last executing test programs: 1m13.69020398s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000180)='./file1\x00', r1, &(0x7f00000001c0)='./file3\x00', 0x0) 1m13.189814983s ago: executing program 0: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x2}}, 0x24, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xc9) r2 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000003c0)={0x4, 0x0, {}, {}, 0x0, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f00000005c0)=0xe8) setresuid(r2, 0x0, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x40000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0)) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x1, 0x4, 0x0, {0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x20000009}}}, 0x3a) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000800)=0x91) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000000)={'virt_wifi0\x00', 0x18a2}) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000540)={'tunl0\x00', 0x9}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'nr0\x00', 0x4}) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000300)="654a8e2f24644574abfa81c31cf8185b8d9be2a4af149aada99b9003000000000000004bdf8ae68a302f159a2675ac9ae042263740f44703a4a2d7b58d383a26da07624902493f149ce94fae08e8d827b5f502552ddfbf1516081d9eb05cb48e712973b282cd9d4ae48eefc5459f586526bc9672d3bfa1f7d79c3d9c89b7c1", 0x7f}, {&(0x7f0000000380)="b28d34da395c5769f5745bb2211c9925190e37196558a67eaefd8f3e520ccf51efc17daa10ffe0f9d85bbaf9b0ab563a0056642eb132608d96fd7d9efa8c8a0de59f717136fdf26b98f2bd8a5498be3421df0386b11357", 0x57}], 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000840)=@deltaction={0x14, 0x31, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x84) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfed7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) 1m8.61621793s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000140)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc1, 0x0) fcntl$setlease(r1, 0x400, 0x0) 1m8.541757652s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/prev\x00') writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000180)='\n', 0x1}], 0x1) 1m8.367799785s ago: executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r2], &(0x7f0000000040)}) 1m8.282277344s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xe, 0x0, 0x0, [{}]}]}}, &(0x7f0000000100)=""/175, 0x32, 0xaf, 0x1}, 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x8, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x60000009, 0x5979f5f9aa0e54f5, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x4, &(0x7f0000000100)=[{0x35, 0x0, 0x2}, {}, {}, {0x6}]}) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) 1m8.248630425s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m7.216900251s ago: executing program 0: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x0, 0x1, [{0x0, 0x1}]}) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x810) 1m4.896222412s ago: executing program 0: connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 1m3.705012657s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000300)="84", &(0x7f00000005c0)=""/150}, 0x20) 1m3.58972491s ago: executing program 4: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/421]}, 0x21d) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000240)=""/184, 0xb8, 0x40000002, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB='nls=cp949,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee01, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f626172726965722c00cd2c1a77bebe1941eb51308a0e1eefab7e5e16b355"], 0x1, 0x6bb, &(0x7f0000001f40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 1m2.571437381s ago: executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r2], &(0x7f0000000040)}) 1m2.241401401s ago: executing program 4: open(&(0x7f0000000080)='.\x00', 0x0, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) rt_sigreturn() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x6) flock(r0, 0x1) 1m1.494174637s ago: executing program 4: r0 = open$dir(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getresuid(0x0, 0x0, &(0x7f0000000100)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004}, &(0x7f0000bbdffc)) eventfd(0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) close(0xffffffffffffffff) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x541b, 0x0) 1m1.17140277s ago: executing program 4: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x2}}, 0x24, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xc9) r2 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000003c0)={0x4, 0x0, {}, {}, 0x0, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f00000005c0)=0xe8) setresuid(r2, 0x0, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x40000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0)) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x1, 0x4, 0x0, {0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x20000009}}}, 0x3a) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000800)=0x91) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000000)={'virt_wifi0\x00', 0x18a2}) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000540)={'tunl0\x00', 0x9}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'nr0\x00', 0x4}) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000300)="654a8e2f24644574abfa81c31cf8185b8d9be2a4af149aada99b9003000000000000004bdf8ae68a302f159a2675ac9ae042263740f44703a4a2d7b58d383a26da07624902493f149ce94fae08e8d827b5f502552ddfbf1516081d9eb05cb48e712973b282cd9d4ae48eefc5459f586526bc9672d3bfa1f7d79c3d9c89b7c1", 0x7f}, {&(0x7f0000000380)="b28d34da395c5769f5745bb2211c9925190e37196558a67eaefd8f3e520ccf51efc17daa10ffe0f9d85bbaf9b0ab563a0056642eb132608d96fd7d9efa8c8a0de59f717136fdf26b98f2bd8a5498be3421df0386b11357", 0x57}], 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000840)=@deltaction={0x14, 0x31, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x84) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfed7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) 34.864064764s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'cpuset'}]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) close_range(r4, 0xffffffffffffffff, 0x0) 34.172685084s ago: executing program 1: socket$kcm(0x10, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c}, 0x38) 34.046262683s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) lremovexattr(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 33.926651677s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) close(r1) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000000)="b358", 0x2}], 0x1) socket$inet6(0xa, 0x1, 0x0) rt_sigreturn() pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 33.773024046s ago: executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(0x0) syz_emit_vhci(0x0, 0x7) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 33.678801368s ago: executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getpeername(r1, 0x0, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 32.606859301s ago: executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x2, 0x2}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 32.53484277s ago: executing program 2: sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) 32.132486469s ago: executing program 2: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/421]}, 0x21d) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000240)=""/184, 0xb8, 0x40000002, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB='nls=cp949,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee01, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f626172726965722c00cd2c1a77bebe1941eb51308a0e1eefab7e5e16b355"], 0x1, 0x6bb, &(0x7f0000001f40)="$eJzs3U9sHFcdB/DvbJy1N0ip26ZpQEixGqmCRiR2ViVBQmpACOUQoQguvVqJ01jZpJXjorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHhlHskbhxyAIxmdna9Xm8cO068afv5SON5M2/ee7/5df7szjaaAJ9Z517P/m6KnDt+/ma5fPdOu3P3Tvtav5xkOkkjmerNUrSS4uPkbHpTPl+urLsrHjTOq/c+Kqbe/7DdW5qqp2r7xlbtNhm7ZTeZGSzsSzLXK/5nGx02xvdXTVU/F9f7e0TFIO4yYcf6iYNJW9uku1457tTYaPvnLfDUutW7b24ymxxI7+5afg5IfXV4+JVh8ra8NnX3Lg4AAAB4UsZ+lx/2zP3cz80c3JtwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NOh6L0zsKinRr88l6L//v/m0Dv1mxMOd5feu1zNvvvMpAMBAAAAAAAAgF05ej/3czMH+8trRfWb/0vVwqHq7+fydm5kKSs5kZtZzGpWs5KFJLNDHTVvLq6urixsbvnLlC3X1tZu1S1PjW15amNc3dFAx/2fBps2AgAAAAAAAIDPrB/l3Prv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DQokn29WTUd6pdn05hKMpOkWcwNNm9ONNjH4M+TDgAAAACevFY9P1j8r1dYK6rv/Ier7/0zeTvXs5rlrKaTpVyqngX0vvU3/t5td+7eaV8rp80df+NfO4qj6jG9Zw/jR56vtnhh0OJcvp3v5XjmciErWc73s5jVLGUu36pKiykyWz+9mL17p5V+rJvjPbth6cJobEeHymV8R6pIWrmc5Sq2E7nY7IfeqLc7MjTaH5vJyIi3y+wUr9W2maNL9bzco1/U86fDbLXn+wcZma9zX2bj2eG8b879Do+T0ZEW0hg8gzq0Pkq5ODrSI+X8QD0vc/3TJ5vzHT5K25iJ7s/Lpf7Rd3jrnCdf/sdfLlxpXL965fKN40/PYfSIRo+J9lAmXtxWJjplJrq7yMTMbuJ/fJp1NnpX0Z1dLV+q2h7Mcr6TN3MpSzmd+SzkTObztZxKO6eG8vrC1nmtzrXGzs61Y1+qC+U96WdD96Y9M/2gijKvzw7ldfhKN1vVDa9Zz9Jz28hS0cz4LP1zbChTX6gL5Rg/HrrjTN5oJhaGMvH81pn49X/XktzoXL+6cmXxrW2O93I9L0/b9zZem3/zWHZo5+rdLY+X58r/WOndNoaPjrLu+X7dSL6a9S8uU3VnG+qaqc7nXt3DztSyp8O3x/XUq3tx7Cjtqu7IUN2GTzl5M53Bp5Danp+kAGzDgVcONFv3Wn9rfdD6SetK6/zMN6fPTH+xmf1/nfrTvt81ftv4evFKPsgPc3DSkQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKfBjXfevbrY6SytDBf2ZXTNRAppPOYOb4+t6qeit6Y5Zpuj2eXoM0kmnMyHF1K/S2lX/Uxv1fz3SbZo3pzEvreSTDrzVSFTezDWdMZUnR+saSWNQTxJrj4lL7gDnoSTq9feOnnjnXe/snxt8Y2lN5aunzpz+rXT7a8u3Dp5ebmzNN/7O+kogSdh48c/AAAAAAAAAAAA4JNgr/5hyYiiO4F9BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6Zzr2e/d0UWZg/MV8u373T7pRTv7y+5VSSRpLiB0nxcXI2vSmzQ90VDxrn1Xsf/erl9z9sr/c11d++MdLuD/9eW9vhXnTrKXNJ9tXzh5veVn8Xh/rr7jCwnmKwh2XCjvUTB5P2/wAAAP//RKwBLw==") syz_mount_image$fuse(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 31.143498486s ago: executing program 4: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 30.337457686s ago: executing program 2: socket$kcm(0x10, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c}, 0x38) 30.104296675s ago: executing program 2: r0 = msgget(0x2, 0x217) semop(r0, &(0x7f0000000400)=[{0x0, 0x1000, 0x1800}], 0x1) r1 = msgget(0x0, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x4}, 0x7fffffffffffffff, 0x10000020}) msgrcv(r1, &(0x7f0000000680)={0x0, ""/227}, 0xeb, 0x3, 0x3000) msgsnd(0x0, &(0x7f0000000300)={0x2, "1c451f6754f6ea45a86540c9048ee9ba07727c2ba7b3d1ce73b1166e8bb0940b799a607de5a48c2c955032af848830ba5d9a83090505ae2159efd33b080394cc0bafcd13ac67063439246450b920a1603bf1a32c48485874d49ed09f2fe5ea7cead8d4b1495b1e661a31ef4b46f8a5e708d4f58e3bc44b3dfc1a1e903683da78f8427073a4dc702c4a4277cc88303e665d75e4e7651fe1174b26b27afd52fc150ba9e569fc56c192d7"}, 0xb1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r2 = semget(0x1, 0x0, 0x0) r3 = msgget(0x0, 0x512) msgsnd(0x0, &(0x7f00000004c0)=ANY=[], 0xb9, 0x800) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000000)=""/31) msgget(0x2, 0x8) semctl$SETVAL(r2, 0x3, 0x10, &(0x7f0000000180)=0x200) 30.027505966s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="7000000010000104000000000400000000000000", @ANYRES32=r8, @ANYBLOB="0000000050210600480012800b00010067656e6576650000380002800500090001000000080001000100000005000c000000000005000c0000000000140007"], 0x70}}, 0x0) 2.580791398s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$xdp(0xffffffffffffffff, &(0x7f0000004300)={0x2c, 0x4}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x8102, &(0x7f0000000080), 0x7, 0x50a, &(0x7f00000001c0)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000043c0)=ANY=[@ANYBLOB], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000002240)="afaddbba376e1bba12e2f2262ec7a1f5b377313a7bcf2d9b013196c2f0f94bc244fc0dc1c1bfbd4ed45229ce0cb7ca58f4b8d430b30d6ad8e8a56099ff70f31257cbe8710542fbedf009e1a5799fb06a7e0301b43d31008caf089c4a5a49dc50ea4c476f63a8b0aa08dd78d9ff39d8dfafbe2c41ff5d2331dd2e9d784247d5272cdcd13e6d9d7a03fa6b0622e6f130e0489bf9105a2a511d6f5b7da1100ecfe5d6ce64f4aac5c00c26d636ac66f059201a3a790b946da4808f1d665484847b61faab09a5e4b45a17c4c55b64ecf6933705c22c85317cc5edeba3e9260033f6bac869ac3b08ed1c55ae3119c78761be6d934c3757d5f10079243e4f06429907163f81855b74887146d875d0e6ab4d5c7032e84c33ea24bb93b2ab6eaec0feeca93f006a0d2bc2bd601f2ede8f32b5fa2e37e0ad1460b8839676dedef30fb684f6fddfcd9a84f3efd78d076c996d92a186e921e16e5ac7aa1f70c585b3752cc1312876c758219645ad0a5540bc82074a497ffc3717c8e139c09b3d2e21fff27e12db18540448f7ff7b637f87b7a717a60a23934e4be7f55ac10d2c09098fa13c9f1c5ed9ba61cc3ddc320b5409071d2ddd25d5b8f79475e80b3b8257b25fad2c59c31c5855560f2600de1930cb1f2e57aed4fb0b79fa7aac52d54a73d62f424cbad6f82ce5d5749cce356f892488ed149283e51dfdded96136a90b5e0c63d1728a82c324b1dd756b9f9b257a9e7f4b07a007e8ed37274d686e4b1667b315b640cb610d48fbe98c07ddb82250e9399b1e705e3f805969b9a003902e2e7b85cb9e2171f5bd180fbb9bd26805fce0b2c6f87cd7d02a579ac24a5391ad2eec8868425034c5dc19dc7581bc0162ecb37a172175a859b143284e3146dfa01731b6ceca8e458cbdf8d785300d12c50c3bd9ca4b72cbb0480711b2cfe820c31887289b29fed60c04548ee3e24acaeed283a9400cbba31e1317ec6158ece4ce56af53e46e182a6d441ba04520f0e8b45b56eb378ddb17ef5d57b27941032e7c917313f555838ba5397816757da7bedb6c5ac760239455cf09861026920c2ab3119a3257d2eb61e8dac7c39ee5880cdfb7c4fcbcf28dc4fcceb81e81f5fbbc0179fe22fbac014b118ed1ec81652d34a67b53a9a8ee468d8e927a77ae79f381a249501d3055e7da0b7a8847850f4e35aaf5b5dd4338326da84d93091035bf10b80b3e79badd38fd5d2b9fdf0b0923c96193d93ae4d8753980f8c73e980934686f11acb266c161751367dc05e6ae5175bd304ae6b1fc016ff2a01eb05a1ba7ebf1b91cf25dc14852984acdfb008a5df08d5c8619c9211320b87a5f1b3902531050a147af6a7134316a7735ad310f6241258bd9b79e2dee1461840dfdd905bc2e17d55b49694a68f36bf4a64fb2f5a483b633398abaff7917d9f1216d70368ad4c8e4fcfb040040f32e8a6a534d02c4187fbd19b85f35f8c119e06e3dabaa210a649117722816b5a91c5125c84482d414edcd992c79aa80fd568a884c99d43b77a87daa96f662c53fba7367ee147daf620bc6d13d32c3d9cdf8095962a9bcb85a93b6598750cdbbf5925a2a0875afd1e58a568b89815ae420ea9553ed487a55393115a8907aaf3982827be1534576c257b8594b48d0d71fa1f56dd096a6ea3f7fa339b51585d36ef72d0bb0da4c2c84ace8d16be3ead998187df0e59045541b0a1e79e5ee5b1a55d8fcd157d49df504b6fc031c5fd1e01a8ee2ae9f84df78ef03595642a7812d737ad2595b922ee618823b53ae2594dc15193c7206591e9b16689c3d5bd4b4b8d6851c2e7f0550ba0178a64b8d3c08bfa35f064576ccac39e7936e2e10fd27785f66053580b45e9c93d666bb7d4eff042da50774049f0948b150a660e08e82fc352636cfa0fdc9409316e402440aba8ab8944840838d8121a76274a5f929101e25c2a7c0ccf84831c8981258b21679dd92b7c44a78acfd706cd25f8878873683a6f5aebc81d45375aefcb484bf517ec13dc814fdf390cd39f764a008777c9db7b22b1c7eb556a5f51fe9755916f84db7401744c015c1100b3d3cb8264b26c022d7f6441cd0f099681d7d9df8b3c9c6d153d6d0c30fefded15e74c7a9b5832032552ef6bfb3863330edac33a33df4a4839d661bf10ab6aed5d2093b57450ce6dd2fae63096d07e47b8ba3c5225625f6c8d98e007b49b907a4ca511aeefaf8ae3cf10ed63bf3a7dc0f7b0c1e48e6af2b158dc1ea12335ab91acaabacc104e79968f89999aec3b694aecc6783dfeb9a8efc140f18583d113454145bfbe1fe480bfb7de71fb394d08f453926208d5d595e09df3fa216fe78a2693c2c2a29cadb2c2e86ae09e912bd2ed18559a0f8b5f131b780fc8037081aa98eed56795f1bb5b44300f73b7ceb080d7c9b022b7246a93f7784aa3475e05e125d50b3a0cee066c609add2716ec88a70e1f0c79344b0cc80a543c28b970a186aefa24e9246882e790053d652b2175565a12916ce13f1865a40d34a9cc6555a7072b091e6e8b9c2c7137bca71cccc56e33281badaa73a30e67ff5ac9f489ab35bff85aa1daa10b23f4ca0d55f5850e6af0c5ac755364dcbd8c8cbd4bc76bfd220cb12d46361ef68dc9f90601a46a56140d19d05fe5be799c3af81340c9f07e252aa1768a5dfb4a0536481313d985d8ecb36cdbaa6891e0608ae5a842d9580400977d8a855308b85d1bd70e57523ca5c153640a2e7a778c9df5ad48e230d881c06e0222bba818738ee67ddb7cc2034d25a3ca5d259be6ad63f6cd84938be096d2ab5df0fa7249b57c7653a2c6a016d2890dbf6620c52e4594358c0711dea1bc6fbddb44f500bcbe64f269bf17e0c6c5d8e18ec56d3519706efb6c868d34643e48e5d05c91f458f8f3e0c6befc8511dfa508f5c26eafce1077a082abf8a868ddd62206f39e125cdfb52be753ac96f39341b797d23a3d173d783932271996f482fb80d8022700ab96efe2df6c19370fdf2030d784578a05594eb7905ab5125fc543713dad95d4467cd76f35