last executing test programs: 47.275367726s ago: executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open$dir(0x0, 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xa000000a}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) close(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800dd8d00000000000000000200000400000006"], 0x1c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000140)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f0000000400), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3f}, 0x90) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x5, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000f195"], &(0x7f0000000100)='GPL\x00'}, 0x78) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}}) 46.889557604s ago: executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15655595860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x148, 0x148, 0xffffffff, 0xffffffff, 0x420, 0x420, 0x420, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'veth0\x00', 'dvmrp0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6erspan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 46.58346264s ago: executing program 1: r0 = syz_usbip_server_init(0x5) write$usbip_server(r0, &(0x7f0000000280)=@ret_submit={{0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0x400, 0x117, 0x0, 0x0, "bd93", [{0xb114, 0x6, 0x20, 0x16f}, {0x8, 0x5015, 0x4, 0x8}, {0x0, 0xcc7, 0x4, 0x7c2}, {0x9, 0x1, 0x8, 0x4}, {0x3, 0x1ff, 0x1ff, 0x3}, {0x10000, 0x3, 0x6, 0xffff}, {0x10000, 0x81, 0x59, 0xffff7484}, {0x4, 0x8, 0x2, 0x400}, {0x40, 0x8, 0x4dd, 0x1}, {0x8, 0x10000, 0x5, 0xcc71}, {0x4, 0x20, 0x7, 0x8}, {0x9e0f, 0x9, 0x3, 0x5}, {0x2, 0x8, 0x3f, 0xffffffff}, {0x0, 0x1, 0x9, 0x19380}, {0x3, 0x8, 0x79f, 0x7fff}, {0x1, 0x4, 0x13a, 0x5}, {0x5, 0x2, 0x0, 0x7}, {0x0, 0x0, 0x7, 0x2}, {0x200, 0xff, 0x1, 0x4}, {0x7fff, 0x2, 0x2, 0x80000001}, {0x5, 0x3, 0xdf, 0x6}, {0x9, 0x9e94, 0x2, 0x62e}, {0x7, 0x40, 0x724, 0x7ff}, {0xfff, 0x200, 0x9, 0x3ff}, {0x3, 0x1, 0x401, 0x40}, {0x7fffffff, 0x5, 0xffff7fff, 0x3ff}, {0xffffcaff, 0x9, 0x1, 0x800}, {0x5, 0x3}, {0xffffffc0, 0x0, 0x2, 0x10000}, {0x4, 0x0, 0x8, 0xc5}, {0x401, 0x4, 0x800, 0x3}, {0x1, 0x8a48, 0x0, 0x80000000}, {0x4, 0xfffff5ce, 0x1, 0x7}, {0x10000, 0x5fd, 0x4, 0xffff}, {0x8, 0x7, 0x5, 0x7fffffff}, {0xafe, 0x8, 0xc06, 0x8000}, {0x3, 0x6, 0x7, 0x3}, {0x7, 0x3, 0x100, 0x7f}, {0x9, 0x9, 0x7ff, 0xffffffb9}, {0x61, 0x1000, 0x100}, {0x401, 0x7fff, 0x5, 0x7}, {0x4b4, 0xffff, 0x1, 0x7}, {0xebc, 0x8, 0x59bd, 0x9}, {0x400, 0x101, 0x4, 0x8}, {0x0, 0x31, 0x2, 0x101}, {0xf2130a8, 0x80000001, 0x80000001, 0x4}, {0x3e10ec99, 0x0, 0x3, 0x2}, {0x1, 0x2, 0xffffffff, 0x7}, {0x1, 0x8, 0x5, 0xfffffffd}, {0x0, 0x7, 0xff, 0x4}, {0x6, 0x8000, 0x5, 0x4}, {0x5, 0x5, 0x0, 0x2}, {0x5, 0x0, 0x7fff8, 0x559}, {0xfffffffc, 0xfc09, 0x5, 0x7fffffff}, {0x10000, 0xfffffffd, 0x72d, 0x5b6}, {0x0, 0x5, 0x9, 0x7fff}, {0xfffffff8, 0x3, 0x5, 0x7}, {0x200, 0x1f, 0x20000, 0x9}, {0x5, 0x20, 0x1, 0x4}, {0x475, 0x11, 0x3f, 0x4}, {0x46713480, 0x7, 0x80000000}, {0x9, 0x7f, 0x6}, {0x0, 0x2543, 0x9, 0x400}, {0x2736, 0x1ff, 0x80, 0x7ff}, {0x9, 0x10001, 0x0, 0x4}, {0x1, 0x9, 0x0, 0x6}, {0x2, 0x1f, 0x461, 0x80000000}, {0x6, 0x9}, {0x80000000, 0x10001, 0x5, 0x7}, {0x2, 0xb697, 0x2, 0x1}, {0x2, 0x2, 0x80000001, 0x1}, {0x0, 0x4, 0x5}, {0x2, 0x2e4000, 0x5, 0x1}, {0x1, 0xe54, 0x7fff, 0x1}, {0x7ff, 0x1, 0xfffffff9, 0x3}, {0x1, 0x1, 0xfffffff7, 0xfffff001}, {0x5, 0x7f, 0x0, 0x1f}, {0x400, 0x9, 0x5, 0x5}, {0x41, 0x8c, 0x6}, {0x0, 0x2, 0x100, 0x2}, {0x3, 0x0, 0x3, 0x284b}, {0x146, 0x80000000, 0x7f, 0x800}, {0x0, 0x3, 0x3ff, 0x700}, {0x7, 0x3f, 0x9, 0xe7}, {0x4, 0x62, 0x8}, {0x4, 0x9, 0x4, 0x7}, {0x4, 0x0, 0x1, 0x5}, {0xffff, 0xffffffff, 0x3}, {0x8, 0x80000000, 0x100, 0x9}, {0x7, 0x9, 0x2, 0x80000001}, {0x400, 0xfad5, 0x80, 0x5}, {0x1, 0xbb, 0x3, 0x3}, {0x9, 0x8001, 0x7, 0xfffffff7}, {0x3ff, 0x9, 0x10001, 0x3}, {0x1, 0xfffffffb, 0x8, 0x80000000}, {0x0, 0x31, 0x8, 0x5}, {0x9, 0xb3, 0xbea4, 0x5}, {0x4, 0x0, 0xfff, 0x4}, {0xe1, 0x80000000, 0x6, 0x7}, {0x100, 0x6, 0x57a, 0x9}, {0x5, 0x3, 0xc7d4, 0x6}, {0x1000, 0x601, 0x6, 0x8}, {0xffffffff, 0x1, 0x0, 0x1f}, {0xffffff94, 0xd041, 0x81, 0x20}, {0x8, 0x0, 0x228490e0, 0x6}, {0x0, 0x7ff, 0xfffffe00, 0x9}, {0x6, 0x8, 0xffff, 0x100}, {0xfff, 0xb8a7, 0x80, 0x3}, {0xffffffff, 0x80000001, 0x6, 0x10001}, {0x5, 0x8001, 0x0, 0xbe}, {0x800, 0xb6e, 0x800, 0x50}, {0x4, 0x8, 0x10001, 0x7}, {0xde4, 0x9, 0x1, 0x4}, {0x8, 0x6, 0xdc, 0x3ff}, {0x81, 0x6605, 0x8002, 0x3}, {0x7fffffff, 0x2, 0x2, 0x28}, {0x0, 0x7f, 0x13, 0x6}, {0x1, 0x4, 0x4, 0x4}, {0x800, 0x1, 0x80000001, 0x7}, {0x81, 0x80000000, 0xba2e, 0x34d4}, {0x59a, 0x25d1, 0x80000000, 0x100}, {0x5, 0x10001, 0x6, 0x35f7}, {0x1c3, 0xe116, 0x7bfc, 0x7}, {0x8000, 0x9, 0x30, 0x6}, {0x0, 0xd01, 0x81, 0x7}, {0x7, 0xffffffff, 0x7ff, 0x8000}, {0x3ff, 0x20, 0x6ee6, 0x401}, {0x7e0000, 0x0, 0x80000000, 0x7f}, {0x200, 0x8, 0xffffffff, 0x5}, {0x400, 0x0, 0x5, 0x2ee}, {0x8, 0x5, 0x7, 0x929}, {0x0, 0x7, 0x407243b0, 0x1f}, {0x0, 0x8, 0x101, 0x7}, {0x3, 0x9, 0x5, 0x5}, {0x20, 0x7, 0x4, 0x398925ec}, {0x3f, 0x4, 0xffff, 0x401}, {0x7ff, 0x7, 0x3, 0x8}, {0x93f, 0x1000000, 0x7fff, 0x3f}, {0x0, 0x4, 0x5}, {0x7fff, 0xff, 0xffffffff, 0x1000}, {0x7, 0x2, 0x1, 0xdf0}, {0x1000, 0xb3c0, 0x5, 0x7}, {0x0, 0xfffffffa, 0x9, 0x30bb}, {0x7, 0xfffffffa, 0x0, 0xffff8001}, {0x7fffffff, 0x10000000, 0x6, 0x48000000}, {0x2, 0xff, 0x8, 0x493a}, {0x8, 0x6, 0xffffffff, 0x1d43}, {0x1000, 0x1, 0x7, 0x4}, {0x4, 0x157, 0x0, 0x3}, {0x1ff, 0x2, 0x5, 0x10800000}, {0xf800, 0x1, 0xfff, 0x3}, {0x673, 0x5, 0x8, 0xffffffe1}, {0xffffffe0, 0x4, 0x5, 0x4}, {0x9, 0x2, 0x0, 0x3}, {0x400, 0x1f, 0x5960, 0x8a9}, {0x13, 0x58fcf86b, 0xfffff001, 0x5}, {0x3, 0x4, 0x5, 0x9}, {0x154d, 0x3, 0x7, 0x1}, {0x77e2, 0x3f, 0x0, 0x3}, {0x7, 0x10001, 0x5, 0x8}, {0x1, 0x6, 0x7f, 0x9}, {0x8, 0xffff, 0xfffeffff, 0x5}, {0x7, 0x7ff, 0x9d2, 0x4}, {0x20, 0x8, 0x6, 0x5}, {0x80, 0x8, 0x0, 0x6}, {0x6, 0xf8, 0x3ff, 0x2}, {0x8, 0x3b6, 0x3, 0x1000}, {0x80000001, 0x0, 0x79, 0x712}, {0x8001, 0x1f, 0x7, 0x5}, {0x7, 0x2, 0x3ff, 0x7}, {0x401, 0x80000001, 0x4, 0x800}, {0x0, 0xfffffe00, 0x5, 0x4}, {0x7, 0x800, 0x80000000, 0x80}, {0x4, 0x6, 0x8, 0x200}, {0x8, 0x8000, 0xfffffff7, 0x8}, {0xfff, 0x32, 0xfffffff9, 0x1}, {0x6, 0xfffffc00, 0x4, 0x6e5}, {0x5, 0x7f, 0xbdb, 0x4}, {0x50ef, 0x3f, 0x6}, {0x2, 0x0, 0x0, 0x6}, {0x10000, 0x9fa7, 0x1, 0xfffff000}, {0x5762, 0x9, 0x5, 0x8}, {0x8, 0x5, 0x1, 0x2}, {0x2, 0x17, 0x7, 0x7ff}, {0x0, 0xd3e4, 0x101, 0xd271}, {0x8, 0x3, 0x4}, {0x8, 0x1, 0x2, 0x5}, {0x3776, 0x7, 0xee, 0x9}, {0x7, 0x4, 0x80000000, 0x7ff}, {0xb22, 0x100, 0x3, 0x1}, {0x55e, 0x81, 0x5, 0xc9}, {0x1, 0x7fff, 0x0, 0xfffffff9}, {0x0, 0x0, 0x81, 0x2}, {0x80, 0x0, 0x0, 0x9}, {0x7fffffff, 0x7, 0x1f, 0x4}, {0x10001, 0xfffffffb, 0x41b, 0xfffffffb}, {0x2, 0x2000, 0x9, 0x7fffffff}, {0xe83, 0x3300000, 0x1, 0x100}, {0x5, 0x9, 0x9, 0x9ae7}, {0x1, 0x0, 0x1, 0x5}, {0x10001, 0x6, 0xb1a, 0x40}, {0x1, 0x0, 0x0, 0x1}, {0xbd, 0x6, 0x2, 0x5}, {0x0, 0x4, 0xda, 0x9}, {0x544, 0xf51f, 0x1ff, 0xaa5a}, {0x80000001, 0x10000, 0x0, 0x10000}, {0x7, 0x8, 0x3ff, 0x9285}, {0x1, 0x0, 0xffffff88, 0x9}, {0x0, 0xfff, 0x0, 0xffffffff}, {0x8, 0xffff, 0x4800000, 0x9}, {0x6, 0x0, 0x800}, {0xffffffff, 0x2a73e7af, 0x9fd4}, {0x1ff, 0x4, 0x100, 0x6}, {0x0, 0x76b3, 0x8, 0x3}, {0x9, 0xfffff269, 0x8, 0xffffffff}, {0x72, 0x6, 0x3}, {0x0, 0x0, 0x9, 0x4}, {0x80, 0x7, 0x9, 0x9}, {0x8, 0x23, 0x0, 0x1000}, {0xb3ce, 0x4, 0x100}, {0x3, 0x400, 0x7}, {0x0, 0x7f, 0x898, 0x8e0a}, {0x0, 0x800, 0x1}, {0x8000, 0x4, 0x1daa, 0x3}, {0x8, 0x0, 0xffff0000, 0x9}, {0x8, 0x100, 0x200, 0x9}, {0x5, 0x0, 0x8, 0xffffffff}, {0x0, 0x6, 0x1, 0x1000}, {0x9, 0x2e, 0x0, 0x10001}, {0xeb, 0xc58, 0x0, 0x7}, {0x1, 0x0, 0x2, 0xb6}, {0xfff, 0x8, 0xcd3}, {0xfffffff7, 0x6, 0xa6eb, 0x81eb}, {0x3, 0x1, 0x2}, {0x6, 0x8, 0x10000, 0x1f}, {0x5, 0x5, 0x4, 0xffef}, {0x4}, {0x7, 0x4, 0x74}, {0x8000, 0x0, 0x80000001, 0xfffffeff}, {0xfffffff8}, {0xfffffffb, 0xba, 0xffff, 0x8}, {0x80000000, 0x1, 0x5, 0xfffff925}, {0x0, 0x3, 0x1, 0x5}, {0x7, 0xce5, 0x9, 0x8}, {0x2, 0x8388, 0xed, 0x5}, {0xba80, 0x6, 0x3aa6, 0xfffffff8}, {0x3, 0x0, 0x20}, {0x2, 0x8001, 0x6, 0x5}, {0x8001, 0x9, 0x1, 0x80}, {0x5, 0x101, 0x7ff, 0xb74b}, {0x1, 0x1ff, 0x1, 0x5}, {0x9, 0x1, 0x0, 0x8}, {0x80000000}, {0x8, 0x5, 0x0, 0x99}, {0x0, 0x0, 0x8, 0x5}, {0x2, 0x800, 0x7bd, 0x8}, {0x5, 0x0, 0x3, 0x400}, {0x7, 0x0, 0x80000001, 0x4}, {0xff, 0xa51, 0x80000001, 0x1a9}, {0x6, 0x9, 0x1ab515ba, 0x4}, {0x9, 0x0, 0x10001, 0x800}, {0x7, 0x80000001, 0x1, 0x1}, {0x0, 0x2, 0x839, 0xc00}, {0x0, 0xef, 0x3, 0x8}, {0x2, 0x50000000, 0x1, 0x3}, {0x1, 0xc960, 0x0, 0x4}, {0x3b3a, 0x0, 0x8, 0x3}, {0x1000, 0x6, 0xfffffffc, 0x10001}, {0xfffffffa, 0x9, 0xac0}, {0x3, 0x3ff, 0x10000, 0x4}, {0x0, 0x5, 0x6, 0x38}, {0xb07f, 0x3, 0x83}, {0x0, 0x8, 0xed, 0x2}, {0xffff, 0x8ee}, {0xf14, 0x0, 0x80, 0x401}, {0x6, 0x4, 0x6, 0xe7}, {0xffff, 0x401, 0xffff, 0x3}, {0x60, 0x5, 0x80000001, 0x1}, {0xfffffffc, 0x329f, 0x81, 0x1ff}]}, 0x11a2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x400) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14140000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/168], 0xf0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000e00)={0x0, 0x70}, 0x20) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x60, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) 41.913900854s ago: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000100)='i', 0x1, 0x80ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) sendfile(r1, r1, &(0x7f0000000080), 0xe0000000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 41.80753587s ago: executing program 2: mlockall(0x1) io_destroy(0x0) 41.765351566s ago: executing program 4: r0 = memfd_create(&(0x7f0000000080)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u\x1c\xc1\x8c\x8a\xad@\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\xdem\xe3\x01\x01\x00\x00\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xb8G\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7U\x9e\xc7\xf4\xd96w\xdd?\x0fQ\xdc\xe9R\x84C\x05\xba\xfe`\x8b\x05s]\xe2%\x1bB\xf7\x9e>/\xa4s~\x11\xaa\xe9\xf4.R4Q\xe4j\xfcj=BT1\x19W\xaf\xca\xd3\xa0L8\xd2t\x8bg\nw-\xa1\xee\xc2\x89)eK7\x14\xa2{-\xd7\xf6nt\x9dK\xc3O4l-\x1coc\xa5\x0e\x92\xe0\x9a\xea\x06a\x8a\x8d\x14\xe4_\xdd\x06\xb1\x8c\xda\xdb\xe2\'\xfd\x8f\xef\xbe\xb8D\xeah\x88\xdd\xf8\x9e\x16\n_\xdds\xb4\x04\xd4\x0f\xaa\"\xfex\nj!\x14\x85\xf5\xfb\x1f\x8a\x00\x8c\x8f\xd7!\xd2\x82\xa7\x11D\xf0\xcd\xf8r\x94\xaeIuRa\xbfp*b\xcf^\xc8\xc6!OU\x00'/814, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x800000b) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 40.846914885s ago: executing program 0: timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='\'+.}!\xcd%\x00b\xe2\xd6\xff\xff\xff\xff\xff\xff\xff\xff{\x01\x00\x01\x00\x00\x00\x00\x00\xad\x97&\x90F\x97=\x8d5\xc5F%\x95\xd58N\xc8\xcex\xde5\xa6\x1b\x94OT\xffe{\xcd\xe5W\xb7\xc9zME\x00\xdf\be\xc4\a\ntrV\x1f\x89\x12:\xef\xec\x9e\xa9nN\xe7\xcc-\xd9vK|\x11V)\x88\xcc\xaf\xff\xdbm\xf58 \xc3\xa2-,\xfbo\xf1\xe2\xb9\xae9iEi\xe6\x896\xees\xfa\x98\xf8\x12=\xc1W\xe9\xf5\x85\xa7\xc3E\xf2jQ\x11\xe6\xce\xd4\xe5G\b{\x06\x14m5\x15/\'\xadez\xcfj\x16|E\x9b\xe1\b\xb9\xed\x82\xe6)o]\x02M\xa1n\f\x15\x05\xceD\xe8\xa4/\x06uJiEN\xbeG^\xff\x9dl\xae\xf6\x1a\x80\xb3\x11\xca4&\xcc\x81L\xe0Jv\x84j\x12\xc5.i\x18\xea\xa5\x14\xfd\xffp\xad\xf0F\x9c\x8d\xb8\r\xb7\xa6\xbb/\xb4\x15\rsx\x01+\xc12\xf9\xfd]E\xd9)\xd4\x8c\xbe\xaa\xf6(\x11\x18\xe8\xdf\xde\x0e\xc6sJ\xbdU\xe4\xd5=o\xd6\xe1\xb7\xa1Y\xefJ\b^U\xa4}\x9a\x93\xd2\xcc\x96\xb5\x90\x9b\x86\x80Z\x12a\xdbK\x90m\x87\xc5\xb6S\xf3f\xf4\xef\xa6Rg\xe1s&FP!\xcf\xa7z\x8aEh\xc9\x7f\x10c=\xd4QL\xfd#\xd5\a\xde\x0f\xfa\xa1\xfa\x9e\x19\x9c\x131\x82\x13\xc5\xad\x02\xa6\xa8\"\x89M\x87\xbd$m\x8bL\n\x86\x85+\x97\x95`!e\x1d4\xab\xcek\xba\x8f\xf6\xe0\xca\xad\xc3\x88\x0e\xbc\xa1\x1f\x15*\xf3\xa6@\xfdL\xc4\xaf%\x9c\xf6\xde\xd5jZ\x89\xfd&\x85y\x9ac4\x9f\xffaJ\x92\\\xa5\x80!\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc6\xc7}\xfb\r\x12\xc3U\xea\x8fJ[\xefe\xf0\xfc\x17l\x86T\xbcC3\xa8\xf7\xa8J\xd9\x11\xc8\xb1\xa5\xde\xf4\xaa\xf4\\-\x82\xf7\xdf\xe8\x19\xd9u\x1a0\a\x00\x00\x00\x00\x00\x00\x00\f(=XSF\x9d\xa1SU\x9a\x9b\x97\xa1\xc5\xd9\xf5\xcb\x87\xfd\x10\x9a\xf2\xa2rz\xdb\x0f\x88\xac\xca\xf0:\xbe\xf7\xcf\xe1J\xd29\xfd\xe6#\x15D') 40.597444482s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) fstat(r2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sched_switch\x00', r6}, 0x10) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x7, 0x85}, 0x48) 39.716671595s ago: executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000d46420000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) getitimer(0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000040)={0x0, 0x0, 0x2, '\nk'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 39.516695605s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0x1, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 38.55736739s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="f3339b1f8c7f0000000000000004aa"], 0x0) 38.459943254s ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 37.947136532s ago: executing program 2: syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x3008410, &(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0x0) shutdown(r3, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$nl_route(0x10, 0x3, 0x0) 37.185638876s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000480)={0x2}) 36.314405888s ago: executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "02341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000140)={0x7, 0x7, 0x3}, &(0x7f0000000240)=0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x13, r5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 35.406959064s ago: executing program 1: r0 = syz_usbip_server_init(0x5) write$usbip_server(r0, &(0x7f0000000280)=@ret_submit={{0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0x400, 0x117, 0x0, 0x0, "bd93", [{0xb114, 0x6, 0x20, 0x16f}, {0x8, 0x5015, 0x4, 0x8}, {0x0, 0xcc7, 0x4, 0x7c2}, {0x9, 0x1, 0x8, 0x4}, {0x3, 0x1ff, 0x1ff, 0x3}, {0x10000, 0x3, 0x6, 0xffff}, {0x10000, 0x81, 0x59, 0xffff7484}, {0x4, 0x8, 0x2, 0x400}, {0x40, 0x8, 0x4dd, 0x1}, {0x8, 0x10000, 0x5, 0xcc71}, {0x4, 0x20, 0x7, 0x8}, {0x9e0f, 0x9, 0x3, 0x5}, {0x2, 0x8, 0x3f, 0xffffffff}, {0x0, 0x1, 0x9, 0x19380}, {0x3, 0x8, 0x79f, 0x7fff}, {0x1, 0x4, 0x13a, 0x5}, {0x5, 0x2, 0x0, 0x7}, {0x0, 0x0, 0x7, 0x2}, {0x200, 0xff, 0x1, 0x4}, {0x7fff, 0x2, 0x2, 0x80000001}, {0x5, 0x3, 0xdf, 0x6}, {0x9, 0x9e94, 0x2, 0x62e}, {0x7, 0x40, 0x724, 0x7ff}, {0xfff, 0x200, 0x9, 0x3ff}, {0x3, 0x1, 0x401, 0x40}, {0x7fffffff, 0x5, 0xffff7fff, 0x3ff}, {0xffffcaff, 0x9, 0x1, 0x800}, {0x5, 0x3}, {0xffffffc0, 0x0, 0x2, 0x10000}, {0x4, 0x0, 0x8, 0xc5}, {0x401, 0x4, 0x800, 0x3}, {0x1, 0x8a48, 0x0, 0x80000000}, {0x4, 0xfffff5ce, 0x1, 0x7}, {0x10000, 0x5fd, 0x4, 0xffff}, {0x8, 0x7, 0x5, 0x7fffffff}, {0xafe, 0x8, 0xc06, 0x8000}, {0x3, 0x6, 0x7, 0x3}, {0x7, 0x3, 0x100, 0x7f}, {0x9, 0x9, 0x7ff, 0xffffffb9}, {0x61, 0x1000, 0x100}, {0x401, 0x7fff, 0x5, 0x7}, {0x4b4, 0xffff, 0x1, 0x7}, {0xebc, 0x8, 0x59bd, 0x9}, {0x400, 0x101, 0x4, 0x8}, {0x0, 0x31, 0x2, 0x101}, {0xf2130a8, 0x80000001, 0x80000001, 0x4}, {0x3e10ec99, 0x0, 0x3, 0x2}, {0x1, 0x2, 0xffffffff, 0x7}, {0x1, 0x8, 0x5, 0xfffffffd}, {0x0, 0x7, 0xff, 0x4}, {0x6, 0x8000, 0x5, 0x4}, {0x5, 0x5, 0x0, 0x2}, {0x5, 0x0, 0x7fff8, 0x559}, {0xfffffffc, 0xfc09, 0x5, 0x7fffffff}, {0x10000, 0xfffffffd, 0x72d, 0x5b6}, {0x0, 0x5, 0x9, 0x7fff}, {0xfffffff8, 0x3, 0x5, 0x7}, {0x200, 0x1f, 0x20000, 0x9}, {0x5, 0x20, 0x1, 0x4}, {0x475, 0x11, 0x3f, 0x4}, {0x46713480, 0x7, 0x80000000}, {0x9, 0x7f, 0x6}, {0x0, 0x2543, 0x9, 0x400}, {0x2736, 0x1ff, 0x80, 0x7ff}, {0x9, 0x10001, 0x0, 0x4}, {0x1, 0x9, 0x0, 0x6}, {0x2, 0x1f, 0x461, 0x80000000}, {0x6, 0x9}, {0x80000000, 0x10001, 0x5, 0x7}, {0x2, 0xb697, 0x2, 0x1}, {0x2, 0x2, 0x80000001, 0x1}, {0x0, 0x4, 0x5}, {0x2, 0x2e4000, 0x5, 0x1}, {0x1, 0xe54, 0x7fff, 0x1}, {0x7ff, 0x1, 0xfffffff9, 0x3}, {0x1, 0x1, 0xfffffff7, 0xfffff001}, {0x5, 0x7f, 0x0, 0x1f}, {0x400, 0x9, 0x5, 0x5}, {0x41, 0x8c, 0x6}, {0x0, 0x2, 0x100, 0x2}, {0x3, 0x0, 0x3, 0x284b}, {0x146, 