last executing test programs: 7.166425725s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='nilfs2\x00', 0x22, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$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") r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="03011400012918000e3580009f0001140000002f0600ac141414e0000003808a89723d0b72e410820c520f061fecfdfe4b88942a31f48597e36e039b1c599db6e466749c2da42bc8c3ee5c4c8303a0f7060000000000000000e3c06304000000ffffca"], 0xdd12}], 0x1}, 0x0) 6.898771517s ago: executing program 2: syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080009000001ac1414aa8300042010780300000045000000000001000000fb2710978f8f669dc0c0e0c5f3530061"], 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09", 0x3e}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430ebfdfd9c807862ef45320caf34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c", 0x9a}, {&(0x7f00000006c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bf227e65108bbb0a9f337a3f110fd12cb4141d126", 0x6e}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a49b377f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}], 0x6, &(0x7f0000002700)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="0047b1d19bec420fd311bb340000001cf8fe961a000000000000000000009923aa3d89753fcb5400"/50, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC, @ANYRESOCT=r2], 0xffffffa1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000000)) preadv(r3, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4096, 0x79}], 0x1, 0x79, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000880)={0x8e2d, [], 0x1, "4b1bec84799a11"}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f00000003c0)={0x6, 'pimreg0\x00', {0x80000000}, 0x100}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300080a, &(0x7f0000000840)=ANY=[], 0xc, 0x2c2, &(0x7f0000000480)="$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") statx(r4, &(0x7f0000000440)='./file1/file1\x00', 0x400, 0x20, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) setsockopt$packet_int(r7, 0x107, 0x12, &(0x7f0000000000)=0x5, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000000)=""/157, 0x41100}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002840)={&(0x7f00000000c0)='kmem_cache_free\x00', r8}, 0x16) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004140)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000ec0)="9be443818c244924d80b55f7d985d1a066acb4a466c5eb4f0d9f227b60d16c8548ade077168bc3a0add78bc21729121b50d50dd81c2f75c27cee1b70953bc44be0ed94178a3706d9499cefc515fcfdd0a22c996e75ef4fb6702119a4bbb3f7e94a9b3d7e71a0f8500b4be14c6244d7a21501a1c7cb2b4704bc31eb4c013612c143fcd2e382f4571c77edef3e6d0102c5a2cc5d4e10b3c288f7e98f0e18fa89c5f9c59c1bdb84344d7fcd5c450b4963982743e1a2f0be7735fe848834e491a83addcff721bcdb3b630a43bb7bd0f4701cd2", 0xd1}, {&(0x7f0000000fc0)="d33cf03f0b68cb125b22b27c21365c126f1b6155451ca8b945061f6973765a9274e5935f5900c1f7344600e79b1394c17d41123cefa8ce9779b1f8953c7b2cef77a28ec18fe96133c96b86c20c307f31c6cf57596cf17ce789d229f4f7378609944f82e8880a34cfd60e2448f2f984ca86516fb9e632d16d8c6c5a696f3204109fe870a3ace89b79c217a4e665a178c34102c618c04c337375a7b27e8cc4417cbf60800cb852096c55569c263d70f3b02ef1f2223afa4824ad3d27a2dd4b304d1cef75e7c469e27045506d0d6d484fc0e612a229eed0e23185ae85d87ed03c08d6b7c274df37e141b0dd", 0xea}, {&(0x7f0000000300)="dd649d20", 0x4}], 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32=r10, @ANYRES32=r7, @ANYBLOB="1c24f1a9f1178ef73200000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x1}}, {{&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000003140)="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", 0xffc}, {&(0x7f0000001140)="130e2a6d651903ac78d7027af3a8f4b1bfcc90100f60900cac85f7c76d63741fb2df5eb84d1f4c35ce6f34e5946d995ce48b1fa0cd7d67e572815f43d916d7ac0656429a28f69f1976b3c00f9b5b5e034d298b8a3970dd451ffc1926dd1b353a2516eb6c", 0x64}], 0x2, &(0x7f0000002f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r10, r10, r11, r11, r10, r10, r4, r10]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}], 0xf8, 0x80}}, {{&(0x7f00000017c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001840)="f12152b4137e9c8695a01568110ac838f579acd6fb2d9214c152441cf837c1db37b3deaebbb0ea15e4d6e4d0b789c6f1d6c18b9f71272350b1d8eb4b5890db828ef71436c52d524d143822c30a401e4faa2afa74cd12b2d0f40e2737c44d1b599542f12791c766da0443a404b59ed9000385e1a9dcc36ba016b9dc2373d95bba75eb973fe0110dca657ec9cbd2295ad3a3dc2d3b9e7b58722dda9f55b32e1d9c61b28ba7d144525d60e3981358b2544ea7716f10a1f51fb46c5c8f9a701e2a08a26521dd447aadcb242d79788859d462ddd98305849ac12e8ed7", 0xda}], 0x1, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r7, r4, 0xffffffffffffffff, r11]}}, @rights={{0x18, 0x1, 0x1, [r7, r10]}}, @rights={{0x20, 0x1, 0x1, [r11, r9, r10, r9]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff, r4]}}], 0xc0, 0x8000}}, {{&(0x7f0000001b00)=@file={0x1, './file1/file1\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001b80)="1070c3750447489117988eb47cdb75d16cb6d8f9b3afef6d5feef70a87193660c5d0aca6398f492cf429", 0x2a}, {&(0x7f0000001bc0)="28e2995f2d4b579c1984719ddb6500b0d6c5d459d1a5ab2b1e7b4e1728a386395f477659567fa9676aa0a2ea3558c783fd51333e8698b9ca74c717b9021e461908426d2acd7cf334ec69642c7160719897b62c524dcc481a44717ea3fb7ede59e1501bb476b0e496bf350d8a3c1a14eff7c37e5ddfae633244fcb270ffca20d28bcf5530191dcc6bfc3a42093c4e1bd122127e8ce25234b84bacc230afa8efe20f1f8582908090ef6b99ac9de3664feaad03a09ccc93275a64b4b2cc0237c5867199b896cedb63fc6a6a43d4651c583a65703b15f3c65bd7a5a7f40b5343f37fa1adf71b37018bdcde4c8b361b4d2d8e7ddffbb21593", 0xf6}, {&(0x7f0000001cc0)="428e22f705b0beb304f4c7f6c0fb706cd1ccbfc79bcbc7af0f465f11f38e941d4d38776000a2e9fe897e5fe72a8155da8806b9e569f874c91bd7fc3184a577f18c9fb6551bcb12669598f491318b781b7ce61cf12f5117b4637a40e08ebe68a141dfc6ba", 0x64}, {&(0x7f0000001d80)="c94bd989a272d2a285d35f8addc3fde7", 0x10}], 0x4, &(0x7f00000023c0), 0x0, 0x8000}}, {{&(0x7f00000024c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002540)="b739410f9a626deae4a061f84a176a8f407b3efab0baa3a59a1b21363f188f774a23db594d9252a68c893007b4fe45a3d0cbab00e0305c5860e69a1feb31078e9c1a870bc61f0ab88b70e93ff4447c9d53e3083e94629efb8229c9543519f51c9942a2fc02eacbb69335c43b80e3381b5905e95f2689e15f652c6752b6d5eff97a347531d909055999a9ab4b868908a7840033776a8e8a", 0x97}, {&(0x7f0000001f80)="ea42f82e67907a0b64350f765db9b38e0b58e86371468688cf4b48", 0x1b}, {&(0x7f0000002600)="a5bb69f928f57ed177fe1b605b5b3a39db17ecfd298a897d80a3c3bc36a7ba9721282f682465da0797fb69", 0x2b}], 0x3}}, {{&(0x7f0000002680)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002700)="a66b288d67df5850c7ba2893b9e0bd3cc203b3db51acfb75b16e30d9947ebde651e3d8961519530723fbcab4439c52ab9ff78151fb66049fa755417607efb4ff9db34a6d4272fa3e197f4179c1ef19799cf420d4e73d4489f089b68f829b2ce573acb8910960654db950ce503f9593a2a88ef3e341ec1e33fa775c965ed71dd59d0b0df2c160b9729e6ff58a647ba03130bf789c06671c2e80f8fe7b8014601ca1a3bca0d087b2679f57d79d3fd731461bc322b3ab9e3d0219bf173b9f72fad1adfa", 0xc2}, {&(0x7f0000000400)="032f155c64622111632c2aec89266c86546331d8ea84a6520debdb7e9f9572a49c66a1952cb34e0381e1357eb88f", 0x2e}, {&(0x7f0000004480)="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", 0x17d}, {&(0x7f00000023c0)="8ff0fc01f6d21f69a0867c35b93e4ded403a05038acdced43635529033329e34ed8e3ce646c1873eca7fe0c17920e7baca950ae2efdd40fbb8376208a83cf7a4cfdd0b24b733b21f6cad2020b3b4215222fccfcff0d84deb37fbc7a103c0ab859b72a220b29af4cd971f42e0f8ee3f96037db2e7792cc974b3eb69475a6f9f933dfc86dfe4afed62f8c437ca2fae54cc2954a0ea7ed4b6da42e82b5251e6f51b788ad64fed3c0295a26c60a7ff3a9d546413f2158a260e3e04d6925727f1dbdf53785176218622a3373c2445addd27ebe1411456421af6736705285c8670fe85e1e47fdc9e225296dc09ce0000", 0xed}, {&(0x7f0000002a00)="df891e7b605ebe64879731c3552c8b2031084e0808212b61258cc25bc88304d2f2d7e6a4d8d4099223bdca253994488d3d05c3b3b43e35ad447daadfb2ac2f855334e2704cca762aba5a01a4f2ca523668b20b49147019fb2b6c203bb26199e8a4ecaad4416083f49358a78cfe3271aa3d2770fb3e585d7f8704e94b8d095d70f1a11859db1ea978c4a90c6f35e2c2f60ae36587e74f61cb", 0x98}, {&(0x7f0000002ac0)="3b113a376f42ebaafae54e40f6a533d508eafe93b483dfc4e057be8bc8355b1f1780872404f565084713c8496707c11035c0f04b8a61c5e46c1b88fce1884cc1dac429a2e896dcd6d58149b93a71dcc0e13cf3477cdf38831cd998a7fe623b7eb3cfd58fe2dd1de9d558693a2a9a3a8eecfc0b18b3491a0567abcba0d416fc67bc3126965849a2f6626f5a718cb48d29f2286d8b410161f6e526affa88d4b32a935f815b6ad9987d703621f6c2cec3d2ce32a94da4a750", 0xb7}, {&(0x7f0000002cc0)="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", 0xfb}, {&(0x7f0000002dc0)="f9d194df5b4966f496235e346dd5b09e620d1d8e736e3b1c15c6f8824d7c98753d511c4cad7a6562b265ce4f5794b751e908792435044bc54c8fa456bd62b8069bcc92b2a3144a55df8a1b16139a35608df4b52533f82ef88dd2c3631e946bf47d52d69cb91ad93bdc1ed884acf2ee4d625c0f0d1436d11fc0445fdbfd4263499dfdff5065776c4b7e3357e056061907778af933c9ea1846d4ff1c6e2de00e55d0617a0767a14de5b11e0e023b7e6bdead5c103f90f0d0", 0xb7}], 0x8, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x28, 0x1, 0x1, [r8, 0xffffffffffffffff, r8, r10, r7, 0xffffffffffffffff]}}], 0x48, 0x80}}], 0x6, 0x4) setsockopt$inet6_int(r10, 0x29, 0x38, &(0x7f0000000180)=0x5, 0x4) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r12, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100000000000080", @ANYRES32=0x0, @ANYBLOB], 0x2c}, {&(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r12, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c597110e606ba7ea7d9370a898e71cb4221e5812adb4e9523a5ebc6fbc658f059046c3c0dd5113a2f11b9b31df04832500b95fba147ad27370100207d17ce4220f6088557280ce35d818943e3ce2a9e2e563798fe050ae7deb9a", @ANYRES32, @ANYRESOCT, @ANYRESOCT=r10, @ANYRES64], 0x200}, {&(0x7f00000030c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0400290014007100fcc9000000000000000600000000000000001400560020010000000000000000000000000000d2008a8008004200", @ANYRES32=r12, @ANYRESOCT=r9], 0x3b0}, {&(0x7f00000042c0)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0d0007002f5d3a402dd34bcfd20000003c1334834595d3f4e4e63f5d3b7ad1c6d138330cf1e89df2bac44aede49d376ac1cad9609428c0a064dbce92af3f22b5e25004591bd045208ffebf1a54355ed0712aea727f932e35d97023a78656b8db0b82484b79a61ff29dd0fe1170231abbe632a75af5f43a85e41c401df58a7a2497e3b5231f5a37eee344adfcdd5181569d0a4a195af10d6dd8dcc234469e00b19feeb94b2f72d824e0acb99e34aaf3d39af4105c4bd413e03a647da81523dfe9333f936010da3278a64a505cd104c8d4f7c41b904804c87e2de405f8f688acfd39991d58caf457dc03e97b2edb2492b32469a2a8228baeb7006114e6379fd0476cbceb1bec9b01babafbfd7d4bee5b76e8e1f42b39f9f84f555ae3a4cbc0f982dee80af161adf46506beeed0bbe67e9a067879a79767698917d6b39b060000000000dd001385182f776ca3d0956b05cbeda044bed3a375d7823cad72289bbb91830f8256b48728918efbc080ed408c246ac02e116224f50fcdc014c087eb5aa3723dfdc7ab04e3b5ffed4d8af01c31f005aacf5f07811612c22cc853f76ae416c81c9067390f52e25ad03f29049bab7e419a3651"], 0x16c}], 0x4}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@empty, @link_local, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0xa, 0x6, "ef7c30", 0x20, 0x6, 0xff, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x7, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 6.548865401s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1804010, &(0x7f0000000100)={[{@rodir}, {@rodir}, {@uni_xlate}, {@utf8no}, {@numtail}, {@uni_xlateno}, {@utf8}, {@fat=@showexec}, {@fat=@nfs_nostale_ro}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@shortname_lower}, {@utf8no}, {@rodir}, {@shortname_lower}, {@utf8no}]}, 0x3, 0x355, &(0x7f00000001c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES32, @ANYRES8, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1, 0x3, 0x7, 0x30}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000010000000000600012800900010069706970000000005000028006001000070000000400130005000a000100000006001100", @ANYRES32, @ANYBLOB="0600"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000301010100000000000019000000000004000180db117bfa84e4560c00198008"], 0x24}}, 0x0) open(0x0, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pwritev2(r6, &(0x7f0000000d80)=[{&(0x7f0000000f40)='\'', 0x1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) 6.23471279s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRESHEX=r1, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES16=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020", @ANYRES32], 0x5c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002d80)={0x2020}, 0x2025) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000100), 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x0, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 5.819010505s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x60002010}) ppoll(&(0x7f0000000080)=[{}, {}, {}, {}], 0x54, 0x0, 0x0, 0x0) 5.811345106s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r4}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 5.798489428s ago: executing program 0: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="03011400012918000e3580009f0001140000002f0600ac141414e0000003808a89723d0b72e410820c520f061fecfdfe4b88942a31f48597e36e039b1c599db6e466749c2da42bc8c3ee5c4c8303a0f7060000000000000000e3c06304000000ffffca"], 0xdd12}], 0x1}, 0x0) 4.749710741s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r5 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) lsetxattr$trusted_overlay_upper(&(0x7f0000000300)='./control\x00', &(0x7f00000003c0), &(0x7f0000000a40)={0x0, 0xfb, 0x1015, 0x4, 0x5, "646d3ea47f8ff57f7b1ef03e94aae33b", "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"}, 0x1015, 0x3) write$binfmt_aout(r5, 0x0, 0x0) 4.747899041s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='nilfs2\x00', 0x22, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$eJzs3d9rW9cdAPDvvbay/HBmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9p64tG2PZMpacxCYUh/4BhVLaQp/61JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrtLElWKHyBbInw+c3HPulfT9nhgd3XPvQQpgzzoREZcjYiAizkTEcLY/zcqVemOj+bgH929P10sStdq1r5JIsn2t10qy7aHmU2J/RPzvSsTzyS/jVtbWF6ZKpeJK1i5UF5cLlbX1s/OLU3PFueLSxMT4hcmLk+cnx7rSz5GIuPSvz1596a1/X3rvrzc/vv7F6RfqaQ1lxx/tRzc1u55r/F+0DEbEyk4E64GBbJvrcR4AAGxP/Rz/NxHxp8b5/3AMNM5OAQAAgH5S+8dQfJ9E1AAAAIC+lTbWwCZpPlsLMBRpms831/D+Lg6mpXKl+pfZ8urSTHOt7Ejk0tn5UnEsWys8Ermk3h7P1ti22uc2tSci4khEvDJ8oNHOT5dLM72++AEAAAB7xKFN8/9vh5vzfwAAAKDPjPQ6AQAAAGDHmf8DAABA/zP/BwAAgL72n6tX66XW+v3rmRtrqwvlG2dnipWF/OLqdH66vLKcnyuX5xrf2be41euVyuXlv8XS6q1CtVipFipr69cXy6tL1evzj/0ENgAAALCLjvzx7kdJRGz8/UCj1O3rdVLArsg9zYM/3bk8gN030OsEgJ4Z7HUCQM881fk/0JeSLY53XLzzfvdzAQAAdsbo7zvf/3dtAPpb2usEAIBd5/4/7F05KwBhz/v1Fsef/f5/rfZUCQEAAF031ChJms/uBQ5FmubzEYcbPwuQS2bnS8WxbH7w4XDuV/X2eOOZyZZrhgEAAAAAAAAAAAAAAAAAAAAAAACAplotiRoAAADQ1yLSz5PGt/lHjA6fGtp8fWBf8t1wYxsRN9+49tqtqWp1Zby+/+uH+6uvZ/vP9eIKBgAAALBZa57emscDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDc9uH97ulV2M+6X/4yIkXbxB2N/Y7s/chFx8JskBh95XhIRA12Iv3EnIo62i5/U04qRLIt28Q/0MH4aEYe6EB/2srv18edyu/dfGica2/bvv8GsPKvO41/6cPwb6DD+HN5mjGP33il0jH8n4thg+/GnFT/pEP/kNuM/9//19U7Ham9GjLb9/Ekei1WoLi4XKmvrZ+cXp+aKc8WliYnxC5MXJ89PjhVm50vF7N+2MV7+w7s/Pqn/BzvEH9mi/6e22f8f7t26/9tmNdcu/umT7T9/j3aIn2affX/O6vXjo636RrP+qONvf3D8Sf2f6dD/rf7+p7fZ/zP/ffGTbT4UANgFlbX1halSqbiioqKi8rDS65EJAADotp9P+nudCQAAAAAAAAAAAAAAAAAAAOxdu/F1YptjbvSmqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT/RTAAAA//+octTx") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="03011400012918000e3580009f0001140000002f0600ac141414e0000003808a89723d0b72e410820c520f061fecfdfe4b88942a31f48597e36e039b1c599db6e466749c2da42bc8c3ee5c4c8303a0f7060000000000000000e3c06304000000ffffca"], 0xdd12}], 0x1}, 0x0) 3.411053669s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) 3.40832088s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x3, 0x3ff, 0x0, 0x6, 0x41, 0xffffffffffffffff, 0x26419ab, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={&(0x7f0000000100)="3a308e49628a33af6aedbc41f55fee3b715c57d54840d1db8bf908e25f51dcbedace053095682e2e37984599cfd2cd03232ee84877b80a0e35d5115dd126f0cd4f7fa9a29249ed4a96ddd269243d4388a44b3be2ec178f0a7e6e92b9bfe5b125dd0670d2dd1d67b5b45aff9156291f50a05d6276dd42618f7ea29fcef1e10904e82a53", &(0x7f0000000400)=""/192, &(0x7f00000004c0)="167125c8c7bae63bd7ecffac744640d5383aac0cd87e658edc2cbe0881da56918cdba86597a36e39f36eb635c83479269a77fc46b32be0c39119313c034d6f315e4b926a7ad67c43adff2b7855a67f0b1b36787ad5718d724076cfbf4bd1765a02c2c344cff9bfdfd7b80c4db385313e7ae12db5578597dcc8108b5e", 0x0, 0x51fa, r0, 0x4}, 0x38) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x7e, 0x1e0, &(0x7f0000000200)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)=ANY=[@ANYBLOB="a0000000100001040000000000000000000000008189cd1173637583f6ffaa18b08bb71ad3b22e30a532e3f0033a0e45206c0a196828da1b85ba62e6d1bfed45746daf82b441f0c3044e084af832d29d17750aed76a26b9c4386b229cdcb51b90721e8004ee85929e6bd67e3480ff38b1f9cbc8d2411b1ce5788007715669358c6b62a938a079c2a48f6bf080506c41c404e867a8a735f91dacc3d5a6b", @ANYRES32=0x0, @ANYBLOB="0000000000000000780012800e0001006970366772657461700000006400028006000e000000000014000600fc020000000000000000000000000000080014000800000006000f000900000014000700ff02000000000000000000000000000104001200080005003f00000014000600fc01000000000000000000000000000108000300", @ANYRES32=r2, @ANYBLOB], 0xa0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1}, 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) 3.364652037s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,rodir,errors=remount-ro,shortname=lower,shortname=win95,shortname=win95,uni_xlate=1,rodir,nonumtail=0,shortname=win95,nfs,nocase,uni_xlate=1,shortname=win95,utf8=1,rodir,nonumtail=0,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB=',rodir\x00'], 0x1, 0x2a3, &(0x7f0000000180)="$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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = dup2(r3, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x0, "8c31"}, @global=@item_012={0x1, 0x1, 0x0, "9a"}]}}, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x44d40, 0x0) fcntl$setlease(r7, 0x400, 0x0) unlink(&(0x7f0000000700)='./file1\x00') close(r7) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x44, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x2}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e, 0x80000) recvmsg$unix(r10, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000043) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)="c72750b655249fe7eeab380e8cd90ff8848d16a57dd15b189aa4b2958dcc1f2a3ebfc8ff760c716e58be5a2de8863c68151f2429ced66a232e9114eea3b2a6e03a8062f4955ad890805fec851e82cde36bb982189d3a001cbb88acc4730e3f7dc2ef8a5598ca45b61c57ff4a5a08cbf83e9f8f535f10b41a549d8c4969bbc59fa6b3cd5fafca4576c1e79614d23d81d38f7bbdc7edcb62aac5", 0x99}, {&(0x7f0000000380)="6fbe72503fe92cf9b7893d859f58e3bf730df3709fda2d20ff27a5c8d72bf20c6e872b6c91465ada70598e3e797d32286e9558371ba337900b76c896ab0b0b46e22caa7325f94505b1542f310577040c78bc40c496a55d94f40bfb52993863ac612bb63b80fb702b7de4d75a1a122c3da1d464c2cfb50d7075eb99a9676aaf0bbb4d3030ef2bfd1bb67a5f98a01e5cdf6883e632e2066ed8bdcffd46dd4593a296018d448654b92fdfbf0635d412e3e44b798adc3782f374dcc78fee46b5eabd5e06b5ce158bd7", 0xc7}, {&(0x7f0000000180)="92dd046a205b9ed10a6393a39678a9155a51a078c40f140fad00eb686c2dd02a5bfb77f41753ee5597", 0x29}], 0x3, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe20}}], 0x18}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000000000)) 3.209632271s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004f00)=@delchain={0x10b8, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_basic={{0xa}, {0x1060, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa}}, @TCA_BASIC_POLICE={0x420, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x794a, 0x1, 0x42, 0x800, 0x1000, 0x2, 0x3, 0x100, 0x85, 0xe7, 0xf85, 0x7, 0x0, 0x1, 0x0, 0xfffffffe, 0x1f, 0x2db2, 0x0, 0x7f, 0x4, 0xff, 0x2, 0x3, 0x4, 0x0, 0x3, 0x7, 0x8, 0x5, 0x5, 0x800, 0x7, 0x400, 0x1, 0xff, 0xfd28, 0x20, 0x6, 0xfffffffa, 0xfffffc00, 0x3ff, 0x2, 0x1, 0xcbbc, 0xfff, 0x5, 0x9, 0xc9, 0xffff7a76, 0x5, 0x3ff, 0x53c, 0x4, 0x20, 0x8, 0x3ff, 0xa48, 0xaab, 0x8, 0x879, 0x1, 0x7f, 0xabe8, 0x0, 0x3, 0x2, 0x6d6701ea, 0x6, 0x5, 0x4, 0x1, 0x0, 0x5, 0xfffffffd, 0x6, 0x400, 0x2, 0x5, 0x5, 0x2, 0x6, 0x9, 0x4d0c, 0x10000, 0x0, 0x6, 0xd2f0124, 0xf3, 0x2, 0x8000, 0xd2, 0x2, 0x3, 0x1, 0x7ff, 0x401, 0x5, 0x200, 0x482, 0x4, 0xa, 0x81, 0x5, 