Warning: Permanently added '[localhost]:40073' (ED25519) to the list of known hosts. 1970/01/01 00:01:30 fuzzer started 1970/01/01 00:01:32 dialing manager at localhost:30003 syzkaller login: [ 93.173698][ T3166] cgroup: Unknown subsys name 'net' [ 93.587449][ T3166] cgroup: Unknown subsys name 'rlimit' [ 94.262298][ T3166] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:01:34 syscalls: 3151 1970/01/01 00:01:34 code coverage: CONFIG_KCOV is not enabled 1970/01/01 00:01:34 comparison tracing: CONFIG_KCOV is not enabled 1970/01/01 00:01:34 extra coverage: CONFIG_KCOV is not enabled 1970/01/01 00:01:34 delay kcov mmap: CONFIG_KCOV is not enabled 1970/01/01 00:01:34 setuid sandbox: enabled 1970/01/01 00:01:34 namespace sandbox: enabled 1970/01/01 00:01:34 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:01:34 fault injection: enabled 1970/01/01 00:01:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:01:34 net packet injection: enabled 1970/01/01 00:01:34 net device setup: enabled 1970/01/01 00:01:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:01:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:01:34 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:01:34 USB emulation: enabled 1970/01/01 00:01:34 hci packet injection: /dev/vhci does not exist 1970/01/01 00:01:34 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:01:34 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:01:34 swap file: enabled 1970/01/01 00:01:34 starting 2 executor processes [ 97.099771][ T3172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.172466][ T3172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.195955][ T3174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.252434][ T3174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.248925][ T3172] hsr_slave_0: entered promiscuous mode [ 98.285833][ T3172] hsr_slave_1: entered promiscuous mode [ 98.497646][ T3174] hsr_slave_0: entered promiscuous mode [ 98.536466][ T3174] hsr_slave_1: entered promiscuous mode [ 98.584462][ T3174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.585412][ T3174] Cannot create hsr debugfs directory [ 99.441130][ T3172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.490633][ T3172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.504948][ T3172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.524829][ T3172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.788435][ T3174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.805713][ T3174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.819018][ T3174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.831002][ T3174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.580153][ T3172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.852438][ T3174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.506623][ T3172] veth0_vlan: entered promiscuous mode [ 103.569270][ T3172] veth1_vlan: entered promiscuous mode [ 103.825352][ T3172] veth0_macvtap: entered promiscuous mode [ 103.863105][ T3172] veth1_macvtap: entered promiscuous mode [ 103.895075][ T3174] veth0_vlan: entered promiscuous mode [ 103.960234][ T3174] veth1_vlan: entered promiscuous mode [ 104.001293][ T3172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.002123][ T3172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.002718][ T3172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.004053][ T3172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.182095][ T3174] veth0_macvtap: entered promiscuous mode [ 104.204811][ T3174] veth1_macvtap: entered promiscuous mode [ 104.327929][ T3174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.328603][ T3174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.329214][ T3174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.329865][ T3174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:01:44 executing program 1: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x5450, 0x0) 00:01:44 executing program 1: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={0x0, @in={{0x2, 0x0, @private}}}, &(0x7f00000008c0)=0x84) 00:01:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 00:01:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000480, &(0x7f0000000040)=ANY=[], 0xff, 0x7ac, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0xfea7) ftruncate(r0, 0xd88) 00:01:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x24, &(0x7f0000000000), 0x20000000) 00:01:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) [ 105.321890][ T3315] loop0: detected capacity change from 0 to 2048 00:01:45 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @generic={{0xb, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}, 0x0) [ 105.493072][ T3315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 00:01:45 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0x48, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) getdents64(r2, 0x0, 0x0) [ 105.686618][ T3325] syz-executor.1 (pid 3325) is setting deprecated v1 encryption policy; recommend upgrading to v2. 00:01:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) [ 105.755638][ T10] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1213: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.766840][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 105.767836][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.767836][ T10] [ 105.775442][ T10] EXT4-fs (loop0): Total free blocks count 0 [ 105.775975][ T10] EXT4-fs (loop0): Free/Dirty block details [ 105.776411][ T10] EXT4-fs (loop0): free_blocks=2415919104 [ 105.776823][ T10] EXT4-fs (loop0): dirty_blocks=16 [ 105.777242][ T10] EXT4-fs (loop0): Block reservation details [ 105.777744][ T10] EXT4-fs (loop0): i_reserved_data_blocks=1 00:01:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r1, 0x1, 0x0, 0x0, {0x35}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffc}]}, 0x44}}, 0x0) [ 105.828334][ T3174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 00:01:45 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) recvmsg$unix(r3, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r3], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r5, 0x8943, 0x20000000) close(r2) 00:01:45 executing program 0: dup(0xffffffffffffffff) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = mq_open(&(0x7f0000001100)='\\%\x00', 0x40, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x5421, &(0x7f0000000280)={'sit0\x00', 0x0}) 00:01:46 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xff-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x02d\xee\xa9\x8bcc\xad\x89\x9ck\xde\x05\x00\x00\x00UE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88\x00\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x5421, 0x20000000) 00:01:46 executing program 0: ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f00000000c0)}) 00:01:46 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$tun(r0, &(0x7f00000002c0)={@val, @void, @mpls={[], @llc={@snap={0x0, 0x0, "03"}}}}, 0xc) 00:01:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1e, &(0x7f0000000000), 0x20000000) 00:01:46 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000001500)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0x2, 0xc}, 0x48) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "45ce211b"}, @global=@item_4={0x3, 0x1, 0x0, "08dcf78c"}]}}, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x18, 0x0, &(0x7f0000000000)=[@clear_death, @increfs], 0x0, 0x0, 0x0}) 00:01:46 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) [ 106.792090][ T3345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.805804][ T3345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:01:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x23, &(0x7f0000000000), 0x20000000) 00:01:46 executing program 0: mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 00:01:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0) 00:01:47 executing program 0: r0 = semget$private(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x5a]) 00:01:47 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0xff11}}}, 0x0) [ 107.765399][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.125674][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.204934][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.205757][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.206564][ T24] usb 1-1: SerialNumber: syz 00:01:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0xc, &(0x7f0000000000), 0x20000000) 00:01:48 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000005000000850000006d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) getcwd(0x0, 0x0) 00:01:48 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xec}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) [ 108.945508][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 00:01:49 executing program 1: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4788}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) [ 109.172699][ T3168] usb 1-1: USB disconnect, device number 2 00:01:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x6, 0x8, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) 00:01:49 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @random="fe1160d67acf", @val, {@ipv4}}, 0x0) 00:01:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fcntl$dupfd(r1, 0x0, r1) 00:01:49 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) [ 110.014203][ T3375] ------------[ cut here ]------------ [ 110.018907][ T3375] WARNING: CPU: 1 PID: 3375 at mm/hugetlb.c:7048 hugetlb_change_protection+0x4d4/0x54c [ 110.020666][ T3375] Modules linked in: [ 110.021677][ T3375] CPU: 1 PID: 3375 Comm: syz-executor.1 Not tainted 6.9.0-rc2-syzkaller-00080-gc85af715cac0 #0 [ 110.022544][ T3375] Hardware name: linux,dummy-virt (DT) [ 110.023703][ T3375] pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 110.024743][ T3375] pc : hugetlb_change_protection+0x4d4/0x54c [ 110.025157][ T3375] lr : hugetlb_change_protection+0x25c/0x54c [ 110.025537][ T3375] sp : ffff800088e6ba10 [ 110.025870][ T3375] x29: ffff800088e6ba10 x28: 0000000000000000 x27: ffff80008283c358 [ 110.026745][ T3375] x26: 0000000000000000 x25: 0000000020800000 x24: f8ff000005b35300 [ 110.027321][ T3375] x23: 0000000000200000 x22: f2ff00000c14cf00 x21: fffffdffc03056e8 [ 110.028114][ T3375] x20: ffff00000c15b810 x19: 0000000020400000 x18: ffff800088e6bd38 [ 110.028655][ T3375] x17: 0000ffff998edfff x16: 0000ffff997fffff x15: 0000ffff993fffff [ 110.029269][ T3375] x14: 0000aaaad77fafff x13: 0000ffff998f5fff x12: 0000ffff998edfff [ 110.030074][ T3375] x11: 0000ffff997fffff x10: 0000000000000006 x9 : 0000000000000001 [ 110.030656][ T3375] x8 : fdff00000c145480 x7 : 0000000040000000 x6 : 0000000040000000 [ 110.031410][ T3375] x5 : 0000000040000000 x4 : 000000000000001f x3 : 0000000000000001 [ 110.031978][ T3375] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0400000000000001 [ 110.032652][ T3375] Call trace: [ 110.033131][ T3375] hugetlb_change_protection+0x4d4/0x54c [ 110.033873][ T3375] change_protection+0x670/0xbdc [ 110.034264][ T3375] mprotect_fixup+0x108/0x278 [ 110.034706][ T3375] do_mprotect_pkey.constprop.0+0x26c/0x3cc [ 110.035143][ T3375] __arm64_sys_mprotect+0x1c/0xe0 [ 110.035477][ T3375] invoke_syscall+0x48/0x114 [ 110.035803][ T3375] el0_svc_common.constprop.0+0x40/0xe0 [ 110.036396][ T3375] do_el0_svc+0x1c/0x28 [ 110.036719][ T3375] el0_svc+0x34/0xf8 [ 110.037029][ T3375] el0t_64_sync_handler+0x100/0x12c [ 110.037358][ T3375] el0t_64_sync+0x19c/0x1a0 [ 110.037970][ T3375] ---[ end trace 0000000000000000 ]--- 00:01:49 executing program 1: nanosleep(&(0x7f0000000340)={0x0, 0x7fffffff000000}, 0x0) 00:01:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000680)={0x0, 0xa, 0x0}, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/202, 0xca}], 0x1}, 0x0) 00:01:50 executing program 1: r0 = semget$private(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x5a]) 00:01:50 executing program 1: r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x492}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18) 00:01:50 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000100)={@broadcast, @local, @val, {@ipv4}}, 0x0) 00:01:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc1105518, &(0x7f0000000000)) 00:01:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) clock_gettime(0x4, &(0x7f0000000000)) 00:01:50 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x10, r0, 0x0) 00:01:51 executing program 1: r0 = socket(0x18, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 00:01:51 executing program 0: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @val, {@ipv4}}, 0x0) 00:01:51 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002780), &(0x7f00000027c0)='./file0\x00', 0x0, &(0x7f0000002800)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000200), &(0x7f0000000280)) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00010000,user_id=', @ANYRESDEC=r1], 0x0, 0x0, 0x0) 00:01:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000000)) 00:01:51 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @local, @val, {@ipv4}}, 0x0) 00:01:52 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @random="3d65f7b65a5c", @val, {@ipv4}}, 0x0) 00:01:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000680)={0x0, 0xa, 0x0}, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/202, 0xca}], 0x1}, 0x0) 00:01:52 executing program 1: io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0xf, 0x0, 0x18) 00:01:52 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000000)) 00:01:52 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x100000000000036c, 0x0, 0x3f}, 0x0) 00:01:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="a00000000000000001000000007f797a"], 0xa0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000400), 0x1000000000000065}, 0x0) 00:01:52 executing program 0: semget(0x2, 0x4, 0x226) 00:01:52 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002024207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fff8, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=""/76}, 0x20) 00:01:53 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000100), 0x0) 00:01:53 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000000)) 00:01:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_update_reserve_space\x00', r3}, 0x10) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x7) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 00:01:53 executing program 1: nanosleep(&(0x7f0000001140), 0x0) 00:01:53 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) bind$inet6(r0, 0x0, 0x0) 00:01:53 executing program 1: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1008, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:01:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x2, 0x5, 0x8}, 0x8a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='block_plug\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8, 0x2, 0x10001, 0x1410, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800003c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) 00:01:54 executing program 0: r0 = semget$private(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x5a]) 00:01:54 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001740)=[{0x0}], 0x1, 0x0, 0x0) 00:01:54 executing program 1: io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0xf, 0x0, 0x18) 00:01:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x3f, 0x0, 0x1}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r3) 00:01:54 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 00:01:54 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105518, &(0x7f0000000000)) 00:01:55 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000380), 0x10, 0x0, 0x0) 00:01:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)="1d840426dc0ee21ba4f4558e10fd8ca6c1b9667df0a82edbed5e0ede3c83bf4c74bc7065d094db28468cb422f01121caf5c90d21890c867447a6df0a49fec4f7f4cbbd5d13e378be8dc2e93f228470ed61b46f742f77296417eaf3120c78807e9a567821b51c9afc997f145016b0b7787c1eb19779ae0aa03e55de078aa767d5178cd3b5cb4d3247b6539fcec84c143e9a720db8b34ecd603976e6aa9da4e4b2bfb5ed8489fed9d9c510c784c0d72bc5311ebedcb2c3231dbb46", 0xba}, {&(0x7f00000003c0)="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", 0x6ca}], 0x2}, 0x0) 00:01:55 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0x7ffffffff000) 00:01:55 executing program 0: fchmod(0xffffffffffffffff, 0xf127682d5f8f3192) 00:01:55 executing program 0: semctl$SETALL(0xffffffffffffffff, 0x0, 0x9, 0x0) 00:01:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105518, &(0x7f0000000000)) 00:01:55 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x492}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18) 00:01:55 executing program 0: setrlimit(0x8, &(0x7f0000000480)) socket$inet(0x2, 0x1, 0x0) 00:01:55 executing program 1: pwritev(0xffffffffffffff9c, &(0x7f0000000240)=[{&(0x7f0000000080)="b62b26023231786e73968406b0e2d3440a3c8fbefcfc2c19b88b9c723ebdecae6e371e88cfc915a5d9307eb24805950daf0b74aa18c2d90ef6253ab51fcaf83bbcb47b8ea4a91306a0db221f550872ec184077f4d5d3887b83fcf56300d32f7b65e582e63a1f70995acfd93ef98db138217285d8df94bef09d27b5297b91c1e83af39ab85bd2cf1360878b1017ed83c3de14c09b50", 0x95}, {&(0x7f0000000140)="1daf6de8537d722bdb53220b91640898dc95c48c6032588895dde4aed4961ff98d685234e53537b964d4d626be0e34a62bc83c568af98e20607cf67c5dfc16e2b2cd800eaf28a28b3847348521e7af69e2024d3affd1372597", 0x59}, {&(0x7f00000001c0)="7db3cd5e798539ea5bd3431dd84bbb37d25e83fc00650059e1d66018dc97585cca026f30d5cd4556d4b9919c94fbdca7f2cf0ad94bba95932200"/72, 0x4b}], 0x1000000000000247, 0x3, 0x0) 00:01:56 executing program 1: madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2) 00:01:56 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105518, &(0x7f0000000000)) 00:01:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x208000, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xfc, 0x46d, &(0x7f0000000700)="$eJzs3MtrXNUfAPDv3OmkTZ/5/WzVPtT4wuKjadKHXbhRFFwoCLqo7mKaltrUShPBlmCiSF1Kwb24FPwLXOlG1JXgVvdSCJJN4wMcuXfuzXsyeUxyq/P5wIRz7jkz53XP5NxzZyaAjtWb/qlE7I6In9NwkkVn1fNMab6Z6fGh36fHhypRr7/6WyVLuz09PlTkLZ63K48cTSKSjypxeJlyR69dvzQ4MjJ8NY/3jV1+p2/02vWnLl4evDB8YfjtgTNnTp7of/r0wKm2tHNPWtdD7185cvDF12++PHT25pvff5nWd3eePr8d7dIbvQv6cr5H211YyfbMC1e2lVgR1qQaEelw1bL5vy+qMTd4++KFD0utHLCp6vV6fW/z5Mk68B9WibJrAJSj+Ed/e7o7IsaHNuM6+E429WzjAiht90z+aKRsiyTPU1t0fdtOO/J9k7OTf3wW2Ths76j+BwC23tfp+ufJxvqneDRSeuLuefn2ZvvB6dGI/0XE/yPirojYHxEHIrK890TEvWssv3dRfOn6M7m1roatUrr+eya/t7Vw/Zev/v6u91Tz2J7ojp6oVc5fHBk+nvfJ0ahtT+P9K5TxzfM/fdIsrTdf+xWPtPxiLZjX49a27Qufc25wbHBjrZ4z9UG2BzixtP1zd67S0MGIOLSO10/XzRcf/+JIs/TW7V9BG+4z1T+PeKwx/pOxQvsX35/sztNOD5zq2xEjw8f7irNiqR9+vPFKs/I31P42SMd/57Ln/2z7eyrz79eOrr2MG7983PSaZg3n/xvFkfT876q8loW78mPvDY6NXe2P6Kq8tPT4wNyrFfEi/9TuAxEPLz//0/e49BxL2384ItKT+L6IuD8iHsjr/mBEPBTZSyxnYiYivnvukbfW0/6kVce2QTr+5xaMf7QY/7UHqpe+/Wo97W9Ix/9kFjqaH1nN+99qK7iRvgMAAIB/iyT7DHwlOTYbTpJjxxqf4d8fO5ORK6NjT5y/8u6f5xqfle+JWlLsdDX2gxv7of353nARH1gUP5HvG39a7c7iO/N730B5djWZ/6lfq2XXDth0vq8Fncv8h85l/kPnMv+hc612/tc3uR7A1ltu/k+UUA9g61n/Q+cy/6Fzmf/Qucx/6Egb+V6/QIvARJu7t+sOaVcWiKT8avyV/wxL2b1R/FpG68y1fN6V3nUtA+W9JwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTTPwEAAP//1iDc2w==") 00:01:56 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) [ 116.432509][ T3483] loop1: detected capacity change from 0 to 512 [ 116.484676][ T3483] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent 00:01:56 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000016c0)={'pimreg0\x00', 0x41}) 00:01:56 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:01:56 executing program 0: r0 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18) 00:01:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x208000, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xfc, 0x46d, &(0x7f0000000700)="$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") 00:01:56 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) fcntl$setown(r0, 0x6, 0x0) [ 117.081280][ T3494] loop1: detected capacity change from 0 to 512 [ 117.101500][ T3494] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 117.192195][ T3329] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 00:01:57 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105518, &(0x7f0000000000)) 00:01:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCEXCL(r0, 0x2000740d) 00:01:57 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f700850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_sync_file_enter\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xffe6) 00:01:57 executing program 0: r0 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18) 00:01:57 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001340), 0x10, 0x0, 0x0) 00:01:57 executing program 1: setitimer(0x2, &(0x7f0000000000)={{}, {0x0, 0x9}}, &(0x7f0000000040)) 00:01:57 executing program 1: r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18) 00:01:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:01:58 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000000)) 00:01:58 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x7, 0x10001, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_QUANTUM={0x8, 0x5, 0x2}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x48}}, 0x0) 00:01:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f0000000380)=@in={0x2, 0x1}, 0xc) [ 118.385165][ T3518] sch_fq: defrate 0 ignored. 00:01:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000480)=0x1e, 0x4) 00:01:58 executing program 1: setitimer(0x1, &(0x7f0000000000)={{}, {0x5}}, &(0x7f0000000040)) [ 118.591204][ T3521] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 00:01:58 executing program 1: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) flock(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000023c0)=ANY=[], 0xfffffcdd) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') sendfile(r0, r1, 0x0, 0x37) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0xcc28e000, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7000000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='jbd2_checkpoint\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) 00:01:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@can_newroute={0x1c, 0x18, 0x6ad570a5015214b7, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x1c}}, 0x0) 00:01:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x30}}, 0x0) 00:01:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105518, 0x0) 00:01:59 executing program 0: r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080), 0x0, &(0x7f0000000280)) io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18) 00:01:59 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 00:02:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x20000) 00:02:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_PEER_ADDRESS={0x8}, @GTPA_VERSION={0x8}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffe23, &(0x7f0000000240)={0x0, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100706c7567"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x7, 