last executing test programs: 8.613985218s ago: executing program 1 (id=2155): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = getpid() r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000feb000/0x3000)=nil, 0x3000}, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) 7.665423155s ago: executing program 1 (id=2163): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) 7.35806714s ago: executing program 4 (id=2165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@loopback}, {@remote, 0xfffffffd}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 5.574792795s ago: executing program 0 (id=2168): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x420, &(0x7f0000000100)='^-!+\'/]@+\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='gid_map\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.475632754s ago: executing program 2 (id=2172): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000380)={{}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="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", 0x109, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x401}}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 4.275985641s ago: executing program 4 (id=2173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r2 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r2, &(0x7f0000000640)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r0, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f00000008c0)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028006000f00000000000400120006001000000000000654ba8268818ba27614f054286928564100110000000000"], 0x50}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r8, 0x25, 0xb, @void}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000340)="ed7afddb33d2465af905df036cae80ff90e02ffaa19947481b13ceacc831855075245e8e8b485fe0772e14fbab8069ae38865ef98b99633cc8bf4885c6bbc8d8f5a928f1b1dcfa685748181647aafc1dbcdec5a844f214d4cf23", 0x5a}, {&(0x7f00000005c0)="27ee7a86847e697f7262b12eb88fdff7e05923a836e4e64859a2a8f7f68080d25c0ce135bfa4a218f8a1153104fa961f451eca95e16f071eeef9db5d69a31e696ee99693c243b924c7e62110dd831ba7fc98b4faf515b43c1567864b9adeb7a9df796a0ebef9ce3af748731a91110242", 0x70}, {&(0x7f0000000680)="9ad3c7edf783b7d5c69c697b61bb33e941f2a90a92f3d0454dfd43cdf7bfd620dbd4057ba7f092ce9a9e75f93a0592bf799359e93ba3f5466d99b0977ad0653a623837a308c2a1a18120252cd5778d8b4f0a14c9f1a89e4cbdc65469ce9800630810fee68e97b133136606caf9f74d8261ab828b30beb050ce45ce38b77f68353abb9097f11df6636f7552405013c58c", 0x90}, {&(0x7f0000000740)="2f2c09839b3595700f25fe52dacb1fe12fcdfa92cd0447804867478a0bcb56723ea883e35ce53afcafb02beb06fd868f93633208466d0adeeeb1e4f3332814b03ad17ab06c93995f7e518bb65d3587016d2756772424", 0x56}, {&(0x7f0000000400)}, {&(0x7f0000000a40)="ac70b98d2375df7f0549c1b31e66fc570151b4acd1edaccd98103f775eea95b3d065249ad5dd58814eafaed084b1be3e1b08e32bbb00de26f00aa70b48278d774aca05fbf454c0a6666e2fb04836bc1fadfae6a153a4d7c6c4e4d22a4412cfc5e0802891dbc4495c2ce6df85e3cc475cfb9c045d1bf0dab8e2b237f69aaf800953910de9cea87d2e6ad12a524fe8ff6603b7ffa392dd25f3367d20e0e261c5da55af3796c4693878f0694f78beefd012556d093a", 0xb4}], 0x6, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @dev={0xac, 0x14, 0x14, 0x1d}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0xfc, 0x1, 0x9, [{@empty, 0x9}, {@private=0xa010100, 0x8000}, {@loopback, 0x6}, {@private=0xa010100, 0x80000000}, {@broadcast, 0xa00}, {@remote, 0x5}, {@empty, 0x3f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast1, 0x10000}, {@loopback, 0xfffffffe}]}]}}}, @ip_tos_u8={{0x11}}], 0xd8}, 0x4008090) syslog(0xa, &(0x7f0000000200)=""/101, 0x65) 4.275322411s ago: executing program 1 (id=2174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r0, 0x8001af71, &(0x7f0000000100)) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080), 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x19b1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9001, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x7fff, 0x0, 0x80000000, 0x1, 0x81, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xf4b, 0x2}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000540)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x14a76dde0f56d43c, 0x0) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000000000000300000007fd17e5ffff08000400000000000025f4", 0x39}], 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)={@ifindex, 0xffffffffffffffff, 0x14, 0x0, 0x0, @prog_fd}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @broadcast}, 0x10) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, &(0x7f00000002c0), 0x8) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000008847000000", 0x39}], 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x5, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 4.274624481s ago: executing program 3 (id=2175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000006340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r4}, 0x18) 4.274352951s ago: executing program 2 (id=2176): r0 = socket(0x840000000002, 0x3, 0xfa) getsockopt$inet_pktinfo(r0, 0x0, 0x13, 0x0, &(0x7f0000000480)) 4.198556378s ago: executing program 0 (id=2177): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8541) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_gettime(r5, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1, 0x0) fdatasync(r6) syz_fuse_handle_req(r1, &(0x7f00000041c0)="4afee882ef6b191bb9915157b478eb4c67a75fdc7111e431f30b0eaaeb0c96069ddc875894de5b5bae83d4482c87077a2930227296846e02c2e8ba5b9991b181611e23ac6d6cf63be4f122e985a586848686d250ef2c5200a83d987f3b8211332d7ae2ae176935224b5eab888930c2c0c39eeb7c864ebace534704a1c5a39fe0eb52df58297550180887f2f25433cb90fef6cb871a8cb5cb0f668cc0154619d8089ad288fd8fad3ad641b86909505bb770e4fb6200ae89809434c078fff63242dd6b7cc4a2c41fdc17b1b82e0ff9665bcc12719c2b8c2b0bdbcfd43ccf69caa8e636c58d2fa9f17a728fb5dd237c4b4a970ac0f7a05a4559ee8d0f2b0f3f775d7320a77b4f3bf73fbbd0a73a8166e2fb255be81b8586bd8e37ff6af5e831ce115bca478c0dc1bb0c415188e73749dfff4fc9fba150612a5698297ca646bfdaf2a8fb201e11f0fe2533c2b4b406f6bb8ad5e2e5c32be458640b2eee5cd5e14fa402847fbd876c83f34879ef357996a2a9d8f539cb3c5856a53f83d5e2b4d9f1f8c95987fdd6bfe54b4e23b48f71c2da3311a6adbbc45c16bb26ac3e91b651d7fe29ca17bb0b1ed9572a6674fbdbc0936dc84d0961383fd4ecd19b049d8f8b0b4a23602b61c87373e3ddc8874c19bd61b35b8bf1422b339e38162d8cd699ae2d0f4d944e30cc25568021a94581576023c62d0ba26a484026d8e10b91abdbc8959e835be04d657271e8ea1b47691ffcf27e38d87d1e741650f0254466d5eab7131a21b3b247b61fdd2a3d86e290fa72e0d61e911408c1598618ede551c7bf050d6ba68c533e08d706641b25956d344824285dbebf2a455b39f06c7fb2e53d69d00589be64d42e45ff12f55d85a3d5c02db74b6260f1ce6b9d76fe5624da42109c3f865f4dcea998b4042914cc0269bc531b29eccb1e8244c1a834097f4e2123443b5235531b28ba98fbac4895c4363dd55e85fb1b07e85e1e8195c2e6b07dedf4c0e7abfc21cb6d61204a7c238dce514ccfe90fddb2b08341c62be26a4df0b99d4c063be31ab77c4ba6c0081fe009653f2c05191c68bd82f166e6ad6a5ac870382c60ff939ffaf57bfd1a9a749afc368005837fbee1fbeef3061cab93465f523fd0eab59c1fe294f368a2dd7276cf5012df2d9350ddd4e22ab8fa12c3b1fac51ac70de41e44b1b3d4f8a8a3c275430a50a4756783f4994e30f5f12a51a5adaba6974804390e663c9bf5c114b9344b1f64f56171d9e95becd337115f526ed4a3d1888193ee6eb38977dfc8873e5c242110ec0981019e30d4ef4c2ea5ba13c143aefb17490bdc0e806af56be8bd8644dcad1a1e38f87fff801fa4299ba56ba586e1d8e205b9a2736b5167fb84f860461f96ccb6217639792113a1a4205ed866bf4a1628700db37195ce90eadf72db0fcaecaff2b4f6a877ce377253ff99d632e16368f71dd4278697d91ccd5aa8461b5bde01796a60ccdfcee14c981e3803250781a365aee187546fd2d0cea4f7ad03c0059a5bdcf7c75280cd09952eb30c24fd5f60747bc41c032a624c623f931a111d8b48d2af4f6785d78bb604394f9e3dd9a9d30056b4e8670a361b10399370a19f2ade6fc522ae25b72cc03927eaa4eb5e3a86a914b89009391710bef4f04de0b57af01a969bb0c839a265c4194efe62318cb6785dc0097537380a71c312ee5be56b0cbad67350374871d6741dcdfaef14e236d9830d27c4fe931401af3e7b2bd23e2c3a43f6870d11e24fbe205f3a71e25f1d2c03f020d22e263cb57022c794badb7303f38e8ff7333e0399692d93ff54063ee446d01f6210c9e3bbe8c3d013073fe8641224bd85a5196edeb30a26330f1bc6ac768b2b3a40ef2cc9bbab065572d76ab34261910a9635fdb338f2e866a10c0cd63ff6af439e278d12b50fbd726429657990e4819ef59149f9cc9a5b8a4a4aec47664f495d00d5a65078d34bd4bdde2c53be37b0d75a1153c6a47ff2c2e17015940be50543181fcf9eac9db9f4fe3e6719f9f28c7334f2112381a5ea12fb7c88d539da4c639c324b08878f9208b2d5021dfb525958a62c2a34c368bf9a017db311f4e5da8dd23e32ea2e511919530a43a8b26d68139736a574541d121efd5bc0c029b2a91185f0aad6fc7c835b81cf689e2da220f4c17a54e26f84e40b43b5f2bd0fcf9d0f6128a9eb57ef726fac6e2476ddc5cfa081b5f37e60546857f5df22ed1db49828d70d15f3d6135145c9dcd1e722af054d4de1934d279312c69f88ffdac0f6d227d92620dc251401b35350ffc1cde76e7e7b107a8cac8b419ed5cc20824eb76b1878115ea3a212b5b6694bc457a8322e183e4d6dc4897cf953566143db34458c1fa92adff7be5283b2c87ccbf18cd337851022b4fe52b9c2b6545eb2e3dd16f5b7d5805450b69bb7089e444e3724a05f24ef5236845725cd6bb186d558d2e4b9638ec23d63c7330a5fc5e0ed7934a20a91b993775ad4d23d7854dab458614376a12aa8f49964a2fec799ee75565bd97ae3b3eab4c424fadeb4e83848c55e3718572dcbec17f45edfca775070c9315f07e681389cc7b951df8752e347a8830489ce3396b7a3bcdb803b95211a65e4a5c2a90a26cb3552108434a4e708d5d7438133738a960470ef28cca1138bf2694fed0565dcbf890ab81356b992344591ec4a7f475ecc63507c9f49debe3132a60b3d1031e6f011aec845c5d12ff83ae2d46c6f076b1629708fd26c2ac015863cc5502255a6de18e9a7b924bfd4520be83c17d6ad9e34690d0f2b26dfbad743c75fb4eb481e7a20ea112602528b8cb5876efd5ff995a3af58a3f98b49ded9948f82bc1374e189e2e3baf6ebcfda75f95e39e522b0893224f78ec73cb6bbf3ae4aedb7ab933ccb753e4eb5fa4422c3af30a83c1615fef33b53b703918aea554417b88fbf845700af80b4f9e1482a6164ae0becda24b323ca19d36b3392968cfa15ec182004d80a0bc0cffa7d9655e243178eb6479ab5fcc7b2d66c05030c863578f83742adc76c068854fb6b8194d19ac2075f4f2e0ec816797c28c0c4de08110a608ccc343bdd2cb7b8d4942900ac4ee73f34141e46dac724ff0e0fa1a3171ae9e721ba509bb83ebd825671f4299bd57c0eec2a487583032deb5a0c74be961ff256ba92e7282be0f54fae01f2003c25fb32772cfca6c21d33a0c78f4e16e234e7b5863cad67592c2b52f64fec8db90dda1ba2663e54d94734666dbe679bcc01cc95bff644648784deb9441b9a699ed1c440a58c2ce88c8110f657533e9259e84f8fcc2b694b834b612022b51760432829d11b1e81c1bbc8e38b14bec135a49607b99ca66d9c0df89d564bbf0d46eeed3e8c8e43c8f9716faebf97946c0cab3d1d92716a324f7921c2918b553d4bd2e46d904f640e9adf6164671f72bbf25e02fac9ede087cad5816859047aa40c868c16942fbf62ebde9a0837f469b6446590f4a9e93f3be97c2cd8a934b2f6aa78ef5d6b1b9544e79f282ee54ef885801c05256a14520608ff8ebc4141149ea904270c3dd502f1b38b7b5d95998cbf2432e3313843a913edb871e5796699bf4650c40954258ea7c390c9bcfdbe21100214f5d32a3ef80d1c6dc3efee8b2c93baa6b43de46c6c9479ce959409df24d672ac6630782beeaba608779337f8a9decb47e1564defc6c00dfadcef5aab6c93f1f4d3abe5e490000aa49e82d976e499362e02cfeddc4d30a0c005866492027b01f438dbf537217f946eb0be63b9dbb630bbdce65aa98669268bccd9c62215409390ea9cfc50d4bc0e4960165e48679d1d560c0de7a31194ab95ee54d48c961030069b792fb434986df79f6a03b58abf98887d1faaf183f437b12f0244af38bf7cdff0e795aec85cb0ed277c2951d08c561bdf0c85ba4260cf1f790be50206f2a7ba0f8899090a3dcfe04334312ac38c6c721922654d61f0edb4dd71f388073dd6613aac2a0e75295f024d4b126fb34babd79104c054866d90209aaf49faffea29da990bf7775394c059c4e5430bd2241298a899a8a528956ec33c185bc646c0c0ff2f97dc899c2d1a39262fe5aa98fa4cfeceef4d4b22e5da52d804ef98de7f6538fb988ee320b1b7259fbfca802d6b1ad2b979818263090c157fa715b6f86e10180b6cb28512d2ed71ecedfb7b3a7583bcb9bbb81ad19677d62ceb2a1c0a9c41b35ec5aa8e11aea2a33345a09399dcff1d452707727d2d09dda55e019822976bd6a510911523d36d5974c18e9aed8492614c8137fabc633c11528f9c9c0cc2ea5916a8f966420d365088d20f60a6127934d1a3b7586cf61c69e97a289ae007f2fd66c30ca4884a6d1a8c86a5a67fb1b5c5bea6c8c0525dc98730329a0af53467b1fdfc18125b8f6d1edddcf15d99a9ee51e6d6e0fa6906203bb6597ecfcbf656f6cae0dc52b8154ddfa9b57ef4858d11850983bc6b3160bee4f623ed07bb9a0e42d2f82d46583f529d41c78f1c2c99251976e004fb789a804db9a89fee56a018800332a46f2d0a1284a8b69fbf95c3b6f16e585b79461fcdc9604798680e2b6a56679ea0491adc3a155906610eb641cb43834ba1f7beb16fa82997d8a20e9ad138f93a5f28f2119bba9b0818dd4f525247bcffb9187e495f3a333ae4a3da81147cfe49d10bb6cbac9c27b0d803392a19f766fe4c0bfbeda325a55c5ea571d71914ae0057ebf1daedbbd3ec30b35a798f701c11b48f98c0fc9c1cd136dd66fc91a6ac5454911c024bf1045a836a974b4f47bd82b65b732aafe62ac2def7504164fdd980dfeb3738e66370e783415c376970192f2d3e42a6c92b509d3e86325cee4c323491329590630b300893a1526772a046924db4b3e95fed4d8bc28f065573be246d57579038f34432fcb471126939c019acd7cc059cce4f9c047de68056c3e5894be2f8a76159f3f846f231625b2a3846b5eac22ef42e131a499e408e1b79c6db112fc2a976d60e67f418060e286d8bb17abdc332ff271a61b1bf104c5f6a5eb36f85ccea6cbb4c272fb51e195e3dcd38b763a3a12ea2d98752cde2a07ade77bd118d5db99d91d66b45eff78270f55e3cb573d519fbb79319d584524ac5503580ad26d763061a705eab6b2361f85ede28e34e10f459149e80a1f7902c82a466efb7e9f868aa7b37b83923840ac97635a190d84be154a2d0de988264494e34d03325d3b688b0c056b1f643be38e721adf2faf4e48f5e18943eca1388d5ba186f9c5fa5a84321083dc93ee95c38f5a75a940568c05eb074aa9db1cc7f68696003a1f6fe90e1537b77041bf8037491dbcc6945b7135965455017e64dadcc719efc3173fb4302809270daa965cbd9b335efa6df0da85d29c390b706e36ea726a970bd55e9ebce4583d0d1017154d40251d9b60fe9cbecb8361c93c097c44a83b5a46cd8007e7fdb43fcdfe96183246cbe61c35f084b0f2945bb6e44e8fe9254a8ee999cde65e7b4b5539b32b3d4a49d0d0d3439c6a521c2404daa424e46a575755d27faee05dca0f53c4f58a430bb467a0b643cc2e4e50bd0219317df945c23de2436f87cca25ce0f75bc0e4bdcddd9be51e2e7b56c76854ddd27e8d3a9bac98ecd01468b10e7da4f1deec234aad42501d5f252ba18d3f3073200a736399e9cf380da74f19ff94514e49121f328b6d2da7932cf344136ab7ecc1543a12b5f62dd0e00fb774ca4bc707558ab87a0143e11e58f7e27af2d626edffc9c396c214d725a5dfe379de0506ef68d6b78f6d8e0e7c31d9522ef879c9420d44ee8f1aa97e8da249807902c45ac2e6286f2fa2074bcfb5a569b2f73aeef5d457e2aef9f9d329a73f222b2c2e637adaf864af627ffdf5968575f10650ecf17055b42ff330ffbc17dba05b012dd0f687c606068a4e242ad148b9d90337e7a7d8e1c3b45ab99bd371df19a7c8276e23c67830f620551821bdaa9ce95c5dd62294b416196a22e0e3fff09bf197390f5ab88930b35a119a8b7b150577f6afb79d0bee552612d798cf18cdc4a23c34e2ac06c232c400314d29410b3bfd2f49b15f37d14853c77eba20d9f0685bdf2f70130c25801d913800fd009f4df06abbc50af3f6c335d5a2daead4434276bd0359f371ee5f87262c8a70760c5bf964e54fb0ba759eae16038e489b91c2504420214993bcd515c838664521fdcac60f67295c415b034be6bbe71ed6f559a9db0061ec907ab4903a2d48dd97a809a7fdb8677eeb393f5f21dd0709daf52422e56e8dfa01976b0170185e8b2d06685f26948f9a3291324abec5987af85150a1c6c777b5967efa05fb16afa8097253da9a5c73150804f81a1b6ae3f1cb7b80fb54a7b30fe5bfe150534af3b4379c5afe1dcb4dda0edd7d9b1aa1776cfb1a05634206037c82963160ea8a785f02d4fc0302f936fbdd74cb88864e139088d8d7de5a10311d201c8f16315363c84f55473fc423fd429189502bca3a14e11179405c6e1fada3f71741708835c02a100ff4dfa5ed8689fde541f960e5548817b5165b8db63398d2d9a81a1b33ab11758ed5d5cafc0ce29dddcf8b0be6095654d9728501c66e7ee6f9d5049fc7da3006c9705c7ff1ee51b6641176b50152febd8b11e7bd0497c045a2c89cdd204948d32d141c9caeb08b3ef01675baeea600d4ad8f7b23715775c291b0d451fa855e10520447dcb5bd5c0d891df3ffde4046d73b9d70090dd75e1d7cb45a8a09608a77317c974c41a9235599efd49152f71b8fd7f76c1beeb1c59004e3f7d93edc48b5b4e308ab39addc6e564a9c2a765dfa2e2c7cc42a712cfd640e7aebdd9e6fc13b15c2343c2032d5c13635f939124753b8eb56de68c38eb5cbc24caa3d64c59ff616e1470c25acb9924c3d644810f4d8f7d4b2311498999d5c30a9422abe0ea59353a245953f156b6a1b2d7f88c5648511ddeab5053b1f19082deb60b30ce319e5a2d9ed30d6d16275ba3faab76aa2be8359303d5fc9f5504005eb37933f81c8fb097486cd0cb55235d440dea06b68e4daa58d683ccdf844481405eeae1133c80e9f739ed25cdd98c0c5dd979049096c4379fbef483ea24dd6c229582148abe7eee0d39b38607cc2874ccbd62791133b7f9b5451f5ca3baabab09b5ffcefee1411f8271df09b78e466d25f92cd71b9c4aa0656b9d012ef444b685c45b2ca2e676c72071710ad9625026c288656b1902b3cbc1126dbef201885a29699343cc67ee003d964a9b6ad8d93395d575bb4c1c0aa0b8a235d0f922f4fc3bd17eeb06007adf3d7b53a5b94670217b93f904e5e978e6b220c55d65c3577f9215ec2ec8db3ea691daed8f28da0926849b5aad7fdf483360f37fcee7ac879c72ab7e07784b2be8828e61ae653f345820f5c2cf7b7a97e0165023cf095883bedfe6c025b8cde63b08b585449b09612079f11d4b77798a17124756540cbc48295da6d5f6a791025b3c66be1369058b1e838de597437596300c8809fd020b2654fe9a90670d9f66893b7f100a6557aaad136464e92e0c2c191635a9f58013b7617b6a19d42dfda26ae5e336f8d7eecdd595c5c13f300f59309f20014f7fbb3a1b6b6b29fb73c175ca9535d68751285a2657727ec3b485646e76fe5435b7c4d827731369637fd77759d14255cfadc00858a6fd79e4cba9e242ab80236574908758cf386ddf00f89ad409f5e2c98ac1d7bbde25a610a40369f3137867257a84962df12871a6067e41b747d0b5da9980d14b72b62d8d5408c9760b94d7eb473a023eed42a1a3b9d4afd20570a41425bffa3595d872166d09ebc5e6580937352c8c40d78522eb7d15d3b7b5e554c36a3418ec24091c802190c6965e12635e686d05e9d2fdc0deb3d3262e787858d55326696b62e9a047f55b49bf5fbf4cef8fa9d8eb0bfe467726aef52353035b77ce0d20153af46faa6af2354129da66201db55bef6a17da4cfdaffe676a53a7091ba83007d8cee53a2f2bbb2b10b4927a42fcd464dc57417ca4f5a4e7df56070bc3fd31fd219feb85ffc978dcc46e4484c3f2768e1d012a1bca417103b31d8afcc8c5b649e035a486e2b4c45ce677b4d5ca131b0024726973779304a6895d13d1fd54b82c0366e3bec2101ff9597da0affd8d7d0c1cf1a2348dcfe706f25e399032b85c7dd2e647868c32bb61f2cacd09d87d3f8c4a82073af2abaf7da0d4e731123f5310dc3232a1cac54834ab35b43c6ff1d08a98a31095cc4d784924c0c0c99d9cc626df94cd3c584bb43d7e9c48622ed6e54951230e5915dc965174e503e7f9f1ca52dc2849bdf1b0c6086ba957683317377dbc10ea163b6d4d71a8e7edd025a8d4de7d50ae1ec294df0af07451aa1541fd2ea26835f3da96b4f6aa20bff8d2ecaae7c840407088d10fba1c884b881f7b5fac683b741883a2345dbffb661b7390c70b54de405a2b24721024b56c0ab702e021b509311748587f5991bdfe05fe25397373a2351df8dc017aa4de93cb96d67b2b3f6cc962963a6af03baf4c4e6f05e6230a96d56edd7011928715c3ae20b9102cb53fc6487f2706c557d59357caaf381eb2f193ac3e5b9fc3f507f962b6a96d44394ed839200c7c9005610f4dbd403c4341c530659d95c384ddfbac07049fdbb36980378711071eb9ad22b16e22280c7a22c33a7b6200a17da97d1c39148532a2d7fe13c6d2c5687bedc06cc19c4b035b87d9910ca70203ac840c46563e2b92a6dc3e2e62f1e8c258834849a4d17fad5f1842af2b4e235514b5f60f4fa2abd7b5e50fb8671f7ef562be78ff19953f9199a1d7e5df0ab8e45d38261c83d1ce8032222e2b3e0a298bdc64cbbe87b3e709b9f09a44604203838f0e24374102d28a16cab51fda139dc3e1d0acea57c9c7d49dcb2bf2c92c0e162e5e7f341040e593032534b1a0af4e73c4af12128b73d603f06159c5a8fc4383ec3c0bab5e6ae6af5c901b650b3f4201292109d9f7b66ed570ab1c0d9b4a3f05d60da6100cdb3b4c5934e4fabd35849cb6e2168cdebf601dae9ab007c3b9cc6911837b2c89ec61b556fc2afe2c27117e425191af2e7867960fd40aa0de8c1bf913b1a2fcdbb26dd69bfe976e5e59204c286d44d5e3f30552713aa97b86aea52541f4cbab787bb6c8fe82269cc407e575caf9b9de09416cfdb4de2fcca918e586600b15e03331ccbd4daa8cee214c582a8c4525f7422ca5adfe82d14dedd3e9337b51b576d3c9b016ab21258d1ff7f7fa2eafce1d0a2eacba53560b25a8ac2358e06a1b340ad228743dd93f43756c606cd62ac59ba7a108f1e8e2658fddc4225f987a1b1cc98e53f8b8fa92710d017c9d15a93b11a984a45a23ffc6385de741bda607b4d46fce329a15dd757fa3d5b42f41865af48012c25f57ef0a52d82e461723cba6c4ad97d08cd2ed60f886ebbf91c0e617