0x10001, 0x10000, 0xfe, 0xfffffff8, 0x50, 0x0, 0x413, 0x0, 0xcf2, 0x9, 0x1, 0x80000000, 0x1f, 0x68d, 0x8, 0xffff, 0x3, 0x4, 0x401, 0xffffffff, 0x7ff, 0x3f, 0x4, 0x10000, 0x7, 0x3, 0xfffff801, 0x3, 0x400, 0x3, 0x0, 0x1, 0x1000, 0x2000000, 0x0, 0x0, 0x6, 0xfffffff7, 0x7fffffff, 0xfffffff7, 0x9, 0x6, 0x4, 0x9, 0x4, 0x0, 0xf0, 0x101, 0x9da, 0x1000, 0x881, 0x0, 0xfffff3be, 0x5, 0x8, 0x200, 0x2, 0x1, 0x81, 0x0, 0x7, 0x6, 0x40, 0xd8e0, 0x81, 0xf2, 0x8, 0x4, 0x4, 0x1, 0x3a66, 0xffffffff, 0x3, 0x9, 0x81, 0x550, 0x6, 0x101, 0x4, 0x6, 0x5, 0x7, 0x4, 0xffff, 0x3f, 0x7, 0x0, 0x9, 0x1, 0x1, 0x3, 0x9, 0xff, 0x1, 0x1000, 0x3216, 0x660, 0x80000001, 0x1ff, 0x82b4, 0x7, 0x0, 0x3, 0xfff, 0x7ff, 0x9, 0xd5, 0x0, 0x4, 0x20, 0x2, 0x556f49e4, 0x8, 0xd122, 0x5, 0x800, 0x8, 0xfffff9f7, 0x3, 0x5, 0x6, 0x2, 0x602, 0x400, 0x6, 0x1000, 0x36fd, 0x9aeb, 0x9, 0x6, 0x4b, 0xf0, 0x28a94fc2, 0x7, 0x80000001, 0x1, 0x335032de, 0xdb, 0x7fff, 0x10000, 0x4, 0xffff7ce6, 0x50000000, 0x9, 0xc51, 0x7, 0x400, 0x5, 0x8, 0xa81, 0x8001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]}, @TCA_BASIC_POLICE={0xc2c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x9, 0xffff286b, 0x5, 0x1f, 0x33f4385f, 0x3, 0x4, 0x7fff, 0x933, 0x1, 0x9, 0x2, 0x9, 0x401, 0x7f, 0x0, 0x0, 0x101, 0x6, 0xfc, 0xee, 0x1, 0x1, 0x80000001, 0x3, 0xb9a7ba15, 0x4, 0x3, 0x8ba0, 0x7, 0x3, 0x3f, 0x10000, 0x1ff, 0x1000, 0x56, 0xffffffe1, 0x2, 0xe9, 0x4, 0x3, 0x1, 0x5, 0xadef, 0x1, 0x101, 0xf7d1, 0x8, 0x6, 0x8, 0xdc, 0x9, 0x22000000, 0x77, 0x6, 0xd19, 0x20000000, 0x3, 0x3, 0x9, 0x7f, 0x4, 0x5, 0x3, 0x80, 0x1, 0x4, 0x7fffffff, 0xfffffffd, 0x3, 0x8001, 0x17a, 0x4, 0x80, 0x1826, 0xffffffff, 0x10000, 0x20, 0x7f, 0x1400000, 0x1, 0x7, 0x6, 0x4, 0x4, 0x1, 0xb88c, 0x0, 0x7, 0x2, 0x6, 0xfffffff8, 0x0, 0x3, 0x1000, 0x9, 0x5, 0x0, 0x1, 0xd24, 0x401, 0x5, 0x7, 0x6, 0x3, 0x81, 0xf8, 0x4, 0x3, 0x0, 0x7, 0x7, 0x4, 0xe2, 0x20, 0x0, 0xffffff00, 0x89, 0x6aa, 0xef7e, 0x101, 0x7, 0x6, 0xffff, 0x0, 0x2, 0x3ff, 0xc, 0xd776, 0xd1c4, 0x36, 0x8000, 0x3, 0x5, 0x4, 0x7fffffff, 0x20, 0x6, 0x8, 0x8, 0x7, 0x290, 0x4, 0x9, 0x80000001, 0xa4, 0x3, 0x9, 0x9, 0x5, 0xfffffffc, 0x4, 0x10001, 0x1ff, 0x9, 0x1000, 0x9, 0x8, 0x1, 0x80000000, 0x9, 0x7ff, 0x10000, 0x9, 0x5, 0x2, 0x6, 0xffff604d, 0x100, 0xcb92, 0x3f, 0x17a3765, 0x0, 0x70, 0x0, 0x3ff, 0x4, 0x0, 0x7, 0x2e1, 0x3, 0x10000, 0x9f, 0x5, 0x6, 0x80, 0x0, 0x3, 0xaa, 0x0, 0x3, 0x5, 0x6, 0x5, 0x6, 0x2d, 0xff, 0x1, 0x1000, 0x1f, 0x9, 0x82, 0xfffffff7, 0x1, 0x1, 0x5d, 0x1f, 0x4, 0x6, 0x7fff, 0xffffffe3, 0x6, 0x6, 0x1, 0x5, 0xa8, 0x6, 0xffff7fff, 0x0, 0x0, 0x4, 0xffffffff, 0x7fff, 0x6, 0x1, 0x72, 0x200, 0x10000, 0x6, 0x5, 0x8, 0x4, 0x80000001, 0x8, 0x9, 0x0, 0x8001, 0x1, 0x9, 0xfffffffc, 0x7, 0x6, 0x0, 0x79c, 0x4, 0x9, 0xb4, 0x400, 0xc6, 0x9, 0x40, 0x9, 0x3f, 0x9, 0x80]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0x9, 0x1, 0x10000, 0xfff, 0x3, 0xfff, 0x6, 0x1, 0x1, 0x40, 0x9, 0x4, 0xffffffff, 0x7000000, 0x5, 0x0, 0x2, 0x4, 0x620, 0x1f, 0xffff, 0x1, 0x1391fd47, 0x401, 0x10001, 0x4, 0x2, 0x1, 0x7, 0x8, 0x0, 0x7, 0x4, 0xc000, 0x7fffffff, 0x81, 0x7, 0x4, 0x4, 0x742, 0x4, 0x2, 0x80000001, 0x4, 0x3, 0x8c3a, 0x9a0, 0x80c6, 0x1, 0x9, 0x7309c730, 0x0, 0x2, 0x7, 0x1f, 0xffffff6c, 0xff, 0x7, 0x80000000, 0x7fffffff, 0x6, 0x100, 0x5cba8e5c, 0x9, 0x10000, 0xbc, 0x1, 0x80200, 0xa7, 0x100, 0x4, 0x7, 0x7, 0x5, 0xffff, 0x101, 0x5, 0xffff, 0x4, 0x2, 0xff, 0x7, 0x8, 0x6, 0x7, 0xffff8000, 0x100, 0x0, 0xfffff68e, 0x3, 0xfff, 0x80000000, 0x4, 0x101, 0x5, 0x6, 0x3, 0x4, 0x7fffffff, 0x9, 0x8001, 0x10000, 0x7, 0xf7, 0x7582, 0x3ff, 0x9, 0x3ff, 0x1575, 0x5, 0x7, 0x75, 0x721, 0x7, 0x7f, 0x7, 0x5, 0x81, 0x3, 0x4, 0xfffffffe, 0xb299, 0x44, 0x7fff, 0x9, 0x8000, 0x5, 0x20, 0x4, 0x1, 0x1f, 0x1, 0x9, 0xe73, 0x100, 0x400, 0x1, 0x44ea0c19, 0xffffffbd, 0x80, 0x800, 0x1, 0x8b8d, 0x6, 0x7fffffff, 0x401, 0x1000, 0x80000000, 0x2df, 0x8, 0x101, 0xffffffff, 0x8, 0xada4, 0x401, 0x31, 0x6, 0x800000, 0x30b, 0x0, 0x0, 0x2da4000, 0x80000000, 0x0, 0x5, 0x5, 0x8, 0x8, 0x100, 0x6, 0x9, 0xffffffff, 0xc1b, 0x8001, 0x0, 0x7, 0x9, 0x7, 0x9, 0x1, 0x2, 0x9, 0x2, 0x4, 0x3, 0x2, 0x9, 0xffffffff, 0x5, 0x1f, 0x7ff, 0x5e6bce14, 0x3ff, 0x5, 0x8001, 0x8, 0x9, 0x10001, 0x60, 0x4, 0x0, 0x4, 0x8e9, 0x1, 0x3, 0x7ff, 0xb8d5, 0xbd, 0x1, 0x0, 0x2, 0x3533, 0x5, 0x40, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0xf10, 0x100, 0x80000001, 0xffffff58, 0x0, 0x1, 0x1f, 0x71, 0x1, 0x10000, 0x3, 0x0, 0x0, 0x8, 0xc820, 0x2, 0x5, 0xae, 0x8000, 0x94, 0x2, 0x158, 0x20, 0x7fff, 0xa9, 0x40, 0x9, 0x9, 0x4, 0x8, 0x992, 0x4, 0x40, 0x0, 0x3f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xfffffbff, 0x28a5, 0xf4, 0x3f, 0x80000001, 0xff, 0x4, 0x10001, 0x400, 0xff, 0x7f, 0x2, 0x101, 0x40, 0x6, 0x7fff, 0x9, 0x6, 0x7, 0x7, 0x3, 0x0, 0xffff, 0xf60, 0x0, 0x5, 0x3, 0x1, 0x5, 0x2, 0x7ff, 0x7, 0x7, 0xfffffff8, 0x5, 0xffffffff, 0x10001, 0x1, 0x3f, 0xc1, 0x8, 0x20, 0x1, 0xffff, 0x1f, 0x8b9, 0x0, 0x7, 0x8001, 0x5, 0x1, 0xaaf, 0x8, 0x3f, 0x81, 0x4, 0x6, 0xffffffff, 0xffff, 0x7fff, 0x6, 0x3, 0x8, 0x6f20e995, 0x9, 0x7, 0x8, 0x8, 0x8, 0x10000, 0x200, 0x81, 0xb9, 0x0, 0x3, 0x2, 0x3f, 0x3, 0xfff, 0x2, 0x2b, 0x2, 0x2, 0x7f, 0x0, 0x1, 0xfbac, 0x2, 0x0, 0x50c, 0x8, 0x2, 0x0, 0x4, 0x6, 0x7, 0x5, 0x10000000, 0x6, 0xffff0001, 0x6, 0xfffffffd, 0x0, 0x400, 0x7, 0x5, 0x2, 0xfffff000, 0x4, 0x0, 0xa0d7, 0xdc, 0x2, 0x10001, 0x9, 0x3, 0x4017, 0x80000001, 0xffff, 0x80, 0x6, 0x6, 0x200, 0x1, 0x1, 0x3, 0x5c0d, 0x9, 0x1, 0xc3, 0x3, 0x4, 0xfa7, 0x4e, 0x4, 0x0, 0x5, 0xffff7fff, 0xb05, 0x0, 0x0, 0x300, 0x8, 0x8, 0x8001, 0x4, 0xffffffff, 0x7, 0x7, 0x7, 0x5, 0x7, 0x1f, 0x14ce, 0x9, 0xa09, 0x1, 0x3f, 0x0, 0x8, 0x9, 0x80000000, 0x0, 0x0, 0x7, 0x0, 0x8aca, 0x1, 0x5, 0x0, 0x401, 0x0, 0x9, 0xfffffffb, 0x1f76, 0xff, 0x0, 0x1, 0xfffffff8, 0x2, 0x7, 0x80000000, 0x7, 0x8, 0x6, 0x9, 0xfffffffe, 0x0, 0x7fff, 0x9, 0x7fffffff, 0x0, 0x2, 0x100, 0x977, 0x0, 0x8, 0x4, 0x5, 0x0, 0x0, 0x7fffffff, 0x10000, 0x0, 0x7, 0x0, 0x6d70, 0x3f, 0x0, 0x9, 0x80, 0x79, 0x20, 0x4, 0x81, 0x26a0f236, 0xe35, 0xaa09, 0x6, 0x13dc, 0x1, 0x48a1, 0x8001, 0x1800, 0x9, 0x30b54315, 0x9, 0x9, 0x101, 0x7, 0x1, 0x80000001, 0x400, 0xffff893e, 0xffffff91, 0xf39, 0x2, 0x9, 0x0, 0xf6, 0x1ff, 0xf79f, 0x1, 0x100, 0x8, 0x0, 0x800, 0x5, 0x6, 0x6, 0xffff, 0xfff, 0x0, 0xffffffff, 0x37bb]}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x10b8}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f00000001c0), &(0x7f0000000ac0)}, 0x7e) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100dc3ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x1059a, &(0x7f0000010640)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000100000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.197491203s ago: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000014c0)={0xb28, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8001, 0x52}}}}, [@NL80211_ATTR_NAN_FUNC={0x32c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xec, 0xd, 0x0, 0x1, [{0x45, 0x0, "7ed2102d62efd61b3375db970c88666d55d92fc9bb91c720298545f6b14202d72fbba95f86668f179edcb30be290c177d09eed4b55d2a9d1e928f446bc810d5b27"}, {0x3f, 0x0, "10a65bea2539eb28b4e29d124a1461aff7003636491c5dd67d2f17806d1c9aca75b60d8b39679fb10f3a7bc82040b4552e12b38873d5500750cbd9"}, {0x4}, {0x5, 0x0, "bd"}, {0x51, 0x0, "c6eb8f84ef988ec36f49e1433318551fbe777a386dede6802cae1ab824af96672100f64ad63f4541a447b2f03c2595daba0626e6416c6675e59e4e873291b7c91628c3a75c22882f2279f23cd9"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x100, 0xb, "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"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SRF={0x12c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xf8}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x58, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "dc2abc08b1d6"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_SRF={0x30, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf6, 0xb, "64a4a79caaec741ab404dfd9d8aa027582497d1cb7a19251755940aa911a55dcf96c6091db2e98f658e08dd45c3e2c36124d8c39919319f7ce4619d0778b2acc44b98363545244cd5874733a624f4f993aa36dc70be2e5878c517bd7ffa233fe39d9820f9492514efe97ca2f7277d7128ddcfe8212e7912c33a424d2f13afc9f0e78c1b1bf4fbef235fc1c962600c21fcba61f586a95f4fc7bef5e622108158d65e5f80fe618b7c76e7c35d9d17db10f4f37bc1379a8e78eb45ad65da31de87bc427668d043738330e16d3fb0c378f84e187a50df387283f396b9b04e3d51414b6d6269943c3d4a23627762a6086d60677cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x218, 0xe, 0x0, 0x1, [{0x89, 0x0, "4cc215bd5c7ff9fab531d460d9b07a7a1176925ccb255f5f41f19f1c439a574696c6df7a44c0261c6599336852eb789d9f68265b8401107b9d758b70e91aeaa057bda4474f8cbb65ecfb8e722deb4084defaed123f64b379a08898227cd7724ef3398e197bb1324a345bc29571c825c85d800f0fa1a9a7daae8dbb713177c2655478d183ac"}, {0xa7, 0x0, "4ad049bf9b641f852caa988e1b26944fe91367d65cf3e6f958ac84906df5023446946a0ad3792ea6724b89b329abf2b94bf7e15fd6debfd013b34505d75cdbdac059475ea1587cce38ebe80dc4ba088b02d1be9e50db8f19d68bab16b3c90cfdc082485c79626c5796aafb99311853d58bdcd649aeb2d2124e1332b30d1ca6d16a26bd91393c419d6bcc87fadb1787041a35741e7085f362549d12d92b2cf486b145f7"}, {0xd3, 0x0, "31411bea97d5171cdf0e8f6a13e712c32663f3b9ed5256fa249bad4622ee35e06c41a7b33f779093dddfa39dc766e97cecb71d1728be33d6c66fd5c5e43bfbe2327634709fb85234f3882d57e65d137d899485949202d502eba57e84d966b2acbeda4a782b8683a8cffacdb2c2bec7881b2a98b38f447a377f7d9157b68f2c1c249d7fff4caefdb3fc982f64f0910ec2b025b588f1c4915333ea09a5f933564591fbbc1990301f0b56effbcad75a199a20dd099e35d3643448792cf0ad0fa0e90a0e2c596ee0b97469c8776954e900"}, {0x4}, {0x5, 0x0, "a0"}]}]}, @NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x33c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_SRF={0x264, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x49}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "e1427f2ed74afeb85d41e911cb79b906c4ae9e484823bb8625589bb047332120553ef6c1a9246834a76fa3301cdd33b67301b21b297674fd83f43136e3cab489ee69e53bb2405793cb2dd262beb12f3eae52970ef5b22603f036bf60f35229daeaf0cf7a9b230e9e09ffb34a6a51436f8f937e8a787f3143125b7cbc75965d17fb3bf2399c74927315e4423f0b345c7810909422be051311cba73704f75e0b1664ba02f6e5b551a4555fa5ba16b05c19f13c08eff66777cb3b5359a476d59729451e1a4eaf923aef1f95d510402c5d14dfc15da1169720ee85a6b6d2a78106ec66b74d18af068e250d519211972e722fa12b3701d4c6abd925f3ed8632f8d1"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb9, 0xb, "f5f1d357fdc9ae0df6411c62c392ead3153d77b3942d3f4b5f96563c49bf35716d4aa826232b1c6db17738cc76d411cf6f83bad56896fa7399ab1e9a297133ffb666cba91fa0c98bb7674efae1ea0597498a0a79cd93a8456f8a5ae413d071c305170facef01d30c757bea9091545ca3314fc2f8d3a0df60fb9cd661e81ef107a40dc691ca3b03a9251a4503b1166e92120bf1be53d3b3a84f1868763888c97df6d50842c772069cf6747bf273799943824b10e660"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xe4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x8, 0xe, 0x0, 0x1, [{0x4}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "8bb259ad3e55"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xa9, 0xb, "5e9e8ce29f4176e7b7f3fd8644e10f42ef0aa86d7410373141cf6cdb504899db1bda3ebc9c04532499686fe02bd63b3b336aec4f56332ab8067bddefa817a7c4add003d8321fe924aa2e40918515674afafe48d39236a1f1cca02e8ce1bbc134505013cae682fc564c86cf5b60b3a862394dbf1af906158d926ca32b4f68e8033cab5d6e0707bd9b6681dcd47a64f44684614da65f11a922fce4ecc5e8f2b5e623db7f947a"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xf9}]}]}, 0xb28}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x810, &(0x7f0000001180), 0x1, 0x523, &(0x7f0000000240)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) chown(&(0x7f0000000000)='./file1\x00', 0xee01, 0xee00) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.994408644s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRESHEX=r1, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES16=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020", @ANYRES32], 0x5c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002d80)={0x2020}, 0x2025) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000100), 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x0, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.517398679s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1804010, &(0x7f0000000100)={[{@rodir}, {@rodir}, {@uni_xlate}, {@utf8no}, {@numtail}, {@uni_xlateno}, {@utf8}, {@fat=@showexec}, {@fat=@nfs_nostale_ro}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@shortname_lower}, {@utf8no}, {@rodir}, {@shortname_lower}, {@utf8no}]}, 0x3, 0x355, &(0x7f00000001c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES32, @ANYRES8, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1, 0x3, 0x7, 0x30}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000010000000000600012800900010069706970000000005000028006001000070000000400130005000a000100000006001100", @ANYRES32, @ANYBLOB="0600"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000301010100000000000019000000000004000180db117bfa84e4560c00198008"], 0x24}}, 0x0) open(0x0, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pwritev2(r6, &(0x7f0000000d80)=[{&(0x7f0000000f40)='\'', 0x1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) 2.269850167s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000d40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc087, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x70, 0xdc, [{{0x9, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x9879, 0x8, 0x1, {0x22, 0x45b}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x98, 0x7f}}}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x250, 0x0, 0x80, 0x0, 0x48}, 0x0, 0x0, 0x2, [{0x4e, &(0x7f0000000e40)=@string={0x4e, 0x3, "4ddf1af56bbb93dc148fbda78030794340c403594fe5fc80ae1ff3dbeb9ad469a95daf9f7e1d3372cbd7e7ee7c06ecd3ac968196ccda74a6fed9dfb6268d0f0bff4e0156c18ccd4262d6fe7f"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x1c48}}]}) syz_usb_connect$cdc_ncm(0x6, 0x9a, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x1, 0x3fed492114e4bc64, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "be9cc28eff9a"}, {0x5, 0x24, 0x0, 0x41a}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x6, 0x80}, {0x6, 0x24, 0x1a, 0xffff}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x8, 0x1, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x0, 0x4, 0x29, 0x668}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x73, 0x9}, @dmm={0x7, 0x24, 0x14, 0xfff8}, @acm={0x4, 0x24, 0x2, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x5, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x9, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x54, 0x6}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2d, 0x4, 0x1, 0x40, 0x40}, 0xda, &(0x7f0000000580)={0x5, 0xf, 0xda, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x6, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "5b394f0f003feac07a92f039c56d3df9"}, @generic={0xba, 0x10, 0x0, "fe30049755fa081d6be2326b9e8b45038323a567fe60603a99368a9de7740243e6a071cc9a9c6e6c5fbb79a955ca32b9c237c8aca4637e4c53f44ef2701ea2d653619eaf8732ef876ad670664e3f1d68fc58aa42b51acae519efe60c5886abfb9994638b49304eb825955b664d18801ddd2f26b7891b2cec293344b7f93c9c5ed7821c8f1361b0da1aa9e639bf0a09d4cbdb62ac08e60fc17a8b0deabe259c8a6301c0368801df6f941e05dc6b2f1d06bcd272e1165e8b"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4c19}}, {0x5f, &(0x7f00000002c0)=@string={0x5f, 0x3, "390f85fa34ab1718735ec820d1e2569e6d1f58ba17fbe34d5e23f3d00314b2c26089f6142c6c1ed37bd66d971fa79a585ca9fa1ff8ef44398d2e536b49ab3ed0ad6b584cb41ffcfc273624905d91f2f7975729f88caac6277611276e73"}}, {0xde, &(0x7f0000000680)=@string={0xde, 0x3, "46542f04cabaabc41988a4f92735a91cfb01e05ab9472748a6571205d94f107e7b7b9ac4d50d14300a8a33ea27324ab07d42ad1486faca6326fe9d0e4e1a08bb47e48bdffb1a42f0c16a000f05882577e71631e34e1971f67b20c0dfa2f7cd0674f9e6a97699aef8e935f0f139d8eea258be615afee3785b0ccf3b7135effdc38f056943547adb0c9da79594e1d39dcdad095cb768d637132da8fb7d3fd3bb97dd2ec4cc302190a550eb5dece5bf2a92a348e4aa69ec032f92bda7fb41dd0987003e6fbe8c9ef327ccdf0ddfb8ad1c8a192b0c5b699e3ff661cfd976"}}, {0x27, &(0x7f0000000780)=@string={0x27, 0x3, "929bdfbf6b268c0cc6f367ec9efc7554d11bff815f60de222a06ff77851266583417e1f938"}}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x5d801) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x107042, 0x0) write(r3, &(0x7f0000000400)="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", 0x353c00) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001040), 0x6c2000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000012c0)={'syztnl1\x00', &(0x7f0000001280)={'sit0\x00', 0x0, 0x700, 0x40, 0x0, 0x7, {{0x7, 0x4, 0x1, 0x3e, 0x1c, 0x64, 0x0, 0x80, 0x2b, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0x7, 0x39, [@multicast2]}]}}}}}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 2.130116359s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000580), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(r2, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) 2.046424972s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='nilfs2\x00', 0x22, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="03011400012918000e3580009f0001140000002f0600ac141414e0000003808a89723d0b72e410820c520f061fecfdfe4b88942a31f48597e36e039b1c599db6e466749c2da42bc8c3ee5c4c8303a0f7060000000000000000e3c06304000000ffffca"], 0xdd12}], 0x1}, 0x0) 1.589823153s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r5 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) lsetxattr$trusted_overlay_upper(&(0x7f0000000300)='./control\x00', &(0x7f00000003c0), &(0x7f0000000a40)={0x0, 0xfb, 0x1015, 0x4, 0x5, "646d3ea47f8ff57f7b1ef03e94aae33b", "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"}, 0x1015, 0x3) write$binfmt_aout(r5, 0x0, 0x0) 1.580091994s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x15) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) 1.201156314s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='nilfs2\x00', 0x22, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$eJzs3d9rW9cdAPDvvbay/HBmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9p64tG2PZMpacxCYUh/4BhVLaQp/61JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrtLElWKHyBbInw+c3HPulfT9nhgd3XPvQQpgzzoREZcjYiAizkTEcLY/zcqVemOj+bgH929P10sStdq1r5JIsn2t10qy7aHmU2J/RPzvSsTzyS/jVtbWF6ZKpeJK1i5UF5cLlbX1s/OLU3PFueLSxMT4hcmLk+cnx7rSz5GIuPSvz1596a1/X3rvrzc/vv7F6RfqaQ1lxx/tRzc1u55r/F+0DEbEyk4E64GBbJvrcR4AAGxP/Rz/NxHxp8b5/3AMNM5OAQAAgH5S+8dQfJ9E1AAAAIC+lTbWwCZpPlsLMBRpms831/D+Lg6mpXKl+pfZ8urSTHOt7Ejk0tn5UnEsWys8Ermk3h7P1ti22uc2tSci4khEvDJ8oNHOT5dLM72++AEAAAB7xKFN8/9vh5vzfwAAAKDPjPQ6AQAAAGDHmf8DAABA/zP/BwAAgL72n6tX66XW+v3rmRtrqwvlG2dnipWF/OLqdH66vLKcnyuX5xrf2be41euVyuXlv8XS6q1CtVipFipr69cXy6tL1evzj/0ENgAAALCLjvzx7kdJRGz8/UCj1O3rdVLArsg9zYM/3bk8gN030OsEgJ4Z7HUCQM881fk/0JeSLY53XLzzfvdzAQAAdsbo7zvf/3dtAPpb2usEAIBd5/4/7F05KwBhz/v1Fsef/f5/rfZUCQEAAF031ChJms/uBQ5FmubzEYcbPwuQS2bnS8WxbH7w4XDuV/X2eOOZyZZrhgEAAAAAAAAAAAAAAAAAAAAAAACAplotiRoAAADQ1yLSz5PGt/lHjA6fGtp8fWBf8t1wYxsRN9+49tqtqWp1Zby+/+uH+6uvZ/vP9eIKBgAAALBZa57emscDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDc9uH97ulV2M+6X/4yIkXbxB2N/Y7s/chFx8JskBh95XhIRA12Iv3EnIo62i5/U04qRLIt28Q/0MH4aEYe6EB/2srv18edyu/dfGica2/bvv8GsPKvO41/6cPwb6DD+HN5mjGP33il0jH8n4thg+/GnFT/pEP/kNuM/9//19U7Ham9GjLb9/Ekei1WoLi4XKmvrZ+cXp+aKc8WliYnxC5MXJ89PjhVm50vF7N+2MV7+w7s/Pqn/BzvEH9mi/6e22f8f7t26/9tmNdcu/umT7T9/j3aIn2affX/O6vXjo636RrP+qONvf3D8Sf2f6dD/rf7+p7fZ/zP/ffGTbT4UANgFlbX1halSqbiioqKi8rDS65EJAADotp9P+nudCQAAAAAAAAAAAAAAAAAAAOxdu/F1YptjbvSmqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT/RTAAAA//+octTx") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="03011400012918000e3580009f0001140000002f0600ac141414e0000003808a89723d0b72e410820c520f061fecfdfe4b88942a31f48597e36e039b1c599db6e466749c2da42bc8c3ee5c4c8303a0f7060000000000000000e3c06304000000ffffca"], 0xdd12}], 0x1}, 0x0) 1.054505406s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) 977.090358ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) 927.673146ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r4}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 859.058357ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x3, 0x3ff, 0x0, 0x6, 0x41, 0xffffffffffffffff, 