0x80000000, 0x7f, 0x800}, {0x0, 0x3, 0x3ff, 0x700}, {0x7, 0x3f, 0x9, 0xe7}, {0x4, 0x62, 0x8}, {0x4, 0x9, 0x4, 0x7}, {0x4, 0x0, 0x1, 0x5}, {0xffff, 0xffffffff, 0x3}, {0x8, 0x80000000, 0x100, 0x9}, {0x7, 0x9, 0x2, 0x80000001}, {0x400, 0xfad5, 0x80, 0x5}, {0x1, 0xbb, 0x3, 0x3}, {0x9, 0x8001, 0x7, 0xfffffff7}, {0x3ff, 0x9, 0x10001, 0x3}, {0x1, 0xfffffffb, 0x8, 0x80000000}, {0x0, 0x31, 0x8, 0x5}, {0x9, 0xb3, 0xbea4, 0x5}, {0x4, 0x0, 0xfff, 0x4}, {0xe1, 0x80000000, 0x6, 0x7}, {0x100, 0x6, 0x57a, 0x9}, {0x5, 0x3, 0xc7d4, 0x6}, {0x1000, 0x601, 0x6, 0x8}, {0xffffffff, 0x1, 0x0, 0x1f}, {0xffffff94, 0xd041, 0x81, 0x20}, {0x8, 0x0, 0x228490e0, 0x6}, {0x0, 0x7ff, 0xfffffe00, 0x9}, {0x6, 0x8, 0xffff, 0x100}, {0xfff, 0xb8a7, 0x80, 0x3}, {0xffffffff, 0x80000001, 0x6, 0x10001}, {0x5, 0x8001, 0x0, 0xbe}, {0x800, 0xb6e, 0x800, 0x50}, {0x4, 0x8, 0x10001, 0x7}, {0xde4, 0x9, 0x1, 0x4}, {0x8, 0x6, 0xdc, 0x3ff}, {0x81, 0x6605, 0x8002, 0x3}, {0x7fffffff, 0x2, 0x2, 0x28}, {0x0, 0x7f, 0x13, 0x6}, {0x1, 0x4, 0x4, 0x4}, {0x800, 0x1, 0x80000001, 0x7}, {0x81, 0x80000000, 0xba2e, 0x34d4}, {0x59a, 0x25d1, 0x80000000, 0x100}, {0x5, 0x10001, 0x6, 0x35f7}, {0x1c3, 0xe116, 0x7bfc, 0x7}, {0x8000, 0x9, 0x30, 0x6}, {0x0, 0xd01, 0x81, 0x7}, {0x7, 0xffffffff, 0x7ff, 0x8000}, {0x3ff, 0x20, 0x6ee6, 0x401}, {0x7e0000, 0x0, 0x80000000, 0x7f}, {0x200, 0x8, 0xffffffff, 0x5}, {0x400, 0x0, 0x5, 0x2ee}, {0x8, 0x5, 0x7, 0x929}, {0x0, 0x7, 0x407243b0, 0x1f}, {0x0, 0x8, 0x101, 0x7}, {0x3, 0x9, 0x5, 0x5}, {0x20, 0x7, 0x4, 0x398925ec}, {0x3f, 0x4, 0xffff, 0x401}, {0x7ff, 0x7, 0x3, 0x8}, {0x93f, 0x1000000, 0x7fff, 0x3f}, {0x0, 0x4, 0x5}, {0x7fff, 0xff, 0xffffffff, 0x1000}, {0x7, 0x2, 0x1, 0xdf0}, {0x1000, 0xb3c0, 0x5, 0x7}, {0x0, 0xfffffffa, 0x9, 0x30bb}, {0x7, 0xfffffffa, 0x0, 0xffff8001}, {0x7fffffff, 0x10000000, 0x6, 0x48000000}, {0x2, 0xff, 0x8, 0x493a}, {0x8, 0x6, 0xffffffff, 0x1d43}, {0x1000, 0x1, 0x7, 0x4}, {0x4, 0x157, 0x0, 0x3}, {0x1ff, 0x2, 0x5, 0x10800000}, {0xf800, 0x1, 0xfff, 0x3}, {0x673, 0x5, 0x8, 0xffffffe1}, {0xffffffe0, 0x4, 0x5, 0x4}, {0x9, 0x2, 0x0, 0x3}, {0x400, 0x1f, 0x5960, 0x8a9}, {0x13, 0x58fcf86b, 0xfffff001, 0x5}, {0x3, 0x4, 0x5, 0x9}, {0x154d, 0x3, 0x7, 0x1}, {0x77e2, 0x3f, 0x0, 0x3}, {0x7, 0x10001, 0x5, 0x8}, {0x1, 0x6, 0x7f, 0x9}, {0x8, 0xffff, 0xfffeffff, 0x5}, {0x7, 0x7ff, 0x9d2, 0x4}, {0x20, 0x8, 0x6, 0x5}, {0x80, 0x8, 0x0, 0x6}, {0x6, 0xf8, 0x3ff, 0x2}, {0x8, 0x3b6, 0x3, 0x1000}, {0x80000001, 0x0, 0x79, 0x712}, {0x8001, 0x1f, 0x7, 0x5}, {0x7, 0x2, 0x3ff, 0x7}, {0x401, 0x80000001, 0x4, 0x800}, {0x0, 0xfffffe00, 0x5, 0x4}, {0x7, 0x800, 0x80000000, 0x80}, {0x4, 0x6, 0x8, 0x200}, {0x8, 0x8000, 0xfffffff7, 0x8}, {0xfff, 0x32, 0xfffffff9, 0x1}, {0x6, 0xfffffc00, 0x4, 0x6e5}, {0x5, 0x7f, 0xbdb, 0x4}, {0x50ef, 0x3f, 0x6}, {0x2, 0x0, 0x0, 0x6}, {0x10000, 0x9fa7, 0x1, 0xfffff000}, {0x5762, 0x9, 0x5, 0x8}, {0x8, 0x5, 0x1, 0x2}, {0x2, 0x17, 0x7, 0x7ff}, {0x0, 0xd3e4, 0x101, 0xd271}, {0x8, 0x3, 0x4}, {0x8, 0x1, 0x2, 0x5}, {0x3776, 0x7, 0xee, 0x9}, {0x7, 0x4, 0x80000000, 0x7ff}, {0xb22, 0x100, 0x3, 0x1}, {0x55e, 0x81, 0x5, 0xc9}, {0x1, 0x7fff, 0x0, 0xfffffff9}, {0x0, 0x0, 0x81, 0x2}, {0x80, 0x0, 0x0, 0x9}, {0x7fffffff, 0x7, 0x1f, 0x4}, {0x10001, 0xfffffffb, 0x41b, 0xfffffffb}, {0x2, 0x2000, 0x9, 0x7fffffff}, {0xe83, 0x3300000, 0x1, 0x100}, {0x5, 0x9, 0x9, 0x9ae7}, {0x1, 0x0, 0x1, 0x5}, {0x10001, 0x6, 0xb1a, 0x40}, {0x1, 0x0, 0x0, 0x1}, {0xbd, 0x6, 0x2, 0x5}, {0x0, 0x4, 0xda, 0x9}, {0x544, 0xf51f, 0x1ff, 0xaa5a}, {0x80000001, 0x10000, 0x0, 0x10000}, {0x7, 0x8, 0x3ff, 0x9285}, {0x1, 0x0, 0xffffff88, 0x9}, {0x0, 0xfff, 0x0, 0xffffffff}, {0x8, 0xffff, 0x4800000, 0x9}, {0x6, 0x0, 0x800}, {0xffffffff, 0x2a73e7af, 0x9fd4}, {0x1ff, 0x4, 0x100, 0x6}, {0x0, 0x76b3, 0x8, 0x3}, {0x9, 0xfffff269, 0x8, 0xffffffff}, {0x72, 0x6, 0x3}, {0x0, 0x0, 0x9, 0x4}, {0x80, 0x7, 0x9, 0x9}, {0x8, 0x23, 0x0, 0x1000}, {0xb3ce, 0x4, 0x100}, {0x3, 0x400, 0x7}, {0x0, 0x7f, 0x898, 0x8e0a}, {0x0, 0x800, 0x1}, {0x8000, 0x4, 0x1daa, 0x3}, {0x8, 0x0, 0xffff0000, 0x9}, {0x8, 0x100, 0x200, 0x9}, {0x5, 0x0, 0x8, 0xffffffff}, {0x0, 0x6, 0x1, 0x1000}, {0x9, 0x2e, 0x0, 0x10001}, {0xeb, 0xc58, 0x0, 0x7}, {0x1, 0x0, 0x2, 0xb6}, {0xfff, 0x8, 0xcd3}, {0xfffffff7, 0x6, 0xa6eb, 0x81eb}, {0x3, 0x1, 0x2}, {0x6, 0x8, 0x10000, 0x1f}, {0x5, 0x5, 0x4, 0xffef}, {0x4}, {0x7, 0x4, 0x74}, {0x8000, 0x0, 0x80000001, 0xfffffeff}, {0xfffffff8}, {0xfffffffb, 0xba, 0xffff, 0x8}, {0x80000000, 0x1, 0x5, 0xfffff925}, {0x0, 0x3, 0x1, 0x5}, {0x7, 0xce5, 0x9, 0x8}, {0x2, 0x8388, 0xed, 0x5}, {0xba80, 0x6, 0x3aa6, 0xfffffff8}, {0x3, 0x0, 0x20}, {0x2, 0x8001, 0x6, 0x5}, {0x8001, 0x9, 0x1, 0x80}, {0x5, 0x101, 0x7ff, 0xb74b}, {0x1, 0x1ff, 0x1, 0x5}, {0x9, 0x1, 0x0, 0x8}, {0x80000000}, {0x8, 0x5, 0x0, 0x99}, {0x0, 0x0, 0x8, 0x5}, {0x2, 0x800, 0x7bd, 0x8}, {0x5, 0x0, 0x3, 0x400}, {0x7, 0x0, 0x80000001, 0x4}, {0xff, 0xa51, 0x80000001, 0x1a9}, {0x6, 0x9, 0x1ab515ba, 0x4}, {0x9, 0x0, 0x10001, 0x800}, {0x7, 0x80000001, 0x1, 0x1}, {0x0, 0x2, 0x839, 0xc00}, {0x0, 0xef, 0x3, 0x8}, {0x2, 0x50000000, 0x1, 0x3}, {0x1, 0xc960, 0x0, 0x4}, {0x3b3a, 0x0, 0x8, 0x3}, {0x1000, 0x6, 0xfffffffc, 0x10001}, {0xfffffffa, 0x9, 0xac0}, {0x3, 0x3ff, 0x10000, 0x4}, {0x0, 0x5, 0x6, 0x38}, {0xb07f, 0x3, 0x83}, {0x0, 0x8, 0xed, 0x2}, {0xffff, 0x8ee}, {0xf14, 0x0, 0x80, 0x401}, {0x6, 0x4, 0x6, 0xe7}, {0xffff, 0x401, 0xffff, 0x3}, {0x60, 0x5, 0x80000001, 0x1}, {0xfffffffc, 0x329f, 0x81, 0x1ff}]}, 0x11a2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x400) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB="f0000000100013070000000000000000ac1414aa000000000000000000000000e000000200000000000000000000000000000000000000000000000000000000466df0f00c2580af8fb680a59a09ba931d799ab4a2b59d5844b47ae960c5bcfbfd34d18253762fbd58e0e56af685442bc289e1d938ed66577c88cc95c5b246849be9a843d9eb6dbb11c03c5396d63da391e71b82eccf9e6b13329fec3f057f37c326798f7391edcc77cd11e7526d5254b195c82b4c7a1e765587b1c45fc17d1f8044344d435331924884c8d2ec85953b0809d4e2c14d76e5d7a46c462e68f9917014f0b8a743178163ee9174cd768c5eb49608d04529fdc4890b12c08aa8db8434ed373e87f6b5", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14140000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/168], 0xf0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000e00)={0x0, 0x70}, 0x20) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x60, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) 34.928574806s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8085, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x301}, 0x14}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 34.672313985s ago: executing program 1: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) chdir(0x0) socket$can_raw(0x1d, 0x3, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 33.815410594s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 33.101182812s ago: executing program 3: syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x3008410, &(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0, 0x553b, &(0x7f000000ac00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0x0) shutdown(r3, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$nl_route(0x10, 0x3, 0x0) 32.919723759s ago: executing program 2: socket$l2tp(0x2, 0x2, 0x73) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf70}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x58}}, 0x0) 32.852841819s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000340", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) 31.531063919s ago: executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 31.293457444s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8085, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x301}, 0x14}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 30.848958721s ago: executing program 3: syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x98ea, &(0x7f0000013140)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) creat(&(0x7f0000000000)='./file2\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) 30.026605855s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f0000000000), 0x248800) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x0) unshare(0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x1}}) 4.6457581s ago: executing program 1: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x2879c03, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc41, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00', 0x0, 0x2885013, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0xffffffb5) 3.790097069s ago: executing program 4: syz_read_part_table(0x1076, &(0x7f0000000000)="$eJzs0DFKxEAYBeC3hmSTQvAIgjews1tkK+0UO8/gFVyvKngIFfllSDY30G2+r3jzzzA8hgknNdWQ5LKNb8ntJoeXIWOSMefrpa7FuEt2yXdVJX3SdU/7JB+Zks+a5SKpurtJpqul/z3JJsc4ljXbFg/7x/t5Oy7H18/LOJytD9j28/raJ4cpyU8lX3/4LQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwr34DAAD//zOaGqg=") 2.837237833s ago: executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4200, 0x0) 0s ago: executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "02341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000140)={0x7, 0x7, 0x3}, &(0x7f0000000240)=0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x13, r5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) kernel console output (not intermixed with test programs): e44da-de57-406a-8241-57ec7d4412cf [ 127.193916][ T4440] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 127.219292][ T4440] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 127.246758][ T4440] BTRFS info (device loop3): use zstd compression, level 3 [ 127.266012][ T4440] BTRFS info (device loop3): using free space tree [ 127.443528][ T4443] loop2: detected capacity change from 0 to 32768 [ 127.453347][ T4443] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (4443) [ 127.512259][ T4440] BTRFS info (device loop3): enabling ssd optimizations [ 127.541206][ T4440] BTRFS info (device loop3): checking UUID tree [ 127.719884][ T3576] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.833250][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.994789][ T4482] loop4: detected capacity change from 0 to 4096 [ 128.042914][ T4482] NILFS (loop4): invalid segment: Checksum error in segment payload [ 128.074871][ T4482] NILFS (loop4): trying rollback from an earlier position [ 128.114996][ T4482] NILFS (loop4): recovery complete [ 128.141793][ T4487] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.169789][ T4453] loop0: detected capacity change from 0 to 32768 [ 128.180152][ T4453] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4453) [ 128.203206][ T4492] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 128.216678][ T4453] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.243230][ T4492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.251969][ T4492] bond0: (slave bond2): Enslaving as an active interface with an up link [ 128.253460][ T4453] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 128.274665][ T4453] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 128.315471][ T4453] BTRFS info (device loop0): use zstd compression, level 3 [ 128.348070][ T4453] BTRFS info (device loop0): using free space tree [ 128.458349][ T4502] No such timeout policy "syz0" [ 128.499828][ T4453] BTRFS info (device loop0): enabling ssd optimizations [ 128.510563][ T4453] BTRFS info (device loop0): checking UUID tree [ 128.711559][ T3572] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.780978][ T4229] usb 18-1: device descriptor read/8, error -110 [ 129.203820][ T4229] usb usb18-port1: attempt power cycle [ 129.372351][ T4540] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.746998][ T4542] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.796283][ T4532] loop4: detected capacity change from 0 to 32768 [ 129.816054][ T4532] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4532) [ 129.852774][ T4532] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.867793][ T4229] usb usb18-port1: unable to enumerate USB device [ 129.886481][ T4532] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 129.913700][ T4532] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 129.940066][ T4534] loop0: detected capacity change from 0 to 32768 [ 129.945172][ T4532] BTRFS info (device loop4): use zstd compression, level 3 [ 129.965080][ T4532] BTRFS info (device loop4): using free space tree [ 129.984796][ T4534] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (4534) [ 130.105988][ T4532] BTRFS info (device loop4): enabling ssd optimizations [ 130.118744][ T4532] BTRFS info (device loop4): checking UUID tree [ 130.213627][ T3567] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.376110][ T4539] loop3: detected capacity change from 0 to 32768 [ 130.417387][ T4539] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4539) [ 130.481338][ T4539] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.508373][ T4539] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 130.546857][ T4539] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 130.584556][ T4539] BTRFS info (device loop3): use zstd compression, level 3 [ 130.610623][ T4562] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 130.619202][ T4539] BTRFS info (device loop3): using free space tree [ 130.672437][ T4562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.711601][ T4562] bond0: (slave bond1): Enslaving as an active interface with an up link [ 130.786238][ T4576] Bluetooth: MGMT ver 1.22 [ 130.821038][ T4539] BTRFS info (device loop3): enabling ssd optimizations [ 130.824346][ T4576] Bluetooth: hci3: too big key_count value 28927 [ 130.915471][ T4539] BTRFS info (device loop3): checking UUID tree [ 131.771548][ T4604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.840023][ T3576] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.622970][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.631023][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.754510][ T4617] trusted_key: encrypted_key: insufficient parameters specified [ 134.565457][ T4638] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 134.641739][ T4638] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.649323][ T4638] bond0: (slave bond3): Enslaving as an active interface with an up link [ 134.812243][ T4642] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.836787][ T4644] loop3: detected capacity change from 0 to 256 [ 134.853376][ T4644] FAT-fs (loop3): Unrecognized mount option "check=st2ict" or missing value [ 134.860706][ T4631] loop0: detected capacity change from 0 to 32768 [ 134.910736][ T4631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4631) [ 134.946214][ T4631] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.966991][ T4629] loop2: detected capacity change from 0 to 32768 [ 134.979139][ T4631] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 134.991827][ T4629] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (4629) [ 135.008308][ T4628] loop4: detected capacity change from 0 to 32768 [ 135.015551][ T4631] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.041563][ T4631] BTRFS info (device loop0): use zstd compression, level 3 [ 135.048878][ T4628] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor.4 (4628) [ 135.059747][ T4631] BTRFS info (device loop0): using free space tree [ 135.248112][ T4631] BTRFS info (device loop0): enabling ssd optimizations [ 135.268750][ T4631] BTRFS info (device loop0): checking UUID tree [ 135.448845][ T3572] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.046256][ T4686] loop1: detected capacity change from 0 to 2048 [ 137.114929][ T4686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 137.272264][ T4667] loop4: detected capacity change from 0 to 32768 [ 137.314374][ T4667] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4667) [ 137.327608][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.419415][ T4667] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.441370][ T4667] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 137.452022][ T4667] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 137.456846][ T3571] EXT4-fs (loop1): unmounting