d3f638247f674890d63d87c7d574494af465d8e6accf5eac43c0eb08acfe74c0f0ba1befb017612ffd0cf41da42a24194cd982cfb9bbf272318c8dcc5ed364a53acda08730ebc2bda2fec5a9621e4716f2f38f740ed4b3f2f69f6e8061742078d77c7f352844273b9896235005ae988b7c366ebe4b893cb1343ed69642b7c49a59475276102eeed150db424c0baf25bf1ebfb50661a0620e734427a18516586a35c94964c21514be1e4e2d50bea4fd46486c75223a14170da4990650ffc46338a3cfb1970ce8523ff3b411850cac3ae17c137c0eba25d81ea04cfbaa228e52f20b9d37a2d06540cf3facb2ece38dc1ba6a3566a6c5848ba1aa0227a20bc635de3238849bc0ed2cb309f5ca6eaccecc92763edde8810f83ad9b167f89f0f67d2342abd3ad5657ec6b488dfff0dfbaa485cdcbf56848e5fc5ced329190d48741b0f70c39a07d536bf936ea59f7dde24e902f262e55de2d15c1e9c91044ebb4b0f6456b5a2583e3de53d183ba689412171d538aea56d027dc9599f2b6707872f36e6f6f3bc0308633b738e2e4fcd737836f13d5fd1b7593558a9658c1b816046804c95f2bb2ba40d02eb88b2aad02912c389d669607b26ca203e06aa757dc04caf58874122220bde564fa77833acc5079da0c6d80c7432e0ee05eeaab0bb3bc7b57ebaabf36611130fdc74c6f538a8caa87fcdec5acdfaaa58445ab0c1fc30d525c610c3d578ea8ea1a7e6f24863a85e252a7c08b7d53bb7f9ec10a7267845509dd3cfae2370b80d5bc0b83573d2ff8ab519310de6ec234cc6b0e1d412f3265149905e08e54bf38ef4e341b78a8b4a02d065e8fdcc6726ab4648021a9eab8c4fa2186674badbd26bdebfe7091e5b835ffa55c1d5206f4e18f2214bc8b676709d307d76f799a6e3256d9a28d105a9a9c8c3f47f23ef47b22f96444c6ae43cf3bdcbd3cb35c2e063850f7895c0124d65e1a5bf758d33a876e32c6ce270c8c22230a03b51d9cbe4cd9a73b9904bbac067590472bf6335eac5d6f1aa3d00ec5f190ebd3215fe490f632005fbca137b7bbd97c9916a0b121d6c320a342eeeef56ae2f6df51464387c2f469c3d372fbcbc4c0539bc9d72e786ca5b58eb384c0244a9ebe862159589866a6fb7352d2907e14be3785f0b8089d5ce39f7608062d79cb82eab7efcab2afd303040c17c10a24bdf31f7fcf6c8653d84bd99a505bbd846fea7e603ee22a9db39f1dbd594a8f55b88457705f634fccbd40d359017ef981dc355941502fcaa85ee04cd8af13ad6b210c8fa1d3ccd8c2806a8e430c331ee4e1db4d834c8092bc48e71c2f4e9dbd8c261dcb0ce36a093a5b1bfa39c199a0edd887555fc7517e571d66c103498890a19e39405d8e9f736ce5296f412d5074331ffae3ffb666b663e5df15a7fc88cce5fc7400fea81e7a59234bbc96b77d594ebb23dd45f842536c61a6f2d92f6d9bf087961b9446e74df5f464f8492e7acad7d08fb5dc10dcf94f36520ab00636bf8c74c478caf3a2219cc77486595dfedd433b8f152230b0ef69af8de166c3775ab8067509e696b4769259798749b724e0cd32104f818b0cc315fbc365570a75e2f70a513c2621c95f7e59333edec8cbb214abc262936a429b5b4d93fcdfdc59bb29798786ec522f9e8ddd2b4c5bf5f143dfd035a69581612197fa70b9c25f85dbd2840fe1ab1329460526fc4b9d50f8887551203f52732e18c7601907f8aa527f5822d72db17c19587238ad88d5c0d5f0f7aa724018cc0739e19f3b0211cf3eaa0ed0ab392af2f55b3286de44596dabcb9c20d9323cb2054c8192734346f2b9a130add67fd49ecc7cdbda946dc0003bf9be14919ad0b1e2a59acf9c9f914de927d14d60d6e1d3443aa5aca66cad8114fcb01c5f979929d73218cec7d442fb95b5981db7282bc3e1d1c52dcf302354b16dc49bfd555a2cd93c3986c23c5bbcb2f0a58d86ac1958ba8530bbb15219dcca992d95c8d75e7f7962c52554a690b1584ac6d2e247534b73e0f73eec0905e50ad386ab643f75b705de7290e237641d001600d2f0b5750108b5fae3d30a091e1c094bbc026f1f8e3dc6faa444baa5e7e04e40faa8919eb5c3fbd50734720977a4d35c8d7b197de147c2b653858538e96d411104391314e5a5caba4c2e7f0f44ed228ce91d2f86ab84b1a319a30d92f62a38f2baece515a7bc3fa89d8cac04df92a77ab8", 0x2000, &(0x7f0000000bc0)={&(0x7f0000000280)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 4.182457819s ago: executing program 4 (id=2178): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 4.16281833s ago: executing program 2 (id=2179): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f0000003040)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)={0x2d, 0x6, 0x0, {0x0, 0x4, 0x4, 0x0, 'GPL\x00'}}, 0x2d) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r4, &(0x7f0000000080)='3', 0x1, 0x0) 4.105856495s ago: executing program 1 (id=2180): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0xff7c}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x1, 0x0, @val=@perf_event}, 0x40) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{}, {}]}, 0x10) 4.101933735s ago: executing program 3 (id=2181): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x5b) sendfile(r0, r1, &(0x7f0000000000), 0x6) dup3(0xffffffffffffffff, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001c6000/0x14000)=nil, &(0x7f00008ad000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x18, 0x0, 0x0, 0x45}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x68, 0x2, [@TCA_BASIC_EMATCHES={0x64, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_META={0x5c, 0x9, 0x0, 0x0, {{0x200, 0x4, 0x582}, [@TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='Q2', @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="05", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="6faeee5aeda72c4af0"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x89}, {0x9, 0x60, 0x1}}}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="f7c8", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x41, 0x1}, {0x2a0e, 0x40, 0x1}}}]}}]}]}]}}]}, 0x98}}, 0x0) 4.04724462s ago: executing program 3 (id=2182): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x50, &(0x7f00000003c0)=ANY=[], 0x1e, 0x150f, &(0x7f0000003040)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 3.810464829s ago: executing program 3 (id=2183): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) ftruncate(r0, 0x200) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 971.857951ms ago: executing program 1 (id=2184): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000180)="91149f14413c850d77b732faae07f8a2b49ac87264dad0ee002f245d076961e66e3dc45bce062a692f72c6fb1f4e51d50835950671c804d60c4a481ef6ef4f3307bb5fdbc8861d9d773c8d4be3f75fa0433a91eb86aa6686b6378c39a4ca96570532f94f1219f8191be8630fd4282068bc6fa3bd92324bcac32efce286bc1650800394493b833024e9d51c728326b448ab7301b06ddaab42957d452c9c0239fe1878e262fa265b95ac4b4a57c23c9a286c0f8a3b835ed943619ac3ddd72a6fd4ce00a0ef59e18d8fd06261b304789be5d1c43947b348a41c3f545b50f506335afd89f12b17bff8a1", &(0x7f0000000000)=""/86, 0x4}, 0x20) socket$inet(0x2, 0x3, 0x353) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000650018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000808500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001000000000000000000000009400000080000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r8, 0x12}, 0x10) unlinkat(r8, &(0x7f0000000300)='./cgroup\x00', 0x0) write$tcp_congestion(r4, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='auxv\x00') r10 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x18) preadv(r9, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2d50d9e2018000009dc6bef5416a2b7678ffba79adc4549a4d281b06", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) 970.801391ms ago: executing program 2 (id=2185): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x0, 0x1}}], 0x8) 970.556451ms ago: executing program 4 (id=2186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="70b514ec3a3c8db45318b2198563", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 955.036142ms ago: executing program 3 (id=2187): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@loopback}, {@remote, 0xfffffffd}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 927.641144ms ago: executing program 2 (id=2188): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x420, &(0x7f0000000100)='^-!+\'/]@+\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='gid_map\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 823.063163ms ago: executing program 4 (id=2189): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000003000), 0x201, 0x0) 822.694313ms ago: executing program 1 (id=2190): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 432.313034ms ago: executing program 0 (id=2191): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f00000002c0)={[{@debug}, {@nombcache}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9sCWE0KoEqJHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TBaMaT1E3tJtokdhR/PtJo3ps3nu97cea9+Dn2C2BoXY2I3YgYi4h7ETGdHc9lW9xqb8l5z/ceLe3vPVrKRat155+5tDw5Fh2PSVzJrlmMiB9+N+InuVfjNrZ31har1cpmlp9t1jZmG9s7N1ZriyuVlcp6ubwwvzD3yc2Py2fW1vdqY1nqq8/+sPutnyXVmsqOdLbjLLWbXjiMkxiNiO+fR7ABGMnaMzboivC55CPi7Yh4P73/p2MkfTYBgMus1ZqO1nRnHgC47PLpHFguX8rmAqYiny+V2nN478RkvlpvNK/fr2+tL7fnymaikL+/Wq3MZXOFM1HIJfn5NP0iXz6SvxkRb0XEL8Yn0nxpqV5dHuQfPgAwxK4cGf//M94e/wGAS6446AoAAH1n/AeA4WP8B4DhY/wHgOHTHv8nBl0NAKCPvP4HgOFj/AeAofKD27eTrbWfff/18oPtrbX6gxvLlcZaqba1VFqqb26UVur1lfQ7e2rHXa9ar2/MfxRbD2e+vdFozja2d+7W6lvrzbvp93rfrRTSs3b70DIAoJe33nv651wyIn86kW7RsZZDYaA1A85bftAVAAZmZNAVAAbGal8wvE7xGt/0AFwSXZbofUmx2weEWq1W6/yqBJyza18y/w/DqmP+338Bw5Ax/w/Dy/w/DK9WK3fSNf/jpCcCABebOX6gx/v/b2f732ZvDvx4+egZT7o+bjfrXs6uggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHABHaz/W8rWAp+KfL5UingjImaikLu/Wq3MRcSbEfGn8cJ4kp8fcJ0BgNPK/y2Xrf91bfrDqZeK3r1ymByLiJ/+6s4vHy42m5t/jBjL/Wv84HjzSXa83P/aAwDHOxin033HC/nne4+WDrZ+1ufv34mIYjv+/t5Y7B/GH43RdF+MQkRM/juX5dtyHXMXp7H7OCK+2K39uZhK50DaK58ejZ/EfqOv8fMvxc+nZe198rP4whnUBYbN06T/udXt/svH1XTf/f4vpj3U6WX9X3Kppf20D3wR/6D/G+nR/109aYyPfv+9dmri1bLHEV8ejTiIvd/R/xzEz/WI/+EJ4//lK+++36us9euIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m85Rz/YeDf7x6fU3e5Ul7Z/sEb94TPu/fsL2/+Z/9370tdfE/+YH3eLn453XxE/GxG+cMP7i5O+KvcqS+Ms92n/c83/9hPGf/XXnlWXDAYDBaWzvrC1Wq5VNCYmLn0h+ZS9ANbomPutXrLHoXvTzD9r39JGiVuv1F/yse1GvHuMsZt2Ai+Dwpo+I/w66MgAAAAAAAAAAAAAAQFf9+MTSoNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA//+YXdZi") creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) rmdir(&(0x7f0000000180)='./file0/../file0\x00') 233.220551ms ago: executing program 0 (id=2192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000006340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r4}, 0x18) 207.645673ms ago: executing program 0 (id=2193): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x5b) sendfile(r0, r1, &(0x7f0000000000), 0x6) dup3(0xffffffffffffffff, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001c6000/0x14000)=nil, &(0x7f00008ad000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x18, 0x0, 0x0, 0x45}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x68, 0x2, [@TCA_BASIC_EMATCHES={0x64, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_META={0x5c, 0x9, 0x0, 0x0, {{0x200, 0x4, 0x582}, [@TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='Q2', @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="05", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="6faeee5aeda72c4af0"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x89}, {0x9, 0x60, 0x1}}}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="f7c8", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x41, 0x1}, {0x2a0e, 0x40, 0x1}}}]}}]}]}]}}]}, 0x98}}, 0x0) 173.150546ms ago: executing program 0 (id=2194): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@u}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) 62.625545ms ago: executing program 3 (id=2195): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x6, 0x756, &(0x7f00000002c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) 30.572897ms ago: executing program 2 (id=2196): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xd86, &(0x7f0000001580)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0xd50, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev}, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x0, @dev, @loopback, [@srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@mcast1, @empty, @private2, @private1, @private1, @loopback, @local]}, @dstopts={0x0, 0x193, '\x00', [@generic={0x0, 0x5f, "f0edb1af7badf7491d2500721be4cce0542133657e2d12f0ae3e134727e49fe7c04867be7426e8cbefd47520beacbe5c36083a972cb3b73de48f661a252e0b0a5a236ddf29543f29a5e18fd1c7b54248c8b03dc91385c9160f3394ff0708c8"}, @hao={0xc9, 0x10, @private1}, @jumbo, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x800, 0x0, 0x0, 0x4]}}, @jumbo, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xbc4, "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"}]}]}}}}}}}, 0x0) 0s ago: executing program 4 (id=2197): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f0000003040)="$eJzs3AuYjtX6MPD7Xms9DElvkxyGtdb98KbBMiTJIUkOSZJsSXJKCE2SJCTGWdKQhBwnyWEIyWEak8b5fMg5SZImSUJCkvVds7c+e+/6//v23n35vv/cv+ta17vu53nu9aw198y8z/PM9c43PUbVaVa3ZhMigv8I/u0lCQBiAGAYAFwHAAEAVIytGJu9P4/EpP/sJOzfhr+18aHUP38i7P8dXP+cjeufs3H9czauf87G9c/ZuP45G9c/Z+P6M5aTbZ9T5Po/veWCP/+c3H6z8fP/nIzf//8HySo7+YuNZW/s+S+kcP1zNq5/zsb1z9m4/jkb1z9n4/rnbFz/nI3rz1hO9u8/O75Kfzvg9oe2q/39xxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsZzjvr1AA8Ev/as+LMcYYY4wxxhhjfxyf+2rPgDHGGGOMMcYYY//3IQiQoCCAXJAbYiAP5IVrIB9cC/nhOojA9RALN0ABuBEKQiEoDEUgDopCMdBgwAJBCMWhBEThJigJN0M8lILSUAYclIUEKAfl4RaoALdCRbgNKsHtUBmqQFWoBndAdbgTasBdUBPuhlpQG+pAXbgH6sG9UB/ugwZwPzSEB6ARPAiN4S/QBB6CpvAwNINHoDk8Ci2gJbSC1tDm38p/AfrAi9AX+kES9IcBMBAGwWAYAkNhGLwEw+FlGAGvQDKMhFHwKoyG12AMvA5jYRyMhzdgAkyESTAZpsBUSIE3YRq8BdPhbZgBM2EWzIZUmANz4R2YB/NhAbwLC+E9WASLYQkshTR4H9JhGWTAB7AcPoRMWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4CHbATtgFu2EP7IV98DHsh0/gAHwKB+GzfzH/3D/l90RAQIECFSrMhbkwBmMwL+bFfJgP82N+jGAEYzEWC2ABLIgFsTAWxjiMw2JYDA0aJCQsjsUxilEsiSUxHuOxNJZGhw4TMAHL4y1YAStgRayIlbASVsYqWAWrYTWsjtWxBtbAmlgTa2EtrIN18B68B+/F+lgfG2ADbIgNsRE2wsbYGJtgE2yKTbEZNsPm2BxbYAtsha2wDbbBttgW22E77IAdsCN2xM7YGRMxEbtgF+yKXbEbdsPu2B17YA/sib2wF76AL+CL+CL2w1qiPw7AATgIB+EQHIpD8SUcji/jy/gKJuNIHIWv4qv4Go7BszgWx+F4HI/VxUSchJORxFRMwRSchtNwOk7HGTgTZ+JsTMU5OBfn4jycj/PxXVyI7+F7uBgX41JMwzRMx2WYgRm4HM9hJq7AlbgKV+MaXI3rcD2uw424CTfiFtyC23AbfoQf4U7cibtxN+5FBYAf4yf4CSbjQTyIh/AQHsbDeASPYBZm4VE8isfwGB7H43gCT+BJPIWn8RSewTN4Fs/heTyPF/ACXsTn4r5qurfUhmQQ2ZRQIpfIJWJEjMgr8op8Ip/IL/KLiIiIWBErCogCoqAoKAqLwiJOxIliopgwwggSoSguiouoiIqSoqSIF/GitCgtnHAiQSSI8qK8qCAqiIriNlFJ3C4qiyqivasmqonqooOrIe4SNUVNUUvUFnVEXVFX1BP1RH1RXzQQDURD0VA0Eg+KxqI/DsGHRHZlmomR2FyMwhaipWglWovX8DHRVozBdqK96CCeEONwLHYWbV2ieEp0EZOwq3hGTMZnRXcxFXuI50VP0Uv0Fi+IPqKd6yv6iRnYXwwQs3GQGCyGiKFiHtYW2RWrI14RyWKkGCVeFUvxNTFGvC7GinFivHhDTBATxSQxWUwRU0WKeFNME2+J6eJtMUPMFLPEbJEq5oi54h0xT8wXC8S7YqF4TywSi8USsVSkifdFulgmMsQHYrn4UGSKFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2i4/EDrFT7BK7xR6xV+wTH4v94hNxQHwqDorPxCHxuTgsvhBHxJciS3wljoqvxTHxjTguvhUnxHfipDglTovvxRnxgzgrzonz4kdxQfwkLoqfxSXhBUiUQkqpZCBzydwyRuaReeU1Mp+8VuaX18mIvF7GyhtkAXmjLCgLycKyiIyTRWUxqaWRVpIMZXFZQkblTbKkvFnGy1KytCwjnSwrE2Q5WV7eIivIW2VFeZusJG+XlWUVWVVWk3fI6vJOWUPeJWvKu2UtWVvWkXXlPbKevFfWl/fJBvJ+2VA+IBvJB+Uvz6ibyodlM/mIbC4flS1kS9lKtpZt5GOyrXxctpPtZQf5hOwoO8nO8kmZKJ+SXeTTsqt8RnaTz8ru8jnZQz4ve8pesrf8WV6SXvaV/WSS7C8HyIFykBwsh8ihcph8SQ6XL8sR8hWZLEfKUfJVOVq+JsfI1+VYOU6Ol2/ICXKinCQnyylyqkyRb8pp8i05Xb4tZ8iZcpacLVPlHDnk8kgL/g/y3/qN/BF/Pfs2uV1+JHfInXKX3C33yL1yn9wn98v98oA8IA/Kg/KQPCQPy8PyiDwis2SWPCqPymPymDwuj8sT8oQ8KU/JH+X38oz8QZ6V5+Q5+aO8IC/Ii5e/BqBQCSWVUoHKpXKrGJVH5VXXqHzqWpVfXaci6noVq25QBdSNqqAqpAqrIipOFVXFlFZGWUUqVMVVCRVVN+HlCwpVWpVRTpVVCarcv5KvSqqbVbwq9Q/5vze/NqqNaqvaqnaqneqgOqiOqqPqrDqrRJWouqguqqvqqrqpbqq76q56qB6qp+qpeqveqo/qo/qqvipJJakBaqAapAarIWqoGqZeUsPVcDVCjVDJKlmNUqPUaDVajVFj1Fg1Vo1X49UENUFNUpPUFDVFpagUNU1NU9PVdDVDzVCz1CyVqlLVXDVXzVPz1AK1QC1UC9UitUgtUUtUmkpT6SpdZagMtVwtV5lqhVqhVqlVao1ao9apdWqD2qA2qU1qi9qiMtV2tV3tUDvULrVL7VF71D61T+1X+9UBdUAdVAfVIXVIHVaH1RF1RGWpLHVUHVXH1DF1XB1XJ9QJdVKdVKfVaXVGnVFn1Vl1Xp1XF9QFdVFdVJfUpezLvkAEIlCBCnIFuYKYICbIG+QN8gX5gvxB/iASRILYIDYoENwYFAwKBYWDIkFcUDQoFujABDagIAyKByWCaHBTUDK4OYgPSgWlgzKBC8oGCUG5oHxwS1AhuDWoGNwWVApuDyoHVYKqQbXgjqB6cGdQI7grqBncHdQKagd1grrBPUG94N6gfnBf0CC4P2gYPBA0Ch4MGgd/CZoEDwVNg4eDZsEjQfPg0aBF0DJoFbQO2lweX/0h43t/ttDjrq/up5N0fz1AD9SD9GA9RA/Vw/RLerh+WY/Qr+hkPVKP0q/q0fo1PUa/rsfqcXq8fkNP0BP1JD1ZT9FTdYp+U0/Tb+np+m09Q8/Us/Rsnarn6Ln6HT1Pz9cL9Lt6oX5PL9KL9RK9VKfp93W6XqYz9Ad6uf5QZ+oVeqVepVfrNXqtXqfX6w16o96kN+steqveprfrj/QOvVPv0rv1Hr1X79Mf6/36E31Af6oP6s/0If25Pqy/0Ef0lzpLf6WP6q/1Mf2NPq6/1Sf0d/qkPqVP6+/1Gf2DPqvP6fP6R31B/6Qv6p/1Je2zL+6z396NMsrkMrlMjIkxeU1ek8/kM/lNfhMxERNrYk0BU8AUNAVNYVPYxJk4U8wUM9nIkCluipuoiZqSpqSJN/GmtCltnHEmwSSY8qa8qWAqmIqmoqlkKpnKprKpaqqaO8wd5k5zp7nL3GXuNneb2qa2qWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlqmppmpplpbpqbFqaFaWVamTamjWlr2pp2pp3pYDqYjqaj6Ww6m0STaLqYLqar6Wq6mW6mu+luepgepqfpaXqb3qaP6WP6mr4mySSZAWaAGWQGmSFmiBlmhpnhZrgZYUaYZJNsRplRZrQZbcaYMWasGWfGmzfMBDPRTDKTzRQz1aSYFDPNTDPTzXQzw8wws8wsk2pSzVwz18wz88wCs8AsNAvNIrPILDFLTJpJM+km3WSYDLPcLDeZJtOsNCvNarParDVrzXqz3mw0G81ms9lsNVvNdrPd7DA7zC6zy+wxe8w+s8/sN/vNAXPAHDQHzSFzyCOAOWKOmCyTZY6ao+aYOWaOm+PmhDlhTpqT5rQ5bc6YM+asOWvOm/PmgvnJXDQ/m0vGmxibx+a119h89lqb315n/zkubIvYOFvUFrPaFrSF/iE21tp4W8qW/uUW05az8THZr2Wss2Vtgi1nK9sqtqqtZu+w1e2dtsav4nr2Xlvf3mcb2PttXXvPP8QN7QO2kX3ENraP2ia2pW1qW9tm9hHb3D5qW9iWtpVtbTvaTrazfdIm2qdsF/v0r+J0u8yutxvsRrvJ7ref2PP2R3vMfmMv2J9sX9vPDrMv2eH2ZTvCvmKT7chfxePtG3aCnWgn2cl2ip36q3iWnW1T7Rw7175j59n5v4rT7Pt2oc2wi+xiu8Qu/WucPacM+4Fdbj+0mXaFXWlX2dV2jV1r1/3vua6yW+xWu83usx/bHXan3WV32z1271/j7HUcsJ/ag/Yze9R+bQ/bL+wRe9xm2a/+Gmev77j91p6w39mT9pQ9bb+3Z+wP9qw9l71+n7327+3P9pL1FghJkCRFAeWi3BRDeSgvXUP56FrKT9dRhK6nWLqBCtCNVJAKUWEqQnFUlIqRJkOWiEIqTiUoSjdRSbqZ4qkUlaYy5KgsJVA5Kk+3UAW6lSrSbVSJbqfKVIWqUjW6g6rTnVSD7qKadDfVotpUh+rSPVSP7qX6dB81oPupIT1AjehBakx/oSb0EDWlh6kZPULN6VFqQS2pFbWmNvQYtaXHqR21pw70BHWkTtSZnqREeoq60NPUlZ6hbvQsdafnqAc9Tz2pF/WmF6gPvUh9qR8lUX8aQANpEA2mITSUhtFLNJxephH0CiXTSBpFr9Joeo3G0Os0lsbReHqDJtBEmkSTaQpNpRR6k6bRWzSd3qYZNJNm0WxKpTk0l96heTSfFtC7tJDeo0W0mJbQUkqj9ymdllEGfUDL6UPKpBW0klbRalpDa2kdracNtJE20WbaQltpG22nj2gH7aRdtJv20F7aRx/Tfspz+QfuMzpEn9Nh+oKO0JeURV/RUfqajtE3dJy+pRP0HZ2kU3Savqcz9AOdpXN0nn6kC/QTXaSf6RJ5ghBDEcpQhUGYK8wdxoR5wrzhNWG+8Nowf3hdGAmvD2PDG8IC4Y1hwbBQWDgsEsaFRcNioQ5NaEMKw7B4WCKMhjeFJcObw/iwVFg6LBO6sGyYEJYLy4e3hBXCW8OK4W1hpfD2sHJYJXzk/mrhHWH18M6wRnhXWDO8O6wV1g7rhHXDe8J64b1h/fC+sEF4f1ghfCBsFD4YwuXPqzQNHw6bhY+EzcNHwxZhy7BV2DpsEz4Wtg0fD9uF7cMO4RNhx7BT2Dl8MkwMnwq7hE//7v6ksH84IBwYDgy9v08uiS6NpkXfj6ZHl0Uzoh9El0c/jGZGV0RXRldFV0fXRNdG10XXRzdEN0Y3RTdHt0S3RrdFva+bGxw64aRTLnC5XG4X4/K4vO4al89d6/K761zEXe9i3Q2ugLvRFXSFXGFXxMW5oq6Y084468iFrrgr4aLuJlfS3eziXSlX2pVxzpV1Ca61a+PauLbucdfOtXcd3BPuCdfJdXJPuifdU66Le9p1dc+4bu5Z1909555zz7uerpfr7V5wfdyLrq/r55JckhvgBrhBbpAb4oa4YW6YG+6GuxFuhEt2yW6UG+VGu9FujBvjxrqxbrwb7ya4CW6Sm+SmuCkuxaW4aW6am+6muwAAZrlZLtWlurlurpvn5rkFboFbGL/QLXKL3BK3xKW5NJfu0l2Gy3DL3XKX6TLdSrfSrXar3Vq31q13691Gt9FtdpvdVrfVbXfb3Q63w+1yu9wet8ftc/vcfrffHXAH3EF30B1yh9xhd9gdcV+6LPeVO+q+dsfcN+64+9adcN+5k+6UO+2+d2fcD+6sO+fOux/dBfeTu+h+dpecdymRNyPTIm9FpkfejsyIzIzMisyOpEbmROZG3onMi8yPLIi8G1kYeS+yKLI4siSyNJIWeT+SHlkWyYh8EFke+TCSGVkRWRlZFVkdWaPAF90R+uK+hI/6m3xJf7OP96V8aV/GO1/WJ/hyvry/xVfwt/qK/jZfyd/uK/sqvqp/1LfwLX0r39q38Y/5tv5x38639x38E76j7+Q7+yd9on/Kd/FP+67+Gd/NP+u7++d8D/+87+l7+d7+Bd/Hv+j7+n4+yff3A/xAP8gP9kP8UD/Mv+SH+5f9CP+KT/Yj/Sj/qh/tX/Nj/Ot+rB/nx/s3/AQ/0U/yk/0UP9Wn+Df9NP+Wn+7f9jP8TD/Lz/apfo6f69/x8/x8v8C/6xf69/wiv9gv8Ut9mn/fp/tlPkOAX+4/9Jl+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/nt/iO/w+/0u/xuv8fv9fv8x36//8Qf8J/6g/4zf8h/7g/7L/wR/6XP8l/5o/5rf8x/44/7b/0J/50/6U/50/57f8b/4M/6c/68/9Ff8D/5i/5nf+lf/Mxa7T/s+TljjDHG2P9fBv7O/v6/sU0BgLjc/8l7f+3OIll/v18CwOaCf+sPFnEdIwDwVL8eD/3SatVKSkq6fGymhKDEYgCI/NMJLscroAN0gkRoD+V/c36DRa8L9DvjR28DyPt3OTFwJb4y/uf/xfiPPTE+vVJ4Pva/GX8xQHyJKznZd+G/xCugQ/ZqoD1U+C/GL9T2d+af54sUgHZ/l5MPANrl+ef5J8Dj8DQk/sORjDHGGGOMMcbY3wwWVbv93v1z9v15nLqSkxuuxL93f84YY4wxxhhjjLGr79levZ98LDGxfTfucIc7OazT6b855mr/ZmKMMcYYY4z90a5c9F/ZludqTogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuB/oz/NHa118gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8rAAD///PANII=") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)={0x2d, 