0x26419ab, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={&(0x7f0000000100)="3a308e49628a33af6aedbc41f55fee3b715c57d54840d1db8bf908e25f51dcbedace053095682e2e37984599cfd2cd03232ee84877b80a0e35d5115dd126f0cd4f7fa9a29249ed4a96ddd269243d4388a44b3be2ec178f0a7e6e92b9bfe5b125dd0670d2dd1d67b5b45aff9156291f50a05d6276dd42618f7ea29fcef1e10904e82a53", &(0x7f0000000400)=""/192, &(0x7f00000004c0)="167125c8c7bae63bd7ecffac744640d5383aac0cd87e658edc2cbe0881da56918cdba86597a36e39f36eb635c83479269a77fc46b32be0c39119313c034d6f315e4b926a7ad67c43adff2b7855a67f0b1b36787ad5718d724076cfbf4bd1765a02c2c344cff9bfdfd7b80c4db385313e7ae12db5578597dcc8108b5e", &(0x7f0000000540), 0x51fa, r0, 0x4}, 0x38) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x7e, 0x1e0, &(0x7f0000000200)="$eJxiGAWjYBSMWPDo4dcHvU4WIToMDAw8DCoM7FDxF8wMDIyMEDYTkvo7M0u1p9q6ztl0e+mRPL7aXejmgbT8/48mgAewMDAwHHBkZiiB8v//R9HNoAKlQxiY4OxQBiYGTSg7nIGRQQ/KTmBgYgiDslMZGBkioewsJHY+SL2eXlpmTqpecn5OCohhACIMQYQRiDBGd9/bRkaGFCT3IXupuLIqOzEnJ7UIicEClcMiRRaDUPi9dWRisEVyHyi+IjqaG0F8WNgYIIWfIQMTgyHUE8YMjAzBUHELBnZY2ECCBMn/UhBPcYCsYMbwP0W+5aBGGGFlCOqSp12DipFXWcXAgEMKFEE08zsKg4U63nH9gFXKD5TfiDGnj/Y+pZwh9nbXaUyppwPvMOIYbAyDwhmJOQwLYGXE/4WMDOpI5RMLUvmhX5JboF9cWaWbmZuYnpqemmdkZGxmwMhgYGqkDy6IICSe8o8TXD5xIZnPikMtGxMbQ0ViSUmRIYRkY4TyjSAkUokbvC3/DVgPEwNDCYMHAwODMsQMULHJhqc8ZmSDqGECqwWxNJjxKB8Fo2AUjIJRMApGwSgYBaNgFIyCUTAKRsEoGAWjYBSMAhKAPAMjeBSUADAKAKsGBAAA//8U7W1d") openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)=ANY=[@ANYBLOB="a0000000100001040000000000000000000000008189cd1173637583f6ffaa18b08bb71ad3b22e30a532e3f0033a0e45206c0a196828da1b85ba62e6d1bfed45746daf82b441f0c3044e084af832d29d17750aed76a26b9c4386b229cdcb51b90721e8004ee85929e6bd67e3480ff38b1f9cbc8d2411b1ce5788007715669358c6b62a938a079c2a48f6bf080506c41c404e867a8a735f91dacc3d5a6b", @ANYRES32=0x0, @ANYBLOB="0000000000000000780012800e0001006970366772657461700000006400028006000e000000000014000600fc020000000000000000000000000000080014000800000006000f000900000014000700ff02000000000000000000000000000104001200080005003f00000014000600fc01000000000000000000000000000108000300", @ANYRES32=r2, @ANYBLOB], 0xa0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1}, 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) 666.996336ms ago: executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000014c0)={0xb28, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8001, 0x52}}}}, [@NL80211_ATTR_NAN_FUNC={0x32c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xec, 0xd, 0x0, 0x1, [{0x45, 0x0, "7ed2102d62efd61b3375db970c88666d55d92fc9bb91c720298545f6b14202d72fbba95f86668f179edcb30be290c177d09eed4b55d2a9d1e928f446bc810d5b27"}, {0x3f, 0x0, "10a65bea2539eb28b4e29d124a1461aff7003636491c5dd67d2f17806d1c9aca75b60d8b39679fb10f3a7bc82040b4552e12b38873d5500750cbd9"}, {0x4}, {0x5, 0x0, "bd"}, {0x51, 0x0, "c6eb8f84ef988ec36f49e1433318551fbe777a386dede6802cae1ab824af96672100f64ad63f4541a447b2f03c2595daba0626e6416c6675e59e4e873291b7c91628c3a75c22882f2279f23cd9"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x100, 0xb, "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"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SRF={0x12c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xf8}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x58, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "dc2abc08b1d6"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_SRF={0x30, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf6, 0xb, "64a4a79caaec741ab404dfd9d8aa027582497d1cb7a19251755940aa911a55dcf96c6091db2e98f658e08dd45c3e2c36124d8c39919319f7ce4619d0778b2acc44b98363545244cd5874733a624f4f993aa36dc70be2e5878c517bd7ffa233fe39d9820f9492514efe97ca2f7277d7128ddcfe8212e7912c33a424d2f13afc9f0e78c1b1bf4fbef235fc1c962600c21fcba61f586a95f4fc7bef5e622108158d65e5f80fe618b7c76e7c35d9d17db10f4f37bc1379a8e78eb45ad65da31de87bc427668d043738330e16d3fb0c378f84e187a50df387283f396b9b04e3d51414b6d6269943c3d4a23627762a6086d60677cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x218, 0xe, 0x0, 0x1, [{0x89, 0x0, "4cc215bd5c7ff9fab531d460d9b07a7a1176925ccb255f5f41f19f1c439a574696c6df7a44c0261c6599336852eb789d9f68265b8401107b9d758b70e91aeaa057bda4474f8cbb65ecfb8e722deb4084defaed123f64b379a08898227cd7724ef3398e197bb1324a345bc29571c825c85d800f0fa1a9a7daae8dbb713177c2655478d183ac"}, {0xa7, 0x0, "4ad049bf9b641f852caa988e1b26944fe91367d65cf3e6f958ac84906df5023446946a0ad3792ea6724b89b329abf2b94bf7e15fd6debfd013b34505d75cdbdac059475ea1587cce38ebe80dc4ba088b02d1be9e50db8f19d68bab16b3c90cfdc082485c79626c5796aafb99311853d58bdcd649aeb2d2124e1332b30d1ca6d16a26bd91393c419d6bcc87fadb1787041a35741e7085f362549d12d92b2cf486b145f7"}, {0xd3, 0x0, "31411bea97d5171cdf0e8f6a13e712c32663f3b9ed5256fa249bad4622ee35e06c41a7b33f779093dddfa39dc766e97cecb71d1728be33d6c66fd5c5e43bfbe2327634709fb85234f3882d57e65d137d899485949202d502eba57e84d966b2acbeda4a782b8683a8cffacdb2c2bec7881b2a98b38f447a377f7d9157b68f2c1c249d7fff4caefdb3fc982f64f0910ec2b025b588f1c4915333ea09a5f933564591fbbc1990301f0b56effbcad75a199a20dd099e35d3643448792cf0ad0fa0e90a0e2c596ee0b97469c8776954e900"}, {0x4}, {0x5, 0x0, "a0"}]}]}, @NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x33c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_SRF={0x264, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x49}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb9, 0xb, "f5f1d357fdc9ae0df6411c62c392ead3153d77b3942d3f4b5f96563c49bf35716d4aa826232b1c6db17738cc76d411cf6f83bad56896fa7399ab1e9a297133ffb666cba91fa0c98bb7674efae1ea0597498a0a79cd93a8456f8a5ae413d071c305170facef01d30c757bea9091545ca3314fc2f8d3a0df60fb9cd661e81ef107a40dc691ca3b03a9251a4503b1166e92120bf1be53d3b3a84f1868763888c97df6d50842c772069cf6747bf273799943824b10e660"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xe4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x8, 0xe, 0x0, 0x1, [{0x4}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "8bb259ad3e55"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xa9, 0xb, "5e9e8ce29f4176e7b7f3fd8644e10f42ef0aa86d7410373141cf6cdb504899db1bda3ebc9c04532499686fe02bd63b3b336aec4f56332ab8067bddefa817a7c4add003d8321fe924aa2e40918515674afafe48d39236a1f1cca02e8ce1bbc134505013cae682fc564c86cf5b60b3a862394dbf1af906158d926ca32b4f68e8033cab5d6e0707bd9b6681dcd47a64f44684614da65f11a922fce4ecc5e8f2b5e623db7f947a"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xf9}]}]}, 0xb28}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x810, &(0x7f0000001180), 0x1, 0x523, &(0x7f0000000240)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) chown(&(0x7f0000000000)='./file1\x00', 0xee01, 0xee00) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 272.778598ms ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000740)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x2300, 0x20}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a5181100", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f00000007c0)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000959095a600a81140a4ed3a67336d605ca145af65ae3d42196fb5977560c7e9987ff52552561de2eceff1f74b072288f560cf783779a40ec0bb222a6a6500f448c89679b4e1dc0cab5522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 43.815583ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRESHEX=r1, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES16=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020", @ANYRES32], 0x5c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002d80)={0x2020}, 0x2025) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000100), 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x0, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 0s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00'}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) close(0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): ystem has been set read-only [ 415.482407][ T336] usb 1-1: Detected FT-X [ 415.505709][ T9626] FAT-fs (loop4): Directory bread(block 64) failed [ 415.512613][ T9626] FAT-fs (loop4): Directory bread(block 65) failed [ 415.519163][ T3105] hid-led: probe of 0003:27B8:01ED.00ED failed with error -71 [ 415.519366][ T9626] FAT-fs (loop4): Directory bread(block 66) failed [ 415.527615][ T3105] usb 2-1: USB disconnect, device number 80 [ 415.540128][ T9626] FAT-fs (loop4): Directory bread(block 67) failed [ 415.548203][ T9626] FAT-fs (loop4): Directory bread(block 68) failed [ 415.555013][ T9626] FAT-fs (loop4): Directory bread(block 69) failed [ 415.561582][ T9626] FAT-fs (loop4): Directory bread(block 70) failed [ 415.568080][ T9626] FAT-fs (loop4): Directory bread(block 71) failed [ 415.574418][ T9626] FAT-fs (loop4): Directory bread(block 72) failed [ 415.581006][ T9626] FAT-fs (loop4): Directory bread(block 73) failed [ 415.675416][ T336] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 415.705859][ T336] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 415.729524][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 415.836910][ T336] ftdi_sio 1-1:0.1: GPIO initialisation failed: -71 [ 415.837361][ T9628] attempt to access beyond end of device [ 415.837361][ T9628] loop4: rw=2049, want=1228, limit=256 [ 415.843951][ T336] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 415.855308][ T1230] uclogic 0003:256C:006D.00EE: failed retrieving Huion firmware version: -71 [ 415.877337][ T1230] uclogic 0003:256C:006D.00EE: failed probing parameters: -71 [ 415.884738][ T1230] uclogic: probe of 0003:256C:006D.00EE failed with error -71 [ 415.895023][ T1230] usb 4-1: USB disconnect, device number 79 [ 415.906730][ T336] usb 1-1: USB disconnect, device number 75 [ 415.913643][ T336] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 415.923273][ T336] ftdi_sio 1-1:0.1: device disconnected [ 416.093797][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.275291][ T343] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 416.444216][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 416.496417][ T9645] loop1: detected capacity change from 0 to 131072 [ 416.534009][ T9645] F2FS-fs (loop1): Test dummy encryption mode enabled [ 416.547540][ T9645] F2FS-fs (loop1): invalid crc value [ 416.567519][ T9645] F2FS-fs (loop1): Found nat_bits in checkpoint [ 416.622585][ T9645] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 416.635435][ T343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 416.805380][ T343] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 416.814262][ T343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.855952][ T343] usb 3-1: Product: syz [ 416.859937][ T343] usb 3-1: Manufacturer: syz [ 416.888891][ T343] usb 3-1: SerialNumber: syz [ 416.918528][ T343] usb 3-1: config 0 descriptor?? [ 417.215379][ T343] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 417.225542][ T343] usb 3-1: USB disconnect, device number 66 [ 417.408047][ T9676] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 417.554403][ T9679] loop3: detected capacity change from 0 to 256 [ 417.663806][ T9683] loop1: detected capacity change from 0 to 256 [ 417.752174][ T9683] FAT-fs (loop1): Directory bread(block 64) failed [ 417.760812][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 417.770548][ T9683] FAT-fs (loop1): Directory bread(block 65) failed [ 417.777571][ T9683] FAT-fs (loop1): Directory bread(block 66) failed [ 417.793754][ T9683] FAT-fs (loop1): Directory bread(block 67) failed [ 417.802612][ T9683] FAT-fs (loop1): Directory bread(block 68) failed [ 417.809581][ T9683] FAT-fs (loop1): Directory bread(block 69) failed [ 417.816314][ T9683] FAT-fs (loop1): Directory bread(block 70) failed [ 417.822704][ T9683] FAT-fs (loop1): Directory bread(block 71) failed [ 417.835372][ T9683] FAT-fs (loop1): Directory bread(block 72) failed [ 417.845757][ T9683] FAT-fs (loop1): Directory bread(block 73) failed [ 417.923815][ T341] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 417.973428][ T9696] loop2: detected capacity change from 0 to 512 [ 418.038561][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 418.258293][ T9696] EXT4-fs (loop2): orphan cleanup on readonly fs [ 418.375676][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.391472][ T9696] EXT4-fs (loop2): 1 orphan inode deleted [ 418.394154][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.413877][ T9696] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 418.431857][ T341] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 418.450680][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.463335][ T9675] loop0: detected capacity change from 0 to 131072 [ 418.470171][ T341] usb 4-1: config 0 descriptor?? [ 418.512443][ T9675] F2FS-fs (loop0): Test dummy encryption mode enabled [ 418.528825][ T9675] F2FS-fs (loop0): invalid crc value [ 418.565285][ T9675] F2FS-fs (loop0): Found nat_bits in checkpoint [ 418.615819][ T9675] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 418.771819][ T9721] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 419.049918][ T9723] loop2: detected capacity change from 0 to 256 [ 419.115873][ T9723] FAT-fs (loop2): Unrecognized mount option "À" or missing value [ 419.151026][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 419.151042][ T30] audit: type=1326 audit(1718902298.474:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd690c49f29 code=0x0 [ 419.184135][ T9679] syz-executor.3[9679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.184743][ T9679] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 419.204018][ T9679] FAT-fs (loop3): Filesystem has been set read-only [ 419.235813][ T341] hid-led: probe of 0003:27B8:01ED.00EF failed with error -71 [ 419.263834][ T341] usb 4-1: USB disconnect, device number 80 [ 419.299593][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 419.393423][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 419.399822][ T9719] loop4: detected capacity change from 0 to 131072 [ 419.428530][ T9734] loop0: detected capacity change from 0 to 256 [ 419.481655][ T9719] F2FS-fs (loop4): Test dummy encryption mode enabled [ 419.496271][ T9719] F2FS-fs (loop4): invalid crc value [ 419.505591][ T9719] F2FS-fs (loop4): Found nat_bits in checkpoint [ 419.528326][ T9734] FAT-fs (loop0): Directory bread(block 64) failed [ 419.534689][ T9734] FAT-fs (loop0): Directory bread(block 65) failed [ 419.542393][ T9734] FAT-fs (loop0): Directory bread(block 66) failed [ 419.550884][ T9734] FAT-fs (loop0): Directory bread(block 67) failed [ 419.558479][ T9734] FAT-fs (loop0): Directory bread(block 68) failed [ 419.564996][ T9734] FAT-fs (loop0): Directory bread(block 69) failed [ 419.573239][ T9734] FAT-fs (loop0): Directory bread(block 70) failed [ 419.581265][ T9734] FAT-fs (loop0): Directory bread(block 71) failed [ 419.589978][ T9734] FAT-fs (loop0): Directory bread(block 72) failed [ 419.598998][ T9734] FAT-fs (loop0): Directory bread(block 73) failed [ 419.729795][ T9719] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 419.737760][ T9734] attempt to access beyond end of device [ 419.737760][ T9734] loop0: rw=2049, want=1228, limit=256 [ 419.918735][ T9757] loop0: detected capacity change from 0 to 512 [ 420.008512][ T9757] EXT4-fs (loop0): orphan cleanup on readonly fs [ 420.016342][ T9757] EXT4-fs (loop0): 1 orphan inode deleted [ 420.022366][ T9757] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 420.056294][ T30] audit: type=1326 audit(1718902299.384:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37bdd4df29 code=0x0 [ 420.336414][ T9764] loop2: detected capacity change from 0 to 256 [ 420.395602][ T9764] FAT-fs (loop2): Unrecognized mount option "À" or missing value [ 420.529630][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 420.685867][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 420.807551][ T9782] loop3: detected capacity change from 0 to 256 [ 420.915555][ T9782] FAT-fs (loop3): Unrecognized mount option "À" or missing value [ 421.086516][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 421.197302][ T9786] loop3: detected capacity change from 0 to 256 [ 421.293300][ T9790] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 421.597433][ T9766] loop1: detected capacity change from 0 to 131072 [ 421.630349][ T9766] F2FS-fs (loop1): Test dummy encryption mode enabled [ 421.649068][ T9766] F2FS-fs (loop1): invalid crc value [ 421.655899][ T9766] F2FS-fs (loop1): Found nat_bits in checkpoint [ 421.692095][ T9766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 421.722565][ T9801] loop0: detected capacity change from 0 to 256 [ 421.754237][ T9801] FAT-fs (loop0): Directory bread(block 64) failed [ 421.761859][ T9801] FAT-fs (loop0): Directory bread(block 65) failed [ 421.768788][ T341] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 421.776436][ T9801] FAT-fs (loop0): Directory bread(block 66) failed [ 421.782842][ T9801] FAT-fs (loop0): Directory bread(block 67) failed [ 421.789836][ T9801] FAT-fs (loop0): Directory bread(block 68) failed [ 421.796687][ T9801] FAT-fs (loop0): Directory bread(block 69) failed [ 421.803253][ T9801] FAT-fs (loop0): Directory bread(block 70) failed [ 421.810349][ T9801] FAT-fs (loop0): Directory bread(block 71) failed [ 421.817308][ T9801] FAT-fs (loop0): Directory bread(block 72) failed [ 421.823701][ T9801] FAT-fs (loop0): Directory bread(block 73) failed [ 421.906556][ T39] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 422.017751][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 422.117175][ T9804] attempt to access beyond end of device [ 422.117175][ T9804] loop0: rw=2049, want=1228, limit=256 [ 422.215421][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.229841][ T30] audit: type=1326 audit(1718902301.554:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x0 [ 422.253340][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.263669][ T341] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 422.270325][ T9788] loop4: detected capacity change from 0 to 131072 [ 422.272856][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.287357][ T341] usb 4-1: config 0 descriptor?? [ 422.365619][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.368122][ T9788] F2FS-fs (loop4): Test dummy encryption mode enabled [ 422.379975][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.384491][ T9788] F2FS-fs (loop4): invalid crc value [ 422.393844][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 422.406590][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.410582][ T9788] F2FS-fs (loop4): Found nat_bits in checkpoint [ 422.415240][ T39] usb 3-1: config 0 descriptor?? [ 422.441926][ T9788] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 422.477528][ T9811] loop1: detected capacity change from 0 to 256 [ 422.495903][ T9811] FAT-fs (loop1): Unrecognized mount option "À" or missing value [ 422.644825][ T30] audit: type=1326 audit(1718902301.964:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37bdd4df29 code=0x0 [ 422.670144][ T9811] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 422.690016][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 422.753543][ T9820] loop0: detected capacity change from 0 to 512 [ 422.812413][ T9820] EXT4-fs (loop0): orphan cleanup on readonly fs [ 422.819979][ T9820] EXT4-fs (loop0): 1 orphan inode deleted [ 422.826512][ T9820] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 422.925948][ T39] hid (null): bogus close delimiter [ 422.975487][ T9786] syz-executor.3[9786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.976091][ T9786] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 422.995250][ T9786] FAT-fs (loop3): Filesystem has been set read-only [ 423.045609][ T341] hid-led: probe of 0003:27B8:01ED.00F0 failed with error -71 [ 423.058638][ T341] usb 4-1: USB disconnect, device number 81 [ 423.098068][ T9832] loop4: detected capacity change from 0 to 256 [ 423.145867][ T9832] FAT-fs (loop4): Unrecognized mount option "À" or missing value [ 423.270286][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.385345][ T39] uclogic 0003:256C:006D.00F1: failed retrieving Huion firmware version: -71 [ 423.394013][ T39] uclogic 0003:256C:006D.00F1: failed probing parameters: -71 [ 423.401703][ T39] uclogic: probe of 0003:256C:006D.00F1 failed with error -71 [ 423.414654][ T39] usb 3-1: USB disconnect, device number 67 [ 423.563280][ T9838] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 423.820247][ T9848] loop0: detected capacity change from 0 to 256 [ 423.860801][ T9848] FAT-fs (loop0): Directory