de43e79a6eb5ede4edc8afb04ab682cf282ac865165329688e7a9a181cc42f9bc31c0203d5c4f8583f7f03ce0b69a5e7e5af7a87d8477dfe1ec64ec8e1132d7f36d3ce6c41dcbd347a50ba51c16340376f50f093269266f97a0b3570675d1bd54f7fccc8f99b264dcff9d057df961a6a4dc4268791091cc08208bd62e1088ca07ca5a2fa849978036554806fdfd9dcf231b28872715eb7b6f65b5ef064c49f0ad04e5bf4f50612a5f313b65eecf07c2b79f65a8b03058a043fcf4ca62a71027db9c2e5311febf53e8027d92f14ea0958000d1d388a323bdc70f6a2bffedd7d7697523b0c4add0e1234e35629014afd1789288e9ca6d65b49e5e2d31631da7674376781e7be087b9cdb58098744e4d6b9ffc2dd82d02ebe3886b869aae44f7080252dafd6d00718c5ddd1ef66d5a950ecd79a87ff35d286259e758e0a4bc552abe99a19d0abe5614e5e0474b8552c0b30cff0d44c816c7e23bec85bf466f7ab534b38e6d97fda0f42a3e2ad15d0f242b41818d7d0d99118a0c3230288a4fb7d18b19000cc58f46d26fefc703a00e6b5c592ad7e34caf29b9acf1d6cf3eec647b86ef3c5d5a8151914ec82320c546b92139e5c2ef2c7906413a0755d6bdb53441ef21a0d2d1400b4e024f4fd924a600d098f88649190cdb74a2390e497941743b87ff0d3e3016bc0f149b600232efa3a0403cbb6695520ad6aa4393c4f1cf201ac140e4a5e31bfdc1da895b0f38dd25d126cefd05fcde00f6f2afdb4e93c70cc3a6696c660c497b68072c3cfa7132d71a799cc1222c250df2aecee7d7656b888ccf61e9a572f76ba0a7d287ae7490365bd610bf9df142d131ee4324af19fb451e984a79b43026f516bec5e88a6aae9c6d37e13adfd2c99428dbd3dfab9ea008e15d01a2cada5c1e9482fd6e10de25ad362c83c27e913c6f27bed3dc5515d2e65eca95109c001782715fb897f3e572efda7196f96ec781f1e93201202a9596030d1936b25288dedde240d70dd3d01e5cd91e318a1ae3630d136e8e267deaac70079bf3282f93b08d12c9eb3f0b4617119857af8634531c922c75ca8b674e7cdf51a425fc0bb7f77c6a07e6a98293f991d7ba26e994d63cbb40becf54bdb74805006d55210e04bb31e8f97041cc9c345d8cc4783cf40a3007437872583ce7490a408f9d4d85d0fd063140e33078eb143d001f574ab412d8ab0affd504eacc1cf77ad14e2f3b7e78fb9ee66edb99fd6667e51bc522a6b61c0a7e81456097ce62b79fbf12dea8df4356f205f9ca4c0633aed65a0581952802be787bdbde12cd344f6cd0cd21cc3ce7515407051f61a8d686f25dd7dad9b3c8f9bd5ee578dd636028238eff03906b67751b275cd37d39b9c2458fa6b3bfeb9969ea1471ff982287efe8f31e3d50aa2a357c033691c78b5509c93272d674debc6a3a03a0ba7df7aa929888930de1b6a5aee0f599ea50ad079e183667142884be38b6715dbc6638c83a80f95bf9bad4e18bbd900da87964b7199ef9f49e3a1ae030d42107baba0e1170e48cd1b66d0bc63f1bded9748a2b8bea4a7d4b04e2d8dbd3b174d4a822470c2ffe4103fd2ecf0f9986935ae43cc8f2ed1e48ce542b197e6fee4ec1bd6f600a290d4e882b2fef318412aabd3fd1c9a57c313b81340bcded3505c0edd12fb88ec07e3743aaf48d93a3664a038953a3048f267c8f6b130e0d183f982cb4385dedf41e3dd68b0a00a8deb882476fe38cffce5f04c9dfd55a009051ef0608721d429b1f4731708d1c092eebe88382debdd0be1c6cb59ccf8d1951f350df8ca79972b3d35f420fd68b602ecaf29a94a0efe785042e8101d462a78ee0e215c380e7b115b74fe9b99d0762a0798d7e308d8594a158b28476dc1de2f4fa4bb68b9325d4bfb491212331eba8f2fabf611300d21fa9c7941306098a9ef3b5e66a40c3060bdc8f707956bcd95545db971d573b1cd9e4e9252b97d36a8a505855e8189b85cef25b736add58e74a67695e8f8e59a3bd97ed858a7c355ff674fd8402fa271bd3e50ccf88070408d31e76e9f166bd44f58fdfd682f8bdcc389ea33b4eee566f9a7e6174abcae98c0aacffae73c5b29fc5d210e35f7d42270b265ffde2de3d45439f8d71e371be19b0f2954bb9530ea5cc18f525c9c79990da81aac6c69550120d3c8ee98d82d8b6de6e59f86f41347d206411aa3a1cc39f841e8daf6a78f700170a140432126d3cd7c3b53cb592fd3aaaf7a45d02a8a537704cb5ea8d165315757d9477f0d52006525ef830dd7d16e82f9ef127689501ee55e2f69b79de0bab64b8325aa1f4bcae387fe84ed1baeecaa42413f684a1db7a120cb73853838f03565ade441ee66cb5f648e165fe617c539f6dec4f12a5f738171e8971184a9d6a14a123bf3cf888fc9e1253d6f98c26b3061e6358d36bdfdfdc85924b9114aec973f4d0e2d4b0c8cd66bf32fd208bb7485cb9c730c8d6e368fbf8fac16be225bcc8d320980f8f6d73ab1ed01d3db4a7e2c275da0fa6ee3eac4fb6b3831ce90b9d654a5039d0be542c3341ccae50193954a233b81e54a191e6cf1e0685ada89e21723ea1e836441d6b7d3da1d41e4e04f7cf770fdde3086c6dcc28b2bc4527b03fd5ca3fd5ce90c4ae665c34386d6bd423d391ea4a13bf62395846afd7bc8417889c02fe34373f20621d20d4912f1acef23169e7b45c7656643d1961fd1151a2a0df5b73fcb022a83d1b8b9a3669e00924a5af0d63bafb044eaaf09497f09187511254fe0d7343909f2b11ddea84191cbd14db3636c5458227ef53f8bd17bc933190958edcaf90453525b81cb0a2cc3088ae5c19fc7aa71b531ebf141a16bc11853bb82c320d21bd2ecf6556894fc586e253b659ab1545ee63e8a9a2d31765d07bc8ce446316aaf712cac59fa4e9d92e002c4421d2318e8b8dcbd67d1b9ca688d3d204a764e83e2d9b92cecd794b5f4763f482210165786b2892dd3a84b35c9348965de9f34ea2211d6062746c1053cd7d58cbef089c67209f301122fbcebd7ee15f627a78ccec7541a7b23f1f19f00238edadad3850fadea580aacf3f09261be6fd456d19c6c9b32e27f355178f0f8c4c9783b976a5555a198ad175274cbcf57ea23926fd38db0256ada2207115077ab6f0037c67a27532e68122ac57c990c581754736d72a81f4bba6d7a2ca7805873856a38c137e8a0b5741dcf16f3431d086e28ca138e2e75d129bff24137c930fb1f227083ed7055ad54d59d66fd4ec309b84767595a39d418d763b7f9c603d18d7992b2718cff68ad4975d1130b997a3a1f4fd27f583f95bf24cfdd49da653efe58d9a34703acca628938c8f395c701b1037151a3190d2eb174763fa78395b3e56bd716c8fe28d4e71d313e590561bf133c8a804c0c7f19453e0fcbf7315071120141780cf195ed34560ad38ecc7b81274768f96e37d6e655be2227eee8d0d1eea5e0c22502233377f56dab09a3f404e6216d65987066904c075bf09e39221dfc90f8c843abc9b145b9d5d7addf62d9016b8ee38b3a6c3d74f0656b3dc719782f6ea5cfb924e81e632d408d4b41c1aa56794c9a03c3527c826e2dc125b503d567536efef5c33e63507022f9615a503e52105f1357b8268a586e62a435b89f0aa4577baad3bda26c531e16ff99658f36fa86c2708d6a8142baf8db30db3fde91f51fe0ef9a19c9f4d79b16117ea59b8d92a9eb9cc4291f8fb758eea16dfffe3536ec690c02f767f36d4c1e93612dd09d6072501d5823adaa0183773b8ce6a841c1d78e97b364e527e5f2a5e185b1a9edbe425bb7c690d46fa65132d27834b0f1c06f69890fc5be997f7391da6324a2155b447470071f2435097e2ca46c0ee0dbda72d06dff6ef260934d198bad8a010023f2b8a04512732dcbb0ddc7c93cef9657dc4652789ad846958f9d696bd028d7e7f3b5876c25c01af0d252a2064c3a8663deb4d3f4692904152f758035f1746bbf8af5ced2837363de3a923a1ac1c1fb9d5258158d8f0b44e27a893820deb4f721f8cad92d7bdcfe26c098339719ce02bc54cf93b8760b36b6d8b7e2342e5ce7002dd9f46dc89fab1e878d574937e6969cb51a6f8a347ebcd48ce645aebcc2f7ed8e53c2564cdb80dad1040869650f5e16f334c19a479c4ae387648a372650d25101ba0deff30a944ca5cfefbbfaf0984687e5a2cb736b46f8df2a36784f4671f531c11c921cf4701de5b3395df8d88771326b3d7e2ff41b524abc75b9cdbdf40854f31c6a7e7847aea31900bcfe0b1311657ac591daffa773c6945c8444be06ddc0d5b49a4f713e04c7a78c423ca2177dc8c5ea898f5938105e8d5c560a4120a7d1444d546b09650b611013b9680f710cb843396aac34b91da40240098daad3672c45e35ff9bc804557d5b6ff3a46d455c7c8840e158a301b675de37558c4147c08fed3571af29da4d4a9ed9747f3c44a6f2cdfc7ac2be01b4180feb1997638a6fbd86227a0cec71b47312c0e3db7675f5939278008b93eaee1c09d7df8abf9e4d973c22c2b8a5743bec84fca15c855f231f15427b9e7d23f52b74e95577883322224a9cbdaf312afd780982666848d5e6e3dc403fa1061cc2c8914672e963909c14fb3612bca05aec976495c621f7fdb96ecb6714f966e3a44849ec256dbc9656d2d3166764a9608b6a91c9145367e764749d57a58d8e0b196921aa0e4520d6be238ccf9bdc462b63d02f95b36d62b93783f33bc56cb9cb224fccdadba782363b558985bedc9f079fb7bcb7cf91402bfbd8ece7e2840421fd2c1319728022ed81b4f24a9de307b127e09542fbfdf37e320dcf33c701f07cd1a64dfdf1bb3b34f303dff533b1ffa1abd7babc08395039b0f1165f132f5b131a47f51fab324d9502a3266a35cf6dfff372557b73bfb685ea46d2c38375231300ba10c6e16fcc873dc366f1cb7550659ccba00767bee15485c91aeee4a97d7af962d2f44e96e620bb2208410ef8aeb32c024e289668cad3c4e82e9fb0d76bd8d0343bd6fbd3460818594cca97be3d3140a244089b2ef22414b1fe8a4c1cd337532ed215bd7b73bb03753dbf26ec8e6d664dff003797bd34fc72fb6fcfdc916bd62b2ccb7193aee70869499b2349e6a4fcb35a9cba8dd8998de8afa734b854dc71e47f0103b0ff1c38562190def665509c76f037e393f8fe7ae05d8a4030640d99fda6f6e70d08709277e315e35e51a78dd3e1e47ee9cb06b9279989b97f42dae2cfd85296b570c3fe0f2615fadc33b09176b6e8c41978aa118ae407c3d8d12474d1aaab08b4067615d77c4373ac50715d9e9384461eb373790bbfe1b38976047eabb6ba9ecb4950110ceb95fbd11b32ed0b22b6d0c40bdcb44e9a08cca1e29dcf35da2db25606186a000bf157554ba7c55530dc3281336a272d9bc76814e2335db48c9980246214475f4dbc397e46d0b05cb1387d0551599ee0b67d612c085135f89472e99b275a48f7a90d2c6f377d023bc0f2ec69906856d4d05e94892d8aec469f800a76232f6b60fe170bde18df4702ae94556b976390d6aec61e6d017ebabe20fe7d0469b72207aff967865cc8dec893596449c640f486b2a8829d2973f65aadbd8b001f065b43ad57665887e1919f87a7e4d6e16b9beaf6099afffe31dca58f2869e707fa5f04d581ebcb8af9050a14a5a9fb333884e50a444563282118ab9c843f8152a7765901f392b32b22db3867bef3ef05fa41286bffc556e5357ae22bcde91e5a0d80dab8d0d83aa1d60f25b14dec69dcf15f3dc48e677b684c61d51c124bff09702d8e1e663cb87a7efefdbcf3576178e7dd614e3266b7f83f338250ffcf64260c7ca621c4750fe0345483202adab46eeb42779759e4974707b23e12bcc63371a9c1a39e681dd2bb6d2d304f3baefc9b38e16aeb4b33df166c0e19186b0fc8269bd9cd96d5b3adda68ccb9be58963a3865291d767fd6f8f133f30b9404ed1231cfa93d21d5f16941252650f6684b6499adef0aeae110ba35f9c611a08b57e3f219c2bd7bd5ffff509aa7cddd73bc62e681dabd8f15b24fd924f6ab00fbb2b16cc6af67fbeea2960ab6f5f98f1a6d0a870ccf10e3ba73d48e0ef1b38bfd7463b30309683e65dbf90776ab30cbf0e762c86c9864e27ca9a95e15a7b9d0b902f3dff2c8db81373ab7edc5eaf45a6230ff72837bed6fd2f0b3bcf829b5b75bbfa1b18af3c9f7490381eae64b553921c4da40db5a17afee6658acaf6a2eb1d381e1ccd9ec4e68eeae2f3e0d5de21a453ef99d99d65d6a067dff051822b9cacf5f1110e2972e2724c979b0c6c8bf5295716022c47c8f4af702bcfe1060602ba8f4be94815dd22ba2ee0d76f46eb4fd816d7e7b88a37a9cb65f1ef32e6cc6d101de6e94050eed22f6c0299a7cfb74a5f5f6ef4683f071839943017e0b58c8cc5a77251909888ab6f69b0e18b8ed8905654578f1604c620f7d8bcb0a0010a2b71a1b8d11e34f7c674912fbb61fad795b6fd455cf4feeff71d865d92ae41c3a5935d7ee5c28706de5cd4733a26320bc5e79b4352b63d7d320c69a63d9057187799ae483a6e9dc7ce101851cd598319173ab4ac49bf3b25ec8bd9fe8b664c87722223f1ee8c1b613e78729072ebcd51b7b9e3c5dd22b17b0dccf6a177b9fe279f56644476acb27f5c4a7bff77d0416dead2231d8f8ee44e6618ddcc2b9e34919bf21fa986d9e6b9d54c007e2f15293808b065c62aad7f9f42b0f39361528328071c4b5df273d2b41e2b9881a8c215fbb0280fd79a77570f93855d5d795a89613e0b4be1d8b1f50864637471d694ac417216294b08a4226fe098dee8d410bc3828ef27777489b9e6e3701e6ccf13151070b027fb53b00ee3a5e780348f47d314d04b353c76f920c69d571d7b674d2b1f9ad1597bd6f36e5ff82981d2158990e21b7102b20fbdbcbd2c2c25da51aceff00a1e7a56c8f75f9bf3655d6142ac74cbc8ee70ffec7a45bf1c4a3b6a65f629494670a84088a802598909031871dd576a5d47d911b509b0799e7178657dd66943ddc2666b7cae6b996c8b55b7cf0a6b9ce396cc3e262ebb83c2f640ec6a80538823a83fb3b74c8b51a8cbb18b4925b8045530ce8283c962561e3da3f7843720b4dc6afbe5278fe9a964860b88e33aedb298b61910e5c3ea4971e02cf869d5e68e8a95215e0e207af9b7e48f3452dc9aaf0bf15202932e71552a1f79a6482afc0c104fc70f3ffeb153a249620dafb5ef82308e97113ba4aee10301ea19ec5f0f2d643fba39a4a5f039003187255c1cd9a7d54253ab0c6f8c09cf51ea635d945231386fd891d80483ddb4f4d8e68a62a71b61bbd75b74fdff1610949508d33d740a72c633dde4db6a4cdc92a7de18a7b9ceec93ef8e130fbee0b66d7c4d3eb3d92d41f89b3bc7f276f275f827a5f5d4eee0ed7c0a90ca0a6639a974ed1311422372d7a84305ed6154a80f9cf4dc52a717c5ba57aa2e4fc2adb9da2b5c246706777fce38f6aba54534701314df2bb1725ec00b40bf6281ea0f45f3d085836934a8c884bbc3a89fca0240525fbc58969e7772709a3eb827e4da5035c852be598c14a36f71c78ca002bdc4161da2daf8db5303185b9dc97302a2df8f3adb1acfc5a19faa3066318892b44276606f537475b03d28b01182eba9be649c74b35dca086e4bbe0e9d6c5f3edf6c929e3ace7419cc7b106fe74d1b81eb675dd361a8099f8327cb99a72b1b83e194fd90c92450a6525445b7f2aac705920793ea1e0f1b33c754a0460fc681716fa70a383f81c6cf95f49e54baaae984bf931e9bd28942e5c4e90f57d2d398299669af06e62fcf860dec6158982f80331060f24af75ac27bf05e3652a822d6421c26c2dd33ddf1ce60d4c7a74abba565bec2e18b7a5cf21ac63c8271ac2c00ed736bc14998448dc4c19c5f50f9f9c75b4dc546a33c26e8ea26ab2ab05de5f4a346831bf743abd4119079d42df45b461258cbf1ca05370229802f7e0430c5496cac07658ac3ce55ad783a55b3414c0572dc3632a368c9395af43ad25a0e1fa3569366492bb9063a64b77a4d0001208ad093f98c1c3482e97015dcbae76f173bdce59db0bfd1015de911b3b652bae2dfba64f496e7bab5735fc3b683ffe19750b73ea2491b1f7a2be4db9ca703f11c360d7b2ef8f49b9d262900de5476f682bf7d526497f7825cebf9f136a4d6b347d1874fa6fe441fb95d338080b2a5268cfaea8fed039a1900028c4aecf225e0bb328522c2944f2a7281daebb2dd52d312be1c5824cb19317021d10ba3b89d02763677172ce0ae6ca996b147a934a266e75b2bf35d523b7f9eddf0afe102d4ee9db8926d10be781bbaa25b815ea2dad9a9908a827be0c0e5b6b960e99b702d76b2af58a2afe7eb1e2cf30e660cf6296bd11607c33e85fefbff67b0dd74c5110236048da6d92eabda02925f0816ec048cb1333894aa172ee73d5e3c833e3858a0e219debc74d89bda90c70f88bbe41c943375840ceb55064b2f2b239cfc769582cd410f1bdb26fc78d9728a30899b3460405b157a1dcd33b31fb6e2a4113e4bb41214aae4a037f99f8", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x941f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 0s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) kernel console output (not intermixed with test programs): dv_slave_1 (retrying later): interface not active [ 76.249412][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.256523][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.283169][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.294742][ T5120] Bluetooth: hci1: command tx timeout [ 76.300237][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.309743][ T5120] Bluetooth: hci0: command tx timeout [ 76.328385][ T5111] team0: Port device team_slave_0 added [ 76.340364][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.350593][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.357836][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.372107][ T5120] Bluetooth: hci3: command tx timeout [ 76.384563][ T5124] Bluetooth: hci2: command tx timeout [ 76.389787][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.423070][ T5121] team0: Port device team_slave_0 added [ 76.430908][ T5111] team0: Port device team_slave_1 added [ 76.440081][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.451637][ T5124] Bluetooth: hci4: command tx timeout [ 76.486573][ T5121] team0: Port device team_slave_1 added [ 76.550231][ T5116] team0: Port device team_slave_0 added [ 76.615028][ T5122] hsr_slave_0: entered promiscuous mode [ 76.626165][ T5122] hsr_slave_1: entered promiscuous mode [ 76.635663][ T5116] team0: Port device team_slave_1 added [ 76.654737][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.662091][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.693175][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.705733][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.713032][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.739138][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.755893][ T5110] hsr_slave_0: entered promiscuous mode [ 76.762644][ T5110] hsr_slave_1: entered promiscuous mode [ 76.769092][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.777069][ T5110] Cannot create hsr debugfs directory [ 76.810268][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.817365][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.843482][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.856797][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.867829][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.894199][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.925858][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.933101][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.959539][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.009351][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.016761][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.043495][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.143566][ T5121] hsr_slave_0: entered promiscuous mode [ 77.150371][ T5121] hsr_slave_1: entered promiscuous mode [ 77.156793][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.166181][ T5121] Cannot create hsr debugfs directory [ 77.214590][ T5111] hsr_slave_0: entered promiscuous mode [ 77.221405][ T5111] hsr_slave_1: entered promiscuous mode [ 77.228261][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.236749][ T5111] Cannot create hsr debugfs directory [ 77.312300][ T5116] hsr_slave_0: entered promiscuous mode [ 77.318916][ T5116] hsr_slave_1: entered promiscuous mode [ 77.326050][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.334334][ T5116] Cannot create hsr debugfs directory [ 77.827397][ T5110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.842535][ T5110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.863790][ T5110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.884562][ T5110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.933190][ T5111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.956045][ T5111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.989000][ T5111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.007919][ T5111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.104662][ T5122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.126825][ T5122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.141339][ T5122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.174304][ T5116] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.190997][ T5116] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.200978][ T5122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.243205][ T5116] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.255926][ T5116] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.298237][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.372507][ T5124] Bluetooth: hci1: command tx timeout [ 78.373959][ T5120] Bluetooth: hci0: command tx timeout [ 78.416231][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.452717][ T5120] Bluetooth: hci3: command tx timeout [ 78.461858][ T5120] Bluetooth: hci2: command tx timeout [ 78.472919][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.480396][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.503808][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.510994][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.526067][ T5121] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.542020][ T5120] Bluetooth: hci4: command tx timeout [ 78.558329][ T5121] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.572580][ T5121] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.603031][ T5121] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.766896][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.787273][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.845231][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.886581][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.938565][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.951024][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.958291][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.974077][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.046412][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.054245][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.068510][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.075707][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.086856][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.094066][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.124159][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.131332][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.181314][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.188871][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.256059][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.358696][ T5111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.496581][ T5110] veth0_vlan: entered promiscuous mode [ 79.526551][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.599342][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.660250][ T5110] veth1_vlan: entered promiscuous mode [ 79.723490][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.730785][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.749781][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.757066][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.869887][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.889428][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.998492][ T5110] veth0_macvtap: entered promiscuous mode [ 80.030804][ T5110] veth1_macvtap: entered promiscuous mode [ 80.089460][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.166344][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.214682][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.262027][ T5116] veth0_vlan: entered promiscuous mode [ 80.270974][ T5110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.307357][ T5110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.324422][ T5110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.333683][ T5110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.370085][ T5116] veth1_vlan: entered promiscuous mode [ 80.452299][ T5120] Bluetooth: hci1: command tx timeout [ 80.461217][ T5120] Bluetooth: hci0: command tx timeout [ 80.479703][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.487416][ T5122] veth0_vlan: entered promiscuous mode [ 80.532246][ T5124] Bluetooth: hci3: command tx timeout [ 80.537810][ T5120] Bluetooth: hci2: command tx timeout [ 80.552753][ T5122] veth1_vlan: entered promiscuous mode [ 80.569893][ T5116] veth0_macvtap: entered promiscuous mode [ 80.588203][ T5116] veth1_macvtap: entered promiscuous mode [ 80.611809][ T5120] Bluetooth: hci4: command tx timeout [ 80.626838][ T5111] veth0_vlan: entered promiscuous mode [ 80.676634][ T5111] veth1_vlan: entered promiscuous mode [ 80.740279][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.748872][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.768336][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.779709][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.796624][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.808603][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.819602][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.831740][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.889692][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.898350][ T5122] veth0_macvtap: entered promiscuous mode [ 80.904562][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.930245][ T5121] veth0_vlan: entered promiscuous mode [ 80.940548][ T5116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.950766][ T5116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.959888][ T5116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.969065][ T5116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.019443][ T5122] veth1_macvtap: entered promiscuous mode [ 81.033042][ T5111] veth0_macvtap: entered promiscuous mode [ 81.053669][ T5121] veth1_vlan: entered promiscuous mode [ 81.104499][ T5111] veth1_macvtap: entered promiscuous mode [ 81.150064][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.190966][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.201216][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.212286][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.224603][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.255423][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.274099][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.284593][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.302040][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.320241][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.354352][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.367080][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.377775][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.388794][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.400372][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.412757][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.425429][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.448008][ T5122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.457406][ T5122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.467136][ T5122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.478341][ T5122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.490514][ T5121] veth0_macvtap: entered promiscuous mode [ 81.507908][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.518570][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.529173][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.539993][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.550394][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.560981][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.578757][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.594070][ T5111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.602939][ T5111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.617207][ T5111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.628712][ T5111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.648164][ T5121] veth1_macvtap: entered promiscuous mode [ 81.758804][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.774867][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.904465][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.916991][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.928587][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.940341][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.961541][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.982491][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.998143][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.009187][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.023600][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.053231][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.068580][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.079386][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.090225][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.101917][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.112822][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.124343][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.149102][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.162772][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.186524][ T2423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.231073][ T2423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.304285][ T5121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.329302][ T5121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.343524][ T5121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.356578][ T5121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.399404][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.456460][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.532801][ T5124] Bluetooth: hci1: command tx timeout [ 82.538315][ T5120] Bluetooth: hci0: command tx timeout [ 82.583601][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.612257][ T5124] Bluetooth: hci3: command tx timeout [ 82.617872][ T5120] Bluetooth: hci2: command tx timeout [ 82.630728][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.693925][ T5120] Bluetooth: hci4: command tx timeout [ 82.906542][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.934037][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.055070][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.072542][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.080616][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.364488][ T5224] loop0: detected capacity change from 0 to 1024 [ 83.661662][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.994165][ T12] hfsplus: b-tree write err: -5, ino 4 [ 84.007574][ T2423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.044030][ T2423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.426921][ T5246] loop4: detected capacity change from 0 to 512 [ 85.633712][ T5163] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.828060][ T5240] loop0: detected capacity change from 0 to 32768 [ 86.090309][ T5257] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 86.109425][ T5238] loop3: detected capacity change from 0 to 32768 [ 86.170546][ T5240] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 86.192480][ T5240] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 86.201006][ T5240] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 86.201006][ T5240] running recovery passes: check_allocations [ 86.259153][ T5238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5238) [ 86.302820][ T5240] bcachefs (loop0): accounting_read... done [ 86.310087][ T5240] bcachefs (loop0): alloc_read... done [ 86.326292][ T5240] bcachefs (loop0): stripes_read... done [ 86.335369][ T5240] bcachefs (loop0): snapshots_read... done [ 86.342657][ T5240] bcachefs (loop0): check_allocations... [ 86.378951][ T5240] btree ptr not marked in member info btree allocated bitmap [ 86.379000][ T5240] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 56308231fb2a3a03 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 86.467889][ T5238] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.468142][ T5238] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 86.468234][ T5238] BTRFS info (device loop3): using free-space-tree [ 86.650513][ T5240] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 8 [ 86.717846][ T5240] bcachefs (loop0): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 86.749472][ T5240] bcachefs (loop0): bch2_gc_btree(): error fsck_errors_not_fixed [ 86.985580][ T5278] loop2: detected capacity change from 0 to 1024 [ 87.444730][ T5238] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 87.462233][ T5238] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 87.494825][ T5240] bcachefs (loop0): bch2_gc_btrees(): error fsck_errors_not_fixed [ 87.629873][ T8] cfg80211: failed to load regulatory.db [ 87.634212][ T5240] bcachefs (loop0): bch2_check_allocations(): error fsck_errors_not_fixed [ 87.639325][ T5166] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.669179][ T5240] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 87.669779][ T11] hfsplus: b-tree write err: -5, ino 4 [ 87.678786][ T5240] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 87.703629][ T5240] bcachefs (loop0): shutting down [ 87.709136][ T5238] BTRFS error (device loop3): open_ctree failed [ 87.847605][ T5166] usb 5-1: Using ep0 maxpacket: 16 [ 87.876227][ T5240] bcachefs (loop0): shutdown complete [ 87.889371][ T5166] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 87.937182][ T5166] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 87.957988][ T5283] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.994578][ T5166] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 88.019425][ T5166] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 88.036994][ T5284] bridge0: entered promiscuous mode [ 88.049662][ T5166] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 88.071555][ T5284] macsec1: entered promiscuous mode [ 88.081935][ T5166] usb 5-1: config 1 interface 0 has no altsetting 0 [ 88.108002][ T5284] bridge0: left promiscuous mode [ 88.121738][ T5166] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 88.131019][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.289947][ T5166] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 88.501938][ T5166] scsi host1: usb-storage 5-1:1.0 [ 88.541940][ T5293] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.741400][ T5263] loop4: detected capacity change from 0 to 128 [ 88.785559][ T5248] loop1: detected capacity change from 0 to 32768 [ 88.868361][ T5263] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.890655][ T5263] ext4 filesystem being mounted at /root/syzkaller-testdir3802982692/syzkaller.iZ5Mda/2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.179434][ T5163] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 89.221533][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.673789][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.851772][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 89.898950][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.921701][ T5169] usb 5-1: USB disconnect, device number 2 [ 89.954531][ T12] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 89.994544][ T45] usb 4-1: config 0 descriptor?? [ 