0x6, 0x0, {0x0, 0x4, 0x4, 0x0, 'GPL\x00'}}, 0x2d) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r4, &(0x7f0000000080)='3', 0x1, 0x0) kernel console output (not intermixed with test programs): escriptor's value: 81 [ 262.287033][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 262.296745][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 262.297086][ T6144] EXT4-fs (loop4): unmounting filesystem. [ 262.306246][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.306270][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 262.306290][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 262.343720][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 262.352720][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.363526][ T24] usb 2-1: config 0 descriptor?? [ 262.582111][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1737'. [ 262.626470][ T6050] EXT4-fs (loop2): unmounting filesystem. [ 262.637380][ T24] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 262.640833][ T6285] loop4: detected capacity change from 0 to 512 [ 262.655111][ T6285] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 262.666007][ T24] usb 2-1: USB disconnect, device number 36 [ 262.675494][ T24] usblp0: removed [ 262.682009][ T6285] EXT4-fs (loop4): 1 truncate cleaned up [ 262.696272][ T6285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 262.803849][ T5674] EXT4-fs (loop3): unmounting filesystem. [ 262.831277][ T6303] syz.3.1746[6303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.831349][ T6303] syz.3.1746[6303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.857240][ T6144] EXT4-fs (loop4): unmounting filesystem. [ 263.091238][ T6306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.126602][ T28] audit: type=1326 audit(1721906621.384:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.0.1745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ec9b75f19 code=0x0 [ 263.176684][ T6310] device pim6reg1 entered promiscuous mode [ 263.185164][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1749'. [ 263.197217][ T6299] loop2: detected capacity change from 0 to 512 [ 263.203798][ T6299] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 263.216043][ T6299] EXT4-fs (loop2): 1 orphan inode deleted [ 263.221948][ T6299] EXT4-fs (loop2): 1 truncate cleaned up [ 263.222074][ T6299] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 263.274850][ T6320] loop4: detected capacity change from 0 to 512 [ 263.288832][ T6320] EXT4-fs (loop4): 1 orphan inode deleted [ 263.294447][ T6320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 263.295282][ T28] audit: type=1400 audit(1721906621.564:470): avc: denied { write } for pid=6329 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.303290][ T6320] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 263.359501][ T6334] loop3: detected capacity change from 0 to 512 [ 263.365920][ T6334] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.373849][ T6334] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1757: inline data xattr refers to an external xattr inode [ 263.388808][ T6334] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1757: couldn't read orphan inode 12 (err -117) [ 263.400671][ T6334] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 263.446260][ T6050] EXT4-fs (loop2): unmounting filesystem. [ 263.479957][ T6337] loop2: detected capacity change from 0 to 128 [ 263.487604][ T6337] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 263.496101][ T6337] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 264.141091][ T6349] syz.0.1759[6349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.141162][ T6349] syz.0.1759[6349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.277410][ T5674] EXT4-fs (loop3): unmounting filesystem. [ 264.306289][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 264.337697][ T6363] loop0: detected capacity change from 0 to 512 [ 264.344369][ T6363] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 264.357409][ T6361] device pim6reg1 entered promiscuous mode [ 264.399739][ T6375] loop1: detected capacity change from 0 to 128 [ 264.435618][ T6375] syz.1.1770: attempt to access beyond end of device [ 264.435618][ T6375] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 264.455066][ T2695] kworker/u4:8: attempt to access beyond end of device [ 264.455066][ T2695] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 264.482217][ T6379] loop1: detected capacity change from 0 to 512 [ 264.488429][ T6379] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.495874][ T6379] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1772: inline data xattr refers to an external xattr inode [ 264.510679][ T6379] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1772: couldn't read orphan inode 12 (err -117) [ 264.522965][ T6379] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 264.630111][ T65] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 264.637570][ T24] usb 5-1: device descriptor read/64, error -71 [ 265.316334][ T6] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 265.329431][ T6391] syz.0.1773[6391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.329506][ T6391] syz.0.1773[6391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.357449][ T5162] EXT4-fs (loop1): unmounting filesystem. [ 265.439664][ T6408] device pim6reg1 entered promiscuous mode [ 265.502238][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.506290][ T24] usb 5-1: device descriptor read/64, error -71 [ 265.509343][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.523269][ T6409] device bridge_slave_0 entered promiscuous mode [ 265.530518][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.537429][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.544507][ T6409] device bridge_slave_1 entered promiscuous mode [ 265.557679][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 265.562638][ T6416] loop1: detected capacity change from 0 to 512 [ 265.569524][ T6416] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 265.617891][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.624779][ T6409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.631871][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.638649][ T6409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.663372][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.671408][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.678504][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.686366][ T65] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 265.694910][ T65] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 265.704798][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.718595][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.727576][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.734411][ T5737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.736355][ T6] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 265.742403][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.749816][ T6] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 265.757704][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.772714][ T5737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.781910][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.781922][ T6] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 265.798475][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 265.798621][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.815625][ T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 265.825926][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.835719][ T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.845730][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 265.858935][ T6] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 265.859141][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.877901][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.887634][ T6] usb 4-1: config 0 descriptor?? [ 265.887721][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.906613][ T65] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.915612][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.917512][ T6409] device veth0_vlan entered promiscuous mode [ 265.929589][ T65] usb 3-1: Product: 邮홪ᨥಘ쐓⠠䠘쿀鑥㝤弰곯릪乣ඳ⻴䐜ﮚ⿔瓾뵉䬾缚딘琔晇赗헺ꋠＨ⊁덋賨稦᭯讔㞤猉鐈퓙آⓇ줎驣䘈䱝鋴떨炞駥꩑젇 [ 265.930478][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.956760][ T65] usb 3-1: Manufacturer: ᠉ [ 265.961260][ T65] usb 3-1: SerialNumber: syz [ 265.962677][ T6409] device veth1_macvtap entered promiscuous mode [ 265.979882][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.989677][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.997823][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.023472][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.040553][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.076293][ T24] usb 5-1: device descriptor read/64, error -71 [ 266.098503][ T2695] bridge0: port 3(gretap0) entered disabled state [ 266.107038][ T2695] device gretap0 left promiscuous mode [ 266.112427][ T2695] bridge0: port 3(gretap0) entered disabled state [ 266.168241][ T6] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 266.251158][ T6] usb 4-1: USB disconnect, device number 35 [ 266.259864][ T6] usblp0: removed [ 266.343931][ T6426] loop0: detected capacity change from 0 to 1024 [ 267.047129][ T2695] device bridge_slave_1 left promiscuous mode [ 267.053158][ T2695] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.066991][ T2695] device bridge_slave_0 left promiscuous mode [ 267.078408][ T2695] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.096338][ T65] usb 3-1: 0:2 : does not exist [ 267.102311][ T65] usb 3-1: USB disconnect, device number 35 [ 267.115127][ T2695] device veth1_macvtap left promiscuous mode [ 267.124757][ T6428] loop1: detected capacity change from 0 to 512 [ 267.135852][ T2695] device veth0_vlan left promiscuous mode [ 267.146980][ T6428] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.163387][ T6428] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1786: inline data xattr refers to an external xattr inode [ 267.178787][ T6428] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1786: couldn't read orphan inode 12 (err -117) [ 267.190593][ T6428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 267.221493][ T6144] EXT4-fs (loop4): unmounting filesystem. [ 267.520415][ T6443] device pim6reg1 entered promiscuous mode [ 267.606177][ T6459] loop0: detected capacity change from 0 to 512 [ 267.612932][ T6459] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 267.628414][ T6452] loop4: detected capacity change from 0 to 512 [ 267.634882][ T6452] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 267.648429][ T6452] EXT4-fs (loop4): 1 orphan inode deleted [ 267.658144][ T6452] EXT4-fs (loop4): 1 truncate cleaned up [ 267.663808][ T6452] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.740588][ T6050] EXT4-fs (loop2): unmounting filesystem. [ 267.876531][ T6467] loop3: detected capacity change from 0 to 1024 [ 268.682100][ T5162] EXT4-fs (loop1): unmounting filesystem. [ 268.688574][ T6461] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 268.874344][ T6461] EXT4-fs (loop4): Remounting filesystem read-only [ 268.881136][ T6144] EXT4-fs (loop4): unmounting filesystem. [ 268.909888][ T6472] loop3: detected capacity change from 0 to 512 [ 268.968922][ T6472] EXT4-fs (loop3): 1 orphan inode deleted [ 268.975017][ T6472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 268.985718][ T6472] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038 (0x7fffffff) [ 268.994615][ T6490] loop4: detected capacity change from 0 to 2048 [ 269.015212][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.022195][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.029555][ T6473] device bridge_slave_0 entered promiscuous mode [ 269.041476][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.048464][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.052726][ T6490] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 269.066894][ T6473] device bridge_slave_1 entered promiscuous mode [ 269.093470][ T6496] loop0: detected capacity change from 0 to 512 [ 269.107130][ T6496] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.216294][ T6470] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 269.370640][ T6144] EXT4-fs (loop4): unmounting filesystem. [ 269.401896][ T6496] EXT4-fs (loop0): 1 truncate cleaned up [ 269.408978][ T6496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 269.461945][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.468812][ T6473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.475904][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.482695][ T6473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.515614][ T28] audit: type=1400 audit(1721906627.784:471): avc: denied { ioctl } for pid=6506 comm="syz.4.1809" path="socket:[50359]" dev="sockfs" ino=50359 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 269.564580][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.572370][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.582212][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.604192][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.616580][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.623438][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.636310][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.645844][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.652695][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.659963][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.674061][ T6409] EXT4-fs (loop0): unmounting filesystem. [ 269.676253][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 269.688030][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.702197][ T6511] loop0: detected capacity change from 0 to 512 [ 269.705192][ T6473] device veth0_vlan entered promiscuous mode [ 269.714352][ T6470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.721027][ T6473] device veth1_macvtap entered promiscuous mode [ 269.731477][ T6511] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.738511][ T6470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.739286][ T4134] bridge0: port 3(gretap0) entered disabled state [ 269.748181][ T6470] usb 2-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 269.755921][ T6511] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.1810: inline data xattr refers to an external xattr inode [ 269.763268][ T6470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.778543][ T6511] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1810: couldn't read orphan inode 12 (err -117) [ 269.786178][ T6470] usb 2-1: config 0 descriptor?? [ 269.797936][ T4134] device gretap0 left promiscuous mode [ 269.807482][ T6511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 269.807702][ T4134] bridge0: port 3(gretap0) entered disabled state [ 269.856089][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.864521][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.873167][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.881105][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.888854][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.896853][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.904711][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.912130][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.919326][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.966294][ T24] usb 4-1: device descriptor read/64, error -71 [ 270.135026][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.143256][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.151689][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.159987][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.246647][ T4134] device bridge_slave_1 left promiscuous mode [ 270.252611][ T4134] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.259990][ T4134] device bridge_slave_0 left promiscuous mode [ 270.266008][ T4134] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.275131][ T4134] device veth1_macvtap left promiscuous mode [ 270.281073][ T4134] device veth0_vlan left promiscuous mode [ 270.288207][ T6470] wacom 0003:056A:00BC.0036: unknown main item tag 0x0 [ 270.297099][ T6470] wacom 0003:056A:00BC.0036: unknown main item tag 0x0 [ 270.310692][ T6520] loop2: detected capacity change from 0 to 1024 [ 270.325582][ T6470] wacom 0003:056A:00BC.0036: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 270.353689][ T6470] wacom 0003:056A:00BC.0036: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.1-1/input0 [ 270.393269][ T24] usb 4-1: device descriptor read/64, error -71 [ 270.400049][ T6470] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00BC.0036/input/input21 [ 270.502214][ T6347] usb 2-1: USB disconnect, device number 37 [ 270.509758][ T28] audit: type=1326 audit(1721906628.784:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 270.533580][ T28] audit: type=1326 audit(1721906628.784:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 270.556759][ T28] audit: type=1326 audit(1721906628.794:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 270.581045][ T28] audit: type=1326 audit(1721906628.794:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 270.607563][ T6409] EXT4-fs (loop0): unmounting filesystem. [ 270.607955][ T28] audit: type=1326 audit(1721906628.794:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 270.616150][ T6526] loop4: detected capacity change from 0 to 512 [ 270.636824][ T28] audit: type=1326 audit(1721906628.794:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 270.642832][ T6526] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 270.679495][ T28] audit: type=1326 audit(1721906628.794:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 270.704648][ T28] audit: type=1326 audit(1721906628.794:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 270.728189][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 270.764489][ T6526] EXT4-fs (loop4): 1 orphan inode deleted [ 270.779916][ T6526] EXT4-fs (loop4): 