bread(block 64) failed [ 423.867413][ T9848] FAT-fs (loop0): Directory bread(block 65) failed [ 423.873812][ T9848] FAT-fs (loop0): Directory bread(block 66) failed [ 423.880414][ T9848] FAT-fs (loop0): Directory bread(block 67) failed [ 423.887607][ T9848] FAT-fs (loop0): Directory bread(block 68) failed [ 423.893970][ T9848] FAT-fs (loop0): Directory bread(block 69) failed [ 423.900587][ T9848] FAT-fs (loop0): Directory bread(block 70) failed [ 423.907325][ T9848] FAT-fs (loop0): Directory bread(block 71) failed [ 423.913706][ T9848] FAT-fs (loop0): Directory bread(block 72) failed [ 423.920183][ T9848] FAT-fs (loop0): Directory bread(block 73) failed [ 424.055305][ T341] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 424.103528][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 424.522212][ T9852] loop2: detected capacity change from 0 to 256 [ 424.552232][ T9842] loop3: detected capacity change from 0 to 131072 [ 424.554500][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 424.576591][ T9842] F2FS-fs (loop3): Test dummy encryption mode enabled [ 424.584321][ T9842] F2FS-fs (loop3): invalid crc value [ 424.589633][ T9852] FAT-fs (loop2): Unrecognized mount option "À" or missing value [ 424.603338][ T9842] F2FS-fs (loop3): Found nat_bits in checkpoint [ 424.639076][ T9842] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 424.699903][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 424.836805][ T9874] loop2: detected capacity change from 0 to 256 [ 424.846037][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 425.025606][ T341] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 425.038107][ T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.046433][ T30] audit: type=1326 audit(1718902304.374:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63fed8f29 code=0x0 [ 425.070472][ T341] usb 2-1: Product: syz [ 425.074492][ T341] usb 2-1: Manufacturer: syz [ 425.079353][ T341] usb 2-1: SerialNumber: syz [ 425.094270][ T341] usb 2-1: config 0 descriptor?? [ 425.195227][ T1230] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 425.386774][ T30] audit: type=1326 audit(1718902304.714:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 425.414777][ T30] audit: type=1326 audit(1718902304.714:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 425.439160][ T30] audit: type=1326 audit(1718902304.714:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 425.468133][ T30] audit: type=1326 audit(1718902304.714:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 425.494868][ T30] audit: type=1326 audit(1718902304.714:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 425.525605][ T30] audit: type=1326 audit(1718902304.714:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 425.549701][ T30] audit: type=1326 audit(1718902304.714:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 425.574921][ T30] audit: type=1326 audit(1718902304.714:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 425.598802][ T30] audit: type=1326 audit(1718902304.714:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 425.625366][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.635554][ T341] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 425.636680][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.643424][ T341] usb 2-1: USB disconnect, device number 81 [ 425.655012][ T1230] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 425.667044][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.752275][ T9889] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 425.835548][ T39] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 425.856387][ T1230] usb 3-1: config 0 descriptor?? [ 426.165275][ T3105] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 426.205575][ T39] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 426.264523][ T9898] loop1: detected capacity change from 0 to 256 [ 426.351556][ T9898] FAT-fs (loop1): Directory bread(block 64) failed [ 426.358012][ T9898] FAT-fs (loop1): Directory bread(block 65) failed [ 426.365574][ T9898] FAT-fs (loop1): Directory bread(block 66) failed [ 426.372194][ T9898] FAT-fs (loop1): Directory bread(block 67) failed [ 426.378929][ T9898] FAT-fs (loop1): Directory bread(block 68) failed [ 426.385635][ T9898] FAT-fs (loop1): Directory bread(block 69) failed [ 426.392043][ T9898] FAT-fs (loop1): Directory bread(block 70) failed [ 426.398605][ T9898] FAT-fs (loop1): Directory bread(block 71) failed [ 426.401762][ T39] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 426.405010][ T9898] FAT-fs (loop1): Directory bread(block 72) failed [ 426.416858][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.420930][ T9898] FAT-fs (loop1): Directory bread(block 73) failed [ 426.428227][ T39] usb 5-1: Product: syz [ 426.439263][ T39] usb 5-1: Manufacturer: syz [ 426.444003][ T39] usb 5-1: SerialNumber: syz [ 426.479070][ T9902] loop3: detected capacity change from 0 to 256 [ 426.498771][ T39] usb 5-1: config 0 descriptor?? [ 426.506196][ T9902] FAT-fs (loop3): Unrecognized mount option "À" or missing value [ 426.515564][ T9885] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 426.535367][ T3105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.546638][ T3105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.609168][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 426.723345][ T9905] attempt to access beyond end of device [ 426.723345][ T9905] loop1: rw=2049, want=1228, limit=256 [ 426.746254][ T9874] syz-executor.2[9874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.746813][ T9874] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 426.766026][ T3105] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 426.774898][ T3105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.783212][ T9874] FAT-fs (loop2): Filesystem has been set read-only [ 426.789921][ T3105] usb 1-1: config 0 descriptor?? [ 426.796070][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 426.845425][ T1230] hid-led: probe of 0003:27B8:01ED.00F2 failed with error -71 [ 426.852920][ T9909] loop3: detected capacity change from 0 to 256 [ 426.859583][ T1230] usb 3-1: USB disconnect, device number 68 [ 426.861965][ T39] usb 5-1: USB disconnect, device number 73 [ 426.872160][ T9909] FAT-fs (loop3): Unrecognized mount option "À" or missing value [ 426.973495][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 427.315507][ T3105] hid (null): bogus close delimiter [ 427.577037][ T9920] loop4: detected capacity change from 0 to 256 [ 427.642126][ T9916] loop1: detected capacity change from 0 to 131072 [ 427.728793][ T9916] F2FS-fs (loop1): Test dummy encryption mode enabled [ 427.744380][ T9916] F2FS-fs (loop1): invalid crc value [ 427.751505][ T9916] F2FS-fs (loop1): Found nat_bits in checkpoint [ 427.775617][ T9916] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 427.794146][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.805429][ T3105] uclogic 0003:256C:006D.00F3: failed retrieving Huion firmware version: -71 [ 427.814491][ T3105] uclogic 0003:256C:006D.00F3: failed probing parameters: -71 [ 427.822031][ T3105] uclogic: probe of 0003:256C:006D.00F3 failed with error -71 [ 427.866448][ T3105] usb 1-1: USB disconnect, device number 76 [ 427.875159][ T9935] loop3: detected capacity change from 0 to 256 [ 427.935312][ T1230] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 427.979125][ T9935] FAT-fs (loop3): Unrecognized mount option "À" or missing value [ 428.097081][ T9943] loop2: detected capacity change from 0 to 512 [ 428.112712][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 428.278891][ T9943] EXT4-fs (loop2): 1 orphan inode deleted [ 428.280241][ T9951] loop3: detected capacity change from 0 to 256 [ 428.284619][ T9943] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 428.315389][ T1230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.322535][ T9953] loop1: detected capacity change from 0 to 256 [ 428.335482][ T1230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.341870][ T9943] ext4 filesystem being mounted at /root/syzkaller-testdir3700990743/syzkaller.kZYTW6/257/file1 supports timestamps until 2038 (0x7fffffff) [ 428.345089][ T1230] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 428.360880][ T9955] loop0: detected capacity change from 0 to 256 [ 428.368426][ T1230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.387654][ T1230] usb 5-1: config 0 descriptor?? [ 428.393250][ T9943] overlayfs: './file1' not a directory [ 428.460115][ T9951] FAT-fs (loop3): Directory bread(block 64) failed [ 428.467071][ T9951] FAT-fs (loop3): Directory bread(block 65) failed [ 428.476142][ T9951] FAT-fs (loop3): Directory bread(block 66) failed [ 428.483534][ T9951] FAT-fs (loop3): Directory bread(block 67) failed [ 428.489985][ T9951] FAT-fs (loop3): Directory bread(block 68) failed [ 428.496656][ T9951] FAT-fs (loop3): Directory bread(block 69) failed [ 428.503023][ T9951] FAT-fs (loop3): Directory bread(block 70) failed [ 428.509643][ T9951] FAT-fs (loop3): Directory bread(block 71) failed [ 428.516354][ T9951] FAT-fs (loop3): Directory bread(block 72) failed [ 428.522661][ T9951] FAT-fs (loop3): Directory bread(block 73) failed [ 428.669831][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 428.773107][ T341] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 428.780870][ T39] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 429.092919][ T9967] loop2: detected capacity change from 0 to 512 [ 429.103610][ T9967] EXT4-fs (loop2): orphan cleanup on readonly fs [ 429.136511][ T9967] EXT4-fs (loop2): 1 orphan inode deleted [ 429.145754][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.156834][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.167862][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.177592][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.177811][ T9967] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 429.187388][ T39] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 429.207432][ T341] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 429.216468][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.224838][ T341] usb 1-1: config 0 descriptor?? [ 429.229635][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.239895][ T9920] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 429.247647][ T9920] FAT-fs (loop4): Filesystem has been set read-only [ 429.252488][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 429.254679][ T39] usb 2-1: config 0 descriptor?? [ 429.275325][ T1230] hid-led: probe of 0003:27B8:01ED.00F4 failed with error -71 [ 429.288493][ T1230] usb 5-1: USB disconnect, device number 74 [ 429.731075][ T9955] syz-executor.0[9955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.732010][ T9955] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 429.751396][ T9955] FAT-fs (loop0): Filesystem has been set read-only [ 429.865523][ T341] usbhid 1-1:0.0: can't add hid device: -71 [ 429.871410][ T341] usbhid: probe of 1-1:0.0 failed with error -71 [ 429.881177][ T341] usb 1-1: USB disconnect, device number 77 [ 429.977221][ T9953] syz-executor.1[9953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.977900][ T9953] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 429.999592][ T9953] FAT-fs (loop1): Filesystem has been set read-only [ 430.323382][ T9993] loop2: detected capacity change from 0 to 512 [ 430.329631][ T39] hid-led: probe of 0003:27B8:01ED.00F5 failed with error -71 [ 430.340747][ T39] usb 2-1: USB disconnect, device number 82 [ 430.461486][ T9993] EXT4-fs (loop2): orphan cleanup on readonly fs [ 430.471654][ T9993] EXT4-fs (loop2): 1 orphan inode deleted [ 430.488414][ T9993] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 430.518091][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 430.778273][T10011] loop4: detected capacity change from 0 to 256 [ 430.949497][T10016] loop2: detected capacity change from 0 to 512 [ 431.063083][T10016] EXT4-fs (loop2): orphan cleanup on readonly fs [ 431.074457][T10016] EXT4-fs (loop2): 1 orphan inode deleted [ 431.085302][ T20] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 431.108449][T10016] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 431.485424][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.501051][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.523385][ T20] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 431.532775][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.545399][ T20] usb 5-1: config 0 descriptor?? [ 431.895255][ T341] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 432.255513][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.266287][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.276055][ T341] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 432.302727][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.313324][ T341] usb 2-1: config 0 descriptor?? [ 432.394713][T10049] loop0: detected capacity change from 0 to 256 [ 432.429527][T10050] loop3: detected capacity change from 0 to 512 [ 432.532690][T10050] EXT4-fs (loop3): orphan cleanup on readonly fs [ 432.540144][T10050] EXT4-fs (loop3): 1 orphan inode deleted [ 432.556349][T10050] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 432.688046][T10011] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 432.696177][T10011] FAT-fs (loop4): Filesystem has been set read-only [ 432.705679][ T3105] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 432.725387][ T20] hid-led: probe of 0003:27B8:01ED.00F6 failed with error -71 [ 432.735825][ T20] usb 5-1: USB disconnect, device number 75 [ 432.798152][ T341] hid (null): bogus close delimiter [ 433.085401][ T3105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.115339][ T3105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.125313][ T3105] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 433.134326][ T3105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.155966][ T3105] usb 1-1: config 0 descriptor?? [ 433.244498][T10064] loop4: detected capacity change from 0 to 256 [ 433.281026][T10064] FAT-fs (loop4): Directory bread(block 64) failed [ 433.287838][T10064] FAT-fs (loop4): Directory bread(block 65) failed [ 433.294228][T10064] FAT-fs (loop4): Directory bread(block 66) failed [ 433.300826][T10064] FAT-fs (loop4): Directory bread(block 67) failed [ 433.307493][T10064] FAT-fs (loop4): Directory bread(block 68) failed [ 433.313816][T10064] FAT-fs (loop4): Directory bread(block 69) failed [ 433.321529][T10064] FAT-fs (loop4): Directory bread(block 70) failed [ 433.328337][T10064] FAT-fs (loop4): Directory bread(block 71) failed [ 433.334803][T10064] FAT-fs (loop4): Directory bread(block 72) failed [ 433.341428][T10064] FAT-fs (loop4): Directory bread(block 73) failed [ 433.528876][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 433.675719][ T341] uclogic 0003:256C:006D.00F7: failed retrieving Huion firmware version: -71 [ 433.701053][ T341] uclogic 0003:256C:006D.00F7: failed probing parameters: -71 [ 433.716724][ T341] uclogic: probe of 0003:256C:006D.00F7 failed with error -71 [ 433.737131][ T341] usb 2-1: USB disconnect, device number 83 [ 433.773020][T10075] loop2: detected capacity change from 0 to 256 [ 433.790783][T10075] FAT-fs (loop2): Directory bread(block 64) failed [ 433.797495][T10075] FAT-fs (loop2): Directory bread(block 65) failed [ 433.803847][T10075] FAT-fs (loop2): Directory bread(block 66) failed [ 433.810859][T10075] FAT-fs (loop2): Directory bread(block 67) failed [ 433.817456][T10075] FAT-fs (loop2): Directory bread(block 68) failed [ 433.823786][T10075] FAT-fs (loop2): Directory bread(block 69) failed [ 433.830502][T10075] FAT-fs (loop2): Directory bread(block 70) failed [ 433.837053][T10075] FAT-fs (loop2): Directory bread(block 71) failed [ 433.843411][T10075] FAT-fs (loop2): Directory bread(block 72) failed [ 433.850096][T10075] FAT-fs (loop2): Directory bread(block 73) failed [ 433.918023][T10049] syz-executor.0[10049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.919269][T10049] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 433.942795][T10049] FAT-fs (loop0): Filesystem has been set read-only [ 433.957542][T10071] loop3: detected capacity change from 0 to 131072 [ 433.975350][ T3105] hid-led: probe of 0003:27B8:01ED.00F8 failed with error -71 [ 433.983322][ T3105] usb 1-1: USB disconnect, device number 78 [ 434.045803][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 434.261978][T10078] attempt to access beyond end of device [ 434.261978][T10078] loop2: rw=2049, want=1228, limit=256 [ 434.273995][T10071] F2FS-fs (loop3): Test dummy encryption mode enabled [ 434.283405][T10071] F2FS-fs (loop3): invalid crc value [ 434.290313][T10071] F2FS-fs (loop3): Found nat_bits in checkpoint [ 434.322138][T10071] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 434.729197][ T341] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 434.760066][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 434.760081][ T30] audit: type=1326 audit(1718902314.084:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63fed8f29 code=0x0 [ 434.992405][T10101] loop0: detected capacity change from 0 to 512 [ 435.032154][T10101] EXT4-fs (loop0): orphan cleanup on readonly fs [ 435.052644][T10101] EXT4-fs (loop0): 1 orphan inode deleted [ 435.095299][ T341] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 435.109395][T10101] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 435.129359][T10108] loop3: detected capacity change from 0 to 256 [ 435.296583][T10114] loop4: detected capacity change from 0 to 256 [ 435.305602][ T341] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 435.315115][ T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.327330][ T341] usb 2-1: Product: syz [ 435.331312][ T341] usb 2-1: Manufacturer: syz [ 435.335843][ T341] usb 2-1: SerialNumber: syz [ 435.340881][ T341] usb 2-1: config 0 descriptor?? [ 435.365298][T10087] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 435.515282][ T1230] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 435.625316][ T3105] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 435.633086][ T30] audit: type=1326 audit(1718902314.954:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 435.657225][ T30] audit: type=1326 audit(1718902314.954:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 435.682007][ T30] audit: type=1326 audit(1718902314.964:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 435.712201][ T30] audit: type=1326 audit(1718902314.964:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 435.741487][ T30] audit: type=1326 audit(1718902314.964:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 435.767010][ T30] audit: type=1326 audit(1718902314.964:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 435.791288][ T30] audit: type=1326 audit(1718902314.964:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 435.819325][ T30] audit: type=1326 audit(1718902314.964:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 435.843896][ T30] audit: type=1326 audit(1718902314.964:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 435.890089][ T341] usb 2-1: USB disconnect, device number 84 [ 435.916478][T10121] loop0: detected capacity change from 0 to 256 [ 435.975360][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.986817][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.996726][ T1230] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 436.005778][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.025008][T10121] FAT-fs (loop0): Directory bread(block 64) failed [ 436.025465][ T1230] usb 4-1: config 0 descriptor?? [ 436.034670][T10121] FAT-fs (loop0): Directory bread(block 65) failed [ 436.036284][ T3105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.042998][T10121] FAT-fs (loop0): Directory bread(block 66) failed [ 436.061375][T10121] FAT-fs (loop0): Directory bread(block 67) failed [ 436.065310][ T3105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.068345][T10121] FAT-fs (loop0): Directory bread(block 68) failed [ 436.084272][T10121] FAT-fs (loop0): Directory bread(block 69) failed [ 436.085338][ T3105] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 436.090854][T10121] FAT-fs (loop0): Directory