last executing test programs: 4m14.866532808s ago: executing program 2 (id=299): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) timer_create(0x0, 0x0, 0x0) 4m11.074649426s ago: executing program 2 (id=307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005", @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m8.577690368s ago: executing program 2 (id=315): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 4m7.63124823s ago: executing program 2 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 4m7.298094275s ago: executing program 2 (id=321): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x4, 0x4, 0x800006}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 4m6.732575332s ago: executing program 2 (id=322): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4m6.09540998s ago: executing program 32 (id=322): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 16.278445963s ago: executing program 1 (id=1194): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 16.114030255s ago: executing program 1 (id=1195): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x1e5041, 0x0) 15.753310839s ago: executing program 1 (id=1201): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000b80)='./file2\x00', 0x0, &(0x7f0000000180)={[{@noauto_da_alloc}, {@errors_continue}, {@acl}, {@mblk_io_submit}, {@sysvgroups}]}, 0x41, 0x4c1, &(0x7f0000000bc0)="$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") read(r0, &(0x7f00000019c0)=""/4097, 0x1001) 15.266341016s ago: executing program 1 (id=1204): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000200)='./file2\x00', 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) fcntl$notify(r2, 0x402, 0x8000003d) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) r6 = gettid() syz_emit_ethernet(0x19, &(0x7f0000000380)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0xfff, 0x0, 0x1}], @llc={@llc={0xf4, 0xaa, 'k'}}}}}}, &(0x7f0000000500)={0x1, 0x1, [0x218, 0xda7, 0x416, 0x167]}) syz_open_procfs(r6, &(0x7f0000000080)='attr/sockcreate\x00') close(r5) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) unlink(&(0x7f0000000180)='./file1\x00') 13.556951408s ago: executing program 0 (id=1211): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0xd) open(&(0x7f00009e1000)='./file0\x00', 0x1e5041, 0x0) 13.254012431s ago: executing program 0 (id=1216): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00'}, 0x18) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 13.010482805s ago: executing program 0 (id=1217): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/15, @ANYBLOB='\x00'/18, @ANYRES32=r2, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b703000070d50000850000000c000000b70000000000e3ff94"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f54982114", 0x41, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 13.010290545s ago: executing program 5 (id=1218): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000200)) semctl$IPC_INFO(0x0, 0x4, 0x3, 0x0) 13.000989095s ago: executing program 4 (id=1219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) 12.729742188s ago: executing program 0 (id=1220): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) ioctl$SIOCAX25DELUID(r2, 0x89e2, 0x0) 11.170531858s ago: executing program 4 (id=1222): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f00000005c0)={0x102102180, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0], 0x1}, 0x58) 11.170271368s ago: executing program 5 (id=1223): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000020000000095000000ca10cf8b"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001"], 0x140}}, 0x0) 11.06155707s ago: executing program 1 (id=1224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x401) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = dup(r0) io_setup(0x7, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xe000, r1, &(0x7f0000000280)="88", 0x1, 0x7, 0x0, 0x0, r1}]) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 10.868245092s ago: executing program 3 (id=1225): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)={0x2e, 0x200, 0x7}) 10.503117007s ago: executing program 3 (id=1226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 10.502465717s ago: executing program 4 (id=1227): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x100}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981"], 0x1000f) 10.21455077s ago: executing program 3 (id=1228): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00'}, 0x18) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 9.997163263s ago: executing program 3 (id=1229): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 9.753819736s ago: executing program 3 (id=1230): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/15, @ANYBLOB='\x00'/18, @ANYRES32=r2, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b703000070d50000850000000c000000b70000000000e3ff94"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f54982114", 0x41, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.572260268s ago: executing program 4 (id=1231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0xc00000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 9.510904339s ago: executing program 1 (id=1232): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) personality(0x500006) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) syz_read_part_table(0x4030, &(0x7f0000004040)="$eJzszjFKw3AYxuE3avCPZBHchGAQHCVuTrlFLpAzODuYmziGHqDH6wFaKB0aCH2e9fte+IVN2k+75yRvXea+T0qShxNv/Vfqp3KXJsnP8Xlc1mgFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2bXrN/Dvku0nKY5K/+9RDW+Ul6T7Pz8dljUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Kb9v2ce2iol6T4un4/LNaIAAAAAAAAAAAA4sAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwUgAAAP//1SYMTA==") 9.484094769s ago: executing program 5 (id=1233): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000002c0)={'veth1_to_team\x00', {0x2, 0x0, @local}}) 9.418319011s ago: executing program 3 (id=1234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x4, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r9, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r9, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r8, 0x0}]) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b04000023dc5ad93c5c2b7b0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062"], 0x44}}, 0x0) 9.255513453s ago: executing program 4 (id=1235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x0) 9.245115933s ago: executing program 5 (id=1236): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)={0x2e, 0x200, 0x7}) 9.013610356s ago: executing program 4 (id=1237): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 8.914498417s ago: executing program 5 (id=1238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0x0, 0x0, 0x0, 0xfd], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @empty, [0xffffffff, 0x1ff000100, 0x0, 0xffffffff], [0xff, 0xffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'wlan1\x00', {}, {}, 0x21, 0xb, 0x1, 0x16}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0xff000000, 0x0, 0xffffff], 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0xf81, 0x9, 0x500, 0x7ff, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 8.892954967s ago: executing program 0 (id=1239): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x5, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 139.46µs ago: executing program 0 (id=1240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r2 = socket(0x2a, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000020aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516", 0x5d}, {&(0x7f0000001d00)="0092e9a7e64c32c40a81fa0f64bd9906f29b6a0aa0e850e7eb26dd111c83b33cf6f3f5bfdf52e23faac8580b58c35613a51fec2e1500747c8a72eb20d3d6b9e4e75d266a5440ad6fa037d9055e6a4a6760575b9459419cfc252cb04e3a624aaaa02bf155303808bcb8ec989fd7db312bb9807d1efe0dab699418e3", 0x7b}], 0x2, 0x0, 0x0, 0x7400}, 0x40000) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 0s ago: executing program 5 (id=1241): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x100}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981"], 0x1000f) kernel console output (not intermixed with test programs): SerialNumber=0 [ 136.982415][ T4256] usb 3-1: config 0 descriptor?? [ 137.009353][ T4869] netlink: 88 bytes leftover after parsing attributes in process `syz.4.149'. [ 137.061742][ T4256] cp210x 3-1:0.0: cp210x converter detected [ 137.446291][ T4256] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 137.481638][ T4256] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 137.514504][ T4256] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 137.570655][ T4256] usb 3-1: cp210x converter now attached to ttyUSB0 [ 137.635471][ T4256] usb 3-1: USB disconnect, device number 5 [ 137.699126][ T4256] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.743260][ T4256] cp210x 3-1:0.0: device disconnected [ 138.423470][ T4878] device pim6reg1 entered promiscuous mode [ 139.835360][ T4896] device sit0 entered promiscuous mode [ 139.847239][ T4895] loop1: detected capacity change from 0 to 256 [ 139.904510][ T4892] loop4: detected capacity change from 0 to 4096 [ 139.976468][ T4892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.987157][ T4895] FAT-fs (loop1): Directory bread(block 64) failed [ 140.024459][ T4895] FAT-fs (loop1): Directory bread(block 65) failed [ 140.060682][ T4902] loop2: detected capacity change from 0 to 128 [ 140.134717][ T4892] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 140.208693][ T4895] FAT-fs (loop1): Directory bread(block 66) failed [ 140.246119][ T4895] FAT-fs (loop1): Directory bread(block 67) failed [ 140.304468][ T4895] FAT-fs (loop1): Directory bread(block 68) failed [ 140.358936][ T4895] FAT-fs (loop1): Directory bread(block 69) failed [ 140.489737][ T4908] fuse: Bad value for 'fd' [ 140.526372][ T4895] FAT-fs (loop1): Directory bread(block 70) failed [ 140.636464][ T4895] FAT-fs (loop1): Directory bread(block 71) failed [ 140.755575][ T4895] FAT-fs (loop1): Directory bread(block 72) failed [ 140.850555][ T4895] FAT-fs (loop1): Directory bread(block 73) failed [ 141.040881][ T4895] syz.1.173: attempt to access beyond end of device [ 141.040881][ T4895] loop1: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 141.125855][ T4895] syz.1.173: attempt to access beyond end of device [ 141.125855][ T4895] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 141.138562][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 141.168564][ T26] audit: type=1800 audit(1746251550.460:6): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.173" name="file1" dev="loop1" ino=1048663 res=0 errno=0 [ 141.577710][ T4923] netlink: 88 bytes leftover after parsing attributes in process `syz.4.177'. [ 143.307552][ T4936] loop3: detected capacity change from 0 to 4096 [ 143.347989][ T4943] loop1: detected capacity change from 0 to 128 [ 143.426435][ T4936] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.478709][ T4948] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 143.564761][ T4936] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 143.662920][ T4954] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 143.851837][ T4957] fuse: Bad value for 'fd' [ 144.423775][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 145.927951][ T4970] netlink: 88 bytes leftover after parsing attributes in process `syz.3.195'. [ 147.943120][ T4994] binfmt_misc: register: failed to install interpreter file ./file2 [ 150.889521][ T4299] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.146764][ T4299] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.208857][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.462177][ T4299] usb 2-1: config 0 descriptor?? [ 151.537153][ T4299] cp210x 2-1:0.0: cp210x converter detected [ 151.602062][ T5036] loop2: detected capacity change from 0 to 128 [ 151.643396][ T5037] binfmt_misc: register: failed to install interpreter file ./file2 [ 152.242455][ T4299] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 152.723092][ T4299] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 152.732956][ T4299] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 152.758877][ T4299] usb 2-1: cp210x converter now attached to ttyUSB0 [ 152.938356][ T4299] usb 2-1: USB disconnect, device number 3 [ 153.290780][ T4299] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.465186][ T4299] cp210x 2-1:0.0: device disconnected [ 153.685129][ T5047] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.699230][ T5047] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 154.402361][ T5057] befs: (nullb0): No write support. Marking filesystem read-only [ 154.416053][ T5057] befs: (nullb0): invalid magic header [ 155.728552][ T4337] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 155.935162][ T4337] usb 4-1: Using ep0 maxpacket: 16 [ 155.944096][ T4337] usb 4-1: unable to get BOS descriptor or descriptor too short [ 156.497294][ T4337] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 156.532406][ T4337] usb 4-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 156.543491][ T4337] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.574186][ T4337] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.585012][ T4337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.601232][ T4337] usb 4-1: Product: syz [ 156.605724][ T4337] usb 4-1: Manufacturer: syz [ 156.612364][ T4337] usb 4-1: SerialNumber: syz [ 156.659600][ T5084] binfmt_misc: register: failed to install interpreter file ./file2 [ 156.843038][ T4337] usb 4-1: 0:2 : does not exist [ 156.919387][ T4337] usb 4-1: USB disconnect, device number 2 [ 157.228530][ T4299] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.432728][ T4299] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 157.444364][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.535223][ T4299] usb 3-1: config 0 descriptor?? [ 157.588950][ T4299] cp210x 3-1:0.0: cp210x converter detected [ 157.782386][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.951530][ T4299] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 159.093591][ T4299] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 159.103732][ T4299] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 159.167502][ T4299] usb 3-1: cp210x converter now attached to ttyUSB0 [ 162.518788][ T4299] usb 3-1: USB disconnect, device number 6 [ 162.578763][ T4299] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 162.587450][ T4299] cp210x 3-1:0.0: device disconnected [ 163.761493][ T5119] loop3: detected capacity change from 0 to 4096 [ 163.860215][ T5119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.942044][ T5129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 164.002382][ T5119] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 164.100251][ T5131] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 164.418980][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 167.503126][ T5160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.256'. [ 168.131771][ T5161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.258'. [ 169.090603][ T4334] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 169.280213][ T4334] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 169.342493][ T4334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.361136][ T4334] usb 4-1: config 0 descriptor?? [ 169.384544][ T4334] cp210x 4-1:0.0: cp210x converter detected [ 170.272041][ T4334] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 170.293579][ T4334] cp210x 4-1:0.0: querying part number failed [ 170.315942][ T4334] usb 4-1: cp210x converter now attached to ttyUSB0 [ 170.344189][ T4334] usb 4-1: USB disconnect, device number 3 [ 170.478927][ T4334] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 170.504891][ T4334] cp210x 4-1:0.0: device disconnected [ 172.966371][ T5212] befs: (nullb0): No write support. Marking filesystem read-only [ 172.967617][ T5212] befs: (nullb0): invalid magic header [ 173.700656][ T5214] loop0: detected capacity change from 0 to 256 [ 173.822965][ T5214] FAT-fs (loop0): Directory bread(block 64) failed [ 173.823037][ T5214] FAT-fs (loop0): Directory bread(block 65) failed [ 173.823113][ T5214] FAT-fs (loop0): Directory bread(block 66) failed [ 173.823141][ T5214] FAT-fs (loop0): Directory bread(block 67) failed [ 173.823216][ T5214] FAT-fs (loop0): Directory bread(block 68) failed [ 173.823245][ T5214] FAT-fs (loop0): Directory bread(block 69) failed [ 173.823322][ T5214] FAT-fs (loop0): Directory bread(block 70) failed [ 173.823351][ T5214] FAT-fs (loop0): Directory bread(block 71) failed [ 173.823423][ T5214] FAT-fs (loop0): Directory bread(block 72) failed [ 173.823451][ T5214] FAT-fs (loop0): Directory bread(block 73) failed [ 173.902273][ T5214] syz.0.273: attempt to access beyond end of device [ 173.902273][ T5214] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 173.902370][ T5214] syz.0.273: attempt to access beyond end of device [ 173.902370][ T5214] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 173.902556][ T26] audit: type=1800 audit(1746251583.190:7): pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.273" name="file1" dev="loop0" ino=1048676 res=0 errno=0 [ 174.097593][ T5226] loop4: detected capacity change from 0 to 128 [ 174.228772][ T4332] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 174.455207][ T4256] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 174.512435][ T4332] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 175.250700][ T5235] syz.3.280 uses obsolete (PF_INET,SOCK_PACKET) [ 175.719933][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.179258][ T4332] usb 3-1: config 0 descriptor?? [ 176.219392][ T4332] cp210x 3-1:0.0: cp210x converter detected [ 176.318538][ T4256] usb 2-1: Using ep0 maxpacket: 16 [ 176.328326][ T4256] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 176.361028][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 176.383814][ T4256] usb 2-1: Product: syz [ 176.388125][ T4256] usb 2-1: Manufacturer: syz [ 176.404658][ T4256] usb 2-1: SerialNumber: syz [ 176.445321][ T4256] usb 2-1: config 0 descriptor?? [ 176.613470][ T4332] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 176.628429][ T4332] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 176.663943][ T4332] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 176.671611][ T4256] usb 2-1: USB disconnect, device number 4 [ 176.692806][ T4332] usb 3-1: cp210x converter now attached to ttyUSB0 [ 176.832965][ T4449] usb 3-1: USB disconnect, device number 7 [ 178.032991][ T4449] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 178.044263][ T4449] cp210x 3-1:0.0: device disconnected [ 178.803715][ T5256] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.812350][ T5256] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.989271][ T5262] loop1: detected capacity change from 0 to 256 [ 180.056687][ T5258] netlink: 88 bytes leftover after parsing attributes in process `syz.0.286'. [ 180.078662][ T5262] FAT-fs (loop1): Directory bread(block 64) failed [ 180.108582][ T5262] FAT-fs (loop1): Directory bread(block 65) failed [ 180.115300][ T5262] FAT-fs (loop1): Directory bread(block 66) failed [ 180.412514][ T5262] FAT-fs (loop1): Directory bread(block 67) failed [ 180.443159][ T5262] FAT-fs (loop1): Directory bread(block 68) failed [ 180.452959][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 180.464348][ T5262] FAT-fs (loop1): Directory bread(block 69) failed [ 180.479553][ T5272] Zero length message leads to an empty skb [ 180.516913][ T5262] FAT-fs (loop1): Directory bread(block 70) failed [ 180.545115][ T5262] FAT-fs (loop1): Directory bread(block 71) failed [ 180.557918][ T5262] FAT-fs (loop1): Directory bread(block 72) failed [ 180.566575][ T5262] FAT-fs (loop1): Directory bread(block 73) failed [ 185.116246][ T4332] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 185.896982][ T4332] usb 4-1: device descriptor read/all, error -71 [ 188.107094][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.114639][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.215891][ T5349] netlink: 88 bytes leftover after parsing attributes in process `syz.1.312'. [ 189.538658][ T4337] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 189.643433][ T5371] loop4: detected capacity change from 0 to 256 [ 189.702863][ T5371] FAT-fs (loop4): Directory bread(block 64) failed [ 189.715711][ T5371] FAT-fs (loop4): Directory bread(block 65) failed [ 189.740241][ T4337] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 189.765813][ T5371] FAT-fs (loop4): Directory bread(block 66) failed [ 189.778212][ T4337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.797820][ T5371] FAT-fs (loop4): Directory bread(block 67) failed [ 189.818540][ T5371] FAT-fs (loop4): Directory bread(block 68) failed [ 189.825830][ T5371] FAT-fs (loop4): Directory bread(block 69) failed [ 189.833697][ T4337] usb 4-1: config 0 descriptor?? [ 189.847060][ T5371] FAT-fs (loop4): Directory bread(block 70) failed [ 189.856847][ T5371] FAT-fs (loop4): Directory bread(block 71) failed [ 189.865586][ T4337] cp210x 4-1:0.0: cp210x converter detected [ 189.885649][ T5371] FAT-fs (loop4): Directory bread(block 72) failed [ 189.922690][ T5371] FAT-fs (loop4): Directory bread(block 73) failed [ 190.273712][ T4337] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 190.285481][ T4337] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 190.299116][ T4337] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 190.332551][ T4337] usb 4-1: cp210x converter now attached to ttyUSB0 [ 190.464852][ T4548] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.488110][ T4451] usb 4-1: USB disconnect, device number 6 [ 190.525580][ T4451] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.573504][ T4451] cp210x 4-1:0.0: device disconnected [ 190.657900][ T26] audit: type=1326 audit(1746251599.940:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 190.825304][ T26] audit: type=1326 audit(1746251599.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 190.996603][ T4548] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.021081][ T26] audit: type=1326 audit(1746251599.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 191.143098][ T26] audit: type=1326 audit(1746251599.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 191.278440][ T26] audit: type=1326 audit(1746251599.980:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 191.428104][ T26] audit: type=1326 audit(1746251599.980:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 191.563832][ T26] audit: type=1326 audit(1746251599.980:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 191.687643][ T26] audit: type=1326 audit(1746251599.980:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 191.782975][ T26] audit: type=1326 audit(1746251599.980:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 191.894126][ T26] audit: type=1326 audit(1746251599.980:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 192.164486][ T4548] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.871191][ T5389] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 193.430232][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.450555][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.465613][ T4262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.474202][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.483613][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.491482][ T4262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.681488][ T4548] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.710154][ T5392] loop3: detected capacity change from 0 to 4096 [ 193.836277][ T5392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.044109][ T5392] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 194.113507][ T5392] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 194.498097][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 195.970374][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 196.939625][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 197.254499][ T14] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 197.308221][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.363175][ T14] usb 1-1: config 0 descriptor?? [ 197.636352][ T14] cp210x 1-1:0.0: cp210x converter detected [ 198.142302][ T14] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 198.188170][ T14] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 198.248399][ T14] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 198.317483][ T14] usb 1-1: cp210x converter now attached to ttyUSB0 [ 198.360231][ T5390] chnl_net:caif_netlink_parms(): no params data found [ 198.396805][ T14] usb 1-1: USB disconnect, device number 2 [ 198.504210][ T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 198.518847][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 198.599175][ T14] cp210x 1-1:0.0: device disconnected [ 199.325776][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.332691][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.362046][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.388074][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.973278][ T5390] device bridge_slave_0 entered promiscuous mode [ 200.075333][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.092983][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.119813][ T5390] device bridge_slave_1 entered promiscuous mode [ 200.258616][ T14] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 200.280608][ T5390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.408545][ T5390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.566232][ T14] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 200.605389][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 200.858053][ T14] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 200.987797][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.027717][ T14] usb 4-1: Product: syz [ 201.032417][ T14] usb 4-1: Manufacturer: syz [ 201.054207][ T14] usb 4-1: SerialNumber: syz [ 201.090793][ T5390] team0: Port device team_slave_0 added [ 201.139777][ T14] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 201.398516][ T4262] Bluetooth: hci0: command 0x0406 tx timeout [ 201.404634][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 201.409860][ T5390] team0: Port device team_slave_1 added [ 201.411799][ T4270] Bluetooth: hci4: command 0x0406 tx timeout [ 201.422688][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 201.711027][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.729771][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.734526][ T14] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 202.199576][ T5390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.459110][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.466110][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.619672][ T5390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.665453][ T4548] device hsr_slave_0 left promiscuous mode [ 202.678456][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 202.687792][ T4548] device hsr_slave_1 left promiscuous mode [ 202.712528][ T4548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.721204][ T4548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.741385][ T4548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.759069][ T4548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.775597][ T4548] device bridge_slave_1 left promiscuous mode [ 202.787548][ T4548] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.802915][ T4548] device bridge_slave_0 left promiscuous mode [ 202.818498][ T4548] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.859910][ T4548] device veth1_macvtap left promiscuous mode [ 202.867106][ T4548] device veth0_macvtap left promiscuous mode [ 203.058461][ T4299] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 203.253695][ T4299] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 203.274801][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.304459][ T4299] usb 2-1: config 0 descriptor?? [ 203.323791][ T4299] cp210x 2-1:0.0: cp210x converter detected [ 203.555746][ T4301] usb 4-1: USB disconnect, device number 7 [ 203.646760][ T4548] team0 (unregistering): Port device team_slave_1 removed [ 203.697719][ T4548] team0 (unregistering): Port device team_slave_0 removed [ 203.730303][ T4299] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 203.740983][ T4299] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 203.751287][ T4548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.755097][ T4299] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 203.772111][ T4299] usb 2-1: cp210x converter now attached to ttyUSB0 [ 203.816470][ T4548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.944215][ T4301] usb 2-1: USB disconnect, device number 5 [ 203.972831][ T4301] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 203.997017][ T4301] cp210x 2-1:0.0: device disconnected [ 204.351536][ T4548] bond0 (unregistering): Released all