1 truncate cleaned up [ 270.785402][ T6526] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 270.795673][ T28] audit: type=1326 audit(1721906628.794:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 270.841080][ T6537] loop0: detected capacity change from 0 to 128 [ 270.943239][ T6144] EXT4-fs (loop4): unmounting filesystem. [ 271.136302][ T24] usb 4-1: device descriptor read/64, error -71 [ 271.227531][ T6545] loop1: detected capacity change from 0 to 512 [ 271.238080][ T6545] EXT4-fs (loop1): 1 orphan inode deleted [ 271.243639][ T6545] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 271.252557][ T6545] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038 (0x7fffffff) [ 271.321314][ T5162] EXT4-fs warning (device loop1): __ext4_unlink:3289: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 271.334195][ T5162] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 271.351509][ T5162] EXT4-fs (loop1): Remounting filesystem read-only [ 271.358039][ T5162] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 271.556359][ T24] usb 4-1: device descriptor read/64, error -71 [ 271.741840][ T24] usb usb4-port1: attempt power cycle [ 271.790318][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.797930][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.805336][ T6556] device bridge_slave_0 entered promiscuous mode [ 271.812442][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.819481][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.826988][ T6556] device bridge_slave_1 entered promiscuous mode [ 271.887036][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.894511][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.911066][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.922331][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.930452][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.937297][ T5737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.950955][ T6566] loop0: detected capacity change from 0 to 1024 [ 271.958169][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.968037][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.976114][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.982996][ T5737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.004507][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.011959][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.026232][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.036969][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.048121][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.055930][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.085632][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.091058][ T6568] loop4: detected capacity change from 0 to 512 [ 272.094734][ T6556] device veth0_vlan entered promiscuous mode [ 272.104922][ T6568] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.119033][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.129318][ T6556] device veth1_macvtap entered promiscuous mode [ 272.135481][ T6568] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.1827: inline data xattr refers to an external xattr inode [ 272.139864][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.161757][ T6568] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1827: couldn't read orphan inode 12 (err -117) [ 272.171899][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.297505][ T2695] bridge0: port 1(gretap0) entered disabled state [ 272.304579][ T2695] device gretap0 left promiscuous mode [ 272.309991][ T2695] bridge0: port 1(gretap0) entered disabled state [ 272.549476][ T6575] loop3: detected capacity change from 0 to 512 [ 272.557082][ T6575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 272.568742][ T6575] EXT4-fs (loop3): 1 orphan inode deleted [ 272.574400][ T6575] EXT4-fs (loop3): 1 truncate cleaned up [ 272.581723][ T2695] device veth1_macvtap left promiscuous mode [ 272.588687][ T2695] device veth0_vlan left promiscuous mode [ 272.626288][ T6] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 272.706244][ T6419] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 272.759307][ T6596] loop3: detected capacity change from 0 to 128 [ 273.707403][ T6610] device pim6reg1 entered promiscuous mode [ 273.708414][ T6607] loop4: detected capacity change from 0 to 512 [ 273.719235][ T6419] usb 3-1: Using ep0 maxpacket: 16 [ 273.727860][ T6607] EXT4-fs (loop4): 1 orphan inode deleted [ 273.733430][ T6607] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 273.796288][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.807310][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.817022][ T6] usb 1-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 273.825872][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.834667][ T6] usb 1-1: config 0 descriptor?? [ 274.198442][ T6419] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 274.285289][ T6419] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.294840][ T6419] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 274.304262][ T6419] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 1024 [ 274.315166][ T6419] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 274.325061][ T6419] usb 3-1: config 1 interface 0 has no altsetting 0 [ 274.331426][ T6419] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 274.340260][ T6419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.396502][ T6419] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 274.547122][ T6] wacom 0003:056A:00BC.0037: unknown main item tag 0x0 [ 274.553853][ T6] wacom 0003:056A:00BC.0037: unknown main item tag 0x0 [ 274.560815][ T6] wacom 0003:056A:00BC.0037: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 274.570372][ T6] wacom 0003:056A:00BC.0037: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.0-1/input0 [ 274.581859][ T6] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BC.0037/input/input24 [ 274.619443][ T65] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 274.672395][ T6629] overlayfs: workdir and upperdir must be separate subtrees [ 274.896543][ T6] usb 1-1: USB disconnect, device number 26 [ 274.903589][ T6419] scsi host1: usb-storage 3-1:1.0 [ 275.176264][ T65] usb 5-1: device descriptor read/64, error -71 [ 275.327181][ T6640] loop0: detected capacity change from 0 to 512 [ 275.333632][ T6640] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 275.345172][ T6640] EXT4-fs (loop0): 1 orphan inode deleted [ 275.350764][ T6640] EXT4-fs (loop0): 1 truncate cleaned up [ 275.366290][ T6347] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 275.404910][ T6648] loop1: detected capacity change from 0 to 512 [ 275.411657][ T6648] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.419214][ T6648] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1847: inline data xattr refers to an external xattr inode [ 275.434124][ T6648] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1847: couldn't read orphan inode 12 (err -117) [ 275.494963][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 275.494978][ T28] audit: type=1326 audit(1721906633.764:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff924d75f19 code=0x7ffc0000 [ 275.524084][ T28] audit: type=1326 audit(1721906633.764:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff924d75f19 code=0x7ffc0000 [ 275.548302][ T28] audit: type=1326 audit(1721906633.764:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff924d75f19 code=0x7ffc0000 [ 275.572290][ T28] audit: type=1326 audit(1721906633.764:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff924d75f19 code=0x7ffc0000 [ 275.595554][ T65] usb 5-1: device descriptor read/64, error -71 [ 276.494074][ T6] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 276.513617][ T28] audit: type=1326 audit(1721906633.764:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff924d75f19 code=0x7ffc0000 [ 276.537536][ T6347] usb 4-1: Using ep0 maxpacket: 8 [ 276.541835][ T28] audit: type=1326 audit(1721906633.764:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff924d75f19 code=0x7ffc0000 [ 276.545461][ T6419] usb 3-1: USB disconnect, device number 36 [ 276.566435][ T28] audit: type=1326 audit(1721906633.764:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff924d75f19 code=0x7ffc0000 [ 276.607831][ T6663] device pim6reg1 entered promiscuous mode [ 276.610478][ T2695] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK [ 276.624355][ T28] audit: type=1326 audit(1721906633.764:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff924d75f19 code=0x7ffc0000 [ 276.649241][ T28] audit: type=1326 audit(1721906633.764:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7ff924d75f19 code=0x7ffc0000 [ 276.652401][ T2695] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK [ 276.673383][ T28] audit: type=1326 audit(1721906633.764:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff924d75f19 code=0x7ffc0000 [ 276.682915][ T2695] sd 1:0:0:0: [sdb] Sense not available. [ 276.713743][ T2695] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 276.720854][ T2695] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 276.726660][ T2695] sd 1:0:0:0: [sdb] Write Protect is off [ 276.732268][ T2695] sd 1:0:0:0: [sdb] Asking for cache data failed [ 276.738611][ T2695] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 276.746265][ T6347] usb 4-1: config 0 has no interfaces? [ 276.748062][ T2695] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 276.751598][ T6347] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 276.766616][ T6347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.776989][ T65] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 276.790648][ T6665] loop1: detected capacity change from 0 to 512 [ 276.799731][ T6347] usb 4-1: config 0 descriptor?? [ 276.807961][ T6665] EXT4-fs (loop1): 1 orphan inode deleted [ 276.813555][ T6665] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 276.909224][ T6556] EXT4-fs warning (device loop1): __ext4_unlink:3289: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 276.921845][ T6556] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 276.939022][ T6556] EXT4-fs (loop1): Remounting filesystem read-only [ 276.945539][ T6556] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 277.234541][ T24] usb 4-1: USB disconnect, device number 39 [ 277.339568][ T6685] overlayfs: workdir and upperdir must be separate subtrees [ 277.587923][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.594892][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.602204][ T6687] device bridge_slave_0 entered promiscuous mode [ 277.608868][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.615713][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.623109][ T6687] device bridge_slave_1 entered promiscuous mode [ 277.688929][ T2695] device bridge_slave_1 left promiscuous mode [ 277.695081][ T2695] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.702690][ T2695] device bridge_slave_0 left promiscuous mode [ 277.708722][ T2695] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.717512][ T2695] device veth1_macvtap left promiscuous mode [ 277.723410][ T2695] device veth0_vlan left promiscuous mode [ 277.723842][ T6695] loop0: detected capacity change from 0 to 512 [ 277.735845][ T6695] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.744062][ T6695] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.1861: inline data xattr refers to an external xattr inode [ 277.759048][ T6695] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1861: couldn't read orphan inode 12 (err -117) [ 277.843773][ T6698] device pim6reg1 entered promiscuous mode [ 277.861583][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.869056][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.878494][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.886903][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.895297][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.902186][ T6470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.154791][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.162793][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.171648][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.180154][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.187026][ T5737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.199686][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.208031][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.216062][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.224268][ T6] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 278.232914][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.394477][ T6715] loop4: detected capacity change from 0 to 512 [ 278.443224][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.462999][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.485067][ T6687] device veth0_vlan entered promiscuous mode [ 278.495555][ T6715] EXT4-fs (loop4): 1 orphan inode deleted [ 278.497386][ T6687] device veth1_macvtap entered promiscuous mode [ 278.501204][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 278.512497][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.518829][ T6715] EXT4-fs mount: 15 callbacks suppressed [ 278.518843][ T6715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.520392][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.525594][ T6715] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038 (0x7fffffff) [ 278.534892][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.572701][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.580743][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.588261][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.596353][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.604526][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.612688][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.621062][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.621477][ T6409] EXT4-fs (loop0): unmounting filesystem. [ 278.628361][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.646283][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 278.661189][ T6144] EXT4-fs warning (device loop4): __ext4_unlink:3289: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 278.673950][ T6] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 278.683760][ T6] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 278.685350][ T6144] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 278.693265][ T6] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 1024 [ 278.693292][ T6] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 278.693313][ T6] usb 3-1: config 1 interface 0 has no altsetting 0 [ 278.693337][ T6] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 278.693358][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.736616][ T6] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 278.742412][ T6144] EXT4-fs (loop4): Remounting filesystem read-only [ 278.761153][ T6726] loop1: detected capacity change from 0 to 256 [ 278.767181][ T6144] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 278.828477][ T6144] EXT4-fs (loop4): unmounting filesystem. [ 278.919536][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.926456][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.933558][ T6733] device bridge_slave_0 entered promiscuous mode [ 278.939856][ T6470] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 278.941183][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.954329][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.954878][ T6] scsi host1: usb-storage 3-1:1.0 [ 278.961714][ T6733] device bridge_slave_1 entered promiscuous mode [ 279.040812][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.047715][ T6733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.054772][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.061581][ T6733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.092935][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.101716][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.108915][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.119384][ T6739] loop3: detected capacity change from 0 to 512 [ 279.125636][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.125948][ T6739] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 279.133789][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.143288][ T5737] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 279.149948][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.150186][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.172764][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.179616][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.180881][ T6739] EXT4-fs (loop3): 1 orphan inode deleted [ 279.192620][ T6739] EXT4-fs (loop3): 1 truncate cleaned up [ 279.198320][ T6739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 279.218636][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.226460][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.239676][ T6733] device veth0_vlan entered promiscuous mode [ 279.245919][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.254380][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.262355][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.269832][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.287014][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.296014][ T6733] device veth1_macvtap entered promiscuous mode [ 279.308224][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.316402][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.326359][ T6470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.340123][ T6470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.349863][ T6470] usb 1-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 279.358751][ T6470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.369652][ T6470] usb 1-1: config 0 descriptor?? [ 279.379466][ T6744] device pim6reg1 entered promiscuous mode [ 279.386106][ T5674] EXT4-fs (loop3): unmounting filesystem. [ 279.396355][ T5737] usb 2-1: Using ep0 maxpacket: 8 [ 279.502052][ T6753] loop4: detected capacity change from 0 to 512 [ 279.516323][ T5737] usb 2-1: config 0 has no interfaces? [ 279.521700][ T5737] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 279.522607][ T6753] EXT4-fs (loop4): 1 orphan inode deleted [ 279.530684][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.536755][ T6753] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 279.544964][ T5737] usb 2-1: config 0 descriptor?? [ 279.557846][ T6753] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 