last executing test programs: 6.22143332s ago: executing program 2 (id=3473): r0 = socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) ioctl$VT_SETMODE(r1, 0x5450, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = gettid() r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x1c) shutdown(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_NH_ID={0x4}]}, 0x24}}, 0x0) write$tun(r1, &(0x7f00000004c0)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x800, @generic={{0x2b, 0x4, 0x0, 0x2, 0xc7, 0x67, 0x0, 0x2, 0x1d, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102, {[@timestamp={0x44, 0x10, 0x7, 0x0, 0x4, [0x3, 0x6, 0x0]}, @rr={0x7, 0x1b, 0xbf, [@multicast2, @loopback, @local, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}]}, @ssrr={0x89, 0x7, 0xf7, [@loopback]}, @generic={0x91, 0xb, "d281b214e9af80db2f"}, @lsrr={0x83, 0xf, 0xa7, [@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @multicast1]}, @timestamp_prespec={0x44, 0x4c, 0x9c, 0x3, 0x5, [{@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010102, 0x6}, {@private=0xa010101, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xabd4}, {@loopback, 0x4}, {@broadcast, 0x100}]}]}}, "7c370ee2f37d3c23cede19dc8d307cbafbf7bd0ce7545e16714a77"}}}}}, 0xd5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002121) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = timerfd_create(0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x43, 0x0) close(r7) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x4c}}, 0x0) 6.150731313s ago: executing program 2 (id=3479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x28}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000200)) 5.832427835s ago: executing program 0 (id=3485): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r2, 0x0) ftruncate(r2, 0xc17a) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001b80)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x00\x00\x00\x00\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x17Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"\x01\x00\x00\x00\x01\x00\x00\x00\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xed\x01\x01\x00\x00\x00\x00\x00\x00\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3;\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a&Df8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x00\xff\x7f\x00') 5.43648152s ago: executing program 0 (id=3487): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) 3.033249393s ago: executing program 0 (id=3502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$usbmon(&(0x7f0000000340), 0x4, 0x200) ioctl$MON_IOCX_GET(r2, 0x40189206, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40004}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xae}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r7, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000700)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000840), &(0x7f0000000940), 0x8, 0x10, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) write$cgroup_int(r11, &(0x7f00000001c0), 0xfffffdef) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r12 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r12, &(0x7f0000000080)='./file0\x00') 2.996306795s ago: executing program 1 (id=3504): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000faffffffb703000008400000b70600000000feff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r0) 2.926531127s ago: executing program 2 (id=3505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x18, r1, 0xf11, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 2.815663671s ago: executing program 1 (id=3506): syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x3f, 0x9a, 0xab, 0x10, 0x46d, 0x8f0, 0x500d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xe7, 0x0, 0x2, 0xb6, 0xcf}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6, 0x62}}]}}]}}, 0x0) 2.697059896s ago: executing program 2 (id=3507): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="20231c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.154422447s ago: executing program 0 (id=3509): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x1040, 0x0) 2.06660132s ago: executing program 3 (id=3511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000c6000000000000009500007b02000000850000005e0000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x88, &(0x7f0000000240)=""/136}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071102b00000000009500000700000000242222d5572cc323253048146bc8dffd0b26162a64521748b10f1b35e67645329fe74dbbdbfe5f749414a9a3ca51a39a7011e44f740914"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 2.009355512s ago: executing program 0 (id=3512): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) utime(0x0, &(0x7f0000000180)) 1.985744883s ago: executing program 4 (id=3513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001d18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000940), &(0x7f0000000980)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='ext4_journal_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_journal_start\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 1.882338267s ago: executing program 3 (id=3514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r4}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.863993898s ago: executing program 0 (id=3515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000021c0)="09c10df286a3136e7e2778fc1f022bf0c058a4b9f9654487e5ae378f9b145ad7603cae89f91c08c71a6c4f0a293bab0dc833c2fc94a350e53f2f52722ba7e8ff44aef7c3349301edc10a61f35c01d32a5d2eda807599b969387b7ebf974cc5b5913f7b5846127204c5d5e0f7321b36386f08f84becb9b85a325b83ec44f7f56535675b160751ff2ac1ceca7015ed4f312c1023a993eb0e7a2d72a97fe7f20a92cae3da97b00e703557adcc3e081dd3f8b06bc9e6cb9e15b3448f54670dded49ed35f5882f3ee1c1d334c6e348cfda84db25b6a6d8a5fbc9cbaae01d08a51e30222cec0f3afbd207a5798e99304c9e482d2c9a50041ed76f7136b4c0aaa9bd3861c250e468c130ff09eb8a1bcf1a70b86483436f8af6a5f8a003bfac5d9ebfd550fbd77565e147ea2b2adeabf4cad062ac0b3bb43265fbdd2ff4add841368ba511ce4b0c65b51d5703c3b9a5672e836adf5944519fcfd2a9936bf5b7092c56b34f78bd88e4d853c11208035757c2034c21a76b51820a7b842cd8e6dd7db2ebf4320a075d47c62a8f15ebaa5998aef069aab8b5b7b7b52ae198cf43c4b711feeb6ab0a3ccecdb030c195117875cf7e22b719bd02bcd9f8d7c78af469e87a231acaebda0078262505274ec75de9914ae79661e73572fed8b33575e8a8e6e4e9fe1fd46a0ea25fc86b6fa25d954240648ae89227aa1f5bb861f0751d0a5c987b743e6c6263518122bb863ecb104976685edd435be712637ae06ae0d1e0d5d7ce980a07e0e61a7b33dea38586860905b87aafa3589e602a1522c74b9966496a52121f9846aaf18159d50746d6c95b7b634dae46a69bc16437a294bc6671edc0cdb5406f0287cbbd0f6ca8c1afbc7b73beb52b8c9c45d2f4910c21bf5710d189d7f894ffc800ae34296fd2af1d999712863b8777e39d0a78cd47e821b02dd14072ef4b48a34f8f0f7d406f24ede8984d444a4be5868ab2678619693c13d00fc29534b4f6941648cf4bfc9d9d6bec9c04b05c8ad2e425ed31df803782d1b4a2e187b01dfdbdfec0c3fe0275033f59bdd3331b2b2ff713a28e6d4299e14bdd7c344bf754cb6dbe5b2ecbedb99d415b12796b7325a935482ef097d6001692321e274a06313c9cdddb017f9713b64e066dd3801b4b66724e707a38d098528656115be8ba9d7d634b4d1e4b8f7960342d6a124ed4e5e93e47ebdef751e87292e074f64fea6ad454ec28d57328414d5e236295cc54fe74a6fb36351c9a6ce3bb7595667014c5e804f3a4e77233becfa9175c7e9001b848bb0c270ef2fc6e1d8ca2ac00ccd7586c27a9f85b4e3e8424bc07a0b97720e4e08dbc4b8d3917772f7f5e7a5eb87942d7be14d737a49839e972894d2ff6584e2babad37f0878dca2b0a42c7cac3f47d2a48b8a24fdad0def2286b3e91e7215ca859387a1372178e6a3f8acbddc2eac6356cc6e152bf2ed8aa59c1adfb57021112ce299753069278ae072ad63694365fffa9ae6f53f5be24c7747cc4680fe16819720edcb3b5b40cfc5e35ea56d2a0efb57514ad39e6a872f6e7c89675e5d04dc42883a605803b04976a90c5e6878c41484c90c80e9a7e8fb483db57dc552c2ec5bb674fa2b5dd09122d33fa312ed75bdf5ac0776a14c01ff36ac57b4de020b71d86651eb9093a7f5735f381af91b09afef2ac8d80e3f94245e7e71e0f4d7b1efe08e90d30fee3faea95aac86d6eb890e66758795bf9e2d826ecfbd13914e306de1c91096943c55791f9441324278b57162b5ae2605f5a3ce7c4a2554d064a6c60c752316f96c2f28f20faabb1803369fff8e847f753e13c7c52d8d710280ed04cbf1f2e686c286bec7b6983422f0cf8a62816f9e250a32fe39aa32e87931e09432596e04ed32d41f67b165d4c192cdf251833d2dab52bb84b561c091e71fdd0e7c817a31b7c7f8abed364fde16d3a9cba8384b171f339d946f37d0a315aac3677917b805fe59a9422e7a103a2e38668caa29668cf39c99357189a067b4c793ece2dcb3baf3aad12a5497b2063087d9e1b68d3836948839ab485a006cf84779ad945de8b85d2cc6cd4255bdd6df9b85072eb30be80583f30580ef83f94c16d2c36e29e8e96f566c6949c8161414dd9cc0ad2c1787b9d019501a956c2a326dfd313225268d45cce78c98a71a222255fb7930ac0ae7fae1ae6ae96c0b323d26413f7bc4476810fca11bcdacd368f896ae58e619656d200a611de75c899799b7d37a3535f0781701acf3a25626ef17b104951fcc7e5ba1fb2206a61baa8456d76d5385e924644f24495f8d621facb0838323caea969624a542ae47f815f55e37e4c6ae41ad7b8046be7e170cab49e68b9acdf2600cf761d0a62099fab0912834ba0dbd97f491d8446c5f18d03f1d81b3c2eb3e3db042157ada3fa6ee0f106345541c79f0fd903a54d1b05454a878d5cc5bfe6690eec25036281efb07d373399287d0bd93bd2745e61515e8c08296d6c1d4c87f65908a3571459305a17cf426205f6526ff07a82b51c59cbf42a065354c1dec6bfb0d34ccd9f135fb0a881f09d435ebf7d18f0ad62a9057c585e2d22db624b7b4f369f6f63e7f1fdb7ab064b738f49021f6a009a9857380b2288edc104f29463fe35c066dbad0294dc7aaf753ce77111a42d367c7d114140640d6c2878d775cd21a68a99262ec0e8d0ad3122d9d885f25cdc11d68ab641a64d03c38f61dc247481ddfd275b344e82849e5147bd71fcd176064fa3a45e00dd1ffdf7233e6271b90eac59ff483c921c0e972163d6eb24f6ca86f781a1e16c775f6cc15e40d110c44b5080cc3c7f940f824f7ce13a923d5062ea6dd2c098846890b41f1bba02f220a2420a0c3df1b96af9938476e6aaeb79523208435069baa2ab7a7bd8bf00205f26f359c30650d1de6cfafa8acbee9a24a44a35a619397439ba8e157ba8edb64aef3c9948ec9301137598f3ef8f08982d19decd95d5297c8d7f18ed53243f9a1cc397e69d9c2e59e162e42c13a0d806b7b666091d3453768c057e9cd5d5f37b7cd252ace59764bfd70017303e8d8cce32119727996438ea9ab5073dbb8dbf67e789b2ae127c9c94b76fe77d5e0c998078d4885e6e422a6e74e4f390cd5807c2f9985cc16e55c4c86298c8426599139bcf4b55f04c43de34683d08622a9c0928d2a034e841d6cbc5ecf8bfc2a5dd8c3bf4df23088537246004d936eee49ae772635131618bdc22a124149ac6a3675addcc9fec5f8f5303e3466deb6ca0b2155ecf55575460f0f36429829c80b02d01c8bf6e00f6ff1121551629f38856508ad50432917039089a2924b6f2c1afa325f98f85c2b0f7aa3ef28e1c9f055f0cdb8f8f87228124aa2e5ad6a54f5b4f581a920a0c3e1a9cbaf6f94d0b683881d47f9fc5678ab3d7bc48b22635866e3a1933b3f894c2000f8e9de118352e390ca0d9071e68b1068b815535a145bb52b04ad6c18652894d4769b4a7b6405ca88251a1fc7ead94ef3a1c44bf4bee9469cdb5c9196726cfd93e8096052d6f04f0bb3c0fe1bc75d6ef177a03c605156e2b3c0322fb84aeb20b72f7177113efbc4e23810201bcd1dd4b64b986a6e5a32a7eab5597b9e86aa0d405eadd00c1210cbd0505d813ec78f9eba7cce51ff1de8e4f428bd60c29554cd8f5425d6bc39544fbc1813ec61310efcc327ea530d865a6d4c3e88ddb38eea06330d18d03b9d8d50d7bb195469cd290cfeee863a8ec21a115ec0af855e2c19066d28e65d1055121271a507979b8fd660120ed8bd5654805f204706fa343109d30cc1131816db54b011728cf7da2342d0beca28fb156b0291dc914390721fc3547dcb4fee2b5ba330f76efe5f2851e3827e975c396099b6d70485a5758b3e5b7b1248e92d1c4c98b6a3ec13045ebb9d2b470a2406d0644a0427e470a41f2539d6f534f649d7b0d532ab8fc6a0985375cc4870f8ccfe0fa6c1b5bbd017ad545304c8d8f28fa8bd834f7d6b3189051452b0f29cab340988963715719a0a85f4169452f85014d5dfa41b8eb4bb4a8ac5d3e8eaec10749638257e9d84dbd32a63619740457deaa090f538a6fab5bf12c694f2c405373b117539f7974d68f62e688311f22f2ccaa16d78d41c80168c7ab3a15f057c6f28e54a2d2d1551c1839e8b9f365134242a1fe59d15c428e4673d6d580d738673a55375f76faa43d225f0365e524b62b951ecdf5b6882aa4a4c88e447e5af10a0ed488041583679181efffc338d5e1df6f11a271d4ee44c8f91dc03d988f6e6c40b9074a38c583727429daaeb9e1420e8458a3347eade3584f29aaa35a28f1a88506e3375f03748fbef15b0e84a42e3cb6420f3da2ee6dfcba7f276a346a68d24e73e9204201aca0cc7fb7211e6a8fc0cfe0af9d7a1fae66fa5d1e353181bf334c0663cc267dbc0d4738575f68b186c6331b3820d17b6bda4e7a0483827d2e8bfec34d348dffe00764445ccd3e55171e5334d22311a57e4de97bdbdf74d9eb0712be88a427cfcd9f0d911df8130b32b431b624989e935393e22c49d78526e4b8721b06a52d9545d06a7e627739b1a9c56af42e0d6cf1ab3a83be319334d40d19d4813f6f0ba29323f9868a1eaa50e857dc1426a92b30d4e10b3aec65c559c26cb4d459a864d85eb46c3d2d5d6d65a19fedad6e524c4fee52ef175e07b9a684d2bfda09cc5147c11c5f7026e0ea36ddef8b3ac11746d6f35982431094366e19f1d3c0de7cadeb49c5546d64df1c59f8faa4123d758a80c3dde5b73989d68f0dcf2dd52550dff966b9a8ecb1bba484d024d1c713b6f6de7a2617cc70b423f0c012951415a53b2c396d5524bf34d00f0d56858a9c822c63b2f998b68987dc681fca5eecbe369568be1ff549bd4424a45fed556fb9c95d121b8148baef5c86c1cc3afd94397c8276e110c58963634b8a7dc2627c2a5a2f9d40a0c297e8b2a479051c778247ce86e1c73a9c694663b356c6dac4ea59cdb0d3a4fbeaa4c0a00f0216dbe630b7f97b814dec1af3f3dfcbd89b040eb32e2b04a767a5284312ae34a6ccdbf5240de44cf08c10b2f37c432c6fd21af18dd0bf557ceb65e4eeb4a43adc41ecc4133ed79aae67754981074969174d88027532b26af2b343e214aafd6e8ac539b4ab5d763b0df23707c066f36b189d9127d109a3fdc351b5e252900ce3952c552bb4fe73ba6b6e381872dbf558522d7755a551b893a828f3ed7d8ef49f38e25bca6faade84d8037f784fd7a8f26b28eeab0e89385543cfb97d137eeec5e4d7abf3b93bdf47192062ba9f19580d0d88ff5636b40af8ee512f8ac90de5e17a157c86b0b1b85910a4a5e41e642607bb9758514aa65973052eb1b67749bb3c9f5ed8984d8f819d7d72b28d089cd3ab41b648920ac9558cce14301964ca7905af910e2015585bc14977d1238aba4b60dd6b37d024327ad6f82b10cee386b0183989a69c30fcdb61e89fe5ec6f0d5ff523331d00eabd6a086e8f73af35e7cda22b84025d5c1d968ac9a62080107217620f2ab2e722fda9c62960e24e65c71f9af0eb5c6c319d5beabfdfb12608327a42c185b88feccc4549aec5f07c28071163724300373321fea4dd6d7d60525caa4d9833866e08e4345f47b6e936b2d9ad37ff3b56c4d05e6931bcfd77a52ecf23729609a873076f32bec240372e2a533d48ce201e136bdbf036315ba65449feddf5eed19b062233dd1b0c093c5b6ea6418f2685f6450f803bc1322524fa74bc6d5f9b8cb3485217ec93b8ffba6c7c642395787cb4ddcb874bcc6ededab97cc816048372f48b4a6f88f801ea3a680c3c5ec565fae3b918f2b85b9e33c77a15463a07de144e91f6feadae06e48a8aad0f1c610cff194eb8e338eb555baa66a315b3a53d3092b58b88213df16ece6393bfa6bd2feb1fd7f4074a9a533912d5caa9f38f6c0adce93cf0f3d8d625c49fdaac6d5684ad49cbcec466f3b1230e7284727029b1fa46756ae68cf1582050920a4fcb3513d1e732cb7f2041527ebda99da544c6d4906327ce735c2c8372dfca363ab3b99feb345d727a2a9d2cfa59aa0920ab8f764576c365246f985f244824e23e9d15d74a9b0bb001b7b61f8b828c321699adb8153004ce48d67f91eba238796282523647806c84315f06b41ab95985d572311e77d2ea92d5803a1e9d68a4c662a99019fff8a43c02c9989da7ce59cd3344195dbe4b2d607166be8a50e93fc3d183da65b7ac9b20779b2a21b871922781ba5e18549124170e7007ff86740f311c1b62374c50a70de7496bb5c392591ddf1f842967bb44096ede42c56308f65c7ac12d1913a70de61752db77bb1133ad3aa2908aa2ae338938ccd58324d2435a51149badb358a2920070569778a1600422b2db5fc6b90a30754549a235cd2371bc3f35b231fc94c52a5e1b0c3498e7fcb07d743e577b2129b7c3d9621d7682b11b841dd2767da9e464c84c06dd849a808c8c36485db8a4f0e461fe6c09c23465e04d98e80ed90162377a937c0991d1089dd5185bdfba87dcb6ef2147eb49e4adc21d40513c8b3ec5820cb195c5f1b2a2a3579861b5051ad8191ed5a2da023d000fc26a9f53035bae9b3398e3af4b5dfc31301f661900feb20d0b5329dc24eef74b1732dacc315cac62dadee5d93ff1d747209ed42bd79b1796e04b55f02b9e967ca4847e0d21d337c2ca7d768ddd1d3d9782a04168a59d0b93c658c00146be42c99cae8fa4f06617c22322302d8b75580df752cc4068e42ab43e61c566db341fabe0e1c67f9ead127a0f9883b40b97cc654cac408f1b3984b8023440d0d4739469070222872349e590ab75fc7090faf42244351818ece78f7155206c576f8fea4cc19f07309084231026b37d2ab35fd9aaa722294b36a775be64fd055cd3c70cbb567403903c2d0107541c1ba196520458529486c7fff162351b6cd5dee9d4f140b92ee2fdc1b61c8fcf3e612466355399bd7a7fd058d1a4851bc48486e7c4c07e836766e78684301114bf6de335aac3697c35aaadb7c3322c9df87c4e7d065480d73a9eccd0139ee02e7df22449f9d1da960242ca3a81459d8054cd5fcda0eec071e757ee03c515a6bee81131946d40fd28b40321c9077488c923a8a53cbc9273702e9e1ce876cb731ff42457c0f9133f30094982c3a81cf1bdd4fb8bab68128e9266c0e79c0151d69479f0520481ad37f992a4d0bbac81b2652e99cfb4eb4c09bef2e871bb7fe700c7ed990eb874b19c272166c13ac0f9695ac8e94a4d251c19df595426e0fbd1d3da70319d43cf78893095cc7fb165e5c5e0b63a9224486e8876240b0371e4552b8122495a796a607d76018c9ba2b19a7d8e3c472359cc15a131a58959d1ba091e1898cd1557ef619697df46216e633b1f335cabb6c7e26de1aace7136eb7d463fde32be6e0120aaab1939f0a4e7a82dbcb6d157f4614909944436564526e91d7836630318bdc9d11fdfd80157edb6d320fae8c435208cb8572f0281357d766a4f66affce8971304b212445975b8000cabbe75e450f65676b8c3ae176a56fb6ae66e3361d9a9e8ff942ed4ce6585a894182f547b3611464b4ae689369437d36fa4d4965c25440cf8435b8a335155e63426628c537442d81f917eeea0046e4c3a0802dd7df4e21a8a69c61fe86f5f64b4d4071a400610d8397f8c521defc897f5903add27ca8d186ab2be8f3df7ea0155ab4cee79b8e963b6221d7e311d1fc6c2c1300b66fb833376bdc45bf1bf0046796d1c1df4a0dd63abb80b9a6f834e706b8f3c4efe4209cc3bbf75309670274eb261abb311a742f36063dafc36b15a0338fdfb17f6be29b5