bread(block 70) failed [ 436.107657][T10121] FAT-fs (loop0): Directory bread(block 71) failed [ 436.114017][T10121] FAT-fs (loop0): Directory bread(block 72) failed [ 436.115235][ T3105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.120957][T10121] FAT-fs (loop0): Directory bread(block 73) failed [ 436.145436][ T3105] usb 5-1: config 0 descriptor?? [ 436.223797][T10117] loop2: detected capacity change from 0 to 131072 [ 436.326816][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 436.464003][T10117] F2FS-fs (loop2): Test dummy encryption mode enabled [ 436.474901][T10117] F2FS-fs (loop2): invalid crc value [ 436.481531][T10117] F2FS-fs (loop2): Found nat_bits in checkpoint [ 436.504170][T10117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 436.703184][T10134] loop1: detected capacity change from 0 to 512 [ 436.925182][T10134] EXT4-fs (loop1): orphan cleanup on readonly fs [ 436.932876][T10134] EXT4-fs (loop1): 1 orphan inode deleted [ 436.939255][T10134] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 436.954443][T10108] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 436.985827][T10108] FAT-fs (loop3): Filesystem has been set read-only [ 437.025346][ T1230] hid-led: probe of 0003:27B8:01ED.00FA failed with error -71 [ 437.037134][ T1230] usb 4-1: USB disconnect, device number 82 [ 437.120262][T10114] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 437.130837][T10114] FAT-fs (loop4): Filesystem has been set read-only [ 437.175330][ T3105] hid-led: probe of 0003:27B8:01ED.00F9 failed with error -71 [ 437.183945][ T3105] usb 5-1: USB disconnect, device number 76 [ 437.318090][T10140] loop0: detected capacity change from 0 to 131072 [ 437.371295][T10140] F2FS-fs (loop0): Test dummy encryption mode enabled [ 437.382681][T10140] F2FS-fs (loop0): invalid crc value [ 437.392635][T10140] F2FS-fs (loop0): Found nat_bits in checkpoint [ 437.415517][T10140] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 437.464475][T10153] loop1: detected capacity change from 0 to 256 [ 437.474010][T10153] FAT-fs (loop1): Unrecognized mount option "À" or missing value [ 437.544037][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 437.596442][T10159] loop3: detected capacity change from 0 to 16 [ 437.685454][T10159] erofs: (device loop3): mounted with root inode @ nid 36. [ 437.695095][T10159] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 437.853792][T10167] loop4: detected capacity change from 0 to 512 [ 437.950526][T10167] EXT4-fs (loop4): orphan cleanup on readonly fs [ 438.069606][T10167] EXT4-fs (loop4): 1 orphan inode deleted [ 438.215354][T10167] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 438.388707][T10176] loop0: detected capacity change from 0 to 512 [ 438.482962][T10178] loop3: detected capacity change from 0 to 256 [ 438.530522][T10178] FAT-fs (loop3): Directory bread(block 64) failed [ 438.545392][T10178] FAT-fs (loop3): Directory bread(block 65) failed [ 438.553177][T10176] EXT4-fs (loop0): 1 orphan inode deleted [ 438.559137][T10178] FAT-fs (loop3): Directory bread(block 66) failed [ 438.575547][T10176] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 438.585292][T10178] FAT-fs (loop3): Directory bread(block 67) failed [ 438.588785][T10176] ext4 filesystem being mounted at /root/syzkaller-testdir193892579/syzkaller.8K0MMI/170/file1 supports timestamps until 2038 (0x7fffffff) [ 438.601743][T10178] FAT-fs (loop3): Directory bread(block 68) failed [ 438.615277][ T3105] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 438.643580][T10178] FAT-fs (loop3): Directory bread(block 69) failed [ 438.664345][T10178] FAT-fs (loop3): Directory bread(block 70) failed [ 438.670901][T10178] FAT-fs (loop3): Directory bread(block 71) failed [ 438.677812][T10178] FAT-fs (loop3): Directory bread(block 72) failed [ 438.684162][T10178] FAT-fs (loop3): Directory bread(block 73) failed [ 438.684972][T10176] overlayfs: './file1' not a directory [ 438.961249][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 439.398396][T10199] loop0: detected capacity change from 0 to 512 [ 439.644948][T10201] loop3: detected capacity change from 0 to 256 [ 439.651971][T10199] EXT4-fs (loop0): orphan cleanup on readonly fs [ 439.659776][T10199] EXT4-fs (loop0): 1 orphan inode deleted [ 439.666933][T10199] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 439.685875][T10201] FAT-fs (loop3): Unrecognized mount option "À" or missing value [ 439.705648][ T3105] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 439.868627][T10207] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 440.135327][ T3105] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 440.150429][ T3105] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.163376][ T3105] usb 3-1: Product: syz [ 440.170504][ T3105] usb 3-1: Manufacturer: syz [ 440.178190][ T3105] usb 3-1: SerialNumber: syz [ 440.189104][ T3105] usb 3-1: config 0 descriptor?? [ 440.225325][T10175] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 440.305434][T10194] loop4: detected capacity change from 0 to 131072 [ 440.325694][T10194] F2FS-fs (loop4): Test dummy encryption mode enabled [ 440.336542][T10194] F2FS-fs (loop4): invalid crc value [ 440.342935][T10194] F2FS-fs (loop4): Found nat_bits in checkpoint [ 440.379985][T10194] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 440.476413][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 440.476428][ T30] audit: type=1326 audit(1718902319.804:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330e7ff29 code=0x7ffc0000 [ 440.541233][ T3105] usb 3-1: USB disconnect, device number 69 [ 440.565990][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 440.578742][ T30] audit: type=1326 audit(1718902319.804:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd330e7ff29 code=0x7ffc0000 [ 440.673284][ T30] audit: type=1326 audit(1718902319.804:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330e7ff29 code=0x7ffc0000 [ 440.746712][ T30] audit: type=1326 audit(1718902319.804:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd330e7ff29 code=0x7ffc0000 [ 440.815347][ T30] audit: type=1326 audit(1718902319.804:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330e7ff29 code=0x7ffc0000 [ 440.832044][T10213] loop0: detected capacity change from 0 to 131072 [ 440.941395][T10213] F2FS-fs (loop0): Test dummy encryption mode enabled [ 441.146112][ T30] audit: type=1326 audit(1718902319.804:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fd330e7ff29 code=0x7ffc0000 [ 441.170427][ T30] audit: type=1326 audit(1718902319.804:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330e7ff29 code=0x7ffc0000 [ 441.177105][T10213] F2FS-fs (loop0): invalid crc value [ 441.194624][ T30] audit: type=1326 audit(1718902319.804:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd330e7ff29 code=0x7ffc0000 [ 441.223639][ T30] audit: type=1326 audit(1718902319.804:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd330e7ff29 code=0x7ffc0000 [ 441.223669][ T30] audit: type=1326 audit(1718902319.804:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd330e7ff29 code=0x7ffc0000 [ 441.336002][T10213] F2FS-fs (loop0): Found nat_bits in checkpoint [ 441.389847][T10213] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 441.429589][T10241] loop2: detected capacity change from 0 to 512 [ 441.523123][T10243] loop3: detected capacity change from 0 to 512 [ 441.607366][T10241] EXT4-fs (loop2): 1 orphan inode deleted [ 441.613071][T10241] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 441.614913][T10252] loop1: detected capacity change from 0 to 256 [ 441.624554][T10241] ext4 filesystem being mounted at /root/syzkaller-testdir3700990743/syzkaller.kZYTW6/274/file1 supports timestamps until 2038 (0x7fffffff) [ 441.650699][T10241] overlayfs: './file1' not a directory [ 441.671589][T10254] loop4: detected capacity change from 0 to 256 [ 441.686016][T10243] EXT4-fs (loop3): orphan cleanup on readonly fs [ 441.705628][T10243] EXT4-fs (loop3): 1 orphan inode deleted [ 441.740366][T10254] FAT-fs (loop4): Directory bread(block 64) failed [ 441.755957][T10243] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 441.767938][T10254] FAT-fs (loop4): Directory bread(block 65) failed [ 441.782037][T10252] FAT-fs (loop1): Unrecognized mount option "À" or missing value [ 441.801757][T10254] FAT-fs (loop4): Directory bread(block 66) failed [ 441.816983][T10254] FAT-fs (loop4): Directory bread(block 67) failed [ 441.823766][T10254] FAT-fs (loop4): Directory bread(block 68) failed [ 441.830181][T10254] FAT-fs (loop4): Directory bread(block 69) failed [ 441.836927][T10254] FAT-fs (loop4): Directory bread(block 70) failed [ 441.843368][T10254] FAT-fs (loop4): Directory bread(block 71) failed [ 441.849869][T10254] FAT-fs (loop4): Directory bread(block 72) failed [ 441.856610][T10254] FAT-fs (loop4): Directory bread(block 73) failed [ 441.915896][T10254] attempt to access beyond end of device [ 441.915896][T10254] loop4: rw=2049, want=1228, limit=256 [ 441.948791][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 442.303623][T10271] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 442.505473][ T3105] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 442.705276][ T343] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 442.865376][ T3105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.876137][ T3105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.885667][ T3105] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 442.894473][ T3105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.903163][ T3105] usb 5-1: config 0 descriptor?? [ 443.050201][T10280] loop2: detected capacity change from 0 to 256 [ 443.090264][T10280] FAT-fs (loop2): Directory bread(block 64) failed [ 443.096730][T10280] FAT-fs (loop2): Directory bread(block 65) failed [ 443.103139][T10280] FAT-fs (loop2): Directory bread(block 66) failed [ 443.109843][T10280] FAT-fs (loop2): Directory bread(block 67) failed [ 443.115336][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.116318][T10280] FAT-fs (loop2): Directory bread(block 68) failed [ 443.133676][T10280] FAT-fs (loop2): Directory bread(block 69) failed [ 443.135253][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.140121][T10280] FAT-fs (loop2): Directory bread(block 70) failed [ 443.156353][T10280] FAT-fs (loop2): Directory bread(block 71) failed [ 443.162746][T10280] FAT-fs (loop2): Directory bread(block 72) failed [ 443.165246][ T343] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 443.169168][T10280] FAT-fs (loop2): Directory bread(block 73) failed [ 443.182205][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.204808][ T343] usb 1-1: config 0 descriptor?? [ 443.538421][ T3105] hid (null): bogus close delimiter [ 443.540140][T10286] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 443.578394][T10278] loop1: detected capacity change from 0 to 131072 [ 443.609428][T10292] loop2: detected capacity change from 0 to 256 [ 443.649495][T10278] F2FS-fs (loop1): Test dummy encryption mode enabled [ 443.662432][T10292] FAT-fs (loop2): Directory bread(block 64) failed [ 443.670940][T10294] loop3: detected capacity change from 0 to 256 [ 443.677627][ T343] hid (null): bogus close delimiter [ 443.683221][T10278] F2FS-fs (loop1): invalid crc value [ 443.685509][T10292] FAT-fs (loop2): Directory bread(block 65) failed [ 443.694733][T10292] FAT-fs (loop2): Directory bread(block 66) failed [ 443.712800][T10292] FAT-fs (loop2): Directory bread(block 67) failed [ 443.719739][T10292] FAT-fs (loop2): Directory bread(block 68) failed [ 443.726158][T10292] FAT-fs (loop2): Directory bread(block 69) failed [ 443.727825][T10278] F2FS-fs (loop1): Found nat_bits in checkpoint [ 443.732478][T10292] FAT-fs (loop2): Directory bread(block 70) failed [ 443.745251][T10292] FAT-fs (loop2): Directory bread(block 71) failed [ 443.751609][T10292] FAT-fs (loop2): Directory bread(block 72) failed [ 443.758368][T10292] FAT-fs (loop2): Directory bread(block 73) failed [ 443.765899][T10294] FAT-fs (loop3): Directory bread(block 64) failed [ 443.785265][T10294] FAT-fs (loop3): Directory bread(block 65) failed [ 443.792527][T10294] FAT-fs (loop3): Directory bread(block 66) failed [ 443.801782][T10294] FAT-fs (loop3): Directory bread(block 67) failed [ 443.808536][T10294] FAT-fs (loop3): Directory bread(block 68) failed [ 443.812323][T10292] attempt to access beyond end of device [ 443.812323][T10292] loop2: rw=2049, want=1228, limit=256 [ 443.814912][T10294] FAT-fs (loop3): Directory bread(block 69) failed [ 443.832305][T10294] FAT-fs (loop3): Directory bread(block 70) failed [ 443.834380][T10278] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 443.838996][T10294] FAT-fs (loop3): Directory bread(block 71) failed [ 443.852436][T10294] FAT-fs (loop3): Directory bread(block 72) failed [ 443.858971][T10294] FAT-fs (loop3): Directory bread(block 73) failed [ 443.878737][T10300] loop2: detected capacity change from 0 to 256 [ 443.889154][T10300] FAT-fs (loop2): Unrecognized mount option "À" or missing value [ 443.950894][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 444.033345][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 444.215344][ T343] uclogic 0003:256C:006D.00FC: failed retrieving Huion firmware version: -71 [ 444.224088][ T343] uclogic 0003:256C:006D.00FC: failed probing parameters: -71 [ 444.231469][ T343] uclogic: probe of 0003:256C:006D.00FC failed with error -71 [ 444.240059][ T343] usb 1-1: USB disconnect, device number 79 [ 444.371042][T10308] loop2: detected capacity change from 0 to 512 [ 444.602456][T10308] EXT4-fs (loop2): orphan cleanup on readonly fs [ 444.609865][T10308] EXT4-fs (loop2): 1 orphan inode deleted [ 444.615590][ T3105] uclogic 0003:256C:006D.00FB: failed retrieving Huion firmware version: -71 [ 444.624415][ T3105] uclogic 0003:256C:006D.00FB: failed probing parameters: -71 [ 444.631926][ T3105] uclogic: probe of 0003:256C:006D.00FB failed with error -71 [ 444.640652][ T3105] usb 5-1: USB disconnect, device number 77 [ 444.655366][T10308] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 444.660441][T10313] loop3: detected capacity change from 0 to 256 [ 444.978039][T10318] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 445.581747][T10330] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.615304][ T6] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 445.622923][T10336] loop0: detected capacity change from 0 to 256 [ 445.651335][T10336] FAT-fs (loop0): Directory bread(block 64) failed [ 445.657743][T10336] FAT-fs (loop0): Directory bread(block 65) failed [ 445.664086][T10336] FAT-fs (loop0): Directory bread(block 66) failed [ 445.670582][T10336] FAT-fs (loop0): Directory bread(block 67) failed [ 445.677095][T10336] FAT-fs (loop0): Directory bread(block 68) failed [ 445.683426][T10336] FAT-fs (loop0): Directory bread(block 69) failed [ 445.689902][T10336] FAT-fs (loop0): Directory bread(block 70) failed [ 445.696265][T10336] FAT-fs (loop0): Directory bread(block 71) failed [ 445.702790][T10336] FAT-fs (loop0): Directory bread(block 72) failed [ 445.709283][T10336] FAT-fs (loop0): Directory bread(block 73) failed [ 445.724709][T10336] attempt to access beyond end of device [ 445.724709][T10336] loop0: rw=2049, want=1228, limit=256 [ 445.795245][ T341] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 445.985237][ T343] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 445.995451][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.006341][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.016195][ T6] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 446.062303][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.071138][ T6] usb 4-1: config 0 descriptor?? [ 446.111482][T10344] loop0: detected capacity change from 0 to 131072 [ 446.148441][T10344] F2FS-fs (loop0): Test dummy encryption mode enabled [ 446.155384][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.170097][T10344] F2FS-fs (loop0): invalid crc value [ 446.175312][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.187255][ T341] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 446.212326][T10353] loop4: detected capacity change from 0 to 512 [ 446.243123][T10344] F2FS-fs (loop0): Found nat_bits in checkpoint [ 446.365085][T10353] EXT4-fs (loop4): orphan cleanup on readonly fs [ 446.373865][T10353] EXT4-fs (loop4): 1 orphan inode deleted [ 446.379806][T10344] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 446.380274][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.395977][T10353] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 446.407175][ T341] usb 3-1: config 0 descriptor?? [ 446.568291][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 446.568305][ T30] audit: type=1326 audit(1718902325.894:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10343 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd690c49f29 code=0x0 [ 446.665343][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.676092][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.685644][ T343] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 446.694454][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.703096][ T343] usb 2-1: config 0 descriptor?? [ 446.818146][T10313] syz-executor.3[10313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.818704][T10313] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 446.838167][T10313] FAT-fs (loop3): Filesystem has been set read-only [ 446.875521][ T6] hid-led: probe of 0003:27B8:01ED.00FD failed with error -71 [ 446.885462][ T341] hid (null): bogus close delimiter [ 446.885701][ T6] usb 4-1: USB disconnect, device number 83 [ 447.125011][T10364] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 447.242590][ T3105] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 447.250301][ T343] hid (null): bogus close delimiter [ 447.503695][T10368] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 447.525297][ T341] usb 3-1: string descriptor 0 read error: -71 [ 447.545334][ T341] uclogic 0003:256C:006D.00FE: failed retrieving string descriptor #200: -71 [ 447.553993][ T341] uclogic 0003:256C:006D.00FE: failed retrieving pen parameters: -71 [ 447.562136][ T341] uclogic 0003:256C:006D.00FE: failed probing pen v2 parameters: -71 [ 447.570097][ T341] uclogic 0003:256C:006D.00FE: failed probing parameters: -71 [ 447.577502][ T341] uclogic: probe of 0003:256C:006D.00FE failed with error -71 [ 447.588038][T10371] loop3: detected capacity change from 0 to 512 [ 447.592414][ T341] usb 3-1: USB disconnect, device number 70 [ 447.625684][ T3105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.636626][ T3105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.646434][ T3105] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 447.655794][ T3105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.663925][T10371] EXT4-fs (loop3): orphan cleanup on readonly fs [ 447.671124][T10371] EXT4-fs (loop3): 1 orphan inode deleted [ 447.677161][ T3105] usb 1-1: config 0 descriptor?? [ 447.682310][T10371] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 447.835360][ T343] uclogic 0003:256C:006D.00FF: failed retrieving Huion firmware version: -71 [ 447.844041][ T343] uclogic 0003:256C:006D.00FF: failed probing parameters: -71 [ 447.851506][ T343] uclogic: probe of 0003:256C:006D.00FF failed with error -71 [ 447.859887][ T343] usb 2-1: USB disconnect, device number 85 [ 447.974623][T10378] loop4: detected capacity change from 0 to 256 [ 448.040218][T10378] FAT-fs (loop4): Directory bread(block 64) failed [ 448.046885][T10378] FAT-fs (loop4): Directory bread(block 65) failed [ 448.053330][T10378] FAT-fs (loop4): Directory bread(block 66) failed [ 448.059688][T10378] FAT-fs (loop4): Directory bread(block 67) failed [ 448.066258][T10378] FAT-fs (loop4): Directory bread(block 68) failed [ 448.072571][T10378] FAT-fs (loop4): Directory bread(block 69) failed [ 448.078963][T10378] FAT-fs (loop4): Directory bread(block 70) failed [ 448.085537][T10378] FAT-fs (loop4): Directory bread(block 71) failed [ 448.091915][T10378] FAT-fs (loop4): Directory bread(block 72) failed [ 448.098235][T10378] FAT-fs (loop4): Directory bread(block 73) failed [ 448.132549][T10378] attempt to access beyond