0x0, 0x0, {0x0, 0x15, 0x0, r3, {0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x8}, {0xc}}]}, 0x3c}, 0x1, 0x81000000}, 0x0) [ 120.769369][ T3548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:02:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@delchain={0x24}, 0x24}}, 0x0) 00:02:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@delchain={0x24}, 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 00:02:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) [ 121.348058][ T3554] netem: change failed 00:02:01 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40044146, 0x0) 00:02:01 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r0, 0x4, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x280) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 00:02:01 executing program 1: socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000400)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@sndinfo={0x1c}], 0x1c}, 0x0) 00:02:02 executing program 0: r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000100)='cdg\x00', 0x4) 00:02:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000040)="6f2fe91170c71bebdeaa0bbef7b2948e7b67865df95033d6f87cd73bc3f5f239d83e27134c1b", 0xfffffffffffffe1e, 0x404, 0x0, 0x0) 00:02:02 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40044146, 0x0) 00:02:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@delchain={0x24}, 0x24}}, 0x0) 00:02:02 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x7b5f) 00:02:02 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000200001801400040000000000000000000000000000000001070001000a"], 0x34}}, 0x0) 00:02:02 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) [ 123.249252][ T3581] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 123.249968][ T3581] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:02:03 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000640)={@random="d35433049691", @broadcast, @val, {@ipv6}}, 0x0) 00:02:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@delchain={0x24}, 0x24}}, 0x0) 00:02:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) setregid(0x0, r1) setregid(0x0, 0x0) 00:02:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="f8318fc2", @ANYRES32=0xffffffffffffffff], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}}) sendmmsg$inet_sctp(r2, &(0x7f0000004b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x5}}], 0x20}], 0x1, 0x0) 00:02:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x28011, r2, 0x0) mmap(&(0x7f00009f9000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000345000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f00001da000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4100, 0x1004}], 0x1, 0x0, 0x0) 00:02:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0xa) 00:02:03 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0x4004510f, &(0x7f0000000080)={"cdd5e27e1737dceb5eecffb5eb9c66818a78279a6f3d9b3d6100"}) 00:02:03 executing program 1: r0 = semget$private(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000140)=[{}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x5a]) 00:02:04 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 00:02:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@delchain={0x24}, 0x24}}, 0x0) 00:02:04 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000100)={@broadcast, @random="1f95533594bf", @val, {@ipv4}}, 0x0) 00:02:04 executing program 1: r0 = syz_io_uring_setup(0xefe, &(0x7f0000001b40), &(0x7f00000004c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SPLICE) io_uring_enter(r0, 0x1, 0x0, 0xb, 0x0, 0x0) 00:02:04 executing program 1: ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044146, 0x0) 00:02:04 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x2, 0x5}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 00:02:05 executing program 1: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)) 00:02:05 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0x4004510f, &(0x7f0000000080)={"cdd5e27e1737dceb5eecffb5eb9c66818a78279a6f3d9b3d6100"}) 00:02:05 executing program 1: r0 = semget$private(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x5a]) 00:02:05 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 00:02:05 executing program 1: syz_emit_ethernet(0x5a, &(0x7f0000000100)={@broadcast, @random="1f95533594bf", @val, {@ipv4}}, 0x0) 00:02:05 executing program 1: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40044146, 0x0) 00:02:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x80, 0x0, 0x0) 00:02:05 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 00:02:06 executing program 0: r0 = syz_io_uring_setup(0xefe, &(0x7f0000001b40), &(0x7f00000004c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SPLICE) io_uring_enter(r0, 0x1, 0x0, 0xb, 0x0, 0x0) 00:02:06 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0x4004510f, &(0x7f0000000080)={"cdd5e27e1737dceb5eecffb5eb9c66818a78279a6f3d9b3d6100"}) 00:02:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt(r0, 0x0, 0x18, 0x0, 0x0) 00:02:06 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40044146, 0x0) 00:02:06 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x5452, &(0x7f0000000080)) 00:02:06 executing program 1: close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) 00:02:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@delchain={0x24}, 0x24}}, 0x0) 00:02:06 executing program 1: r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x54, 0x0, 0x0, 0x0, 0x18) 00:02:07 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0x4004510f, &(0x7f0000000080)={"cdd5e27e1737dceb5eecffb5eb9c66818a78279a6f3d9b3d6100"}) 00:02:07 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x5452, &(0x7f0000000080)) 00:02:07 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 00:02:07 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044146, 0x0) 00:02:07 executing program 0: r0 = semget$private(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) 00:02:07 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0x4004510f, &(0x7f0000000080)={"cdd5e27e1737dceb5eecffb5eb9c66818a78279a6f3d9b3d6100"}) 00:02:07 executing program 0: r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x54, 0x0, 0x0, 0x0, 0x18) 00:02:07 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) ioctl$VT_SETMODE(r0, 0x5602, 0x0) 00:02:07 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000140)={0x1}, 0x8, 0x0) 00:02:07 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x5452, &(0x7f0000000080)) 00:02:08 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0x4004510f, &(0x7f0000000080)={"cdd5e27e1737dceb5eecffb5eb9c66818a78279a6f3d9b3d6100"}) 00:02:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'memory'}]}, 0x8) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) 00:02:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 00:02:08 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000280)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0) 00:02:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@delchain={0x24}, 0x24}}, 0x0) 00:02:08 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000001b40), &(0x7f00000004c0), &(0x7f0000000080)) io_uring_enter(r0, 0x1, 0x0, 0xb, 0x0, 0x0) 00:02:08 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0x4004510f, &(0x7f0000000080)={"cdd5e27e1737dceb5eecffb5eb9c66818a78279a6f3d9b3d6100"}) 00:02:08 executing program 1: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000005780)={0x0, 