filesystem. [ 137.503535][ T4667] BTRFS info (device loop4): use zstd compression, level 3 [ 137.534863][ T4667] BTRFS info (device loop4): using free space tree [ 137.538107][ T4707] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 137.925899][ T4677] loop0: detected capacity change from 0 to 32768 [ 137.939641][ T4667] BTRFS info (device loop4): enabling ssd optimizations [ 137.978132][ T4667] BTRFS info (device loop4): checking UUID tree [ 140.479351][ T3567] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.367362][ T4749] loop1: detected capacity change from 0 to 512 [ 141.444306][ T4749] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.472943][ T4749] ext4 filesystem being mounted at /root/syzkaller-testdir2056177792/syzkaller.qTcXXZ/39/file0 supports timestamps until 2038 (0x7fffffff) [ 141.530407][ T4743] loop2: detected capacity change from 0 to 32768 [ 141.537852][ T4743] XFS: noikeep mount option is deprecated. [ 141.576332][ T4745] loop4: detected capacity change from 0 to 32768 [ 141.599253][ T4749] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.605519][ T4745] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4745) [ 141.633441][ T4743] XFS (loop2): Mounting V5 Filesystem [ 141.644887][ T4745] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.674941][ T4745] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 141.696755][ T4745] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.719771][ T4745] BTRFS info (device loop4): use zstd compression, level 3 [ 141.727808][ T4745] BTRFS info (device loop4): using free space tree [ 141.829535][ T3571] EXT4-fs (loop1): unmounting filesystem. [ 141.844284][ T4743] XFS (loop2): Ending clean mount [ 141.863036][ T4745] BTRFS info (device loop4): enabling ssd optimizations [ 141.893778][ T4745] BTRFS info (device loop4): checking UUID tree [ 141.908246][ T4747] loop0: detected capacity change from 0 to 32768 [ 141.916430][ T4747] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (4747) [ 141.916650][ T4743] XFS (loop2): Quotacheck needed: Please wait. [ 142.016816][ T4743] XFS (loop2): Quotacheck: Done. [ 142.081905][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.154523][ T3573] XFS (loop2): Unmounting Filesystem [ 142.230163][ T3567] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.505917][ T27] kauditd_printk_skb: 1123 callbacks suppressed [ 142.505932][ T27] audit: type=1326 audit(1717718085.316:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f827687cf69 code=0x0 [ 142.791838][ T4807] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 142.932859][ T4810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.969811][ T4810] bond0: (slave bond1): Enslaving as an active interface with an up link [ 143.412504][ T27] audit: type=1800 audit(1717718086.226:1144): pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 143.449100][ T4819] loop1: detected capacity change from 0 to 128 [ 143.481025][ T4803] loop0: detected capacity change from 0 to 32768 [ 143.485836][ T27] audit: type=1800 audit(1717718086.256:1145): pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 143.512022][ T4803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4803) [ 143.529929][ T4819] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 143.561930][ T4803] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.600960][ T4803] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 143.624253][ T4803] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 143.643479][ T4803] BTRFS info (device loop0): use zstd compression, level 3 [ 143.658275][ T4803] BTRFS info (device loop0): using free space tree [ 143.748218][ T4803] BTRFS info (device loop0): enabling ssd optimizations [ 143.780829][ T4803] BTRFS info (device loop0): checking UUID tree [ 143.830371][ T4612] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.853505][ T4817] loop4: detected capacity change from 0 to 32768 [ 143.870841][ T4817] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor.4 (4817) [ 143.977710][ T4815] loop2: detected capacity change from 0 to 32768 [ 144.037630][ T3572] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.490724][ T4612] usb 2-1: config 0 has no interfaces? [ 144.496732][ T4612] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 144.750835][ T4612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.795806][ T4612] usb 2-1: config 0 descriptor?? [ 144.946949][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.223675][ T27] audit: type=1326 audit(1717718088.036:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef8fa7cf69 code=0x0 [ 145.265333][ T4879] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 145.296266][ T4879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.304716][ T4879] bond0: (slave bond2): Enslaving as an active interface with an up link [ 145.470230][ T4872] loop0: detected capacity change from 0 to 32768 [ 145.490353][ T4872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4872) [ 145.524266][ T4872] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.537156][ T4872] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 145.551102][ T4872] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.566309][ T4872] BTRFS info (device loop0): use zstd compression, level 3 [ 145.575429][ T4872] BTRFS info (device loop0): using free space tree [ 145.646436][ T4872] BTRFS info (device loop0): enabling ssd optimizations [ 145.654879][ T4872] BTRFS info (device loop0): checking UUID tree [ 145.886883][ T3572] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.167909][ T4229] usb 2-1: USB disconnect, device number 4 [ 147.193685][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 147.346681][ T4940] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 147.470660][ T4915] loop3: detected capacity change from 0 to 32768 [ 147.479655][ T4915] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4915) [ 148.182818][ T4915] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.212522][ T4915] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 148.220871][ T4943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.320089][ T4943] bond0: (slave bond2): Enslaving as an active interface with an up link [ 148.333445][ T4915] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 149.496075][ T4915] BTRFS info (device loop3): use zstd compression, level 3 [ 149.626372][ T4915] BTRFS info (device loop3): using free space tree [ 149.760031][ T4915] BTRFS error (device loop3): open_ctree failed [ 149.764569][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.286434][ T27] audit: type=1326 audit(1717718093.096:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f794867cf69 code=0x0 [ 151.139812][ T4991] loop4: detected capacity change from 0 to 2048 [ 151.192536][ T4991] loop4: p2 < > [ 151.298336][ T4993] loop3: detected capacity change from 0 to 128 [ 151.351710][ T4980] loop1: detected capacity change from 0 to 32768 [ 151.363510][ T4980] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4980) [ 151.406042][ T4980] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.418490][ T4995] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 151.424559][ T4980] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 151.464366][ T4980] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 151.483901][ T4980] BTRFS info (device loop1): use zstd compression, level 3 [ 151.491230][ T4995] device netdevsim0 entered promiscuous mode [ 151.497454][ T4980] BTRFS info (device loop1): using free space tree [ 151.508683][ T4995] device netdevsim0 left promiscuous mode [ 151.681669][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 152.200427][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 152.214682][ T4980] BTRFS info (device loop1): enabling ssd optimizations [ 152.351178][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 152.378019][ T4980] BTRFS info (device loop1): checking UUID tree [ 152.448457][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 152.678967][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.697624][ T26] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 152.707005][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.726570][ T26] usb 4-1: config 0 descriptor?? [ 152.732347][ T5033] loop0: detected capacity change from 0 to 64 [ 152.885875][ T3571] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.270163][ T5039] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 153.282018][ T5039] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.265087][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 154.279163][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 154.340365][ T26] usb 4-1: USB disconnect, device number 5 [ 154.357461][ T5021] loop4: detected capacity change from 0 to 32768 [ 154.371698][ T5021] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5021) [ 154.463532][ T5021] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.478522][ T5021] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 154.501247][ T5021] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.511431][ T5021] BTRFS info (device loop4): use zstd compression, level 3 [ 154.520250][ T5021] BTRFS info (device loop4): using free space tree [ 154.649807][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.486581][ T5050] loop1: detected capacity change from 0 to 8192 [ 155.539270][ T5050] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.654958][ T5021] BTRFS error (device loop4): open_ctree failed [ 160.012285][ T5128] loop4: detected capacity change from 0 to 8192 [ 160.024079][ T5132] loop0: detected capacity change from 0 to 1024 [ 160.035938][ T5128] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.042236][ T5132] EXT4-fs: Ignoring removed orlov option [ 160.079047][ T5132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.166801][ T5132] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 160.220018][ T5142] loop3: detected capacity change from 0 to 128 [ 160.256705][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 160.349669][ T5142] loop3: detected capacity change from 0 to 128 [ 160.373697][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 160.411878][ T5132] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.431942][ T5142] loop3: detected capacity change from 0 to 128 [ 160.438820][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 160.503688][ T5142] loop3: detected capacity change from 0 to 128 [ 160.517220][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 160.577160][ T5142] loop3: detected capacity change from 0 to 128 [ 160.590828][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 160.612396][ T5139] loop1: detected capacity change from 0 to 32768 [ 160.618738][ T5130] loop2: detected capacity change from 0 to 32768 [ 160.629772][ T5139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5139) [ 160.646828][ T5130] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (5130) [ 160.662546][ T5139] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.673025][ T5139] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 160.673563][ T5142] loop3: detected capacity change from 0 to 128 [ 160.681841][ T5139] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 160.698148][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 160.707802][ T5139] BTRFS info (device loop1): use zstd compression, level 3 [ 160.730481][ T5139] BTRFS info (device loop1): using free space tree [ 160.736517][ T3572] EXT4-fs (loop0): unmounting filesystem. [ 160.755533][ T5142] loop3: detected capacity change from 0 to 128 [ 160.773555][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 160.847444][ T5142] loop3: detected capacity change from 0 to 128 [ 160.877972][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 160.893781][ T5139] BTRFS info (device loop1): enabling ssd optimizations [ 160.906799][ T5139] BTRFS info (device loop1): checking UUID tree [ 161.005950][ T5142] loop3: detected capacity change from 0 to 128 [ 161.020981][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 161.763839][ T5142] loop3: detected capacity change from 0 to 128 [ 161.871346][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 161.884929][ T3571] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.923820][ T5142] loop3: detected capacity change from 0 to 128 [ 161.952730][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 161.994616][ T5142] loop3: detected capacity change from 0 to 128 [ 162.017503][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 162.077429][ T5142] loop3: detected capacity change from 0 to 128 [ 162.100179][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 162.164328][ T5142] loop3: detected capacity change from 0 to 128 [ 162.188798][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 162.332214][ T5142] loop3: detected capacity change from 0 to 128 [ 162.340904][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 162.371614][ T5186] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 162.378142][ T5186] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 162.389547][ T5142] loop3: detected capacity change from 0 to 128 [ 162.398114][ T5186] vhci_hcd vhci_hcd.0: Device attached [ 162.398691][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 162.415796][ T5187] vhci_hcd: connection closed [ 162.416453][ T3792] vhci_hcd: stop threads [ 162.430058][ T3792] vhci_hcd: release socket [ 162.438352][ T3288] kernel write not supported for file /5193/projid_map (pid: 3288 comm: kworker/1:3) [ 162.453487][ T3792] vhci_hcd: disconnect device [ 162.473891][ T5142] loop3: detected capacity change from 0 to 128 [ 162.490765][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 162.553882][ T5142] loop3: detected capacity change from 0 to 128 [ 162.590739][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 162.659279][ T5177] loop0: detected capacity change from 0 to 32768 [ 162.669198][ T5142] loop3: detected capacity change from 0 to 128 [ 162.680720][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 162.706798][ T5177] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5177) [ 162.742304][ T5177] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.762202][ T5177] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 162.763397][ T5203] loop4: detected capacity change from 0 to 8192 [ 162.773985][ T5142] loop3: detected capacity change from 0 to 128 [ 162.792562][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 162.802449][ T5203] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.815326][ T5177] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 162.824886][ T5177] BTRFS info (device loop0): use zstd compression, level 3 [ 162.837663][ T5177] BTRFS info (device loop0): using free space tree [ 162.859386][ T5142] loop3: detected capacity change from 0 to 128 [ 162.872844][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 162.918018][ T5142] loop3: detected capacity change from 0 to 128 [ 162.964973][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 163.036680][ T5199] loop1: detected capacity change from 0 to 32768 [ 163.044652][ T5177] BTRFS info (device loop0): enabling ssd optimizations [ 163.055374][ T5142] loop3: detected capacity change from 0 to 128 [ 163.062631][ T5177] BTRFS info (device loop0): checking UUID tree [ 163.073457][ T5142] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 163.190014][ T5142] loop3: detected capacity change from 0 to 128 [ 163.582902][ T3572] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.085468][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.101985][ T5243] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.117630][ T5219] loop2: detected capacity change from 0 to 32768 [ 165.136884][ T5219] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5219) [ 165.260600][ T5219] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.293550][ T5219] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 165.580702][ T5219] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 165.654443][ T5219] BTRFS info (device loop2): use zstd