end of device [ 448.132549][T10378] loop4: rw=2049, want=1228, limit=256 [ 448.155556][ T3105] hid (null): bogus close delimiter [ 448.192731][T10387] loop4: detected capacity change from 0 to 256 [ 448.398091][T10387] FAT-fs (loop4): Unrecognized mount option "À" or missing value [ 448.466703][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 448.558090][T10401] loop4: detected capacity change from 0 to 256 [ 448.790435][T10402] loop1: detected capacity change from 0 to 512 [ 448.882073][T10402] EXT4-fs (loop1): orphan cleanup on readonly fs [ 448.891932][T10402] EXT4-fs (loop1): 1 orphan inode deleted [ 448.903200][T10402] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 448.925245][ T341] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 449.045314][ T3105] uclogic 0003:256C:006D.0100: failed retrieving Huion firmware version: -71 [ 449.054215][ T3105] uclogic 0003:256C:006D.0100: failed probing parameters: -71 [ 449.161519][T10408] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 449.258180][ T3105] uclogic: probe of 0003:256C:006D.0100 failed with error -71 [ 449.269270][ T3105] usb 1-1: USB disconnect, device number 80 [ 449.347126][ T341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.361154][ T341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.371038][ T341] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 449.380395][ T341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.389412][ T341] usb 5-1: config 0 descriptor?? [ 449.672421][T10420] loop0: detected capacity change from 0 to 256 [ 449.735261][ T336] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 449.747659][T10420] FAT-fs (loop0): Directory bread(block 64) failed [ 449.754003][T10420] FAT-fs (loop0): Directory bread(block 65) failed [ 449.760482][T10420] FAT-fs (loop0): Directory bread(block 66) failed [ 449.767076][T10420] FAT-fs (loop0): Directory bread(block 67) failed [ 449.773424][T10420] FAT-fs (loop0): Directory bread(block 68) failed [ 449.779924][T10420] FAT-fs (loop0): Directory bread(block 69) failed [ 449.786564][T10420] FAT-fs (loop0): Directory bread(block 70) failed [ 449.792869][T10420] FAT-fs (loop0): Directory bread(block 71) failed [ 449.799270][T10420] FAT-fs (loop0): Directory bread(block 72) failed [ 449.808297][T10420] FAT-fs (loop0): Directory bread(block 73) failed [ 449.836934][T10420] attempt to access beyond end of device [ 449.836934][T10420] loop0: rw=2049, want=1228, limit=256 [ 449.935667][T10425] loop0: detected capacity change from 0 to 512 [ 449.979374][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 450.003248][T10425] EXT4-fs (loop0): orphan cleanup on readonly fs [ 450.010971][T10425] EXT4-fs (loop0): 1 orphan inode deleted [ 450.026968][T10425] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 450.076306][T10401] syz-executor.4[10401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.076842][T10401] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 450.096439][T10401] FAT-fs (loop4): Filesystem has been set read-only [ 450.105269][ T336] usb 4-1: config index 0 descriptor too short (expected 10770, got 27) [ 450.115476][ T336] usb 4-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 450.124023][ T336] usb 4-1: config 48 has an invalid descriptor of length 235, skipping remainder of the config [ 450.134516][ T341] hid-led: probe of 0003:27B8:01ED.0101 failed with error -71 [ 450.141954][ T336] usb 4-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 450.154757][ T341] usb 5-1: USB disconnect, device number 78 [ 450.380587][ T336] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 450.391476][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.399328][ T336] usb 4-1: Product: syz [ 450.403248][ T336] usb 4-1: Manufacturer: syz [ 450.407704][ T336] usb 4-1: SerialNumber: syz [ 450.687353][ T30] audit: type=1326 audit(1718902330.014:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63fed8f29 code=0x7ffc0000 [ 450.711397][ T30] audit: type=1326 audit(1718902330.014:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63fed8f29 code=0x7ffc0000 [ 450.736806][ T30] audit: type=1326 audit(1718902330.014:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc63fed8f29 code=0x7ffc0000 [ 450.746241][ T336] usb 4-1: USB disconnect, device number 84 [ 450.768069][ T30] audit: type=1326 audit(1718902330.014:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63fed8f29 code=0x7ffc0000 [ 450.793415][ T30] audit: type=1326 audit(1718902330.014:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc63fed8f29 code=0x7ffc0000 [ 450.817651][ T30] audit: type=1326 audit(1718902330.014:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63fed8f29 code=0x7ffc0000 [ 450.841883][ T30] audit: type=1326 audit(1718902330.014:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fc63fed8f29 code=0x7ffc0000 [ 450.870994][ T30] audit: type=1326 audit(1718902330.014:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63fed8f29 code=0x7ffc0000 [ 450.895334][ T30] audit: type=1326 audit(1718902330.014:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc63fed8f29 code=0x7ffc0000 [ 450.952107][T10451] loop2: detected capacity change from 0 to 256 [ 451.133808][T10455] loop0: detected capacity change from 0 to 512 [ 451.167048][T10451] FAT-fs (loop2): Directory bread(block 64) failed [ 451.188375][T10451] FAT-fs (loop2): Directory bread(block 65) failed [ 451.196439][T10451] FAT-fs (loop2): Directory bread(block 66) failed [ 451.205152][T10451] FAT-fs (loop2): Directory bread(block 67) failed [ 451.211915][T10451] FAT-fs (loop2): Directory bread(block 68) failed [ 451.218896][T10451] FAT-fs (loop2): Directory bread(block 69) failed [ 451.225589][T10451] FAT-fs (loop2): Directory bread(block 70) failed [ 451.233334][T10455] EXT4-fs (loop0): orphan cleanup on readonly fs [ 451.240488][T10451] FAT-fs (loop2): Directory bread(block 71) failed [ 451.248359][T10451] FAT-fs (loop2): Directory bread(block 72) failed [ 451.254748][T10451] FAT-fs (loop2): Directory bread(block 73) failed [ 451.265018][T10455] EXT4-fs (loop0): 1 orphan inode deleted [ 451.278152][T10455] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 451.466185][T10460] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 451.585311][T10462] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 451.625116][T10465] loop3: detected capacity change from 0 to 16 [ 451.755997][T10465] erofs: (device loop3): mounted with root inode @ nid 36. [ 451.764951][T10465] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 451.804818][T10476] loop4: detected capacity change from 0 to 256 [ 451.828325][T10476] FAT-fs (loop4): Unrecognized mount option "À" or missing value [ 451.873367][T10479] loop2: detected capacity change from 0 to 256 [ 451.968362][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.042658][T10482] loop4: detected capacity change from 0 to 512 [ 452.098418][T10482] EXT4-fs (loop4): orphan cleanup on readonly fs [ 452.105727][T10482] EXT4-fs (loop4): 1 orphan inode deleted [ 452.111591][T10482] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 452.225392][ T341] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 452.309935][T10489] loop1: detected capacity change from 0 to 512 [ 452.389056][T10489] EXT4-fs (loop1): 1 orphan inode deleted [ 452.395126][T10489] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 452.408251][T10489] ext4 filesystem being mounted at /root/syzkaller-testdir4257032083/syzkaller.0HpW1y/435/file1 supports timestamps until 2038 (0x7fffffff) [ 452.429110][T10488] overlayfs: './file1' not a directory [ 452.645778][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.729133][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.776669][ T341] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 452.792820][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.809194][ T341] usb 3-1: config 0 descriptor?? [ 453.377083][T10520] loop3: detected capacity change from 0 to 256 [ 453.455741][T10520] FAT-fs (loop3): Unrecognized mount option "À" or missing value [ 453.501511][T10479] syz-executor.2[10479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.502162][T10479] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 453.521905][T10479] FAT-fs (loop2): Filesystem has been set read-only [ 453.525531][ T336] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 453.575320][ T341] hid-led: probe of 0003:27B8:01ED.0102 failed with error -71 [ 453.599656][ T341] usb 3-1: USB disconnect, device number 71 [ 453.611966][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 453.622793][T10525] loop4: detected capacity change from 0 to 16 [ 453.695765][T10525] erofs: (device loop4): mounted with root inode @ nid 36. [ 453.704214][T10525] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 453.878537][T10538] loop0: detected capacity change from 0 to 512 [ 453.905484][ T336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 453.970693][T10538] EXT4-fs (loop0): 1 orphan inode deleted [ 453.976387][T10538] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 453.987435][T10538] ext4 filesystem being mounted at /root/syzkaller-testdir193892579/syzkaller.8K0MMI/191/file1 supports timestamps until 2038 (0x7fffffff) [ 454.010066][T10538] overlayfs: './file1' not a directory [ 454.085295][ T336] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 454.094319][ T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.102464][ T336] usb 2-1: Product: syz [ 454.112020][ T336] usb 2-1: Manufacturer: syz [ 454.116528][ T336] usb 2-1: SerialNumber: syz [ 454.122974][ T336] usb 2-1: config 0 descriptor?? [ 454.436346][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 454.436362][ T30] audit: type=1326 audit(1718902333.764:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 454.466428][ T336] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 454.473157][ T30] audit: type=1326 audit(1718902333.764:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 454.498167][ T336] usb 2-1: USB disconnect, device number 86 [ 454.504105][ T30] audit: type=1326 audit(1718902333.764:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 454.533425][ T30] audit: type=1326 audit(1718902333.764:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 454.558753][ T30] audit: type=1326 audit(1718902333.764:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 454.602492][ T30] audit: type=1326 audit(1718902333.764:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 454.626557][ T30] audit: type=1326 audit(1718902333.764:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 454.658803][ T30] audit: type=1326 audit(1718902333.764:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 454.684486][ T30] audit: type=1326 audit(1718902333.764:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 454.708736][ T30] audit: type=1326 audit(1718902333.764:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 454.865282][ T328] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 454.889418][T10557] loop0: detected capacity change from 0 to 512 [ 455.151847][T10557] EXT4-fs (loop0): orphan cleanup on readonly fs [ 455.161953][T10557] EXT4-fs (loop0): 1 orphan inode deleted [ 455.169049][T10557] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 455.243494][T10564] loop1: detected capacity change from 0 to 256 [ 455.255308][ T328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.269972][ T328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.276333][T10564] FAT-fs (loop1): Unrecognized mount option "À" or missing value [ 455.280061][ T328] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 455.296274][ T328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.304832][ T328] usb 5-1: config 0 descriptor?? [ 455.365031][T10550] loop3: detected capacity change from 0 to 131072 [ 455.403730][T10550] F2FS-fs (loop3): Test dummy encryption mode enabled [ 455.425554][T10550] F2FS-fs (loop3): invalid crc value [ 455.448612][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 455.461750][T10550] F2FS-fs (loop3): Found nat_bits in checkpoint [ 455.521857][T10550] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 455.687094][T10582] loop0: detected capacity change from 0 to 16 [ 455.785679][ T328] hid (null): bogus close delimiter [ 455.790828][T10582] erofs: (device loop0): mounted with root inode @ nid 36. [ 455.802420][T10582] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 455.985262][ T39] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 456.006401][T10590] loop2: detected capacity change from 0 to 256 [ 456.070792][T10592] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 456.275544][ T328] uclogic 0003:256C:006D.0103: failed retrieving Huion firmware version: -71 [ 456.284274][ T328] uclogic 0003:256C:006D.0103: failed probing parameters: -71 [ 456.291922][ T328] uclogic: probe of 0003:256C:006D.0103 failed with error -71 [ 456.300454][ T328] usb 5-1: USB disconnect, device number 79 [ 456.335273][ T336] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 456.355395][ T39] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 456.363224][ T39] usb 2-1: config 0 has no interface number 0 [ 456.365257][ T343] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 456.525501][ T39] usb 2-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=9b.0a [ 456.534340][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.542247][ T39] usb 2-1: Product: syz [ 456.546287][ T39] usb 2-1: Manufacturer: syz [ 456.550684][ T39] usb 2-1: SerialNumber: syz [ 456.556201][ T39] usb 2-1: config 0 descriptor?? [ 456.595918][ T39] ftdi_sio 2-1:0.1: FTDI USB Serial Device converter detected [ 456.603738][ T39] usb 2-1: Detected FT-X [ 456.685405][T10599] loop0: detected capacity change from 0 to 512 [ 456.705627][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.717001][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.730901][ T336] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 456.740923][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.781614][ T336] usb 3-1: config 0 descriptor?? [ 456.801646][T10599] EXT4-fs (loop0): orphan cleanup on readonly fs [ 456.808070][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 456.816665][T10599] EXT4-fs (loop0): 1 orphan inode deleted [ 456.822402][T10602] loop4: detected capacity change from 0 to 256 [ 456.824565][T10599] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 456.842664][ T39] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 456.865303][ T39] ftdi_sio 2-1:0.1: GPIO initialisation failed: -71 [ 456.872293][ T39] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 456.881646][ T39] usb 2-1: USB disconnect, device number 87 [ 456.890583][T10602] FAT-fs (loop4): Unrecognized mount option "À" or missing value [ 456.899005][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 456.908676][ T39] ftdi_sio 2-1:0.1: device disconnected [ 456.935338][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 457.001826][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 457.125339][ T343] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 457.134256][ T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.142283][ T343] usb 4-1: Product: syz [ 457.146313][ T343] usb 4-1: Manufacturer: syz [ 457.150697][ T343] usb 4-1: SerialNumber: syz [ 457.223792][T10610] loop4: detected capacity change from 0 to 512 [ 457.308482][T10610] EXT4-fs (loop4): orphan cleanup on readonly fs [ 457.321509][T10610] EXT4-fs (loop4): 1 orphan inode deleted [ 457.329655][T10610] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 457.412871][ T343] usb 4-1: config 0 descriptor?? [ 457.435728][T10590] syz-executor.2[10590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.436703][T10590] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 457.439577][T10614] loop1: detected capacity change from 0 to 256 [ 457.448674][T10590] FAT-fs (loop2): Filesystem has been set read-only [ 457.528534][T10614] FAT-fs (loop1): Directory bread(block 64) failed [ 457.535000][T10614] FAT-fs (loop1): Directory bread(block 65) failed [ 457.541716][ T336] usbhid 3-1:0.0: can't add hid device: -71 [ 457.542192][T10614] FAT-fs (loop1): Directory bread(block 66) failed [ 457.547793][ T336] usbhid: probe of 3-1:0.0 failed with error -71 [ 457.553842][T10614] FAT-fs (loop1): Directory bread(block 67) failed [ 457.561607][ T336] usb 3-1: USB disconnect, device number 72 [ 457.569632][T10614] FAT-fs (loop1): Directory bread(block 68) failed [ 457.579788][T10614] FAT-fs (loop1): Directory bread(block 69) failed [ 457.588559][T10614] FAT-fs (loop1): Directory bread(block 70) failed [ 457.601138][T10614] FAT-fs (loop1): Directory bread(block 71) failed [ 457.611822][T10614] FAT-fs (loop1): Directory bread(block 72) failed [ 457.618514][T10614] FAT-fs (loop1): Directory bread(block 73) failed [ 457.793209][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 457.995693][T10625] loop4: detected capacity change from 0 to 256 [ 458.335379][ T343] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 458.355264][ T1230] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 458.374843][T10629] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 458.389170][ T343] usb 4-1: USB disconnect, device number 85 [ 458.418684][T10635] loop1: detected capacity change from 0 to 256 [ 458.445943][T10635] FAT-fs (loop1): Unrecognized mount option "À" or missing value [ 458.817942][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 458.940537][T10627] loop2: detected capacity change from 0 to 131072 [ 458.995383][ T1230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.006188][ T1230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.015776][ T1230] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 459.024594][ T1230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.032936][ T1230] usb 5-1: config 0 descriptor?? [ 459.037620][T10627] F2FS-fs (loop2): Test dummy encryption mode enabled [ 459.056681][T10627] F2FS-fs (loop2): invalid crc value [ 459.063136][T10627] F2FS-fs (loop2): Found nat_bits in checkpoint [ 459.087614][T10627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 459.215549][ T336] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 459.415369][T10659] loop0: detected capacity change from 0 to 512 [ 459.596041][T10659] EXT4-fs (loop0): orphan cleanup on readonly fs [ 459.607074][T10659] EXT4-fs (loop0): 1 orphan inode deleted [ 459.613053][T10659] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 459.666117][ T336] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 459.673917][ T336] usb 2-1: config 0 has no interface number 0 [ 459.791016][T10625] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 459.799360][T10625] FAT-fs (loop4): Filesystem has been set read-only [ 459.835514][ T336] usb 2-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=9b.0a [ 459.844562][ T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.855904][ T336] usb 2-1: Product: syz [ 459.859981][ T336] usb 2-1: Manufacturer: syz [ 459.864466][ T336] usb 2-1: SerialNumber: syz [ 459.864635][ T1230] hid-led: probe of 0003:27B8:01ED.0104 failed with error -71 [ 459.877350][ T1230] usb 5-1: USB disconnect, device number 80 [ 459.882896][ T336] usb 2-1: config 0 descriptor?? [ 459.926763][ T336] ftdi_sio 2-1:0.1: FTDI USB Serial Device converter detected [ 459.938603][ T336] usb 2-1: Detected FT-X [ 460.155273][ T336] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 460.173392][T10668] loop3: detected capacity change from 0 to 131072 [ 460.175289][ T336] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 460.205466][ T336] ftdi_sio 2-1:0.1: GPIO initialisation failed: -71 [ 460.213026][ T336] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 460.226179][ T336] usb 2-1: USB disconnect, device number 88 [ 460.235523][ T336] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 460.250906][ T336] ftdi_sio 2-1:0.1: device disconnected [ 460.265825][T10668] F2FS-fs (loop3): Test dummy encryption mode enabled [ 460.273676][T10668] F2FS-fs (loop3): invalid crc value [ 460.289579][T10668] F2FS-fs (loop3): Found nat_bits in checkpoint [ 460.311864][T10668] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 460.416127][T10680] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 