0x0, "ac06f105cb10541258e0a2a0b883eb29e46b1fac5746190f278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd0000000000090000000000000096d78e489e96651d35ca509de7cf52e7578e9ce37700000000000051936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000665988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda563bdfcf994af8812a592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75425c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954926f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d425054ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc19143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33765160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f1899d20e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4e32eafbe2ac15782ddfd1609cec300015b542c835ff12000000000000000edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ad57795a5984ca55e6159bdfab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900800100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272a80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) 00:02:09 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='hfs\x00', 0x0, 0x0) 00:02:09 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000017c0)={0x4c, 0x0, &(0x7f0000000680)=[@increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 129.624311][ T3691] binder: 3689:3691 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 129.651468][ T3691] binder: 3689:3691 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 129.656817][ T3691] binder: 3689:3691 got transaction to context manager from process owning it [ 129.661621][ T3691] binder: 3689:3691 transaction call to 3689:0 failed 2/29201/-22, size 0-0 line 3053 [ 129.674288][ T1801] binder: undelivered TRANSACTION_ERROR: 29201 00:02:09 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000001b40), &(0x7f00000004c0), &(0x7f0000000080)) io_uring_enter(r0, 0x1, 0x0, 0xb, 0x0, 0x0) 00:02:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 00:02:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000d00)={0x2, 0x0, @remote}, 0x10) r1 = dup(r0) write$FUSE_STATFS(r1, 0x0, 0x0) write$FUSE_IOCTL(r1, 0x0, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) 00:02:09 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0x4004510f, &(0x7f0000000080)={"cdd5e27e1737dceb5eecffb5eb9c66818a78279a6f3d9b3d6100"}) 00:02:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f00000000c0)) 00:02:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="435d61e778eb38a7b38869e147b2bb2d8ea5f836c654c0d9d14ceca9529604eb9a1f8d24c87b2153413b8bc5d52b8aa671b64b2290f0d96afeaa40f60d23f9f9f7d8b4c37a6409abd84ddbe5264f73200c67d8f9742d0f51951f7bb8fe27a59cc395ba580c12f6e995b8a62901c58273c223abb6", 0x74}, {&(0x7f0000000180)="518cf9568a61ae87e9e450447422ed8ab8e2d292b9e8f1", 0x17}, {&(0x7f00000009c0)="5132ac5e8205378f905fac4b0f7b", 0xe}], 0x3}}], 0x2, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x5c7, 0x0, 0x0, 0x0) [ 130.461793][ T3701] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 00:02:10 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000380)) fallocate(r0, 0x0, 0x0, 0x2c2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) writev(r1, 0x0, 0x0) r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r2, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000200)='macvlan1\x00') 00:02:10 executing program 0: r0 = syz_io_uring_setup(0xefe, 0x0, &(0x7f00000004c0), &(0x7f0000000080)) io_uring_enter(r0, 0x1, 0x0, 0xb, 0x0, 0x0) 00:02:10 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0x4004510f, 0x0) 00:02:11 executing program 0: r0 = semget$private(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) 00:02:13 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000000000000000000850000002a000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 00:02:13 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 00:02:13 executing program 0: r0 = syz_io_uring_setup(0xefe, &(0x7f0000001b40), &(0x7f00000004c0), 0x0) io_uring_enter(r0, 0x1, 0x0, 0xb, 0x0, 0x0) 00:02:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@delchain={0x24}, 0x24}}, 0x0) 00:02:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b030600e0ff020002004788aa96a13bb1000011000088ca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 00:02:14 executing program 1: r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x37) 00:02:14 executing program 1: r0 = syz_io_uring_setup(0xefe, &(0x7f0000001b40), &(0x7f00000004c0), 0x0) io_uring_enter(r0, 0x1, 0x0, 0xb, 0x0, 0x0) 00:02:14 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="73d3"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe5, 0x9, 0xa, 0x0, 0x19d2, 0x1077, 0x4517, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xa, 0x0, 0x20}}]}}]}}]}}, 0x0) 00:02:14 executing program 1: r0 = semget$private(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) 00:02:15 executing program 1: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xff-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x02d\xee\xa9\x8bcc\xad\x89\x9ck\xde\x05\x00\x00\x00UE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88\x00\xf7\xd6\x1d\xa1\xce\x8b\x19\xd5\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe73l\xf9\xb1\xa6*\xcdp\x89\xcc\xb0\t\x12\xbcq\xbc\xfd\r\xe5\xd8\x18\xc4\xb9\xc1\xe7\xda\xf9\xeba\xc1\xeep\xb5KC\xba\x1d\xde\xee\xea\x16ko\xc5\xd7(\xbb\x9d\xae\x17\xe7\x92\xef\xafv9\xf2u\xbc\xe1\xb5E\x7f\xec\'4|b\xb7\x90\xdbOA\xcb\x1d\xf2\xa0\x90\xbd\xa2yrG\xb3\xec\x1a@\x98\xcbE\xf9\xd3\xdb._^`C\xe5;\x97a.\xd3\xd5c0\x84\xf3^\n\xfcU\x96\xfa\xd4\xae\xe8\x14\xc4\v', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0xffcf) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc, 0x11, r0, 0x0) dup(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f00000000c0)='security.SMACK64\x00', 0x0, 0x0, 0x2) 00:02:15 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) truncate(0x0, 0x0) [ 135.596209][ T3168] usb 1-1: new high-speed USB device number 3 using dummy_hcd 00:02:15 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000001640), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80184132, 0x0) [ 135.975639][ T3168] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.977032][ T3168] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.978476][ T3168] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.979963][ T3168] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.114980][ T3168] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.116501][ T3168] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.117978][ T3168] usb 1-1: Product: syz [ 136.119116][ T3168] usb 1-1: Manufacturer: syz [ 136.211621][ T3168] cdc_wdm 1-1:1.0: skipping garbage [ 136.212484][ T3168] cdc_wdm 1-1:1.0: skipping garbage [ 136.238088][ T3168] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device 00:02:16 executing program 1: r0 = msgget(0x2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000440)={{0x1}}) [ 136.453109][ T3733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.456831][ T3733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.489035][ T3168] usb 1-1: USB disconnect, device number 3 00:02:16 executing program 1: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xff-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x02d\xee\xa9\x8bcc\xad\x89\x9ck\xde\x05\x00\x00\x00UE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88\x00\xf7\xd6\x1d\xa1\xce\x8b\x19\xd5\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe73l\xf9\xb1\xa6*\xcdp\x89\xcc\xb0\t\x12\xbcq\xbc\xfd\r\xe5\xd8\x18\xc4\xb9\xc1\xe7\xda\xf9\xeba\xc1\xeep\xb5KC\xba\x1d\xde\xee\xea\x16ko\xc5\xd7(\xbb\x9d\xae\x17\xe7\x92\xef\xafv9\xf2u\xbc\xe1\xb5E\x7f\xec\'4|b\xb7\x90\xdbOA\xcb\x1d\xf2\xa0\x90\xbd\xa2yrG\xb3\xec\x1a@\x98\xcbE\xf9\xd3\xdb._^`C\xe5;\x97a.