compression, level 3 [ 165.785488][ T5219] BTRFS info (device loop2): using free space tree [ 166.180395][ T5219] BTRFS error (device loop2): open_ctree failed [ 166.202248][ T5267] vivid-002: disconnect [ 166.258742][ T5267] vivid-002: reconnect [ 166.487301][ T5230] loop3: detected capacity change from 0 to 32768 [ 166.507367][ T5277] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 166.513900][ T5277] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 166.544657][ T5277] vhci_hcd vhci_hcd.0: Device attached [ 166.590492][ T5278] vhci_hcd: connection closed [ 166.591446][ T4616] vhci_hcd: stop threads [ 166.621091][ T4616] vhci_hcd: release socket [ 166.625527][ T4616] vhci_hcd: disconnect device [ 166.725339][ T5282] loop1: detected capacity change from 0 to 8192 [ 166.758587][ T5282] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.920378][ T5300] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.367671][ T5307] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 169.397777][ T5307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.406043][ T5307] bond0: (slave bond1): Enslaving as an active interface with an up link [ 169.510389][ T27] audit: type=1326 audit(1717718112.296:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f794867cf69 code=0x0 [ 175.133534][ T5337] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 175.193912][ T27] audit: type=1326 audit(1717718118.006:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9e5c7cf69 code=0x0 [ 175.205711][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.259678][ T5341] loop4: detected capacity change from 0 to 4096 [ 175.302506][ T27] audit: type=1326 audit(1717718118.116:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9e5c7cf69 code=0x0 [ 175.329561][ T5347] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.339641][ T5345] loop1: detected capacity change from 0 to 1024 [ 175.363935][ T5345] hfsplus: unable to parse mount options [ 175.388005][ T27] audit: type=1804 audit(1717718118.196:1151): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4193780044/syzkaller.Bh8lYp/63/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 175.788464][ T5342] loop2: detected capacity change from 0 to 32768 [ 175.839996][ T5342] jfs: Unrecognized mount option "ÿÿÿÿÿÿÿÿ00000000000000000000g)®U" or missing value [ 175.852463][ T3768] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.050386][ T3768] usb 1-1: device descriptor read/64, error -71 [ 176.420673][ T3768] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 176.687992][ T5360] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 176.702558][ T3768] usb 1-1: device descriptor read/64, error -71 [ 176.756251][ T5360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.769648][ T5340] loop3: detected capacity change from 0 to 32768 [ 176.782539][ T5360] bond0: (slave bond2): Enslaving as an active interface with an up link [ 176.800587][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.827472][ T5371] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 176.830449][ T3768] usb usb1-port1: attempt power cycle [ 177.032366][ T3575] Bluetooth: hci3: command 0x0406 tx timeout [ 177.038408][ T3575] Bluetooth: hci2: command 0x0406 tx timeout [ 177.044493][ T3574] Bluetooth: hci1: command 0x0406 tx timeout [ 177.051671][ T3585] Bluetooth: hci4: command 0x0406 tx timeout [ 177.060373][ T3575] Bluetooth: hci0: command 0x0406 tx timeout [ 177.091837][ T5375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.099860][ T5375] bond0: (slave bond3): Enslaving as an active interface with an up link [ 181.831929][ T3768] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 181.931678][ T5402] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.999386][ T27] audit: type=1326 audit(1717718124.806:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9e5c7cf69 code=0x0 [ 182.021719][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.039605][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.100261][ T3768] usb 1-1: device not accepting address 8, error -71 [ 182.322392][ T5414] No such timeout policy "syz0" [ 182.405104][ T27] audit: type=1804 audit(1717718125.216:1153): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4193780044/syzkaller.Bh8lYp/67/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 183.203909][ T5408] loop1: detected capacity change from 0 to 32768 [ 183.221268][ T5408] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5408) [ 183.240038][ T5408] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 183.266756][ T5408] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 183.276326][ T5408] BTRFS info (device loop1): using free space tree [ 183.397388][ T5439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.429689][ T5433] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 183.476637][ T5433] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 183.587354][ T5408] BTRFS info (device loop1): enabling ssd optimizations [ 186.233711][ T3571] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 186.336335][ T5469] overlayfs: missing 'lowerdir' [ 186.392465][ T5470] overlayfs: unrecognized mount option "permit_directio" or missing value [ 186.421804][ T5470] overlayfs: missing 'lowerdir' [ 187.168011][ T27] audit: type=1326 audit(1717718129.976:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5472 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef8fa7cf69 code=0x0 [ 187.257768][ T5478] loop0: detected capacity change from 0 to 512 [ 187.279660][ T5484] loop1: detected capacity change from 0 to 256 [ 187.290131][ T5481] loop3: detected capacity change from 0 to 1024 [ 187.290901][ T5478] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.312513][ T5478] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 187.340351][ T5478] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 2 len 1 [ 187.357695][ T5478] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 187.377281][ T5478] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 187.388999][ T5484] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 187.404101][ T5478] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 187.419836][ T5480] hfsplus: bad catalog entry type [ 187.422732][ T5478] EXT4-fs (loop0): 1 truncate cleaned up [ 187.431124][ T5478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 187.447128][ T5480] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 187.473865][ T3572] EXT4-fs error (device loop0): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 187.494182][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.508334][ T5481] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 187.526212][ T5480] syz-executor.3 (5480) used greatest stack depth: 19800 bytes left [ 187.533345][ T3572] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 187.567129][ T3572] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 187.597442][ T5301] hfsplus: b-tree write err: -5, ino 4 [ 187.771838][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.837638][ T5506] No such timeout policy "syz0" [ 187.866046][ T5467] loop2: detected capacity change from 0 to 40427 [ 187.881986][ T5467] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 187.889208][ T5467] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 187.915481][ T3572] EXT4-fs (loop0): unmounting filesystem. [ 187.922293][ T27] audit: type=1804 audit(1717718130.746:1155): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1638598401/syzkaller.JsMhMl/70/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 187.948669][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.959237][ T5467] F2FS-fs (loop2): Unrecognized mount option "jqfmt=vƒÕœÀº%Pfsv1" or missing value [ 187.998733][ T4139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.901606][ T4139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.652837][ T5519] overlayfs: missing 'lowerdir' [ 190.659425][ T27] audit: type=1326 audit(1717718131.996:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8fa7cf69 code=0x7ffc0000 [ 191.250032][ T5521] overlayfs: unrecognized mount option "permit_directio" or missing value [ 191.269766][ T5519] overlayfs: missing 'lowerdir' [ 191.329665][ T27] audit: type=1326 audit(1717718131.996:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef8fa7cf69 code=0x7ffc0000 [ 191.362952][ T4139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.395491][ T27] audit: type=1326 audit(1717718132.006:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8fa7cf69 code=0x7ffc0000 [ 191.419348][ T27] audit: type=1326 audit(1717718132.006:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef8fa7cf69 code=0x7ffc0000 [ 191.453702][ T27] audit: type=1326 audit(1717718132.006:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8fa7cf69 code=0x7ffc0000 [ 191.476566][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.515073][ T4139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.562178][ T27] audit: type=1326 audit(1717718133.616:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef8fa7a6e7 code=0x7ffc0000 [ 191.667905][ T27] audit: type=1326 audit(1717718133.616:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef8fa403b9 code=0x7ffc0000 [ 191.798396][ T27] audit: type=1326 audit(1717718133.616:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fef8fa7cf69 code=0x7ffc0000 [ 191.807547][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.975233][ T5549] loop4: detected capacity change from 0 to 512 [ 192.121310][ T5549] EXT4-fs (loop4): filesystem is read-only [ 192.936783][ T5566] No such timeout policy "syz0" [ 192.944094][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 192.944103][ T27] audit: type=1326 audit(1717718135.756:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f827687cf69 code=0x0 [ 192.987104][ T5549] 9pnet_fd: Insufficient options for proto=fd [ 193.056501][ T27] audit: type=1804 audit(1717718135.866:1205): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3021281358/syzkaller.TWB5q4/76/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 193.082827][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.099265][ T3574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.109988][ T3574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.118329][ T3574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.127139][ T3574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.134958][ T3574] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.142334][ T3574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.319275][ T5577] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 193.325818][ T5577] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 193.357013][ T5577] vhci_hcd vhci_hcd.0: Device attached [ 193.399086][ T5578] vhci_hcd: connection closed [ 193.399282][ T3703] vhci_hcd: stop threads [ 193.414667][ T3703] vhci_hcd: release socket [ 193.434469][ T3703] vhci_hcd: disconnect device [ 193.582002][ T5587] overlayfs: missing 'lowerdir' [ 193.691826][ T5588] overlayfs: unrecognized mount option "permit_directio" or missing value [ 193.954881][ T5589] overlayfs: missing 'lowerdir' [ 194.067276][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.082729][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.460056][ T5570] chnl_net:caif_netlink_parms(): no params data found [ 194.631855][ T5596] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.778797][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.959112][ T27] audit: type=1326 audit(1717718137.766:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5616 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafcc87cf69 code=0x0 [ 194.981434][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.106476][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.135949][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.152042][ T5570] device bridge_slave_0 entered promiscuous mode [ 195.181278][ T3584] Bluetooth: hci1: command tx timeout [ 195.196042][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.206596][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.246703][ T5570] device bridge_slave_1 entered promiscuous mode [ 195.279242][ T4139] device hsr_slave_0 left promiscuous mode [ 195.300374][ T4139] device hsr_slave_1 left promiscuous mode [ 195.319613][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.334308][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.366489][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.379124][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.395602][ T4139] device bridge_slave_1 left promiscuous mode [ 195.404762][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.448722][ T4139] device bridge_slave_0 left promiscuous mode [ 195.456896][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.522914][ T4139] device veth1_macvtap left promiscuous mode [ 195.538457][ T4139] device veth0_macvtap left promiscuous mode [ 195.560171][ T4139] device veth1_vlan left promiscuous mode [ 195.669256][ T4139] device veth0_vlan left promiscuous mode [ 196.523244][ T5630] No such timeout policy "syz0" [ 196.632524][ T27] audit: type=1804 audit(1717718139.426:1207): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3021281358/syzkaller.TWB5q4/79/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 196.669970][ T5615] loop1: detected capacity change from 0 to 32768 [ 196.713648][ T5615] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5615) [ 196.731150][ T5615] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.740153][ T5633] No such timeout policy "syz0" [ 196.741493][ T5615] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 196.765444][ T5615] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 196.789180][ T5615] BTRFS info (device loop1): use zstd compression, level 3 [ 196.798017][ T4139] bond0 (unregistering): (slave bond2): Releasing backup interface [ 196.809898][ T5615] BTRFS info (device loop1): using free space tree [ 196.819419][ T4139] bond2 (unregistering): Released all slaves [ 196.836611][ T27] audit: type=1804 audit(1717718139.646:1208): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4193780044/syzkaller.Bh8lYp/79/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 196.862981][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.897238][ T4139] bond0 (unregistering): (slave bond1): Releasing backup interface [ 196.912530][ T4139] bond1 (unregistering): Released all slaves [ 196.983505][ T5615] BTRFS info (device loop1): enabling ssd optimizations [ 197.002088][ T5615] BTRFS info (device loop1): checking UUID tree [ 197.136943][ T3571] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.270642][ T3584] Bluetooth: hci1: command tx timeout [ 197.319548][ T4139] team0 (unregistering): Port device team_slave_1 removed [ 197.402760][ T4139] team0 (unregistering): Port device team_slave_0 removed [ 197.430437][ T4139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.460320][ T4139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.594597][ T5657] overlayfs: missing 'lowerdir' [ 197.712857][ T5658] overlayfs: unrecognized mount option "permit_directio" or missing value [ 197.784941][ T5658] overlayfs: missing 'lowerdir' [ 198.388676][ T4139] bond0 (unregistering): Released all slaves [ 198.426965][ T5669] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 198.433503][ T5669] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 198.449907][ T5669] vhci_hcd vhci_hcd.0: Device attached [ 198.484427][ T5670] vhci_hcd: connection closed [ 198.484769][ T39] vhci_hcd: stop threads [ 198.505633][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.512396][ T39] vhci_hcd: release socket [ 198.519687][ T39] vhci_hcd: disconnect device [ 198.523163][ T5570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.558420][ T5570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.640122][ T5570] team0: Port device team_slave_0 added [ 198.685019][ T5570] team0: Port device team_slave_1 added [ 198.738007][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.778976][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.800976][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.834979][ T5688] loop4: detected capacity change from 0 to 2048 [ 198.856961][ T5688] NILFS (loop4): invalid segment: Sequence number mismatch [ 198.873343][ T5688] NILFS (loop4): trying rollback from an earlier position [ 198.887021][ T5570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.917937][ T5688] NILFS (loop4): recovery complete [ 198.942104][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.952448][ T5692] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.972757][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.002795][ T5570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.096685][ T27] audit: type=1326 audit(1717718141.906:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafcc87cf69 code=0x0 [ 199.170410][ T5570] device hsr_slave_0 entered promiscuous mode [ 199.291952][ T5570] device hsr_slave_1 entered promiscuous mode [ 199.312964][ T5570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.370286][ T3584] Bluetooth: hci1: command tx timeout [ 199.888116][ T5570] Cannot create hsr debugfs directory [ 200.361928][ T5705] No such timeout policy "syz0" [ 200.995991][ T5570] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.026791][ T5570] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.082439][ T5570] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.108613][ T5570] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.304570][ T5718] loop3: detected capacity change from 0 to 1024 [ 201.510294][ T3574] Bluetooth: hci1: command tx timeout [ 201.976700][ T5703] loop2: detected capacity change from 0 to 32768 [ 202.043347][ T5703] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5703) [ 202.066298][ T5570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.081073][ T5718] EXT4-fs: Ignoring removed orlov option [ 202.089480][ T5718] EXT4-fs (loop3): Test dummy encryption mode enabled [ 202.118052][ T5718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 202.154319][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.163976][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.179127][ T5570] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.188808][ T5703] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.210327][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.210530][ T5703] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 202.218863][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.236518][ T5703] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 202.246426][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.253535][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.270238][ T5703] BTRFS info (device loop2): use zstd compression, level 3 [ 202.277464][ T5703] BTRFS info (device loop2): using free space tree [ 202.290532][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.299553][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.321061][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.328150][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.337248][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.349736][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.357785][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.382150][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.406900][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.455432][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.516954][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.565376][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.592797][ T5717] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 202.609693][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.636657][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.659354][ T5703] BTRFS info (device loop2): enabling ssd optimizations [ 202.661942][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.682222][ T5703] BTRFS info (device loop2): checking UUID tree [ 202.724745][ T5570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.749353][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.806525][ T3573] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.829178][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.846377][ T3576] EXT4-fs (loop3): unmounting filesystem. [ 202.855379][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.891985][ T5766] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 202.898518][ T5766] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.983886][ T5766] vhci_hcd vhci_hcd.0: Device attached [ 203.019226][ T5767] vhci_hcd: connection closed [ 203.019380][ T3782] vhci_hcd: stop threads [ 203.046082][ T3782] vhci_hcd: release socket [ 203.060333][ T3782] vhci_hcd: disconnect device [ 203.498680][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.512482][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.548875][ T5570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.668368][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.106184][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.211648][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.226154][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.248850][ T5570] device veth0_vlan entered promiscuous mode [ 204.254905][ T27] audit: type=1326 audit(1717718147.056:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafcc87cf69 code=0x0 [ 204.290680][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.299001][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.323069][ T5570] device veth1_vlan entered promiscuous mode [ 204.362735][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.377543][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.397861][ T5570] device veth0_macvtap entered promiscuous mode [ 204.418496][ T5570] device veth1_macvtap entered promiscuous mode [ 204.455529][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.471824][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.486393][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.507302][ T5797] No such timeout policy "syz0" [ 204.515219][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.533550][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.549164][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.571156][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.598157][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.630112][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.661958][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.673553][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.695089][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.733339][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.759935][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.780664][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.799325][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.810783][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.821635][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.831803][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.842525][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.853570][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.876931][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.902824][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.925118][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.939352][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.957633][ T5570] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.970526][ T5570] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.979312][ T5570] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.989268][ T5570] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.154936][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.282687][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.298152][ T5818] Bluetooth: MGMT ver 1.22 [ 206.093733][ T5805] loop3: detected capacity change from 0 to 32768 [ 206.106465][ T5805] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5805) [ 206.197669][ T5823] loop1: detected capacity change from 0 to 512 [ 206.216997][ T5823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 206.247930][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 206.256695][ T5805] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.270533][ T5805] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 206.297701][ T3782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.330456][ T5805] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 206.343293][ T3782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.474937][ T5805] BTRFS info (device loop3): use zstd compression, level 3 [ 206.487836][ T5805] BTRFS info (device loop3): using free space tree [ 206.506976][ T5828] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.519471][ T5831] overlayfs: './file1' not a directory [ 207.277131][ T5828] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.312557][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.410641][ T3584] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 207.418255][ T3584] Bluetooth: hci0: command 0x0406 tx timeout [ 207.495930][ T5828] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.496261][ T3571] EXT4-fs (loop1): unmounting filesystem. [ 207.521432][ T5848] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 208.198813][ T5805] BTRFS error (device loop3): open_ctree failed [ 208.271354][ T5828] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.294311][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.483434][ T5828] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.566897][ T5828] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.631907][ T5828] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.699063][ T5828] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.714495][ T5879] loop1: detected capacity change from 0 to 256 [ 208.722920][ T5879] FAT-fs (loop1): Unrecognized mount option "check=st2ict" or missing value [ 208.735962][ T27] audit: type=1326 audit(1717718151.556:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f794867cf69 code=0x0 [ 210.928367][ T5905] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 211.128852][ T5905] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.169268][ T5905] bond0: (slave bond4): Enslaving as an active interface with an up link [ 211.264735][ T5907] loop3: detected capacity change from 0 to 40427 [ 211.274413][ T5907] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 211.282256][ T5907] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 211.333509][ T5907] F2FS-fs (loop3): Found nat_bits in checkpoint [ 211.368715][ T5907] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 211.455728][ T5907] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 211.463232][ T5907] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 213.282166][ T3576] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 213.282223][ T3576] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 213.290094][ T3576] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 213.307927][ T3576] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 213.315576][ T3576] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 213.324268][ T3576] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 213.337409][ T3576] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 213.685657][ T5909] loop4: detected capacity change from 0 to 32768 [ 214.117788][ T5909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5909) [ 214.426224][ T5948] loop0: detected capacity change from 0 to 1024 [ 214.502642][ T27] audit: type=1800 audit(1717718157.276:1212): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 214.623420][ T5909] BTRFS error (device loop4): open_ctree failed [ 214.682705][ T5950] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.695729][ T5950] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.705991][ T5950] IPv6: Can't replace route, no match found [ 214.806229][ T5952] loop3: detected capacity change from 0 to 256 [ 214.822057][ T5952] FAT-fs (loop3): Unrecognized mount option "check=st2ict" or missing value [ 214.915812][ T3661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.930522][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.015540][ T5967] loop4: detected capacity change from 0 to 256 [ 215.050866][ T3661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.138060][ T3661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.192840][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.211591][ T5969] loop1: detected capacity change from 0 to 4096 [ 215.257096][ T3661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.285967][ T5969] NILFS (loop1): invalid segment: Checksum error in segment payload [ 215.314228][ T5969] NILFS (loop1): trying rollback from an earlier position [ 215.373636][ T5969] NILFS (loop1): recovery complete [ 215.407114][ T5981] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.477318][ T27] audit: type=1800 audit(1717718158.286:1213): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=13 res=0 errno=0 [ 215.539857][ T27] audit: type=1800 audit(1717718158.326:1214): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=13 res=0 errno=0 [ 215.720061][ T3574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.730748][ T3574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.738743][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.749726][ T3585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.759238][ T3585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.766869][ T3585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.774259][ T3585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.791856][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.796023][ T5985] tmpfs: Bad value for 'mpol' [ 215.843412][ T5984] device veth5 entered promiscuous mode [ 217.137591][ T5986] chnl_net:caif_netlink_parms(): no params data found [ 217.327182][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.380539][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.423685][ T5986] device bridge_slave_0 entered promiscuous mode [ 217.473849][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.481033][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.489279][ T5986] device bridge_slave_1 entered promiscuous mode [ 217.516346][ T5986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.568305][ T5986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.664350][ T5986] team0: Port device team_slave_0 added [ 217.688877][ T5986] team0: Port device team_slave_1 added [ 217.727443][ T3661] device hsr_slave_0 left promiscuous mode [ 217.738011][ T3661] device hsr_slave_1 left promiscuous mode [ 217.768262][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.788675][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.813714][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.820363][ T3585] Bluetooth: hci1: command tx timeout [ 217.828377][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.894549][ T3661] device bridge_slave_1 left promiscuous mode [ 217.924202][ T3661] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.994149][ T3661] device bridge_slave_0 left promiscuous mode [ 218.018366][ T3661] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.077659][ T3661] device veth1_macvtap left promiscuous mode [ 218.094017][ T3661] device veth0_macvtap left promiscuous mode [ 218.109162][ T3661] device veth1_vlan left promiscuous mode [ 218.128291][ T3661] device veth0_vlan left promiscuous mode [ 218.138945][ T6003] loop1: detected capacity change from 0 to 32768 [ 218.157487][ T6003] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6003) [ 218.218632][ T6003] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.250386][ T6003] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 218.265368][ T6003] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 218.289943][ T6003] BTRFS info (device loop1): use zstd compression, level 3 [ 218.321351][ T6003] BTRFS info (device loop1): using free space