last executing test programs: 9m12.866125919s ago: executing program 4 (id=606): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ptrace$cont(0xffffffffffffffff, 0x0, 0x8, 0x2) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x4a1, &(0x7f0000000540)={0x0, 0xbd57, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 9m9.407043929s ago: executing program 4 (id=611): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30040c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') getdents(r0, &(0x7f0000000400)=""/205, 0xcd) 9m8.139062245s ago: executing program 4 (id=619): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m7.84502135s ago: executing program 4 (id=622): open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 9m6.826846574s ago: executing program 4 (id=625): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r0, &(0x7f0000000080)=""/179, 0xb3) 9m6.419761065s ago: executing program 4 (id=630): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001e40)=""/104, 0x68}], 0x1}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458", 0x2}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 9m5.606599168s ago: executing program 32 (id=630): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001e40)=""/104, 0x68}], 0x1}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458", 0x2}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 7m5.063044563s ago: executing program 5 (id=1124): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r2 = socket(0x1d, 0x2, 0x6) recvfrom$l2tp6(r2, &(0x7f00000002c0)=""/75, 0x4b, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x4b8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48c, 0x2, [@TCA_U32_POLICE={0x464, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x4, 0x101, 0x4, 0x7, 0x2, 0x8, 0x10001, 0x6, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0x9f77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0xb, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x6, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0xe32c, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4c, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000380)=""/196) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 7m4.55019326s ago: executing program 5 (id=1128): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x28c, 0x0, 0x25, 0x148, 0x340, 0x60, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x4, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1, "8aaa53abdcd262af029c792dd41e857557f11bf3df0f3adc717d2a04cbd4"}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2e8) 7m0.209442716s ago: executing program 5 (id=1146): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x20000, 0x200000, 0x8}) 6m59.910301871s ago: executing program 5 (id=1149): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) 6m59.434614406s ago: executing program 5 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026", 0x39}], 0x2}], 0x1, 0x40800) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) listen(r1, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x7fff0006}]}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x16, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={0x0}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_procfs(0xffffffffffffffff, 0x0) 6m58.942536802s ago: executing program 5 (id=1158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0x10000, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, 0x10000, 0x1ff, 0xffffffff, 0x0, 0x6, 0x5, 0x7, 0x4, 0x3, 0x38, 0xafb000, 0x2, 0xa24, 0x1125, 0x2, 0x2, 0x2, 0x7, 0x3ff, 0x7, 0xeb3, 0x4, 0x10001, 0x2c548119, 0xfffffffd, 0x0, 0x2, 0x8, 0x39a, 0x401, 0x6, 0x2, 0x6, 0xd8f3, 0x7, 0x5, 0x4, 0x8000, 0x7, 0x2, 0x1fe00000, 0x9, 0x2, 0x3, 0xd, 0x400, 0xa246, 0x7, 0x3, 0x2, 0x1, 0x8, 0x55, 0x9, 0x4, 0x2, 0x7ff, 0xfffffffe, 0xf, 0x7, 0xb, 0x1, 0x4, 0x0, 0x10000, 0xe, 0x80000000, 0x7f, 0x3, 0x2, 0x8, 0x9, 0x4800000, 0x7f, 0xffff, 0x2, 0x7, 0x200, 0x2, 0x8, 0x7, 0x400, 0x0, 0xa11e, 0x1, 0x2, 0x4, 0xfffffffb, 0x0, 0xa, 0x0, 0x3, 0x8, 0x3, 0x7, 0x9, 0x3ff, 0x6, 0xff, 0x7, 0x7, 0x8, 0x5, 0x985c, 0x3, 0x101, 0x7, 0x1, 0x3, 0x3, 0x8, 0x0, 0xb, 0x42fb, 0x40, 0x7, 0x7, 0x2, 0x0, 0xfffffff3, 0x7, 0x5, 0x3, 0x0, 0xfffffc00, 0x61b500fd, 0xe9, 0x3, 0x7, 0x5, 0x4, 0xa, 0x3, 0x1, 0x10, 0x10, 0x1, 0x400, 0x7d, 0x6, 0xd, 0x4, 0xffffffd8, 0xe, 0x5, 0x1, 0x2, 0x0, 0x3, 0x7, 0x4e4, 0x3, 0x2, 0x3, 0x8bf, 0x40, 0x9, 0xa, 0xffffffff, 0x9, 0x8, 0x7, 0x72, 0x0, 0x7ff, 0x101, 0xb676, 0x8, 0x7ff, 0xff000000, 0xffffffff, 0x1, 0x40, 0x1bb0faca, 0x10001, 0x8, 0x7fffffff, 0xf7, 0xb8b, 0x7, 0x4, 0x8, 0x79a3, 0xb, 0x3ff, 0x101, 0xbf, 0x400fb924, 0x9, 0x2, 0xffff, 0x3, 0x4, 0x400, 0x6, 0x3, 0x2, 0x6, 0xfffffffb, 0x7, 0x3, 0x6, 0x2, 0xe, 0xffffffff, 0x5, 0x1, 0x6, 0x3, 0x3, 0x0, 0x3, 0x9, 0x3ff, 0x6, 0x53, 0x8001, 0x0, 0x81, 0xfffffff5, 0x81, 0xbb8, 0x3, 0x7, 0x4de27769, 0xaa9, 0x1, 0x9, 0x6, 0x82ee, 0x5, 0x8000, 0xffffff81, 0x8, 0x1, 0x3, 0x5ce, 0x1, 0x0, 0x5, 0x0, 0x3, 0x6, 0x9, 0x5, 0x1, 0x9c, 0x2, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 6m58.421238499s ago: executing program 33 (id=1158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0x10000, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, 0x10000, 0x1ff, 0xffffffff, 0x0, 0x6, 0x5, 0x7, 0x4, 0x3, 0x38, 0xafb000, 0x2, 0xa24, 0x1125, 0x2, 0x2, 0x2, 0x7, 0x3ff, 0x7, 0xeb3, 0x4, 0x10001, 0x2c548119, 0xfffffffd, 0x0, 0x2, 0x8, 0x39a, 0x401, 0x6, 0x2, 0x6, 0xd8f3, 0x7, 0x5, 0x4, 0x8000, 0x7, 0x2, 0x1fe00000, 0x9, 0x2, 0x3, 0xd, 0x400, 0xa246, 0x7, 0x3, 0x2, 0x1, 0x8, 0x55, 0x9, 0x4, 0x2, 0x7ff, 0xfffffffe, 0xf, 0x7, 0xb, 0x1, 0x4, 0x0, 0x10000, 0xe, 0x80000000, 0x7f, 0x3, 0x2, 0x8, 0x9, 0x4800000, 0x7f, 0xffff, 0x2, 0x7, 0x200, 0x2, 0x8, 0x7, 0x400, 0x0, 0xa11e, 0x1, 0x2, 0x4, 0xfffffffb, 0x0, 0xa, 0x0, 0x3, 0x8, 0x3, 0x7, 0x9, 0x3ff, 0x6, 0xff, 0x7, 0x7, 0x8, 0x5, 0x985c, 0x3, 0x101, 0x7, 0x1, 0x3, 0x3, 0x8, 0x0, 0xb, 0x42fb, 0x40, 0x7, 0x7, 0x2, 0x0, 0xfffffff3, 0x7, 0x5, 0x3, 0x0, 0xfffffc00, 0x61b500fd, 0xe9, 0x3, 0x7, 0x5, 0x4, 0xa, 0x3, 0x1, 0x10, 0x10, 0x1, 0x400, 0x7d, 0x6, 0xd, 0x4, 0xffffffd8, 0xe, 0x5, 0x1, 0x2, 0x0, 0x3, 0x7, 0x4e4, 0x3, 0x2, 0x3, 0x8bf, 0x40, 0x9, 0xa, 0xffffffff, 0x9, 0x8, 0x7, 0x72, 0x0, 0x7ff, 0x101, 0xb676, 0x8, 0x7ff, 0xff000000, 0xffffffff, 0x1, 0x40, 0x1bb0faca, 0x10001, 0x8, 0x7fffffff, 0xf7, 0xb8b, 0x7, 0x4, 0x8, 0x79a3, 0xb, 0x3ff, 0x101, 0xbf, 0x400fb924, 0x9, 0x2, 0xffff, 0x3, 0x4, 0x400, 0x6, 0x3, 0x2, 0x6, 0xfffffffb, 0x7, 0x3, 0x6, 0x2, 0xe, 0xffffffff, 0x5, 0x1, 0x6, 0x3, 0x3, 0x0, 0x3, 0x9, 0x3ff, 0x6, 0x53, 0x8001, 0x0, 0x81, 0xfffffff5, 0x81, 0xbb8, 0x3, 0x7, 0x4de27769, 0xaa9, 0x1, 0x9, 0x6, 0x82ee, 0x5, 0x8000, 0xffffff81, 0x8, 0x1, 0x3, 0x5ce, 0x1, 0x0, 0x5, 0x0, 0x3, 0x6, 0x9, 0x5, 0x1, 0x9c, 0x2, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 45.003373211s ago: executing program 1 (id=2980): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x80000000}, 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 44.602639421s ago: executing program 1 (id=2982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xff7fffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 7.64679433s ago: executing program 2 (id=3067): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d"], 0x10}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x24040084}, 0x840) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.489514088s ago: executing program 0 (id=3069): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}}) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r1, &(0x7f0000000f00), 0x0, 0x200088d0) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000004c0)={0x20, 0xf}, 0x0, 0x0, &(0x7f0000000240), 0x0}) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x34be00) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) 7.216705211s ago: executing program 2 (id=3071): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e5", 0x10}], 0x1}, 0x0) 7.081780547s ago: executing program 2 (id=3072): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000900)="09bad62ec9dabd8303a26f82e18d06f78893a8d8e178aaf8c4cbce01ac6a4fc205ef9b0e83e94751bf4754aa324fd2a6a82ec20486ce331a5c650440bf09bf6cbf831d", 0x43}], 0x1}}], 0x1, 0x20000000) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 6.700107777s ago: executing program 2 (id=3076): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x625c, &(0x7f000000bdc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3507a000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x1}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0c0586d, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x4, 0x0, 0x1000000002, 0x0, 0xfffffffffffffffc, 0x6}, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x17c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 6.550716464s ago: executing program 6 (id=3077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) 4.83866317s ago: executing program 6 (id=3079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x58}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4.764842613s ago: executing program 3 (id=3080): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x1200c86, &(0x7f0000000100)=ANY=[@ANYBLOB='codepage=euc-jp,umask=00000000000000000000000,iocharset=cp932,gid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x1, 0x297, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 4.43667599s ago: executing program 2 (id=3081): socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x28) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd"], 0xfdef) 3.558793243s ago: executing program 6 (id=3082): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x104, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xd4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xfffffffffffffc3e, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x9, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x104}}, 0x2000c800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.485942527s ago: executing program 1 (id=2985): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.438522129s ago: executing program 0 (id=3083): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e5", 0x10}], 0x1}, 0x0) 3.247640828s ago: executing program 3 (id=3084): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 3.246815818s ago: executing program 6 (id=3085): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000900)="09bad62ec9dabd8303a26f82e18d06f78893a8d8e178aaf8c4cbce01ac6a4fc205ef9b0e83e94751bf4754aa324fd2a6a82ec20486ce331a5c650440bf09bf6cbf831d", 0x43}], 0x1}}], 0x1, 0x20000000) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2.993315731s ago: executing program 0 (id=3086): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000012c0), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r2, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close(0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) 2.62121833s ago: executing program 1 (id=3087): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000", 0xc4}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff99, 0x10008095, 0x0, 0x0) 2.61063607s ago: executing program 6 (id=3088): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) 2.562129663s ago: executing program 2 (id=3089): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000200)={0x0, 0xfb, 0x2d, 0x0, 0x0, "d6a5f6f0b0000000e80c00", "57122f863cea65cfc3c71068965a87667890866ff52f9bbe"}, 0x2d, 0x2) 2.493984376s ago: executing program 0 (id=3090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x28, r1, 0x5, 0x0, 0x25dfdaff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8091}, 0x0) 2.21847203s ago: executing program 0 (id=3091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000480)="422239d0", 0x4, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.132917364s ago: executing program 3 (id=3092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x58}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 693.416296ms ago: executing program 6 (id=3093): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}}) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r1, &(0x7f0000000f00), 0x0, 0x200088d0) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000004c0)={0x20, 0xf}, 0x0, 0x0, &(0x7f0000000240), 0x0}) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x34be00) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) 682.602976ms ago: executing program 0 (id=3094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff84", 0x14}, {&(0x7f0000002680)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257", 0xd2}], 0x2}, 0x4005) 596.25501ms ago: executing program 3 (id=3095): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x40084146, 0x40944f9c780000) 424.141689ms ago: executing program 1 (id=3096): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280)="07a55e", 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, 0x0) 250.614608ms ago: executing program 3 (id=3097): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000180)='0', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 236.769488ms ago: executing program 1 (id=3098): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 3 (id=3099): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000900)="09bad62ec9dabd8303a26f82e18d06f78893a8d8e178aaf8c4cbce01ac6a4fc205ef9b0e83e94751bf4754aa324fd2a6a82ec20486ce331a5c650440bf09bf6cbf831d", 0x43}], 0x1}}], 0x1, 0x20000000) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) kernel console output (not intermixed with test programs): lue for 'fd' [ 562.364993][ T4354] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 562.518133][ T4354] usb 4-1: device descriptor read/64, error -71 [ 562.648936][ T4354] usb usb4-port1: attempt power cycle [ 562.993108][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.068192][ T4354] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 563.168206][ T4354] usb 4-1: device descriptor read/8, error -71 [ 563.567401][ T4354] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 564.318229][ T4354] usb 4-1: device descriptor read/8, error -71 [ 564.448245][ T4354] usb usb4-port1: unable to enumerate USB device [ 564.534262][T10979] loop6: detected capacity change from 0 to 512 [ 564.590538][T10979] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a816c018, mo2=0082] [ 564.598873][T10979] System zones: 0-2, 18-18, 34-35 [ 564.646817][T10979] EXT4-fs error (device loop6): __ext4_iget:5095: inode #3: block 127754: comm syz.6.1910: invalid block [ 564.659012][T10979] EXT4-fs error (device loop6): ext4_quota_enable:7046: comm syz.6.1910: Bad quota inode: 3, type: 0 [ 564.670754][T10979] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 564.686524][T10979] EXT4-fs (loop6): mount failed [ 564.741814][T10986] fuse: Unknown parameter '0xffffffffffffffff' [ 565.274745][ T4875] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 565.507837][ T4875] usb 4-1: Using ep0 maxpacket: 8 [ 566.226617][ T4875] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 246, changing to 7 [ 566.249779][ T4875] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 566.264112][ T4875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.272624][ T4875] usb 4-1: Product: syz [ 566.276827][ T4875] usb 4-1: Manufacturer: syz [ 566.295412][ T4875] usb 4-1: SerialNumber: syz [ 567.259998][ T4875] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 567.269863][ T4875] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 567.369527][ T4875] usb 4-1: USB disconnect, device number 25 [ 567.629769][ T6929] udevd[6929]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.847294][T11025] device hsr0 entered promiscuous mode [ 567.899731][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'. [ 567.904727][T11032] fuse: Unknown parameter '0xffffffffffffffff' [ 567.956585][T11025] device hsr_slave_0 left promiscuous mode [ 567.964144][T11025] device hsr_slave_1 left promiscuous mode [ 568.159760][T11025] device hsr0 left promiscuous mode [ 568.828189][T11049] overlayfs: failed to clone lowerpath [ 568.977757][T11050] overlayfs: failed to clone lowerpath [ 571.513379][T11074] loop3: detected capacity change from 0 to 32768 [ 571.535270][T11074] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 571.745837][T11080] fuse: Unknown parameter '0xffffffffffffffff' [ 571.877012][ T6929] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 572.395419][T11098] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 574.695284][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1950'. [ 574.753992][T11119] fuse: Unknown parameter '0xffffffffffffffff' [ 577.329582][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1959'. [ 