279.558128][ T2695] device bridge_slave_1 left promiscuous mode [ 279.573655][ T2695] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.581036][ T2695] device bridge_slave_0 left promiscuous mode [ 279.587145][ T2695] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.594972][ T2695] device veth1_macvtap left promiscuous mode [ 279.600893][ T2695] device veth0_vlan left promiscuous mode [ 279.653962][ T6733] EXT4-fs warning (device loop4): __ext4_unlink:3289: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 279.666570][ T6733] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 279.683635][ T6733] EXT4-fs (loop4): Remounting filesystem read-only [ 279.690040][ T6733] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 279.847806][ T6470] wacom 0003:056A:00BC.0038: unknown main item tag 0x0 [ 279.847960][ T6733] EXT4-fs (loop4): unmounting filesystem. [ 279.860476][ T6470] wacom 0003:056A:00BC.0038: unknown main item tag 0x0 [ 279.867498][ T6470] wacom 0003:056A:00BC.0038: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 279.869985][ T6] usb 2-1: USB disconnect, device number 38 [ 279.885623][ T6470] wacom 0003:056A:00BC.0038: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.0-1/input0 [ 279.897858][ T6470] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BC.0038/input/input29 [ 279.966845][ T6419] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 280.051695][ T65] usb 1-1: USB disconnect, device number 27 [ 280.095378][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.102907][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.110301][ T6768] device bridge_slave_0 entered promiscuous mode [ 280.118924][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.125870][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.134490][ T6768] device bridge_slave_1 entered promiscuous mode [ 280.177510][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.184370][ T6768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.191556][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.198330][ T6768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.218492][ T6470] usb 3-1: USB disconnect, device number 37 [ 280.220450][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.231758][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.236252][ T6737] sddr09: could not read card info [ 280.243646][ T1365] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 280.243767][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.250594][ T1365] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 280.263116][ T1365] sd 1:0:0:0: [sdb] Write Protect is off [ 280.269771][ T1365] sd 1:0:0:0: [sdb] Asking for cache data failed [ 280.275960][ T1365] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 280.283917][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.285554][ T1365] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 280.293500][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.304998][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.313566][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.321996][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.328826][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.336069][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.348791][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.363519][ T6768] device veth0_vlan entered promiscuous mode [ 280.370206][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.378315][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.385939][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.393290][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.412917][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.422733][ T6768] device veth1_macvtap entered promiscuous mode [ 280.436289][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.449918][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.807879][ T6779] overlayfs: workdir and upperdir must be separate subtrees [ 281.065359][ T6782] loop0: detected capacity change from 0 to 256 [ 281.140768][ T6790] device pim6reg1 entered promiscuous mode [ 281.152789][ T2695] device bridge_slave_1 left promiscuous mode [ 281.159838][ T2695] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.171392][ T2695] device bridge_slave_0 left promiscuous mode [ 281.180517][ T2695] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.191654][ T2695] device veth1_macvtap left promiscuous mode [ 281.199717][ T2695] device veth0_vlan left promiscuous mode [ 281.216538][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 281.216553][ T28] audit: type=1326 audit(1721906639.494:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0364d75f19 code=0x7ffc0000 [ 281.285681][ T28] audit: type=1326 audit(1721906639.524:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0364d75f19 code=0x7ffc0000 [ 281.314777][ T28] audit: type=1326 audit(1721906639.524:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0364d75f19 code=0x7ffc0000 [ 281.343223][ T6784] loop2: detected capacity change from 0 to 40427 [ 281.350215][ T6784] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 281.362796][ T6784] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 281.371551][ T6784] F2FS-fs (loop2): invalid crc value [ 281.376774][ T28] audit: type=1326 audit(1721906639.524:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0364d75f19 code=0x7ffc0000 [ 281.400931][ T6784] F2FS-fs (loop2): Found nat_bits in checkpoint [ 281.426266][ T28] audit: type=1326 audit(1721906639.524:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0364d75f19 code=0x7ffc0000 [ 281.473415][ T6784] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 281.480325][ T28] audit: type=1326 audit(1721906639.524:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0364d75f19 code=0x7ffc0000 [ 281.503467][ T6784] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 281.520970][ T6803] 9pnet_fd: Insufficient options for proto=fd [ 281.525310][ T28] audit: type=1326 audit(1721906639.524:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0364d75f19 code=0x7ffc0000 [ 281.550152][ T28] audit: type=1326 audit(1721906639.524:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0364d75f19 code=0x7ffc0000 [ 281.575550][ T28] audit: type=1326 audit(1721906639.524:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0364d75f19 code=0x7ffc0000 [ 281.613916][ T28] audit: type=1326 audit(1721906639.524:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0364d75f19 code=0x7ffc0000 [ 281.628296][ T6784] syz.2.1887: attempt to access beyond end of device [ 281.628296][ T6784] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 281.740707][ T6473] syz-executor: attempt to access beyond end of device [ 281.740707][ T6473] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 281.847687][ T6809] loop1: detected capacity change from 0 to 40427 [ 281.869864][ T6809] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 281.877464][ T6809] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 281.920173][ T6809] F2FS-fs (loop1): Found nat_bits in checkpoint [ 281.967182][ T6809] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 281.974257][ T6809] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 281.986230][ T3156] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 282.080645][ T6822] loop2: detected capacity change from 0 to 256 [ 282.089226][ T5737] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 282.236276][ T3156] usb 1-1: Using ep0 maxpacket: 8 [ 282.318653][ T6828] loop4: detected capacity change from 0 to 256 [ 282.336303][ T5737] usb 4-1: Using ep0 maxpacket: 16 [ 282.383855][ T3156] usb 1-1: config 0 has no interfaces? [ 282.389341][ T3156] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 282.398258][ T3156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.407315][ T3156] usb 1-1: config 0 descriptor?? [ 282.466647][ T5737] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 282.480727][ T5737] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 282.692541][ T5737] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 282.707258][ T5737] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 1024 [ 282.719938][ T5737] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 282.729827][ T5737] usb 4-1: config 1 interface 0 has no altsetting 0 [ 282.736268][ T5737] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 282.745305][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.746151][ T6] usb 1-1: USB disconnect, device number 28 [ 282.786852][ T5737] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 282.927420][ T6842] overlayfs: workdir and upperdir must be separate subtrees [ 283.018147][ T5737] scsi host1: usb-storage 4-1:1.0 [ 283.239997][ T6848] device pim6reg1 entered promiscuous mode [ 283.954866][ T6854] loop1: detected capacity change from 0 to 40427 [ 283.963546][ T6854] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 283.976235][ T6470] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 283.997362][ T6854] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 284.028179][ T6854] F2FS-fs (loop1): invalid crc value [ 284.049584][ T40] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 284.066927][ T6854] F2FS-fs (loop1): Found nat_bits in checkpoint [ 284.104065][ T6865] 9pnet_fd: Insufficient options for proto=fd [ 284.196332][ T6854] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 284.205434][ T6854] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 284.249873][ T6854] syz.1.1908: attempt to access beyond end of device [ 284.249873][ T6854] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.304298][ T6871] tun0: tun_chr_ioctl cmd 1074025675 [ 284.309725][ T6871] tun0: persist enabled [ 284.314226][ T6871] tun0: tun_chr_ioctl cmd 1074025675 [ 284.320900][ T5737] usb 4-1: USB disconnect, device number 40 [ 284.328293][ T6871] tun0: persist enabled [ 284.336251][ T6844] sddr09: could not read card info [ 284.341322][ T388] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 284.350431][ T388] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 284.363417][ T388] sd 1:0:0:0: [sdb] Write Protect is off [ 284.369182][ T6470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.385138][ T6687] syz-executor: attempt to access beyond end of device [ 284.385138][ T6687] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 284.403493][ T388] sd 1:0:0:0: [sdb] Asking for cache data failed [ 284.410004][ T6470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.419734][ T388] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 284.436431][ T6470] usb 1-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75 [ 284.445472][ T6470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.455702][ T388] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 284.462474][ T6470] usb 1-1: config 0 descriptor?? [ 284.579946][ T6874] loop4: detected capacity change from 0 to 40427 [ 284.869183][ T6873] loop4: detected capacity change from 0 to 128 [ 284.942756][ T6884] device pim6reg1 entered promiscuous mode [ 285.007687][ T6470] wacom 0003:056A:037E.0039: Unknown device_type for 'HID 056a:037e'. Ignoring. [ 285.248069][ T5737] usb 1-1: USB disconnect, device number 29 [ 285.473024][ T6902] overlayfs: workdir and upperdir must be separate subtrees [ 286.801353][ T6909] loop3: detected capacity change from 0 to 40427 [ 286.814388][ T6909] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 286.822156][ T6909] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 286.832501][ T6909] F2FS-fs (loop3): Found nat_bits in checkpoint [ 286.866249][ T6470] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 286.896503][ T6909] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 286.909966][ T6909] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 286.995109][ T43] kworker/u4:2: attempt to access beyond end of device [ 286.995109][ T43] loop3: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 287.056509][ T6899] loop2: detected capacity change from 0 to 131072 [ 287.083614][ T6899] F2FS-fs (loop2): invalid crc value [ 287.090392][ T6899] F2FS-fs (loop2): Found nat_bits in checkpoint [ 287.116241][ T6470] usb 5-1: Using ep0 maxpacket: 16 [ 287.129026][ T6899] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 287.136567][ T6932] loop3: detected capacity change from 0 to 2048 [ 287.143057][ T6932] EXT4-fs: Ignoring removed nobh option [ 287.148759][ T6932] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 287.159972][ T6932] EXT4-fs (loop3): #clusters per group too big: 16384 [ 287.210538][ T6932] netlink: 'syz.3.1931': attribute type 2 has an invalid length. [ 287.236283][ T6470] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 287.249076][ T6470] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 287.258705][ T6470] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 287.268264][ T6470] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 1024 [ 287.280690][ T6470] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 287.291360][ T6470] usb 5-1: config 1 interface 0 has no altsetting 0 [ 287.297911][ T6470] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 287.343808][ T6470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.386682][ T6470] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 287.691822][ T6470] scsi host1: usb-storage 5-1:1.0 [ 287.704592][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 287.704608][ T28] audit: type=1400 audit(2000000001.910:613): avc: denied { read } for pid=6948 comm="syz.1.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.739163][ T6939] loop2: detected capacity change from 0 to 40427 [ 287.881985][ T6938] loop2: detected capacity change from 0 to 128 [ 288.026327][ T6470] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 288.272336][ T6962] overlayfs: workdir and upperdir must be separate subtrees [ 288.701529][ T6969] loop1: detected capacity change from 0 to 512 [ 288.706302][ T6470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.718421][ T6470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.728178][ T6470] usb 1-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75 [ 288.737217][ T6470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.738351][ T6969] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.1942: corrupted inode contents [ 288.745697][ T6470] usb 1-1: config 0 descriptor?? [ 288.757152][ T6969] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #3: comm syz.1.1942: mark_inode_dirty error [ 288.766667][ T5737] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 288.773153][ T6969] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.1942: corrupted inode contents [ 288.793028][ T6969] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.1942: mark_inode_dirty error [ 288.804496][ T6969] Quota error (device loop1): write_blk: dquota write failed [ 288.811787][ T6969] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 288.821545][ T6969] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.1942: Failed to acquire dquot type 0 [ 288.833191][ T6969] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.1942: corrupted inode contents [ 288.845058][ T6969] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #16: comm syz.1.1942: mark_inode_dirty error [ 288.856500][ T6969] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.1942: corrupted inode contents [ 288.868344][ T6969] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1942: mark_inode_dirty error [ 288.879662][ T6969] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.1942: corrupted inode contents [ 288.891507][ T6969] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 288.900110][ T6969] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.1942: corrupted inode contents [ 288.911982][ T6969] EXT4-fs error (device loop1): ext4_truncate:4302: inode #16: comm syz.1.1942: mark_inode_dirty error [ 288.923101][ T6969] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 288.932324][ T6969] EXT4-fs (loop1): 1 truncate cleaned up [ 288.937860][ T6969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 288.946570][ T6969] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038 (0x7fffffff) [ 288.973592][ T6687] EXT4-fs (loop1): unmounting filesystem. [ 289.023028][ T326] usb 5-1: USB disconnect, device number 24 [ 289.036280][ T6947] sddr09: could not read card info [ 289.041307][ T388] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 289.049168][ T388] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 289.054842][ T6976] loop3: detected capacity change from 0 to 2048 [ 289.061152][ T388] sd 1:0:0:0: [sdb] Write Protect is off [ 289.066894][ T6976] EXT4-fs: Ignoring removed nobh option [ 289.072435][ T388] sd 1:0:0:0: [sdb] Asking for cache data failed [ 289.078963][ T6976] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.090204][ T388] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 289.099075][ T6976] EXT4-fs (loop3): #clusters per group too big: 16384 [ 289.106377][ T388] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 289.164644][ T6976] netlink: 'syz.3.1944': attribute type 2 has an invalid length. [ 289.233750][ T28] audit: type=1326 audit(2000000003.440:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 289.237668][ T6470] wacom 0003:056A:037E.003A: Unknown device_type for 'HID 056a:037e'. Ignoring. [ 289.261758][ T28] audit: type=1326 audit(2000000003.470:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 289.581949][ T28] audit: type=1326 audit(2000000003.470:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 289.644381][ T28] audit: type=1326 audit(2000000003.470:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 289.648669][ T6470] usb 1-1: USB disconnect, device number 30 [ 289.675025][ T28] audit: type=1326 audit(2000000003.470:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 289.698806][ T28] audit: type=1326 audit(2000000003.470:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 289.722273][ T28] audit: type=1326 audit(2000000003.470:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 289.733436][ T6974] loop1: detected capacity change from 0 to 131072 [ 289.753314][ T6974] F2FS-fs (loop1): invalid crc value [ 289.760067][ T6974] F2FS-fs (loop1): Found nat_bits in checkpoint [ 289.799128][ T6974] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 290.315390][ T7006] loop3: detected capacity change from 0 to 40427 [ 290.592229][ T7010] loop2: detected capacity change from 0 to 512 [ 290.690203][ T7010] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.1954: corrupted inode contents [ 290.715900][ T7018] overlayfs: workdir and upperdir must be separate