e2c60ec407ae17cb6e383cbae9ebdd7e48548746bf87dc1dc8e8df67cbfae0e4f6358cdab039f8b0a20748e3fe7aeeeb94dcedb0112a8956e03b29b0992e4ac7300dbb067951eb9b98eb3a3c932e7998a8717c86c2d22b9a4f5300408610a3514373ffe9aa009bac5b38c77d3b98e1d77f6971faa71bc82059541b87e4146e56174f9bc77164ac8a3df8dcfd69285cf4a81dcf86078570b03b494df86c4487be0f33113022d89c49495bbfd4acdbb5d92229a4a600f977d2011c98e5fc312d9bffdd43833f6cdd192f1c891956b4209f4d55161881d1bbd21a53dd4ebb387055eddb4dd71a21e834354b4676e1228a7855b2e4813307557d7a3483f50e8a11a371d7646797d863f580c63a433b4f8a3f56146c971dd96820e986d10ad041da3f14df34ce672dea173dfb448b1e93dd4ec5a003fe109bb63eef803a0651009b9997ae15dd55f9d2b613970d81a5fb78545b7543114ca03b0813cf4e3e5551f84bb788497ddeaf88feba493bc576a69c5ca87376811e287606fcc2e8c465d3ace68a92aecb6f601bd5cc18c9ffd8da6ae40fdbfeb231c75f1671ac2c3ed712105c89d7f19eeb8c2e05c96a9ec92e7d8bd209f5bc48c45aac0bee1ef11bf9f1e8ae1c7db3d8f855dfabf863a9ec5a3f094c2c7dcce487aeb8182131fa060e38ceaa081375ff88e03670a6226e1d54cc10a9d5792d6ac7e2b8dec46f296d416e3af52a134122781e08aa28c622fcaef8edc8c68e569684b79f26b6b1d2a03ebe8200fd1b6f5d561e1fe28e06a4c6abada585f81f7aa351b69d55a7794a42cd285f190d3bd1996f38ea69a09b344bae94f3fcfc72aa4c8faffc0ab40eaf0340cfb05b1a6a3a4abf646ba9415089382932cf40a03ece0804bacc51e69ab107bf568a9291344d26ba17d9180d44a5e63f54be41c27742bff5f8b6fc11f6c9632e22a29bf1cae278041d63f701abe8bf6d50aab9cd055db37017267d58c9ab24d9d2cecf4508df674860060844b69b2db4dbc868178e775bf3c17639ff13ea8d00c895209cc8453d483339f610fe2f632f6b2d77c7d89a7c85f89171b9f41ada62dc8a20dce7aa5043642c023a8344d549f6475c1ecfba421bf0f00ac6c0ac1e2ddb93eda60911960262d0ce4240cb28545f5ecf561434f02f12f03a366b545ffe1b02936146f794c43aead3a1edef2b6557a0b5cbf2bc05a1c4b6659d239043d5c03764d361d94225f3a57dd1ee51ea53ca0f076f8702572328855530135b5a7a0472e31fd40c3636efd20a4c2b25d09a9da4503395335ec27156c899474bf6e6daed56efd75598b9c8afca931e776f5fa677fe1134db2e183f2677c750ea3d10659b624116823b63f915e1c6948e21cb752e7742bb89fe8fbf6702ca2c7b010061c152fac55ae7bb0f964351c913c2686baca5fb9b7a7705a74aaaa33c3d06753fc7b74eb9768608b3fe5adc58bd4858eeae9315992f6eaaf0701b212b9f3dc631a564dad1a7b398fa9ce96d70ad065e3627c06a72ee9944bb7af2003c47d961230a67e3cb13bcd16582975ca489a92b0fc4d80c8eb1be777d18af42ca5b3099a04dcbc80d143523a96ede2bc0203e3bc288fdf22af85efac4195c2fa38f90a9d5cb0c23dee55876430a135bd4d906071f896b039a775eecd3457983966ef3f8fab6b28c042ea296acdaf664ce92f98bdad6eac89a23e547b6d364d84321b73e0f0191694b7f9b9384e968c851891370dfa53ca10f1f87f62f4afc7b779b4e775608c0ac90e2431568d874476f13ba55bfa283ca3c8550e0720ca7391b2d42e50b079d70dd137f94689f4c568bfcaa5720f894bcab6ce79d2f305724877c971a26bdf49cf50078cfb1f8b4d1bc5853198e99bdf3522d9b740f349bfd58fdadcef357c488b0b036cd7eb28bf130a076448f9ad23f7d4899b563d73c8b767fec85b62fa1bfb6dff423a380523387a0a527e1fd6b9a8350302514b3359fd8df4d1aceaf2e0704c0fac0ca925c9dfacce4ef08a5222057cf146a667d417eb033d7220ab2eab1fa2e3c98d7a6e76773c2d34b99af81a5490acf664d12781af51167bac23eaa4ca2dc48d8ed33a4522a2d74824e1771196ba3a2c318d9197b23ab0317e2c3c510ae455577c83a9728a14836eb1ca73b56dfeea4b56c3171bc9266f9954315925b1fd43f18903ca0c5b08a8ce95c0a18d24c0c2cbebbe0669c41c80c0ff38239ab3fe7cfe0b310f7ebb3a8480d499d00b025f3903836b4c2e14dbe58b5dae194834e39e8ab0a528665101b66187a99535f0227b5dd172955c82e3616b60c46e88bb603514cb3beb39449bfd7da344a453aef2589e593bfa17ed2c566d7cd46d73d4236e82bc1fd21a54cde3d84428f1aa1f69e05b63abd9399e4d42e07f96f88ee3413a17aedfedae508595ee7e6e2bf7962b9a5b9b186e9b2c3a45b739865788fb97e2d79d42b3e383a344c2a42c042ba4400d60df2496348e1bad74a4d5a3a50fec419e6ce2b35ed552ab223a14ec75f870c3228bc42bd2e96944130a2cf3340848185518f62963f4f8cf1d36c2edd2c7e041cf5ebf414e3e768c99cebee736451e7a0b0a723a8b7265438ecb52f2349cac7ddff2aaf8c6f8702209f150a4a90926908f910abfc32f4081317575eabd1099e1a5ab7b18ca192530071201809317281bc1e7c6380e0c4d88e36aea10294f79da0807d0be23a11e1d9fe9729e63a3a67f53bdd48905dd626def5718a392a6adeaaf75f5dfa79a3faad30dc0617ca512c6b8468c5aec3395b19bda2cbaf0636cdc80451298a5065f4de141688a1765857dd493904b9715268cc3d700300fbdfeaa4422d09cb1617884e1bda71c836953fc0a19f4ee75d15c6aae0f0707b911f122f806410aae5202c4cbcd68cffc28ec4a409cfa4aa31f06ae0dae023747c4b54e7d263087d8b50b746b412177a7f08c7dd0a2990463f115cea17b35c07de08f4abb88ac09fcc62296c1bb07a3fd28f1f3ea639c2d82eb7bded3c465160297f371e752b81688f99ee9d572de9b9cba648b7aa9657773d2c1e3c5d7b39eb553e9e4077fee300c1a9d1e881b9e84c427bc77d539175f795e259ee239c98d90c2dcba02cf0a029de1c2fdbb9d7050d88645389b54ae5c30b94091327ca2f6519f2060983adbe8eddfa4f1225048a57660a881a7cc205bdd30f3cce135e5cc2909ce23c7008da828c36b940998348414231c815663f4eaf18f5540d90aaf412bed49af5fb5e33e7cb3143cda350795eafa5c08d1c7f3ef5b23f7f13339f9506617c337d558fb9566dd54cde784058b32efb78cebcfea140b8bf9de1897543ebbf80dfd4cf548cd828fae8a73872eeac05a222db79e4bfaef4f6154d0e6978dac7dec148fbe8f7f06fc2f8ed900c7a92e5aa0488aed7c1c1b71b8ac20a850b1538cfc23da39eab3a5fa5f5bb274cee9d3d3cde4fe89ba79a2616e2be9eb1dd31170958c7a8031de47e9802f9042ee6286c7536c4b0d8ecd21ee62f47331882d617267ead4067d687555e957b3340d360d89bae2586e72d9e52b68886c0c6071f4e04aa089887a53fceb4e93a663c4497fdf8921e1ab8993859b215afb123bd72ab21dcbf74c43ac85212a285e996c1bf64eb401e5ec10df621274a016f6fff7f957d6dc5df45098f5ba61e932abb400c5fb9597db759492aa8d6a1894f7c40539218a0bbfbc5c9b857400eb8bcfb3e7981fe4080741e3be9eeeea4c997a8ed80cc18d1a33f898ea5ce2143d2239b693a688b83ca189f9228e0d9a3d3cdb380f7dd", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x28}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000200)) 1.82505469s ago: executing program 4 (id=3516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000feb000/0x3000)=nil, 0x3000}, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0xc018aa06, &(0x7f0000000040)={&(0x7f0000feb000/0x3000)=nil, 0x3000}) 1.701894974s ago: executing program 3 (id=3517): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006380)="77e765b8576c396ee46d414c60a04b96eaaa552da4230246be11345bb7ed03a3bf64f62746db5a598a9474c21a58fb68b17642c0393038db3dc97c3b7a1392b6fbd85fb0307d6ab63e703311b76164ea7a131675e5a809be48147ff2c43e11f5bb373fab5eedce06dc227a9b498e6648a38caee5091bea85c77a1fe03f63e639e4841d32d9ac303a2db574a605bb62201c6b74c379ba6056912ec3abb7c2e4bd90c88d8eb0eb3d5f4b0c5f275d94c7f1893aae344ede4222a9392ad8fcb5e27c8ca313fdd452fb9b3bc172f34d1cd15ad867eb8dfebf8733aff24a5955e64833968bccf82b8c420b79fa980b75c5bf7ddef47ca6fe644b432aac26568985fa0b6a023b32d8cb98b0c4a57dfa39918062447b73cd2f6634881b37b62fb826a4164e2f6a2c1797f7102f694a99a8c28eb43fbe973e037ec1e6dd5e3bb246c16e1569981475588015096a5095d87d475c973864bda3fd2a848a016112c84467261325c54721d71241b59effeaf2d3926b63995ae4fc73a3144ca1f9a630f93758d31e72ead738addf555ce175357a63edfae77db708c7bbd559b32f7360a181d14b207778b65e1da12c31188ce454cc72b5532dd73c9b41459602563f9e56cd64fb383d7afda9fc987176bce62393570049b933036ff8b7dc441c58bd2bd01d33a7fbe8979c96cc3d194e9cefe0347ebdf02c0723a7d7605e83b19dcce6c01fc5c16a32bc7e1cdbcc1a4f52059ab0a35d059b2c0a8eea37f0f8d86d678f0f182df35c4617e801dd3a36ca249184af923a663835826048ee2e51983fd7a1f2067426e2cc515bf87049ab63159bc39326013800f32c583e50f2f7b8727f29e15ef2d37e9d1d150f379869f742ad736890fe11be7af3ec45d95800c7d25aa2e0d6352bc88f812bd7cdfc9ee015bcc188f59f0a4a6032240770881c1fd91cef490c19e9d2472de885327213c9e6412bc1066c4c5e37ec5e5e68dbea40b00a512366c22dec93d836296a4722b87cf2882cbc150788e7228419948160ec969d26867990e4cdd666dd1c28f109f990fec2e6333d501370ac1157f723ce471148a6a2193b4db9b996d49215bfaa9010c5297b88114efb19660a5d5ffd7653792a014f9220eaa8af29dee1e5d22cba4a61b5abe072055b47d415a88811ea28147de66af7c6d1f1042eaded8bfaa84c304a4c67b284521b5e7350bf44b47358896c24498d316c3b3c260423d601b79c366db9bb61c0364ff26b4d7c44bfb4a0ad7166990ca64d4129a70b843ce98869116b03646f8a75e960ce84a999b3dafc1cc80382f70a09a25fd68ba41d79f36cb4b19a37a6a3524e90ea2b130abc7375dcae8693e81a9111a658c4709f1d79e92ba3dde38eca5b88d18f4bd93eb6e91c5fadebbf8590347972be5b31f8eadd4161cc178a7473786285de2d98f182a4396df0a044b87f5dc78b260b2ef82355e7d3f69c7315cf8f7a90f63115d8abc201cfae1bf7e083498c76171006f6d173323a9cbd594fdcd91eac1f2296bd2aef84777531d2df886eeef2e46ae2e5a1608717f5b26528e8f3d815ab060d4c0eab4618170b6c2d73ee84d7dd902b8c5f03c55d231cc8a693cc9845cb103c13cfd92504c57cd1e8551d7d67db6c2ab77a8ad9313120f9d472de83c389eff9b38e82c741b35e0ad8966d423bbbc7f5f24416f097df5b2