577.621336][T11152] program syz.3.1960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 578.311502][T11154] loop6: detected capacity change from 0 to 32768 [ 578.334413][T11154] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 578.344660][T11154] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 578.354395][T11154] BTRFS info (device loop6): using free space tree [ 578.450829][T11154] BTRFS info (device loop6): enabling ssd optimizations [ 579.095275][ T8410] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 579.282721][T11178] fuse: Unknown parameter '0x0000000000000005' [ 579.314224][ T6929] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop6 scanned by udevd (6929) [ 580.251155][ T4432] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 581.117438][ T4432] usb 7-1: device descriptor read/64, error -71 [ 581.397507][ T4432] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 581.567600][ T4432] usb 7-1: device descriptor read/64, error -71 [ 581.687824][ T4432] usb usb7-port1: attempt power cycle [ 582.097447][ T4432] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 582.138106][ T4432] usb 7-1: device descriptor read/8, error -71 [ 582.402808][T11224] loop3: detected capacity change from 0 to 2048 [ 582.465795][T11226] fuse: Unknown parameter '0x0000000000000005' [ 582.491141][T11224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 582.517525][T11224] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.539883][ T4432] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 582.593208][ T4432] usb 7-1: device descriptor read/8, error -71 [ 582.728648][ T4432] usb usb7-port1: unable to enumerate USB device [ 583.823690][T11245] netlink: 'syz.6.1981': attribute type 1 has an invalid length. [ 584.086191][T11249] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 584.156582][T11249] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 584.240624][T11245] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1981'. [ 584.451981][T11250] device macvlan2 entered promiscuous mode [ 584.498255][T11250] device bond1 entered promiscuous mode [ 584.535128][T11250] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 584.616617][T11250] device bond1 left promiscuous mode [ 586.047964][T11289] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 587.822143][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 588.035130][T11333] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 589.010178][T11360] netlink: 'syz.0.2013': attribute type 3 has an invalid length. [ 589.043914][T11363] fuse: Unknown parameter 'fd0x0000000000000005' [ 589.807503][ T4358] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 589.997621][ T4358] usb 7-1: Using ep0 maxpacket: 32 [ 590.005698][ T4358] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 590.029350][ T4358] usb 7-1: config 0 has no interface number 0 [ 590.058498][ T4358] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 590.089394][ T4358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.110555][ T4358] usb 7-1: Product: syz [ 590.115195][ T4358] usb 7-1: Manufacturer: syz [ 590.120283][T11396] netlink: 'syz.2.2027': attribute type 3 has an invalid length. [ 590.120596][ T4358] usb 7-1: SerialNumber: syz [ 590.136899][ T4358] usb 7-1: config 0 descriptor?? [ 590.154503][ T4358] smsc95xx v2.0.0 [ 590.567119][ T4358] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 590.595235][ T4358] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 590.597947][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'. [ 590.644405][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 590.894549][ T4358] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 590.918694][ T4358] smsc95xx: probe of 7-1:0.67 failed with error -32 [ 591.424611][T11436] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 592.512702][T11469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2047'. [ 592.586075][ T4876] usb 7-1: USB disconnect, device number 11 [ 592.855816][T11477] program syz.3.2048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.225598][T11487] vivid-003: ================= START STATUS ================= [ 593.233510][T11487] vivid-003: Radio HW Seek Mode: Bounded [ 593.239251][T11487] vivid-003: Radio Programmable HW Seek: false [ 593.245939][T11487] vivid-003: RDS Rx I/O Mode: Block I/O [ 593.251636][T11487] vivid-003: Generate RBDS Instead of RDS: false [ 593.258048][T11487] vivid-003: RDS Reception: true [ 593.263028][T11487] vivid-003: RDS Program Type: 0 inactive [ 593.268854][T11487] vivid-003: RDS PS Name: inactive [ 593.274103][T11487] vivid-003: RDS Radio Text: inactive [ 593.279663][T11487] vivid-003: RDS Traffic Announcement: false inactive [ 593.286493][T11487] vivid-003: RDS Traffic Program: false inactive [ 593.293008][T11487] vivid-003: RDS Music: false inactive [ 593.298616][T11487] vivid-003: ================== END STATUS ================== [ 594.293688][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2060'. [ 594.440269][T11528] loop6: detected capacity change from 0 to 2048 [ 594.574519][T11528] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 594.587991][T11528] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.736945][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2066'. [ 596.598076][ T8410] EXT4-fs (loop6): unmounting filesystem. [ 597.027050][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2081'. [ 597.288141][T11596] device syzkaller0 entered promiscuous mode [ 597.616263][T11600] loop6: detected capacity change from 0 to 32768 [ 597.634092][T11600] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 11 [ 598.058233][T11606] netlink: 41 bytes leftover after parsing attributes in process `syz.3.2088'. [ 598.153845][ T6929] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 11 [ 598.629663][T11631] netlink: 'syz.2.2093': attribute type 9 has an invalid length. [ 598.639861][T11627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2095'. [ 600.291983][T11670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2107'. [ 600.387951][T11674] netlink: 'syz.3.2108': attribute type 3 has an invalid length. [ 600.724834][T11691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2110'. [ 600.908856][ T4472] wlan1: Trigger new scan to find an IBSS to join [ 601.004883][T11694] device syzkaller1 entered promiscuous mode [ 601.070529][T11700] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 601.710348][T11726] netlink: 'syz.2.2121': attribute type 3 has an invalid length. [ 601.861026][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 601.994342][T11736] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2125'. [ 603.108360][T11776] netlink: 'syz.2.2134': attribute type 3 has an invalid length. [ 603.322513][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2137'. [ 603.474951][T11788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2140'. [ 603.602204][T11792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2141'. [ 603.858710][T11805] netlink: 'syz.6.2147': attribute type 3 has an invalid length. [ 603.914765][T11806] tipc: Enabled bearer , priority 0 [ 603.932073][T11806] device syzkaller0 entered promiscuous mode [ 603.949264][ T4472] wlan1: Trigger new scan to find an IBSS to join [ 604.031736][T11807] tipc: Resetting bearer [ 604.087974][T11803] tipc: Resetting bearer [ 604.168323][T11803] tipc: Disabling bearer [ 604.408007][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2152'. [ 605.521029][T11844] netlink: 'syz.2.2160': attribute type 3 has an invalid length. [ 606.309982][T11858] overlayfs: failed to clone lowerpath [ 606.340649][T11858] overlayfs: failed to clone lowerpath [ 606.988000][ T46] wlan1: Trigger new scan to find an IBSS to join [ 607.063928][T11876] netlink: 'syz.2.2169': attribute type 1 has an invalid length. [ 607.152775][T11878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2170'. [ 607.263990][T11880] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 607.331328][T11880] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 607.360426][T11876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2169'. [ 607.407448][T11876] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 607.457752][T11882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2169'. [ 607.489599][T11882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.848657][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.856162][T11900] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.897949][ T4472] wlan1: Creating new IBSS network, BSSID 5a:53:48:b7:a7:02 [ 608.316307][T11896] overlayfs: failed to clone lowerpath [ 608.337184][T11896] overlayfs: failed to clone lowerpath [ 608.924119][T11933] program syz.3.2187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 609.105176][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2189'. [ 609.196591][T11937] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.834836][T11937] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.048022][ T9228] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 610.283103][ T9228] usb 4-1: Using ep0 maxpacket: 8 [ 610.294967][ T9228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.326826][ T9228] usb 4-1: config 0 has no interfaces? [ 610.382851][ T9228] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 610.409953][T11962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2195'. [ 610.422425][ T9228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.435465][T11937] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.436344][ T9228] usb 4-1: Product: syz [ 610.452262][ T9228] usb 4-1: Manufacturer: syz [ 610.457721][ T9228] usb 4-1: SerialNumber: syz [ 610.473652][ T9228] usb 4-1: config 0 descriptor?? [ 610.611876][T11937] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.761888][T11937] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.823563][T11937] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.870893][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2202'. [ 610.898807][T11937] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.973167][T11937] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.261929][T11985] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2204'. [ 611.281066][T11985] device syzkaller0 entered promiscuous mode [ 612.511236][ T9228] usb 4-1: USB disconnect, device number 26 [ 612.814588][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2213'. [ 614.522747][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2230'. [ 614.725879][T12068] loop3: detected capacity change from 0 to 32768 [ 614.754758][T12068] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 614.765016][T12068] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 614.773770][T12068] BTRFS info (device loop3): enabling disk space caching [ 614.780835][T12068] BTRFS info (device loop3): force clearing of disk cache [ 614.788045][T12068] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 614.797458][T12068] BTRFS info (device loop3): use zstd compression, level 3 [ 614.804925][T12068] BTRFS info (device loop3): disk space caching is enabled [ 614.848241][T12068] BTRFS info (device loop3): enabling ssd optimizations [ 614.856299][T12068] BTRFS info (device loop3): rebuilding free space tree [ 614.872338][T12068] BTRFS info (device loop3): disabling free space tree [ 614.879314][T12068] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 614.889044][T12068] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 614.930059][T12068] fs-verity: sha512 using implementation "sha512-avx2" [ 614.952101][T12068] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 615.031562][ T4278] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 615.311360][ T6929] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop3 scanned by udevd (6929) [ 615.376102][T12091] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.383347][T12091] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.806807][T12123] tipc: Enabling of bearer rejected, failed to enable media [ 617.176076][T12129] fuse: Bad value for 'fd' [ 617.619068][T12131] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 618.862936][T12178] tipc: Enabling of bearer rejected, failed to enable media [ 619.667642][T12193] overlayfs: failed to clone lowerpath [ 619.688723][T12193] overlayfs: failed to clone lowerpath [ 619.766568][T12199] fuse: Bad value for 'fd' [ 620.067905][T12208] device syzkaller0 entered promiscuous mode [ 621.440084][T12240] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 624.433793][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.148557][T12216] tipc: Enabling of bearer rejected, failed to enable media [ 625.166607][T12247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2279'. [ 625.416685][T12276] xt_ecn: cannot match TCP bits for non-tcp packets [ 626.213891][T12276] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.443167][T12276] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.612098][T12276] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.632561][T12296] tipc: Enabling of bearer rejected, failed to enable media [ 626.767781][T12276] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.850360][T12300] device syzkaller0 entered promiscuous mode [ 630.385549][T12319] netlink: 'syz.1.2305': attribute type 1 has an invalid length. [ 630.467384][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2305'. [ 630.580268][T12327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2305'. [ 630.630835][T12276] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.674763][T12276] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.756748][T12276] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.806600][T12276] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.337086][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2314'. [ 632.343357][T12376] device syzkaller1 entered promiscuous mode [ 632.377789][T12382] fuse: Bad value for 'fd' [ 633.095081][T12401] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 633.252495][T12408] fuse: Bad value for 'fd' [ 633.260388][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2327'. [ 633.645184][T12424] fuse: Bad value for 'fd' [ 634.887254][T12466] fuse: Unknown parameter 'grou00000000000000000000' [ 635.243235][T12473] fuse: Bad value for 'fd' [ 636.267640][T12495] netlink: 'syz.6.2354': attribute type 1 has an invalid length. [ 636.291538][T12497] fuse: Unknown parameter 'group_i00000000000000000000' [ 636.424777][T12501] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 636.512125][T12501] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 636.614561][T12504] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2354'. [ 636.675283][T12504] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 636.733351][T12495] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2354'. [ 637.000955][T12519] fuse: Bad value for 'fd' [ 637.797176][T12551] fuse: Bad value for 'fd' [ 637.991084][ T39] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 638.097494][T12557] xt_connbytes: Forcing CT accounting to be enabled [ 638.380223][T12568] fuse: Bad value for 'fd' [ 638.544676][T12573] netlink: 'syz.3.2374': attribute type 1 has an invalid length. [ 638.720905][T12578] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 638.778939][T12578] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 638.873607][T12573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2374'. [ 638.927163][T12573] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 638.936683][T12580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2374'. [ 638.967101][T12585] device ip6gre1 entered promiscuous mode [ 638.989051][ T4429] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.008091][T12585] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.016710][ T4429] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.041656][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.083970][T12587] fuse: Unknown parameter 'group_i00000000000000000000' [ 639.287520][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2379'. [ 639.316100][T12593] bond0: option lp_interval: invalid value (0) [ 639.332046][T12593] bond0: option lp_interval: allowed values 1 - 2147483647 [ 639.339914][ T4429] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.527723][ T4429] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.607639][T12601] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2383'. [ 639.661488][T12604] netlink: 'syz.3.2384': attribute type 10 has an invalid length. [ 639.696278][T12604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.769600][T12604] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 