460.670755][T10692] loop2: detected capacity change from 0 to 512 [ 460.678955][ T30] kauditd_printk_skb: 3066 callbacks suppressed [ 460.678969][ T30] audit: type=1326 audit(1718902340.004:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63fed8f29 code=0x0 [ 460.791481][T10692] EXT4-fs (loop2): orphan cleanup on readonly fs [ 460.799252][T10692] EXT4-fs (loop2): 1 orphan inode deleted [ 460.808819][T10692] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 461.339407][T10707] 9pnet: Insufficient options for proto=fd [ 461.373516][T10710] loop0: detected capacity change from 0 to 256 [ 461.414591][T10711] loop4: detected capacity change from 0 to 512 [ 461.425882][T10710] FAT-fs (loop0): Unrecognized mount option "À" or missing value [ 461.491629][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 461.556475][T10718] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.571425][T10711] EXT4-fs (loop4): 1 orphan inode deleted [ 461.592465][T10711] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 461.635609][T10711] ext4 filesystem being mounted at /root/syzkaller-testdir3500441688/syzkaller.8H4Ml5/219/file1 supports timestamps until 2038 (0x7fffffff) [ 461.766216][T10711] overlayfs: './file1' not a directory [ 461.771933][T10711] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor.4: deleted inode referenced: 16 [ 461.841597][T10733] loop2: detected capacity change from 0 to 512 [ 461.934765][T10733] EXT4-fs (loop2): orphan cleanup on readonly fs [ 461.942488][T10733] EXT4-fs (loop2): 1 orphan inode deleted [ 461.948665][T10733] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 462.097393][T10702] loop3: detected capacity change from 0 to 131072 [ 462.134689][T10702] F2FS-fs (loop3): Test dummy encryption mode enabled [ 462.155704][T10702] F2FS-fs (loop3): invalid crc value [ 462.177995][T10702] F2FS-fs (loop3): Found nat_bits in checkpoint [ 462.244830][T10702] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 462.286256][T10747] 9pnet: Insufficient options for proto=fd [ 462.442720][T10751] loop4: detected capacity change from 0 to 512 [ 462.556602][T10751] EXT4-fs (loop4): orphan cleanup on readonly fs [ 462.564087][T10751] EXT4-fs (loop4): 1 orphan inode deleted [ 462.570488][T10751] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 463.118994][ T30] audit: type=1326 audit(1718902342.414:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63fed8f29 code=0x0 [ 463.164532][T10729] loop1: detected capacity change from 0 to 131072 [ 463.206549][T10766] loop4: detected capacity change from 0 to 256 [ 463.226085][T10729] F2FS-fs (loop1): Test dummy encryption mode enabled [ 463.234218][T10729] F2FS-fs (loop1): invalid crc value [ 463.240984][T10729] F2FS-fs (loop1): Found nat_bits in checkpoint [ 463.282427][T10729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 463.315575][T10776] loop3: detected capacity change from 0 to 256 [ 463.375835][T10776] FAT-fs (loop3): Unrecognized mount option "À" or missing value [ 463.489920][ T30] audit: type=1326 audit(1718902342.814:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x0 [ 463.513558][ T343] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 463.516890][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.562131][ T336] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 463.895253][ T341] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 463.925462][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.936307][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.946150][ T336] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 463.954989][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.963843][ T336] usb 5-1: config 0 descriptor?? [ 464.105362][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.116305][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.125993][ T343] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 464.134864][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.143480][ T343] usb 1-1: config 0 descriptor?? [ 464.195360][ T6] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 464.255565][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.266332][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.276009][ T341] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 464.284865][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.294057][ T341] usb 4-1: config 0 descriptor?? [ 464.434492][T10766] syz-executor.4[10766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.435511][T10766] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 464.454785][T10766] FAT-fs (loop4): Filesystem has been set read-only [ 464.484600][T10794] loop2: detected capacity change from 0 to 512 [ 464.516990][T10794] EXT4-fs (loop2): orphan cleanup on readonly fs [ 464.524141][T10794] EXT4-fs (loop2): 1 orphan inode deleted [ 464.530027][ T336] usbhid 5-1:0.0: can't add hid device: -71 [ 464.536208][ T336] usbhid: probe of 5-1:0.0 failed with error -71 [ 464.542923][ T336] usb 5-1: USB disconnect, device number 81 [ 464.549641][T10794] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 464.625472][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.636375][ T343] hid (null): bogus close delimiter [ 464.642169][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.652228][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 464.661050][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.669399][ T6] usb 2-1: config 0 descriptor?? [ 464.775443][ T341] hid (null): bogus close delimiter [ 465.115318][ T343] uclogic 0003:256C:006D.0105: failed retrieving Huion firmware version: -71 [ 465.124099][ T343] uclogic 0003:256C:006D.0105: failed probing parameters: -71 [ 465.131685][ T343] uclogic: probe of 0003:256C:006D.0105 failed with error -71 [ 465.140231][ T343] usb 1-1: USB disconnect, device number 81 [ 465.155614][ T6] hid (null): bogus close delimiter [ 465.235287][ T341] uclogic 0003:256C:006D.0106: failed retrieving Huion firmware version: -71 [ 465.243952][ T341] uclogic 0003:256C:006D.0106: failed probing parameters: -71 [ 465.251898][ T341] uclogic: probe of 0003:256C:006D.0106 failed with error -71 [ 465.260552][ T341] usb 4-1: USB disconnect, device number 86 [ 465.418323][T10804] loop2: detected capacity change from 0 to 512 [ 465.487372][T10804] EXT4-fs (loop2): orphan cleanup on readonly fs [ 465.494933][T10804] EXT4-fs (loop2): 1 orphan inode deleted [ 465.500994][T10804] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 465.757086][T10815] loop3: detected capacity change from 0 to 256 [ 465.820477][T10815] FAT-fs (loop3): Directory bread(block 64) failed [ 465.827219][ T6] uclogic 0003:256C:006D.0107: failed retrieving Huion firmware version: -71 [ 465.836139][T10815] FAT-fs (loop3): Directory bread(block 65) failed [ 465.842909][ T6] uclogic 0003:256C:006D.0107: failed probing parameters: -71 [ 465.850642][T10815] FAT-fs (loop3): Directory bread(block 66) failed [ 465.857956][ T6] uclogic: probe of 0003:256C:006D.0107 failed with error -71 [ 465.865505][T10815] FAT-fs (loop3): Directory bread(block 67) failed [ 465.877036][ T6] usb 2-1: USB disconnect, device number 89 [ 465.882972][T10815] FAT-fs (loop3): Directory bread(block 68) failed [ 465.895649][T10815] FAT-fs (loop3): Directory bread(block 69) failed [ 465.902985][T10815] FAT-fs (loop3): Directory bread(block 70) failed [ 465.909785][T10815] FAT-fs (loop3): Directory bread(block 71) failed [ 465.916588][T10815] FAT-fs (loop3): Directory bread(block 72) failed [ 465.922992][T10815] FAT-fs (loop3): Directory bread(block 73) failed [ 465.948189][T10817] loop4: detected capacity change from 0 to 256 [ 465.975460][T10815] attempt to access beyond end of device [ 465.975460][T10815] loop3: rw=2049, want=1228, limit=256 [ 466.016695][T10817] FAT-fs (loop4): Unrecognized mount option "À" or missing value [ 466.217855][T10822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 466.441465][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 466.476369][T10832] loop4: detected capacity change from 0 to 256 [ 466.555863][T10832] FAT-fs (loop4): Unrecognized mount option "À" or missing value [ 466.826957][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 467.025260][ T1230] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 467.036295][T10848] loop4: detected capacity change from 0 to 256 [ 467.100739][T10848] FAT-fs (loop4): Directory bread(block 64) failed [ 467.107153][T10848] FAT-fs (loop4): Directory bread(block 65) failed [ 467.113703][T10848] FAT-fs (loop4): Directory bread(block 66) failed [ 467.121459][T10848] FAT-fs (loop4): Directory bread(block 67) failed [ 467.128059][T10848] FAT-fs (loop4): Directory bread(block 68) failed [ 467.162805][T10826] loop2: detected capacity change from 0 to 131072 [ 467.175330][T10848] FAT-fs (loop4): Directory bread(block 69) failed [ 467.200084][T10826] F2FS-fs (loop2): Test dummy encryption mode enabled [ 467.208605][T10848] FAT-fs (loop4): Directory bread(block 70) failed [ 467.224175][T10848] FAT-fs (loop4): Directory bread(block 71) failed [ 467.233030][T10826] F2FS-fs (loop2): invalid crc value [ 467.238996][T10848] FAT-fs (loop4): Directory bread(block 72) failed [ 467.247054][T10848] FAT-fs (loop4): Directory bread(block 73) failed [ 467.277668][T10826] F2FS-fs (loop2): Found nat_bits in checkpoint [ 467.304543][T10848] attempt to access beyond end of device [ 467.304543][T10848] loop4: rw=2049, want=1228, limit=256 [ 467.320519][T10826] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 467.370283][T10859] 9pnet: Insufficient options for proto=fd [ 467.464758][T10863] loop4: detected capacity change from 0 to 512 [ 467.579417][T10863] EXT4-fs (loop4): orphan cleanup on readonly fs [ 467.587193][T10863] EXT4-fs (loop4): 1 orphan inode deleted [ 467.593115][T10863] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 467.655284][ T328] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 467.668470][ T30] audit: type=1326 audit(1718902346.994:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10824 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd330e7ff29 code=0x0 [ 467.765336][ T1230] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 467.830227][T10867] loop3: detected capacity change from 0 to 256 [ 467.893897][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 467.918708][T10867] FAT-fs (loop3): Unrecognized mount option "À" or missing value [ 467.920363][T10875] loop2: detected capacity change from 0 to 256 [ 467.945333][ T1230] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 467.954250][ T1230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.962068][ T1230] usb 2-1: Product: syz [ 467.966064][ T1230] usb 2-1: Manufacturer: syz [ 467.970421][ T1230] usb 2-1: SerialNumber: syz [ 467.975934][T10875] FAT-fs (loop2): Unrecognized mount option "À" or missing value [ 467.980084][ T1230] usb 2-1: config 0 descriptor?? [ 468.015534][T10838] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 468.022392][ T328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.033577][ T328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.043836][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 468.053139][ T328] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 468.062216][ T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.071411][ T328] usb 1-1: config 0 descriptor?? [ 468.150229][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 468.180824][T10884] loop3: detected capacity change from 0 to 256 [ 468.440966][ T30] audit: type=1326 audit(1718902347.764:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10837 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 468.444371][T10884] FAT-fs (loop3): Directory bread(block 64) failed [ 468.469760][ T30] audit: type=1326 audit(1718902347.764:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10837 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 468.472099][T10884] FAT-fs (loop3): Directory bread(block 65) failed [ 468.495913][ T30] audit: type=1326 audit(1718902347.794:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10837 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 468.503042][T10884] FAT-fs (loop3): Directory bread(block 66) failed [ 468.526251][ T30] audit: type=1326 audit(1718902347.794:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10837 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 468.532249][T10884] FAT-fs (loop3): Directory bread(block 67) failed [ 468.556524][ T30] audit: type=1326 audit(1718902347.794:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10837 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 468.562385][T10884] FAT-fs (loop3): Directory bread(block 68) failed [ 468.586869][ T328] hid (null): bogus close delimiter [ 468.592490][T10884] FAT-fs (loop3): Directory bread(block 69) failed [ 468.597712][ T30] audit: type=1326 audit(1718902347.794:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10837 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 468.603951][T10884] FAT-fs (loop3): Directory bread(block 70) failed [ 468.629630][ T30] audit: type=1326 audit(1718902347.794:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10837 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 468.636520][T10884] FAT-fs (loop3): Directory bread(block 71) failed [ 468.658312][ T30] audit: type=1326 audit(1718902347.794:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10837 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 468.688394][ T30] audit: type=1326 audit(1718902347.794:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10837 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5133b80f29 code=0x7ffc0000 [ 468.688767][T10884] FAT-fs (loop3): Directory bread(block 72) failed [ 468.718902][T10884] FAT-fs (loop3): Directory bread(block 73) failed [ 468.737455][ T1230] usb 2-1: USB disconnect, device number 90 [ 468.748162][T10884] attempt to access beyond end of device [ 468.748162][T10884] loop3: rw=2049, want=1228, limit=256 [ 468.763403][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 469.363065][T10900] loop2: detected capacity change from 0 to 256 [ 469.450580][T10900] FAT-fs (loop2): Directory bread(block 64) failed [ 469.457082][T10900] FAT-fs (loop2): Directory bread(block 65) failed [ 469.463567][T10900] FAT-fs (loop2): Directory bread(block 66) failed [ 469.473558][T10900] FAT-fs (loop2): Directory bread(block 67) failed [ 469.480460][T10900] FAT-fs (loop2): Directory bread(block 68) failed [ 469.488578][T10900] FAT-fs (loop2): Directory bread(block 69) failed [ 469.495033][T10900] FAT-fs (loop2): Directory bread(block 70) failed [ 469.501715][T10900] FAT-fs (loop2): Directory bread(block 71) failed [ 469.508634][ T328] uclogic 0003:256C:006D.0108: failed retrieving Huion firmware version: -71 [ 469.517476][T10900] FAT-fs (loop2): Directory bread(block 72) failed [ 469.523855][ T328] uclogic 0003:256C:006D.0108: failed probing parameters: -71 [ 469.531520][T10900] FAT-fs (loop2): Directory bread(block 73) failed [ 469.538074][ T328] uclogic: probe of 0003:256C:006D.0108 failed with error -71 [ 469.636261][ T328] usb 1-1: USB disconnect, device number 82 [ 469.738214][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 469.906700][T10911] loop4: detected capacity change from 0 to 256 [ 469.957266][T10913] loop3: detected capacity change from 0 to 256 [ 470.024903][T10911] FAT-fs (loop4): Unrecognized mount option "À" or missing value [ 470.033609][T10913] FAT-fs (loop3): Unrecognized mount option "À" or missing value [ 470.100120][T10902] loop1: detected capacity change from 0 to 131072 [ 470.145750][T10902] F2FS-fs (loop1): Test dummy encryption mode enabled [ 470.164021][T10902] F2FS-fs (loop1): invalid crc value [ 470.191086][T10902] F2FS-fs (loop1): Found nat_bits in checkpoint [ 470.226453][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 470.248832][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 470.362008][T10902] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 470.436190][T10939] loop0: detected capacity change from 0 to 16 [ 470.443101][T10938] loop4: detected capacity change from 0 to 16 [ 470.628301][T10939] erofs: (device loop0): mounted with root inode @ nid 36. [ 470.743550][T10938] erofs: (device loop4): mounted with root inode @ nid 36. [ 470.864294][T10938] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 470.965268][ T343] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 471.280049][T10952] loop1: detected capacity change from 0 to 256 [ 471.543077][T10952] FAT-fs (loop1): Directory bread(block 64) failed [ 471.563949][T10952] FAT-fs (loop1): Directory bread(block 65) failed [ 471.571197][T10952] FAT-fs (loop1): Directory bread(block 66) failed [ 471.577838][T10952] FAT-fs (loop1): Directory bread(block 67) failed [ 471.584220][T10952] FAT-fs (loop1): Directory bread(block 68) failed [ 471.590727][ T343] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 471.590870][T10952] FAT-fs (loop1): Directory bread(block 69) failed [ 471.607019][T10952] FAT-fs (loop1): Directory bread(block 70) failed [ 471.613538][T10952] FAT-fs (loop1): Directory bread(block 71) failed [ 471.620308][T10952] FAT-fs (loop1): Directory bread(block 72) failed [ 471.627056][T10952] FAT-fs (loop1): Directory bread(block 73) failed [ 471.786824][ T343] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 471.789838][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 471.888956][ T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.896934][ T343] usb 4-1: Product: syz [ 471.900978][ T343] usb 4-1: Manufacturer: syz [ 471.905415][ T343] usb 4-1: SerialNumber: syz [ 471.905932][T10965] attempt to access beyond end of device [ 471.905932][T10965] loop1: rw=2049, want=1228, limit=256 [ 471.913423][ T343] usb 4-1: config 0 descriptor?? [ 471.945358][T10937] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 472.088062][ T3105] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 472.176236][T10974] loop1: detected capacity change from 0 to 512 [ 472.262850][T10976] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 472.388350][T10974] EXT4-fs (loop1): orphan cleanup on readonly fs [ 472.397299][T10974] EXT4-fs (loop1): 1 orphan inode deleted [ 472.403198][T10974] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 472.437613][ T343] usb 4-1: USB disconnect, device number 87 [ 472.535277][ T6] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 472.815438][ T3105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.826266][ T3105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.835890][ T3105] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 472.844747][ T3105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.853459][ T3105] usb 5-1: config 0 descriptor?? [ 472.990589][T10990] loop2: detected capacity change from 0 to 256 [ 473.055319][ T6] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 473.063301][ T6] usb 1-1: config 0 has no interface number 0 [ 473.075840][T10990] FAT-fs (loop2): Directory bread(block 64) failed [ 473.082350][T10990] FAT-fs (loop2): Directory bread(block 65) failed [ 473.088877][T10990] FAT-fs (loop2): Directory bread(block 66) failed [ 473.095415][T10990] FAT-fs (loop2): Directory bread(block 67) failed [ 473.102330][T10990] FAT-fs (loop2): Directory bread(block 68) failed [ 473.108818][T10990] FAT-fs (loop2): Directory bread(block 69) failed [ 473.115329][T10990] FAT-fs (loop2): Directory bread(block 70) failed [ 473.122027][T10990] FAT-fs (loop2): Directory bread(block 71) failed [ 473.128754][T10990] FAT-fs (loop2): Directory bread(block 72) failed [ 473.135192][T10990] FAT-fs (loop2): Directory bread(block 73) failed [ 473.275367][ T6] usb 1-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=9b.0a [ 473.675294][T10992] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 473.813585][T10986] loop3: detected capacity change from 0 to 131072 [ 473.839957][T10986] F2FS-fs (loop3): Test dummy encryption mode enabled [ 473.866117][ T3105] hid (null): bogus close delimiter [ 473.868167][T11000] loop1: detected capacity change from 0 to 256 [ 473.876042][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.885073][ T6] usb 1-1: Product: syz [ 473.887853][T10986] F2FS-fs (loop3): invalid crc value [ 473.892707][T11000] FAT-fs (loop1): Unrecognized mount option "À" or missing value [ 473.896466][T10986] F2FS-fs (loop3): Found nat_bits in checkpoint [ 473.903923][ T6] usb 1-1: Manufacturer: syz [ 473.912505][ T6] usb 1-1: SerialNumber: syz [ 473.925247][ T6] usb 1-1: config 0 descriptor?? [ 473.949142][T10986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 473.975922][ T6] ftdi_sio 1-1:0.1: FTDI USB Serial Device converter detected [ 473.983689][ T6] usb 1-1: Detected FT-X [ 474.044556][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.250694][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 474.275331][ T6] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 474.295339][ T6] ftdi_sio 1-1:0.1: GPIO initialisation failed: -71 [ 474.302582][ T6] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 474.302619][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 474.302630][ T30] audit: type=1326 audit(1718902353.624:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63fed8f29 code=0x0 [ 474.313698][ T6] usb 1-1: USB disconnect, device number 83 [ 474.347640][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 474.357428][ T6] ftdi_sio 1-1:0.1: device disconnected [ 474.410023][T11016] loop1: detected capacity change from 0 to 256 [ 474.470584][T11016] FAT-fs (loop1): Directory bread(block 64) failed [ 474.477391][T11016] FAT-fs (loop1): Directory bread(block 65) failed [ 474.483937][T11016] FAT-fs (loop1): Directory bread(block 66) failed [ 474.490300][T11016] FAT-fs (loop1): Directory bread(block 67) failed [ 474.496810][T11016] FAT-fs (loop1): Directory bread(block 68) failed [ 474.503207][T11016] FAT-fs (loop1): Directory bread(block 69) failed [ 474.509824][ T3105] uclogic 0003:256C:006D.0109: failed retrieving Huion firmware version: -71 [ 474.520342][T11016] FAT-fs (loop1): Directory bread(block 70) failed [ 474.526944][ T3105] uclogic 0003:256C:006D.0109: failed probing parameters: -71 [ 474.534272][T11016] FAT-fs (loop1): Directory bread(block 71) failed [ 474.540819][ T3105] uclogic: probe of 0003:256C:006D.0109 failed with error -71 [ 474.552687][T11016] FAT-fs (loop1): Directory bread(block 72) failed [ 474.556927][ T3105] usb 5-1: USB disconnect, device number 82 [ 474.566285][T11018] 9pnet: Insufficient options for proto=fd [ 474.570927][T11016] FAT-fs (loop1): Directory bread(block 73) failed [ 474.710525][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.984619][T11023] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 475.803418][T11035] loop2: detected capacity change from 0 to 512 [ 475.859057][T11039] loop4: detected capacity change from 0 to 256 [ 475.868637][T11035] EXT4-fs (loop2): orphan cleanup on readonly fs [ 475.876956][T11035] EXT4-fs (loop2): 1 orphan inode deleted [ 475.882916][T11035] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 475.903781][T11039] FAT-fs (loop4): Unrecognized mount option "À" or missing value [ 475.971523][T11050] loop1: detected capacity change from 0 to 512 [ 475.986904][T11050] EXT4-fs (loop1): orphan cleanup on readonly fs [ 475.994220][T11050] EXT4-fs (loop1): 1 orphan inode deleted [ 476.000328][T11050] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 476.033968][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 476.117095][T11059] loop2: detected capacity change from 0 to 256 [ 476.196410][T11059] FAT-fs (loop2): Unrecognized mount option "À" or missing value [ 476.215278][ T336] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 476.351395][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 476.456661][T11066] loop2: detected capacity change from 0 to 256 [ 476.510480][T11066] FAT-fs (loop2): Directory bread(block 64) failed [ 476.516992][T11066] FAT-fs (loop2): Directory bread(block 65) failed [ 476.523400][T11066] FAT-fs (loop2): Directory bread(block 66) failed [ 476.525890][T11054] loop0: detected capacity change from 0 to 131072 [ 476.530140][T11066] FAT-fs (loop2): Directory bread(block 67) failed [ 476.542576][T11066] FAT-fs (loop2): Directory bread(block 68) failed [ 476.549028][T11066] FAT-fs (loop2): Directory bread(block 69) failed [ 476.555689][T11066] FAT-fs (loop2): Directory bread(block 70) failed [ 476.562053][T11066] FAT-fs (loop2): Directory bread(block 71) failed [ 476.568562][T11066] FAT-fs (loop2): Directory bread(block 72) failed [ 476.574920][T11066] FAT-fs (loop2): Directory bread(block 73) failed [ 476.578873][T11054] F2FS-fs (loop0): Test dummy encryption mode enabled [ 476.605571][T11054] F2FS-fs (loop0): invalid crc value [ 476.612343][T11054] F2FS-fs (loop0): Found nat_bits in checkpoint [ 476.649758][T11054] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 476.675609][ T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.686415][ T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.696093][ T336] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 476.705017][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.713070][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 476.754413][ T336] usb 4-1: config 0 descriptor?? [ 476.754483][T11070] attempt to access beyond end of device [ 476.754483][T11070] loop2: rw=2049, want=1228, limit=256 [ 476.898156][ T30] audit: type=1326 audit(1718902356.224:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd690c49f29 code=0x0 [ 476.999290][T11076] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 478.147596][T11088] loop0: detected capacity change from 0 to 512 [ 478.239803][ T336] hid (null): bogus close delimiter [ 478.268890][T11096] loop4: detected capacity change from 0 to 256 [ 478.282773][T11088] EXT4-fs (loop0): orphan cleanup on readonly fs [ 478.290522][T11088] EXT4-fs (loop0): 1 orphan inode deleted [ 478.296780][T11088] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 479.070531][T11103] loop2: detected capacity change from 0 to 512 [ 479.548459][T11096] FAT-fs (loop4): Unrecognized mount option "À" or missing value [ 479.582606][T11103] EXT4-fs (loop2): orphan cleanup on readonly fs [ 479.590518][T11103] EXT4-fs (loop2): 1 orphan inode deleted [ 479.598229][T11103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 479.634419][T11107] loop1: detected capacity change from 0 to 16 [ 479.639382][T11109] loop3: detected capacity change from 0 to 256 [ 479.646891][ T336] usb 4-1: string descriptor 0 read error: -71 [ 479.667828][ T336] uclogic 0003:256C:006D.010A: failed retrieving string descriptor #200: -71 [ 479.676988][ T336] uclogic 0003:256C:006D.010A: failed retrieving pen parameters: -71 [ 479.685123][ T336] uclogic 0003:256C:006D.010A: failed probing pen v2 parameters: -71 [ 479.693207][ T336] uclogic 0003:256C:006D.010A: failed probing parameters: -71 [ 479.700976][ T336] uclogic: probe of 0003:256C:006D.010A failed with error -71 [ 479.745524][T11107] erofs: (device loop1): mounted with root inode @ nid 36. [ 479.759654][T11107] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 479.769426][T11111] 9pnet: Insufficient options for proto=fd [ 479.770558][ T336] usb 4-1: USB disconnect, device number 88 [ 479.804296][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 479.985796][T11123] loop0: detected capacity change from 0 to 512 [ 480.107860][T11123] EXT4-fs (loop0): 1 orphan inode deleted [ 480.192408][T11130] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 480.202901][ T336] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 480.215927][T11123] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 480.344728][T11123] ext4 filesystem being mounted at /root/syzkaller-testdir193892579/syzkaller.8K0MMI/225/file1 supports timestamps until 2038 (0x7fffffff) [ 480.417911][T11123] overlayfs: './file1' not a directory [ 480.522341][T11132] loop1: detected capacity change from 0 to 256 [ 480.585610][ T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.590125][T11132] FAT-fs (loop1): Directory bread(block 64) failed [ 480.602856][T11132] FAT-fs (loop1): Directory bread(block 65) failed [ 480.605502][ T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.610368][T11132] FAT-fs (loop1): Directory bread(block 66) failed [ 480.626852][T11132] FAT-fs (loop1): Directory bread(block 67) failed [ 480.635422][ T336] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 480.644483][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.647431][T11132] FAT-fs (loop1): Directory bread(block 68) failed [ 480.655956][ T336] usb 4-1: config 0 descriptor?? [ 480.674151][T11132] FAT-fs (loop1): Directory bread(block 69) failed [ 480.687854][T11132] FAT-fs (loop1): Directory bread(block 70) failed [ 480.700465][T11132] FAT-fs (loop1): Directory bread(block 71) failed [ 480.718705][T11132] FAT-fs (loop1): Directory bread(block 72) failed [ 480.734448][T11132] FAT-fs (loop1): Directory bread(block 73) failed [ 480.803266][T11117] loop2: detected capacity change from 0 to 131072 [ 480.862762][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 480.887162][T11117] F2FS-fs (loop2): Test dummy encryption mode enabled [ 480.899212][T11117] F2FS-fs (loop2): invalid crc value [ 480.905981][T11117] F2FS-fs (loop2): Found nat_bits in checkpoint [ 480.921541][T11136] attempt to access beyond end of device [ 480.921541][T11136] loop1: rw=2049, want=1228, limit=256 [ 480.951991][T11117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 481.002721][T11145] loop4: detected capacity change from 0 to 512 [ 481.085804][ T341] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 481.105065][T11145] EXT4-fs (loop4): orphan cleanup on readonly fs [ 481.112895][T11145] EXT4-fs (loop4): 1 orphan inode deleted [ 481.125553][T11145] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 481.166760][ T30] audit: type=1326 audit(1718902360.494:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd330e7ff29 code=0x0 [ 481.347584][T11109] syz-executor.3[11109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.348777][T11109] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 481.368052][T11109] FAT-fs (loop3): Filesystem has been set read-only [ 481.405853][ T336] hid-led: probe of 0003:27B8:01ED.010B failed with error -71 [ 481.415857][ T336] usb 4-1: USB disconnect, device number 89 [ 481.495821][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.506664][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.516434][ T341] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 481.525615][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.536975][ T341] usb 1-1: config 0 descriptor?? [ 481.735381][ T39] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 481.919671][T11159] loop4: detected capacity change from 0 to 512 [ 481.936855][T11159] EXT4-fs (loop4): orphan cleanup on readonly fs [ 481.945323][T11159] EXT4-fs (loop4): 1 orphan inode deleted [ 481.952595][T11159] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 481.996107][T11162] 9pnet: Insufficient options for proto=fd [ 482.006197][ T341] hid (null): bogus close delimiter [ 482.115582][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.143375][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.148976][T11168] loop3: detected capacity change from 0 to 16 [ 482.159546][ T39] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 482.168606][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.179294][ T39] usb 2-1: config 0 descriptor?? [ 482.188237][T11168] erofs: (device loop3): mounted with root inode @ nid 36. [ 482.233143][T11168] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 482.616488][T11173] loop2: detected capacity change from 0 to 512 [ 482.635498][ T341] usb 1-1: string descriptor 0 read error: -71 [ 482.657842][ T341] uclogic 0003:256C:006D.010C: failed retrieving string descriptor #200: -71 [ 482.666560][ T341] uclogic 0003:256C:006D.010C: failed retrieving pen parameters: -71 [ 482.674912][ T341] uclogic 0003:256C:006D.010C: failed probing pen v2 parameters: -71 [ 482.683627][ T39] hid (null): bogus close delimiter [ 482.690523][ T341] uclogic 0003:256C:006D.010C: failed probing parameters: -71 [ 482.698032][ T341] uclogic: probe of 0003:256C:006D.010C failed with error -71 [ 482.706485][ T341] usb 1-1: USB disconnect, device number 84 [ 482.747503][T11173] EXT4-fs (loop2): 1 orphan inode deleted [ 482.753128][T11173] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 482.764092][T11173] ext4 filesystem being mounted at /root/syzkaller-testdir3700990743/syzkaller.kZYTW6/339/file1 supports timestamps until 2038 (0x7fffffff) [ 482.800371][T11173] overlayfs: './file1' not a directory [ 483.895698][T11184] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 715.485275][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 232s! [ 715.494009][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=-20 stuck for 230s! [ 715.502874][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 232s! [ 715.511545][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 227s! [ 715.520399][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 232s! [ 715.528646][ C0] Showing busy workqueues and worker pools: [ 715.534360][ C0] workqueue events: flags=0x0 [ 715.538894][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 715.538967][ C0] pending: destroy_super_work, kfree_rcu_monitor, key_garbage_collector, rht_deferred_worker, rht_deferred_worker [ 715.539075][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 715.539113][ C0] pending: psi_avgs_work, vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 715.539188][ C0] workqueue events_long: flags=0x0 [ 715.582378][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=57/256 refcnt=58 [ 715.582422][ C0] in-flight: 336:br_fdb_cleanup [ 715.582454][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup [ 715.583053][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=9/256 refcnt=10 [ 715.583088][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 715.583197][ C0] workqueue events_unbound: flags=0x2 [ 715.707289][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=5 [ 715.707333][ C0] pending: fsnotify_mark_destroy_workfn, toggle_allocation_gate, flush_memcg_stats_dwork [ 715.707403][ C0] workqueue events_power_efficient: flags=0x80 [ 715.730287][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 715.730351][ C0] pending: wg_ratelimiter_gc_entries, check_lifetime [ 715.730394][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 715.730431][ C0] pending: neigh_periodic_work, neigh_periodic_work, gc_worker [ 715.730483][ C0] workqueue rcu_gp: flags=0x8 [ 715.764470][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.764517][ C0] pending: process_srcu [ 715.764545][ C0] workqueue mm_percpu_wq: flags=0x8 [ 715.781306][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.781367][ C0] pending: vmstat_update [ 715.781399][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.781432][ C0] pending: vmstat_update [ 715.781456][ C0] workqueue writeback: flags=0x4a [ 715.810061][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=6/256 refcnt=8 [ 715.810103][ C0] pending: wb_workfn, wb_workfn, wb_workfn, wb_workfn, wb_workfn, wb_workfn [ 715.810207][ C0] workqueue kblockd: flags=0x18 [ 715.830740][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 715.830782][ C0] pending: blk_mq_timeout_work [ 715.830806][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=5/256 refcnt=6 [ 715.830838][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 715.830902][ C0] workqueue usb_hub_wq: flags=0x4 [ 715.868200][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 715.868243][ C0] in-flight: 39:hub_event hub_event [ 715.868313][ C0] workqueue dm_bufio_cache: flags=0x8 [ 715.886246][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.886298][ C0] pending: work_fn [ 715.886325][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 715.903074][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 715.903135][ C0] pending: addrconf_verify_work [ 715.903237][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 715.920647][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.920699][ C0] pending: wg_packet_encrypt_worker [ 715.920732][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.920767][ C0] pending: wg_packet_encrypt_worker [ 715.920793][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 715.951752][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.951811][ C0] pending: wg_packet_encrypt_worker [ 715.951844][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.951878][ C0] pending: wg_packet_encrypt_worker [ 715.951960][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 715.982738][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.982798][ C0] pending: wg_packet_encrypt_worker [ 715.982829][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.982863][ C0] pending: wg_packet_encrypt_worker [ 715.982891][ C0] workqueue wg-kex-wg0: flags=0x6 [ 716.013406][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.013448][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.013498][ C0] workqueue wg-kex-wg1: flags=0x6 [ 716.034146][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.034185][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.034235][ C0] workqueue wg-kex-wg2: flags=0x6 [ 716.054893][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.054935][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.054986][ C0] workqueue wg-kex-wg0: flags=0x6 [ 716.075643][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.075685][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.075734][ C0] workqueue wg-kex-wg1: flags=0x6 [ 716.096390][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.096430][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.096479][ C0] workqueue wg-kex-wg2: flags=0x6 [ 716.117132][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.117177][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.117227][ C0] workqueue wg-kex-wg0: flags=0x6 [ 716.137876][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.137916][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.137963][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 716.158878][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.158942][ C0] pending: wg_packet_encrypt_worker [ 716.158973][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.159009][ C0] pending: wg_packet_encrypt_worker [ 716.159036][ C0] workqueue wg-kex-wg1: flags=0x6 [ 716.189649][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.189688][ C0] pending: wg_packet_handshake_send_worker [ 716.189723][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 716.207789][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.207856][ C0] pending: wg_packet_encrypt_worker [ 716.207902][ C0] workqueue wg-kex-wg2: flags=0x6 [ 716.225588][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.225632][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.225682][ C0] workqueue wg-kex-wg0: flags=0x6 [ 716.246428][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.246474][ C0] pending: wg_packet_handshake_send_worker [ 716.246511][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 716.264548][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.264629][ C0] pending: wg_packet_encrypt_worker [ 716.264679][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.264721][ C0] pending: wg_packet_encrypt_worker [ 716.264749][ C0] workqueue wg-kex-wg1: flags=0x6 [ 716.295273][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.295319][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.295370][ C0] workqueue wg-kex-wg2: flags=0x6 [ 716.316022][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.316066][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.316116][ C0] workqueue wg-kex-wg0: flags=0x6 [ 716.336764][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.336805][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.336857][ C0] workqueue wg-kex-wg1: flags=0x6 [ 716.357511][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.357551][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.357598][ C0] workqueue wg-kex-wg2: flags=0x6 [ 716.378255][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 716.378303][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 716.378358][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=233s workers=4 idle: 341 328