984300bfccfb714db97143265ecdd93f92a7a22ef6ba5fa62ab73b3b5224f161692f9d90c04929d9dc99fe44c44ce84b418b992eb09fc6719d6dc97ffd82036e05f8fda95ac96c5cbba1509b75d511524a45d46c0906d64600a054c8b7b98b2a7b104de95b4ea85730ae26406f2241a033542bb2252c6209b5dfa633ff358dbd70ce80b30affa30a58856bd0ad0612337e934a9af84893b4b87c7247f833a5c650f2f9bde9a043b6206b4e971cfbe98cca175a1ac6eea3e1bcdf69fbc0b4292947d7c6f07ebe13bef2902b37def5f73afe8913b7cc224acf60f3f892486b9715d44eeb064517d83f53ca1a29f56189c18bfa564e3b170777af45bdab2128e1b108e2bb1cbb58c7b0ba9659c9f5cbc28e95bf06b4822d3daeadc4eb168d2a599f5ba61c9155bb8223e226014612689e923bddf3a02b40f17da875109f6b84732f33e8da3f3b98ea600ccb0d9b3c7dca32deb6831396b373be245ad82bd68f888bbc8f6acd6aabb806e1c7d7a2839012b9bc1421584ed785a259084cc8faad008a8ce91ca8db29ea05e524617c3edde18606841627eef0a2c298f66971fd6e7eb98ab62962e8eb2222ccd2c019170237e14e46df72705a53233855b9cbd686c31ad9b30f032a3a00016c690f76f6b263a7218c708e51ffce731c19d35ee1aadb8c38bc1afe89be4ba6a20fec3019ab88b50e5b2dca348bc6069979c28ba94097ec400b27e7a8fb87ec389a0a1f3c91dfa48837caf88a946b8086bad2afac37885cf7c2889b0133310edbab573b52e4f76824bd7de31f0c8e3d9b8ad3946934782bd969b62fd8ca309ca6809194aaa16520b89abd0dfaf80849845e3a071922306275ef76501f17f13d2f777136e9bfcf1b335eae6177ca41e2ce2d0329d785017bd949a4f1a178b1524c575d0105d2e842062617dd48a19b7763be945f0e323bf78f042d60e15b4d5e63f991df570ec0c8ff5f122279cf3132c3119b87c2a22ca2f19c202ac118a193d16e9618ee1826f67ef575342f9c33c5d112acfeac747fe475a24f8b7df4fa26f877ea7054f3ee4a2f734713472d7304132447e463bf61d9b80819177a7831e661e800ef8792dd51f3aa25fed65cdd34bba285cad365cb177c4f2849b69e436e10b1e2b1a5a36286d60b8a44bd4bf29202d44d9f96f9facbb70fc3b30ae74bd1f7b5b4c905e2f5f4263fb7f146e031efe2642bc2bd8c526e0363a77856b2a8c2efde183fd2ebb0d6117c93f88d5cb6aef20a8e0e61335f1ab14ff0041cf9ee2408cf63159266174d49dcf9c032a2f659d76ce6c88589022c3ae06543763301a8427149c0dcc8651abe0227c424650971b94c15786edf9a8d485a1c8cde21d612faaac42f17d56be8c722e47f0246cb0a9c1e2790b5ee92b3ef9bae405e19a228ea428edbcc9e0a76688bca2e7c20b7931d61e9d7eed3ad690058e6300e79404fd6e33d6ee6ab90a020877a8971ddab7a4c2ba3d7664abda704f2ad4038d65e49adbb198c8d370cec93fccd8a3985115f77f400c45c813fab32f10a140308e2a4a1ff04573b2fbef926d4c9f84ed0ede55bba316e199dcf45ff5e2750fccecc6a79ec8358648d30daa5de6c321cc2333f7db28dc4676b38a8a89a07953bbe5b925a4945e0e358ab73c82f331f00ab2779bedc63cc4a1a91f0b7000cd28a734f9cea68f19169eaa9bac6e7ee503b8e7c85f67c8862e31d2adafa346236dc159238e92a830f282dfacdebf6bb94472004943ffdd49ba4295145326c2495f7b3a90751f91f3d63ae20a8e9f768f6e1f99105d77e918d0e0885897a95fcbb89b98f2b9cbf3130d6af9c9cc8128b600f3fac1361726b0001135e923c40b24b9223618cd8d23481ff9d412cac7a26dcec7cac2f5c4ab9c5f0fd2b729ed3784b7f33ac19d7526465b83adb5f1e8a145131761d05c8f9d36806acf967013ffc347080b75fcd5c99c8f0e6ffc2e0155cfdadda03880d0fb756ce2fa4bd19de2822c0502053e160643367d9e20eb432dec4e13e505e6697e8ecdaee2462739be23df64c7d2f2f63a569bf400eb8206f0153c2cc532201063bbf2dbc58bd2e7e604502e4515c641eac5b4ea3e33c578e2cef8392c494437738e4427748bc0ddbfad88e35541d63931366f1cb769b122c3c6738ee1d706438b1a4b675ca5b994f3aef29f391d377214f7e557323438b925a1120933b3877a2279010612ce4f6e49f5981d552a6be25a182d56cfc15c520cfb4825d2e0d9b0062fa70924120b84aca84e68e958661db268653fb7393fe5901e46c36d6c97bb13a434965a3dbb804ca22ca81b5e3f90658ba13a74d19fe8bb96e022bfb037b6133f003ae8df4b59d6585d40c13b143268c349dcb0c38a9e75861a7e1bf9847f234c0c49775150fce46e1ddd3d2f24d7aef240c89e74b373d94210ee431d8d960c1bf078e960e0647cffe228f26dd0e846e904c6e870e9b8aa07d174613df1ef1d313b6774c9bc66f23689ddf351eed89581c3cfdfb10db30fafb73b5bf02e9d76f5d7183bc2dab2f0ec6da787af7e965da1b9f60209143879f666da68988400f84329b705e2d77edd93626b2dc2452fab14fce1b3f08dbb278e6799679829482b145bc26a22e81e9c6b7783b547ff6ba3dd6a8a14b2b182141bc8e77947d050368349ee984fe29eb149badeb626378acf210f2e6026bfe3364c95276952766640669cd6249896aa0c74b8173a8d3e5bff3339d44db2a7eec6a41f2703b6ffbfcec8d31b93dab1c1222d79543fb86faac67ed0b9ff693af141f7857ead9abec20e2f5c105f0e88b337204a1c643ff257329c2a5f741762353457dc8261733ecc5eb2cbfe11ba0ecb3ad70dd379a053f73354aed988600cea5341496ee3d9ba6c676330a61506eaccd7ee147f0d4ee769f312ead804bec9cac72c1833daa8c0e152507d7f81d4f0fb3dca25acf02fda6fc5ac2d68ebcb5bba4cd5cd8fb571f9b8bdef3c716c73ce4c68b071bcda3ed25b7f9b30132c1c45abe410f9595abc8b8b85ef44c730cd46a43107ba0105b1bae4481bda7b22d109083fc352ed923da15904d12822fcaf9409d8cf69ea51d534d07e6dbc6c9780eba3a6559a8af7143e458ba63c5de659375397150d098069d4b22834088a54d3c042e069f1e6c0d674824ffa152af7baea86936ea0a1dded2a244daf6ad1e2fff6444918430acc9bf6069733d7133fc071388d91979ebd75a6a790a78f7cc29c588451545528ccfd2076443f9e262bd85cf058711e879d08b1695fa72cce1ac87ac30fe7dd579c9be4f485e48ad339e42245caa9550ba0ab9107ca561666ef6a8d9a020e3f87e9e21ff8a00114a231a8314df0d6b2c0e0a34a8f3a81be1c227a27ddfc20eccdad09db495157b46cd607ce359751b88109d953e82d3ee547d04405c09b98e1239a89b1b22771d3e05dfa50e69ca22f7fafd76c4c6e01b2db13896abc974069d1837b1e60e5da30278e7f9f880e1ed84fd2f67fe122f530500f98dc4b6f5ffd865050ba0a357123a0d93772718b9a48a80cf86144a35f287550b69d21d2299509f354536a8aea858f6a78aa03b8022f7e980af7f539d00824c6e6af37ddadb99a54bd35757063c32256745d7bb2cba995e13ba8e7f514f99e8f65c99ee8def0cb215ccabf99bbb88cdda37cb1e45a0441978ff21790af43ffeb9b1a579ca72cb67edf77efba95552720fe36c7720fe1b9273cd9524c4eda9c023d93858e3a44969a9a10b1f36b27d3220d46fecc109ffa1b9472cf5b3b30b82a9fd19561af859229c9baa539aabd671cc13f428bc044d25274f8765f55dabfabb8b49dbb6931e4f1a9902a3cab721f4fe1d5d36c09fc430f56d69efb15ed5d43d32b83980777330c5d8204d167bc601e563d0d53296102370b3503260fec4571e23fb135de88dae5ae516616cb812424e5bf76f13c14e6df2824d2d846561d0f561b5058538d2692d64f829b762dee7efe3a464cebb63904296f5ea978ee18f616b63ee4a3b16a6c56bef8e10a3ef1597aeb5d0c887fcdb94b81186e038c9a8bd4e7c6c92864d0dd8d95894b68c382bf5cd4a8e93345ea2c25860897491118c37982871cc838aeb748b31e92eb7506745e2debf6acc1e29f4b046f591f39429c9cd055e6aa683b950088f7b3e50e699d4de49c3fb7ba263dbbd185fc4f11add2a95b4250cb472db4716c987774f70b67dc06a5736e2a11873b39cbacfac7949976bfd2f358d6aa4cea9f27f5b082c3641209c2d55188800c5f46af42b6af8da52417d8a5354cfb8be8be5d75faef4a40c1c9db54645e38b252fabf67c9a794ae8fa157b65a0d9761fd8809ad096ee59daede2a6e30a35f1d11b87278ccc73d875a4aa9a64a72078abf34a4cfcc19c84f688741d82c4bbe62cd9b61580a7f8fa7f79bbe86a29273210cb60b02f492f71335d7a0c8f9a6fcdbd482cf59538c89696e94b255a2ce9aa8629af66c5b6c678c21f43453c65d1ae95f2fa8328c89046b3efd16c9e678e23f6a0b9d2a11ab17e6184eb5afeaecffcb881719a7f6e4f904b7a480436c6e3905b5aa8c1b517631ab0871ce5132846f6a8ec3b9e75210f949fa6294dfb804c4ac97ec2c36d3cee9a2df758ce29352f13ebfb9fa622569ac6336a86b725ae4b24ac7057f5a001ecb4ee566a399e9079f70845f1eb24fb99b03f55f844586494fe1437d366ad9e8f67684630e60b39e1ced389c841f9b66b1b9c8327731e564afbc9f1689da342ce594c4689dd2074ca913bfc25ab4bc128baa8f1abc206007316db333b22dd92fa474676d8cfa9a88719b46df8e525912a24d2f852ff3551f38d32b571e4587420b88a3b5e19d0cdcd2c318c0446f5a74637e435fd8d80530c971a75811b3707de27e579b099e49b4312dc08279a1b7ab37ebcddf18dd14bbc98d601163816a79a456d85f8db489569a5f8cbe42d62c6a3aaa2d908e968ae03bb81dac56a55c58855876e65841a09aa410b007454c70166b8673355c364bcfe8f1c7b66cdf718e06f947d2e7222c80226d1c4c01ce6badf075aa27b76ee117bc10dd1dd792a95b2178099ad2f26f98d18a1b0e2931316e816d36565666375deb068c5f9134a15fcbc4c28b07c8ba66710f024f59408ac2d10aac9d0dd21f02d892d11c3855a406534d746b6e217e98b98467739b7cd46ddd3416be24e70732ea6f244f8c98c03eaf512b59f46096b43d4a8b9ecfea0dc4c966d24c5b2b0f146691f7bd8f118922c4cb0585380523c393970d09b01b33ff25d91a1522ac31bdd53ee3cc856e34aebe6cc26da7118411979e10306bb60ef4e212ea8ab5308224fffdf9832a9e4394f65c9e62e354f3a5c99be7c6dee22e61c4c3558db03eba82da0e1b4e3157f887fc83d428e546224b9a7009e05d63c46b93be9dc81654906686d718a86753459c58f8e77879e9f351814ad4970529a3a3a41cda9e798af7344568774845fd001b1061e2c239eab9299caac087c2b79e4dc2016c2dfd62ac6db0381481a9595e5610b6714f37f7d9be735cf2efcf870f3f0948acf8b1f56acd7afc019edd7464cae46297241fd8852420230ba86f27fe72f77783a28bdac44671dd6014790417f3598ece6f1f6277b927255452714c2314cd53e5c2a5990c553146cbc0378a4bd7748c47a710bd35a2591c1d721ede80d6fcedf1f161fd31bde4c2f52e76f3f81a7c85c8cb28c20c55e717bd3ef38412a6123abc773ae885bc1671f3f8794f6011e01b5f5f2bfaf3ecb09b9195efe9022f73c963ec06f902ecd8fa826d62c8dd68c16c1e2b7da0ab2bc512955b7f94bd80478689