slaves [ 204.577796][ T5390] device hsr_slave_0 entered promiscuous mode [ 204.592132][ T5390] device hsr_slave_1 entered promiscuous mode [ 204.607229][ T5390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.630191][ T5390] Cannot create hsr debugfs directory [ 207.305762][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 208.753664][ T5390] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.800333][ T5390] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 208.889249][ T5390] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.949850][ T5390] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.086107][ T5390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.198015][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.249385][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.322475][ T5390] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.551615][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.561110][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.572022][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.579328][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.962190][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.040024][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.095401][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.149711][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.159888][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.216600][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.240638][ T5602] overlayfs: missing 'lowerdir' [ 213.274720][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.288178][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.375706][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.420156][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.446487][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.510766][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.549239][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.577121][ T5612] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 213.727174][ T5390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.945726][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.268595][ T4336] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 214.739201][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.761354][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.772591][ T4336] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 214.788700][ T4336] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 214.798203][ T4336] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 214.801447][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.825550][ T4336] usb 1-1: config 220 has no interface number 2 [ 214.834722][ T4336] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 215.212635][ T4336] usb 1-1: config 220 interface 0 has no altsetting 0 [ 215.436803][ T4336] usb 1-1: config 220 interface 76 has no altsetting 0 [ 215.466136][ T4336] usb 1-1: config 220 interface 1 has no altsetting 0 [ 215.535227][ T4336] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 215.563260][ T5636] device bridge_slave_1 left promiscuous mode [ 215.578372][ T4336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.586735][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.610094][ T4336] usb 1-1: Product: syz [ 215.614632][ T4336] usb 1-1: Manufacturer: syz [ 215.632533][ T5636] device bridge_slave_0 left promiscuous mode [ 215.661981][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.750810][ T4336] usb 1-1: SerialNumber: syz [ 216.293911][ T4336] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 216.308410][ T4336] usb 1-1: No valid video chain found. [ 216.314270][ T4336] usb 1-1: selecting invalid altsetting 0 [ 216.359731][ T4336] usb 1-1: selecting invalid altsetting 0 [ 216.366081][ T4336] usbtest: probe of 1-1:220.1 failed with error -22 [ 216.472473][ T4336] usb 1-1: USB disconnect, device number 3 [ 217.071028][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.084266][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.119438][ T5390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.874730][ T5671] input: syz1 as /devices/virtual/input/input6 [ 220.796726][ T5679] loop0: detected capacity change from 0 to 4096 [ 221.676322][ T5679] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.818437][ T5679] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 221.833155][ T5679] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 222.076776][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 222.656204][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.671376][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.786725][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.837724][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.849387][ T5390] device veth0_vlan entered promiscuous mode [ 222.860390][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.869033][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.974941][ T5390] device veth1_vlan entered promiscuous mode [ 223.017261][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.058915][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.109323][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.149850][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.191703][ T5390] device veth0_macvtap entered promiscuous mode [ 223.272726][ T5712] device bridge_slave_1 left promiscuous mode [ 223.298703][ T5712] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.478435][ T4451] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 223.636537][ T5712] device bridge_slave_0 left promiscuous mode [ 223.646280][ T5712] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.711002][ T4451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.723043][ T4451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.041327][ T4451] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 224.068456][ T4451] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 224.079526][ T4451] usb 5-1: Manufacturer: syz [ 224.135199][ T4451] usb 5-1: config 0 descriptor?? [ 224.294339][ T5390] device veth1_macvtap entered promiscuous mode [ 224.367432][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.400260][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.497368][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.569352][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.589915][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.609393][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.625202][ T4451] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 224.643358][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.682883][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.756610][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.798375][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.831410][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.861465][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.881171][ T4451] usb 5-1: USB disconnect, device number 2 [ 224.915192][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.961978][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.003723][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.028364][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.063821][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.095173][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.127924][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.150985][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.187045][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.537548][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.608987][ T5734] loop0: detected capacity change from 0 to 4096 [ 225.670690][ T5734] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 225.890584][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.944636][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.955235][ T5734] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 226.003007][ T5390] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.034162][ T5390] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.069400][ T5739] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 226.075237][ T5390] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.371691][ T5390] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.512047][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 227.362310][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.404913][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.660819][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.715844][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.753345][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.788729][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.298413][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 230.538564][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 230.546250][ T14] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 230.632611][ T14] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 230.694988][ T14] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.732290][ T14] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.790673][ T5786] tmpfs: Unknown parameter 'noswap' [ 231.115675][ T14] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.583772][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.118008][ T14] usb 6-1: can't set config #16, error -71 [ 233.126390][ T14] usb 6-1: USB disconnect, device number 2 [ 235.562827][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 235.562843][ T26] audit: type=1804 audit(1746251644.850:31): pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.423" name="/newroot/85/bus/file1" dev="overlay" ino=474 res=1 errno=0 [ 236.686981][ T5838] loop3: detected capacity change from 0 to 128 [ 244.051641][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 244.134882][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 244.262155][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 244.279883][ T22] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.368507][ T22] usb 2-1: config 0 has no interface number 0 [ 244.395830][ T22] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.447045][ T22] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.529821][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.621234][ T5909] netlink: 88 bytes leftover after parsing attributes in process `syz.0.424'. [ 244.635596][ T22] usb 2-1: config 0 descriptor?? [ 244.809104][ T22] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 244.903513][ T22] usb 2-1: USB disconnect, device number 6 [ 245.989472][ T5928] loop4: detected capacity change from 0 to 128 [ 246.938617][ T5940] tmpfs: Unknown parameter 'noswap' [ 250.782047][ T5950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.448'. [ 251.636564][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.644328][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.695688][ T5969] netlink: 88 bytes leftover after parsing attributes in process `syz.5.453'. [ 252.187838][ T5985] loop0: detected capacity change from 0 to 128 [ 253.128485][ T5977] delete_channel: no stack [ 254.526789][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 255.153724][ T6008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.600936][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 255.724749][ T6008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.741173][ T6013] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.462'. [ 255.768165][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.776883][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.038770][ T6008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.067524][ T6024] netlink: 88 bytes leftover after parsing attributes in process `syz.4.466'. [ 256.267128][ T6008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.342198][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 258.099686][ T6008] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.287855][ T6008] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.431540][ T6008] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.499349][ T6008] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.575603][ T26] audit: type=1326 audit(1746251667.860:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 258.683576][ T26] audit: type=1326 audit(1746251667.870:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 258.778650][ T26] audit: type=1326 audit(1746251667.870:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 258.876469][ T26] audit: type=1326 audit(1746251667.870:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 259.633224][ T4301] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 260.218789][ T4301] usb 5-1: Using ep0 maxpacket: 8 [ 260.256707][ T4301] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 260.363651][ T4301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 260.448312][ T26] audit: type=1326 audit(1746251667.870:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 260.533683][ T4301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.628268][ T4301] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.673182][ T26] audit: type=1326 audit(1746251667.870:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 260.719740][ T4301] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.744548][ T6091] capability: warning: `syz.5.479' uses 32-bit capabilities (legacy support in use) [ 260.746109][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.763226][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.769587][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.809096][ T26] audit: type=1326 audit(1746251667.880:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 260.887469][ T26] audit: type=1326 audit(1746251667.880:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 260.910893][ T26] audit: type=1326 audit(1746251667.890:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 260.935258][ T26] audit: type=1326 audit(1746251667.890:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 260.968861][ T6100] netlink: 'syz.3.482': attribute type 10 has an invalid length. [ 261.010484][ T6100] batman_adv: batadv0: Adding interface: team0 [ 261.028057][ T6100] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.048440][ T4332] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 261.073031][ T4301] usb 5-1: GET_CAPABILITIES returned 0 [ 261.078967][ T4301] usbtmc 5-1:16.0: can't read capabilities [ 261.107054][ T6100] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 261.266946][ T6111] netlink: 88 bytes leftover after parsing attributes in process `syz.5.484'. [ 261.279791][ T4763] usb 5-1: USB disconnect, device number 3 [ 261.290576][ T4332] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 261.345130][ T4332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.358151][ T4332] usb 1-1: Product: syz [ 261.370978][ T4332] usb 1-1: Manufacturer: syz [ 261.383400][ T4332] usb 1-1: SerialNumber: syz [ 261.414290][ T4332] usb 1-1: config 0 descriptor?? [ 261.434436][ T4332] hub 1-1:0.0: bad descriptor, ignoring hub [ 261.451697][ T4332] hub: probe of 1-1:0.0 failed with error -5 [ 261.472086][ T4332] f81232 1-1:0.0: f81534a converter detected [ 261.639020][ T4332] usb 1-1: f81534a converter now attached to ttyUSB0 [ 261.827587][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 262.031537][ T6095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.189014][ T4763] usb 1-1: USB disconnect, device number 4 [ 262.225852][ T4763] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 262.302562][ T4763] f81232 1-1:0.0: device disconnected [ 264.338413][ T4332] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 264.540537][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.568643][ T4332] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 264.595465][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.637896][ T4332] usb 2-1: config 0 descriptor?? [ 264.699811][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 264.699825][ T26] audit: type=1326 audit(1746251673.990:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.4.