\xd3\xd5c0\x84\xf3^\n\xfcU\x96\xfa\xd4\xae\xe8\x14\xc4\v', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0xffcf) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc, 0x11, r0, 0x0) dup(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f00000000c0)='security.SMACK64\x00', 0x0, 0x0, 0x2) 00:02:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) 00:02:17 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000001640), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80184132, 0x0) 00:02:17 executing program 1: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x82, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000280)=0xb0) 00:02:17 executing program 1: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xff-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x02d\xee\xa9\x8bcc\xad\x89\x9ck\xde\x05\x00\x00\x00UE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88\x00\xf7\xd6\x1d\xa1\xce\x8b\x19\xd5\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe73l\xf9\xb1\xa6*\xcdp\x89\xcc\xb0\t\x12\xbcq\xbc\xfd\r\xe5\xd8\x18\xc4\xb9\xc1\xe7\xda\xf9\xeba\xc1\xeep\xb5KC\xba\x1d\xde\xee\xea\x16ko\xc5\xd7(\xbb\x9d\xae\x17\xe7\x92\xef\xafv9\xf2u\xbc\xe1\xb5E\x7f\xec\'4|b\xb7\x90\xdbOA\xcb\x1d\xf2\xa0\x90\xbd\xa2yrG\xb3\xec\x1a@\x98\xcbE\xf9\xd3\xdb._^`C\xe5;\x97a.\xd3\xd5c0\x84\xf3^\n\xfcU\x96\xfa\xd4\xae\xe8\x14\xc4\v', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0xffcf) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc, 0x11, r0, 0x0) dup(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f00000000c0)='security.SMACK64\x00', 0x0, 0x0, 0x2) 00:02:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket(0x0, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 00:02:17 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000001640), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80184132, 0x0) 00:02:17 executing program 0: mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0) 00:02:18 executing program 1: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xff-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x02d\xee\xa9\x8bcc\xad\x89\x9ck\xde\x05\x00\x00\x00UE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88\x00\xf7\xd6\x1d\xa1\xce\x8b\x19\xd5\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe73l\xf9\xb1\xa6*\xcdp\x89\xcc\xb0\t\x12\xbcq\xbc\xfd\r\xe5\xd8\x18\xc4\xb9\xc1\xe7\xda\xf9\xeba\xc1\xeep\xb5KC\xba\x1d\xde\xee\xea\x16ko\xc5\xd7(\xbb\x9d\xae\x17\xe7\x92\xef\xafv9\xf2u\xbc\xe1\xb5E\x7f\xec\'4|b\xb7\x90\xdbOA\xcb\x1d\xf2\xa0\x90\xbd\xa2yrG\xb3\xec\x1a@\x98\xcbE\xf9\xd3\xdb._^`C\xe5;\x97a.\xd3\xd5c0\x84\xf3^\n\xfcU\x96\xfa\xd4\xae\xe8\x14\xc4\v', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0xffcf) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc, 0x11, r0, 0x0) dup(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f00000000c0)='security.SMACK64\x00', 0x0, 0x0, 0x2) 00:02:18 executing program 1: syz_read_part_table(0x1047, &(0x7f0000000000)="$eJzsz7sJQkEQBdDr9zmZFYidGFuANdiGiQ1YhiVYhC0p8nYxMRUUzgn2A5c7TPgRu2qP4Tbk+Dmzeh2VSh7TGn/bc9bLd2LeyibJJsmpl+5n4325L/qYJIfrV1YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/zDAAA//+lTQcB") [ 138.982828][ T3764] loop1: detected capacity change from 0 to 8192 [ 139.060417][ T3764] loop1: p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 139.064417][ T3764] loop1: p2 start 81664 is beyond EOD, truncated [ 139.084234][ T3764] loop1: p5 start 81664 is beyond EOD, truncated [ 139.084904][ T3764] loop1: p6 start 81664 is beyond EOD, truncated [ 139.085457][ T3764] loop1: p7 start 81664 is beyond EOD, truncated [ 139.085936][ T3764] loop1: p8 start 81664 is beyond EOD, truncated [ 139.086477][ T3764] loop1: p9 start 81664 is beyond EOD, truncated [ 139.087022][ T3764] loop1: p10 start 81664 is beyond EOD, truncated [ 139.087706][ T3764] loop1: p11 start 81664 is beyond EOD, truncated [ 139.088249][ T3764] loop1: p12 start 81664 is beyond EOD, truncated [ 139.088911][ T3764] loop1: p13 start 81664 is beyond EOD, truncated [ 139.089515][ T3764] loop1: p14 start 81664 is beyond EOD, truncated [ 139.089988][ T3764] loop1: p15 start 81664 is beyond EOD, truncated [ 139.090565][ T3764] loop1: p16 start 81664 is beyond EOD, truncated [ 139.091104][ T3764] loop1: p17 start 81664 is beyond EOD, truncated [ 139.091583][ T3764] loop1: p18 start 81664 is beyond EOD, truncated [ 139.092054][ T3764] loop1: p19 start 81664 is beyond EOD, truncated [ 139.092615][ T3764] loop1: p20 start 81664 is beyond EOD, truncated [ 139.093082][ T3764] loop1: p21 start 81664 is beyond EOD, truncated [ 139.097399][ T3764] loop1: p22 start 81664 is beyond EOD, truncated [ 139.097973][ T3764] loop1: p23 start 81664 is beyond EOD, truncated [ 139.099323][ T3764] loop1: p24 start 81664 is beyond EOD, truncated [ 139.099883][ T3764] loop1: p25 start 81664 is beyond EOD, truncated [ 139.101158][ T3764] loop1: p26 start 81664 is beyond EOD, truncated [ 139.101680][ T3764] loop1: p27 start 81664 is beyond EOD, truncated [ 139.103111][ T3764] loop1: p28 start 81664 is beyond EOD, truncated [ 139.110290][ T3764] loop1: p29 start 81664 is beyond EOD, truncated [ 139.111539][ T3764] loop1: p30 start 81664 is beyond EOD, truncated [ 139.112118][ T3764] loop1: p31 start 81664 is beyond EOD, truncated [ 139.115631][ T3764] loop1: p32 start 81664 is beyond EOD, truncated [ 139.118558][ T3764] loop1: p33 start 81664 is beyond EOD, truncated [ 139.119168][ T3764] loop1: p34 start 81664 is beyond EOD, truncated [ 139.123195][ T3764] loop1: p35 start 81664 is beyond EOD, truncated [ 139.126068][ T3764] loop1: p36 start 81664 is beyond EOD, truncated [ 139.127523][ T3764] loop1: p37 start 81664 is beyond EOD, truncated [ 139.128080][ T3764] loop1: p38 start 81664 is beyond EOD, truncated [ 139.130920][ T3764] loop1: p39 start 81664 is beyond EOD, truncated [ 139.131687][ T3764] loop1: p40 start 81664 is beyond EOD, truncated [ 139.133229][ T3764] loop1: p41 start 81664 is beyond EOD, truncated [ 139.134607][ T3764] loop1: p42 start 81664 is beyond EOD, truncated [ 139.135309][ T3764] loop1: p43 start 81664 is beyond EOD, truncated [ 139.135940][ T3764] loop1: p44 start 81664 is beyond EOD, truncated [ 139.136421][ T3764] loop1: p45 start 81664 is beyond EOD, truncated [ 139.137060][ T3764] loop1: p46 start 81664 is beyond EOD, truncated [ 139.137538][ T3764] loop1: p47 start 81664 is beyond EOD, truncated [ 139.138035][ T3764] loop1: p48 start 81664 is beyond EOD, truncated [ 139.138570][ T3764] loop1: p49 start 81664 is beyond EOD, truncated [ 139.139172][ T3764] loop1: p50 start 81664 is beyond EOD, truncated [ 139.139774][ T3764] loop1: p51 start 81664 is beyond EOD, truncated [ 139.140309][ T3764] loop1: p52 start 81664 is beyond EOD, truncated [ 139.140858][ T3764] loop1: p53 start 81664 is beyond EOD, truncated [ 139.141380][ T3764] loop1: p54 start 81664 is beyond EOD, truncated [ 139.142028][ T3764] loop1: p55 start 81664 is beyond EOD, truncated [ 139.142608][ T3764] loop1: p56 start 81664 is beyond EOD, truncated [ 139.143158][ T3764] loop1: p57 start 81664 is beyond EOD, truncated [ 139.156802][ T3764] loop1: p58 start 81664 is beyond EOD, truncated [ 139.158039][ T3764] loop1: p59 start 81664 is beyond EOD, truncated [ 139.158576][ T3764] loop1: p60 start 81664 is beyond EOD, truncated [ 139.159888][ T3764] loop1: p61 start 81664 is beyond EOD, truncated [ 139.160558][ T3764] loop1: p62 start 81664 is beyond EOD, truncated [ 139.161871][ T3764] loop1: p63 start 81664 is beyond EOD, truncated [ 139.162556][ T3764] loop1: p64 start 81664 is beyond EOD, truncated [ 139.169644][ T3764] loop1: p65 start 81664 is beyond EOD, truncated [ 139.174050][ T3764] loop1: p66 start 81664 is beyond EOD, truncated [ 139.174718][ T3764] loop1: p67 start 81664 is beyond EOD, truncated [ 139.177646][ T3764] loop1: p68 start 81664 is beyond EOD, truncated [ 139.178240][ T3764] loop1: p69 start 81664 is beyond EOD, truncated [ 139.181209][ T3764] loop1: p70 start 81664 is beyond EOD, truncated [ 139.182886][ T3764] loop1: p71 start 81664 is beyond EOD, truncated [ 139.188086][ T3764] loop1: p72 start 81664 is beyond EOD, truncated [ 139.188761][ T3764] loop1: p73 start 81664 is beyond EOD, truncated [ 139.190260][ T3764] loop1: p74 start 81664 is beyond EOD, truncated [ 139.191084][ T3764] loop1: p75 start 81664 is beyond EOD, truncated [ 139.192451][ T3764] loop1: p76 start 81664 is beyond EOD, truncated [ 139.197788][ T3764] loop1: p77 start 81664 is beyond EOD, truncated [ 139.198349][ T3764] loop1: p78 start 81664 is beyond EOD, truncated [ 139.199965][ T3764] loop1: p79 start 81664 is beyond EOD, truncated [ 139.200539][ T3764] loop1: p80 start 81664 is beyond EOD, truncated [ 139.201791][ T3764] loop1: p81 start 81664 is beyond EOD, truncated [ 139.202298][ T3764] loop1: p82 start 81664 is beyond EOD, truncated [ 139.203023][ T3764] loop1: p83 start 81664 is beyond EOD, truncated [ 139.207409][ T3764] loop1: p84 start 81664 is beyond EOD, truncated [ 139.207980][ T3764] loop1: p85 start 81664 is beyond EOD, truncated [ 139.208437][ T3764] loop1: p86 start 81664 is beyond EOD, truncated [ 139.208939][ T3764] loop1: p87 start 81664 is beyond EOD, truncated [ 139.209483][ T3764] loop1: p88 start 81664 is beyond EOD, truncated [ 139.209973][ T3764] loop1: p89 start 81664 is beyond EOD, truncated [ 139.210486][ T3764] loop1: p90 start 81664 is beyond EOD, truncated [ 139.211068][ T3764] loop1: p91 start 81664 is beyond EOD, truncated [ 139.211573][ T3764] loop1: p92 start 81664 is beyond EOD, truncated [ 139.212075][ T3764] loop1: p93 start 81664 is beyond EOD, truncated [ 139.212517][ T3764] loop1: p94 start 81664 is beyond EOD, truncated [ 139.212992][ T3764] loop1: p95 start 81664 is beyond EOD, truncated [ 139.222114][ T3764] loop1: p96 start 81664 is beyond EOD, truncated [ 139.222732][ T3764] loop1: p97 start 81664 is beyond EOD, truncated [ 139.227796][ T3764] loop1: p98 start 81664 is beyond EOD, truncated [ 139.228383][ T3764] loop1: p99 start 81664 is beyond EOD, truncated [ 139.231650][ T3764] loop1: p100 start 81664 is beyond EOD, truncated [ 139.232361][ T3764] loop1: p101 start 81664 is beyond EOD, truncated [ 139.241640][ T3764] loop1: p102 start 81664 is beyond EOD, truncated [ 139.242241][ T3764] loop1: p103 start 81664 is beyond EOD, truncated [ 139.243049][ T3764] loop1: p104 start 81664 is beyond EOD, truncated [ 139.244407][ T3764] loop1: p105 start 81664 is beyond EOD, truncated [ 139.244923][ T3764] loop1: p106 start 81664 is beyond EOD, truncated [ 139.245490][ T3764] loop1: p107 start 81664 is beyond EOD, truncated [ 139.245997][ T3764] loop1: p108 start 81664 is beyond EOD, truncated [ 139.246522][ T3764] loop1: p109 start 81664 is beyond EOD, truncated [ 139.247293][ T3764] loop1: p110 start 81664 is beyond EOD, truncated [ 139.247738][ T3764] loop1: p111 start 81664 is beyond EOD, truncated [ 139.248240][ T3764] loop1: p112 start 81664 is beyond EOD, truncated [ 139.248829][ T3764] loop1: p113 start 81664 is beyond EOD, truncated [ 139.249318][ T3764] loop1: p114 start 81664 is beyond EOD, truncated [ 139.249802][ T3764] loop1: p115 start 81664 is beyond EOD, truncated [ 139.250412][ T3764] loop1: p116 start 81664 is beyond EOD, truncated [ 139.251037][ T3764] loop1: p117 start 81664 is beyond EOD, truncated [ 139.251474][ T3764] loop1: p118 start 81664 is beyond EOD, truncated [ 139.251935][ T3764] loop1: p119 start 81664 is beyond EOD, truncated [ 139.252455][ T3764] loop1: p120 start 81664 is beyond EOD, truncated [ 139.252879][ T3764] loop1: p121 start 81664 is beyond EOD, truncated [ 139.277688][ T3764] loop1: p122 start 81664 is beyond EOD, truncated [ 139.278234][ T3764] loop1: p123 start 81664 is beyond EOD, truncated [ 139.281074][ T3764] loop1: p124 start 81664 is beyond EOD, truncated [ 139.281581][ T3764] loop1: p125 start 81664 is beyond EOD, truncated [ 139.282750][ T3764] loop1: p126 start 81664 is beyond EOD, truncated [ 139.289073][ T3764] loop1: p127 start 81664 is beyond EOD, truncated [ 139.289725][ T3764] loop1: p128 start 81664 is beyond EOD, truncated [ 139.290347][ T3764] loop1: p129 start 81664 is beyond EOD, truncated [ 139.290831][ T3764] loop1: p130 start 81664 is beyond EOD, truncated [ 139.291672][ T3764] loop1: p131 start 81664 is beyond EOD, truncated [ 139.292383][ T3764] loop1: p132 start 81664 is beyond EOD, truncated [ 139.292869][ T3764] loop1: p133 start 81664 is beyond EOD, truncated [ 139.300628][ T3764] loop1: p134 start 81664 is beyond EOD, truncated [ 139.301388][ T3764] loop1: p135 start 81664 is beyond EOD, truncated [ 139.301866][ T3764] loop1: p136 start 81664 is beyond EOD, truncated [ 139.302576][ T3764] loop1: p137 start 81664 is beyond EOD, truncated [ 139.308286][ T3764] loop1: p138 start 81664 is beyond EOD, truncated [ 139.308861][ T3764] loop1: p139 start 81664 is beyond EOD, truncated [ 139.309482][ T3764] loop1: p140 start 81664 is beyond EOD, truncated [ 139.310144][ T3764] loop1: p141 start 81664 is beyond EOD, truncated [ 139.310635][ T3764] loop1: p142 start 81664 is beyond EOD, truncated [ 139.311365][ T3764] loop1: p143 start 81664 is beyond EOD, truncated [ 139.312044][ T3764] loop1: p144 start 81664 is beyond EOD, truncated [ 139.312532][ T3764] loop1: p145 start 81664 is beyond EOD, truncated [ 139.316678][ T3764] loop1: p146 start 81664 is beyond EOD, truncated [ 139.317560][ T3764] loop1: p147 start 81664 is beyond EOD, truncated [ 139.318147][ T3764] loop1: p148 start 81664 is beyond EOD, truncated [ 139.318639][ T3764] loop1: p149 start 81664 is beyond EOD, truncated [ 139.319389][ T3764] loop1: p150 start 81664 is beyond EOD, truncated [ 139.320118][ T3764] loop1: p151 start 81664 is beyond EOD, truncated [ 139.320608][ T3764] loop1: p152 start 81664 is beyond EOD, truncated [ 139.321163][ T3764] loop1: p153 start 81664 is beyond EOD, truncated [ 139.321761][ T3764] loop1: p154 start 81664 is beyond EOD, truncated [ 139.322341][ T3764] loop1: p155 start 81664 is beyond EOD, truncated [ 139.322817][ T3764] loop1: p156 start 81664 is beyond EOD, truncated [ 139.334223][ T3764] loop1: p157 start 81664 is beyond EOD, truncated [ 139.335054][ T3764] loop1: p158 start 81664 is beyond EOD, truncated [ 139.336394][ T3764] loop1: p159 start 81664 is beyond EOD, truncated [ 139.337531][ T3764] loop1: p160 start 81664 is beyond EOD, truncated [ 139.339247][ T3764] loop1: p161 start 81664 is beyond EOD, truncated [ 139.340408][ T3764] loop1: p162 start 81664 is beyond EOD, truncated [ 139.341237][ T3764] loop1: p163 start 81664 is beyond EOD, truncated [ 139.342009][ T3764] loop1: p164 start 81664 is beyond EOD, truncated [ 139.351037][ T3764] loop1: p165 start 81664 is beyond EOD, truncated [ 139.351877][ T3764] loop1: p166 start 81664 is beyond EOD, truncated [ 139.355825][ T3764] loop1: p167 start 81664 is beyond EOD, truncated [ 139.356614][ T3764] loop1: p168 start 81664 is beyond EOD, truncated [ 139.358212][ T3764] loop1: p169 start 81664 is beyond EOD, truncated [ 139.359156][ T3764] loop1: p170 start 81664 is beyond EOD, truncated [ 139.360343][ T3764] loop1: p171 start 81664 is beyond EOD, truncated [ 139.361312][ T3764] loop1: p172 start 81664 is beyond EOD, truncated [ 139.362642][ T3764] loop1: p173 start 81664 is beyond EOD, truncated [ 139.374791][ T3764] loop1: p174 start 