subtrees [ 290.845294][ T7010] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #3: comm syz.2.1954: mark_inode_dirty error [ 290.907323][ T7010] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.1954: corrupted inode contents [ 290.907768][ T7001] loop3: detected capacity change from 0 to 128 [ 290.919176][ T7010] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1954: mark_inode_dirty error [ 290.937144][ T7010] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.1954: Failed to acquire dquot type 0 [ 290.948917][ T7010] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.1954: corrupted inode contents [ 290.960854][ T7010] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz.2.1954: mark_inode_dirty error [ 290.976224][ T7010] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.1954: corrupted inode contents [ 290.994127][ T7010] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1954: mark_inode_dirty error [ 291.020577][ T7010] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.1954: corrupted inode contents [ 291.076937][ T7010] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 291.086054][ T7010] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.1954: corrupted inode contents [ 291.098505][ T7010] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz.2.1954: mark_inode_dirty error [ 291.104658][ T7023] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 291.109748][ T7010] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 291.127831][ T7010] EXT4-fs (loop2): 1 truncate cleaned up [ 291.133447][ T7010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 291.142245][ T7010] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff) [ 291.190224][ T6473] EXT4-fs (loop2): unmounting filesystem. [ 292.165884][ T7031] loop2: detected capacity change from 0 to 40427 [ 292.179881][ T7031] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 292.187498][ T7031] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 292.213308][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.220519][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.227853][ T7039] device bridge_slave_0 entered promiscuous mode [ 292.234786][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.242238][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.245542][ T7031] F2FS-fs (loop2): Found nat_bits in checkpoint [ 292.264642][ T7039] device bridge_slave_1 entered promiscuous mode [ 292.271434][ T1365] device bridge_slave_1 left promiscuous mode [ 292.277551][ T1365] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.284886][ T1365] device bridge_slave_0 left promiscuous mode [ 292.286418][ T7031] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 292.291000][ T1365] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.297656][ T7031] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 292.312556][ T1365] device veth1_macvtap left promiscuous mode [ 292.345083][ T1365] device veth0_vlan left promiscuous mode [ 292.597158][ T7063] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 292.610400][ T388] kworker/u4:4: attempt to access beyond end of device [ 292.610400][ T388] loop2: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 292.696256][ T487] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 292.704085][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.711506][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.741779][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.801560][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.824946][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.831816][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.839004][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.847085][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.854998][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.861833][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.869073][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.974840][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.175578][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.193701][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.212595][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.220345][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.227591][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.256291][ T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.271551][ T7039] device veth0_vlan entered promiscuous mode [ 293.288486][ T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.290050][ T7077] overlayfs: workdir and upperdir must be separate subtrees [ 293.359705][ T487] usb 5-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75 [ 293.370673][ T487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.396145][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.404418][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.414905][ T7068] device bridge_slave_0 entered promiscuous mode [ 293.455866][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.463338][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.473390][ T7068] device bridge_slave_1 entered promiscuous mode [ 293.481889][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.495419][ T7039] device veth1_macvtap entered promiscuous mode [ 293.516293][ T487] usb 5-1: config 0 descriptor?? [ 293.522910][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.537429][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.597067][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.603936][ T7068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.611051][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.617827][ T7068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.632907][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1961'. [ 293.645670][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.656841][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.721845][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.729770][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.739440][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.747926][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.755827][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.762586][ T6074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.979371][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.989059][ T487] wacom 0003:056A:037E.003B: Unknown device_type for 'HID 056a:037e'. Ignoring. [ 294.009165][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.022681][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.029576][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.060592][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.069200][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.086120][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.095698][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.235884][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.251868][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.286643][ T1365] device bridge_slave_1 left promiscuous mode [ 294.293270][ T40] usb 5-1: USB disconnect, device number 25 [ 294.300733][ T1365] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.331229][ T1365] device bridge_slave_0 left promiscuous mode [ 294.374019][ T1365] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.560874][ T1365] device veth1_macvtap left promiscuous mode [ 294.573528][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 294.573551][ T28] audit: type=1326 audit(2000000008.780:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 294.603530][ T7092] loop3: detected capacity change from 0 to 512 [ 294.621962][ T1365] device veth0_vlan left promiscuous mode [ 294.629925][ T7092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.645841][ T7092] EXT4-fs (loop3): 1 orphan inode deleted [ 294.658401][ T28] audit: type=1326 audit(2000000008.820:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 294.695980][ T7092] EXT4-fs (loop3): 1 truncate cleaned up [ 294.698727][ T28] audit: type=1326 audit(2000000008.820:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 294.728415][ T7092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 295.213944][ T28] audit: type=1326 audit(2000000008.830:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 295.297906][ T28] audit: type=1326 audit(2000000008.830:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 295.321207][ T28] audit: type=1326 audit(2000000008.830:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 295.344395][ T28] audit: type=1326 audit(2000000008.830:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 295.367589][ T28] audit: type=1326 audit(2000000008.830:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 295.422922][ T28] audit: type=1326 audit(2000000008.830:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 295.433715][ T7111] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 295.449869][ T28] audit: type=1326 audit(2000000008.830:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 295.486738][ T7102] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 295.530303][ T7102] EXT4-fs (loop3): Remounting filesystem read-only [ 295.749515][ T7068] device veth0_vlan entered promiscuous mode [ 295.813510][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.824378][ T5674] EXT4-fs (loop3): unmounting filesystem. [ 295.833907][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.853881][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.861482][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.874486][ T7068] device veth1_macvtap entered promiscuous mode [ 295.881977][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.890377][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.951322][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.967505][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.975612][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.983837][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.991983][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.008514][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.015677][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.026111][ T7125] device bridge_slave_0 entered promiscuous mode [ 297.226379][ T7157] loop3: detected capacity change from 0 to 512 [ 297.327035][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.336115][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.345572][ T7160] loop0: detected capacity change from 0 to 2048 [ 297.352323][ T7125] device bridge_slave_1 entered promiscuous mode [ 297.406280][ T7160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 297.441126][ T7154] loop2: detected capacity change from 0 to 40427 [ 297.455279][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.462155][ T7125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.469252][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.476022][ T7125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.519961][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.530577][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.553510][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.566918][ T7166] loop3: detected capacity change from 0 to 8192 [ 297.583648][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.596787][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.603665][ T487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.619614][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.634149][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.641027][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.668651][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.672071][ T7166] loop3: detected capacity change from 0 to 512 [ 297.676663][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.690123][ T7160] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 297.695995][ T7125] device veth0_vlan entered promiscuous mode [ 297.714279][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.715175][ T7148] loop2: detected capacity change from 0 to 128 [ 297.722782][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.728699][ T7160] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 297.736595][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.748499][ T7160] EXT4-fs (loop0): This should not happen!! Data will be lost [ 297.748499][ T7160] [ 297.755391][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.766585][ T7166] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 297.777709][ T7160] EXT4-fs (loop0): Total free blocks count 0 [ 297.803293][ T7166] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038 (0x7fffffff) [ 297.815353][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.826698][ T7160] EXT4-fs (loop0): Free/Dirty block details [ 297.832426][ T7160] EXT4-fs (loop0): free_blocks=2415919104 [ 297.839238][ T7160] EXT4-fs (loop0): dirty_blocks=8192 [ 297.839717][ T7125] device veth1_macvtap entered promiscuous mode [ 297.844340][ T7160] EXT4-fs (loop0): Block reservation details [ 297.856543][ T7160] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 297.870962][ T7166] Trying to write to read-only block-device loop3 [ 297.886688][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.899997][ T7166] Trying to write to read-only block-device loop3 [ 297.917354][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.917536][ T7166] Trying to write to read-only block-device loop3 [ 297.944396][ T7166] Trying to write to read-only block-device loop3 [ 297.957689][ T7166] Trying to write to read-only block-device loop3 [ 297.964319][ T7166] Trying to write to read-only block-device loop3 [ 297.984536][ T4134] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 297.984819][ T7166] Trying to write to read-only block-device loop3 [ 298.003709][ T7166] Trying to write to read-only block-device loop3 [ 298.010521][ T7166] Trying to write to read-only block-device loop3 [ 298.017149][ T7166] Trying to write to read-only block-device loop3 [ 298.076925][ T1365] device bridge_slave_1 left promiscuous mode [ 298.082877][ T1365] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.096700][ T1365] device bridge_slave_0 left promiscuous mode [ 298.102645][ T1365] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.126329][ T1365] device veth1_macvtap left promiscuous mode [ 298.132251][ T1365] device veth0_vlan left promiscuous mode [ 298.146353][ T7166] loop3: detected capacity change from 512 to 11 [ 298.370645][ T5674] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Out of memory [ 298.393104][ T5674] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 298.410422][ T5674] EXT4-fs (loop3): unmounting filesystem. [ 298.441780][ T7168] kmmpd-loop3: attempt to access beyond end of device [ 298.441780][ T7168] loop3: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 298.455481][ T7168] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 299.584301][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.591284][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.598552][ T7213] device bridge_slave_0 entered promiscuous mode [ 299.614152][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.623818][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.648443][ T7213] device bridge_slave_1 entered promiscuous mode [ 299.678319][ T1365] tipc: Disabling bearer [ 299.683899][ T1365] tipc: Left network mode [ 299.760966][ T7219] loop4: detected capacity change from 0 to 40427 [ 299.777876][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.784785][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.791958][ T7226] device bridge_slave_0 entered promiscuous mode [ 299.801123][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.808314][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.815480][ T7226] device bridge_slave_1 entered promiscuous mode [ 299.861562][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.868563][ T7213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.875647][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.882430][ T7213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.938642][ T7212] loop4: detected capacity change from 0 to 128 [ 299.967602][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.975138][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.983424][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.991340][ T487] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 300.010954][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.019455][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.040023][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.075881][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.084238][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.091876][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.106872][ T7213] device veth0_vlan entered promiscuous mode [ 300.117190][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.131032][ T7213] device veth1_macvtap entered promiscuous mode [ 300.145517][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.165821][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.174229][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.181064][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.188619][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.196542][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.203370][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.413246][ T487] usb 3-1: Using ep0 maxpacket: 8 [ 300.418398][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.443150][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.451215][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.461159][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.469007][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.483088][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.491368][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.504485][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.512566][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.534448][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.546298][ T487] usb 3-1: config 0 has no interfaces? [ 300.551690][ T487] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 300.560686][ T487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.583513][ T487] usb 3-1: config 0 descriptor?? [ 300.621612][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.632030][ T7226] device veth0_vlan entered promiscuous mode [ 300.639749][ T1365] device bridge_slave_1 left promiscuous mode [ 300.645749][ T1365] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.653035][ T1365] device bridge_slave_0 left promiscuous mode [ 300.659163][ T1365] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.666889][ T1365] device bridge_slave_1 left promiscuous mode [ 300.673157][ T1365] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.685492][ T1365] device bridge_slave_0 left promiscuous mode [ 300.899809][ T1365] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.629512][ T1365] device veth1_macvtap left promiscuous mode [ 301.635385][ T1365] device veth0_vlan left promiscuous mode [ 301.661584][ T1365] device veth1_macvtap left promiscuous mode [ 301.674843][ T1365] device veth0_vlan left promiscuous mode [ 301.743592][ T342] usb 3-1: USB disconnect, device number 38 [ 302.051051][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.156147][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.185135][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.213860][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.253321][ T7226] device veth1_macvtap entered promiscuous mode [ 302.266646][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.278075][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.294325][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.320510][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.328795][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.337426][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.346482][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.369580][ T7258] loop4: detected capacity change from 0 to 131072 [ 302.376870][ T7258] F2FS-fs (loop4): invalid crc value [ 302.383332][ T7258] F2FS-fs (loop4): Found nat_bits in checkpoint [ 302.412406][ T7258] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 302.445928][ T7283] loop3: detected capacity change from 0 to 8192 [ 302.463105][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'. [ 302.492766][ T7287] loop0: detected capacity change from 0 to 256 [ 302.515795][ T7287] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 302.549865][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 302.549881][ T28] audit: type=1400 audit(2000000001.660:719): avc: denied { getopt } for pid=7286 comm="syz.0.