tree [ 218.483390][ T6003] BTRFS info (device loop1): enabling ssd optimizations [ 218.502932][ T6003] BTRFS info (device loop1): checking UUID tree [ 218.680159][ T3661] team0 (unregistering): Port device team_slave_1 removed [ 218.707764][ T3571] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.716538][ T3661] team0 (unregistering): Port device team_slave_0 removed [ 218.771895][ T6045] loop3: detected capacity change from 0 to 512 [ 218.783590][ T6045] ext3: Unknown parameter 'nouser_xattr' [ 218.837726][ T3661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.870610][ T3661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.916175][ T6049] loop3: detected capacity change from 0 to 64 [ 219.027814][ T3661] bond0 (unregistering): Released all slaves [ 219.185728][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.228413][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.264740][ T5986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.287666][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.297877][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.491132][ T5986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.761472][ T5986] device hsr_slave_0 entered promiscuous mode [ 219.825317][ T5986] device hsr_slave_1 entered promiscuous mode [ 219.836470][ T5986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.856891][ T5986] Cannot create hsr debugfs directory [ 219.900342][ T3585] Bluetooth: hci1: command tx timeout [ 219.912474][ T6064] loop2: detected capacity change from 0 to 2048 [ 219.942760][ T6066] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.965630][ T27] audit: type=1800 audit(1717718162.776:1215): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 220.028957][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.115193][ T6068] loop1: detected capacity change from 0 to 256 [ 220.299984][ T27] audit: type=1804 audit(1717718163.106:1216): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1638598401/syzkaller.JsMhMl/103/file0/bus" dev="loop3" ino=21 res=1 errno=0 [ 220.360039][ T27] audit: type=1804 audit(1717718163.146:1217): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1638598401/syzkaller.JsMhMl/103/file0/bus" dev="loop3" ino=21 res=1 errno=0 [ 220.370627][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.421476][ T27] audit: type=1804 audit(1717718163.146:1218): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1638598401/syzkaller.JsMhMl/103/file0/bus" dev="loop3" ino=21 res=1 errno=0 [ 220.469525][ T6054] loop4: detected capacity change from 0 to 32768 [ 220.495620][ T6054] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6054) [ 220.520363][ T6049] tipc: Started in network mode [ 220.525323][ T6049] tipc: Node identity 2e2f66696c6532006e, cluster identity 8 [ 220.640884][ T6054] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 220.662387][ T6054] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 223.344272][ T3585] Bluetooth: hci1: command tx timeout [ 223.411457][ T6054] BTRFS info (device loop4): enabling auto defrag [ 223.429230][ T6054] BTRFS info (device loop4): max_inline at 0 [ 223.440997][ T6054] BTRFS info (device loop4): force clearing of disk cache [ 223.443793][ T3576] hfs: node 4:3 still has 1 user(s)! [ 223.462591][ T6054] BTRFS info (device loop4): enabling ssd optimizations [ 223.469639][ T6054] BTRFS info (device loop4): disabling free space tree [ 223.614792][ T6054] BTRFS error (device loop4): open_ctree failed [ 223.616793][ T6100] No such timeout policy "syz0" [ 223.715484][ T27] audit: type=1804 audit(1717718166.526:1219): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1638598401/syzkaller.JsMhMl/104/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 223.895485][ T5986] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.923676][ T5986] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.945398][ T5986] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.973028][ T5986] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.149689][ T5986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.188363][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.199640][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.226376][ T5986] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.247493][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.262882][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.275596][ T6086] loop2: detected capacity change from 0 to 32768 [ 224.284731][ T3816] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.291870][ T3816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.328460][ T6086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6086) [ 224.338639][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.349150][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.366847][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.388789][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.395930][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.431106][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.439877][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.483095][ T6086] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.498642][ T3288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.507843][ T6086] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 224.513209][ T3288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.538541][ T6086] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 224.545809][ T3288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.557154][ T6086] BTRFS info (device loop2): use zstd compression, level 3 [ 224.572088][ T3288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.575454][ T6086] BTRFS info (device loop2): using free space tree [ 224.593768][ T3288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.616510][ T27] audit: type=1326 audit(1717718167.426:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f794867cf69 code=0x0 [ 224.652151][ T3288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.673697][ T3288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.700401][ T3288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.727243][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.752757][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.785860][ T6086] BTRFS info (device loop2): enabling ssd optimizations [ 224.795578][ T6086] BTRFS info (device loop2): checking UUID tree [ 224.894844][ T3573] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.318315][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.348965][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.361095][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.414239][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.423067][ T3585] Bluetooth: hci1: command tx timeout [ 225.439264][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.518694][ T6142] loop3: detected capacity change from 0 to 8 [ 225.527985][ T5986] device veth0_vlan entered promiscuous mode [ 225.554580][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.581998][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.594909][ T6142] SQUASHFS error: zstd decompression error: 10 [ 225.611273][ T6142] SQUASHFS error: zstd decompression failed, data probably corrupt [ 225.620049][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.648636][ T6142] SQUASHFS error: Failed to read block 0x4ea: -5 [ 225.656993][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.661204][ T6106] loop1: detected capacity change from 0 to 32768 [ 225.674686][ T6142] SQUASHFS error: Unable to read metadata cache entry [4e8] [ 225.695645][ T5986] device veth1_vlan entered promiscuous mode [ 225.703135][ T6142] SQUASHFS error: Unable to read inode 0x11f [ 225.785233][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.804573][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.837781][ T5986] device veth0_macvtap entered promiscuous mode [ 225.865633][ T5986] device veth1_macvtap entered promiscuous mode [ 225.920306][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.955602][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.985782][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.023387][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.057881][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.097317][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.122820][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.147814][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.179912][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.195969][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.206641][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.222673][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.239256][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.272358][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.310550][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.343167][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.376504][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.419875][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.453752][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.485151][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.519991][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.529492][ T6139] loop2: detected capacity change from 0 to 32768 [ 226.563015][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.590716][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.605064][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.642955][ T5986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.669162][ T5986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.678889][ T6139] XFS (loop2): Mounting V5 Filesystem [ 226.689189][ T5986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.708511][ T5986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.745970][ T6139] XFS (loop2): Ending clean mount [ 226.765014][ T6139] XFS (loop2): Quotacheck needed: Please wait. [ 226.816899][ T4616] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 226.864811][ T4616] XFS (loop2): Unmount and run xfs_repair [ 226.889817][ T4616] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 226.919430][ T4616] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 226.935206][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.954376][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.975561][ T4616] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 226.998351][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.019034][ T4616] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 227.030024][ T5175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.057215][ T5175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.066302][ T4616] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 227.099394][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.105350][ T4616] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 227.142968][ T4616] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.171002][ T4616] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.207615][ T4616] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.239792][ T4616] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 227.295656][ T6139] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 227.732740][ T3573] XFS (loop2): Unmounting Filesystem [ 228.179836][ T6168] loop1: detected capacity change from 0 to 64 [ 229.212056][ T6159] loop0: detected capacity change from 0 to 32768 [ 229.673249][ T6175] loop2: detected capacity change from 0 to 512 [ 229.764299][ T6161] loop4: detected capacity change from 0 to 32768 [ 229.784818][ T6175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 229.801243][ T6175] ext4 filesystem being mounted at /root/syzkaller-testdir3021281358/syzkaller.TWB5q4/105/file0 supports timestamps until 2038 (0x7fffffff) [ 229.859910][ T6161] XFS (loop4): Mounting V5 Filesystem [ 229.979234][ T6161] XFS (loop4): Ending clean mount [ 229.982825][ T6191] No such timeout policy "syz0" [ 230.013268][ T6161] XFS (loop4): Quotacheck needed: Please wait. [ 230.046537][ T27] audit: type=1804 audit(1717718172.856:1221): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir475957485/syzkaller.wipzHu/1/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 230.081557][ T6175] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz-executor.2: corrupted inode contents [ 230.108040][ T6161] XFS (loop4): Quotacheck: Done. [ 230.128373][ T6175] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz-executor.2: mark_inode_dirty error [ 230.156847][ T6175] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz-executor.2: corrupted inode contents [ 230.184744][ T3567] XFS (loop4): Unmounting Filesystem [ 230.193957][ T6175] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 230.234932][ T27] audit: type=1804 audit(1717718173.046:1222): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2056177792/syzkaller.qTcXXZ/99/file0/bus" dev="loop1" ino=21 res=1 errno=0 [ 230.284317][ T6193] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor.2: path /root/syzkaller-testdir3021281358/syzkaller.TWB5q4/105/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 230.293288][ T27] audit: type=1804 audit(1717718173.096:1223): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2056177792/syzkaller.qTcXXZ/99/file0/bus" dev="loop1" ino=21 res=1 errno=0 [ 230.312816][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.347694][ T6168] tipc: Cannot configure node identity twice [ 230.359389][ T27] audit: type=1804 audit(1717718173.096:1224): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2056177792/syzkaller.qTcXXZ/99/file0/bus" dev="loop1" ino=21 res=1 errno=0 [ 230.386233][ T6193] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor.2: path /root/syzkaller-testdir3021281358/syzkaller.TWB5q4/105/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 230.427463][ T6193] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir3021281358/syzkaller.TWB5q4/105/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 230.463758][ T6193] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor.2: path /root/syzkaller-testdir3021281358/syzkaller.TWB5q4/105/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 230.492613][ T3571] hfs: node 4:3 still has 1 user(s)! [ 230.550125][ T27] audit: type=1326 audit(1717718173.356:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f827687cf69 code=0x0 [ 230.581306][ T3573] EXT4-fs (loop2): unmounting filesystem. [ 231.015820][ T6195] loop4: detected capacity change from 0 to 32768 [ 231.038384][ T6195] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6195) [ 231.083296][ T6195] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.098194][ T6195] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 231.108866][ T6195] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 231.344307][ T6195] BTRFS info (device loop4): use zstd compression, level 3 [ 231.374199][ T6195] BTRFS info (device loop4): using free space tree [ 234.121845][ T6195] BTRFS error (device loop4): open_ctree failed [ 234.580480][ T6246] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 234.587029][ T6246] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 234.594875][ T6246] vhci_hcd vhci_hcd.0: Device attached [ 234.901654][ T6247] vhci_hcd: connection closed [ 234.901882][ T3792] vhci_hcd: stop threads [ 234.919809][ T6255] loop3: detected capacity change from 0 to 512 [ 234.927123][ T3792] vhci_hcd: release socket [ 234.932433][ T3792] vhci_hcd: disconnect device [ 234.932553][ T6258] loop4: detected capacity change from 0 to 64 [ 234.988163][ T6255] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 235.010895][ T6255] ext4 filesystem being mounted at /root/syzkaller-testdir1638598401/syzkaller.JsMhMl/110/file0 supports timestamps until 2038 (0x7fffffff) [ 235.087777][ T27] audit: type=1326 audit(1717718177.896:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f827687cf69 code=0x0 [ 235.091363][ T6255] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz-executor.3: corrupted inode contents [ 235.150718][ T6255] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz-executor.3: mark_inode_dirty error [ 235.163128][ T6255] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz-executor.3: corrupted inode contents [ 235.176511][ T6255] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 235.192244][ T6268] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path /root/syzkaller-testdir1638598401/syzkaller.JsMhMl/110/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 235.235603][ T6268] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor.3: path /root/syzkaller-testdir1638598401/syzkaller.JsMhMl/110/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 235.280057][ T6268] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1638598401/syzkaller.JsMhMl/110/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 235.323351][ T6268] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor.3: path /root/syzkaller-testdir1638598401/syzkaller.JsMhMl/110/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 235.396364][ T6268] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor.3: path /root/syzkaller-testdir1638598401/syzkaller.JsMhMl/110/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 235.429161][ T6268] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor.3: path /root/syzkaller-testdir1638598401/syzkaller.JsMhMl/110/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 235.455333][ T6271] loop2: detected capacity change from 0 to 256 [ 235.468421][ T6271] FAT-fs (loop2): Unrecognized mount option "check=st2ict" or missing value [ 235.542340][ T3576] EXT4-fs (loop3): unmounting filesystem. [ 235.549388][ T27] audit: type=1804 audit(1717718178.356:1227): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4193780044/syzkaller.Bh8lYp/100/file0/bus" dev="loop4" ino=21 res=1 errno=0 [ 235.600726][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 235.606231][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 235.622307][ T6258] tipc: Cannot configure node identity twice [ 235.628629][ T27] audit: type=1804 audit(1717718178.386:1228): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4193780044/syzkaller.Bh8lYp/100/file0/bus" dev="loop4" ino=21 res=1 errno=0 [ 235.668206][ T27] audit: type=1804 audit(1717718178.386:1229): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4193780044/syzkaller.Bh8lYp/100/file0/bus" dev="loop4" ino=21 res=1 errno=0 [ 235.841274][ T3567] hfs: node 4:3 still has 1 user(s)! [ 237.069693][ T6293] loop1: detected capacity change from 0 to 64 [ 238.031266][ T6287] loop4: detected capacity change from 0 to 32768 [ 238.076304][ T6287] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6287) [ 238.116752][ T6287] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.129678][ T6287] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 238.176356][ T6287] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 238.216683][ T6287] BTRFS info (device loop4): use zstd compression, level 3 [ 238.256816][ T6287] BTRFS info (device loop4): using free space tree [ 238.548731][ T6287] BTRFS info (device loop4): enabling ssd optimizations [ 238.591480][ T6287] BTRFS info (device loop4): checking UUID tree [ 238.774492][ T3567] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.163414][ T3584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.175196][ T3584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.184588][ T3584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.193197][ T3584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.196774][ T6300] loop0: detected capacity change from 0 to 32768 [ 239.210014][ T3574] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 239.217224][ T3574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.461303][ T6335] loop4: detected capacity change from 0 to 64 [ 239.559563][ T6330] chnl_net:caif_netlink_parms(): no params data found [ 239.970005][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.057502][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.099647][ T27] audit: type=1804 audit(1717718182.906:1230): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4193780044/syzkaller.Bh8lYp/102/file0/bus" dev="loop4" ino=21 res=1 errno=0 [ 240.148355][ T6330] device bridge_slave_0 entered promiscuous mode [ 240.177549][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.208105][ T27] audit: type=1804 audit(1717718182.936:1231): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4193780044/syzkaller.Bh8lYp/102/file0/bus" dev="loop4" ino=21 res=1 errno=0 [ 240.243124][ T6335] tipc: Cannot configure node identity twice [ 240.403957][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.428581][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.534044][ T6330] device bridge_slave_1 entered promiscuous mode [ 240.605521][ T3567] hfs: node 4:3 still has 1 user(s)! [ 240.919716][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.987768][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.187394][ T6330] team0: Port device team_slave_0 added [ 241.229449][ T6330] team0: Port device team_slave_1 added [ 241.291014][ T27] audit: type=1804 audit(1717718182.936:1232): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4193780044/syzkaller.Bh8lYp/102/file0/bus" dev="loop4" ino=21 res=1 errno=0 [ 241.352481][ T3574] Bluetooth: hci2: command tx timeout [ 241.415153][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.462821][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.463572][ T27] audit: type=1326 audit(1717718184.036:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc44287cf69 code=0x0 [ 241.516675][ T6327] loop3: detected capacity change from 0 to 32768 [ 241.598344][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.675702][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.792103][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.856989][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.981055][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.123799][ T6330] device hsr_slave_0 entered promiscuous mode [ 242.150136][ T6330] device hsr_slave_1 entered promiscuous mode [ 242.203268][ T6330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.218350][ T6330] Cannot create hsr debugfs directory [ 242.553259][ T6330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.694287][ T6330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.763294][ T27] audit: type=1804 audit(1717718185.576:1234): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir475957485/syzkaller.wipzHu/12/file1" dev="sda1" ino=1951 res=1 errno=0 [ 242.853347][ T6330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.977758][ T6330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.351753][ T6330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.386019][ T6330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.416669][ T6330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 243.424001][ T3574] Bluetooth: hci2: command tx timeout [ 243.458614][ T6330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 243.705516][ T6330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.820360][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.833557][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.849497][ T39] tipc: Left network mode [ 243.856705][ T6330] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.896587][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.909945][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.928754][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.935898][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.982398][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.992424][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.022676][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.115896][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.123068][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.268347][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.381026][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.724501][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.744885][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.781043][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.804405][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.822113][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.860836][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.917862][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.962528][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.970998][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.982044][ T6330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.163768][ T3768] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 245.480888][ T3768] usb 5-1: Using ep0 maxpacket: 16 [ 245.500324][ T3574] Bluetooth: hci2: command tx timeout [ 245.602003][ T3768] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 245.850555][ T3768] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 245.877739][ T3768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.926690][ T3768] usb 5-1: Product: syz [ 245.945852][ T3768] usb 5-1: Manufacturer: syz [ 245.968584][ T3768] usb 5-1: SerialNumber: syz [ 245.993502][ T3768] usb 5-1: config 0 descriptor?? [ 246.051690][ T3768] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 246.075445][ T3768] usb 5-1: Detected FT232R [ 246.087324][ T6330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.109068][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.119926][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.170521][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.191424][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.284686][ T3768] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 246.310912][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.334444][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.351155][ T6330] device veth0_vlan entered promiscuous mode [ 246.403537][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.431010][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.458737][ T6330] device veth1_vlan entered promiscuous mode [ 246.585854][ T3768] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 246.623084][ T39] device hsr_slave_0 left promiscuous mode [ 246.650337][ T39] device hsr_slave_1 left promiscuous mode [ 246.670654][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.678081][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.706776][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.740326][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.756653][ T3768] usb 5-1: USB disconnect, device number 3 [ 246.760447][ T39] device bridge_slave_1 left promiscuous mode [ 246.769424][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.799547][ T3768] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 246.814706][ T3585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.824232][ T3585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.832323][ T3768] ftdi_sio 5-1:0.0: device disconnected [ 246.834234][ T39] device bridge_slave_0 left promiscuous mode [ 246.837908][ T3585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.856485][ T3585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.864855][ T3585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 246.872282][ T3585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.879685][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.923818][ T39] device veth1_macvtap left promiscuous mode [ 246.938662][ T39] device veth0_macvtap left promiscuous mode [ 246.990371][ T39] device veth1_vlan left promiscuous mode [ 246.996202][ T39] device veth0_vlan left promiscuous mode [ 247.024495][ T6435] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.245464][ T39] bond0 (unregistering): (slave bond2): Releasing backup interface [ 247.275790][ T39] bond2 (unregistering): Released all slaves [ 247.319934][ T6431] loop2: detected capacity change from 0 to 40427 [ 247.332874][ T6431] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 247.342528][ T6431] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 247.344925][ T39] bond1 (unregistering): Released all slaves [ 247.379268][ T6431] F2FS-fs (loop2): Found nat_bits in checkpoint [ 247.458146][ T6431] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 247.466774][ T6431] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 247.532236][ T39] team0 (unregistering): Port device team_slave_1 removed [ 247.549428][ T39] team0 (unregistering): Port device team_slave_0 removed [ 247.578258][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.587585][ T3585] Bluetooth: hci2: command tx timeout [ 247.629598][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.720243][ T39] bond0 (unregistering): Released all slaves [ 247.730540][ T3768] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 248.110412][ T3768] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 248.122730][ T3768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 248.137692][ T3768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 248.150317][ T4612] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 248.164605][ T3768] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.178297][ T3768] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.187842][ T3768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.205065][ T3768] usb 5-1: config 0 descriptor?? [ 248.219500][ T6330] device veth0_macvtap entered promiscuous mode [ 248.227566][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.230778][ T6437] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 248.248535][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.257455][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.272818][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.287143][ T6330] device veth1_macvtap entered promiscuous mode [ 248.311717][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.347854][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.363575][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.378677][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.393152][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.408064][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.421582][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.438024][ T4612] usb 4-1: Using ep0 maxpacket: 32 [ 248.443492][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.454327][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.466225][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.477501][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.487080][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.523908][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.541328][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.551584][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.563653][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.573840][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.584454][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.594998][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.605642][ T4612] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.613320][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.629506][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.640501][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.648956][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.662043][ T6330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.671919][ T6330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.681314][ T6330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.690523][ T6330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.692154][ T3768] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 248.710720][ T4612] usb 4-1: config 0 has no interfaces? [ 248.750863][ T3768] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 248.765135][ T3768] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 