640.525408][T12633] fuse: Bad value for 'fd' [ 640.773992][T12639] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 640.817748][T12639] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 641.049017][T12645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2396'. [ 641.088393][T12647] loop6: detected capacity change from 0 to 2048 [ 641.166610][T12647] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 641.175653][T12647] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.479310][T12657] vivid-003: ================= START STATUS ================= [ 641.487009][T12657] vivid-003: Radio HW Seek Mode: Bounded [ 641.492762][T12657] vivid-003: Radio Programmable HW Seek: false [ 641.499016][T12657] vivid-003: RDS Rx I/O Mode: Block I/O [ 641.504686][T12657] vivid-003: Generate RBDS Instead of RDS: false [ 641.511085][T12657] vivid-003: RDS Reception: true [ 641.516065][T12657] vivid-003: RDS Program Type: 0 inactive [ 641.522335][T12657] vivid-003: RDS PS Name: inactive [ 641.527702][T12657] vivid-003: RDS Radio Text: inactive [ 641.533239][T12657] vivid-003: RDS Traffic Announcement: false inactive [ 641.540119][T12657] vivid-003: RDS Traffic Program: false inactive [ 641.546506][T12657] vivid-003: RDS Music: false inactive [ 641.552063][T12657] vivid-003: ================== END STATUS ================== [ 641.693123][T12655] fuse: Bad value for 'fd' [ 642.329213][T12667] overlayfs: failed to clone lowerpath [ 642.388461][T12668] overlayfs: failed to clone lowerpath [ 642.953861][T12664] loop3: detected capacity change from 0 to 32768 [ 642.964898][T12664] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 643.021564][ T8410] EXT4-fs (loop6): unmounting filesystem. [ 643.190596][T12330] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 643.192366][T12672] fuse: Unknown parameter 'group_id00000000000000000000' [ 643.467503][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.842760][T12692] tipc: Enabling of bearer rejected, failed to enable media [ 645.035036][T12701] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 645.110509][T12701] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 645.123723][T12701] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 645.166839][T12705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2411'. [ 645.342524][T12713] fuse: Unknown parameter 'group_id00000000000000000000' [ 645.364931][T12705] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 645.451188][T12701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2411'. [ 645.501059][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2417'. [ 645.625724][T12721] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 645.669206][T12718] loop3: detected capacity change from 0 to 2048 [ 645.793871][T12718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 645.821160][T12718] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.017503][ T26] audit: type=1800 audit(2000000270.510:42): pid=12737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2416" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 647.191502][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 647.617730][T12754] tipc: Enabling of bearer rejected, failed to enable media [ 647.985236][T12765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2430'. [ 648.586955][T12761] loop3: detected capacity change from 0 to 32768 [ 648.612958][T12761] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 648.660839][T12761] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 648.691467][T12761] BTRFS info (device loop3): enabling disk space caching [ 648.726103][T12761] BTRFS info (device loop3): force clearing of disk cache [ 648.729362][T12785] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2437'. [ 648.762086][T12761] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 648.787027][T12787] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2438'. [ 648.817397][T12761] BTRFS info (device loop3): use zstd compression, level 3 [ 648.824701][T12761] BTRFS info (device loop3): disk space caching is enabled [ 649.308838][T12807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2441'. [ 649.428249][T12761] BTRFS info (device loop3): enabling ssd optimizations [ 649.437833][T12761] BTRFS info (device loop3): rebuilding free space tree [ 649.449358][T12813] tipc: Enabling of bearer rejected, failed to enable media [ 649.496860][T12761] BTRFS info (device loop3): disabling free space tree [ 649.504646][T12761] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 649.516911][T12761] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 649.612112][T12761] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 649.730905][ T4278] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 649.767415][ T129] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 649.953667][ T129] usb 7-1: device descriptor read/64, error -71 [ 649.956159][T12828] device dummy0 entered promiscuous mode [ 650.017797][T12828] device vlan0 entered promiscuous mode [ 650.377387][ T129] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 650.391241][T12838] overlayfs: failed to clone lowerpath [ 650.449329][T12838] overlayfs: failed to clone lowerpath [ 650.547654][ T129] usb 7-1: device descriptor read/64, error -71 [ 650.679967][ T129] usb usb7-port1: attempt power cycle [ 650.811358][T12849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2455'. [ 651.067712][T12855] tipc: Enabling of bearer rejected, failed to enable media [ 651.087445][ T129] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 651.118097][ T129] usb 7-1: device descriptor read/8, error -71 [ 651.393737][ T129] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 651.470954][ T129] usb 7-1: device descriptor read/8, error -71 [ 651.623753][ T129] usb usb7-port1: unable to enumerate USB device [ 652.405735][T12870] netlink: 'syz.0.2464': attribute type 29 has an invalid length. [ 652.486570][T12870] netlink: 'syz.0.2464': attribute type 29 has an invalid length. [ 652.545253][T12874] netlink: 'syz.0.2464': attribute type 29 has an invalid length. [ 652.587607][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.876260][T12886] tipc: Enabling of bearer rejected, failed to enable media [ 652.961540][T12888] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2470'. [ 653.788164][ T9228] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 653.947770][ T9228] usb 4-1: device descriptor read/64, error -71 [ 654.234132][ T9228] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 654.326103][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 654.339150][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 654.352258][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 654.361045][T12921] tipc: Enabling of bearer rejected, failed to enable media [ 654.361192][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 654.383234][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 654.392644][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 654.411876][ T9228] usb 4-1: device descriptor read/64, error -71 [ 654.537708][ T9228] usb usb4-port1: attempt power cycle [ 654.799424][T12926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2485'. [ 654.967649][ T9228] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 655.044131][ T9228] usb 4-1: device descriptor read/8, error -71 [ 655.114991][T12934] xt_hashlimit: overflow, try lower: 241/0 [ 655.122366][T12918] chnl_net:caif_netlink_parms(): no params data found [ 655.477611][ T9228] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 655.530994][ T9228] usb 4-1: device descriptor read/8, error -71 [ 655.718235][ T9228] usb usb4-port1: unable to enumerate USB device [ 656.427406][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 656.641874][T12918] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.658107][T12918] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.687129][T12918] device bridge_slave_0 entered promiscuous mode [ 656.713319][T12918] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.732513][T12918] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.749682][T12918] device bridge_slave_1 entered promiscuous mode [ 656.781782][T12918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.793885][T12918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.889005][T12918] team0: Port device team_slave_0 added [ 656.898396][T12956] tipc: Enabling of bearer rejected, failed to enable media [ 656.925128][T12918] team0: Port device team_slave_1 added [ 656.961790][T12918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.983608][T12918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.026550][T12918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.069677][T12918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.079221][T12918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.144710][T12918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.254976][ T4401] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.331234][T12918] device hsr_slave_0 entered promiscuous mode [ 657.347030][T12918] device hsr_slave_1 entered promiscuous mode [ 657.385286][ T4401] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.411687][T12966] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2497'. [ 657.452792][ T4401] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.552358][ T4401] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.604009][T12970] raw_sendmsg: syz.6.2499 forgot to set AF_INET. Fix it! [ 658.615871][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 659.093687][T12992] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2506'. [ 659.239884][T12994] tipc: Started in network mode [ 659.248691][T12994] tipc: Node identity 8eea3f3b286e, cluster identity 4711 [ 659.267698][T12994] tipc: Enabled bearer , priority 0 [ 659.348350][T12997] device syzkaller0 entered promiscuous mode [ 659.539400][T12993] tipc: Resetting bearer [ 659.615790][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'. [ 659.626637][T12993] tipc: Disabling bearer [ 659.872394][T13015] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2512'. [ 659.900296][T13015] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2512'. [ 660.015656][T13020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2515'. [ 660.667606][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 661.046025][T13041] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 662.266066][T13093] fuse: Bad value for 'fd' [ 662.375303][T12918] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 662.441298][T12918] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 662.513315][T13095] tipc: Enabling of bearer rejected, failed to enable media [ 662.613220][T12918] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 662.757939][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 662.792134][T12918] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 662.897530][ T4401] device hsr_slave_0 left promiscuous mode [ 662.911439][ T4401] device hsr_slave_1 left promiscuous mode [ 662.937630][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.953150][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.978167][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.002474][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.047798][ T4401] device bridge_slave_1 left promiscuous mode [ 663.054172][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.085976][ T4401] device bridge_slave_0 left promiscuous mode [ 663.107952][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.155153][T13120] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2529'. [ 663.212502][ T4401] device veth1_macvtap left promiscuous mode [ 663.243507][ T4401] device veth0_macvtap left promiscuous mode [ 663.264950][ T4401] device veth1_vlan left promiscuous mode [ 663.281154][ T4401] device veth0_vlan left promiscuous mode [ 664.619027][ T4401] team0 (unregistering): Port device team_slave_1 removed [ 664.676250][ T4401] team0 (unregistering): Port device team_slave_0 removed [ 664.734807][ T4401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.792254][ T4401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.226196][ T4401] bond0 (unregistering): Released all slaves [ 665.370096][T13144] tipc: Enabling of bearer rejected, failed to enable media [ 665.550485][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2531'. [ 665.573970][T13154] fuse: Bad value for 'fd' [ 665.719815][T13156] loop3: detected capacity change from 0 to 32768 [ 665.745682][T12918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.754534][T13156] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 665.843107][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 665.919973][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 666.286590][T12918] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.462847][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 666.472633][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 666.495210][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.502373][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.565473][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 666.635313][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.676061][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.683299][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.742710][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 666.784301][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 666.827920][T13160] tipc: Enabling of bearer rejected, failed to enable media [ 666.867242][T12330] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 666.890869][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 666.937036][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 666.961602][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 666.999520][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 667.040476][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 667.079982][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 667.098168][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.118238][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 667.168012][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.193725][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 667.240020][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.280606][T12918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 667.579313][T13196] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2542'. [ 667.860928][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2544'. [ 667.894750][T13206] netlink: 'syz.3.2545': attribute type 1 has an invalid length. [ 667.933445][T13206] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 667.970583][T13206] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 668.063097][T13209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2545'. [ 668.339127][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.350525][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.372838][T13209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2545'. [ 668.406713][T13209] 8021q: adding VLAN 0 to HW filter on device bond2 [ 668.424929][T12918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.503422][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 668.538333][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.576882][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 668.586485][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 668.639533][T12918] device veth0_vlan entered promiscuous mode [ 668.658299][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 668.678165][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 668.701595][T12918] device veth1_vlan entered promiscuous mode [ 668.728116][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2552'. [ 668.904781][T13224] device bridge_slave_1 left promiscuous mode [ 668.924665][T13224] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.943018][T13236] fuse: Invalid rootmode [ 669.128931][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 669.152257][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 669.204948][T12918] device veth0_macvtap entered promiscuous mode [ 669.250602][T12918] device veth1_macvtap entered promiscuous mode [ 669.333226][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2557'. [ 