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 264.829450][ T26] audit: type=1326 audit(1746251674.030:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.4.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 264.965709][ T26] audit: type=1326 audit(1746251674.030:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.4.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 265.084558][ T4332] elecom 0003:056E:00FE.0002: item fetching failed at offset 0/3 [ 265.122578][ T4332] elecom: probe of 0003:056E:00FE.0002 failed with error -22 [ 265.163090][ T6171] loop0: detected capacity change from 0 to 1024 [ 265.303520][ T4332] usb 2-1: USB disconnect, device number 7 [ 265.384681][ T6171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 265.393719][ T4301] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 265.553301][ T6184] netlink: 100 bytes leftover after parsing attributes in process `syz.5.501'. [ 265.560462][ T6168] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 265.588509][ T4301] usb 5-1: Using ep0 maxpacket: 8 [ 265.595789][ T4301] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 265.636331][ T4301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 265.648631][ T6168] EXT4-fs (loop0): Remounting filesystem read-only [ 265.691748][ T4301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.732855][ T4301] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.787979][ T4301] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.809495][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.869436][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 265.885737][ T6189] loop3: detected capacity change from 0 to 512 [ 265.919324][ T6189] EXT4-fs: Ignoring removed nobh option [ 265.969225][ T6189] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 266.039277][ T4301] usb 5-1: GET_CAPABILITIES returned 0 [ 266.046748][ T4301] usbtmc 5-1:16.0: can't read capabilities [ 266.251267][ T22] usb 5-1: USB disconnect, device number 4 [ 266.356283][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.507'. [ 266.685260][ T6208] tmpfs: Unknown parameter 'noswap' [ 267.818529][ T4301] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 268.011470][ T4301] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 268.058026][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.099794][ T4301] usb 2-1: config 0 descriptor?? [ 268.111964][ T26] audit: type=1326 audit(1746251677.400:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 268.141100][ T4301] cp210x 2-1:0.0: cp210x converter detected [ 268.201539][ T26] audit: type=1326 audit(1746251677.420:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 268.223918][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.302993][ T26] audit: type=1326 audit(1746251677.430:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 268.325105][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.378033][ T26] audit: type=1326 audit(1746251677.430:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 268.435827][ T26] audit: type=1326 audit(1746251677.430:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 268.458207][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.479659][ T26] audit: type=1326 audit(1746251677.460:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 268.579071][ T4301] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 268.589514][ T26] audit: type=1326 audit(1746251677.460:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 268.797091][ T4301] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 268.818483][ T4301] usb 2-1: cp210x converter now attached to ttyUSB0 [ 268.836900][ T4301] usb 2-1: USB disconnect, device number 8 [ 268.860811][ T4301] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 268.924479][ T6248] tmpfs: Unknown parameter 'noswap' [ 269.593070][ T4301] cp210x 2-1:0.0: device disconnected [ 269.828622][ T4332] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 270.034192][ T4332] usb 1-1: Using ep0 maxpacket: 8 [ 270.043554][ T4332] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 270.066556][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 270.066571][ T26] audit: type=1326 audit(1746251679.350:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 270.143363][ T4332] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 270.168824][ T6264] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 270.195423][ T4332] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.199318][ T6264] mmap: syz.4.527 (6264) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 270.214440][ T26] audit: type=1326 audit(1746251679.370:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 270.257300][ T4332] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.298492][ T4332] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.319093][ T26] audit: type=1326 audit(1746251679.370:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 270.359280][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.405304][ T26] audit: type=1326 audit(1746251679.370:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 270.567935][ T26] audit: type=1326 audit(1746251679.390:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 270.645581][ T4332] usb 1-1: usb_control_msg returned -71 [ 270.652309][ T4332] usbtmc 1-1:16.0: can't read capabilities [ 270.688146][ T4332] usb 1-1: USB disconnect, device number 5 [ 270.707468][ T26] audit: type=1326 audit(1746251679.390:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 270.730313][ T4763] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 270.841699][ T26] audit: type=1326 audit(1746251679.390:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 270.920724][ T26] audit: type=1326 audit(1746251679.390:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 270.943700][ T4763] usb 4-1: device descriptor read/64, error -71 [ 271.022554][ T26] audit: type=1326 audit(1746251679.390:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 271.146852][ T26] audit: type=1326 audit(1746251679.390:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 271.238407][ T4763] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 271.398411][ T4763] usb 4-1: device descriptor read/64, error -71 [ 271.519299][ T4763] usb usb4-port1: attempt power cycle [ 271.876523][ T6308] blktrace: Concurrent blktraces are not allowed on sg0 [ 271.938335][ T4763] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 271.989524][ T4763] usb 4-1: device descriptor read/8, error -71 [ 271.998008][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.535'. [ 272.308403][ T4763] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 275.616723][ T4763] usb 4-1: device descriptor read/8, error -71 [ 275.738611][ T4763] usb usb4-port1: unable to enumerate USB device [ 275.855733][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 276.862557][ T6388] delete_channel: no stack [ 278.583544][ T4337] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 278.768368][ T4337] usb 6-1: device descriptor read/64, error -71 [ 279.038429][ T4337] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 279.248392][ T4337] usb 6-1: device descriptor read/64, error -71 [ 279.378806][ T4337] usb usb6-port1: attempt power cycle [ 279.793391][ T4337] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 279.839372][ T4337] usb 6-1: device descriptor read/8, error -71 [ 280.119290][ T4337] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 280.179817][ T4337] usb 6-1: device descriptor read/8, error -71 [ 280.318507][ T4337] usb usb6-port1: unable to enumerate USB device [ 280.904614][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 281.085705][ T6476] blktrace: Concurrent blktraces are not allowed on sg0 [ 281.756115][ T6487] loop4: detected capacity change from 0 to 512 [ 281.927989][ T6487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 282.109850][ T6487] EXT4-fs (loop4): 1 orphan inode deleted [ 282.115653][ T6487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 282.159018][ T56] __quota_error: 69 callbacks suppressed [ 282.159044][ T56] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 282.213468][ T6487] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.226572][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:4: Failed to release dquot type 1 [ 282.513170][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 282.748579][ T4451] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 282.950290][ T4451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.988134][ T4451] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 283.015378][ T4451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.049297][ T4451] usb 6-1: config 0 descriptor?? [ 283.408294][ T6528] tmpfs: Unknown parameter 'noswap' [ 283.736092][ T4451] usbhid 6-1:0.0: can't add hid device: -71 [ 283.842878][ T4451] usbhid: probe of 6-1:0.0 failed with error -71 [ 283.996017][ T4451] usb 6-1: USB disconnect, device number 7 [ 284.005035][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 284.243030][ T6543] blktrace: Concurrent blktraces are not allowed on sg0 [ 284.618318][ T4337] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 284.798346][ T4337] usb 2-1: device descriptor read/64, error -71 [ 285.089056][ T4337] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 285.268460][ T4337] usb 2-1: device descriptor read/64, error -71 [ 285.443619][ T4337] usb usb2-port1: attempt power cycle [ 285.564958][ T6574] tmpfs: Unknown parameter 'noswap' [ 286.533510][ T4337] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 286.595029][ T4337] usb 2-1: device descriptor read/8, error -71 [ 286.878334][ T4337] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 286.922767][ T4337] usb 2-1: device descriptor read/8, error -71 [ 287.048517][ T4337] usb usb2-port1: unable to enumerate USB device [ 287.330127][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 287.720858][ T6590] delete_channel: no stack [ 288.400600][ T6615] tmpfs: Unknown parameter 'noswap' [ 289.151730][ T6617] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 289.198481][ T6617] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 289.358108][ T26] audit: type=1326 audit(1746251698.640:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6623 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 289.468312][ T26] audit: type=1326 audit(1746251698.700:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6623 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 289.589735][ T26] audit: type=1326 audit(1746251698.700:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6623 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 289.617803][ T26] audit: type=1326 audit(1746251698.700:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6623 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321d8e969 code=0x7ffc0000 [ 290.108309][ T4763] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 290.306193][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 290.323533][ T4763] usb 6-1: device descriptor read/64, error -71 [ 290.511437][ T6633] delete_channel: no stack [ 290.513885][ T6652] blktrace: Concurrent blktraces are not allowed on sg0 [ 290.618368][ T4763] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 290.842087][ T4763] usb 6-1: device descriptor read/64, error -71 [ 290.968547][ T4763] usb usb6-port1: attempt power cycle [ 291.241324][ T6676] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.248789][ T6676] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.379955][ T4763] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 291.452836][ T4763] usb 6-1: device descriptor read/8, error -71 [ 291.705986][ T6685] syz.0.645[6685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.706069][ T6685] syz.0.645[6685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.728265][ T4763] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 291.839462][ T4763] usb 6-1: device descriptor read/8, error -71 [ 291.968618][ T4763] usb usb6-port1: unable to enumerate USB device [ 292.072859][ T6689] loop0: detected capacity change from 0 to 128 [ 292.729518][ T6697] netlink: 'syz.0.650': attribute type 4 has an invalid length. [ 292.787495][ T6698] netlink: 'syz.0.650': attribute type 4 has an invalid length. [ 292.917762][ T6690] delete_channel: no stack [ 293.235976][ T26] audit: type=1326 audit(1746251702.520:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 293.321868][ T26] audit: type=1326 audit(1746251702.520:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 293.467791][ T26] audit: type=1326 audit(1746251702.560:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 293.593640][ T26] audit: type=1326 audit(1746251702.570:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 293.717024][ T26] audit: type=1326 audit(1746251702.570:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 293.874137][ T6712] loop0: detected capacity change from 0 to 256 [ 293.944626][ T6712] FAT-fs (loop0): Directory bread(block 64) failed [ 293.963821][ T6712] FAT-fs (loop0): Directory bread(block 65) failed [ 293.992956][ T6712] FAT-fs (loop0): Directory bread(block 66) failed [ 294.024696][ T6712] FAT-fs (loop0): Directory bread(block 67) failed [ 294.042918][ T6712] FAT-fs (loop0): Directory bread(block 68) failed [ 294.070788][ T6712] FAT-fs (loop0): Directory bread(block 69) failed [ 294.098098][ T6712] FAT-fs (loop0): Directory bread(block 70) failed [ 294.114879][ T26] audit: type=1326 audit(1746251703.400:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 294.137465][ T6712] FAT-fs (loop0): Directory bread(block 71) failed [ 294.137698][ T6712] FAT-fs (loop0): Directory bread(block 72) failed [ 294.160593][ T6712] FAT-fs (loop0): Directory bread(block 73) failed [ 294.206759][ T6716] ALSA: seq fatal error: cannot create timer (-19) [ 295.304229][ T6723] delete_channel: no stack [ 295.898034][ T6745] tmpfs: Unknown parameter 'noswap' [ 297.128657][ T6760] process 'syz.1.673' launched './file1' with NULL argv: empty string added [ 297.440475][ T4451] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 298.178421][ T4451] usb 4-1: device descriptor read/64, error -71 [ 298.448502][ T4451] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 298.778539][ T6778] tmpfs: Unknown parameter 'noswap' [ 299.178923][ T6769] delete_channel: no stack [ 299.417232][ T4451] usb 4-1: device descriptor read/64, error -71 [ 299.557729][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'. [ 299.567146][ T4451] usb usb4-port1: attempt power cycle [ 299.641246][ T6783] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 299.657259][ T6787] netlink: 104 bytes leftover after parsing attributes in process `syz.0.684'. [ 299.802191][ T6791] loop5: detected capacity change from 0 to 16 [ 299.866368][ T6791] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 299.905112][ T6786] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 299.918615][ T4336] syzkaller0: tun_net_xmit 76 [ 299.928021][ T6786] syzkaller0: Linktype set failed because interface is up [ 299.947045][ T6786] syzkaller0: create flow: hash 822658033 index 0 [ 299.988488][ T4451] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 300.686008][ T4337] syzkaller0: tun_net_xmit 76 [ 302.130981][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 302.130997][ T26] audit: type=1804 audit(1746251711.420:161): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.691" name="/newroot/137/bus/file1" dev="overlay" ino=751 res=1 errno=0 [ 303.506113][ T4451] usb 4-1: device descriptor read/8, error -71 [ 303.630494][ T26] audit: type=1326 audit(1746251712.920:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 303.686522][ T26] audit: type=1326 audit(1746251712.940:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 303.808246][ C0] syzkaller0 (unregistering): delete flow: hash 822658033 index 0 [ 303.843132][ T6818] blktrace: Concurrent blktraces are not allowed on sg0 [ 303.863065][ T26] audit: type=1326 audit(1746251712.940:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 303.941541][ T26] audit: type=1326 audit(1746251712.940:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 303.989898][ T26] audit: type=1326 audit(1746251712.940:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 304.022109][ T26] audit: type=1326 audit(1746251712.940:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 304.087010][ T26] audit: type=1326 audit(1746251712.940:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 304.174905][ T26] audit: type=1326 audit(1746251712.940:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 304.205569][ T26] audit: type=1326 audit(1746251712.940:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 304.253806][ T6833] netlink: 104 bytes leftover after parsing attributes in process `syz.5.697'. [ 305.045666][ T6831] delete_channel: no stack [ 306.706954][ T6830] netlink: 16 bytes leftover after parsing attributes in process `syz.5.697'. [ 306.738638][ T6830] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 307.526530][ T6859] input: syz1 as /devices/virtual/input/input7 [ 309.448285][ T4299] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 309.574133][ T6866] blktrace: Concurrent blktraces are not allowed on sg0 [ 309.608399][ T4299] usb 4-1: device descriptor read/64, error -71 [ 309.781464][ T6876] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 309.787357][ T6876] syzkaller0: Linktype set failed because interface is up [ 309.797050][ T6876] syzkaller0: create flow: hash 822658033 index 0 [ 309.828581][ T4336] syzkaller0: tun_net_xmit 76 [ 309.872316][ T6878] loop1: detected capacity change from 0 to 2048 [ 309.954515][ T6878] loop1: p1 < > p4 [ 309.964671][ T6882] loop0: detected capacity change from 0 to 128 [ 309.968395][ T4299] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 310.061846][ T6878] loop1: p4 size 8388608 extends beyond EOD, truncated [ 310.236360][ T6884] netlink: 20 bytes leftover after parsing attributes in process `syz.5.712'. [ 310.298491][ T4336] syzkaller0: tun_net_xmit 76 [ 310.609375][ T4336] syzkaller0: tun_net_xmit 76 [ 311.286182][ T6889] netlink: 104 bytes leftover after parsing attributes in process `syz.1.714'. [ 312.931944][ T6902] input: syz1 as /devices/virtual/input/input8 [ 313.798246][ C1] syzkaller0 (unregistering): delete flow: hash 822658033 index 0 [ 314.885895][ T4336] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 315.048334][ T4336] usb 4-1: device descriptor read/64, error -71 [ 315.358305][ T4336] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 315.518398][ T4336] usb 4-1: device descriptor read/64, error -71 [ 315.640052][ T4336] usb usb4-port1: attempt power cycle [ 315.681893][ T6915] blktrace: Concurrent blktraces are not allowed on sg0 [ 316.668301][ T4336] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 316.711914][ T4336] usb 4-1: device descriptor read/8, error -71 [ 316.864068][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 316.873641][ T6888] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 316.978470][ T4336] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 317.024128][ T4336] usb 4-1: device descriptor read/8, error -71 [ 317.107630][ T6931] loop1: detected capacity change from 0 to 128 [ 317.163661][ T4336] usb usb4-port1: unable to enumerate USB device [ 317.701369][ T6941] input: syz1 as /devices/virtual/input/input9 [ 317.709924][ T4298] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 319.158310][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 319.341833][ T4298] usb 6-1: no configurations [ 319.346526][ T4298] usb 6-1: can't read configurations, error -22 [ 319.649102][ T4298] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 319.741597][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 319.741614][ T26] audit: type=1326 audit(1746251729.030:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 319.889622][ T4298] usb 6-1: no configurations [ 319.894291][ T4298] usb 6-1: can't read configurations, error -22 [ 319.917510][ T4298] usb usb6-port1: attempt power cycle [ 319.935810][ T26] audit: type=1326 audit(1746251729.090:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 320.378551][ T4298] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 321.135841][ T4301] syzkaller0: tun_net_xmit 76 [ 321.148030][ T4301] syzkaller0: tun_net_xmit 48 [ 321.166656][ T6967] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 321.166875][ T4256] syzkaller0: tun_net_xmit 76 [ 321.176614][ T6967] syzkaller0: Linktype set failed because interface is up [ 321.244761][ T6971] syzkaller0: create flow: hash 822658033 index 0 [ 321.548498][ T4256] syzkaller0: tun_net_xmit 76 [ 322.263827][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.278285][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.314834][ T4301] syzkaller0: tun_net_xmit 76 [ 322.646419][ T4337] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 322.858298][ T4337] usb 5-1: device descriptor read/64, error -71 [ 323.197331][ T6992] input: syz1 as /devices/virtual/input/input10 [ 323.388410][ T4337] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 323.549120][ T4337] usb 5-1: device descriptor read/64, error -71 [ 323.758965][ T4337] usb usb5-port1: attempt power cycle [ 324.169583][ T4337] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 324.232730][ T4337] usb 5-1: device descriptor read/8, error -71 [ 324.518694][ T4337] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 324.518740][ T4298] usb 6-1: device descriptor read/8, error -71 [ 324.559012][ T4337] usb 5-1: device descriptor read/8, error -71 [ 324.787557][ T4337] usb usb5-port1: unable to enumerate USB device [ 324.787871][ C1] syzkaller0 (unregistering): delete flow: hash 822658033 index 0 [ 327.009985][ T7024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.751'. [ 328.541232][ T26] audit: type=1326 audit(1746251737.830:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 328.576774][ T26] audit: type=1326 audit(1746251737.850:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 328.599314][ T26] audit: type=1326 audit(1746251737.850:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 328.628865][ T26] audit: type=1326 audit(1746251737.850:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 328.652270][ T26] audit: type=1326 audit(1746251737.850:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 328.684193][ T26] audit: type=1326 audit(1746251737.850:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 328.722888][ T26] audit: type=1326 audit(1746251737.850:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 328.755381][ T26] audit: type=1326 audit(1746251737.880:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 328.782487][ T26] audit: type=1326 audit(1746251737.880:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 328.816129][ T26] audit: type=1326 audit(1746251737.890:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 329.208249][ T4336] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 329.410116][ T4336] usb 4-1: no configurations [ 329.414783][ T4336] usb 4-1: can't read configurations, error -22 [ 329.598403][ T4336] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 330.759235][ T4336] usb 4-1: no configurations [ 330.764335][ T4336] usb 4-1: can't read configurations, error -22 [ 330.779690][ T4336] usb usb4-port1: attempt power cycle [ 330.867503][ T7044] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 331.148367][ T4256] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 331.208366][ T4336] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 331.250312][ T4336] usb 4-1: no configurations [ 331.256641][ T4336] usb 4-1: can't read configurations, error -22 [ 331.328349][ T4256] usb 2-1: device descriptor read/64, error -71 [ 331.428337][ T4336] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 331.460649][ T4336] usb 4-1: no configurations [ 331.465726][ T4336] usb 4-1: can't read configurations, error -22 [ 331.487661][ T4336] usb usb4-port1: unable to enumerate USB device [ 331.618366][ T4256] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 331.634974][ T7062] ptrace attach of "./syz-executor exec"[7063] was attempted by "./syz-executor exec"[7062] [ 331.778395][ T4256] usb 2-1: device descriptor read/64, error -71 [ 331.908430][ T4256] usb usb2-port1: attempt power cycle [ 332.358468][ T4256] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 332.418998][ T4256] usb 2-1: device descriptor read/8, error -71 [ 332.441598][ T7076] loop5: detected capacity change from 0 to 512 [ 332.474087][ T7076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 332.511167][ T7076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 332.628714][ T7076] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 332.668412][ T7076] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.698456][ T4256] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 332.780575][ T4256] usb 2-1: device descriptor read/8, error -71 [ 332.874587][ T7090] netlink: 'syz.4.777': attribute type 13 has an invalid length. [ 332.887209][ T5390] EXT4-fs (loop5): unmounting filesystem. [ 332.911249][ T4256] usb usb2-port1: unable to enumerate USB device [ 333.059310][ T7098] loop5: detected capacity change from 0 to 128 [ 333.083490][ T7098] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.111978][ T7098] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.279646][ T4499] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.758966][ T7105] loop0: detected capacity change from 0 to 128 [ 335.999038][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.052062][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.324074][ T7090] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.333206][ T7090] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.348130][ T7090] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.357113][ T7090] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.575038][ T7100] smc: net device bond0 applied user defined pnetid SYZ2 [ 336.589390][ T7101] smc: net device bond0 erased user defined pnetid SYZ2 [ 337.721952][ T7139] loop3: detected capacity change from 0 to 128 [ 337.731024][ T7139] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 337.760684][ T7139] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 338.448977][ T4311] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.599596][ T7168] blktrace: Concurrent blktraces are not allowed on sg0 [ 340.011307][ T7175] syz.4.799[7175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.011393][ T7175] syz.4.799[7175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.956021][ T7216] loop0: detected capacity change from 0 to 128 [ 343.000606][ T7216] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 343.009553][ T7218] blktrace: Concurrent blktraces are not allowed on sg0 [ 343.106683][ T5878] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 344.949803][ T7233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.203057][ T7233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.382655][ T7233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.598030][ T7233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.957346][ T7233] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.981197][ T7233] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.045073][ T7233] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.240265][ T7233] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.690836][ T7271] blktrace: Concurrent blktraces are not allowed on sg0 [ 347.850922][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 347.850939][ T26] audit: type=1326 audit(1746251757.140:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 347.952617][ T26] audit: type=1326 audit(1746251757.140:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 348.060620][ T26] audit: type=1326 audit(1746251757.140:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 348.173822][ T26] audit: type=1326 audit(1746251757.140:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 350.291883][ T26] audit: type=1326 audit(1746251757.140:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 350.537978][ T7299] netlink: 132 bytes leftover after parsing attributes in process `syz.4.839'. [ 350.715602][ T26] audit: type=1326 audit(1746251757.140:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 350.907189][ T26] audit: type=1326 audit(1746251757.140:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd713f8e969 code=0x7ffc0000 [ 351.055918][ T4302] syzkaller0: tun_net_xmit 76 [ 351.062027][ T4302] syzkaller0: tun_net_xmit 48 [ 351.071148][ T7304] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 351.077052][ T7304] syzkaller0: Linktype set failed because interface is up [ 351.085028][ T4302] syzkaller0: tun_net_xmit 76 [ 351.114440][ T7304] syzkaller0: create flow: hash 822658033 index 0 [ 351.309081][ T4337] syzkaller0: tun_net_xmit 76 [ 353.394421][ T22] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 353.633975][ T22] usb 6-1: unable to get BOS descriptor or descriptor too short [ 353.660114][ T22] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 353.681362][ T22] usb 6-1: can't read configurations, error -71 [ 354.758627][ C1] syzkaller0 (unregistering): delete flow: hash 822658033 index 0 [ 355.913695][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.847'. [ 355.933170][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 355.992438][ T7347] netlink: 16 bytes leftover after parsing attributes in process `syz.5.856'. [ 356.024332][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.5.856'. [ 357.435316][ T7377] loop1: detected capacity change from 0 to 512 [ 357.888747][ T7377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 357.931198][ T7384] atomic_op ffff888054d95998 conn xmit_atomic 0000000000000000 [ 357.939222][ T7377] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.084167][ T26] audit: type=1800 audit(1746251767.370:226): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.865" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 358.266934][ T7377] syz.1.865 (7377) used greatest stack depth: 20800 bytes left [ 358.409146][ T7391] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 358.425396][ T7391] syzkaller0: Linktype set failed because interface is up [ 358.433692][ T4337] syzkaller0: tun_net_xmit 76 [ 358.451031][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 358.454856][ T7388] syzkaller0: create flow: hash 822658033 index 0 [ 359.032711][ T26] audit: type=1326 audit(1746251768.320:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 359.095276][ T26] audit: type=1326 audit(1746251768.360:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 359.192278][ T26] audit: type=1326 audit(1746251768.360:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 359.278311][ T26] audit: type=1326 audit(1746251768.370:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 359.424193][ T26] audit: type=1326 audit(1746251768.370:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 359.523722][ T26] audit: type=1326 audit(1746251768.370:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 359.574869][ T26] audit: type=1326 audit(1746251768.370:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 359.662926][ T26] audit: type=1326 audit(1746251768.370:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 359.745312][ T26] audit: type=1326 audit(1746251768.370:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9118e969 code=0x7ffc0000 [ 360.023986][ T7417] loop5: detected capacity change from 0 to 128 [ 360.124057][ T7417] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 360.150452][ T7417] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 360.394661][ T7417] block device autoloading is deprecated and will be removed. [ 360.541741][ T5390] EXT4-fs (loop5): unmounting filesystem. [ 361.391553][ T7424] loop5: detected capacity change from 0 to 2048 [ 361.399135][ T7426] loop4: detected capacity change from 0 to 512 [ 361.455668][ T7424] EXT4-fs: Ignoring removed oldalloc option [ 361.472054][ T7426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 361.493271][ T7426] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.629006][ T7424] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 361.656807][ T7424] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.881: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 361.712710][ T7424] EXT4-fs (loop5): Remounting filesystem read-only [ 361.720958][ T7424] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.881: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 361.742622][ T7424] EXT4-fs (loop5): Remounting filesystem read-only [ 361.799493][ C0] syzkaller0 (unregistering): delete flow: hash 822658033 index 0 [ 361.821289][ T5390] EXT4-fs (loop5): unmounting filesystem. [ 361.821526][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 362.982637][ T7447] loop5: detected capacity change from 0 to 256 [ 364.887314][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 364.887330][ T26] audit: type=1326 audit(1746251774.170:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7460 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 365.722484][ T26] audit: type=1326 audit(1746251774.210:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7460 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 365.782855][ T26] audit: type=1326 audit(1746251774.210:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7460 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 365.809720][ T26] audit: type=1326 audit(1746251774.210:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7460 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 365.940811][ T26] audit: type=1326 audit(1746251774.210:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7460 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 365.992611][ T7472] syz.4.897[7472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.992715][ T7472] syz.4.897[7472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.010184][ T4336] kernel write not supported for file bpf-prog (pid: 4336 comm: kworker/0:7) [ 367.680099][ T26] audit: type=1326 audit(1746251776.970:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 367.693147][ T7500] tipc: Started in network mode [ 367.712321][ T26] audit: type=1326 audit(1746251776.970:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 367.728288][ T7500] tipc: Node identity ac14140f, cluster identity 4711 [ 367.776195][ T7500] tipc: New replicast peer: 10.1.1.2 [ 367.779233][ T26] audit: type=1326 audit(1746251776.980:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 367.854509][ T7500] tipc: Enabled bearer , priority 10 [ 367.871222][ T26] audit: type=1326 audit(1746251776.980:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 367.961756][ T7508] 9pnet_fd: Insufficient options for proto=fd [ 368.004119][ T26] audit: type=1326 audit(1746251776.980:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 368.970365][ T4298] tipc: Node number set to 2886997007 [ 369.113329][ T7523] syz.5.917[7523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.113437][ T7523] syz.5.917[7523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.333159][ T7527] loop0: detected capacity change from 0 to 1764 [ 370.059312][ T7536] loop1: detected capacity change from 0 to 128 [ 370.067077][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 370.067093][ T26] audit: type=1326 audit(1746251779.350:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe98898d2d0 code=0x7ffc0000 [ 370.142773][ T7536] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 370.170029][ T26] audit: type=1326 audit(1746251779.390:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe98898d6b7 code=0x7ffc0000 [ 370.194289][ T7536] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 370.203840][ T26] audit: type=1326 audit(1746251779.390:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe98898d2d0 code=0x7ffc0000 [ 370.301591][ T26] audit: type=1326 audit(1746251779.400:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe98898e56b code=0x7ffc0000 [ 370.407239][ T26] audit: type=1326 audit(1746251779.400:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe98898d5ca code=0x7ffc0000 [ 370.442570][ T4364] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 370.529901][ T26] audit: type=1326 audit(1746251779.400:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 370.618919][ T26] audit: type=1326 audit(1746251779.400:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 372.275388][ T7576] loop1: detected capacity change from 0 to 128 [ 372.325662][ T7576] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 372.364147][ T7576] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 372.542762][ T4365] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 372.693850][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.940'. [ 372.713189][ T7589] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 372.731022][ T7589] netlink: 104 bytes leftover after parsing attributes in process `syz.3.940'. [ 373.513387][ T7619] loop0: detected capacity change from 0 to 128 [ 373.537024][ T7619] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 373.569708][ T7619] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 373.729489][ T5152] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 373.784675][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.952'. [ 373.819890][ T7625] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 373.846966][ T7626] netlink: 104 bytes leftover after parsing attributes in process `syz.5.952'. [ 374.502862][ T7652] loop0: detected capacity change from 0 to 8192 [ 374.613185][ T7652] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 374.645215][ T7652] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 374.655585][ T7652] loop0: unable to read partition table [ 374.670821][ T7652] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 374.686651][ T3623] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 374.700576][ T3623] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 374.707920][ T3623] loop0: unable to read partition table [ 374.917105][ T7659] loop3: detected capacity change from 0 to 128 [ 374.939574][ T7659] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 374.953198][ T7659] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 375.266100][ T5878] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 375.351626][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.968'. [ 375.378992][ T7662] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 375.420017][ T7662] netlink: 104 bytes leftover after parsing attributes in process `syz.0.968'. [ 377.569780][ T7694] loop0: detected capacity change from 0 to 128 [ 377.607796][ T7694] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 377.621902][ T7694] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 377.771017][ T5032] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 377.891277][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.984'. [ 377.900890][ T7707] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 377.913131][ T7707] netlink: 104 bytes leftover after parsing attributes in process `syz.4.984'. [ 378.099213][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.986'. [ 378.140336][ T7712] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.149953][ T7712] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.158818][ T7712] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.167568][ T7712] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.123553][ T7712] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.132624][ T7712] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.141802][ T7712] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.150779][ T7712] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.705935][ T7739] loop3: detected capacity change from 0 to 128 [ 380.714897][ T7739] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 380.741255][ T7739] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 380.854250][ T7743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.996'. [ 380.865260][ T56] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 380.874993][ T7743] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 380.905707][ T7744] netlink: 104 bytes leftover after parsing attributes in process `syz.4.996'. [ 383.651338][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.228014][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1010'. [ 384.247339][ T7788] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 384.259369][ T7785] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1010'. [ 385.537249][ T7806] loop3: detected capacity change from 0 to 1024 [ 385.636366][ T7806] EXT4-fs: Ignoring removed oldalloc option [ 385.702285][ T7806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 386.785401][ T26] audit: type=1326 audit(1746251796.070:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 386.834893][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 386.838570][ T26] audit: type=1326 audit(1746251796.070:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 386.911710][ T7829] random: crng reseeded on system resumption [ 386.950141][ T26] audit: type=1326 audit(1746251796.110:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 387.065492][ T26] audit: type=1326 audit(1746251796.160:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 387.065545][ T26] audit: type=1326 audit(1746251796.160:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe9889c1225 code=0x7ffc0000 [ 387.065584][ T26] audit: type=1326 audit(1746251796.160:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 387.065623][ T26] audit: type=1326 audit(1746251796.160:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 387.065662][ T26] audit: type=1326 audit(1746251796.160:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 