361] usb 6-1: config 206 has no interface number 0 [ 339.911325][ T4361] usb 6-1: config 206 interface 66 has no altsetting 0 [ 339.933137][ T4361] usb 6-1: string descriptor 0 read error: -22 [ 339.953634][ T4361] usb 6-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 339.983616][ T4361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.024734][ T4361] dw2102: su3000_identify_state [ 340.029688][ T4361] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 340.063456][ T4361] dw2102: su3000_power_ctrl: 1, initialized 0 [ 340.090159][ T4361] dvb-usb: bulk message failed: -22 (2/0) [ 340.114987][ T4361] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.131656][ T4361] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 340.179273][ T4361] usb 6-1: media controller created [ 340.204662][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 340.233735][ T4361] dw2102: i2c transfer failed. [ 340.260798][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 340.274324][ T4361] dw2102: i2c transfer failed. [ 340.289439][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 340.305859][ T4361] dw2102: i2c transfer failed. [ 340.336274][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 340.342108][ T4361] dw2102: i2c transfer failed. [ 340.368765][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 340.374982][ T4361] dw2102: i2c transfer failed. [ 340.386861][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 340.402725][ T4361] dw2102: i2c transfer failed. [ 340.414847][ T4361] dvb-usb: MAC address: 02:02:02:02:02:02 [ 340.469038][ T4361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.525895][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 340.547335][ T4361] dw2102: command 0x51 transfer failed. [ 340.724201][ T4361] DVB: Unable to find symbol m88rs2000_attach() [ 340.730816][ T4361] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 340.897559][ T4361] rc_core: IR keymap rc-su3000 not found [ 340.903887][ T4361] Registered IR keymap rc-empty [ 340.910122][ T4361] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 340.921539][ T4361] input: TeVii S632 USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input24 [ 340.934086][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.949963][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.957252][ T4361] dvb-usb: schedule remote query interval to 150 msecs. [ 340.967746][ T4361] dw2102: su3000_power_ctrl: 0, initialized 1 [ 340.974389][ T4361] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 341.124834][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 341.130749][ T4361] dw2102: i2c transfer failed. [ 341.297312][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 341.303299][ T4361] dw2102: i2c transfer failed. [ 341.464110][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 341.469910][ T4361] dw2102: i2c transfer failed. [ 341.635067][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 341.640834][ T4361] dw2102: i2c transfer failed. [ 341.809015][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 341.815000][ T4361] dw2102: i2c transfer failed. [ 341.975009][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 341.980782][ T4361] dw2102: i2c transfer failed. [ 342.143581][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 342.149384][ T4361] dw2102: i2c transfer failed. [ 342.317273][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 342.323087][ T4361] dw2102: i2c transfer failed. [ 342.483425][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 342.489268][ T4361] dw2102: i2c transfer failed. [ 342.541006][ T8244] device syzkaller0 entered promiscuous mode [ 342.654148][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 342.659952][ T4320] dw2102: i2c transfer failed. [ 342.789822][ T8279] loop1: detected capacity change from 0 to 512 [ 342.833422][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 342.851386][ T4320] dw2102: i2c transfer failed. [ 342.868192][ T8283] loop4: detected capacity change from 0 to 512 [ 342.919217][ T8283] EXT4-fs: inline encryption not supported [ 342.982328][ T8283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 343.044849][ T8283] EXT4-fs (loop4): 1 truncate cleaned up [ 343.050669][ T8283] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 343.074078][ T8283] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #12: comm syz.4.1044: bad extra_isize 62 (inode size 256) [ 343.083835][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 343.096162][ T8283] EXT4-fs (loop4): Remounting filesystem read-only [ 343.168826][ T4361] dw2102: i2c transfer failed. [ 343.235609][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 343.400418][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 343.412783][ T8293] 9pnet_fd: Insufficient options for proto=fd [ 343.433983][ T4361] dw2102: i2c transfer failed. [ 343.455098][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'. [ 343.483859][ T4361] usb 6-1: USB disconnect, device number 2 [ 343.513090][ T8297] device syzkaller0 entered promiscuous mode [ 343.595493][ T4361] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 343.856126][ T8308] loop4: detected capacity change from 0 to 512 [ 343.922629][ T8308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.987511][ T8308] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1052: iget: bad i_size value: 38620345925642 [ 344.061323][ T8308] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1052: couldn't read orphan inode 15 (err -117) [ 344.139596][ T8308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 344.228767][ T26] audit: type=1804 audit(1786494409.225:7): pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1052" name="/newroot/236/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 344.372137][ T8321] device syzkaller0 entered promiscuous mode [ 344.406268][ T8308] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1052: bg 0: block 5: invalid block bitmap [ 344.422045][ T8308] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 344.435980][ T8308] EXT4-fs (loop4): This should not happen!! Data will be lost [ 344.435980][ T8308] [ 344.457401][ T8308] EXT4-fs (loop4): Total free blocks count 0 [ 344.463983][ T8308] EXT4-fs (loop4): Free/Dirty block details [ 344.470165][ T8308] EXT4-fs (loop4): free_blocks=0 [ 344.475714][ T8308] EXT4-fs (loop4): dirty_blocks=1 [ 344.480990][ T8308] EXT4-fs (loop4): Block reservation details [ 344.487377][ T8308] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 344.669026][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 345.297209][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 345.569223][ T8341] loop2: detected capacity change from 0 to 32768 [ 345.678549][ T8341] loop2: p1 p3 < > [ 346.955569][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 347.209956][ T8353] device syzkaller0 entered promiscuous mode [ 348.553287][ T8380] team0: Port device syz_tun added [ 348.652590][ T8366] lo speed is unknown, defaulting to 1000 [ 349.075220][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'. [ 349.145340][ T8397] tipc: Enabled bearer , priority 0 [ 349.180628][ T8397] device syzkaller0 entered promiscuous mode [ 349.238298][ T8397] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 349.388074][ T8408] tipc: Resetting bearer [ 349.427274][ T8407] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1078'. [ 349.460333][ T8396] tipc: Resetting bearer [ 349.538819][ T8396] tipc: Disabling bearer [ 349.700702][ T26] audit: type=1326 audit(1786494414.695:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.3.1080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40cb9e0d9 code=0x7ffc0000 [ 349.818913][ T26] audit: type=1326 audit(1786494414.725:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.3.1080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40cb9e0d9 code=0x7ffc0000 [ 349.879653][ T26] audit: type=1326 audit(1786494414.725:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.3.1080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40cb9e0d9 code=0x7ffc0000 [ 349.960723][ T26] audit: type=1326 audit(1786494414.725:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.3.1080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fd40cb9e0d9 code=0x7ffc0000 [ 350.030670][ T8421] device syzkaller0 entered promiscuous mode [ 350.061347][ T26] audit: type=1326 audit(1786494414.725:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.3.1080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40cb9e0d9 code=0x7ffc0000 [ 350.140082][ T26] audit: type=1326 audit(1786494414.725:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.3.1080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40cb9e0d9 code=0x7ffc0000 [ 350.280833][ T26] audit: type=1326 audit(1786494414.725:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.3.1080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd40cb9e0d9 code=0x7ffc0000 [ 350.409929][ T26] audit: type=1326 audit(1786494414.725:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.3.1080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd40cb9e0d9 code=0x7ffc0000 [ 350.488837][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 350.563039][ T8443] loop1: detected capacity change from 0 to 512 [ 350.704330][ T8443] [ 350.706739][ T8443] ====================================================== [ 350.713789][ T8443] WARNING: possible circular locking dependency detected [ 350.720861][ T8443] syzkaller #0 Not tainted [ 350.725311][ T8443] ------------------------------------------------------ [ 350.732363][ T8443] syz.1.1090/8443 is trying to acquire lock: [ 350.738373][ T8443] ffff888060022c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 350.748661][ T8443] [ 350.748661][ T8443] but task is already holding lock: [ 350.756058][ T8443] ffff888071fd4700 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3f6/0x760 [ 350.766040][ T8443] [ 350.766040][ T8443] which lock already depends on the new lock. [ 350.766040][ T8443] [ 350.776494][ T8443] [ 350.776494][ T8443] the existing dependency chain (in reverse order) is: [ 350.785544][ T8443] [ 350.785544][ T8443] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 350.793150][ T8443] down_write+0x36/0x60 [ 350.797956][ T8443] ext4_destroy_inline_data+0x24/0xe0 [ 350.803907][ T8443] ext4_writepages+0x599/0x2e70 [ 350.809340][ T8443] do_writepages+0x3c6/0x640 [ 350.814638][ T8443] __writeback_single_inode+0x153/0x1170 [ 350.820929][ T8443] writeback_sb_inodes+0xad5/0x17f0 [ 350.826699][ T8443] wb_writeback+0x470/0xd40 [ 350.831769][ T8443] wb_workfn+0x423/0xee0 [ 350.836575][ T8443] process_one_work+0x8ab/0x1160 [ 350.842268][ T8443] worker_thread+0xaf5/0x12a0 [ 350.847551][ T8443] kthread+0x29d/0x330 [ 350.852176][ T8443] ret_from_fork+0x1f/0x30 [ 350.857192][ T8443] [ 350.857192][ T8443] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 350.865676][ T8443] __lock_acquire+0x2d18/0x7c40 [ 350.871118][ T8443] lock_acquire+0x1bb/0x4a0 [ 350.876190][ T8443] percpu_down_read+0x44/0x1a0 [ 350.881515][ T8443] ext4_writepages+0x213/0x2e70 [ 350.886925][ T8443] do_writepages+0x3c6/0x640 [ 350.892073][ T8443] __writeback_single_inode+0x153/0x1170 [ 350.898283][ T8443] writeback_single_inode+0x3d2/0x8e0 [ 350.904252][ T8443] write_inode_now+0x17f/0x210 [ 350.909595][ T8443] iput+0x643/0x9c0 [ 350.914014][ T8443] ext4_xattr_block_set+0x2487/0x2fe0 [ 350.920035][ T8443] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 350.926413][ T8443] __ext4_expand_extra_isize+0x301/0x3e0 [ 350.932615][ T8443] __ext4_mark_inode_dirty+0x478/0x760 [ 350.938649][ T8443] ext4_evict_inode+0xa67/0x10e0 [ 350.944160][ T8443] evict+0x4b6/0x8b0 [ 350.948619][ T8443] ext4_orphan_cleanup+0xc32/0x1470 [ 350.954389][ T8443] ext4_fill_super+0x6f0c/0x78f0 [ 350.959881][ T8443] get_tree_bdev+0x3e6/0x610 [ 350.965079][ T8443] vfs_get_tree+0x88/0x270 [ 350.970038][ T8443] do_new_mount+0x247/0xa40 [ 350.975075][ T8443] __se_sys_mount+0x2e3/0x3d0 [ 350.980324][ T8443] do_syscall_64+0x4c/0xa0 [ 350.985320][ T8443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.991844][ T8443] [ 350.991844][ T8443] other info that might help us debug this: [ 350.991844][ T8443] [ 351.002106][ T8443] Possible unsafe locking scenario: [ 351.002106][ T8443] [ 351.009583][ T8443] CPU0 CPU1 [ 351.014972][ T8443] ---- ---- [ 351.020360][ T8443] lock(&ei->xattr_sem); [ 351.024726][ T8443] lock(&sbi->s_writepages_rwsem); [ 351.032475][ T8443] lock(&ei->xattr_sem); [ 351.039349][ T8443] lock(&sbi->s_writepages_rwsem); [ 351.044567][ T8443] [ 351.044567][ T8443] *** DEADLOCK *** [ 351.044567][ T8443] [ 351.052724][ T8443] 3 locks held by syz.1.1090/8443: [ 351.057850][ T8443] #0: ffff8880600200e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x930 [ 351.068012][ T8443] #1: ffff888060020650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x431/0x10e0 [ 351.077525][ T8443] #2: ffff888071fd4700 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3f6/0x760 [ 351.087864][ T8443] [ 351.087864][ T8443] stack backtrace: [ 351.093783][ T8443] CPU: 0 PID: 8443 Comm: syz.1.1090 Not tainted syzkaller #0 [ 351.101166][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.111258][ T8443] Call Trace: [ 351.114561][ T8443] [ 351.117508][ T8443] dump_stack_lvl+0x188/0x24e [ 351.122216][ T8443] ? load_image+0x410/0x410 [ 351.126770][ T8443] ? show_regs_print_info+0x12/0x12 [ 351.132001][ T8443] ? print_circular_bug+0x12b/0x1a0 [ 351.137235][ T8443] check_noncircular+0x296/0x330 [ 351.142206][ T8443] ? look_up_lock_class+0x75/0x140 [ 351.147343][ T8443] ? add_chain_block+0x9b0/0x9b0 [ 351.152323][ T8443] ? lockdep_lock+0xf1/0x1f0 [ 351.156953][ T8443] ? _find_first_zero_bit+0xd2/0x100 [ 351.162363][ T8443] __lock_acquire+0x2d18/0x7c40 [ 351.167251][ T8443] ? verify_lock_unused+0x140/0x140 [ 351.172481][ T8443] ? mark_lock+0x94/0x320 [ 351.176840][ T8443] ? __lock_acquire+0x1465/0x7c40 [ 351.181976][ T8443] lock_acquire+0x1bb/0x4a0 [ 351.186505][ T8443] ? ext4_writepages+0x213/0x2e70 [ 351.191546][ T8443] ? __lock_acquire+0x138a/0x7c40 [ 351.196592][ T8443] ? __might_sleep+0xd0/0xd0 [ 351.201285][ T8443] ? read_lock_is_recursive+0x10/0x10 [ 351.206684][ T8443] ? mark_lock+0x94/0x320 [ 351.211034][ T8443] percpu_down_read+0x44/0x1a0 [ 351.215817][ T8443] ? ext4_writepages+0x213/0x2e70 [ 351.220858][ T8443] ext4_writepages+0x213/0x2e70 [ 351.225732][ T8443] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 351.231734][ T8443] ? verify_lock_unused+0x140/0x140 [ 351.236957][ T8443] ? ext4_read_folio+0x370/0x370 [ 351.241912][ T8443] ? mark_lock+0x94/0x320 [ 351.246270][ T8443] ? __lock_acquire+0x1465/0x7c40 [ 351.251328][ T8443] ? __lock_acquire+0x7c40/0x7c40 [ 351.256409][ T8443] ? do_raw_spin_lock+0x128/0x2f0 [ 351.261451][ T8443] ? do_raw_spin_unlock+0x11d/0x230 [ 351.266682][ T8443] ? ext4_read_folio+0x370/0x370 [ 351.271638][ T8443] do_writepages+0x3c6/0x640 [ 351.276272][ T8443] ? __writepage+0x130/0x130 [ 351.280900][ T8443] ? writeback_single_inode+0x3c7/0x8e0 [ 351.286488][ T8443] ? __lock_acquire+0x7c40/0x7c40 [ 351.291536][ T8443] ? do_raw_spin_lock+0x128/0x2f0 [ 351.296582][ T8443] __writeback_single_inode+0x153/0x1170 [ 351.302245][ T8443] writeback_single_inode+0x3d2/0x8e0 [ 351.307663][ T8443] ? write_inode_now+0x210/0x210 [ 351.312628][ T8443] write_inode_now+0x17f/0x210 [ 351.317416][ T8443] ? bdi_split_work_to_wbs+0x8f0/0x8f0 [ 351.322902][ T8443] ? rcu_is_watching+0x11/0xa0 [ 351.327783][ T8443] ? do_raw_spin_unlock+0x11d/0x230 [ 351.332999][ T8443] iput+0x643/0x9c0 [ 351.336844][ T8443] ext4_xattr_block_set+0x2487/0x2fe0 [ 351.342237][ T8443] ? __might_sleep+0xd0/0xd0 [ 351.346859][ T8443] ? ext4_xattr_block_find+0x2c0/0x2c0 [ 351.352393][ T8443] ? ext4_xattr_block_find+0x24a/0x2c0 [ 351.357885][ T8443] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 351.363728][ T8443] __ext4_expand_extra_isize+0x301/0x3e0 [ 351.369397][ T8443] __ext4_mark_inode_dirty+0x478/0x760 [ 351.374895][ T8443] ext4_evict_inode+0xa67/0x10e0 [ 351.379860][ T8443] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 351.385794][ T8443] ? do_raw_spin_unlock+0x11d/0x230 [ 351.391011][ T8443] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 351.396943][ T8443] evict+0x4b6/0x8b0 [ 351.400875][ T8443] ? proc_nr_inodes+0x2f0/0x2f0 [ 351.405743][ T8443] ? do_raw_spin_unlock+0x11d/0x230 [ 351.410981][ T8443] ? _raw_spin_unlock+0x24/0x40 [ 351.415853][ T8443] ? iput+0x79f/0x9c0 [ 351.419861][ T8443] ext4_orphan_cleanup+0xc32/0x1470 [ 351.425095][ T8443] ? ext4_orphan_del+0xc90/0xc90 [ 351.430062][ T8443] ? ext4_register_sysfs+0x27e/0x2c0 [ 351.435371][ T8443] ? errseq_check_and_advance+0x62/0x120 [ 351.441023][ T8443] ext4_fill_super+0x6f0c/0x78f0 [ 351.446008][ T8443] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 351.452305][ T8443] ? set_blocksize+0x1d0/0x470 [ 351.457200][ T8443] ? sb_set_blocksize+0xa5/0xe0 [ 351.462081][ T8443] get_tree_bdev+0x3e6/0x610 [ 351.466692][ T8443] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 351.472954][ T8443] vfs_get_tree+0x88/0x270 [ 351.477396][ T8443] do_new_mount+0x247/0xa40 [ 351.481921][ T8443] __se_sys_mount+0x2e3/0x3d0 [ 351.486618][ T8443] ? __x64_sys_mount+0xc0/0xc0 [ 351.491398][ T8443] ? lockdep_hardirqs_on+0x94/0x140 [ 351.496612][ T8443] ? __x64_sys_mount+0x1c/0xc0 [ 351.501393][ T8443] do_syscall_64+0x4c/0xa0 [ 351.505863][ T8443] ? clear_bhb_loop+0x60/0xb0 [ 351.510563][ T8443] ? clear_bhb_loop+0x60/0xb0 [ 351.515276][ T8443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.521201][ T8443] RIP: 0033:0x7fede199f34a [ 351.525658][ T8443] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.545483][ T8443] RSP: 002b:00007fede2827e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 351.553914][ T8443] RAX: ffffffffffffffda RBX: 00007fede2827ee0 RCX: 00007fede199f34a [ 351.561901][ T8443] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007fede2827ea0 [ 351.569886][ T8443] RBP: 0000200000000240 R08: 00007fede2827ee0 R09: 0000000000000000 [ 351.577872][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 351.585859][ T8443] R13: 00007fede2827ea0 R14: 000000000000047a R15: 000000000000002c [ 351.593871][ T8443] [ 351.614618][ T8450] device syzkaller0 entered promiscuous mode [ 351.632751][ T8443] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.1090: iget: bad extra_isize 90 (inode size 256) [ 351.656172][ T8443] EXT4-fs (loop1): Remounting filesystem read-only [ 351.667925][ T8443] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1090: error while reading EA inode 11 err=-117 [ 351.703800][ T8443] EXT4-fs (loop1): Remounting filesystem read-only [ 351.710517][ T8443] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.1090: iget: bad extra_isize 90 (inode size 256) [ 351.725142][ T8443] EXT4-fs (loop1): Remounting filesystem read-only [ 351.731793][ T8443] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1090: error while reading EA inode 11 err=-117 [ 351.746268][ T8443] EXT4-fs (loop1): Remounting filesystem read-only [ 351.752901][ T8443] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.1090: iget: bad extra_isize 90 (inode size 256) [ 351.770065][ T8443] EXT4-fs (loop1): Remounting filesystem read-only [ 351.776882][ T8443] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1090: error while reading EA inode 18 err=-117 [ 351.790067][ T8443] EXT4-fs (loop1): Remounting filesystem read-only [ 351.796945][ T8443] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.1090: iget: bad extra_isize 90 (inode size 256) [ 351.820810][ T8443] EXT4-fs (loop1): Remounting filesystem read-only [ 351.832571][ T8443] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1090: error while reading EA inode 18 err=-117 [ 351.852303][ T8443] EXT4-fs (loop1): Remounting filesystem read-only [ 351.859370][ T8443] EXT4-fs (loop1): 1 orphan inode deleted [ 351.867169][ T8443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 351.892450][ T8443] EXT4-fs error (device loop1): __ext4_iget:5102: inode #14: block 1886221359: comm syz.1.1090: invalid block [ 351.906393][ T8443] EXT4-fs (loop1): Remounting filesystem read-only [ 351.931675][ T4283] EXT4-fs (loop1): unmounting filesystem.