669.356299][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.403664][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.432997][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.474621][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.497257][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.519666][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.550297][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.572274][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.586504][T12918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.609722][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 669.629000][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 669.868578][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 669.897718][ T4429] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 669.919195][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 669.953528][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.977905][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.009779][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.024448][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.053284][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.092082][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.102960][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.107670][ T4429] usb 4-1: Using ep0 maxpacket: 32 [ 670.118982][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.121373][ T4429] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 670.134048][T12918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.139122][ T4429] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.159714][ T4429] usb 4-1: config 0 has no interface number 0 [ 670.166116][ T4429] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 670.179025][ T4429] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 670.184803][T12918] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.204232][ T4429] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 670.216611][T12918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.222665][ T4429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.233004][T12918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.234133][ T4429] usb 4-1: Product: syz [ 670.252408][T12918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.253412][ T4429] usb 4-1: Manufacturer: syz [ 670.266931][ T4429] usb 4-1: SerialNumber: syz [ 670.287380][ T4429] usb 4-1: config 0 descriptor?? [ 670.295114][ T4429] smsc95xx v2.0.0 [ 670.300767][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 670.310422][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 670.319178][ T4429] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 670.331261][T13263] netlink: 'syz.1.2563': attribute type 1 has an invalid length. [ 670.339703][ T4429] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 670.384846][T13265] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 670.417120][T13265] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 670.456330][T13268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2563'. [ 670.476096][T13271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2563'. [ 670.496265][T13271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 670.508716][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.564967][T13270] device syzkaller0 entered promiscuous mode [ 670.718131][T13279] fuse: Bad value for 'fd' [ 672.152322][T13306] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2572'. [ 672.489961][ T4876] usb 4-1: USB disconnect, device number 31 [ 675.389037][T13327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2575'. [ 675.537788][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.545653][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.604264][T13082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.604874][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 675.624905][T13361] fuse: Bad value for 'fd' [ 675.655467][T13082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.685054][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 675.996049][T13379] device team_slave_0 entered promiscuous mode [ 676.003087][T13379] device team_slave_1 entered promiscuous mode [ 676.054372][T13379] device vlan0 entered promiscuous mode [ 676.065997][T13379] device team0 entered promiscuous mode [ 676.200723][T13385] netlink: 'syz.2.2587': attribute type 1 has an invalid length. [ 676.353787][T13390] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 676.446289][T13390] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 676.469863][T13395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2587'. [ 676.562448][T13385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2587'. [ 676.652849][T13385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 677.272555][T13427] device syzkaller0 entered promiscuous mode [ 680.674998][T13447] netlink: 'syz.3.2607': attribute type 1 has an invalid length. [ 680.758875][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2607'. [ 680.843808][T13456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2607'. [ 681.143780][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2615'. [ 681.730701][T13499] device syzkaller0 entered promiscuous mode [ 685.869667][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.941647][T13548] fuse: Unknown parameter 'use00000000000000000000' [ 687.001454][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.012012][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.021149][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.031044][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.043207][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 687.050726][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.306492][ T4296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.531966][ T4296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.639314][T13563] device syzkaller0 entered promiscuous mode [ 687.710663][T13568] loop3: detected capacity change from 0 to 2048 [ 687.774718][T13568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 687.802303][T13568] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.292307][T13576] vivid-002: ================= START STATUS ================= [ 688.300285][T13576] vivid-002: Radio HW Seek Mode: Bounded [ 688.306080][T13576] vivid-002: Radio Programmable HW Seek: false [ 688.312441][T13576] vivid-002: RDS Rx I/O Mode: Block I/O [ 688.318186][T13576] vivid-002: Generate RBDS Instead of RDS: false [ 688.324674][T13576] vivid-002: RDS Reception: true [ 688.329770][T13576] vivid-002: RDS Program Type: 0 inactive [ 688.335653][T13576] vivid-002: RDS PS Name: inactive [ 688.341087][T13576] vivid-002: RDS Radio Text: inactive [ 688.346712][T13576] vivid-002: RDS Traffic Announcement: false inactive [ 688.353908][T13576] vivid-002: RDS Traffic Program: false inactive [ 688.360505][T13576] vivid-002: RDS Music: false inactive [ 688.366221][T13576] vivid-002: ================== END STATUS ================== [ 688.672786][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 689.078254][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 689.534307][T13585] fuse: Unknown parameter 'use00000000000000000000' [ 691.157476][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 691.658189][ T4296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.828786][ T4296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.933123][T13602] netlink: 'syz.1.2653': attribute type 3 has an invalid length. [ 692.129181][T13602] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.136392][T13602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.144115][T13602] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.151467][T13602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.183097][T13602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 692.202999][T13602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 692.223289][T13602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.288063][T13549] chnl_net:caif_netlink_parms(): no params data found [ 692.700450][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 692.917128][T13549] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.923051][T13627] loop6: detected capacity change from 0 to 2048 [ 692.939907][T13549] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.948822][T13549] device bridge_slave_0 entered promiscuous mode [ 693.043923][T13627] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 693.060088][T13627] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.115603][T13549] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.215740][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.227511][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 693.265949][T13549] device bridge_slave_1 entered promiscuous mode [ 693.357224][T13632] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 693.541229][T13638] vivid-003: ================= START STATUS ================= [ 693.549302][T13638] vivid-003: Radio HW Seek Mode: Bounded [ 693.555094][T13638] vivid-003: Radio Programmable HW Seek: false [ 693.561436][T13638] vivid-003: RDS Rx I/O Mode: Block I/O [ 693.567115][T13638] vivid-003: Generate RBDS Instead of RDS: false [ 693.573639][T13638] vivid-003: RDS Reception: true [ 693.579083][T13638] vivid-003: RDS Program Type: 0 inactive [ 693.584959][T13638] vivid-003: RDS PS Name: inactive [ 693.590525][T13638] vivid-003: RDS Radio Text: inactive [ 693.596271][T13638] vivid-003: RDS Traffic Announcement: false inactive [ 693.603226][T13638] vivid-003: RDS Traffic Program: false inactive [ 693.609719][T13638] vivid-003: RDS Music: false inactive [ 693.615346][T13638] vivid-003: ================== END STATUS ================== [ 693.745629][T13549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.901555][ T8410] EXT4-fs (loop6): unmounting filesystem. [ 693.964574][T13549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.151309][T13549] team0: Port device team_slave_0 added [ 694.185191][T13549] team0: Port device team_slave_1 added [ 694.311357][T13549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.326307][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.414589][T13549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.569777][T13655] device syzkaller0 entered promiscuous mode [ 694.742044][T13549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.767335][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.817458][T13549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.135832][T13676] loop0: detected capacity change from 0 to 2048 [ 695.288454][T13676] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 695.297549][T13676] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.308569][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 695.850249][T13692] vivid-001: ================= START STATUS ================= [ 695.858037][T13692] vivid-001: Radio HW Seek Mode: Bounded [ 695.863837][T13692] vivid-001: Radio Programmable HW Seek: false [ 695.870238][T13692] vivid-001: RDS Rx I/O Mode: Block I/O [ 695.875968][T13692] vivid-001: Generate RBDS Instead of RDS: false [ 695.882474][T13692] vivid-001: RDS Reception: true [ 695.887577][T13692] vivid-001: RDS Program Type: 0 inactive [ 695.893455][T13692] vivid-001: RDS PS Name: inactive [ 695.898861][T13692] vivid-001: RDS Radio Text: inactive [ 695.904506][T13692] vivid-001: RDS Traffic Announcement: false inactive [ 695.911555][T13692] vivid-001: RDS Traffic Program: false inactive [ 695.918077][T13692] vivid-001: RDS Music: false inactive [ 695.923709][T13692] vivid-001: ================== END STATUS ================== [ 696.399202][T12918] EXT4-fs (loop0): unmounting filesystem. [ 696.894387][ T9228] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 697.090886][ T9228] usb 1-1: Using ep0 maxpacket: 32 [ 697.101898][ T9228] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 697.117484][ T9228] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.128073][ T9228] usb 1-1: config 0 has no interface number 0 [ 697.134221][ T9228] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.157078][ T9228] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 697.167379][ T9228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.175476][ T9228] usb 1-1: Product: syz [ 697.180202][ T9228] usb 1-1: Manufacturer: syz [ 697.184839][ T9228] usb 1-1: SerialNumber: syz [ 697.217724][ T9228] usb 1-1: config 0 descriptor?? [ 697.243243][ T9228] smsc95xx v2.0.0 [ 697.246923][ T9228] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 697.257519][ T9228] smsc95xx: probe of 1-1:0.67 failed with error -22 [ 699.652371][ T3652] usb 1-1: USB disconnect, device number 4 [ 700.338691][T13549] device hsr_slave_0 entered promiscuous mode [ 700.386648][T13549] device hsr_slave_1 entered promiscuous mode [ 700.416721][T13549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.467398][T13549] Cannot create hsr debugfs directory [ 700.495909][T13728] loop0: detected capacity change from 0 to 2048 [ 700.642999][T13730] device team_slave_0 entered promiscuous mode [ 700.649399][T13730] device team_slave_1 entered promiscuous mode [ 700.657166][T13730] device vlan0 entered promiscuous mode [ 700.663891][T13730] device team0 entered promiscuous mode [ 700.712634][T13728] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 700.722335][T13728] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.520116][T12918] EXT4-fs (loop0): unmounting filesystem. [ 701.527129][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.573673][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.638860][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.656627][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.715861][ T4296] device bridge_slave_1 left promiscuous mode [ 701.737556][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.759269][ T4296] device bridge_slave_0 left promiscuous mode [ 701.780770][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.926941][ T4296] device veth1_macvtap left promiscuous mode [ 701.967646][ T4296] device veth0_macvtap left promiscuous mode [ 703.181469][ T4296] bond2 (unregistering): Released all slaves [ 703.214679][ T4296] bond1 (unregistering): (slave bridge1): Releasing active interface [ 703.463847][ T4296] bond1 (unregistering): Released all slaves [ 703.795751][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 703.962290][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 704.023751][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 704.083145][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.144415][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.586360][ T4296] bond0 (unregistering): Released all slaves [ 704.716722][T13767] device syzkaller0 entered promiscuous mode [ 705.733188][T13823] loop3: detected capacity change from 0 to 2048 [ 705.874212][T13823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 705.911545][T13823] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.307394][T13840] vivid-002: ================= START STATUS ================= [ 706.315272][T13840] vivid-002: Radio HW Seek Mode: Bounded [ 706.321184][T13840] vivid-002: Radio Programmable HW Seek: false [ 706.327499][T13840] vivid-002: RDS Rx I/O Mode: Block I/O [ 706.333171][T13840] vivid-002: Generate RBDS Instead of RDS: false [ 706.340093][T13840] vivid-002: RDS Reception: true [ 706.345182][T13840] vivid-002: RDS Program Type: 0 inactive [ 706.351390][T13840] vivid-002: RDS PS Name: inactive [ 706.356744][T13840] vivid-002: RDS Radio Text: inactive [ 706.362502][T13840] vivid-002: RDS Traffic Announcement: false inactive [ 706.369465][T13840] vivid-002: RDS Traffic Program: false inactive [ 706.376062][T13840] vivid-002: RDS Music: false inactive [ 706.381897][T13840] vivid-002: ================== END STATUS ================== [ 706.653812][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 706.718953][T13845] device syzkaller0 entered promiscuous mode [ 707.222278][T13549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 707.274840][T13549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 707.309241][T13549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 707.327617][T13549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 707.370739][T13864] device pim6reg1 entered promiscuous mode [ 707.564426][T13549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.633514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 707.655206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 707.685377][T13549] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.730073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 707.754875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 