387.065701][ T26] audit: type=1326 audit(1746251796.160:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 387.065739][ T26] audit: type=1326 audit(1746251796.160:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe98892ab39 code=0x7ffc0000 [ 387.204599][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1026'. [ 387.204625][ T7842] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 387.235615][ T7842] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1026'. [ 387.280042][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.518274][ T7851] fuse: Bad value for 'fd' [ 388.858397][ T7858] device veth0_macvtap left promiscuous mode [ 388.925285][ T7858] macvtap0: refused to change device tx_queue_len [ 391.043575][ T7882] loop5: detected capacity change from 0 to 2048 [ 391.529199][ T4388] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 391.540906][ T7897] syz.3.1047[7897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.541016][ T7897] syz.3.1047[7897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.665390][ T7899] loop5: detected capacity change from 0 to 1024 [ 391.792497][ T7899] EXT4-fs: Ignoring removed bh option [ 391.798025][ T7899] EXT4-fs: inline encryption not supported [ 391.870507][ T7899] EXT4-fs: Ignoring removed i_version option [ 391.951390][ T7899] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #3: block 1: comm syz.5.1048: lblock 1 mapped to illegal pblock 1 (length 1) [ 392.058501][ T4337] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 392.288553][ T4337] usb 2-1: device descriptor read/64, error -71 [ 392.384691][ T7899] __quota_error: 16 callbacks suppressed [ 392.384849][ T7899] Quota error (device loop5): write_blk: dquota write failed [ 392.616870][ T4337] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 392.631882][ T7899] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 392.668038][ T7899] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1048: Failed to acquire dquot type 0 [ 392.705124][ T7899] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.1048: Freeing blocks not in datazone - block = 0, count = 4096 [ 392.768996][ T7899] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1048: Invalid inode bitmap blk 0 in block_group 0 [ 392.788536][ T4337] usb 2-1: device descriptor read/64, error -71 [ 392.804247][ T7899] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 392.804302][ T4597] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 392.807319][ T4597] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 392.844210][ T7899] EXT4-fs (loop5): 1 orphan inode deleted [ 392.850098][ T7899] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 392.908410][ T4337] usb usb2-port1: attempt power cycle [ 392.924387][ T4597] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:16: Failed to release dquot type 0 [ 392.950823][ T7899] EXT4-fs (loop5): unmounting filesystem. [ 393.338311][ T4337] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 394.169595][ T4337] usb 2-1: device descriptor read/8, error -71 [ 394.341701][ T7932] futex_wake_op: syz.4.1059 tries to shift op by -1; fix this program [ 394.438354][ T4337] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 394.583611][ T4337] usb 2-1: device descriptor read/8, error -71 [ 394.728574][ T4337] usb usb2-port1: unable to enumerate USB device [ 394.808303][ T4336] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 395.030395][ T4336] usb 6-1: Using ep0 maxpacket: 8 [ 395.084509][ T4336] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 395.104102][ T4336] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 395.133983][ T4336] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 395.144194][ T4336] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 395.157195][ T4336] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.166438][ T4336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.335548][ T7946] input: syz1 as /devices/virtual/input/input14 [ 395.950057][ T4336] usbtmc 6-1:16.0: bulk endpoints not found [ 397.566574][ T4337] usb 6-1: USB disconnect, device number 18 [ 398.347902][ T7963] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1069'. [ 399.513371][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1069'. [ 399.528417][ T7962] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 399.879099][ T7971] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.198712][ T7984] input: syz1 as /devices/virtual/input/input15 [ 400.883149][ T7986] tipc: Enabling of bearer rejected, failed to enable media [ 401.213580][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1081'. [ 401.228363][ T129] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 401.266596][ T7995] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 401.291654][ T7995] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1081'. [ 401.428296][ T129] usb 5-1: Using ep0 maxpacket: 8 [ 401.435232][ T129] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 401.440722][ T8006] syz.1.1086[8006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.454622][ T8006] syz.1.1086[8006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.477761][ T129] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 401.497564][ T8006] 9pnet_fd: Insufficient options for proto=fd [ 401.505980][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1085'. [ 401.533474][ T129] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 401.550808][ T129] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.574085][ T129] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.584955][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.639843][ T129] usbtmc 5-1:16.0: bulk endpoints not found [ 401.846333][ T8004] blktrace: Concurrent blktraces are not allowed on sg0 [ 402.005350][ T8024] input: syz1 as /devices/virtual/input/input16 [ 403.666461][ T26] audit: type=1326 audit(1746251812.950:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 403.759119][ T26] audit: type=1326 audit(1746251813.000:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 403.824032][ T26] audit: type=1326 audit(1746251813.000:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 403.864787][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1097'. [ 403.925438][ T8048] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.934229][ T8048] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.942508][ T8048] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.950832][ T8048] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.997020][ T8048] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.005589][ T8048] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.014054][ T8048] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.022495][ T8048] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.043621][ T4337] usb 5-1: USB disconnect, device number 9 [ 404.092178][ T8052] 9pnet_fd: Insufficient options for proto=fd [ 404.608784][ T8065] input: syz1 as /devices/virtual/input/input17 [ 406.126887][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 406.529221][ T8077] blktrace: Concurrent blktraces are not allowed on sg0 [ 406.562119][ T26] audit: type=1326 audit(1746251815.850:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 406.618297][ T4332] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 406.658439][ T26] audit: type=1326 audit(1746251815.850:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 406.757214][ T26] audit: type=1326 audit(1746251815.850:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 406.818268][ T4332] usb 5-1: Using ep0 maxpacket: 8 [ 406.825930][ T4332] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 406.877299][ T26] audit: type=1326 audit(1746251815.850:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 406.952453][ T4332] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 407.017877][ T4332] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 407.066412][ T4332] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.098909][ T4332] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.113490][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.162126][ T4332] usbtmc 5-1:16.0: bulk endpoints not found [ 407.181063][ T26] audit: type=1326 audit(1746251815.850:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff119b8e969 code=0x7ffc0000 [ 407.715465][ T8104] netlink: 'syz.1.1115': attribute type 29 has an invalid length. [ 407.737707][ T8104] netlink: 'syz.1.1115': attribute type 29 has an invalid length. [ 407.763508][ T8104] netlink: 'syz.1.1115': attribute type 29 has an invalid length. [ 407.813002][ T8104] netlink: 'syz.1.1115': attribute type 29 has an invalid length. [ 408.114717][ T8114] overlayfs: failed to resolve './file0': -2 [ 408.617370][ T8123] 9pnet_fd: Insufficient options for proto=fd [ 408.726181][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'. [ 409.027804][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'. [ 409.217273][ T8148] overlayfs: failed to resolve './file0': -2 [ 410.053011][ T4332] usb 5-1: USB disconnect, device number 10 [ 410.140352][ T8138] blktrace: Concurrent blktraces are not allowed on sg0 [ 410.161478][ T8157] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1134'. [ 410.386968][ T8164] loop3: detected capacity change from 0 to 512 [ 410.411855][ T8157] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1134'. [ 410.440032][ T8164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 410.545686][ T8164] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 410.633662][ T8157] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1134'. [ 410.654683][ T8164] EXT4-fs (loop3): 1 truncate cleaned up [ 410.702425][ T8164] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 410.726306][ T8172] 9pnet_fd: Insufficient options for proto=fd [ 411.102861][ T8181] loop1: detected capacity change from 0 to 512 [ 411.172255][ T8181] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 411.225057][ T8181] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 411.290420][ T8182] EXT4-fs: Ignoring removed orlov option [ 411.304167][ T8181] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 411.305484][ T8182] EXT4-fs (loop3): can't enable nombcache during remount [ 411.337602][ T8181] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 411.346950][ T8181] System zones: 0-2, 18-18, 34-34 [ 411.373279][ T8181] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 411.407637][ T8181] EXT4-fs (loop1): 1 truncate cleaned up [ 411.413765][ T8181] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 411.514004][ T8182] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2768: inode #15: comm syz.3.1137: corrupted xattr block 33 [ 411.673656][ T8182] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2934: inode #15: comm syz.3.1137: corrupted xattr block 33 [ 411.767710][ T8182] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 412.015076][ T26] audit: type=1800 audit(1746251821.300:325): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1140" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 412.333972][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 412.447234][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'. [ 412.502257][ T8206] overlayfs: failed to resolve './file1': -2 [ 413.945303][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 414.642525][ T8288] overlayfs: failed to resolve './file1': -2 [ 414.778027][ T8290] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1157'. [ 416.125532][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'. [ 416.153030][ T8314] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.161960][ T8314] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.170713][ T8314] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.179001][ T8314] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.210766][ T8314] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.219270][ T8314] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.227642][ T8314] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.236126][ T8314] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.268311][ T4332] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 416.364746][ T8317] loop0: detected capacity change from 0 to 128 [ 416.496921][ T4332] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 416.515010][ T4332] usb 5-1: can't read configurations, error -61 [ 416.728304][ T4332] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 417.230564][ T8335] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1175'. [ 417.241653][ T8333] overlayfs: failed to resolve './file1': -2 [ 417.328575][ T4332] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 417.375433][ T4332] usb 5-1: can't read configurations, error -61 [ 417.427591][ T4332] usb usb5-port1: attempt power cycle [ 417.634590][ T8335] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1175'. [ 417.879160][ T4332] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 418.633743][ T4332] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 418.662151][ T4332] usb 5-1: can't read configurations, error -61 [ 418.939153][ T4332] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 420.035614][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 420.051750][ T8376] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.060693][ T8376] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.069153][ T8376] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.077333][ T8376] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.533022][ T8376] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.542129][ T8376] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.550580][ T8376] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.559000][ T8376] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.981846][ T4332] usb 5-1: device descriptor read/8, error -71 [ 421.076138][ T8392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 421.118592][ T4332] usb usb5-port1: unable to enumerate USB device [ 421.151966][ T8392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 421.180972][ T8392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.293539][ T8392] bond0: (slave bond_slave_0): Releasing backup interface [ 421.363429][ T8403] loop1: detected capacity change from 0 to 512 [ 421.400190][ T8403] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.430517][ T8392] bond0: (slave bond_slave_1): Releasing backup interface [ 421.475721][ T8409] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1200'. [ 421.486213][ T8403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 421.498946][ T8403] ext4 filesystem being mounted at /256/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.710189][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 421.763794][ T8392] team0: Port device team_slave_0 removed [ 421.889863][ T8392] team0: Port device team_slave_1 removed [ 421.928947][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.970109][ T8415] loop1: detected capacity change from 0 to 512 [ 421.983198][ T8392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.041344][ T8415] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 422.053799][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.076671][ T8392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.136246][ T8415] EXT4-fs (loop1): 1 truncate cleaned up [ 422.183792][ T8415] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 422.742806][ T8423] EXT4-fs: Ignoring removed orlov option [ 422.776455][ T8423] EXT4-fs (loop1): can't enable nombcache during remount [ 422.804294][ T8423] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2768: inode #15: comm syz.1.1204: corrupted xattr block 33 [ 422.827624][ T26] audit: type=1326 audit(1746251832.110:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 422.864748][ T26] audit: type=1326 audit(1746251832.140:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 422.884107][ T8423] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2934: inode #15: comm syz.1.1204: corrupted xattr block 33 [ 422.889528][ T26] audit: type=1326 audit(1746251832.140:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 422.931476][ T8423] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 423.028714][ T26] audit: type=1326 audit(1746251832.150:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 423.096469][ T26] audit: type=1326 audit(1746251832.150:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 423.191870][ T26] audit: type=1326 audit(1746251832.150:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 423.280987][ T26] audit: type=1326 audit(1746251832.150:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 423.305886][ T8437] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1210'. [ 423.343707][ T26] audit: type=1326 audit(1746251832.160:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 423.420748][ T26] audit: type=1326 audit(1746251832.160:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 423.549280][ T26] audit: type=1326 audit(1746251832.160:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe98898e969 code=0x7ffc0000 [ 424.729175][ T8470] input: syz1 as /devices/virtual/input/input18 [ 426.011574][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 426.177953][ T8497] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1223'. [ 427.566998][ T8517] syz.4.1231[8517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.567109][ T8517] syz.4.1231[8517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.666385][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 427.736554][ T8521] batman_adv: batadv0: Removing interface: team0 [ 427.772996][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.793331][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.827407][ T8516] loop1: detected capacity change from 0 to 8192 [ 427.836346][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.861671][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.269744][ C1] hrtimer: interrupt took 130063632 ns [ 542.018114][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 542.025135][ C0] rcu: 1-...!: (1 GPs behind) idle=7324/1/0x4000000000000000 softirq=30040/30045 fqs=3 [ 542.036419][ C0] (detected by 0, t=10502 jiffies, g=42561, q=247 ncpus=2) [ 542.043732][ C0] Sending NMI from CPU 0 to CPUs 1: [ 542.048978][ C1] NMI backtrace for cpu 1 [ 542.049002][ C1] CPU: 1 PID: 8540 Comm: syz-executor Not tainted 6.1.136-syzkaller #0 [ 542.049019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 542.049033][ C1] RIP: 0010:rcu_is_watching+0x36/0xa0 [ 542.049070][ C1] Code: e8 3f 33 a4 08 89 c3 83 f8 08 73 60 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 70 09 3d 8c 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 10 44 67 00 48 c7 c3 68 57 03 00 49 03 1e 48 89 [ 542.049084][ C1] RSP: 0018:ffffc900001e0d00 EFLAGS: 00000046 [ 542.049099][ C1] RAX: 1ffffffff187a12f RBX: 0000000000000001 RCX: 5db6ea8df7080100 [ 542.049111][ C1] RDX: ffff88802f370000 RSI: ffffffff8abf0d80 RDI: ffffffff8abf0d40 [ 542.049123][ C1] RBP: ffffc900001e0e98 R08: dffffc0000000000 R09: fffffbfff1bfd03e [ 542.049136][ C1] R10: fffffbfff1bfd03e R11: 1ffffffff1bfd03d R12: ffff888078671340 [ 542.049148][ C1] R13: dffffc0000000000 R14: ffffffff8c3d0978 R15: dffffc0000000000 [ 542.049161][ C1] FS: 00005555563f9500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 542.049176][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.049194][ C1] CR2: 00007f1321e4db25 CR3: 000000002f97d000 CR4: 00000000003506e0 [ 542.049209][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 542.049218][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 542.049227][ C1] Call Trace: [ 542.049234][ C1] [ 542.049243][ C1] __hrtimer_run_queues+0x49c/0xc80 [ 542.049272][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 542.049300][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 542.049316][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 542.049342][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 542.049371][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 542.049403][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 542.049432][ C1] [ 542.049437][ C1] [ 542.049442][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 542.049460][ C1] RIP: 0010:lock_acquire+0x20f/0x490 [ 542.049483][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 542.049496][ C1] RSP: 0018:ffffc90004bafaa0 EFLAGS: 00000206 [ 542.049509][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 5db6ea8df7080100 [ 542.049520][ C1] RDX: 0000000000000000 RSI: ffffffff8a6c0f80 RDI: ffffffff8abf0da0 [ 542.049531][ C1] RBP: ffffc90004bafba8 R08: dffffc0000000000 R09: fffffbfff2117049 [ 542.049544][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: 0000000000000001 [ 542.049555][ C1] R13: 1ffff92000975f60 R14: 0000000000000246 R15: dffffc0000000000 [ 542.049581][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 542.049603][ C1] ? read_lock_is_recursive+0x10/0x10 [ 542.049627][ C1] ? get_obj_cgroup_from_current+0xd0/0x280 [ 542.049651][ C1] ? get_obj_cgroup_from_current+0xd0/0x280 [ 542.049676][ C1] slab_pre_alloc_hook+0x18b/0x310 [ 542.049695][ C1] ? slab_pre_alloc_hook+0xb6/0x310 [ 542.049715][ C1] ? slab_pre_alloc_hook+0xb6/0x310 [ 542.049736][ C1] kmem_cache_alloc_lru+0x49/0x2e0 [ 542.049755][ C1] ? shmem_alloc_inode+0x24/0x40 [ 542.049784][ C1] shmem_alloc_inode+0x24/0x40 [ 542.049807][ C1] ? shmem_match+0x160/0x160 [ 542.049831][ C1] new_inode_pseudo+0x5f/0x1c0 [ 542.049853][ C1] new_inode+0x25/0x1c0 [ 542.049872][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 542.049899][ C1] shmem_get_inode+0x347/0xbf0 [ 542.049929][ C1] shmem_symlink+0x97/0x670 [ 542.049955][ C1] ? inode_permission+0xef/0x480 [ 542.049971][ C1] ? bpf_lsm_inode_symlink+0x5/0x10 [ 542.049998][ C1] vfs_symlink+0x247/0x3d0 [ 542.050021][ C1] do_symlinkat+0x1ae/0x3f0 [ 542.050042][ C1] ? vfs_symlink+0x3d0/0x3d0 [ 542.050066][ C1] __x64_sys_symlinkat+0x95/0xa0 [ 542.050087][ C1] do_syscall_64+0x4c/0xa0 [ 542.050108][ C1] ? clear_bhb_loop+0x45/0xa0 [ 542.050123][ C1] ? clear_bhb_loop+0x45/0xa0 [ 542.050139][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.050165][ C1] RIP: 0033:0x7f1321d8dee7 [ 542.050194][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.050207][ C1] RSP: 002b:00007ffd151d60f8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 542.050222][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1321d8dee7 [ 542.050233][ C1] RDX: 00007f1321e12311 RSI: 00000000ffffff9c RDI: 00007ffd151d6190 [ 542.050245][ C1] RBP: 00007ffd151d613c R08: 0000000000000013 R09: 00007ffd151d5e47 [ 542.050256][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000a9 [ 542.050265][ C1] R13: 0000000000000061 R14: 000000000006aace R15: 00007ffd151d6190 [ 542.050285][ C1] [ 542.050970][ C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g42561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 542.527011][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 542.536996][ C0] rcu: RCU grace-period kthread stack dump: [ 542.542902][ C0] task:rcu_preempt state:R running task stack:27040 pid:16 ppid:2 flags:0x00004000 [ 542.553708][ C0] Call Trace: [ 542.557002][ C0] [ 542.559953][ C0] __schedule+0x10e9/0x40d0 [ 542.564491][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 542.569722][ C0] ? _raw_spin_unlock+0x40/0x40 [ 542.574646][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 542.580572][ C0] schedule+0xb9/0x180 [ 542.584660][ C0] schedule_timeout+0x15c/0x280 [ 542.589535][ C0] ? console_conditional_schedule+0x40/0x40 [ 542.595451][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 542.601372][ C0] ? update_process_times+0x1b0/0x1b0 [ 542.606781][ C0] ? prepare_to_swait_event+0x335/0x350 [ 542.612356][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 542.617235][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 542.623411][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 542.628187][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 542.633063][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 542.638292][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 542.643527][ C0] rcu_gp_kthread+0x95/0x380 [ 542.648138][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 542.653271][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 542.659196][ C0] ? __kthread_parkme+0x162/0x1c0 [ 542.664252][ C0] kthread+0x29d/0x330 [ 542.668346][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 542.673473][ C0] ? kthread_blkcg+0xd0/0xd0 [ 542.678095][ C0] ret_from_fork+0x1f/0x30 [ 542.682551][ C0] [ 542.685586][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 542.691917][ C0] CPU: 0 PID: 8539 Comm: syz.0.1240 Not tainted 6.1.136-syzkaller #0 [ 542.699996][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 542.710065][ C0] RIP: 0010:smp_call_function_many_cond+0xe7b/0x1270 [ 542.716778][ C0] Code: 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 5d e9 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 e9 e5 0a 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 ce e5 0a [ 542.736403][ C0] RSP: 0018:ffffc90004037560 EFLAGS: 00000246 [ 542.742591][ C0] RAX: ffffffff8175ddd2 RBX: dffffc0000000000 RCX: 0000000000080000 [ 542.750600][ C0] RDX: ffffc9000c739000 RSI: 000000000007ffff RDI: 0000000000080000 [ 542.758592][ C0] RBP: ffffc900040376c0 R08: dffffc0000000000 R09: fffffbfff2117049 [ 542.766582][ C0] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: 1ffff110171e81b9 [ 542.774571][ C0] R13: ffff8880b8e3bb00 R14: 0000000000000001 R15: ffff8880b8f40dc8 [ 542.782558][ C0] FS: 00007fe98988d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 542.791507][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.798190][ C0] CR2: 0000001b2d61cff8 CR3: 000000007f956000 CR4: 00000000003506f0 [ 542.806353][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 542.814337][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 542.822327][ C0] Call Trace: [ 542.825622][ C0] [ 542.828579][ C0] ? text_poke_sync+0x20/0x20 [ 542.833290][ C0] ? smp_call_function_many+0x30/0x30 [ 542.838679][ C0] ? __SCT__tp_func_kmalloc+0x8/0x8 [ 542.843904][ C0] ? text_poke+0x90/0x90 [ 542.848183][ C0] ? text_poke_sync+0x20/0x20 [ 542.852885][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 542.858020][ C0] ? __SCT__tp_func_kmalloc+0x8/0x8 [ 542.863238][ C0] text_poke_bp_batch+0x2b0/0x7d0 [ 542.868299][ C0] ? text_poke_loc_init+0x570/0x570 [ 542.873526][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 542.879707][ C0] ? __mutex_trylock_common+0x14f/0x250 [ 542.885288][ C0] text_poke_bp+0xd2/0x150 [ 542.889727][ C0] ? __mutex_lock+0x19e/0xaf0 [ 542.894433][ C0] ? text_poke_queue+0x180/0x180 [ 542.899388][ C0] ? __mutex_lock+0x19e/0xaf0 [ 542.904089][ C0] __static_call_transform+0x318/0x500 [ 542.909576][ C0] ? __static_call_update+0x96/0x5b0 [ 542.914887][ C0] ? __SCT__tp_func_kmalloc+0x8/0x8 [ 542.920122][ C0] ? text_poke_bp+0x150/0x150 [ 542.924838][ C0] ? rcu_read_lock_any_held+0xb0/0x120 [ 542.930324][ C0] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 542.935630][ C0] ? __traceiter_kmalloc+0x70/0x70 [ 542.940767][ C0] ? __SCT__tp_func_kmalloc+0x8/0x8 [ 542.945983][ C0] arch_static_call_transform+0xca/0x270 [ 542.951645][ C0] ? __SCT__tp_func_kmalloc+0x8/0x8 [ 542.956868][ C0] __static_call_update+0xdd/0x5b0 [ 542.962007][ C0] ? __traceiter_kmalloc+0x70/0x70 [ 542.967148][ C0] ? __static_call_return0+0x10/0x10 [ 542.972459][ C0] ? __kmem_cache_alloc_node+0x140/0x260 [ 542.978117][ C0] ? tracepoint_add_func+0x307/0x9a0 [ 542.983429][ C0] ? rcu_is_watching+0x11/0xa0 [ 542.988220][ C0] ? tracepoint_add_func+0x307/0x9a0 [ 542.993533][ C0] ? __traceiter_kmalloc+0x70/0x70 [ 542.998672][ C0] tracepoint_add_func+0x6bf/0x9a0 [ 543.003831][ C0] ? __bpf_trace_kmalloc+0x140/0x140 [ 543.009175][ C0] tracepoint_probe_register_prio_may_exist+0x5c/0x90 [ 543.015964][ C0] ? __bpf_trace_kmalloc+0x140/0x140 [ 543.021283][ C0] bpf_raw_tp_link_attach+0x3d1/0x550 [ 543.026692][ C0] ? bpf_insn_prepare_dump+0x840/0x840 [ 543.032202][ C0] bpf_raw_tracepoint_open+0x194/0x200 [ 543.037689][ C0] __sys_bpf+0x4e9/0x6d0 [ 543.041958][ C0] ? bpf_link_show_fdinfo+0x310/0x310 [ 543.047369][ C0] ? lock_chain_count+0x20/0x20 [ 543.052256][ C0] __x64_sys_bpf+0x78/0x90 [ 543.056711][ C0] do_syscall_64+0x4c/0xa0 [ 543.061157][ C0] ? clear_bhb_loop+0x45/0xa0 [ 543.065849][ C0] ? clear_bhb_loop+0x45/0xa0 [ 543.070544][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.076480][ C0] RIP: 0033:0x7fe98898e969 [ 543.080916][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.100542][ C0] RSP: 002b:00007fe98988d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.108976][ C0] RAX: ffffffffffffffda RBX: 00007fe988bb5fa0 RCX: 00007fe98898e969 [ 543.116966][ C0] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000011 [ 543.124954][ C0] RBP: 00007fe988a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 543.132944][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.140928][ C0] R13: 0000000000000000 R14: 00007fe988bb5fa0 R15: 00007ffd9ab5e618 [ 543.148936][ C0]