90.048888][ T45] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 90.343557][ T5318] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.588084][ T5111] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.073306][ T5342] mmap: syz-executor.2 (5342) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.538817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #110!!! [ 91.642228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 91.651739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 91.660060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 91.670594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18!!! [ 91.744803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.927195][ T5166] usb 4-1: USB disconnect, device number 2 [ 91.944542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.961860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.962215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.996750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.299909][ T5360] net veth1_virt_wifi ¢: renamed from virt_wifi0 [ 92.520841][ T5367] ======================================================= [ 92.520841][ T5367] WARNING: The mand mount option has been deprecated and [ 92.520841][ T5367] and is ignored by this kernel. Remove the mand [ 92.520841][ T5367] option from the mount to silence this warning. [ 92.520841][ T5367] ======================================================= [ 92.737587][ T5374] ptrace attach of "/root/syz-executor.3 exec"[5122] was attempted by "/root/syz-executor.3 exec"[5374] [ 93.417957][ T5375] loop1: detected capacity change from 0 to 8192 [ 93.843717][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.864480][ T5393] vxcan1: entered promiscuous mode [ 93.919154][ T5393] vxcan1: entered allmulticast mode [ 93.948346][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.141058][ T5395] vxcan1: left promiscuous mode [ 94.458112][ T5395] vxcan1: left allmulticast mode [ 94.818222][ T5407] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.996779][ T5407] netlink: 'syz-executor.2': attribute type 26 has an invalid length. [ 95.054306][ T5413] net veth1_virt_wifi ¢: renamed from virt_wifi0 [ 96.545048][ T29] audit: type=1326 audit(1717710323.075:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1041a7cf69 code=0x7fc00000 [ 96.638215][ T5428] ptrace attach of "/root/syz-executor.0 exec"[5116] was attempted by "/root/syz-executor.0 exec"[5428] [ 97.577767][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.614301][ T5443] hsr_slave_0: entered allmulticast mode [ 97.633329][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.657892][ T5447] hsr_slave_0: left allmulticast mode [ 97.836935][ T5444] loop0: detected capacity change from 0 to 8192 [ 98.975820][ T5456] net veth1_virt_wifi ¢: renamed from virt_wifi0 [ 99.011682][ T5149] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.252904][ T5149] usb 5-1: Using ep0 maxpacket: 32 [ 99.313795][ T5149] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.341497][ T5149] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.383482][ T5149] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.415032][ T5149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.819946][ T5149] usb 5-1: Product: syz [ 99.824305][ T5149] usb 5-1: Manufacturer: syz [ 99.828928][ T5149] usb 5-1: SerialNumber: syz [ 100.077807][ T5149] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 100.251602][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.414442][ T5149] usb 5-1: USB disconnect, device number 3 [ 100.444805][ T5149] usblp0: removed [ 100.564840][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.608608][ T8] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 100.622322][ T5486] hsr_slave_1: entered allmulticast mode [ 100.636090][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.657686][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.733345][ T8] usb 1-1: config 0 descriptor?? [ 100.757694][ T5490] hsr_slave_1: left allmulticast mode [ 100.786864][ T5491] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 100.994184][ T8] usb 1-1: Cannot read MAC address [ 101.015774][ T8] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 101.145768][ T8] usb 1-1: USB disconnect, device number 2 [ 101.189730][ T5496] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.371357][ T29] audit: type=1326 audit(1717710327.895:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 101.496558][ T29] audit: type=1326 audit(1717710327.995:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 102.006257][ T29] audit: type=1326 audit(1717710328.525:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 103.021206][ T5528] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.038242][ T5528] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.054106][ T5528] vlan0: entered allmulticast mode [ 103.237245][ T5528] veth0_vlan: entered allmulticast mode [ 103.474107][ T5534] loop3: detected capacity change from 0 to 1024 [ 103.495680][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.073217][ T11] hfsplus: b-tree write err: -5, ino 4 [ 104.164208][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 104.204074][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.228011][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.253387][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.258691][ T5538] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.270123][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.321656][ T8] usb 2-1: Product: syz [ 104.325901][ T8] usb 2-1: Manufacturer: syz [ 104.330543][ T8] usb 2-1: SerialNumber: syz [ 104.396166][ T29] audit: type=1326 audit(1717710330.925:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 104.456590][ T29] audit: type=1326 audit(1717710330.955:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 104.504571][ T5166] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.582145][ T8] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 104.616942][ T8] usb 2-1: USB disconnect, device number 2 [ 104.643467][ T8] usblp0: removed [ 104.703780][ T5166] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 104.719675][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.746087][ T5166] usb 5-1: config 0 descriptor?? [ 104.984848][ T5166] usb 5-1: Cannot read MAC address [ 104.990222][ T5166] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 105.039127][ T5166] usb 5-1: USB disconnect, device number 4 [ 105.059439][ T29] audit: type=1326 audit(1717710331.585:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 105.136452][ T29] audit: type=1326 audit(1717710331.585:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 105.229754][ T29] audit: type=1326 audit(1717710331.585:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 105.370094][ T29] audit: type=1326 audit(1717710331.585:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 105.462628][ T29] audit: type=1326 audit(1717710331.585:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 105.575048][ T29] audit: type=1326 audit(1717710331.585:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 106.655438][ T5570] loop3: detected capacity change from 0 to 1024 [ 107.333867][ T58] hfsplus: b-tree write err: -5, ino 4 [ 107.554697][ T5583] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.700235][ T29] audit: type=1326 audit(1717710334.225:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8361e7cf69 code=0x7fc00000 [ 107.733705][ T29] audit: type=1326 audit(1717710334.255:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8361e7cf69 code=0x7fc00000 [ 107.761630][ T5169] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.801586][ T5166] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.971636][ T5169] usb 3-1: Using ep0 maxpacket: 32 [ 107.981015][ T5169] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.993274][ T5166] usb 4-1: Using ep0 maxpacket: 32 [ 108.000529][ T5169] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.022172][ T5166] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.036688][ T5169] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 108.042738][ T5166] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.066727][ T5166] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 108.077902][ T5166] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 108.089115][ T5166] usb 4-1: Product: syz [ 108.098669][ T5166] usb 4-1: Manufacturer: syz [ 108.114072][ T5169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.138719][ T5169] usb 3-1: Product: syz [ 108.149923][ T5166] hub 4-1:4.0: USB hub found [ 108.152801][ T5169] usb 3-1: Manufacturer: syz [ 108.165142][ T5169] usb 3-1: SerialNumber: syz [ 108.365594][ T5166] hub 4-1:4.0: 2 ports detected [ 108.386426][ T29] audit: type=1326 audit(1717710334.905:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8361e7cf69 code=0x7fc00000 [ 108.446539][ T5169] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 108.511643][ T5169] usb 3-1: USB disconnect, device number 2 [ 108.536167][ T5169] usblp0: removed [ 109.320521][ T5601] net veth1_virt_wifi ¢: renamed from virt_wifi0 [ 109.894181][ T8] hub 4-1:4.0: activate --> -90 [ 110.109013][ T5595] loop4: detected capacity change from 0 to 32768 [ 110.171827][ T5609] loop0: detected capacity change from 0 to 1764 [ 110.295076][ T5595] [ 110.295076][ T5595] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.295076][ T5595] [ 110.506415][ T5595] [ 110.506415][ T5595] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.506415][ T5595] [ 110.522375][ T5595] [ 110.522375][ T5595] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.522375][ T5595] [ 110.567858][ T5595] [ 110.567858][ T5595] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.567858][ T5595] [ 110.626971][ T5595] [ 110.626971][ T5595] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.626971][ T5595] [ 110.676748][ T5595] [ 110.676748][ T5595] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.676748][ T5595] [ 110.736918][ T5149] usb 4-1: USB disconnect, device number 3 [ 110.743081][ T8] hub 4-1:4.0: hub_ext_port_status failed (err = -71) [ 110.778161][ T5595] [ 110.778161][ T5595] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.778161][ T5595] [ 110.894768][ T113] [ 110.894768][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.894768][ T113] [ 110.961161][ T5111] [ 110.961161][ T5111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.961161][ T5111] [ 111.002684][ T5111] [ 111.002684][ T5111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.002684][ T5111] [ 111.072276][ T5623] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.191681][ T29] audit: type=1326 audit(1717710337.715:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 111.214458][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.247902][ T29] audit: type=1326 audit(1717710337.765:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 111.893660][ T29] audit: type=1326 audit(1717710338.425:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 112.311626][ T5202] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.511834][ T5202] usb 4-1: Using ep0 maxpacket: 32 [ 112.547043][ T5202] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.580963][ T5202] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.600644][ T5202] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.618592][ T5202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.639701][ T5202] usb 4-1: Product: syz [ 112.646258][ T5202] usb 4-1: Manufacturer: syz [ 112.655137][ T5202] usb 4-1: SerialNumber: syz [ 112.920471][ T5202] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.975467][ T5202] usb 4-1: USB disconnect, device number 4 [ 113.027894][ T5202] usblp0: removed [ 114.304623][ T5670] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.443825][ T29] audit: type=1326 audit(1717710340.955:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5668 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8361e7cf69 code=0x7fc00000 [ 114.525528][ T29] audit: type=1326 audit(1717710340.955:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5668 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8361e7cf69 code=0x7fc00000 [ 114.548300][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.126029][ T29] audit: type=1326 audit(1717710341.645:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5668 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8361e7cf69 code=0x7fc00000 [ 115.132441][ T5655] loop4: detected capacity change from 0 to 32768 [ 115.148914][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.201660][ T29] audit: type=1326 audit(1717710341.645:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5668 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8361e7cf69 code=0x7fc00000 [ 115.303668][ T5655] [ 115.303668][ T5655] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.303668][ T5655] [ 115.366993][ T5655] [ 115.366993][ T5655] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.366993][ T5655] [ 115.393407][ T5655] [ 115.393407][ T5655] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.393407][ T5655] [ 115.446542][ T5655] [ 115.446542][ T5655] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.446542][ T5655] [ 115.497836][ T5655] [ 115.497836][ T5655] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.497836][ T5655] [ 115.568021][ T5655] [ 115.568021][ T5655] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.568021][ T5655] [ 115.685507][ T5655] [ 115.685507][ T5655] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.685507][ T5655] [ 115.755024][ T112] [ 115.755024][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.755024][ T112] [ 115.850990][ T5111] [ 115.850990][ T5111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.850990][ T5111] [ 115.890005][ T5111] [ 115.890005][ T5111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.890005][ T5111] [ 117.554918][ T5120] Bluetooth: min 33 > max 0 [ 117.910744][ T5713] loop4: detected capacity change from 0 to 8 [ 117.982138][ T5713] squashfs image failed sanity check [ 118.062359][ T5265] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 119.139943][ T5120] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 119.836415][ T5120] Bluetooth: hci3: command tx timeout [ 123.851032][ T5775] loop3: detected capacity change from 0 to 32768 [ 123.929167][ T5775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5775) [ 124.060227][ T5775] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.091644][ T5775] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 124.128241][ T5775] BTRFS info (device loop3): using free-space-tree [ 124.907383][ T5775] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 124.997802][ T5775] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 125.222354][ T5775] BTRFS error (device loop3): open_ctree failed [ 127.352911][ T5846] net veth1_virt_wifi ¢: renamed from virt_wifi0 [ 130.381998][ T5871] gretap0: entered promiscuous mode [ 130.388608][ T5871] vlan2: entered promiscuous mode [ 130.424726][ T5871] gretap0: left promiscuous mode [ 130.675886][ T5877] loop0: detected capacity change from 0 to 512 [ 130.762707][ T5877] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 15 [ 130.828492][ T5877] ext4_test_bit(bit=14, block=18) = 1 [ 130.845043][ T5877] is_bad_inode(inode)=0 [ 130.857857][ T5877] NEXT_ORPHAN(inode)=1023 [ 130.883352][ T5877] max_ino=32 [ 130.895787][ T5877] i_nlink=0 [ 130.918336][ T5877] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.0: corrupted xattr block 19: e_value size too large [ 130.978589][ T5877] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 131.004424][ T5877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.036455][ T5877] ext4 filesystem being mounted at /root/syzkaller-testdir4019020302/syzkaller.qT0lvx/42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.165969][ T5877] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 131.241260][ T5886] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.295111][ T5116] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.394324][ T29] audit: type=1326 audit(1717710357.925:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 131.502029][ T29] audit: type=1326 audit(1717710357.965:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 132.050131][ T29] audit: type=1326 audit(1717710358.575:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 133.346937][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.591754][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.296479][ T5926] loop0: detected capacity change from 0 to 512 [ 134.345770][ T5926] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 134.421689][ T5926] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 134.478920][ T5926] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 134.499920][ T5926] EXT4-fs (loop0): 1 truncate cleaned up [ 134.508336][ T5926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.202256][ T5116] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.543975][ T5924] loop3: detected capacity change from 0 to 32768 [ 135.913860][ T5924] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 135.930517][ T5924] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 135.940485][ T5924] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 135.940485][ T5924] running recovery passes: check_allocations [ 136.046064][ T5924] bcachefs (loop3): accounting_read... done [ 136.054899][ T5924] bcachefs (loop3): alloc_read... done [ 136.073251][ T5924] bcachefs (loop3): stripes_read... done [ 136.092040][ T5924] bcachefs (loop3): snapshots_read... done [ 136.098055][ T5924] bcachefs (loop3): check_allocations... [ 136.114813][ T5924] btree ptr not marked in member info btree allocated bitmap [ 136.114841][ T5924] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4fe84214937890c3 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 136.153025][ T5924] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 10 [ 136.162972][ T5924] bcachefs (loop3): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 136.171321][ T5924] bcachefs (loop3): bch2_gc_btree(): error fsck_errors_not_fixed [ 136.180388][ T5924] bcachefs (loop3): bch2_gc_btrees(): error fsck_errors_not_fixed [ 136.211839][ T5924] bcachefs (loop3): bch2_check_allocations(): error fsck_errors_not_fixed [ 136.220572][ T5924] bcachefs (loop3): bch2_fs_recovery(): error fsck_errors_not_fixed [ 136.235137][ T5924] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 136.247493][ T5924] bcachefs (loop3): shutting down [ 136.280677][ T5169] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.329682][ T5924] bcachefs (loop3): shutdown complete [ 136.502143][ T5169] usb 3-1: Using ep0 maxpacket: 32 [ 136.519341][ T5169] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.550239][ T5169] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.574087][ T5169] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 136.599639][ T5169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.649311][ T5169] hub 3-1:4.0: USB hub found [ 136.849157][ T5169] hub 3-1:4.0: 2 ports detected [ 137.062718][ T5169] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 137.069598][ T5169] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 137.203247][ T5169] usb 3-1: USB disconnect, device number 3 [ 138.474068][ T5976] syz-executor.1[5976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.486622][ T5976] syz-executor.1[5976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.765372][ T5988] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.914495][ T29] audit: type=1326 audit(1717710365.445:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 138.986855][ T29] audit: type=1326 audit(1717710365.475:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 139.570221][ T29] audit: type=1326 audit(1717710366.095:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 142.584785][ T6038] Cannot find del_set index 0 as target [ 142.661627][ T29] audit: type=1800 audit(1717710369.185:30): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 142.777901][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.802034][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.854534][ T6047] syz-executor.4[6047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.854690][ T6047] syz-executor.4[6047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.973463][ T6048] loop0: detected capacity change from 0 to 512 [ 143.079026][ T6048] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 15 [ 143.100716][ T6048] ext4_test_bit(bit=14, block=18) = 1 [ 143.110538][ T6048] is_bad_inode(inode)=0 [ 143.123480][ T6048] NEXT_ORPHAN(inode)=1023 [ 143.128372][ T6048] max_ino=32 [ 143.140653][ T6048] i_nlink=0 [ 143.241067][ T6048] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.0: corrupted xattr block 19: e_value size too large [ 143.271615][ T6048] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 143.284368][ T6048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.297155][ T6048] ext4 filesystem being mounted at /root/syzkaller-testdir4019020302/syzkaller.qT0lvx/60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.435933][ T5116] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.488122][ T6052] loop1: detected capacity change from 0 to 512 [ 143.548066][ T6052] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.800900][ T6052] EXT4-fs (loop1): 1 truncate cleaned up [ 143.875227][ T6052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.105104][ T6062] loop2: detected capacity change from 0 to 1024 [ 145.064920][ T2862] hfsplus: b-tree write err: -5, ino 4 [ 146.224776][ T6080] Cannot find del_set index 0 as target [ 146.256164][ T29] audit: type=1800 audit(1717710372.785:31): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1946 res=0 errno=0 [ 146.264005][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.351813][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.769319][ T5110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.894415][ T6086] loop4: detected capacity change from 0 to 512 [ 146.951651][ T6086] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 15 [ 147.064149][ T6086] ext4_test_bit(bit=14, block=18) = 1 [ 147.069604][ T6086] is_bad_inode(inode)=0 [ 147.134687][ T6086] NEXT_ORPHAN(inode)=1023 [ 147.141681][ T6086] max_ino=32 [ 147.151823][ T6086] i_nlink=0 [ 147.188572][ T6086] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.4: corrupted xattr block 19: e_value size too large [ 147.237958][ T6086] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 147.271370][ T6086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.327763][ T6086] ext4 filesystem being mounted at /root/syzkaller-testdir3802982692/syzkaller.iZ5Mda/50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.675768][ T6104] loop2: detected capacity change from 0 to 1024 [ 148.066808][ T5111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.343170][ T12] hfsplus: b-tree write err: -5, ino 4 [ 149.406138][ T6122] syz-executor.2[6122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.406281][ T6122] syz-executor.2[6122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.606857][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.641029][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.651768][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.662374][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.672249][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.680202][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.768931][ T6133] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.863309][ T5110] syz-executor.1 (5110) used greatest stack depth: 18608 bytes left [ 150.722239][ T6148] loop4: detected capacity change from 0 to 1024 [ 151.504832][ T2862] hfsplus: b-tree write err: -5, ino 4 [ 151.791859][ T5124] Bluetooth: hci0: command tx timeout [ 151.917357][ T6132] chnl_net:caif_netlink_parms(): no params data found [ 152.011743][ T6163] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.216596][ T29] audit: type=1326 audit(1717710378.735:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 152.240116][ T29] audit: type=1326 audit(1717710378.745:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 152.392484][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.404044][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.412584][ T29] audit: type=1326 audit(1717710378.865:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 152.414629][ T6132] bridge_slave_0: entered allmulticast mode [ 152.474800][ T6132] bridge_slave_0: entered promiscuous mode [ 152.537201][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.591243][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.732894][ T6132] bridge_slave_1: entered allmulticast mode [ 152.744202][ T6132] bridge_slave_1: entered promiscuous mode [ 152.824070][ T6178] loop3: detected capacity change from 0 to 512 [ 152.859074][ T6178] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 15 [ 152.885014][ T6178] ext4_test_bit(bit=14, block=18) = 1 [ 152.926246][ T6178] is_bad_inode(inode)=0 [ 152.930592][ T6178] NEXT_ORPHAN(inode)=1023 [ 152.936762][ T6178] max_ino=32 [ 152.941665][ T6178] i_nlink=0 [ 152.955479][ T6178] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.3: corrupted xattr block 19: e_value size too large [ 152.981980][ T6178] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 153.070279][ T6132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.073939][ T6178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.125880][ T6178] ext4 filesystem being mounted at /root/syzkaller-testdir2033564634/syzkaller.0AyR8a/64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.136834][ T6132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.812483][ T5124] Bluetooth: hci0: command tx timeout [ 154.247489][ T6191] loop4: detected capacity change from 0 to 1024 [ 154.330774][ T5122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.513746][ T11] hfsplus: b-tree write err: -5, ino 4 [ 154.572534][ T6132] team0: Port device team_slave_0 added [ 154.588188][ T6132] team0: Port device team_slave_1 added [ 154.750716][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.802111][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.885524][ T6132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.922630][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.948146][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.058943][ T6132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.574426][ T6203] syz-executor.4[6203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.580615][ T6203] syz-executor.4[6203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.582107][ T6132] hsr_slave_0: entered promiscuous mode [ 155.650978][ T6132] hsr_slave_1: entered promiscuous mode [ 155.672299][ T6132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.746556][ T6132] Cannot create hsr debugfs directory [ 155.891511][ T5124] Bluetooth: hci0: command tx timeout [ 156.682729][ T6132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.913591][ T6132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.163825][ T6225] loop3: detected capacity change from 0 to 512 [ 157.184697][ T6132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.246320][ T6225] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 15 [ 157.314838][ T6225] ext4_test_bit(bit=14, block=18) = 1 [ 157.358848][ T6225] is_bad_inode(inode)=0 [ 157.450681][ T6225] NEXT_ORPHAN(inode)=1023 [ 157.460994][ T6225] max_ino=32 [ 157.464429][ T6132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.539558][ T6225] i_nlink=0 [ 157.548605][ T6225] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.3: corrupted xattr block 19: e_value size too large [ 157.616667][ T6225] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 157.681121][ T6225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.726478][ T6225] ext4 filesystem being mounted at /root/syzkaller-testdir2033564634/syzkaller.0AyR8a/71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.869910][ T5122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.926044][ T6132] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.971633][ T5124] Bluetooth: hci0: command tx timeout [ 158.102719][ T6132] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.165083][ T6132] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.255302][ T6237] loop0: detected capacity change from 0 to 1024 [ 159.899018][ T6235] sched: RT throttling activated [ 159.944419][ T6132] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 160.221039][ T1048] hfsplus: b-tree write err: -5, ino 4 [ 160.282329][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.282723][ T6243] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.370425][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.415700][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.422952][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.506447][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.513752][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.551470][ T29] audit: type=1326 audit(1717710387.065:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 160.604974][ T29] audit: type=1326 audit(1717710387.075:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 160.939700][ T29] audit: type=1326 audit(1717710387.465:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 161.042624][ T6132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.233003][ T6132] veth0_vlan: entered promiscuous mode [ 161.320719][ T6132] veth1_vlan: entered promiscuous mode [ 161.532643][ T6132] veth0_macvtap: entered promiscuous mode [ 161.573249][ T6132] veth1_macvtap: entered promiscuous mode [ 161.628628][ T6257] syz-executor.3[6257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.629853][ T6257] syz-executor.3[6257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.697854][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.770228][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.802740][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.831327][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.860014][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.889043][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.918368][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.936835][ T6241] loop2: detected capacity change from 0 to 32768 [ 161.941520][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.983985][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.007860][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.029897][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.058383][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.078251][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.100549][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.116570][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.117396][ T6247] loop0: detected capacity change from 0 to 32768 [ 162.128886][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.176263][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.196248][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.211140][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.223281][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.253731][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.269968][ T6247] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 162.274943][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.358384][ T6132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.374831][ T6132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.385618][ T6132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.396621][ T6132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.438453][ T6247] XFS (loop0): Ending clean mount [ 162.549194][ T6247] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 [ 162.649990][ T6247] XFS (loop0): Unmount and run xfs_repair [ 162.684671][ T6247] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 162.740329][ T6247] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 162.796516][ T6247] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 162.841239][ T6247] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 162.873830][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.897265][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.911219][ T6247] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 163.017641][ T6247] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 163.041986][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.048321][ T6247] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 163.065591][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.204703][ T6247] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 163.297657][ T6247] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 163.372007][ T6247] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74 [ 163.524131][ T6247] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 163.591863][ T6247] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 163.974179][ T5116] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 164.660996][ T6296] loop0: detected capacity change from 0 to 512 [ 164.725541][ T6296] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 15 [ 164.803408][ T6296] ext4_test_bit(bit=14, block=18) = 1 [ 164.808871][ T6296] is_bad_inode(inode)=0 [ 164.816837][ T6296] NEXT_ORPHAN(inode)=1023 [ 164.821228][ T6296] max_ino=32 [ 164.824882][ T6296] i_nlink=0 [ 164.836769][ T6296] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.0: corrupted xattr block 19: e_value size too large [ 164.886509][ T6296] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 164.928307][ T6296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.991639][ T6296] ext4 filesystem being mounted at /root/syzkaller-testdir4019020302/syzkaller.qT0lvx/72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.136017][ T5116] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.143710][ T6310] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.294118][ T29] audit: type=1326 audit(1717710392.815:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 166.406494][ T29] audit: type=1326 audit(1717710392.815:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 166.966884][ T29] audit: type=1326 audit(1717710393.495:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 167.361862][ T5149] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 167.630189][ T6329] loop1: detected capacity change from 0 to 1024 [ 168.261765][ T2462] hfsplus: b-tree write err: -5, ino 4 [ 168.309342][ T5149] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 168.388457][ T5149] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.443096][ T5149] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.492804][ T5149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.511722][ T6322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.833315][ T45] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 168.856083][ T6341] syz-executor.4[6341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.856585][ T6341] syz-executor.4[6341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.174822][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 169.214515][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 169.387408][ T6353] 9pnet_fd: Insufficient options for proto=fd [ 169.430351][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 169.521734][ T8] usb 4-1: USB disconnect, device number 5 [ 169.659860][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 169.694392][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 169.778284][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 169.819029][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 169.887738][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 169.935690][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 169.977071][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 170.010530][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 170.038072][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 170.091948][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.129526][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 170.174464][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 170.218404][ T45] usb 3-1: string descriptor 0 read error: -71 [ 170.242927][ T45] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 170.282126][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.344082][ T45] usb 3-1: can't set config #168, error -71 [ 170.373302][ T45] usb 3-1: USB disconnect, device number 4 [ 170.544182][ T6342] syz-executor.0: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 170.595249][ T6342] CPU: 1 PID: 6342 Comm: syz-executor.0 Tainted: G W 6.10.0-rc2-next-20240606-syzkaller #0 [ 170.606690][ T6342] Tainted: [W]=WARN [ 170.610530][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 170.620644][ T6342] Call Trace: [ 170.623978][ T6342] [ 170.626971][ T6342] dump_stack_lvl+0x241/0x360 [ 170.631739][ T6342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.637008][ T6342] ? __pfx__printk+0x10/0x10 [ 170.641673][ T6342] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 170.648137][ T6342] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 170.654720][ T6342] warn_alloc+0x278/0x410 [ 170.659155][ T6342] ? __pfx_warn_alloc+0x10/0x10 [ 170.664090][ T6342] ? xskq_create+0xb6/0x170 [ 170.668679][ T6342] ? __get_vm_area_node+0x23d/0x270 [ 170.674186][ T6342] __vmalloc_node_range_noprof+0x69f/0x1460 [ 170.680174][ T6342] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 170.686662][ T6342] ? __kasan_kmalloc+0x98/0xb0 [ 170.691494][ T6342] ? xskq_create+0x54/0x170 [ 170.696064][ T6342] vmalloc_user_noprof+0x74/0x80 [ 170.701062][ T6342] ? xskq_create+0xb6/0x170 [ 170.705628][ T6342] xskq_create+0xb6/0x170 [ 170.710023][ T6342] xsk_init_queue+0xa1/0x100 [ 170.714669][ T6342] xsk_setsockopt+0x598/0x950 [ 170.719400][ T6342] ? __pfx_xsk_setsockopt+0x10/0x10 [ 170.724629][ T6342] ? __pfx_bpf_lsm_socket_setsockopt+0x10/0x10 [ 170.730819][ T6342] ? aa_label_sk_perm+0x163/0x6d0 [ 170.735872][ T6342] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 170.741450][ T6342] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 170.746944][ T6342] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 170.752550][ T6342] ? security_socket_setsockopt+0x87/0xb0 [ 170.758318][ T6342] ? __pfx_xsk_setsockopt+0x10/0x10 [ 170.763636][ T6342] do_sock_setsockopt+0x3af/0x720 [ 170.768722][ T6342] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 170.774299][ T6342] ? __fget_files+0x29/0x470 [ 170.778912][ T6342] ? __fget_files+0x3f6/0x470 [ 170.783636][ T6342] __sys_setsockopt+0x1ae/0x250 [ 170.788539][ T6342] __x64_sys_setsockopt+0xb5/0xd0 [ 170.793630][ T6342] do_syscall_64+0xf3/0x230 [ 170.798210][ T6342] ? clear_bhb_loop+0x35/0x90 [ 170.802939][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.809299][ T6342] RIP: 0033:0x7fd2c6a7cf69 [ 170.813796][ T6342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 170.833438][ T6342] RSP: 002b:00007fd2c77750c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.841877][ T6342] RAX: ffffffffffffffda RBX: 00007fd2c6bb3f80 RCX: 00007fd2c6a7cf69 [ 170.849899][ T6342] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 170.857901][ T6342] RBP: 00007fd2c6ada6fe R08: 0000000000000004 R09: 0000000000000000 [ 170.866030][ T6342] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 170.874219][ T6342] R13: 000000000000000b R14: 00007fd2c6bb3f80 R15: 00007ffe0b3ecbd8 [ 170.882232][ T6342] [ 171.190912][ T6357] loop2: detected capacity change from 0 to 40427 [ 171.229114][ T6357] F2FS-fs (loop2): invalid crc value [ 171.259013][ T6342] Mem-Info: [ 171.263103][ T6342] active_anon:30833 inactive_anon:0 isolated_anon:0 [ 171.263103][ T6342] active_file:0 inactive_file:46461 isolated_file:0 [ 171.263103][ T6342] unevictable:768 dirty:20 writeback:0 [ 171.263103][ T6342] slab_reclaimable:9396 slab_unreclaimable:97263 [ 171.263103][ T6342] mapped:425200 shmem:6688 pagetables:850 [ 171.263103][ T6342] sec_pagetables:0 bounce:0 [ 171.263103][ T6342] kernel_misc_reclaimable:0 [ 171.263103][ T6342] free:1363817 free_pcp:474 free_cma:0 [ 171.314368][ T6342] Node 0 active_anon:123332kB inactive_anon:0kB active_file:0kB inactive_file:185868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1700800kB dirty:76kB writeback:0kB shmem:25216kB shmem_thp:0kB shmem_pmdmapped:16384kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10664kB pagetables:3400kB sec_pagetables:0kB all_unreclaimable? no [ 171.352353][ T6342] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 171.384414][ T6357] F2FS-fs (loop2): Mismatch valid blocks 4 vs. 6 [ 171.401607][ T6342] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.431238][ T6357] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 171.445719][ T6342] lowmem_reserve[]: 0 2571 2571 0 0 [ 171.461856][ T6342] Node 0 DMA32 free:1492124kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:124020kB inactive_anon:0kB active_file:0kB inactive_file:185560kB unevictable:1536kB writepending:76kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:1112kB local_pcp:548kB free_cma:0kB [ 171.640017][ T6342] lowmem_reserve[]: 0 0 0 0 0 [ 171.764749][ T6364] loop2: detected capacity change from 0 to 1024 [ 172.500808][ T6366] hfsplus: xattr searching failed [ 172.506557][ T6367] hfsplus: xattr searching failed [ 172.622486][ T29] audit: type=1800 audit(1717710399.045:41): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=27 res=0 errno=0 [ 172.664311][ T6342] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.746935][ T2462] hfsplus: b-tree write err: -5, ino 4 [ 172.751740][ T6342] lowmem_reserve[]: 0 0 0 0 0 [ 172.834975][ T6342] Node 1 Normal free:3947736kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.871906][ T6342] lowmem_reserve[]: 0 0 0 0 0 [ 172.898443][ T6342] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.958849][ T6342] Node 0 DMA32: 15*4kB (UME) 371*8kB (UME) 356*16kB (UME) 142*32kB (UME) 74*64kB (UME) 66*128kB (UME) 12*256kB (ME) 11*512kB (M) 7*1024kB (UM) 2*2048kB (UE) 356*4096kB (M) = 1504596kB [ 172.984274][ T6342] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 173.061623][ T6342] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 8*16kB (UM) 11*32kB (UM) 5*64kB (U) 1*128kB (U) 3*256kB (UM) 3*512kB (UM) 2*1024kB (U) 3*2048kB (UM) 961*4096kB (M) = 3947736kB [ 173.155504][ T6342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.217814][ T6342] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.256975][ T6342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.292103][ T6342] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.317267][ T6342] 48935 total pagecache pages [ 173.326724][ T6342] 0 pages in swap cache [ 173.353437][ T6342] Free swap = 124996kB [ 173.376188][ T6342] Total swap = 124996kB [ 173.397657][ T6342] 2097051 pages RAM [ 173.415482][ T6342] 0 pages HighMem/MovableOnly [ 173.437504][ T6342] 400871 pages reserved [ 173.464503][ T6342] 0 pages cma reserved [ 173.684623][ T6380] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.887660][ T29] audit: type=1326 audit(1717710400.415:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 173.985321][ T29] audit: type=1326 audit(1717710400.445:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 174.503315][ T29] audit: type=1326 audit(1717710401.035:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 174.598211][ T29] audit: type=1326 audit(1717710401.035:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 175.361514][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.611701][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.818690][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 175.848352][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 175.888767][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.915267][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.947133][ T6400] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.405372][ T6400] 9pnet_fd: Insufficient options for proto=fd [ 176.417253][ T5170] usb 1-1: USB disconnect, device number 3 [ 176.679318][ T6402] loop4: detected capacity change from 0 to 32768 [ 176.726102][ T6402] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6402) [ 177.019229][ T6402] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.077990][ T6402] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 177.138599][ T6402] BTRFS info (device loop4): using free-space-tree [ 177.180619][ T6411] net veth1_virt_wifi ¢: renamed from virt_wifi0 [ 177.870080][ T6435] syz-executor.3[6435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.870255][ T6435] syz-executor.3[6435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.863341][ T6451] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.118491][ T29] audit: type=1326 audit(1717710406.645:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 180.273381][ T29] audit: type=1326 audit(1717710406.705:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 180.335814][ T29] audit: type=1326 audit(1717710406.865:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 181.819948][ T6402] syz-executor.4 (6402) used greatest stack depth: 18576 bytes left [ 181.866787][ T5111] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.964490][ T6486] loop3: detected capacity change from 0 to 1024 [ 182.994129][ T5169] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 183.046729][ T12] hfsplus: b-tree write err: -5, ino 4 [ 183.214480][ T5169] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 183.247022][ T5169] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 183.290569][ T5169] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.333051][ T5169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.372507][ T6481] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.446574][ T6496] syz-executor.1[6496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.446728][ T6496] syz-executor.1[6496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.990158][ T6481] 9pnet_fd: Insufficient options for proto=fd [ 184.064204][ T5170] usb 5-1: USB disconnect, device number 5 [ 184.178040][ T6506] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.561785][ T29] audit: type=1326 audit(1717710411.035:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 184.976494][ T29] audit: type=1326 audit(1717710411.045:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 185.613842][ T29] audit: type=1326 audit(1717710411.485:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 185.871590][ T5252] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 186.071566][ T5252] usb 1-1: device descriptor read/64, error -71 [ 186.351579][ T5252] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 186.580121][ T5252] usb 1-1: device descriptor read/64, error -71 [ 186.742319][ T5252] usb usb1-port1: attempt power cycle [ 187.118766][ T6530] net_ratelimit: 2 callbacks suppressed [ 187.118833][ T6530] team0: mtu less than device minimum [ 187.249982][ T5252] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.421980][ T5170] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 187.472124][ T5252] usb 1-1: device not accepting address 6, error -71 [ 187.650563][ T5170] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.694215][ T5170] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.713292][ T5170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 187.751127][ T5170] usb 4-1: SerialNumber: syz [ 187.784781][ T5170] usb 4-1: bad CDC descriptors [ 188.003988][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.026295][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.067811][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.086656][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.167258][ T5170] usb 4-1: USB disconnect, device number 6 [ 188.674100][ T29] audit: type=1326 audit(1717710415.155:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06a3a7cf69 code=0x0 [ 188.873222][ T6552] loop1: detected capacity change from 0 to 1024 [ 188.933536][ T6552] hfsplus: bad catalog entry type [ 189.372933][ T2462] hfsplus: b-tree write err: -5, ino 4 [ 189.421872][ T6554] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.552448][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.583901][ T29] audit: type=1326 audit(1717710416.115:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 189.606670][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.674201][ T29] audit: type=1326 audit(1717710416.145:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 190.078580][ T5169] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 190.226130][ T29] audit: type=1326 audit(1717710416.755:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 190.296073][ T5169] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 190.338533][ T5169] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.382767][ T5169] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.402404][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.440496][ T6557] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.954064][ T6574] syz-executor.3[6574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.954218][ T6574] syz-executor.3[6574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.412641][ T6557] 9pnet_fd: Insufficient options for proto=fd [ 194.549331][ T5202] usb 2-1: USB disconnect, device number 3 [ 194.705454][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.715168][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.046559][ T6586] team0: mtu less than device minimum [ 195.953021][ T6598] loop1: detected capacity change from 0 to 1024 [ 196.590496][ T2862] hfsplus: b-tree write err: -5, ino 4 [ 196.774343][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 196.780896][ T5127] Bluetooth: hci3: command 0x0406 tx timeout [ 196.787040][ T5127] Bluetooth: hci4: command 0x0406 tx timeout [ 196.793256][ T4487] Bluetooth: hci2: command 0x0406 tx timeout [ 196.852543][ T6604] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.132288][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.270230][ T29] audit: type=1326 audit(1717710423.795:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 197.402413][ T29] audit: type=1326 audit(1717710423.825:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 197.467896][ T29] audit: type=1326 audit(1717710423.925:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 200.263144][ T5168] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.422641][ T5168] usb 4-1: device descriptor read/64, error -71 [ 200.721590][ T5168] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 200.875239][ T6638] loop1: detected capacity change from 0 to 4096 [ 200.881968][ T5168] usb 4-1: device descriptor read/64, error -71 [ 200.989431][ T6638] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 201.002349][ T5168] usb usb4-port1: attempt power cycle [ 201.120661][ T6638] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 201.522219][ T6646] team0: mtu less than device minimum [ 202.435942][ T6659] loop1: detected capacity change from 0 to 1024 [ 203.396868][ T58] hfsplus: b-tree write err: -5, ino 4 [ 203.492595][ T6665] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.637536][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.664989][ T29] audit: type=1326 audit(1717710430.195:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 203.712403][ T6670] syz-executor.3[6670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.713353][ T6670] syz-executor.3[6670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.732934][ T29] audit: type=1326 audit(1717710430.225:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 204.266689][ T29] audit: type=1326 audit(1717710430.795:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5527cf69 code=0x7fc00000 [ 206.777633][ T6704] loop0: detected capacity change from 0 to 1024 [ 207.682429][ T11] hfsplus: b-tree write err: -5, ino 4 [ 207.734429][ T6709] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.888181][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.930546][ T29] audit: type=1326 audit(1717710434.455:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 207.953336][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.051173][ T29] audit: type=1326 audit(1717710434.455:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 208.073936][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.488822][ T29] audit: type=1326 audit(1717710435.015:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 209.848895][ T6738] syz-executor.3[6738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.849297][ T6738] syz-executor.3[6738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.774536][ T6750] loop2: detected capacity change from 0 to 1024 [ 212.529790][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 212.741674][ T2862] hfsplus: b-tree write err: -5, ino 4 [ 213.085097][ T6762] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.215657][ T29] audit: type=1326 audit(1717710439.735:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 213.265256][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.350070][ T29] audit: type=1326 audit(1717710439.855:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 213.802019][ T29] audit: type=1326 audit(1717710439.865:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 213.909692][ T29] audit: type=1326 audit(1717710440.435:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 216.125298][ T6798] syz-executor.3[6798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.125478][ T6798] syz-executor.3[6798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.309984][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 217.355745][ T6816] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.495770][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.526652][ T29] audit: type=1326 audit(1717710444.055:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 217.574916][ T29] audit: type=1326 audit(1717710444.085:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 218.223136][ T29] audit: type=1326 audit(1717710444.685:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x7fc00000 [ 219.133430][ T6838] syz-executor.1[6838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.133679][ T6838] syz-executor.1[6838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.138951][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 221.765840][ T6859] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.960933][ T29] audit: type=1326 audit(1717710448.465:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a3a7cf69 code=0x7fc00000 [ 221.999755][ T29] audit: type=1326 audit(1717710448.465:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f06a3a7cf69 code=0x7fc00000 [ 222.636938][ T29] audit: type=1326 audit(1717710449.145:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a3a7cf69 code=0x7fc00000 [ 224.661559][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 224.740352][ T6899] syz-executor.2[6899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.743164][ T6899] syz-executor.2[6899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.673844][ T6911] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.812701][ T29] audit: type=1326 audit(1717710453.325:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 226.872004][ T29] audit: type=1326 audit(1717710453.325:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 226.933888][ T29] audit: type=1326 audit(1717710453.375:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6a7cf69 code=0x7fc00000 [ 228.138615][ T6945] syz-executor.3[6945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.138790][ T6945] syz-executor.3[6945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.380201][ T6949] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.491320][ T6953] syz-executor.4[6953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.493585][ T6953] syz-executor.4[6953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.588176][ T29] audit: type=1326 audit(1717710455.105:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1041a7cf69 code=0x7fc00000 [ 228.667270][ T29] audit: type=1326 audit(1717710455.115:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1041a7cf69 code=0x7fc00000 [ 229.149686][ T29] audit: type=1326 audit(1717710455.675:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1041a7cf69 code=0x7fc00000 [ 235.086509][ T7017] syz-executor.3[7017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.086681][ T7017] syz-executor.3[7017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.757019][ T7057] loop4: detected capacity change from 0 to 256 [ 238.910061][ T7061] pim6reg1: entered promiscuous mode [ 238.916671][ T7061] pim6reg1: entered allmulticast mode [ 239.498442][ T7076] syz-executor.4 (pid 7076) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 242.935654][ T7110] syz-executor.0[7110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.936392][ T7110] syz-executor.0[7110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.644335][ T7120] loop2: detected capacity change from 0 to 256 [ 246.786888][ T7142] loop4: detected capacity change from 0 to 1024 [ 246.824706][ T7142] journal_path: Lookup failure for './file0' [ 246.830794][ T7142] EXT4-fs: error: could not find journal device path [ 247.605386][ T1048] bridge_slave_1: left allmulticast mode [ 247.643181][ T1048] bridge_slave_1: left promiscuous mode [ 247.663446][ T1048] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.710302][ T1048] bridge_slave_0: left allmulticast mode [ 247.716633][ T1048] bridge_slave_0: left promiscuous mode [ 247.743335][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.574652][ T7173] loop4: detected capacity change from 0 to 512 [ 248.595144][ T7173] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.632934][ T7173] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 248.673644][ T7173] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value out of bounds [ 248.700339][ T7173] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 248.720239][ T7173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.784491][ T5111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.894478][ T1048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.920576][ T1048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.957464][ T1048] bond0 (unregistering): Released all slaves [ 250.189672][ T7186] loop4: detected capacity change from 0 to 32768 [ 250.252007][ T7186] XFS: ikeep mount option is deprecated. [ 250.324075][ T7186] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 250.609011][ T7191] pim6reg1: entered promiscuous mode [ 250.641555][ T7186] XFS (loop4): Ending clean mount [ 250.681808][ T7191] pim6reg1: entered allmulticast mode [ 250.705585][ T7186] XFS (loop4): Quotacheck needed: Please wait. [ 250.864614][ T7186] XFS (loop4): Quotacheck: Done. [ 250.929278][ T7186] syz-executor.4[7186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.929463][ T7186] syz-executor.4[7186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.130021][ T5111] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 253.085525][ T7209] loop4: detected capacity change from 0 to 32768 [ 253.212426][ T7209] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 253.422975][ T7209] XFS (loop4): Ending clean mount [ 253.490041][ T7209] XFS (loop4): Quotacheck needed: Please wait. [ 253.528379][ T7211] loop1: detected capacity change from 0 to 32768 [ 253.636118][ T7211] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 253.705264][ T7209] XFS (loop4): Quotacheck: Done. [ 253.814671][ T5111] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 253.821664][ T7211] XFS (loop1): Ending clean mount [ 253.852437][ T7211] XFS (loop1): Quotacheck needed: Please wait. [ 253.970512][ T7211] XFS (loop1): Quotacheck: Done. [ 254.247607][ T6132] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 256.141900][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.148505][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.311037][ T1048] hsr_slave_0: left promiscuous mode [ 256.347701][ T1048] hsr_slave_1: left promiscuous mode [ 256.361090][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.393931][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.440234][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.451539][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.507317][ T1048] veth1_macvtap: left promiscuous mode [ 256.518532][ T1048] veth0_macvtap: left promiscuous mode [ 256.530153][ T1048] veth1_vlan: left promiscuous mode [ 256.549051][ T1048] veth0_vlan: left promiscuous mode [ 257.708151][ T1048] team0 (unregistering): Port device team_slave_1 removed [ 257.763932][ T1048] team0 (unregistering): Port device team_slave_0 removed [ 258.648525][ T7256] netem: change failed [ 258.851242][ T29] audit: type=1326 audit(1717710485.375:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f006c47cf69 code=0x0 [ 259.434009][ T7298] loop1: detected capacity change from 0 to 1024 [ 259.472362][ T7293] pim6reg1: entered promiscuous mode [ 259.478762][ T7293] pim6reg1: entered allmulticast mode [ 260.173362][ T11] hfsplus: b-tree write err: -5, ino 4 [ 260.568823][ T29] audit: type=1326 audit(1717710487.095:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06a3a7cf69 code=0x0 [ 263.695364][ T7342] loop4: detected capacity change from 0 to 1024 [ 264.390775][ T11] hfsplus: b-tree write err: -5, ino 4 [ 265.651644][ T5166] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 265.831622][ T5166] usb 2-1: device descriptor read/64, error -71 [ 266.121969][ T5166] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 266.291664][ T5166] usb 2-1: device descriptor read/64, error -71 [ 266.424780][ T5166] usb usb2-port1: attempt power cycle [ 266.861590][ T5166] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 266.912224][ T5166] usb 2-1: device descriptor read/8, error -71 [ 267.184442][ T5166] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 267.245010][ T5166] usb 2-1: device descriptor read/8, error -71 [ 267.383455][ T5166] usb usb2-port1: unable to enumerate USB device [ 268.480525][ T7391] loop2: detected capacity change from 0 to 512 [ 268.509684][ T7391] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 268.569379][ T7391] EXT4-fs (loop2): 1 truncate cleaned up [ 268.621328][ T7391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.384535][ T5121] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.536367][ T7410] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 272.274447][ T7414] loop2: detected capacity change from 0 to 32768 [ 272.324423][ T7414] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 272.449709][ T7414] XFS (loop2): Ending clean mount [ 272.507407][ T7414] XFS (loop2): Quotacheck needed: Please wait. [ 272.626632][ T7414] XFS (loop2): Quotacheck: Done. [ 272.816262][ T5202] XFS (loop2): Metadata CRC error detected at xfs_refcountbt_read_verify+0x41/0xd0, xfs_refcountbt block 0x28 [ 272.843682][ T5202] XFS (loop2): Unmount and run xfs_repair [ 272.856074][ T5202] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 272.872504][ T5202] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 272.906975][ T5202] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 272.916002][ T5202] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 