707.770344][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.777615][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.790955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 707.808782][T13875] netlink: 'syz.3.2712': attribute type 3 has an invalid length. [ 707.820647][T13876] tipc: Started in network mode [ 707.832788][T13876] tipc: Node identity a68d9628c9d2, cluster identity 4711 [ 707.858269][T13876] tipc: Enabled bearer , priority 0 [ 707.879389][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 707.892276][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 707.922130][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.929468][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.967806][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 708.003370][T13872] tipc: Disabling bearer [ 708.135321][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 708.247030][T13549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 708.341662][T13549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.670812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 708.828303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 708.889683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 708.966665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 709.036686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 709.078389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 709.105451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 709.162116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 709.224807][T13898] device syzkaller0 entered promiscuous mode [ 709.277629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 709.296391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 710.674116][T13931] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2725'. [ 710.674614][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 710.722908][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 710.765134][T13549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.854410][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 710.888371][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 710.962877][T13937] loop3: detected capacity change from 0 to 2048 [ 710.981068][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 711.000675][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 711.034483][T13549] device veth0_vlan entered promiscuous mode [ 711.051710][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 711.083526][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 711.126060][T13937] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 711.132107][T13549] device veth1_vlan entered promiscuous mode [ 711.169852][T13937] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.216357][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 711.225131][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 711.234703][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 711.244232][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 711.259021][T13549] device veth0_macvtap entered promiscuous mode [ 711.342863][T13549] device veth1_macvtap entered promiscuous mode [ 711.390314][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 711.421122][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 711.749764][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.951593][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.178020][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.252202][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.282768][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.303607][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.388192][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.455591][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.506963][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 712.509881][T13549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.628757][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 712.643800][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 712.715062][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.767410][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.787634][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.804216][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.821662][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.841693][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.862254][T13549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.875060][T13549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.894280][T13549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.926250][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 712.950713][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 712.999010][T13549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.033294][T13549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.087634][T13549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.113248][T13549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.362361][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.393781][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.440226][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 713.488766][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.502638][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.573395][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 713.600442][T14009] device vlan0 entered promiscuous mode [ 713.820465][T14015] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 714.039161][T14020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2627'. [ 714.172716][T14026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2627'. [ 714.252299][T14031] device syzkaller0 entered promiscuous mode [ 714.644305][T14039] loop2: detected capacity change from 0 to 32768 [ 714.680924][T14039] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 715.578640][T14047] overlayfs: failed to clone lowerpath [ 715.606711][T14047] overlayfs: failed to clone lowerpath [ 716.149241][T14058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2746'. [ 716.186164][T13696] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 716.835986][T14070] device syzkaller0 entered promiscuous mode [ 716.922253][T14073] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2752'. [ 717.686096][T14087] fuse: Unknown parameter '0x0000000000000003' [ 717.735422][T14089] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2756'. [ 717.957064][T14094] netlink: 'syz.3.2757': attribute type 3 has an invalid length. [ 717.960057][T14068] loop0: detected capacity change from 0 to 32768 [ 718.027221][T14068] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.2750 (14068) [ 718.089705][T14068] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 718.177496][T14068] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 718.186278][T14068] BTRFS info (device loop0): enabling disk space caching [ 718.294359][T14068] BTRFS info (device loop0): force clearing of disk cache [ 718.333391][T14068] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 718.369171][T14068] BTRFS info (device loop0): use zstd compression, level 3 [ 718.401394][T14068] BTRFS info (device loop0): disk space caching is enabled [ 719.146950][T14068] BTRFS info (device loop0): enabling ssd optimizations [ 719.356587][T14068] BTRFS info (device loop0): rebuilding free space tree [ 719.416887][T14068] BTRFS info (device loop0): disabling free space tree [ 719.447438][T14068] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 719.498435][T14068] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 719.591470][T14142] loop3: detected capacity change from 0 to 2048 [ 719.715356][T14142] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 719.737676][T14142] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.807727][ T127] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 719.819087][T12918] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 720.067416][ T127] usb 7-1: Using ep0 maxpacket: 8 [ 720.077462][ T127] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 720.157679][T14154] vivid-002: ================= START STATUS ================= [ 720.165560][T14154] vivid-002: Radio HW Seek Mode: Bounded [ 720.171431][T14154] vivid-002: Radio Programmable HW Seek: false [ 720.177800][T14154] vivid-002: RDS Rx I/O Mode: Block I/O [ 720.183477][T14154] vivid-002: Generate RBDS Instead of RDS: false [ 720.189994][T14154] vivid-002: RDS Reception: true [ 720.195035][T14154] vivid-002: RDS Program Type: 0 inactive [ 720.201500][T14154] vivid-002: RDS PS Name: inactive [ 720.206855][T14154] vivid-002: RDS Radio Text: inactive [ 720.212718][T14154] vivid-002: RDS Traffic Announcement: false inactive [ 720.219692][T14154] vivid-002: RDS Traffic Program: false inactive [ 720.226190][T14154] vivid-002: RDS Music: false inactive [ 720.231852][T14154] vivid-002: ================== END STATUS ================== [ 720.691666][ T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.703415][ T127] usb 7-1: Product: syz [ 720.707679][ T127] usb 7-1: Manufacturer: syz [ 720.712473][ T127] usb 7-1: SerialNumber: syz [ 720.728696][ T127] usb 7-1: config 0 descriptor?? [ 720.948366][ T127] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 720.974801][T14158] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 720.975159][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 721.083898][T14160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2768'. [ 721.203206][T14161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2768'. [ 721.254707][T14171] tipc: Enabled bearer , priority 0 [ 721.286090][T14167] tipc: Disabling bearer [ 721.327712][T14176] netlink: 'syz.1.2771': attribute type 3 has an invalid length. [ 721.668110][T14184] device syzkaller1 entered promiscuous mode [ 722.179259][ T127] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 722.206707][ T127] usb 7-1: USB disconnect, device number 16 [ 722.593530][T14212] device syzkaller0 entered promiscuous mode [ 723.223344][T14236] netlink: 'syz.2.2785': attribute type 3 has an invalid length. [ 723.295295][T14234] tipc: Enabled bearer , priority 0 [ 723.359939][T14233] tipc: Disabling bearer [ 723.529093][T14244] loop6: detected capacity change from 0 to 2048 [ 723.636695][T14252] netlink: 'syz.3.2789': attribute type 1 has an invalid length. [ 723.658791][T14244] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 723.667838][T14244] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.896884][T14252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2789'. [ 724.374710][T14252] bond3: (slave bridge4): making interface the new active one [ 724.444236][T14252] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 724.558197][T14258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2789'. [ 724.646184][T14258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 724.660033][ T8410] EXT4-fs (loop6): unmounting filesystem. [ 725.056319][T14279] loop6: detected capacity change from 0 to 2048 [ 725.447016][T14279] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 725.457087][T14279] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.534915][T14283] device syzkaller0 entered promiscuous mode [ 726.347188][T14297] netlink: 'syz.0.2798': attribute type 3 has an invalid length. [ 726.561823][ T8410] EXT4-fs (loop6): unmounting filesystem. [ 726.651415][T14302] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2799'. [ 727.519757][T14307] device syzkaller1 entered promiscuous mode [ 727.560579][T14310] device team_slave_0 entered promiscuous mode [ 727.566865][T14310] device team_slave_1 entered promiscuous mode [ 727.592386][T14310] device vlan0 entered promiscuous mode [ 727.603464][T14310] device team0 entered promiscuous mode [ 727.746218][T14316] device syzkaller0 entered promiscuous mode [ 727.811049][T14163] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 727.822737][T14321] netlink: 'syz.1.2806': attribute type 1 has an invalid length. [ 727.854453][T14318] device syzkaller0 entered promiscuous mode [ 727.880798][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2806'. [ 727.931690][T14321] bond3: (slave bridge3): making interface the new active one [ 727.948222][T14321] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 728.007404][T14163] usb 3-1: Using ep0 maxpacket: 32 [ 728.030223][T14323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2806'. [ 728.030971][T14163] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 728.042134][T14323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 728.086096][T14163] usb 3-1: config 0 has no interface number 0 [ 728.100329][T14163] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 728.134496][T14163] usb 3-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 728.180288][T14163] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 728.226153][T14163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.256745][T14163] usb 3-1: Product: syz [ 728.264253][T14163] usb 3-1: Manufacturer: syz [ 728.278371][T14163] usb 3-1: SerialNumber: syz [ 728.284796][T14331] loop0: detected capacity change from 0 to 2048 [ 728.298709][T14163] usb 3-1: config 0 descriptor?? [ 728.332974][T14163] smsc95xx v2.0.0 [ 728.336692][T14163] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 728.397441][T14163] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 728.423235][T14331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 728.435654][T14331] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.659220][T14340] netlink: 'syz.6.2813': attribute type 3 has an invalid length. [ 730.360733][ T26] audit: type=1800 audit(2000000353.910:43): pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2810" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 730.660148][T12918] EXT4-fs (loop0): unmounting filesystem. [ 730.738266][ T127] usb 3-1: USB disconnect, device number 3 [ 730.933214][T14329] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 731.360012][T14359] device vlan0 entered promiscuous mode [ 731.679940][T14369] device syzkaller1 entered promiscuous mode [ 732.041871][T14375] loop6: detected capacity change from 0 to 32768 [ 732.069785][T14375] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 732.080416][T14375] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 732.089183][T14375] BTRFS info (device loop6): using free space tree [ 732.348444][T14387] tipc: Enabling of bearer rejected, failed to enable media [ 732.413876][T14375] BTRFS info (device loop6): enabling ssd optimizations [ 733.179740][ T8410] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 733.310160][T14405] loop0: detected capacity change from 0 to 2048 [ 733.453876][T14405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 733.487992][T14405] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.268898][T12918] EXT4-fs (loop0): unmounting filesystem. [ 735.313992][T14429] netlink: 'syz.1.2832': attribute type 3 has an invalid length. [ 735.555163][T14437] device syzkaller0 entered promiscuous mode [ 735.757578][ T4386] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 735.977486][ T4386] usb 4-1: Using ep0 maxpacket: 8 [ 735.999974][ T4386] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 736.375676][ T4386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.385552][ T4386] usb 4-1: Product: syz [ 736.391385][ T4386] usb 4-1: Manufacturer: syz [ 736.396035][ T4386] usb 4-1: SerialNumber: syz [ 736.403136][ T4386] usb 4-1: config 0 descriptor?? [ 736.531662][T14446] tipc: Enabling of bearer rejected, failed to enable media [ 736.548703][T14447] fuse: Unknown parameter 'fd0x0000000000000003' [ 736.624781][ T4386] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 736.762756][T14449] loop2: detected capacity change from 0 to 4096 [ 737.019341][T14449] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 737.584285][T14464] device syzkaller0 entered promiscuous mode [ 737.637467][ T4360] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 737.816632][T14467] tipc: Enabled bearer , priority 0 [ 737.831301][ T4360] usb 7-1: Using ep0 maxpacket: 32 [ 737.838988][ T4360] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 737.861209][T14467] tipc: Resetting bearer [ 737.867148][ T4360] usb 7-1: config 0 has no interface number 0 [ 737.886876][ T4360] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 737.897640][T14466] tipc: Disabling bearer [ 737.916852][ T4360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.947466][ T4360] usb 7-1: Product: syz [ 737.951697][ T4360] usb 7-1: Manufacturer: syz [ 737.956323][ T4360] usb 7-1: SerialNumber: syz [ 737.982490][ T4360] usb 