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.602704][ T7283] loop3: detected capacity change from 0 to 512 [ 302.611896][ T7283] /dev/loop3: Can't open blockdev [ 302.657446][ T7289] loop2: detected capacity change from 0 to 40427 [ 302.664191][ T7289] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 302.671919][ T7289] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 302.684010][ T7283] loop3: detected capacity change from 0 to 512 [ 302.691282][ T7289] F2FS-fs (loop2): invalid crc value [ 302.696926][ T7283] /dev/loop3: Can't open blockdev [ 302.706508][ T7289] F2FS-fs (loop2): Found nat_bits in checkpoint [ 303.256439][ T7283] loop3: detected capacity change from 0 to 512 [ 304.177600][ T7289] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 304.185053][ T7283] EXT4-fs: Ignoring removed bh option [ 304.196436][ T7289] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 304.204592][ T7283] /dev/loop3: Can't open blockdev [ 304.217459][ T7311] loop4: detected capacity change from 0 to 2048 [ 304.244940][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2048'. [ 304.266681][ T7311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 304.466327][ T342] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 304.625966][ T7311] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 304.640582][ T7311] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 304.652936][ T7311] EXT4-fs (loop4): This should not happen!! Data will be lost [ 304.652936][ T7311] [ 304.662466][ T7311] EXT4-fs (loop4): Total free blocks count 0 [ 304.668376][ T7311] EXT4-fs (loop4): Free/Dirty block details [ 304.674124][ T7311] EXT4-fs (loop4): free_blocks=2415919104 [ 304.679730][ T7311] EXT4-fs (loop4): dirty_blocks=8192 [ 304.684836][ T7311] EXT4-fs (loop4): Block reservation details [ 304.690829][ T7311] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 304.756313][ T487] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 304.801230][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 304.836265][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.847020][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.856625][ T342] usb 1-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75 [ 304.865476][ T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.874356][ T342] usb 1-1: config 0 descriptor?? [ 305.017542][ T487] usb 2-1: Using ep0 maxpacket: 8 [ 305.303482][ T7344] loop3: detected capacity change from 0 to 8192 [ 305.330021][ T7344] loop3: p4 < > [ 305.366348][ T487] usb 2-1: config 0 has no interfaces? [ 305.371678][ T487] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 305.380777][ T487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.472453][ T342] wacom 0003:056A:037E.003C: Unknown device_type for 'HID 056a:037e'. Ignoring. [ 306.101535][ T3156] usb 1-1: USB disconnect, device number 31 [ 306.366859][ T487] usb 2-1: config 0 descriptor?? [ 306.388641][ T7348] loop3: detected capacity change from 0 to 40427 [ 306.402608][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2061'. [ 306.678171][ T7362] loop4: detected capacity change from 0 to 2048 [ 306.798947][ T7362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 307.256568][ T7365] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 307.507226][ T7374] loop3: detected capacity change from 0 to 512 [ 307.513541][ T7374] /dev/loop3: Can't open blockdev [ 307.532306][ T3156] usb 2-1: USB disconnect, device number 39 [ 307.541997][ T7362] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 307.703654][ T7362] EXT4-fs (loop4): This should not happen!! Data will be lost [ 307.703654][ T7362] [ 307.716294][ T7362] EXT4-fs (loop4): Total free blocks count 0 [ 307.722381][ T7362] EXT4-fs (loop4): Free/Dirty block details [ 307.728369][ T7362] EXT4-fs (loop4): free_blocks=2415919104 [ 307.734017][ T7362] EXT4-fs (loop4): dirty_blocks=3536 [ 307.739258][ T7362] EXT4-fs (loop4): Block reservation details [ 307.745159][ T7362] EXT4-fs (loop4): i_reserved_data_blocks=221 [ 307.746933][ T487] kernel write not supported for file /input/event0 (pid: 487 comm: kworker/0:5) [ 307.850496][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1472 with error 28 [ 308.114568][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2072'. [ 308.127027][ T7389] loop4: detected capacity change from 0 to 256 [ 308.136697][ T7389] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 308.199533][ T7391] loop0: detected capacity change from 0 to 8192 [ 308.228348][ T7394] loop4: detected capacity change from 0 to 2048 [ 308.237640][ T7394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 308.266293][ T7391] loop0: detected capacity change from 0 to 512 [ 308.276498][ T7125] EXT4-fs (loop4): unmounting filesystem. [ 308.292367][ T7391] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 308.305059][ T7391] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 308.336741][ T7391] bio_check_ro: 4 callbacks suppressed [ 308.336769][ T7391] Trying to write to read-only block-device loop0 [ 308.355943][ T7391] Trying to write to read-only block-device loop0 [ 308.362363][ T7391] Trying to write to read-only block-device loop0 [ 308.369053][ T7391] Trying to write to read-only block-device loop0 [ 308.375404][ T7391] Trying to write to read-only block-device loop0 [ 308.381687][ T7391] Trying to write to read-only block-device loop0 [ 308.388163][ T7391] Trying to write to read-only block-device loop0 [ 308.394407][ T7391] Trying to write to read-only block-device loop0 [ 308.401339][ T7391] Trying to write to read-only block-device loop0 [ 308.409049][ T7391] Trying to write to read-only block-device loop0 [ 308.486696][ T7391] loop0: detected capacity change from 512 to 11 [ 308.496490][ T28] audit: type=1400 audit(2000000003.040:720): avc: denied { read } for pid=7412 comm="syz.4.2079" path="socket:[56249]" dev="sockfs" ino=56249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 308.683822][ T7213] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Out of memory [ 308.780689][ T7213] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 308.796056][ T28] audit: type=1326 audit(2000000003.340:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 308.946683][ T28] audit: type=1326 audit(2000000003.380:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 309.119043][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2085'. [ 309.202452][ T28] audit: type=1326 audit(2000000003.380:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 309.493014][ T7213] EXT4-fs (loop0): unmounting filesystem. [ 309.842933][ T7430] loop3: detected capacity change from 0 to 256 [ 309.913706][ T7430] /dev/loop3: Can't open blockdev [ 309.960095][ T28] audit: type=1326 audit(2000000003.390:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 310.108977][ T28] audit: type=1326 audit(2000000003.390:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 310.132510][ T28] audit: type=1326 audit(2000000003.400:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 310.156069][ T28] audit: type=1326 audit(2000000003.400:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 310.168553][ T7435] loop4: detected capacity change from 0 to 2048 [ 310.179331][ T28] audit: type=1326 audit(2000000003.400:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 310.210337][ T7400] kmmpd-loop0: attempt to access beyond end of device [ 310.210337][ T7400] loop0: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 310.213019][ T28] audit: type=1326 audit(2000000003.400:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd278f75f19 code=0x7ffc0000 [ 310.228458][ T7400] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 310.248977][ T7439] loop1: detected capacity change from 0 to 512 [ 310.261955][ T40] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 310.278091][ T7439] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 310.287779][ T7435] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 310.288713][ T7439] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 310.397621][ T7039] EXT4-fs (loop1): unmounting filesystem. [ 310.405160][ T7125] EXT4-fs (loop4): unmounting filesystem. [ 310.509831][ T40] usb 3-1: Using ep0 maxpacket: 8 [ 310.626521][ T40] usb 3-1: config 0 has no interfaces? [ 310.632525][ T40] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 310.681188][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.734907][ T40] usb 3-1: config 0 descriptor?? [ 310.913865][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.921107][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.932542][ T7454] device bridge_slave_0 entered promiscuous mode [ 310.949914][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.957084][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.967003][ T7454] device bridge_slave_1 entered promiscuous mode [ 311.022995][ T43] device bridge_slave_1 left promiscuous mode [ 311.032693][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.067279][ T43] device bridge_slave_0 left promiscuous mode [ 311.094292][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.133714][ T43] device veth1_macvtap left promiscuous mode [ 311.325409][ T43] device veth0_vlan left promiscuous mode [ 311.395119][ T6347] usb 3-1: USB disconnect, device number 39 [ 312.767670][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'. [ 312.778707][ T7475] loop4: detected capacity change from 0 to 256 [ 312.794639][ T7475] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 312.857636][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.865187][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.878281][ T7467] loop3: detected capacity change from 0 to 40427 [ 312.901440][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.915388][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.931938][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.938907][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.952006][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.960794][ T7480] loop4: detected capacity change from 0 to 8192 [ 312.976534][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.994907][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.001796][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.012895][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.022055][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.031217][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.047687][ T7485] loop2: detected capacity change from 0 to 1024 [ 313.065547][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.070332][ T7462] loop3: detected capacity change from 0 to 128 [ 313.078164][ T7454] device veth0_vlan entered promiscuous mode [ 313.081612][ T7485] EXT4-fs error (device loop2): ext4_map_blocks:721: inode #3: block 1: comm syz.2.2103: lblock 1 mapped to illegal pblock 1 (length 1) [ 313.086120][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.106674][ T7485] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.2103: Failed to acquire dquot type 0 [ 313.118135][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.125421][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.133501][ T7485] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 1: comm syz.2.2103: lblock 1 mapped to illegal pblock 1 (length 1) [ 313.157748][ T7485] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.2103: Failed to acquire dquot type 0 [ 313.174454][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.183875][ T7454] device veth1_macvtap entered promiscuous mode [ 313.193571][ T7485] EXT4-fs error (device loop2): ext4_free_blocks:6211: comm syz.2.2103: Freeing blocks not in datazone - block = 0, count = 4096 [ 313.214105][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.222218][ T7485] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 1: comm syz.2.2103: lblock 1 mapped to illegal pblock 1 (length 1) [ 313.244357][ T7485] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.2103: Failed to acquire dquot type 0 [ 313.246607][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 313.268558][ T7485] EXT4-fs (loop2): 1 orphan inode deleted [ 313.274424][ T7485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 313.309767][ T6473] EXT4-fs (loop2): unmounting filesystem. [ 313.338630][ T341] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 316.310406][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 316.310421][ T28] audit: type=1326 audit(2000000002.710:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc3375f19 code=0x7ffc0000 [ 316.357841][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2111'. [ 316.373856][ T28] audit: type=1326 audit(2000000002.770:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cc3375f19 code=0x7ffc0000 [ 316.379889][ T7513] loop2: detected capacity change from 0 to 128 [ 316.397532][ T28] audit: type=1326 audit(2000000002.770:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc3375f19 code=0x7ffc0000 [ 316.426478][ T28] audit: type=1326 audit(2000000002.770:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8cc3375f19 code=0x7ffc0000 [ 316.429607][ T7511] loop3: detected capacity change from 0 to 256 [ 316.452040][ T28] audit: type=1326 audit(2000000002.770:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc3375f19 code=0x7ffc0000 [ 316.479302][ T7511] /dev/loop3: Can't open blockdev [ 316.479851][ T28] audit: type=1326 audit(2000000002.770:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8cc3375f19 code=0x7ffc0000 [ 316.507831][ T28] audit: type=1326 audit(2000000002.770:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc3375f19 code=0x7ffc0000 [ 316.531110][ T28] audit: type=1326 audit(2000000002.770:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc3375f19 code=0x7ffc0000 [ 316.557350][ T7513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 316.566900][ T7513] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 316.662186][ T28] audit: type=1326 audit(2000000002.770:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8cc3375f19 code=0x7ffc0000 [ 316.719241][ T28] audit: type=1326 audit(2000000002.800:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc3375f19 code=0x7ffc0000 [ 316.938459][ T341] usb 5-1: device not accepting address 26, error -71 [ 317.110887][ T7527] loop3: detected capacity change from 0 to 40427 [ 317.255562][ T6473] EXT4-fs (loop2): unmounting filesystem. [ 317.331864][ T7536] netlink: 'syz.1.2116': attribute type 4 has an invalid length. [ 317.355155][ T7536] netlink: 'syz.1.2116': attribute type 4 has an invalid length. [ 317.463102][ T7525] loop3: detected capacity change from 0 to 128 [ 317.531602][ T7538] loop2: detected capacity change from 0 to 1024 [ 317.540694][ T7538] EXT4-fs error (device loop2): ext4_map_blocks:721: inode #3: block 1: comm syz.2.2118: lblock 1 mapped to illegal pblock 1 (length 1) [ 317.555108][ T7538] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.2118: Failed to acquire dquot type 0 [ 317.566467][ T7538] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 1: comm syz.2.2118: lblock 1 mapped to illegal pblock 1 (length 1) [ 317.580495][ T7538] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.2118: Failed to acquire dquot type 0 [ 317.596427][ T7538] EXT4-fs error (device loop2): ext4_free_blocks:6211: comm syz.2.2118: Freeing blocks not in datazone - block = 0, count = 4096 [ 317.614580][ T7538] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 1: comm syz.2.2118: lblock 1 mapped to illegal pblock 1 (length 1) [ 317.629579][ T7538] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.2118: Failed to acquire dquot type 0 [ 317.647228][ T7538] EXT4-fs (loop2): 1 orphan inode deleted [ 317.654745][ T7538] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 317.676042][ T6473] EXT4-fs (loop2): unmounting filesystem. [ 317.703616][ T7548] syz.2.2122[7548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.703686][ T7548] syz.2.2122[7548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.718602][ T7548] bridge0: port 3(vlan2) entered blocking state [ 317.735777][ T7548] bridge0: port 3(vlan2) entered disabled state [ 317.751063][ T7550] sch_fq: defrate 0 ignored. [ 317.923598][ T7554] loop2: detected capacity change from 0 to 128 [ 317.990007][ T7554] syz.2.2124: attempt to access beyond end of device [ 317.990007][ T7554] loop2: rw=2049, sector=153, nr_sectors = 88 limit=128 [ 318.007413][ T7557] loop3: detected capacity change from 0 to 512 [ 318.013925][ T7557] ext4: Unknown parameter 'auto_' [ 318.023469][ T7554] syz.2.2124: attempt to access beyond end of device [ 318.023469][ T7554] loop2: rw=524288, sector=153, nr_sectors = 40 limit=128 [ 318.366246][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 318.606239][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 318.726284][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.737050][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.746552][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.755394][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.763588][ T24] usb 4-1: config 0 descriptor?? [ 318.806540][ T24] hub 4-1:0.0: USB hub found [ 319.026332][ T24] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 319.035944][ T7598] loop2: detected capacity change from 0 to 1024 [ 319.044041][ T7598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 319.053666][ T7598] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 319.072354][ T7598] EXT4-fs warning (device loop2): empty_inline_dir:1847: bad inline directory (dir #12) - no `..' [ 319.086132][ T6473] EXT4-fs (loop2): unmounting filesystem. [ 319.487031][ T24] hid-generic 0003:046D:C31C.003D: item fetching failed at offset 0/1 [ 319.495143][ T24] hid-generic: probe of 0003:046D:C31C.003D failed with error -22 [ 319.816301][ T24] usb 4-1: USB disconnect, device number 41 [ 319.967621][ T7617] loop2: detected capacity change from 0 to 2048 [ 319.977531][ T7617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 319.990190][ T43] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 320.005182][ T43] EXT4-fs (loop2): Remounting filesystem read-only [ 320.012078][ T6473] EXT4-fs (loop2): unmounting filesystem. [ 320.061448][ T7625] loop2: detected capacity change from 0 to 256 [ 320.069059][ T7625] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 320.079668][ T7625] exFAT-fs (loop2): invalid boot region [ 320.085075][ T7625] exFAT-fs (loop2): failed to recognize exfat type [ 320.096161][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 320.107961][ T7629] loop1: detected capacity change from 0 to 256 [ 320.116533][ T7629] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 320.209767][ T7632] loop1: detected capacity change from 0 to 1024 [ 320.217696][ T7632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 320.483659][ T7632] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 320.506409][ T7632] EXT4-fs warning (device loop1): empty_inline_dir:1847: bad inline directory (dir #12) - no `..' [ 320.523359][ T7039] EXT4-fs (loop1): unmounting filesystem. [ 321.330746][ T7655] loop3: detected capacity change from 0 to 2048 [ 321.337562][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 321.337576][ T28] audit: type=1400 audit(2000000007.740:892): avc: denied { mounton } for pid=7654 comm="syz.3.2158" path="/21/file0" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 321.364433][ T7655] /dev/loop3: Can't open blockdev [ 321.370658][ T28] audit: type=1400 audit(2000000007.770:893): avc: denied { create } for pid=7656 comm="syz.4.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.392223][ T28] audit: type=1400 audit(2000000007.770:894): avc: denied { getopt } for pid=7656 comm="syz.4.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.422811][ T28] audit: type=1400 audit(2000000007.820:895): avc: denied { execute } for pid=7654 comm="syz.3.2158" path="/21/cpuacct.usage_percpu_user" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 321.423915][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2160'. [ 321.454351][ T28] audit: type=1400 audit(2000000007.850:896): avc: denied { wake_alarm } for pid=7660 comm="syz.3.2161" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.499802][ T28] audit: type=1400 audit(2000000007.900:897): avc: denied { mount } for pid=7662 comm="syz.4.2162" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 321.530665][ T28] audit: type=1400 audit(2000000007.920:898): avc: denied { write } for pid=7662 comm="syz.4.2162" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 321.551891][ T28] audit: type=1400 audit(2000000007.920:899): avc: denied { add_name } for pid=7662 comm="syz.4.2162" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 321.572555][ T28] audit: type=1400 audit(2000000007.920:900): avc: denied { associate } for pid=7662 comm="syz.4.2162" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 321.594524][ T28] audit: type=1400 audit(2000000007.930:901): avc: denied { unmount } for pid=7125 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 321.933361][ T7680] loop0: detected capacity change from 0 to 256 [ 321.942419][ T7680] /dev/loop0: Can't open blockdev [ 322.066278][ T6] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 323.689191][ T7695] loop2: detected capacity change from 0 to 2048 [ 323.707542][ T7695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 324.880805][ T474] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 324.899618][ T474] EXT4-fs (loop2): Remounting filesystem read-only [ 324.906788][ T6473] EXT4-fs (loop2): unmounting filesystem. [ 324.927207][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 324.958119][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 324.984322][ T7705] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2174'. [ 324.995181][ T6] usb 2-1: device descriptor read/all, error -71 [ 324.997780][ T7705] netlink: 'syz.1.2174': attribute type 17 has an invalid length. [ 325.009457][ T7705] device lo entered promiscuous mode [ 325.016990][ T7717] loop2: detected capacity change from 0 to 256 [ 325.020739][ T7704] device lo left promiscuous mode [ 325.024945][ T7717] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 325.038119][ T7717] exFAT-fs (loop2): invalid boot region [ 325.043492][ T7717] exFAT-fs (loop2): failed to recognize exfat type [ 325.061968][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2181'. [ 325.071212][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2181'. [ 325.096910][ T7724] loop3: detected capacity change from 0 to 256 [ 325.103456][ T7724] /dev/loop3: Can't open blockdev [ 328.109194][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 328.109216][ T28] audit: type=1400 audit(2000000241.450:971): avc: denied { create } for pid=7719 comm="syz.1.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 328.154957][ T28] audit: type=1400 audit(2000000241.810:972): avc: denied { bpf } for pid=7726 comm="syz.3.2183" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 328.181438][ T28] audit: type=1400 audit(2000000241.810:973): avc: denied { map_create } for pid=7726 comm="syz.3.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 328.200330][ T28] audit: type=1400 audit(2000000241.810:974): avc: denied { map_read map_write } for pid=7726 comm="syz.3.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 328.220067][ T28] audit: type=1400 audit(2000000242.000:975): avc: denied { write } for pid=7719 comm="syz.1.2180" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 328.242968][ T28] audit: type=1400 audit(2000000242.240:976): avc: denied { create } for pid=7719 comm="syz.1.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.298428][ T28] audit: type=1400 audit(2000000242.240:977): avc: denied { prog_load } for pid=7726 comm="syz.3.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 328.334279][ T28] audit: type=1400 audit(2000000242.240:978): avc: denied { perfmon } for pid=7726 comm="syz.3.2183" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 328.359083][ T28] audit: type=1400 audit(2000000242.240:979): avc: denied { prog_run } for pid=7726 comm="syz.3.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 328.745505][ T28] audit: type=1400 audit(2000000242.370:980): avc: denied { setopt } for pid=7719 comm="syz.1.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.829525][ T7756] loop0: detected capacity change from 0 to 512 [ 328.863572][ T7756] /dev/loop0: Can't open blockdev [ 328.958305][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 328.967531][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2193'. [ 329.116483][ T6] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 329.157568][ T7765] ================================================================== [ 329.165458][ T7765] BUG: KASAN: use-after-free in dev_map_generic_redirect+0x9f/0x7d0 [ 329.167430][ T7767] loop3: detected capacity change from 0 to 2048 [ 329.173264][ T7765] Read of size 8 at addr ffff888117da6e80 by task syz.2.2196/7765 [ 329.173285][ T7765] [ 329.173291][ T7765] CPU: 1 PID: 7765 Comm: syz.2.2196 Not tainted 6.1.90-syzkaller-00115-gdd8ee5c24218 #0 [ 329.179741][ T7767] /dev/loop3: Can't open blockdev [ 329.187065][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 329.187089][ T7765] Call Trace: [ 329.187097][ T7765] [ 329.192539][ T7769] loop4: detected capacity change from 0 to 256 [ 329.198793][ T7765] dump_stack_lvl+0x151/0x1b7 [ 329.198824][ T7765] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 329.204826][ T7769] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 329.213538][ T7765] ? _printk+0xd1/0x111 [ 329.213566][ T7765] ? __virt_addr_valid+0x242/0x2f0 [ 329.213589][ T7765] print_report+0x158/0x4e0 [ 329.213610][ T7765] ? __virt_addr_valid+0x242/0x2f0 [ 329.213635][ T7765] ? kasan_complete_mode_report_info+0x57/0x1b0 [ 329.213660][ T7765] ? dev_map_generic_redirect+0x9f/0x7d0 [ 329.217102][ T7769] exFAT-fs (loop4): invalid boot region [ 329.219438][ T7765] kasan_report+0x13c/0x170 [ 329.225513][ T7769] exFAT-fs (loop4): failed to recognize exfat type [ 329.230025][ T7765] ? dev_map_generic_redirect+0x9f/0x7d0 [ 329.230046][ T7765] __asan_report_load8_noabort+0x14/0x20 [ 329.230064][ T7765] dev_map_generic_redirect+0x9f/0x7d0 [ 329.307446][ T7765] ? kasan_quarantine_put+0x34/0x1a0 [ 329.312565][ T7765] ? kfree+0x7a/0xf0 [ 329.316297][ T7765] ? bq_enqueue+0x3e0/0x3e0 [ 329.320639][ T7765] ? bpf_prog_run_generic_xdp+0xa35/0x1200 [ 329.326280][ T7765] xdp_do_generic_redirect+0x411/0xad0 [ 329.331576][ T7765] do_xdp_generic+0x53e/0x800 [ 329.336089][ T7765] ? generic_xdp_tx+0x560/0x560 [ 329.340776][ T7765] ? tun_get_user+0x2340/0x3a90 [ 329.345458][ T7765] tun_get_user+0x238a/0x3a90 [ 329.349973][ T7765] ? avc_has_perm_noaudit+0x430/0x430 [ 329.355181][ T7765] ? tun_do_read+0x2000/0x2000 [ 329.359779][ T7765] ? ref_tracker_alloc+0x31d/0x450 [ 329.364728][ T7765] ? file_has_perm+0x508/0x6c0 [ 329.369327][ T7765] ? ref_tracker_dir_print+0x160/0x160 [ 329.374623][ T7765] ? futex_wait_setup+0x330/0x330 [ 329.379482][ T7765] ? tun_get+0xe9/0x120 [ 329.383474][ T7765] tun_chr_write_iter+0x129/0x210 [ 329.388336][ T7765] vfs_write+0x902/0xeb0 [ 329.392417][ T7765] ? file_end_write+0x1c0/0x1c0 [ 329.397099][ T7765] ? do_futex+0x55a/0x9a0 [ 329.401276][ T7765] ? __fget_files+0x2cb/0x330 [ 329.405783][ T7765] ? __fdget_pos+0x204/0x390 [ 329.410204][ T7765] ? ksys_write+0x77/0x2c0 [ 329.414458][ T7765] ksys_write+0x199/0x2c0 [ 329.418624][ T7765] ? save_fpregs_to_fpstate+0x220/0x220 [ 329.424007][ T7765] ? __ia32_sys_read+0x90/0x90 [ 329.428610][ T7765] ? fpregs_restore_userregs+0x130/0x290 [ 329.434076][ T7765] __x64_sys_write+0x7b/0x90 [ 329.438502][ T7765] x64_sys_call+0x2f/0x9a0 [ 329.442752][ T7765] do_syscall_64+0x3b/0xb0 [ 329.447006][ T7765] ? clear_bhb_loop+0x55/0xb0 [ 329.451518][ T7765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.457254][ T7765] RIP: 0033:0x7fd278f74a9f [ 329.461502][ T7765] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 329.481028][ T7765] RSP: 002b:00007fd279c93010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 329.489272][ T7765] RAX: ffffffffffffffda RBX: 00007fd279105f60 RCX: 00007fd278f74a9f [ 329.497084][ T7765] RDX: 0000000000000d86 RSI: 0000000020001580 RDI: 00000000000000c8 [ 329.504895][ T7765] RBP: 00007fd278fe4e68 R08: 0000000000000000 R09: 0000000000000000 [ 329.512706][ T7765] R10: 0000000000000d86 R11: 0000000000000293 R12: 0000000000000000 [ 329.520517][ T7765] R13: 000000000000000b R14: 00007fd279105f60 R15: 00007ffe6ddc2de8 [ 329.528335][ T7765] [ 329.531194][ T7765] [ 329.533367][ T7765] Allocated by task 6918: [ 329.537536][ T7765] kasan_set_track+0x4b/0x70 [ 329.541954][ T7765] kasan_save_alloc_info+0x1f/0x30 [ 329.546902][ T7765] __kasan_kmalloc+0x9c/0xb0 [ 329.551330][ T7765] __kmalloc_node+0xb4/0x1e0 [ 329.555756][ T7765] bpf_map_kmalloc_node+0xd0/0x2c0 [ 329.560701][ T7765] __dev_map_alloc_node+0x5c/0x4e0 [ 329.565648][ T7765] dev_map_hash_update_elem+0x32b/0x7b0 [ 329.571033][ T7765] bpf_map_update_value+0x23a/0x410 [ 329.576065][ T7765] map_update_elem+0x500/0x680 [ 329.580666][ T7765] __sys_bpf+0x460/0x7f0 [ 329.584745][ T7765] __x64_sys_bpf+0x7c/0x90 [ 329.588997][ T7765] x64_sys_call+0x87f/0x9a0 [ 329.593334][ T7765] do_syscall_64+0x3b/0xb0 [ 329.597589][ T7765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.603318][ T7765] [ 329.605487][ T7765] Last potentially related work creation: [ 329.611043][ T7765] kasan_save_stack+0x3b/0x60 [ 329.615555][ T7765] __kasan_record_aux_stack+0xb4/0xc0 [ 329.620760][ T7765] kasan_record_aux_stack_noalloc+0xb/0x10 [ 329.626405][ T7765] call_rcu+0xee/0x1340 [ 329.630396][ T7765] __nf_unregister_net_hook+0x4bc/0x680 [ 329.635776][ T7765] nf_unregister_net_hooks+0xdb/0x140 [ 329.640984][ T7765] nf_nat_unregister_fn+0x27a/0x3d0 [ 329.646017][ T7765] nf_nat_ipv4_unregister_fn+0x43/0x60 [ 329.651312][ T7765] iptable_nat_net_pre_exit+0xbc/0xe0 [ 329.656522][ T7765] cleanup_net+0x522/0xbf0 [ 329.660773][ T7765] process_one_work+0x73d/0xcb0 [ 329.665459][ T7765] worker_thread+0xa60/0x1260 [ 329.669973][ T7765] kthread+0x26d/0x300 [ 329.673878][ T7765] ret_from_fork+0x1f/0x30 [ 329.678132][ T7765] [ 329.680300][ T7765] Second to last potentially related work creation: [ 329.686724][ T7765] kasan_save_stack+0x3b/0x60 [ 329.691237][ T7765] __kasan_record_aux_stack+0xb4/0xc0 [ 329.696446][ T7765] kasan_record_aux_stack_noalloc+0xb/0x10 [ 329.702086][ T7765] call_rcu+0xee/0x1340 [ 329.706077][ T7765] replace+0x19b/0x4b0 [ 329.709983][ T7765] resize+0xbaf/0x1d60 [ 329.713891][ T7765] fib_insert_alias+0xb20/0x1060 [ 329.718670][ T7765] fib_table_insert+0xa01/0x20a0 [ 329.723436][ T7765] fib_add_ifaddr+0x43f/0x15e0 [ 329.728037][ T7765] fib_inetaddr_event+0x159/0x310 [ 329.732895][ T7765] blocking_notifier_call_chain+0xbb/0x140 [ 329.738538][ T7765] __inet_insert_ifa+0x8fb/0xb10 [ 329.743314][ T7765] inet_rtm_newaddr+0x8f7/0x1780 [ 329.748086][ T7765] rtnetlink_rcv_msg+0x9a5/0xca0 [ 329.752859][ T7765] netlink_rcv_skb+0x1cd/0x410 [ 329.757458][ T7765] rtnetlink_rcv+0x1c/0x20 [ 329.761711][ T7765] netlink_unicast+0x906/0xab0 [ 329.766313][ T7765] netlink_sendmsg+0xa15/0xd30 [ 329.770910][ T7765] __sys_sendto+0x480/0x600 [ 329.775250][ T7765] __x64_sys_sendto+0xe5/0x100 [ 329.779853][ T7765] x64_sys_call+0x15c/0x9a0 [ 329.784191][ T7765] do_syscall_64+0x3b/0xb0 [ 329.788445][ T7765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.794171][ T7765] [ 329.796341][ T7765] The buggy address belongs to the object at ffff888117da6e80 [ 329.796341][ T7765] which belongs to the cache kmalloc-96 of size 96 [ 329.810056][ T7765] The buggy address is located 0 bytes inside of [ 329.810056][ T7765] 96-byte region [ffff888117da6e80, ffff888117da6ee0) [ 329.822900][ T7765] [ 329.825076][ T7765] The buggy address belongs to the physical page: [ 329.831324][ T7765] page:ffffea00045f6980 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888117da6980 pfn:0x117da6 [ 329.842688][ T7765] flags: 0x4000000000000200(slab|zone=1) [ 329.848166][ T7765] raw: 4000000000000200 ffffea0004d95e48 ffffea00045293c8 ffff888100042900 [ 329.856583][ T7765] raw: ffff888117da6980 0000000000200015 00000001ffffffff 0000000000000000 [ 329.864992][ T7765] page dumped because: kasan: bad access detected [ 329.871252][ T7765] page_owner tracks the page as allocated [ 329.876799][ T7765] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 113, tgid 113 (udevd), ts 4335830272, free_ts 0 [ 329.893208][ T7765] post_alloc_hook+0x213/0x220 [ 329.897801][ T7765] prep_new_page+0x1b/0x110 [ 329.902140][ T7765] get_page_from_freelist+0x27ea/0x2870 [ 329.907521][ T7765] __alloc_pages+0x3a1/0x780 [ 329.912481][ T7765] alloc_slab_page+0x6c/0xf0 [ 329.916896][ T7765] new_slab+0x90/0x3e0 [ 329.920802][ T7765] ___slab_alloc+0x6f9/0xb80 [ 329.925228][ T7765] __slab_alloc+0x5d/0xa0 [ 329.929397][ T7765] __kmem_cache_alloc_node+0x1af/0x250 [ 329.934689][ T7765] kmalloc_trace+0x2a/0xa0 [ 329.938940][ T7765] kernfs_fop_open+0x70e/0xb10 [ 329.943545][ T7765] do_dentry_open+0x891/0x1250 [ 329.948140][ T7765] vfs_open+0x73/0x80 [ 329.951959][ T7765] path_openat+0x2532/0x2d60 [ 329.956386][ T7765] do_filp_open+0x230/0x480 [ 329.960727][ T7765] do_sys_openat2+0x13f/0x850 [ 329.965239][ T7765] page_owner free stack trace missing [ 329.970446][ T7765] [ 329.972619][ T7765] Memory state around the buggy address: [ 329.978089][ T7765] ffff888117da6d80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 329.985983][ T7765] ffff888117da6e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 329.993884][ T7765] >ffff888117da6e80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 330.001778][ T7765] ^ [ 330.005686][ T7765] ffff888117da6f00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 330.013584][ T7765] ffff888117da6f80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 330.021482][ T7765] ================================================================== [ 330.029450][ T7765] Disabling lock debugging due to kernel taint [ 330.096281][ T6347] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 330.476304][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.487143][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.496686][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 330.505512][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.514199][ T6] usb 2-1: config 0 descriptor?? [ 330.518980][ T6347] usb 1-1: Using ep0 maxpacket: 8 [ 330.676269][ T6347] usb 1-1: config 0 has no interfaces? [ 330.681560][ T6347] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 330.690412][ T6347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.698729][ T6347] usb 1-1: config 0 descriptor?? [ 330.967922][ T6347] usb 1-1: USB disconnect, device number 32 [ 330.996479][ T6] hid (null): bogus close delimiter [ 331.216336][ T6] usb 2-1: string descriptor 0 read error: -22 [ 331.477554][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.003E/input/input46 [ 331.492651][ T6] uclogic 0003:256C:006D.003E: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 331.691418][ T6] usb 2-1: USB disconnect, device number 41