272.951581][ T5202] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 272.960557][ T5202] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 273.001602][ T5202] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 273.010592][ T5202] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 273.041409][ T5202] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 273.063190][ T7414] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x28 len 8 error 74 [ 273.098153][ T7414] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 273.129460][ T7414] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 273.214785][ T5121] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 273.579808][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 274.292218][ T5202] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 274.416350][ T7442] loop1: detected capacity change from 0 to 1024 [ 274.441629][ T7442] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 274.456153][ T7442] JBD2: no valid journal superblock found [ 274.462992][ T7442] EXT4-fs (loop1): Could not load journal inode [ 274.491482][ T5202] usb 3-1: device descriptor read/64, error -71 [ 274.778515][ T5202] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 274.951665][ T5202] usb 3-1: device descriptor read/64, error -71 [ 275.082199][ T5202] usb usb3-port1: attempt power cycle [ 276.331531][ T5202] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 276.392236][ T5202] usb 3-1: device descriptor read/8, error -71 [ 276.681513][ T5202] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 276.938337][ T5202] usb 3-1: device not accepting address 8, error -71 [ 276.947944][ T5202] usb usb3-port1: unable to enumerate USB device [ 278.407335][ T7461] loop2: detected capacity change from 0 to 32768 [ 278.479941][ T7461] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 278.614621][ T7461] XFS (loop2): Ending clean mount [ 278.651523][ T7461] XFS (loop2): Quotacheck needed: Please wait. [ 278.768126][ T7461] XFS (loop2): Quotacheck: Done. [ 278.901679][ T7461] XFS (loop2): Metadata CRC error detected at xfs_refcountbt_read_verify+0x41/0xd0, xfs_refcountbt block 0x28 [ 278.921754][ T7461] XFS (loop2): Unmount and run xfs_repair [ 278.936562][ T7461] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 278.961489][ T7461] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 278.982111][ T7461] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 279.003362][ T7461] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 279.024578][ T7461] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 279.052176][ T7461] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 279.061182][ T7461] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 279.107605][ T7461] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 279.137994][ T7461] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 279.153885][ T7461] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x28 len 8 error 74 [ 279.210166][ T7461] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 279.251934][ T7461] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 279.356037][ T5121] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 284.680142][ T7535] loop1: detected capacity change from 0 to 1024 [ 286.658641][ T35] hfsplus: b-tree write err: -5, ino 4 [ 287.077384][ T5252] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 287.291555][ T5252] usb 3-1: Using ep0 maxpacket: 32 [ 287.311264][ T5252] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 287.335105][ T5252] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 287.370851][ T5252] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 287.388104][ T5252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.409206][ T5252] usb 3-1: Product: syz [ 287.424947][ T5252] usb 3-1: Manufacturer: syz [ 287.438751][ T5252] usb 3-1: SerialNumber: syz [ 287.687839][ T5252] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 287.748932][ T5252] usb 3-1: USB disconnect, device number 9 [ 287.759945][ T5252] usblp0: removed [ 291.352257][ T7588] loop2: detected capacity change from 0 to 1024 [ 291.631498][ T5252] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 291.841427][ T5252] usb 2-1: Using ep0 maxpacket: 32 [ 291.848608][ T5252] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 291.871440][ T5252] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 291.896370][ T5252] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 291.911447][ T5252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.919508][ T5252] usb 2-1: Product: syz [ 291.931952][ T5252] usb 2-1: Manufacturer: syz [ 291.941732][ T5252] usb 2-1: SerialNumber: syz [ 292.176742][ T5252] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 292.221793][ T5252] usb 2-1: USB disconnect, device number 8 [ 292.244100][ T5252] usblp0: removed [ 292.570455][ T51] hfsplus: b-tree write err: -5, ino 4 [ 292.626316][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.642841][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.655715][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.680833][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.701964][ T5117] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 292.712112][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.771600][ T5117] Bluetooth: hci5: command tx timeout [ 294.846265][ T5113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.857452][ T5113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.868069][ T5113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.879929][ T5113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.888192][ T5113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 295.005552][ T5113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.375547][ T7628] loop2: detected capacity change from 0 to 1024 [ 296.400253][ T5113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.412859][ T5113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.423339][ T5113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.432204][ T5113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.440331][ T5113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 296.449971][ T5113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.607252][ T51] hfsplus: b-tree write err: -5, ino 4 [ 296.852162][ T5117] Bluetooth: hci5: command tx timeout [ 297.172205][ T5117] Bluetooth: hci6: command tx timeout [ 298.531683][ T5117] Bluetooth: hci7: command tx timeout [ 298.931587][ T5117] Bluetooth: hci5: command tx timeout [ 299.251752][ T5117] Bluetooth: hci6: command tx timeout [ 300.611505][ T5117] Bluetooth: hci7: command tx timeout [ 301.011963][ T5117] Bluetooth: hci5: command tx timeout [ 301.331578][ T5117] Bluetooth: hci6: command tx timeout [ 302.691616][ T5117] Bluetooth: hci7: command tx timeout [ 303.411680][ T5117] Bluetooth: hci6: command tx timeout [ 304.771640][ T5117] Bluetooth: hci7: command tx timeout [ 317.575638][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.588731][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.647584][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.657585][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.667066][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.677597][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.696232][ T5113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 324.705476][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.781581][ T5117] Bluetooth: hci3: command tx timeout [ 327.297010][ T5113] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 327.314787][ T5113] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 327.323789][ T5113] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 327.335576][ T5113] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 327.343598][ T5113] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 327.358473][ T5113] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 328.851497][ T5117] Bluetooth: hci3: command tx timeout [ 329.421670][ T5117] Bluetooth: hci8: command tx timeout [ 330.931490][ T5117] Bluetooth: hci3: command tx timeout [ 331.497018][ T5117] Bluetooth: hci8: command tx timeout [ 333.021642][ T5117] Bluetooth: hci3: command tx timeout [ 333.572419][ T5117] Bluetooth: hci8: command tx timeout [ 335.655792][ T5117] Bluetooth: hci8: command tx timeout [ 357.554955][ T5113] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 357.566314][ T5113] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 357.577604][ T5113] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 357.595791][ T5113] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 357.608348][ T5113] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 357.615895][ T5113] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 358.829534][ T5113] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 358.841030][ T5113] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 358.850195][ T5113] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 358.862388][ T5113] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 358.870336][ T5113] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 358.878317][ T5113] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 359.654398][ T5117] Bluetooth: hci9: command tx timeout [ 360.931522][ T5117] Bluetooth: hci10: command tx timeout [ 361.144405][ T5113] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 361.155298][ T5113] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 361.165298][ T5113] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 361.174182][ T5113] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 361.182248][ T5113] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 361.190345][ T5113] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 361.741539][ T5113] Bluetooth: hci9: command tx timeout [ 363.011692][ T5113] Bluetooth: hci10: command tx timeout [ 363.254247][ T5113] Bluetooth: hci11: command tx timeout [ 363.814089][ T5113] Bluetooth: hci9: command tx timeout [ 365.091476][ T5113] Bluetooth: hci10: command tx timeout [ 365.331639][ T5113] Bluetooth: hci11: command tx timeout [ 365.900407][ T5113] Bluetooth: hci9: command tx timeout [ 367.171563][ T5113] Bluetooth: hci10: command tx timeout [ 367.411462][ T5113] Bluetooth: hci11: command tx timeout [ 369.495141][ T5113] Bluetooth: hci11: command tx timeout [ 379.024908][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.031378][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.933262][ T5117] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 389.944743][ T5117] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 389.954158][ T5117] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 389.964517][ T5117] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 389.976288][ T5117] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 389.983976][ T5117] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 392.051898][ T5113] Bluetooth: hci12: command tx timeout [ 392.357943][ T5117] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 392.368580][ T5117] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 392.382939][ T5117] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 392.399633][ T5117] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 392.410282][ T5117] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 392.418095][ T5117] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 394.131878][ T5117] Bluetooth: hci12: command tx timeout [ 394.464920][ T5117] Bluetooth: hci13: command tx timeout [ 396.211450][ T5117] Bluetooth: hci12: command tx timeout [ 396.531786][ T5117] Bluetooth: hci13: command tx timeout [ 398.291720][ T5117] Bluetooth: hci12: command tx timeout [ 398.619601][ T5117] Bluetooth: hci13: command tx timeout [ 400.691596][ T5117] Bluetooth: hci13: command tx timeout [ 416.931442][ T5113] Bluetooth: hci5: command 0x0406 tx timeout [ 419.331476][ T30] INFO: task kworker/u8:6:1048 blocked for more than 143 seconds. [ 419.339377][ T30] Tainted: G W 6.10.0-rc2-next-20240606-syzkaller #0 [ 419.357300][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.366513][ T30] task:kworker/u8:6 state:D stack:21392 pid:1048 tgid:1048 ppid:2 flags:0x00004000 2024/06/06 21:50:45 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 419.383196][ T30] Workqueue: netns cleanup_net [ 419.388186][ T30] Call Trace: [ 419.421512][ T30] [ 419.425659][ T30] __schedule+0x17e8/0x4a20 [ 419.430251][ T30] ? __pfx___schedule+0x10/0x10 [ 419.451423][ T30] ? __pfx_lock_release+0x10/0x10 [ 419.456548][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 419.471432][ T30] ? kthread_data+0x52/0xd0 [ 419.476019][ T30] ? schedule+0x90/0x320 [ 419.480306][ T30] ? wq_worker_sleeping+0x66/0x240 [ 419.501378][ T30] ? schedule+0x90/0x320 [ 419.505751][ T30] schedule+0x14b/0x320 [ 419.509952][ T30] schedule_preempt_disabled+0x13/0x30 [ 419.526900][ T30] __mutex_lock+0x6a4/0xd70 [ 419.541729][ T30] ? __mutex_lock+0x527/0xd70 [ 419.546605][ T30] ? netdev_run_todo+0x89e/0x1000 [ 419.571716][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 419.576920][ T30] ? __init_swait_queue_head+0xae/0x150 [ 419.591365][ T30] netdev_run_todo+0x89e/0x1000 [ 419.596309][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 419.611348][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 419.617332][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 419.641436][ T30] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 419.647702][ T30] default_device_exit_batch+0xa14/0xa90 [ 419.661616][ T30] ? __pfx___might_resched+0x10/0x10 [ 419.667007][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 419.691907][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 419.697480][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 419.711374][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 419.717649][ T30] cleanup_net+0x89d/0xcc0 [ 419.731983][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 419.737117][ T30] ? process_scheduled_works+0x945/0x1830 [ 419.761446][ T30] process_scheduled_works+0xa2c/0x1830 [ 419.767143][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 419.786949][ T30] ? assign_work+0x364/0x3d0 [ 419.801461][ T30] worker_thread+0x86d/0xd50 [ 419.806187][ T30] ? __kthread_parkme+0x169/0x1d0 [ 419.821425][ T30] ? __pfx_worker_thread+0x10/0x10 [ 419.826658][ T30] kthread+0x2f0/0x390 [ 419.830794][ T30] ? __pfx_worker_thread+0x10/0x10 [ 419.851410][ T30] ? __pfx_kthread+0x10/0x10 [ 419.856205][ T30] ret_from_fork+0x4b/0x80 [ 419.860677][ T30] ? __pfx_kthread+0x10/0x10 [ 419.871418][ T30] ret_from_fork_asm+0x1a/0x30 [ 419.876310][ T30] [ 419.879479][ T30] INFO: task syz-executor.3:7361 blocked for more than 143 seconds. [ 419.911379][ T30] Tainted: G W 6.10.0-rc2-next-20240606-syzkaller #0 [ 419.920050][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.951376][ T30] task:syz-executor.3 state:D stack:23800 pid:7361 tgid:7334 ppid:5122 flags:0x00000006 [ 419.971352][ T30] Call Trace: [ 419.974720][ T30] [ 419.977779][ T30] __schedule+0x17e8/0x4a20 [ 420.001423][ T30] ? __pfx___schedule+0x10/0x10 [ 420.006477][ T30] ? __pfx_lock_release+0x10/0x10 [ 420.024272][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 420.029977][ T30] ? schedule+0x90/0x320 [ 420.037253][ T30] schedule+0x14b/0x320 [ 420.047018][ T30] schedule_preempt_disabled+0x13/0x30 [ 420.055510][ T30] __mutex_lock+0x6a4/0xd70 [ 420.060097][ T30] ? __mutex_lock+0x527/0xd70 [ 420.068906][ T30] ? bpf_map_offload_map_alloc+0x132/0x680 [ 420.077606][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 420.082931][ T30] ? trace_kmalloc+0x1f/0xd0 [ 420.087568][ T30] ? __kmalloc_node_noprof+0x247/0x440 [ 420.099746][ T30] ? bpf_map_area_alloc+0x64/0x120 [ 420.105668][ T30] ? bpf_map_init_from_attr+0x158/0x370 [ 420.117682][ T30] bpf_map_offload_map_alloc+0x132/0x680 [ 420.123783][ T30] ? __pfx_bpf_map_offload_m