7-1: config 0 descriptor?? [ 737.996926][ T4360] smsc95xx v2.0.0 [ 738.010448][T14473] netlink: 'syz.2.2845': attribute type 3 has an invalid length. [ 738.256511][T14476] device syzkaller0 entered promiscuous mode [ 738.317418][ T4386] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 738.354465][ T4386] usb 4-1: USB disconnect, device number 32 [ 738.407699][T14482] device syzkaller1 entered promiscuous mode [ 738.423008][ T4360] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 738.436308][ T4360] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 738.782786][T14487] loop0: detected capacity change from 0 to 32768 [ 738.798350][ T4360] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 738.810287][ T4360] smsc95xx: probe of 7-1:0.67 failed with error -32 [ 738.825165][T14487] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2852 (14487) [ 738.862866][T14487] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 738.873119][T14487] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 738.881795][T14487] BTRFS info (device loop0): using free space tree [ 739.002484][T14487] BTRFS info (device loop0): enabling ssd optimizations [ 739.850061][T14516] device syzkaller0 entered promiscuous mode [ 739.930307][T12918] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 740.039580][ T32] usb 7-1: USB disconnect, device number 17 [ 740.249318][T14523] netlink: 'syz.2.2859': attribute type 3 has an invalid length. [ 740.354658][T14462] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (14462) [ 740.689960][T14534] device team_slave_0 entered promiscuous mode [ 740.696250][T14534] device team_slave_1 entered promiscuous mode [ 740.716656][T14534] device vlan2 entered promiscuous mode [ 740.733203][T14534] device team0 entered promiscuous mode [ 740.733682][T14518] loop3: detected capacity change from 0 to 32768 [ 740.743792][T14533] loop6: detected capacity change from 0 to 2048 [ 740.925825][T14533] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 740.970100][T14533] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.994982][T14518] JBD2: Ignoring recovery information on journal [ 741.392922][T14540] vivid-003: ================= START STATUS ================= [ 741.400929][T14540] vivid-003: Radio HW Seek Mode: Bounded [ 741.406807][T14540] vivid-003: Radio Programmable HW Seek: false [ 741.413266][T14540] vivid-003: RDS Rx I/O Mode: Block I/O [ 741.418987][T14540] vivid-003: Generate RBDS Instead of RDS: false [ 741.425498][T14540] vivid-003: RDS Reception: true [ 741.430700][T14540] vivid-003: RDS Program Type: 0 inactive [ 741.436966][T14540] vivid-003: RDS PS Name: inactive [ 741.442365][T14540] vivid-003: RDS Radio Text: inactive [ 741.448113][T14540] vivid-003: RDS Traffic Announcement: false inactive [ 741.455049][T14540] vivid-003: RDS Traffic Program: false inactive [ 741.461706][T14540] vivid-003: RDS Music: false inactive [ 741.467363][T14540] vivid-003: ================== END STATUS ================== [ 741.572744][T14518] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 741.754488][T14549] fuse: Bad value for 'fd' [ 741.794290][ T8410] EXT4-fs (loop6): unmounting filesystem. [ 742.201886][T14556] loop6: detected capacity change from 0 to 32768 [ 742.210055][T14556] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 742.266821][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 742.337663][T14205] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 742.957583][T14560] netlink: 'syz.2.2871': attribute type 3 has an invalid length. [ 743.178282][T14562] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2873'. [ 744.965793][ T4427] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 745.290930][T14600] loop3: detected capacity change from 0 to 32768 [ 745.303984][T14600] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 745.417558][ T4427] usb 1-1: Using ep0 maxpacket: 32 [ 745.435634][ T4427] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 745.627099][ T4427] usb 1-1: config 0 has no interface number 0 [ 745.738935][T14606] overlayfs: failed to clone lowerpath [ 745.878136][T14607] overlayfs: failed to clone lowerpath [ 746.241943][ T4427] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 746.258059][ T4427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.541048][ T4427] usb 1-1: Product: syz [ 746.606045][ T4427] usb 1-1: Manufacturer: syz [ 746.671837][ T4427] usb 1-1: SerialNumber: syz [ 746.816931][ T4427] usb 1-1: config 0 descriptor?? [ 746.877628][ T4427] smsc95xx v2.0.0 [ 747.027734][ T4427] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 747.045680][ T4427] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 747.088488][ T4427] usb 1-1: USB disconnect, device number 5 [ 747.146502][T14616] loop2: detected capacity change from 0 to 1024 [ 747.175453][T14616] hfsplus: unable to parse mount options [ 747.263574][T14205] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 747.310344][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.439410][T14616] loop2: detected capacity change from 0 to 32768 [ 747.518136][T14616] XFS (loop2): Mounting V5 Filesystem [ 747.584211][T14616] XFS (loop2): Ending clean mount [ 747.596438][T14616] XFS (loop2): Quotacheck needed: Please wait. [ 747.650726][T14627] loop3: detected capacity change from 0 to 2048 [ 747.734215][T14616] XFS (loop2): Quotacheck: Done. [ 747.890105][T14627] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 748.344056][T14627] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 748.363915][T13549] XFS (loop2): Unmounting Filesystem [ 748.679540][T14648] vivid-002: ================= START STATUS ================= [ 748.687883][T14648] vivid-002: Radio HW Seek Mode: Bounded [ 748.693571][T14648] vivid-002: Radio Programmable HW Seek: false [ 748.699874][T14648] vivid-002: RDS Rx I/O Mode: Block I/O [ 748.705462][T14648] vivid-002: Generate RBDS Instead of RDS: false [ 748.711936][T14648] vivid-002: RDS Reception: true [ 748.716918][T14648] vivid-002: RDS Program Type: 0 inactive [ 748.722737][T14648] vivid-002: RDS PS Name: inactive [ 748.728068][T14648] vivid-002: RDS Radio Text: inactive [ 748.733602][T14648] vivid-002: RDS Traffic Announcement: false inactive [ 748.740918][T14648] vivid-002: RDS Traffic Program: false inactive [ 748.747524][T14648] vivid-002: RDS Music: false inactive [ 748.753052][T14648] vivid-002: ================== END STATUS ================== [ 748.858897][T14647] device syzkaller0 entered promiscuous mode [ 748.981892][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 750.359420][T14668] tipc: Enabled bearer , priority 0 [ 750.426444][T14668] device syzkaller0 entered promiscuous mode [ 750.438209][T14668] tipc: Resetting bearer [ 750.525485][T14666] tipc: Resetting bearer [ 750.607540][ T9228] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 750.807737][ T9228] usb 1-1: Using ep0 maxpacket: 32 [ 750.815111][ T9228] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 750.842470][ T9228] usb 1-1: config 0 has no interface number 0 [ 750.853565][ T9228] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 750.874359][ T9228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.894178][ T9228] usb 1-1: Product: syz [ 750.903176][ T9228] usb 1-1: Manufacturer: syz [ 750.908172][ T9228] usb 1-1: SerialNumber: syz [ 750.928492][ T9228] usb 1-1: config 0 descriptor?? [ 750.940691][ T9228] smsc95xx v2.0.0 [ 751.352439][ T9228] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 751.383956][ T9228] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 751.596616][ T9228] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 751.613486][ T9228] smsc95xx: probe of 1-1:0.67 failed with error -32 [ 753.356073][ T4360] usb 1-1: USB disconnect, device number 6 [ 753.454227][T14694] loop0: detected capacity change from 0 to 2048 [ 753.537883][T14694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 753.546468][T14694] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.948840][T14699] vivid-001: ================= START STATUS ================= [ 753.956618][T14699] vivid-001: Radio HW Seek Mode: Bounded [ 753.962505][T14699] vivid-001: Radio Programmable HW Seek: false [ 753.968831][T14699] vivid-001: RDS Rx I/O Mode: Block I/O [ 753.974517][T14699] vivid-001: Generate RBDS Instead of RDS: false [ 753.981078][T14699] vivid-001: RDS Reception: true [ 753.986307][T14699] vivid-001: RDS Program Type: 0 inactive [ 753.992965][T14699] vivid-001: RDS PS Name: inactive [ 753.998670][T14699] vivid-001: RDS Radio Text: inactive [ 754.004322][T14699] vivid-001: RDS Traffic Announcement: false inactive [ 754.011290][T14699] vivid-001: RDS Traffic Program: false inactive [ 754.017817][T14699] vivid-001: RDS Music: false inactive [ 754.023450][T14699] vivid-001: ================== END STATUS ================== [ 754.370318][T12918] EXT4-fs (loop0): unmounting filesystem. [ 754.452376][T14666] tipc: Disabling bearer [ 754.467763][ T32] tipc: Node number set to 2793684795 [ 754.477406][T14692] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2908'. [ 754.518784][T14701] tipc: Enabled bearer , priority 0 [ 754.560610][T14701] tipc: Resetting bearer [ 754.593087][T14700] tipc: Disabling bearer [ 754.777712][T14709] netlink: 'syz.2.2914': attribute type 1 has an invalid length. [ 754.889860][T14709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2914'. [ 754.956405][T14713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2914'. [ 755.147333][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 755.347364][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 755.354794][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.365397][ T32] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 755.380018][ T32] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 755.399661][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.419126][ T32] usb 1-1: Product: syz [ 755.425060][ T32] usb 1-1: Manufacturer: syz [ 755.431824][ T32] usb 1-1: SerialNumber: syz [ 755.441597][ T32] usb 1-1: config 0 descriptor?? [ 755.477385][ T4360] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 755.687364][ T4360] usb 3-1: Using ep0 maxpacket: 32 [ 755.694563][ T4360] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 755.709065][ T4360] usb 3-1: config 0 has no interface number 0 [ 755.721099][ T4360] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 755.748774][ T4360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.757514][ T4360] usb 3-1: Product: syz [ 755.761722][ T4360] usb 3-1: Manufacturer: syz [ 755.766348][ T4360] usb 3-1: SerialNumber: syz [ 755.781590][ T4360] usb 3-1: config 0 descriptor?? [ 755.791823][ T4360] smsc95xx v2.0.0 [ 756.203693][ T4360] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 756.225180][ T4360] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 756.375605][T14746] loop6: detected capacity change from 0 to 2048 [ 756.433559][T14746] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 756.446611][ T4360] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 756.467541][T14746] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.484204][ T4360] smsc95xx: probe of 3-1:0.67 failed with error -32 [ 756.534672][ T8410] EXT4-fs (loop6): unmounting filesystem. [ 756.827208][T14756] netlink: 'syz.6.2929': attribute type 1 has an invalid length. [ 756.886890][T14756] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2929'. [ 756.945097][T14760] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2929'. [ 757.285652][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2932'. [ 758.316959][ T4427] usb 1-1: USB disconnect, device number 7 [ 758.388344][ T4354] usb 3-1: USB disconnect, device number 4 [ 758.568661][T14796] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2940'. [ 758.995114][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 759.036433][T14811] device syzkaller0 entered promiscuous mode [ 759.396265][T14816] device vlan2 entered promiscuous mode [ 759.581518][T14801] loop0: detected capacity change from 0 to 32768 [ 759.632505][T14801] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.2942 (14801) [ 759.729304][T14801] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 759.755748][T14801] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 759.784987][T14801] BTRFS info (device loop0): enabling disk space caching [ 759.808593][T14801] BTRFS info (device loop0): force clearing of disk cache [ 759.855130][T14801] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 759.924731][T14801] BTRFS info (device loop0): use zstd compression, level 3 [ 759.987775][T14801] BTRFS info (device loop0): disk space caching is enabled [ 760.015266][T14803] loop3: detected capacity change from 0 to 32768 [ 760.443555][T14803] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 760.452619][T14803] gfs2: fsid=syz:syz: unknown hostdata (0aUq|D) [ 760.746910][T14801] BTRFS info (device loop0): enabling ssd optimizations [ 760.759823][T14801] BTRFS info (device loop0): rebuilding free space tree [ 760.789165][T14801] BTRFS info (device loop0): disabling free space tree [ 760.810134][T14801] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 760.878006][T14801] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 760.921137][T14854] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2955'. [ 761.164543][T12918] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 761.607723][T14870] device syzkaller1 entered promiscuous mode [ 761.724030][T14462] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop0 scanned by udevd (14462) [ 762.180188][T14844] loop6: detected capacity change from 0 to 32768 [ 762.256774][T14844] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 762.274724][T14844] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 762.382936][T14881] loop2: detected capacity change from 0 to 4096 [ 763.058180][T14844] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 763.107487][ T4429] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 763.121282][ T4429] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 763.298520][ T4429] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 177ms [ 763.333272][ T4429] gfs2: fsid=syz:syz.0: jid=0: Done [ 763.349014][T14844] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 763.570454][T13549] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 763.602796][T13549] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 765.158361][T14844] gfs2: fsid=syz:syz.0: found 1 quota changes [ 765.312437][ T8410] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 765.333592][ T8410] CPU: 0 PID: 8410 Comm: syz-executor Not tainted syzkaller #0 [ 765.341209][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 765.351396][ T8410] Call Trace: [ 765.354723][ T8410] [ 765.357692][ T8410] dump_stack_lvl+0x188/0x24e [ 765.362462][ T8410] ? show_regs_print_info+0x12/0x12 [ 765.367800][ T8410] ? load_image+0x400/0x400 [ 765.372353][ T8410] ? do_raw_spin_unlock+0x11d/0x230 [ 765.377681][ T8410] gfs2_assert_warn_i+0x18f/0x2c0 [ 765.382750][ T8410] gfs2_quota_cleanup+0x4b4/0x6a0 [ 765.387912][ T8410] gfs2_make_fs_ro+0x3e0/0x4c0 [ 765.392724][ T8410] ? gfs2_put_super+0x1d7/0x8c0 [ 765.397623][ T8410] ? gfs2_dinode_out+0xb00/0xb00 [ 765.402608][ T8410] ? __lock_acquire+0x7d10/0x7d10 [ 765.407683][ T8410] ? __rwlock_init+0x140/0x140 [ 765.412497][ T8410] ? do_raw_spin_unlock+0x11d/0x230 [ 765.417739][ T8410] gfs2_put_super+0x220/0x8c0 [ 765.422562][ T8410] ? gfs2_evict_inode+0x11d0/0x11d0 [ 765.427812][ T8410] generic_shutdown_super+0x130/0x340 [ 765.433228][ T8410] kill_block_super+0x7c/0xe0 [ 765.437947][ T8410] deactivate_locked_super+0x93/0xf0 [ 765.443274][ T8410] cleanup_mnt+0x42c/0x4b0 [ 765.447825][ T8410] ? lockdep_hardirqs_on+0x94/0x140 [ 765.453066][ T8410] task_work_run+0x1d0/0x260 [ 765.457700][ T8410] ? task_work_cancel+0x220/0x220 [ 765.459518][T14900] loop3: detected capacity change from 0 to 32768 [ 765.462757][ T8410] ? exit_to_user_mode_loop+0x3b/0x110 [ 765.462838][ T8410] exit_to_user_mode_loop+0xe6/0x110 [ 765.462867][ T8410] exit_to_user_mode_prepare+0xee/0x180 [ 765.462895][ T8410] syscall_exit_to_user_mode+0x16/0x40 [ 765.462916][ T8410] do_syscall_64+0x58/0xa0 [ 765.462940][ T8410] ? clear_bhb_loop+0x60/0xb0 [ 765.462963][ T8410] ? clear_bhb_loop+0x60/0xb0 [ 765.462988][ T8410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.463010][ T8410] RIP: 0033:0x7fbef779d9d7 [ 765.463030][ T8410] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 765.463048][ T8410] RSP: 002b:00007fff8b202298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 765.463073][ T8410] RAX: 0000000000000000 RBX: 00007fbef7832050 RCX: 00007fbef779d9d7 [ 765.463088][ T8410] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8b202350 [ 765.463101][ T8410] RBP: 00007fff8b202350 R08: 00007fff8b203350 R09: 00000000ffffffff [ 765.463116][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8b2033e0 [ 765.463129][ T8410] R13: 00007fbef7832050 R14: 00000000000b9afc R15: 00007fff8b203420 [ 765.463161][ T8410] [ 765.771493][T14900] (syz.3.2969,14900,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 765.831476][T14900] (syz.3.2969,14900,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 766.052154][T14903] loop2: detected capacity change from 0 to 32768 [ 766.052482][T14921] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2978'. [ 766.092157][T14903] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 766.159777][T14900] JBD2: Ignoring recovery information on journal [ 766.285555][T14900] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 766.531406][T14620] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 767.226119][T14954] netlink: 'syz.6.2984': attribute type 1 has an invalid length. [ 767.279481][T14943] loop2: detected capacity change from 0 to 8192 [ 767.337859][T14943] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 767.432879][T14943] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 767.514231][T14943] REISERFS (device loop2): using ordered data mode [ 767.582415][T14943] reiserfs: using flush barriers [ 767.677836][T14943] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 767.834734][T14943] REISERFS (device loop2): checking transaction log (loop2) [ 767.936251][T14943] REISERFS warning: reiserfs-5081 is_leaf: nr_item seems wrong: level=1, nr_items=1538, free_space=5 rdkey [ 767.996148][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 768.002684][T14943] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 768.061559][T14943] REISERFS (device loop2): Remounting filesystem read-only [ 768.110256][T14943] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 768.634450][T14968] vivid-002: ================= START STATUS ================= [ 768.642821][T14968] vivid-002: Radio HW Seek Mode: Bounded [ 768.648842][T14968] vivid-002: Radio Programmable HW Seek: false [ 768.655145][T14968] vivid-002: RDS Rx I/O Mode: Block I/O [ 768.660848][T14968] vivid-002: Generate RBDS Instead of RDS: false [ 768.667327][T14968] vivid-002: RDS Reception: true [ 768.672341][T14968] vivid-002: RDS Program Type: 0 inactive [ 768.678245][T14968] vivid-002: RDS PS Name: inactive [ 768.683587][T14968] vivid-002: RDS Radio Text: inactive [ 768.689221][T14968] vivid-002: RDS Traffic Announcement: false inactive [ 768.696152][T14968] vivid-002: RDS Traffic Program: false inactive [ 768.702666][T14968] vivid-002: RDS Music: false inactive [ 768.708315][T14968] vivid-002: ================== END STATUS ================== [ 769.020482][ T4341] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.113570][T14985] loop2: detected capacity change from 0 to 32768 [ 770.125702][ T4341] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.167495][T14985] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2992 (14985) [ 770.182779][T14985] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 770.193364][T14985] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 770.202073][T14985] BTRFS info (device loop2): using free space tree [ 770.236157][T14985] BTRFS info (device loop2): enabling ssd optimizations [ 770.851516][ T4341] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.014357][ T4341] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.017750][T15009] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2994'. [ 771.038975][T13549] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 771.306458][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 771.321352][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 771.330629][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 771.362480][T14620] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (14620) [ 771.377708][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 771.385472][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 771.395157][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 771.596283][T15017] loop0: detected capacity change from 0 to 2048 [ 771.687830][T15017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 771.696526][T15017] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.104371][T15029] vivid-001: ================= START STATUS ================= [ 772.112402][T15029] vivid-001: Radio HW Seek Mode: Bounded [ 772.118418][T15029] vivid-001: Radio Programmable HW Seek: false [ 772.124709][T15029] vivid-001: RDS Rx I/O Mode: Block I/O [ 772.130602][T15029] vivid-001: Generate RBDS Instead of RDS: false [ 772.137063][T15029] vivid-001: RDS Reception: true [ 772.142146][T15029] vivid-001: RDS Program Type: 0 inactive [ 772.148056][T15029] vivid-001: RDS PS Name: inactive [ 772.153401][T15029] vivid-001: RDS Radio Text: inactive [ 772.159051][T15029] vivid-001: RDS Traffic Announcement: false inactive [ 772.166067][T15029] vivid-001: RDS Traffic Program: false inactive [ 772.172601][T15029] vivid-001: RDS Music: false inactive [ 772.178263][T15029] vivid-001: ================== END STATUS ================== [ 772.706017][T12918] EXT4-fs (loop0): unmounting filesystem. [ 772.907418][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 772.950063][T15014] chnl_net:caif_netlink_parms(): no params data found [ 773.468292][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 774.305271][T15014] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.268388][T15014] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.298126][T15014] device bridge_slave_0 entered promiscuous mode [ 775.532667][T15073] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 775.547521][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 775.798874][T15071] loop3: detected capacity change from 0 to 4096 [ 775.922743][T15014] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.940771][T15014] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.985053][T15014] device bridge_slave_1 entered promiscuous mode [ 776.067171][T15061] loop0: detected capacity change from 0 to 32768 [ 776.149982][T15061] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 776.162174][ T4278] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 776.174725][ T4278] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 776.822453][T15014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.833221][T15088] tipc: Enabling of bearer rejected, failed to enable media [ 776.903805][T15014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.266233][T15104] loop2: detected capacity change from 0 to 512 [ 777.637494][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 777.700298][T15103] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 777.707393][T15103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 777.716547][T15103] vhci_hcd vhci_hcd.0: Device attached [ 777.738036][T15104] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3013: inode has both inline data and extents flags [ 777.753818][T15104] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3013: couldn't read orphan inode 15 (err -117) [ 777.767103][T15104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 778.066583][ T4358] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 778.075121][T15105] vhci_hcd: connection closed [ 778.097185][ T4326] vhci_hcd: stop threads [ 778.111398][ T4326] vhci_hcd: release socket [ 778.118921][ T4326] vhci_hcd: disconnect device [ 778.208588][ T4358] usb 37-1: enqueue for inactive port 0 [ 778.499506][ T4358] vhci_hcd: vhci_device speed not set [ 778.608353][T14620] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 780.655407][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 780.663349][ T4286] Bluetooth: hci5: command 0x0406 tx timeout [ 780.888545][T13549] EXT4-fs (loop2): unmounting filesystem. [ 780.915294][T15014] team0: Port device team_slave_0 added [ 780.994425][T15014] team0: Port device team_slave_1 added [ 781.321156][T15014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.615142][T15145] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 782.155830][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.202612][T15014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.433683][T15014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.457552][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.565184][T15014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.744174][T15157] loop2: detected capacity change from 0 to 4096 [ 782.905737][T15014] device hsr_slave_0 entered promiscuous mode [ 782.946640][T15014] device hsr_slave_1 entered promiscuous mode [ 783.028375][T15014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.044456][T15014] Cannot create hsr debugfs directory [ 784.009031][T13549] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 784.042561][T13549] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 784.439181][ T4341] bond0: (slave wlan1): Releasing backup interface [ 784.991162][ T4341] device hsr_slave_0 left promiscuous mode [ 785.039873][ T4341] device hsr_slave_1 left promiscuous mode [ 785.050012][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.106279][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.171111][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.180874][T15175] loop2: detected capacity change from 0 to 32768 [ 785.195568][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.272350][ T4341] device bridge_slave_1 left promiscuous mode [ 785.302427][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.367068][ T4341] device bridge_slave_0 left promiscuous mode [ 785.380968][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.481664][T15175] XFS (loop2): Mounting V5 Filesystem [ 785.568978][T15175] XFS (loop2): Ending clean mount [ 785.645817][T15175] XFS (loop2): Quotacheck needed: Please wait. [ 785.685932][ T4341] device veth1_macvtap left promiscuous mode [ 785.734759][ T4341] device veth0_macvtap left promiscuous mode [ 785.801544][ T4341] device veth1_vlan left promiscuous mode [ 785.807556][T15195] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 785.830082][T15175] XFS (loop2): Quotacheck: Done. [ 785.835355][ T4341] device veth0_vlan left promiscuous mode [ 786.855437][T13549] XFS (loop2): Unmounting Filesystem [ 786.881859][T15211] loop0: detected capacity change from 0 to 4096 [ 786.926849][ T4341] bond3 (unregistering): (slave bridge3): Releasing active interface [ 787.250711][T12918] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 787.265679][T12918] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 787.785117][T15219] loop6: detected capacity change from 0 to 4096 [ 787.830632][ T4341] bond3 (unregistering): Released all slaves [ 787.925395][ T8410] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 787.957593][ T8410] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 788.451840][T15230] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 788.463484][ T4341] bond2 (unregistering): Released all slaves [ 788.526040][ T4341] bond1 (unregistering): (slave bridge1): Releasing active interface [ 788.591795][ T4341] bond1 (unregistering): Released all slaves [ 788.615439][T15221] loop0: detected capacity change from 0 to 40427 [ 788.683737][T15221] F2FS-fs (loop0): Found nat_bits in checkpoint [ 788.806910][T15221] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 789.523760][T15242] loop0: detected capacity change from 0 to 32768 [ 789.542603][T15242] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 789.935310][T14462] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 790.885580][T15258] loop0: detected capacity change from 0 to 4096 [ 791.083944][T12918] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 791.111317][T12918] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 791.266602][ T4341] device team_slave_1 left promiscuous mode [ 791.284778][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 791.484105][T15264] loop0: detected capacity change from 0 to 32768 [ 791.512867][T15264] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 791.549330][ T4341] device team_slave_0 left promiscuous mode [ 791.567671][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 792.193841][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.296695][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.296962][T14462] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 792.316432][ T4358] infiniband syz1: ib_query_port failed (-19) [ 792.919453][ T4341] bond0 (unregistering): Released all slaves [ 793.106897][ T3597] bond0 speed is unknown, defaulting to 1000 [ 794.392093][T15283] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 794.518165][ T3597] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 794.709143][T15014] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 794.747697][ T3597] usb 7-1: Using ep0 maxpacket: 32 [ 794.755592][ T3597] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 794.756014][T15014] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 794.811650][T15014] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 794.858038][T15014] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 794.944771][ T3597] usb 7-1: config 0 has no interface number 0 [ 794.954048][ T3597] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 794.967719][ T3597] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.976396][ T3597] usb 7-1: Product: syz [ 794.983482][ T3597] usb 7-1: Manufacturer: syz [ 794.999560][ T3597] usb 7-1: SerialNumber: syz [ 795.097366][ T3597] usb 7-1: config 0 descriptor?? [ 795.728899][ T3597] smsc95xx v2.0.0 [ 795.948676][T15014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.957952][ T3597] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 796.001050][ T3597] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 796.108055][T15014] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.139186][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 796.165984][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 796.221771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 796.260745][ T3597] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 796.272828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 796.290452][ T3597] smsc95xx: probe of 7-1:0.67 failed with error -61 [ 796.295863][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.304370][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.337476][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 796.355872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 796.383988][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 796.416285][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.423555][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.461029][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 796.542133][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 796.561246][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 796.587182][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 796.607051][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 796.634669][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 796.652054][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 796.679138][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 796.698181][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 796.740627][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 796.778484][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 796.842398][T15014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 798.003736][T15344] loop2: detected capacity change from 0 to 512 [ 798.158083][T15344] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3063: inode has both inline data and extents flags [ 798.172950][T15344] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3063: couldn't read orphan inode 15 (err -117) [ 798.187041][T15344] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 798.241731][T15345] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 798.248292][T15345] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 798.256475][T15345] vhci_hcd vhci_hcd.0: Device attached [ 798.746212][T15346] vhci_hcd: connection closed [ 798.763976][ T64] vhci_hcd: stop threads [ 798.773150][ T64] vhci_hcd: release socket [ 798.779439][ T64] vhci_hcd: disconnect device [ 798.817365][ T4427] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 798.828188][ T4427] usb 37-1: enqueue for inactive port 0 [ 798.884793][ T4435] usb 7-1: USB disconnect, device number 18 [ 798.907412][ T4427] vhci_hcd: vhci_device speed not set [ 800.277591][T15360] loop6: detected capacity change from 0 to 32768 [ 800.288647][T15360] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 800.374900][T14462] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 803.606498][T15352] tipc: Enabling of bearer rejected, failed to enable media [ 803.716268][T13549] EXT4-fs (loop2): unmounting filesystem. [ 803.935911][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 803.954097][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 803.981738][T15014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.059065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 804.071583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 804.131289][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 804.153187][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 804.174222][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 804.215226][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 804.244114][T15014] device veth0_vlan entered promiscuous mode [ 804.308560][T15014] device veth1_vlan entered promiscuous mode [ 804.388882][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 804.408754][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 804.428343][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 804.439194][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 804.465939][T15014] device veth0_macvtap entered promiscuous mode [ 804.516172][T15014] device veth1_macvtap entered promiscuous mode [ 804.540273][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 804.556072][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 804.590894][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.618050][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.648390][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.688301][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.743039][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.766328][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.804500][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.863031][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.883818][T15014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.929960][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 804.948100][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 804.990554][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.017936][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.052292][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.087897][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.132258][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.173129][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.212502][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.238481][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.287417][T15014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.303248][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 805.327926][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 805.367945][T15014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.376714][T15014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.418571][T15014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.451998][T15014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.501154][T15403] loop2: detected capacity change from 0 to 32768 [ 805.552035][T15403] [ 805.552035][T15403] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 805.552035][T15403] [ 805.689113][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.696995][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.809577][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 806.616649][T13081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.650432][T13081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.682505][T13076] [ 806.682505][T13076] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 806.682505][T13076] [ 806.693868][T13081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 806.736564][T13076] [ 806.736564][T13076] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 806.736564][T13076] [ 806.781498][T13549] [ 806.781498][T13549] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 806.781498][T13549] [ 806.837426][ T107] [ 806.837426][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 806.837426][ T107] [ 806.879771][T15424] loop3: detected capacity change from 0 to 64 [ 807.021330][T13549] [ 807.021330][T13549] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 807.021330][T13549] [ 808.044991][T15434] device team_slave_0 entered promiscuous mode [ 808.051292][T15434] device team_slave_1 entered promiscuous mode [ 808.127009][T15434] device vlan2 entered promiscuous mode [ 808.183547][T15434] device team0 entered promiscuous mode [ 808.762969][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.270424][T15472] device syzkaller0 entered promiscuous mode [ 810.832458][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 810.988486][T15488] device syzkaller0 entered promiscuous mode [ 811.026851][T15460] loop2: detected capacity change from 0 to 32768 [ 811.109721][T15460] JBD2: Ignoring recovery information on journal [ 811.197481][ T4358] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 811.213057][T15460] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 811.361064][T15460] [ 811.363460][T15460] ====================================================== [ 811.370502][T15460] WARNING: possible circular locking dependency detected [ 811.377546][T15460] syzkaller #0 Not tainted [ 811.381981][T15460] ------------------------------------------------------ [ 811.389119][T15460] syz.2.3089/15460 is trying to acquire lock: [ 811.395209][T15460] ffff8880474b6d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4810 [ 811.408495][T15460] [ 811.408495][T15460] but task is already holding lock: [ 811.415979][T15460] ffff88804767eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0 [ 811.425532][T15460] [ 811.425532][T15460] which lock already depends on the new lock. [ 811.425532][T15460] [ 811.435977][T15460] [ 811.435977][T15460] the existing dependency chain (in reverse order) is: [ 811.445021][T15460] [ 811.445021][T15460] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 811.452843][T15460] down_read+0x42/0x2d0 [ 811.457542][T15460] ocfs2_init_acl+0x307/0x770 [ 811.462754][T15460] ocfs2_mknod+0x15e8/0x25b0 [ 811.467884][T15460] ocfs2_mkdir+0x1b6/0x4b0 [ 811.472840][T15460] vfs_mkdir+0x387/0x570 [ 811.477621][T15460] do_mkdirat+0x1d8/0x440 [ 811.482473][T15460] __x64_sys_mkdirat+0x85/0x90 [ 811.487759][T15460] do_syscall_64+0x4c/0xa0 [ 811.492714][T15460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.499135][T15460] [ 811.499135][T15460] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 811.507658][T15460] down_read+0x42/0x2d0 [ 811.512345][T15460] ocfs2_start_trans+0x3a4/0x6f0 [ 811.517811][T15460] ocfs2_mknod+0xf77/0x25b0 [ 811.522843][T15460] ocfs2_create+0x1b6/0x4b0 [ 811.527870][T15460] path_openat+0x1181/0x2ee0 [ 811.533004][T15460] do_filp_open+0x1f1/0x430 [ 811.538040][T15460] do_sys_openat2+0x150/0x4b0 [ 811.543331][T15460] __x64_sys_openat+0x135/0x160 [ 811.548706][T15460] do_syscall_64+0x4c/0xa0 [ 811.553655][T15460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.560090][T15460] [ 811.560090][T15460] -> #2 (sb_internal#6){.+.+}-{0:0}: [ 811.567571][T15460] ocfs2_start_trans+0x2a5/0x6f0 [ 811.573037][T15460] ocfs2_mknod+0xf77/0x25b0 [ 811.578067][T15460] ocfs2_create+0x1b6/0x4b0 [ 811.583093][T15460] path_openat+0x1181/0x2ee0 [ 811.588204][T15460] do_filp_open+0x1f1/0x430 [ 811.593226][T15460] do_sys_openat2+0x150/0x4b0 [ 811.598429][T15460] __x64_sys_openat+0x135/0x160 [ 811.603802][T15460] do_syscall_64+0x4c/0xa0 [ 811.608748][T15460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.615164][T15460] [ 811.615164][T15460] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 811.625816][T15460] down_write+0x36/0x60 [ 811.630518][T15460] ocfs2_reserve_local_alloc_bits+0x11e/0x2700 [ 811.637208][T15460] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 811.644074][T15460] ocfs2_mknod+0xf15/0x25b0 [ 811.649115][T15460] ocfs2_create+0x1b6/0x4b0 [ 811.654144][T15460] path_openat+0x1181/0x2ee0 [ 811.659275][T15460] do_filp_open+0x1f1/0x430 [ 811.664300][T15460] do_sys_openat2+0x150/0x4b0 [ 811.669503][T15460] __x64_sys_openat+0x135/0x160 [ 811.674963][T15460] do_syscall_64+0x4c/0xa0 [ 811.679992][T15460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.686421][T15460] [ 811.686421][T15460] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 811.696953][T15460] __lock_acquire+0x2d07/0x7d10 [ 811.702949][T15460] lock_acquire+0x1bb/0x4a0 [ 811.707981][T15460] down_write+0x36/0x60 [ 811.712662][T15460] ocfs2_reserve_suballoc_bits+0x16d/0x4810 [ 811.719099][T15460] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 811.726037][T15460] ocfs2_init_xattr_set_ctxt+0x314/0x7b0 [ 811.732207][T15460] ocfs2_xattr_set+0xc3b/0x13e0 [ 811.737578][T15460] __vfs_setxattr+0x3e0/0x420 [ 811.742787][T15460] __vfs_setxattr_noperm+0x129/0x5e0 [ 811.748598][T15460] vfs_setxattr+0x167/0x2e0 [ 811.753631][T15460] setxattr+0x346/0x360 [ 811.758320][T15460] path_setxattr+0x147/0x290 [ 811.763442][T15460] __x64_sys_setxattr+0xb7/0xd0 [ 811.768817][T15460] do_syscall_64+0x4c/0xa0 [ 811.773763][T15460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.780266][T15460] [ 811.780266][T15460] other info that might help us debug this: [ 811.780266][T15460] [ 811.790491][T15460] Chain exists of: [ 811.790491][T15460] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 811.790491][T15460] [ 811.807446][T15460] Possible unsafe locking scenario: [ 811.807446][T15460] [ 811.814891][T15460] CPU0 CPU1 [ 811.820253][T15460] ---- ---- [ 811.825703][T15460] lock(&oi->ip_xattr_sem); [ 811.830294][T15460] lock(&journal->j_trans_barrier); [ 811.838192][T15460] lock(&oi->ip_xattr_sem); [ 811.845302][T15460] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 811.852592][T15460] [ 811.852592][T15460] *** DEADLOCK *** [ 811.852592][T15460] [ 811.860735][T15460] 3 locks held by syz.2.3089/15460: [ 811.865930][T15460] #0: ffff88802f16e460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 811.875171][T15460] #1: ffff88804767ed88 (&sb->s_type->i_mutex_key#35){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 811.885708][T15460] #2: ffff88804767eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0 [ 811.895634][T15460] [ 811.895634][T15460] stack backtrace: [ 811.901530][T15460] CPU: 1 PID: 15460 Comm: syz.2.3089 Not tainted syzkaller #0 [ 811.908992][T15460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.919136][T15460] Call Trace: [ 811.922418][T15460] [ 811.925351][T15460] dump_stack_lvl+0x188/0x24e [ 811.930040][T15460] ? load_image+0x400/0x400 [ 811.934564][T15460] ? show_regs_print_info+0x12/0x12 [ 811.939779][T15460] ? print_circular_bug+0x12b/0x1a0 [ 811.945009][T15460] check_noncircular+0x296/0x330 [ 811.950044][T15460] ? add_chain_block+0x940/0x940 [ 811.954994][T15460] ? lockdep_lock+0xf1/0x1f0 [ 811.959597][T15460] ? _find_first_zero_bit+0xcf/0x100 [ 811.964889][T15460] __lock_acquire+0x2d07/0x7d10 [ 811.969754][T15460] ? verify_lock_unused+0x140/0x140 [ 811.974963][T15460] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 811.980605][T15460] ? do_raw_spin_lock+0x128/0x2f0 [ 811.985630][T15460] ? mutex_unlock+0x10/0x10 [ 811.990137][T15460] ? __rwlock_init+0x140/0x140 [ 811.994904][T15460] ? do_raw_spin_unlock+0x11d/0x230 [ 812.000109][T15460] lock_acquire+0x1bb/0x4a0 [ 812.004618][T15460] ? ocfs2_reserve_suballoc_bits+0x16d/0x4810 [ 812.010692][T15460] ? __might_sleep+0xd0/0xd0 [ 812.015292][T15460] ? read_lock_is_recursive+0x10/0x10 [ 812.020674][T15460] down_write+0x36/0x60 [ 812.024854][T15460] ? ocfs2_reserve_suballoc_bits+0x16d/0x4810 [ 812.030921][T15460] ocfs2_reserve_suballoc_bits+0x16d/0x4810 [ 812.036827][T15460] ? mark_lock+0x94/0x320 [ 812.041169][T15460] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 812.047159][T15460] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 812.053090][T15460] ? lockdep_hardirqs_on+0x94/0x140 [ 812.058294][T15460] ? ocfs2_block_group_search+0x4f0/0x4f0 [ 812.064016][T15460] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 812.069914][T15460] ? _raw_spin_unlock+0x40/0x40 [ 812.074773][T15460] ? stack_trace_save+0xa6/0xf0 [ 812.079636][T15460] ? __stack_depot_save+0x421/0x460 [ 812.084843][T15460] ? kasan_set_track+0x60/0x70 [ 812.089613][T15460] ? kasan_set_track+0x4b/0x70 [ 812.094385][T15460] ? __kasan_kmalloc+0x8e/0xa0 [ 812.099156][T15460] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 812.105657][T15460] ? ocfs2_init_xattr_set_ctxt+0x314/0x7b0 [ 812.111464][T15460] ? ocfs2_xattr_set+0xc3b/0x13e0 [ 812.116491][T15460] ? __vfs_setxattr+0x3e0/0x420 [ 812.121345][T15460] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 812.126812][T15460] ? vfs_setxattr+0x167/0x2e0 [ 812.131493][T15460] ? setxattr+0x346/0x360 [ 812.135838][T15460] ? path_setxattr+0x147/0x290 [ 812.140610][T15460] ? __x64_sys_setxattr+0xb7/0xd0 [ 812.145643][T15460] ? do_syscall_64+0x4c/0xa0 [ 812.150241][T15460] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 812.156326][T15460] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 812.162670][T15460] ? ocfs2_init_steal_slots+0x150/0x150 [ 812.168219][T15460] ? ocfs2_xattr_block_set+0x3090/0x3090 [ 812.173945][T15460] ? do_raw_spin_lock+0x128/0x2f0 [ 812.178977][T15460] ocfs2_init_xattr_set_ctxt+0x314/0x7b0 [ 812.184614][T15460] ? _raw_spin_unlock+0x24/0x40 [ 812.189466][T15460] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 812.195536][T15460] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 812.201783][T15460] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 812.207686][T15460] ? up_write+0x1bb/0x420 [ 812.212022][T15460] ocfs2_xattr_set+0xc3b/0x13e0 [ 812.216882][T15460] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 812.222637][T15460] ? aa_get_newest_label+0xf9/0x5b0 [ 812.227880][T15460] ? posix_xattr_acl+0x8f/0xb0 [ 812.232665][T15460] ? evm_protect_xattr+0x333/0x9d0 [ 812.237879][T15460] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 812.243349][T15460] __vfs_setxattr+0x3e0/0x420 [ 812.248041][T15460] __vfs_setxattr_noperm+0x129/0x5e0 [ 812.253336][T15460] vfs_setxattr+0x167/0x2e0 [ 812.257849][T15460] ? xattr_permission+0x500/0x500 [ 812.262883][T15460] ? _copy_from_user+0x10b/0x170 [ 812.267829][T15460] ? setxattr+0x2ce/0x360 [ 812.272341][T15460] setxattr+0x346/0x360 [ 812.276509][T15460] ? path_setxattr+0x290/0x290 [ 812.281292][T15460] ? __mnt_want_write+0x21f/0x2a0 [ 812.286334][T15460] path_setxattr+0x147/0x290 [ 812.290941][T15460] ? simple_xattr_list_add+0xf0/0xf0 [ 812.296237][T15460] ? lock_chain_count+0x20/0x20 [ 812.301102][T15460] __x64_sys_setxattr+0xb7/0xd0 [ 812.305963][T15460] do_syscall_64+0x4c/0xa0 [ 812.310391][T15460] ? clear_bhb_loop+0x60/0xb0 [ 812.315096][T15460] ? clear_bhb_loop+0x60/0xb0 [ 812.319781][T15460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 812.325679][T15460] RIP: 0033:0x7f1785b9c799 [ 812.330097][T15460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.349709][T15460] RSP: 002b:00007f1786ace028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 812.358131][T15460] RAX: ffffffffffffffda RBX: 00007f1785e15fa0 RCX: 00007f1785b9c799 [ 812.366110][T15460] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000 [ 812.374084][T15460] RBP: 00007f1785c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 812.382081][T15460] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000 [ 812.390057][T15460] R13: 00007f1785e16038 R14: 00007f1785e15fa0 R15: 00007ffec16de218 [ 812.398039][T15460] [ 812.437448][ T4358] usb 7-1: Using ep0 maxpacket: 16 [ 812.444605][ T4358] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.467401][ T4358] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 812.482295][T13549] ocfs2: Unmounting device (7,2) on (node local) [ 812.488363][ T4358] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 812.508311][ T4358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.530526][ T4358] usb 7-1: Product: syz [ 812.538215][ T4358] usb 7-1: Manufacturer: syz [ 812.544844][ T4358] usb 7-1: SerialNumber: syz [ 812.565816][ T4358] usb 7-1: config 0 descriptor?? [ 815.303975][ T4873] usb 7-1: USB disconnect, device number 19 [ 815.524407][T15497] device vlan2 entered promiscuous mode