81664 is beyond EOD, truncated [ 139.375823][ T3764] loop1: p175 start 81664 is beyond EOD, truncated [ 139.377047][ T3764] loop1: p176 start 81664 is beyond EOD, truncated [ 139.377843][ T3764] loop1: p177 start 81664 is beyond EOD, truncated [ 139.379196][ T3764] loop1: p178 start 81664 is beyond EOD, truncated [ 139.380170][ T3764] loop1: p179 start 81664 is beyond EOD, truncated [ 139.381292][ T3764] loop1: p180 start 81664 is beyond EOD, truncated [ 139.382219][ T3764] loop1: p181 start 81664 is beyond EOD, truncated [ 139.389487][ T3764] loop1: p182 start 81664 is beyond EOD, truncated [ 139.391395][ T3764] loop1: p183 start 81664 is beyond EOD, truncated [ 139.393616][ T3764] loop1: p184 start 81664 is beyond EOD, truncated [ 139.395989][ T3764] loop1: p185 start 81664 is beyond EOD, truncated [ 139.398398][ T3764] loop1: p186 start 81664 is beyond EOD, truncated [ 139.412085][ T3764] loop1: p187 start 81664 is beyond EOD, truncated [ 139.416381][ T3764] loop1: p188 start 81664 is beyond EOD, truncated [ 139.418471][ T3764] loop1: p189 start 81664 is beyond EOD, truncated [ 139.420730][ T3764] loop1: p190 start 81664 is beyond EOD, truncated [ 139.423019][ T3764] loop1: p191 start 81664 is beyond EOD, truncated [ 139.427425][ T3764] loop1: p192 start 81664 is beyond EOD, truncated [ 139.431980][ T3764] loop1: p193 start 81664 is beyond EOD, truncated [ 139.434670][ T3764] loop1: p194 start 81664 is beyond EOD, truncated [ 139.438861][ T3764] loop1: p195 start 81664 is beyond EOD, truncated [ 139.441245][ T3764] loop1: p196 start 81664 is beyond EOD, truncated [ 139.444538][ T3764] loop1: p197 start 81664 is beyond EOD, truncated [ 139.448282][ T3764] loop1: p198 start 81664 is beyond EOD, truncated [ 139.450144][ T3764] loop1: p199 start 81664 is beyond EOD, truncated [ 139.451816][ T3764] loop1: p200 start 81664 is beyond EOD, truncated [ 139.452720][ T3764] loop1: p201 start 81664 is beyond EOD, truncated [ 139.454389][ T3764] loop1: p202 start 81664 is beyond EOD, truncated [ 139.455573][ T3764] loop1: p203 start 81664 is beyond EOD, truncated [ 139.456121][ T3764] loop1: p204 start 81664 is beyond EOD, truncated [ 139.459102][ T3764] loop1: p205 start 81664 is beyond EOD, truncated [ 139.459627][ T3764] loop1: p206 start 81664 is beyond EOD, truncated [ 139.460828][ T3764] loop1: p207 start 81664 is beyond EOD, truncated [ 139.461334][ T3764] loop1: p208 start 81664 is beyond EOD, truncated [ 139.462406][ T3764] loop1: p209 start 81664 is beyond EOD, truncated [ 139.462914][ T3764] loop1: p210 start 81664 is beyond EOD, truncated [ 139.464693][ T3764] loop1: p211 start 81664 is beyond EOD, truncated [ 139.465334][ T3764] loop1: p212 start 81664 is beyond EOD, truncated [ 139.466435][ T3764] loop1: p213 start 81664 is beyond EOD, truncated [ 139.467165][ T3764] loop1: p214 start 81664 is beyond EOD, truncated [ 139.468263][ T3764] loop1: p215 start 81664 is beyond EOD, truncated [ 139.468769][ T3764] loop1: p216 start 81664 is beyond EOD, truncated [ 139.469879][ T3764] loop1: p217 start 81664 is beyond EOD, truncated [ 139.470407][ T3764] loop1: p218 start 81664 is beyond EOD, truncated [ 139.475014][ T3764] loop1: p219 start 81664 is beyond EOD, truncated [ 139.475556][ T3764] loop1: p220 start 81664 is beyond EOD, truncated [ 139.479617][ T3764] loop1: p221 start 81664 is beyond EOD, truncated [ 139.480167][ T3764] loop1: p222 start 81664 is beyond EOD, truncated [ 139.482796][ T3764] loop1: p223 start 81664 is beyond EOD, truncated [ 139.484091][ T3764] loop1: p224 start 81664 is beyond EOD, truncated [ 139.484581][ T3764] loop1: p225 start 81664 is beyond EOD, truncated [ 139.485040][ T3764] loop1: p226 start 81664 is beyond EOD, truncated [ 139.485634][ T3764] loop1: p227 start 81664 is beyond EOD, truncated [ 139.486087][ T3764] loop1: p228 start 81664 is beyond EOD, truncated [ 139.486575][ T3764] loop1: p229 start 81664 is beyond EOD, truncated [ 139.487107][ T3764] loop1: p230 start 81664 is beyond EOD, truncated [ 139.487603][ T3764] loop1: p231 start 81664 is beyond EOD, truncated [ 139.488081][ T3764] loop1: p232 start 81664 is beyond EOD, truncated [ 139.488545][ T3764] loop1: p233 start 81664 is beyond EOD, truncated [ 139.489020][ T3764] loop1: p234 start 81664 is beyond EOD, truncated [ 139.489516][ T3764] loop1: p235 start 81664 is beyond EOD, truncated [ 139.490063][ T3764] loop1: p236 start 81664 is beyond EOD, truncated [ 139.490524][ T3764] loop1: p237 start 81664 is beyond EOD, truncated [ 139.491012][ T3764] loop1: p238 start 81664 is beyond EOD, truncated [ 139.491506][ T3764] loop1: p239 start 81664 is beyond EOD, truncated [ 139.491962][ T3764] loop1: p240 start 81664 is beyond EOD, truncated [ 139.492429][ T3764] loop1: p241 start 81664 is beyond EOD, truncated [ 139.493080][ T3764] loop1: p242 start 81664 is beyond EOD, truncated [ 139.499848][ T3764] loop1: p243 start 81664 is beyond EOD, truncated [ 139.500422][ T3764] loop1: p244 start 81664 is beyond EOD, truncated [ 139.501574][ T3764] loop1: p245 start 81664 is beyond EOD, truncated [ 139.502094][ T3764] loop1: p246 start 81664 is beyond EOD, truncated [ 139.503167][ T3764] loop1: p247 start 81664 is beyond EOD, truncated [ 139.510008][ T3764] loop1: p248 start 81664 is beyond EOD, truncated [ 139.512949][ T3764] loop1: p249 start 81664 is beyond EOD, truncated [ 139.516833][ T3764] loop1: p250 start 81664 is beyond EOD, truncated [ 139.517433][ T3764] loop1: p251 start 81664 is beyond EOD, truncated [ 139.525126][ T3764] loop1: p252 start 81664 is beyond EOD, truncated [ 139.525699][ T3764] loop1: p253 start 81664 is beyond EOD, truncated [ 139.526858][ T3764] loop1: p254 start 81664 is beyond EOD, truncated [ 139.527624][ T3764] loop1: p255 start 81664 is beyond EOD, truncated VM DIAGNOSIS: 01:30:59 Registers: info registers vcpu 0 CPU#0 PC=ffff800080010040 X00=ffff800082573c40 X01=ffff800080010000 X02=ffff800082574000 X03=ffff800082573c40 X04=ffff800082573bf1 X05=ffff800080010000 X06=0000000001db601e X07=00000000000000c0 X08=ffff80008259ab48 X09=79a74735605803fc X10=1170b77875d4fbe3 X11=0000000000000001 X12=ffff800082580028 X13=0000000000000288 X14=0000000000000288 X15=0000fffffe413688 X16=ffff800080000000 X17=ffff7ffffd46b000 X18=0000000000000000 X19=ffff800082599980 X20=ffff800082582970 X21=ffff80008291000c X22=ffff800082910000 X23=ffff80008255a0f0 X24=0000000000000000 X25=ffff800082599980 X26=0000000000000000 X27=0000000000000000 X28=ffff800082599980 X29=ffff800080003fb0 X30=7bab8000800156fc SP=ffff800080003fb0 PSTATE=204000c9 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffffe4136a0:0000fffffe4136a0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000fffffe413670 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800080810a88 X00=0000000000000002 X01=0000000000000018 X02=ffff800082905018 X03=ffff8000826cd5e8 X04=f2ff000003db4080 X05=0000000000000074 X06=302e30313120205b X07=205b5d3330373332 X08=642076435a6e2820 X09=4e41502b20666961 X10=2d204f41552d204e X11=5449442b204f4354 X12=5b5d333037333230 X13=205d353733335420 X14=0000000000000000 X15=ffff800088e6b0d0 X16=2d302e392e362064 X17=6b7a79732d326372 X18=ffffffffffffffff X19=ffff8000827e8d32 X20=ffff800080810b38 X21=f2ff000003db4080 X22=ffff8000827e8d6f X23=00000000000003c0 X24=0000000000000057 X25=ffff80008257ffe0 X26=ffff8000826cd618 X27=ffff800082550008 X28=00000000000003c0 X29=ffff800088e6b350 X30=ffff800080810b60 SP=ffff800088e6b350 PSTATE=824003c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffff5b160c0:0000fffff5b160c0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000fffff5b16090 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000