248.852444][ T3792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.873800][ T3792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.882852][ T3782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.900936][ T4612] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.902657][ T3782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.916275][ T4612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.941073][ T3574] Bluetooth: hci1: command tx timeout [ 248.942651][ T4612] usb 4-1: Product: syz [ 248.954923][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.966951][ T4612] usb 4-1: Manufacturer: syz [ 248.980700][ T4612] usb 4-1: SerialNumber: syz [ 248.991113][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.005430][ T3767] usb 5-1: USB disconnect, device number 4 [ 249.017294][ T6432] chnl_net:caif_netlink_parms(): no params data found [ 249.030934][ T4612] usb 4-1: config 0 descriptor?? [ 249.128291][ T6457] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 249.134824][ T6457] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 249.191107][ T6457] vhci_hcd vhci_hcd.0: Device attached [ 249.206644][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.229249][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.254293][ T6432] device bridge_slave_0 entered promiscuous mode [ 249.262381][ T6458] vhci_hcd: connection closed [ 249.263658][ T2468] vhci_hcd: stop threads [ 249.279383][ T2468] vhci_hcd: release socket [ 249.287280][ T2468] vhci_hcd: disconnect device [ 249.299533][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.311575][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.319941][ T6432] device bridge_slave_1 entered promiscuous mode [ 249.344753][ T6435] loop3: detected capacity change from 0 to 1024 [ 249.357492][ T6435] EXT4-fs: quotafile must be on filesystem root [ 249.374008][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.385855][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.427351][ T4612] usb 4-1: USB disconnect, device number 6 [ 249.428228][ T6432] team0: Port device team_slave_0 added [ 249.448337][ T6432] team0: Port device team_slave_1 added [ 249.489815][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.496952][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.532787][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.551291][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.558380][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.590876][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.673740][ T6432] device hsr_slave_0 entered promiscuous mode [ 249.689497][ T6432] device hsr_slave_1 entered promiscuous mode [ 249.696383][ T6432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.710789][ T6432] Cannot create hsr debugfs directory [ 249.988593][ T6432] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.032313][ T6464] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.100164][ T6432] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.130517][ T4612] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 250.215894][ T6432] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.400261][ T4612] usb 2-1: Using ep0 maxpacket: 8 [ 250.551917][ T4612] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 250.592705][ T4612] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 250.767527][ T4612] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 250.904004][ T4612] usb 2-1: config 250 has no interface number 0 [ 250.974801][ T4612] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 250.989872][ T4612] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 251.015862][ T4612] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 251.026330][ T3585] Bluetooth: hci1: command tx timeout [ 251.031868][ T4612] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 251.045877][ T4612] usb 2-1: config 250 interface 228 has no altsetting 0 [ 251.177487][ T4612] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 251.190338][ T4612] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 251.198604][ T4612] usb 2-1: Product: syz [ 251.205702][ T4612] usb 2-1: SerialNumber: syz [ 251.261704][ T4612] hub 2-1:250.228: bad descriptor, ignoring hub [ 251.269340][ T4612] hub: probe of 2-1:250.228 failed with error -5 [ 251.492890][ T4612] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 251.653323][ T6487] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 251.949328][ T6483] loop3: detected capacity change from 0 to 40427 [ 251.959485][ T6483] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 251.974192][ T6483] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 252.005946][ T6483] F2FS-fs (loop3): Found nat_bits in checkpoint [ 252.069175][ T6483] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 252.083153][ T6483] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 253.100376][ T3585] Bluetooth: hci1: command tx timeout [ 253.479496][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.034881][ T6501] loop3: detected capacity change from 0 to 32768 [ 254.093877][ T6501] XFS (loop3): Mounting V5 Filesystem [ 254.169441][ T6501] XFS (loop3): Ending clean mount [ 254.202215][ T3682] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 254.220416][ T3682] XFS (loop3): Unmount and run xfs_repair [ 254.226332][ T3682] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 254.242008][ T3682] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 254.257176][ T3682] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 254.268510][ T3682] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 254.281926][ T3682] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 254.295179][ T3682] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 254.306510][ T3682] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.319789][ T3682] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.330011][ T3682] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.342391][ T6501] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 254.384706][ T6501] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 254.430299][ T6501] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 254.467337][ T3576] XFS (loop3): Unmounting Filesystem [ 255.191540][ T3585] Bluetooth: hci1: command tx timeout [ 255.504512][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.512753][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.157155][ T3574] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.171815][ T3574] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.180082][ T3574] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.188451][ T3574] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.196048][ T3574] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.203690][ T3574] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.911685][ T3585] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.927199][ T3585] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.936012][ T3585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.946625][ T3585] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.960395][ T3585] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.967621][ T3585] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.833538][ T3585] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.843724][ T3585] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.851798][ T3585] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.859511][ T3585] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.869588][ T3585] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.879613][ T3585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.312032][ T3574] Bluetooth: hci5: command tx timeout [ 283.020569][ T3574] Bluetooth: hci6: command tx timeout [ 283.900395][ T3574] Bluetooth: hci7: command tx timeout [ 284.380281][ T3574] Bluetooth: hci5: command tx timeout [ 284.735930][ T3584] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 284.749930][ T3584] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 284.757794][ T3584] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 284.766207][ T3584] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 284.774265][ T3584] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 284.781537][ T3584] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 285.100322][ T3584] Bluetooth: hci6: command tx timeout [ 285.980390][ T3584] Bluetooth: hci7: command tx timeout [ 286.460398][ T3584] Bluetooth: hci5: command tx timeout [ 286.862206][ T3584] Bluetooth: hci8: command tx timeout [ 287.180350][ T3584] Bluetooth: hci6: command tx timeout [ 288.060511][ T3584] Bluetooth: hci7: command tx timeout [ 288.540276][ T3584] Bluetooth: hci5: command tx timeout [ 288.940386][ T3584] Bluetooth: hci8: command tx timeout [ 289.260275][ T3584] Bluetooth: hci6: command tx timeout [ 290.140464][ T3584] Bluetooth: hci7: command tx timeout [ 291.020268][ T3584] Bluetooth: hci8: command tx timeout [ 293.100427][ T3584] Bluetooth: hci8: command tx timeout [ 311.585241][ T3574] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 311.594517][ T3574] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 311.602369][ T3574] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 311.610105][ T3574] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 311.619594][ T3574] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 311.626939][ T3574] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 313.660387][ T3584] Bluetooth: hci9: command tx timeout [ 315.740399][ T3584] Bluetooth: hci9: command tx timeout [ 316.951343][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.957654][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.827314][ T3584] Bluetooth: hci9: command tx timeout [ 319.907375][ T3584] Bluetooth: hci9: command tx timeout [ 345.280308][ T3585] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 345.289580][ T3585] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 345.303837][ T3585] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 345.315502][ T3585] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 345.324981][ T3585] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 345.333241][ T3585] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 345.939977][ T3584] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 345.955370][ T3584] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 345.967713][ T3584] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 345.978816][ T3584] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 345.995837][ T3584] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 346.003212][ T3584] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 346.855732][ T3585] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 346.867386][ T3585] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 346.881423][ T3585] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 346.896629][ T3585] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 346.904253][ T3585] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 346.912247][ T3585] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 347.430265][ T3585] Bluetooth: hci10: command tx timeout [ 348.068335][ T3585] Bluetooth: hci11: command tx timeout [ 348.940428][ T3585] Bluetooth: hci12: command tx timeout [ 349.500297][ T3585] Bluetooth: hci10: command tx timeout [ 349.701789][ T3574] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 349.711819][ T3574] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 349.719770][ T3574] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 349.727674][ T3574] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 349.735909][ T3574] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 349.743528][ T3574] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 350.141137][ T3574] Bluetooth: hci11: command tx timeout [ 351.020520][ T3574] Bluetooth: hci12: command tx timeout [ 351.580546][ T3574] Bluetooth: hci10: command tx timeout [ 351.820372][ T3574] Bluetooth: hci13: command tx timeout [ 352.228243][ T3574] Bluetooth: hci11: command tx timeout [ 353.100382][ T3574] Bluetooth: hci12: command tx timeout [ 353.660637][ T3574] Bluetooth: hci10: command tx timeout [ 353.910338][ T3574] Bluetooth: hci13: command tx timeout [ 354.308223][ T3574] Bluetooth: hci11: command tx timeout [ 355.180380][ T3574] Bluetooth: hci12: command tx timeout [ 355.980390][ T3574] Bluetooth: hci13: command tx timeout [ 358.060369][ T3574] Bluetooth: hci13: command tx timeout [ 365.100329][ T3585] Bluetooth: hci2: command 0x0406 tx timeout [ 370.220721][ T3585] Bluetooth: hci1: command 0x0406 tx timeout [ 376.736019][ T3585] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 376.751735][ T3585] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 376.759614][ T3585] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 376.772780][ T3585] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 376.783907][ T3585] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 376.792466][ T3585] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 378.382544][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.388850][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.860332][ T3574] Bluetooth: hci14: command tx timeout [ 380.950566][ T3574] Bluetooth: hci14: command tx timeout [ 383.030324][ T3574] Bluetooth: hci14: command tx timeout [ 385.100363][ T3574] Bluetooth: hci14: command tx timeout [ 400.780318][ T28] INFO: task kworker/1:1:26 blocked for more than 143 seconds. [ 400.787946][ T28] Not tainted 6.1.92-syzkaller #0 [ 400.802627][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.814705][ T28] task:kworker/1:1 state:D stack:22656 pid:26 ppid:2 flags:0x00004000 [ 400.827117][ T28] Workqueue: ipv6_addrconf addrconf_dad_work 2024/06/06 23:59:03 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 400.890304][ T28] Call Trace: [ 400.893624][ T28] [ 400.896559][ T28] __schedule+0x142d/0x4550 [ 400.910270][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 400.915517][ T28] ? preempt_schedule_common+0xa6/0xd0 [ 400.921050][ T28] ? __sched_text_start+0x8/0x8 [ 400.925907][ T28] ? print_irqtrace_events+0x210/0x210 [ 400.950269][ T28] schedule+0xbf/0x180 [ 400.954362][ T28] schedule_preempt_disabled+0xf/0x20 [ 400.970266][ T28] __mutex_lock+0x6b9/0xd80 [ 400.974803][ T28] ? __mutex_lock+0x53c/0xd80 [ 400.979494][ T28] ? addrconf_dad_work+0xcc/0x16b0 [ 401.000236][ T28] ? mutex_lock_nested+0x10/0x10 [ 401.005208][ T28] addrconf_dad_work+0xcc/0x16b0 [ 401.010150][ T28] ? read_lock_is_recursive+0x10/0x10 [ 401.025684][ T28] ? ipv6_get_saddr_eval+0xe90/0xe90 [ 401.040235][ T28] ? print_irqtrace_events+0x210/0x210 [ 401.045712][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 401.070262][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 401.075506][ T28] ? process_one_work+0x7a9/0x11d0 [ 401.090266][ T28] process_one_work+0x8a9/0x11d0 [ 401.095246][ T28] ? worker_detach_from_pool+0x260/0x260 [ 401.110295][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 401.115865][ T28] ? kthread_data+0x4e/0xc0 [ 401.130293][ T28] ? wq_worker_running+0x97/0x190 [ 401.135347][ T28] worker_thread+0xa47/0x1200 [ 401.140054][ T28] kthread+0x28d/0x320 [ 401.160367][ T28] ? worker_clr_flags+0x190/0x190 [ 401.166029][ T28] ? kthread_blkcg+0xd0/0xd0 [ 401.180241][ T28] ret_from_fork+0x1f/0x30 [ 401.184690][ T28] [ 401.187743][ T28] INFO: task kworker/u4:2:39 blocked for more than 143 seconds. [ 401.210262][ T28] Not tainted 6.1.92-syzkaller #0 [ 401.215815][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.240224][ T28] task:kworker/u4:2 state:D stack:19224 pid:39 ppid:2 flags:0x00004000 [ 401.249447][ T28] Workqueue: netns cleanup_net [ 401.270380][ T28] Call Trace: [ 401.273671][ T28] [ 401.276604][ T28] __schedule+0x142d/0x4550 [ 401.281203][ T28] ? __mutex_lock+0x6b4/0xd80 [ 401.285900][ T28] ? __sched_text_start+0x8/0x8 [ 401.316813][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 401.322436][ T28] ? wq_worker_sleeping+0x5f/0x270 [ 401.327564][ T28] schedule+0xbf/0x180 [