760f03ca2e099ef72a3c628228fb1b0232e01a259c45f670bd94b6136ba183963ef984b9a11b63612d663346a44609d4544f2ae3cedbcc85165015064ecbbbde28be180e96cf507ac98178e330b813e27eeb208d3b58950b2bd00fe3e6381ab8ee8b5636702bac829ddd1086ca36b9038b6b46403555732cb95503c6e9fd052bdc423f654f4cf9428ca81653766141bf54e32331c6d998b9663c0bf7290c8b4b6c8e18f020127d6ba90ade1d2f282747e652f7b16e076f60c41983b8c1804fd223f737d772e7dfd44d4f7ca7d67218bff47d5eac1854247ba414ac4f85ebfa30820b5cb7c92a946716032398c19b35370afd8a0a998ae82bee2371bcbf7bacf7d35cffc4aa28bf96bff9c229b3dce6e96ccb02a894c9f065d60d6ac346eb51a8b3719a9cffaa6144a1148d3e0fef75ab7b851cd053122444bf902b9eda63e4d2eba8e09069a6f374ed6996b15f47b3335712b16990e1a3e87ff3241c874c92b15c09e355d3a4d0dd5128d02af3471bddf1d8447fd21aeb3344557b5e48cba2e700ed18b3f06e6af5d613b359d7a06e5563d31cfed8ac3ee81114b7565dbe0e3a704a4ef1acc3db3797dba0d6dc8ba3af6b44133c10431e25dad0095115a7accad2c0173d224b6884dac8307611504ebef1856ef1ff983b32469a7390742a57da648d8ab3dd5f1fe4b22e6084c31233a2403f40ff11e5480685f584fa94af8d2798072e47ef5b7f17a1e11b8b394543781f966855acc1e5fd89440b693cee985e245550bfbf06bde9de256d7ca4614bb1d4ad64874d9b3bf6338b17bdb1d95261b2758709a84e9491a7876e93604681104f8b530b557c3c4ef3822616f9e6d029435bdde0732ed8ce24e2754d17a24fc491762e7f9bc9148d72073c3bcb76de59d77691e69a367b189a789b20a5529ff7362ad1e68ebdf48046eb190125927e97147ce2b2cd2926076a8af7e70e70a18d2591d7894942ce0607a6be870ef643923bc27a8367bdc5bc03eb57d388cfaa383618014d93967822d9dd8e1a74167c2a0130ebbe3df8dbc8da5cedeaf2b6e9acbe88bf508d76188520be2689904f5d9f30592f60128e51f2116412b323bcf6747990b99d4f5ebc44302499dd0b8817666f576ddb3c8b96334c05ebe1db54ad8ddb82016913e48161fe8b75f2689f92cdbd30652db2e10251fa5723d859e6115c5f3c802093917982b518432d0f0c3d556c4f4ffd331412fc48b6abdaf2e0d03cf4460471a96393afdc8fa6bb38694a02362c132e29fc0db6a200464b2a40225adff346e5f8bf7a3aa9c61675838a248a9f17ba3a8c8232e1e9dc9c7948d9c6d6aac5e672937111a6fb8fa67f34a022fd9609e7aa2e19201f2fd8d0b1ce29d3356a80424d9d53f10a117e4a9f9f2bb6ab264eccf2bbfd8c4e358c3665bae26cdffd1d2ec46a7be1ecdd91b34aa900f05af60c796b1368aeaf60c195021534fec9e343953fa431b42cc31ab5285bcf87c93590cedce9b8e3960c619baa2d594709ecdd486c7478bddccdbf96600c322f121a6636dfc833c834905f1039049b41d30dfe307613fae787477e52b887e70eaa648d846f7c13a81a64d1a37d7352845decd5a4fcbf19129c40531fe7c88b3ef4914505c477674d72d44a0b4a1d841a1eaf9bb360ca65f24141babdf7257ca2d5d067fcef338d5121c2175977bc059a7316f22210b7c9d1266310f296601902093187a659a16c40368870dcbe218365b373c588827442a793276b139b28ad83aaabfc66dd83196c8b82ad9feff23e22edd6f7345aafb07dd2394f8e5cf8397a805be0cffced91834b77d578c2bb4a8d16ebce96c3ade26fb5551e48a3f859c63a8b5ec7fdfd69edb7171aee3ef70607bde136dd617261dabc739b7b0fc1aa844839d79b86654f409839bbaa8816f5dfed9bd9b6c355e1b8e8f2b6e8a088623a722c3c5e430464edf9ec5a3275747e5b873a1e2bd4ce3957d83ffdaeae058ab9f4b459b1e087554d5ea12c35fa3b76181a7693ae19a8f9c94cfe4a3d73eab051d74f15c96541ccb7ed99659216de37d9011250889080ac10073906456983f95a07c266f05625c9c519dc0feae5763055f74f35f84fbd341b1dc52f2c15276b869bdf86f4b27e81f94a936db73edc4b07639ef2e15f9dfd5416519923227916c9c1049031c1dde29167aed6c8d735be0f24464152636eff387edb1d54ad62dd47241fd279c4ddce029e8e26d017cdcc8e31bacdab6550ee74ff3561ba8d69aeb22d0cae29995effaf1049aa0136f22e898165689b0602463c1e29ed055389064fd5fa1445ca2c039019a987b8fed5872b1eb5c27c0374b890b013a2828e45fc47901809fa148cb1cf643adaa8dc084c94a5d2fdc6255845311a1e388c412d6b883280ac72764c702d59ab0e83420f2b835ed5808bdc602953fe6beb1e1afdece13e8e96c004a328c774d8dd83b9bb085747dd6762af6f3766066cfcf6b370b524e73c55f970b70aa7f067d1794999428a353793e6be1771c33a045065dcbb7e20d7ca9be114ecef1f162eab10df28148adfb426a1e88bae08f577a16c29f037c840acec9af3cfae36c1efb8db7530c891bae9a754ed0785612909a2c1f8c451773a2e20aa2e7ebc79f7acd451accc8b9b88254109d949dcd1e85fd806f96f6caee462346589978592b3f3a2afc19d171c3ba491d8f3ad9bb9e638f22bb1579cc1b77c7dbf796c6170a7ca02e07a944dba29c7f66a6d75676e43ffb5ea6a868c94cd7d6e842b7599de6bd5c9c1a2370c58230c3770c85705591f0f94af0ba4499db09b34c390404d2240589e61939959731c5cb96b8e3dfb010671868c884474fc0ba08e47ea05bc960832a2f6322988cf9a7aea6fa1698057a53aa44563f9eb1ada4b00f8278acf5e5ca097674313957f3228522b61c1fcf6591c731494d8831b4d46a57cc7b250c7e4046186e359462f1776a53c5728eacbfbf01bcd03e1b6647141de59d36f00cff497c0e19d44cbb5162c1080482cd3d2cb90cff7cbc3954d9f195603e6bbdb4380be28b03cb87f91f426b497d389cf046dd1484f129fe43b3b0d1d56b6c1af3a480d0809f97ee6cd7b8527e20f68e161a609858f4928477bc6d7f18fc96c2477b7ee01ebdc98100ef93619748672b1b70758db1c4aa987e2533852019ccce81e03a7c8928492d067537218373748d0fd36e2db2ca68fe0ea8c2556cef7400d603be0196394d4d81acf0967b49f2f37d7b540bee4249eb2bb4f47ed61bb1296d902b3bde6548f7d49f05ad6dc5950decdca47beb2652ff5d30dc9e857cf8a8871ce369f2dd09c2fcaf9b4a855ecff195634e0fb14f7987d2e6b6c6f15f362d0da33cc696567456cec9b04289c7144323bd445fc9d9c1b64a37fb10e246d374be90177a1ae1fdf4d7501c6ba3f8e94c3d1ba212a51a17480bf3de1c1a86781bf91f426adbe80da309f25e3620b5d3b23d943eace01cd4af520fc9c305661cce1d80d7a5b315cd4c3cfa007e0cad9a53e0cd690f5fa5b4946f4702e9ba30c0c0465abaa079db961c6c287e41145af3885cf56f5d279ea205488e3d03192a499b878c838c255c1f4490ab28290c4435eae505ff1cb83ea2169a5983d8d9329390da2ad7e01611b31f6d5c886b7b6b9c16bb6e99762c98b9d2c2de5241e661da6731e2669a9514bbfa3112fc7347795cb8c8ee255c2287145993b6a87fb925aa9962188d6d72e3e7f6718a956dc117f73b97514d712cd5f526046379bfd502740a38edc6bad3fb1319b97ccd2dd70e66a2da406758b3587a2fb9abba74382f2de5ca8d51ba80daae7a39736e31d18d0514dbb8110f3b0a0373ea2e1033c357a5e0b177004cb6c4599000c4d0c1c7882349fad69dd7226f4f22263e8f70ac786b4e9bfcafe4031b2dada3b1b25c66e2ddc107236f4fa193c9e9d01d0a53bc7075f72cddc5ffecbf8d0eecf0d0bb341fa86fa5f824dc80b7d086f10e1a312593067d6663f60dda71cfa2f62dcb2b11305dbf015fb889b4b0ba2134a0e1a885482a1df6e5db129e75c5c0580a0fe5c55afeea4a900029550e12ca9303686952bb8", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup3(r2, r3, 0x0) unshare(0x44000680) 1.55845734s ago: executing program 3 (id=3518): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3, 0xfff, 0x7}, 0x48) bpf$ENABLE_STATS(0xd, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xen_mmu_flush_tlb_multi\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="34466d37e615fccde425797629dd0122be1c431f06f180a96195a3850bc049fc3691f3bc916393a603c6ad45e6a3008cd21d0c578d727dfe733d6d042a42ba66a8a0381b7c9f667b4e280000bafa7d184a911435b29b43f5f5ef5e32491ea03ae889f90ac946690c33a96d7c53982733824fa1ba192cdc23d7f9b79c8f45b729a476d80decf4feb4264370ea0192373a0c6f5f2a74abd7361903e0170f163ab59a1549112c5754467b627665099c3381e2fad893d0817ef14fec36cc46e860100f5572e32d6cc2b5ef38830eb0f0"], 0xc0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 870.861896ms ago: executing program 4 (id=3519): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x580, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x4e4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x45c, 0x6, [@m_tunnel_key={0x140, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xf1, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795ec248a49"}, {0xc}, {0xc}}}, @m_ife={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc}}}, @m_nat={0x124, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0xa9, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd34278777199f7793bcc30f7c7b74cd6eded8934fa327e1541339075fdc86a745c472c9477faee71092d6a0a50cd377c521c047f0c8b2f4314876961ef4214903d7cb9ade598b7023384c5c8f726e342e8454b6a925d"}, {0xc}, {0xc}}}, @m_bpf={0x84, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{}, {}, {}]}]}, {0x3d, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b2cee0c35637b64dc5c63c60e180d0c44ef1e097dda82cf07"}, {0xc}, {0xc}}}, @m_ctinfo={0x6c, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x25, 0x6, "41be356e964e7745f9a57571dce1c50c2bf05086e12ebfd3f163219617fcdd9adc"}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x580}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 823.040198ms ago: executing program 1 (id=3520): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 801.775289ms ago: executing program 4 (id=3521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_page_alloc\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0xfdef) 654.744975ms ago: executing program 4 (id=3522): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x375, &(0x7f0000000880)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet6(0xa, 0x80000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000002000000000000000080008500000041000000850000002a0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0xfd14) fallocate(0xffffffffffffffff, 0x100000003, 0x2e00, 0x2811fffd) 654.273475ms ago: executing program 1 (id=3523): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r1 = getpgid(0x0) tgkill(r1, r1, 0x0) 535.394019ms ago: executing program 3 (id=3524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000c6000000000000009500007b02000000850000005e0000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x88, &(0x7f0000000240)=""/136}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071102b00000000009500000700000000242222d5572cc323253048146bc8dffd0b26162a64521748b10f1b35e67645329fe74dbbdbfe5f749414a9a3ca51a39a7011e44f740914"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 523.20676ms ago: executing program 1 (id=3525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) utime(0x0, &(0x7f0000000180)) 441.799033ms ago: executing program 2 (id=3526): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000beff7db30000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe1c42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0xfdef) 411.350984ms ago: executing program 3 (id=3527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 350.773336ms ago: executing program 1 (id=3528): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x7, 0x5}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x0, 0x4, 0x5}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c00)='&', 0x1}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x34, 0x3a, 0x0, @local, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "c12c00", 0x0, 0x2b, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, [], "c76bd8be"}}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dc) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 113.739665ms ago: executing program 4 (id=3529): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) 0s ago: executing program 2 (id=3530): r0 = socket(0x2, 0x3, 0x6) syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f000000ac00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) chroot(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="a800000000000000", @ANYRES64=r3, @ANYBLOB="05"], 0xa8) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): (NETDEV_CHANGE): veth0: link becomes ready [ 232.324485][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.332250][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.348301][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.605370][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.612348][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.620580][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.628908][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.635771][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.643424][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.651334][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.668617][ T2507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.677238][ T2507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.691164][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.699615][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.707597][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.715308][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.727139][ T7108] device veth0_vlan entered promiscuous mode [ 232.739290][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.747256][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.756611][ T7108] device veth1_macvtap entered promiscuous mode [ 232.765832][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.773309][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.781667][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.791728][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.799878][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.667603][ T7156] loop3: detected capacity change from 0 to 40427 [ 233.749807][ T7156] F2FS-fs (loop3): invalid crc value [ 233.756284][ T7156] F2FS-fs (loop3): Found nat_bits in checkpoint [ 233.776696][ T7162] loop4: detected capacity change from 0 to 128 [ 233.785710][ T7156] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 233.831563][ T6208] attempt to access beyond end of device [ 233.831563][ T6208] loop3: rw=2049, want=45104, limit=40427 [ 234.916517][ T7187] loop3: detected capacity change from 0 to 1024 [ 234.962883][ T7188] loop4: detected capacity change from 0 to 512 [ 234.979187][ T7187] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 235.030604][ T7188] EXT4-fs (loop4): Test dummy encryption mode enabled [ 235.038861][ T7188] EXT4-fs error (device loop4): __ext4_iget:4892: inode #11: block 1: comm syz.4.2559: invalid block [ 235.049812][ T7188] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2559: couldn't read orphan inode 11 (err -117) [ 235.062245][ T7188] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 235.098213][ T1234] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 235.458232][ T1234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.469572][ T1234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.479364][ T1234] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 235.496082][ T1234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.518569][ T1234] usb 3-1: config 0 descriptor?? [ 236.120611][ T1234] hid-multitouch 0003:0EEF:72D0.002F: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0 [ 236.158765][ T7219] loop4: detected capacity change from 0 to 128 [ 236.254401][ T7221] loop3: detected capacity change from 0 to 512 [ 236.327143][ T2507] usb 3-1: USB disconnect, device number 25 [ 236.799916][ T7221] EXT4-fs (loop3): 1 truncate cleaned up [ 236.805524][ T7221] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.466711][ T7239] loop3: detected capacity change from 0 to 2048 [ 237.506332][ T7239] GPT:first_usable_lbas don't match. [ 237.511984][ T7239] GPT:34 != 290 [ 237.515969][ T7239] GPT: Use GNU Parted to correct GPT errors. [ 237.523614][ T7239] loop3: p1 p2 p3 [ 237.560766][ T7240] overlayfs: failed to resolve './file0': -2 [ 237.877017][ T30] audit: type=1400 audit(1719842432.858:1005): avc: denied { mounton } for pid=7247 comm="syz.1.2581" path="/root/syzkaller.Sp8lnx/32/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.902624][ T30] audit: type=1400 audit(1719842432.858:1006): avc: denied { getopt } for pid=7247 comm="syz.1.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 237.968167][ T1234] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 238.125148][ T7265] loop3: detected capacity change from 0 to 256 [ 238.219588][ T7265] FAT-fs (loop3): Directory bread(block 64) failed [ 238.226104][ T7265] FAT-fs (loop3): Directory bread(block 65) failed [ 238.232796][ T7265] FAT-fs (loop3): Directory bread(block 66) failed [ 238.238169][ T1234] usb 5-1: Using ep0 maxpacket: 16 [ 238.239528][ T7265] FAT-fs (loop3): Directory bread(block 67) failed [ 238.250833][ T7265] FAT-fs (loop3): Directory bread(block 68) failed [ 238.257313][ T7265] FAT-fs (loop3): Directory bread(block 69) failed [ 238.264099][ T7265] FAT-fs (loop3): Directory bread(block 70) failed [ 238.271638][ T7265] FAT-fs (loop3): Directory bread(block 71) failed [ 238.279397][ T7265] FAT-fs (loop3): Directory bread(block 72) failed [ 238.286011][ T7265] FAT-fs (loop3): Directory bread(block 73) failed [ 238.568737][ T1234] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.579702][ T1234] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.589668][ T1234] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 238.599879][ T1234] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 238.708335][ T1234] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.717256][ T1234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 238.738149][ T1234] usb 5-1: SerialNumber: syz [ 238.788618][ T1234] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 238.797170][ T1234] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 238.908247][ T7277] overlayfs: failed to resolve './file0': -2 [ 239.003936][ T923] usb 5-1: USB disconnect, device number 28 [ 239.408510][ T2507] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 239.958282][ T2507] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.133931][ T7322] loop2: detected capacity change from 0 to 512 [ 240.148275][ T2507] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.157249][ T2507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.165585][ T2507] usb 2-1: Product: syz [ 240.169760][ T2507] usb 2-1: Manufacturer: syz [ 240.174225][ T2507] usb 2-1: SerialNumber: syz [ 240.231890][ T30] audit: type=1326 audit(1719842691.206:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74303e2b99 code=0x7ffc0000 [ 240.268442][ T7322] EXT4-fs (loop2): Ignoring removed oldalloc option [ 240.449168][ T30] audit: type=1326 audit(1719842691.216:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74303e2b99 code=0x7ffc0000 [ 240.453304][ T7322] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 240.473759][ T30] audit: type=1326 audit(1719842691.216:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f74303e2b99 code=0x7ffc0000 [ 240.497033][ T7322] EXT4-fs (loop2): 1 truncate cleaned up [ 240.505675][ T30] audit: type=1326 audit(1719842691.296:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74303e2b99 code=0x7ffc0000 [ 240.512130][ T7322] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 240.534567][ T30] audit: type=1326 audit(1719842691.296:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74303e2b99 code=0x7ffc0000 [ 240.579702][ T30] audit: type=1326 audit(1719842691.296:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74303e2b99 code=0x7ffc0000 [ 240.603504][ T30] audit: type=1326 audit(1719842691.296:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74303e2b99 code=0x7ffc0000 [ 240.627538][ T30] audit: type=1326 audit(1719842691.296:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74303e2b99 code=0x7ffc0000 [ 241.197910][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.205160][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.212662][ T7346] device bridge_slave_0 entered promiscuous mode [ 241.221531][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.228690][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.236215][ T7346] device bridge_slave_1 entered promiscuous mode [ 241.265371][ T7352] loop2: detected capacity change from 0 to 256 [ 241.297182][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.304059][ T7346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.311431][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.318371][ T7346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.346172][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.355081][ T922] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.358223][ T2507] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 241.368881][ T2507] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 241.376564][ T2507] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 241.390004][ T922] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.407286][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.415677][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.422566][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.430303][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.438621][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.445522][ T922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.453522][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.456206][ T7354] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 241.493064][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.507395][ T7346] device veth0_vlan entered promiscuous mode [ 241.514207][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.523077][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.758179][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.765733][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.787968][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.797512][ T7346] device veth1_macvtap entered promiscuous mode [ 241.798198][ T2507] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 241.808890][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.820324][ T2507] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 241.840091][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.850940][ T2507] usb 2-1: USB disconnect, device number 23 [ 241.857464][ T2507] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 241.929215][ T8] device bridge_slave_1 left promiscuous mode [ 241.935225][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.943410][ T8] device bridge_slave_0 left promiscuous mode [ 241.949528][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.957823][ T8] device veth1_macvtap left promiscuous mode [ 241.964043][ T8] device veth0_vlan left promiscuous mode [ 242.319443][ T7402] loop3: detected capacity change from 0 to 256 [ 242.586338][ T7416] device bridge_slave_1 left promiscuous mode [ 242.618265][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.636833][ T7416] device bridge_slave_0 left promiscuous mode [ 242.647103][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.735698][ T7421] loop4: detected capacity change from 0 to 128 [ 243.341261][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 243.341277][ T30] audit: type=1400 audit(1719842950.321:1019): avc: denied { setopt } for pid=7440 comm="syz.1.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.415745][ T7442] Invalid ELF header magic: != ELF [ 243.420973][ T30] audit: type=1326 audit(1719842950.391:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.2.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 243.447926][ T30] audit: type=1326 audit(1719842950.391:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.2.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 243.476848][ T30] audit: type=1326 audit(1719842950.391:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.2.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 243.638243][ T1234] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 243.699712][ T7453] loop2: detected capacity change from 0 to 512 [ 243.783295][ T7453] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 243.783295][ T7453] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 243.783295][ T7453] [ 243.830761][ T7453] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.2646: corrupted inode contents [ 243.844928][ T7453] EXT4-fs (loop2): Remounting filesystem read-only [ 243.851861][ T7453] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #3: comm syz.2.2646: mark_inode_dirty error [ 243.863651][ T7453] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #3: comm syz.2.2646: corrupted inode contents [ 243.875787][ T7453] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.2646: mark_inode_dirty error [ 243.887779][ T7453] Quota error (device loop2): write_blk: dquota write failed [ 243.895520][ T7453] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 243.905790][ T7453] EXT4-fs (loop2): 1 truncate cleaned up [ 243.911745][ T7453] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback. [ 243.925782][ T7453] ext4 filesystem being mounted at /root/syzkaller.5v4L0D/21/file1 supports timestamps until 2038 (0x7fffffff) [ 244.018257][ T1234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.408262][ T1234] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.417721][ T1234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.425611][ T1234] usb 4-1: Product: syz [ 244.429664][ T1234] usb 4-1: Manufacturer: syz [ 244.434246][ T1234] usb 4-1: SerialNumber: syz [ 244.769866][ T7480] loop4: detected capacity change from 0 to 40427 [ 244.855228][ T7480] F2FS-fs (loop4): invalid crc value [ 244.861844][ T7480] F2FS-fs (loop4): Found nat_bits in checkpoint [ 244.888662][ T7480] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 245.110090][ T7346] attempt to access beyond end of device [ 245.110090][ T7346] loop4: rw=2049, want=45104, limit=40427 [ 245.434418][ T30] audit: type=1326 audit(1719843208.410:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.2.2667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x0 [ 245.548302][ T1234] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 245.554553][ T1234] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 245.562143][ T1234] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 245.646193][ T7519] device bridge_slave_1 left promiscuous mode [ 245.652468][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.660055][ T7519] device bridge_slave_0 left promiscuous mode [ 245.666490][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.758964][ T1234] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 245.765628][ T1234] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 245.778765][ T1234] usb 4-1: USB disconnect, device number 17 [ 245.789136][ T1234] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 248.432788][ T30] audit: type=1326 audit(1719843211.410:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7601 comm="syz.0.2703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07f753cb99 code=0x0 [ 248.703973][ T7595] loop4: detected capacity change from 0 to 40427 [ 248.781356][ T7595] F2FS-fs (loop4): invalid crc value [ 248.794540][ T7595] F2FS-fs (loop4): Found nat_bits in checkpoint [ 248.872556][ T7595] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 248.935118][ T7346] attempt to access beyond end of device [ 248.935118][ T7346] loop4: rw=2049, want=45104, limit=40427 [ 251.582395][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2729'. [ 252.095156][ T7686] Invalid ELF header magic: != ELF [ 252.218188][ T30] audit: type=1400 audit(1719843215.170:1025): avc: denied { execute } for pid=7689 comm="syz.4.2737" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 252.330060][ T7695] syz.1.2739[7695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.330142][ T7695] syz.1.2739[7695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.469393][ T30] audit: type=1326 audit(1719843215.450:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.4.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4533c04b99 code=0x7ffc0000 [ 252.504064][ T30] audit: type=1326 audit(1719843215.450:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.4.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4533c04b99 code=0x7ffc0000 [ 252.527913][ T30] audit: type=1326 audit(1719843215.450:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.4.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f4533c04b99 code=0x7ffc0000 [ 252.551650][ T30] audit: type=1326 audit(1719843215.450:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.4.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4533c04b99 code=0x7ffc0000 [ 252.575383][ T30] audit: type=1326 audit(1719843215.450:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.4.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4533c04b99 code=0x7ffc0000 [ 252.672901][ T7707] loop3: detected capacity change from 0 to 1024 [ 252.958629][ T7707] EXT4-fs (loop3): Ignoring removed orlov option [ 252.965072][ T7707] EXT4-fs (loop3): Ignoring removed nobh option [ 252.971607][ T7707] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (28) [ 253.025722][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'. [ 253.186281][ T30] audit: type=1400 audit(1719843216.160:1031): avc: denied { read } for pid=7716 comm="syz.0.2750" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 253.208706][ T30] audit: type=1400 audit(1719843216.160:1032): avc: denied { open } for pid=7716 comm="syz.0.2750" path="/root/syzkaller.B95hLK/68/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 253.493356][ T7738] loop3: detected capacity change from 0 to 16 [ 253.550940][ T7738] erofs: (device loop3): mounted with root inode @ nid 36. [ 253.631323][ T7746] loop4: detected capacity change from 0 to 256 [ 253.895466][ T7746] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 253.934799][ T30] audit: type=1326 audit(1719843216.910:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 253.959166][ T30] audit: type=1326 audit(1719843216.910:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 253.983306][ T30] audit: type=1326 audit(1719843216.940:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 254.007471][ T30] audit: type=1326 audit(1719843216.940:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 254.031799][ T30] audit: type=1326 audit(1719843216.940:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 254.155405][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2764'. [ 254.271041][ T7761] loop2: detected capacity change from 0 to 128 [ 255.318209][ T7798] loop2: detected capacity change from 0 to 1024 [ 255.328429][ T7797] device syzkaller0 entered promiscuous mode [ 255.373178][ T7798] EXT4-fs (loop2): Ignoring removed orlov option [ 255.379606][ T7798] EXT4-fs (loop2): Ignoring removed nobh option [ 255.386318][ T7798] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (28) [ 255.664743][ T39] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 255.689675][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'. [ 255.869847][ T7815] loop2: detected capacity change from 0 to 256 [ 255.908209][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 255.941270][ T7815] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 256.028408][ T39] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 256.039518][ T39] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 256.050217][ T39] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 256.098734][ T39] usb 4-1: language id specifier not provided by device, defaulting to English [ 256.147923][ T7822] loop2: detected capacity change from 0 to 512 [ 256.200638][ T7822] EXT4-fs (loop2): 1 orphan inode deleted [ 256.206211][ T7822] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 256.227021][ T39] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2881, bcdDevice=90.4a [ 256.227223][ T7822] ext4 filesystem being mounted at /root/syzkaller.5v4L0D/57/file1 supports timestamps until 2038 (0x7fffffff) [ 256.236975][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.255762][ T39] usb 4-1: Product: syz [ 256.260710][ T39] usb 4-1: SerialNumber: syz [ 256.266375][ T39] usb 4-1: config 0 descriptor?? [ 256.453518][ T7835] syz.2.2790[7835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.453818][ T7835] syz.2.2790[7835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.615860][ T922] usb 4-1: USB disconnect, device number 18 [ 257.098151][ T39] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 257.458276][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 257.477206][ T39] usb 2-1: config 1 has no interface number 0 [ 257.484037][ T39] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.496164][ T39] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 257.668268][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.677349][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.685472][ T39] usb 2-1: Product: syz [ 257.689595][ T39] usb 2-1: Manufacturer: syz [ 257.694497][ T39] usb 2-1: SerialNumber: syz [ 257.777408][ T7880] loop3: detected capacity change from 0 to 256 [ 257.821428][ T7880] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 258.040041][ T7892] loop4: detected capacity change from 0 to 128 [ 258.458243][ T922] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 258.718139][ T922] usb 4-1: Using ep0 maxpacket: 8 [ 258.738653][ T39] cdc_ncm 2-1:1.1: bind() failure [ 258.858276][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.885796][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.895954][ T922] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 258.904845][ T922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.913188][ T922] usb 4-1: config 0 descriptor?? [ 258.940338][ T297] usb 2-1: USB disconnect, device number 24 [ 259.207338][ T7908] loop2: detected capacity change from 0 to 16 [ 259.286639][ T7909] input: syz0 as /devices/virtual/input/input68 [ 259.295905][ T7908] erofs: (device loop2): mounted with root inode @ nid 36. [ 259.653491][ T922] wacom 0003:056A:0003.0030: collection stack underflow [ 259.662796][ T922] wacom 0003:056A:0003.0030: item 0 1 0 12 parsing failed [ 259.670003][ T922] wacom 0003:056A:0003.0030: parse failed [ 259.675580][ T922] wacom: probe of 0003:056A:0003.0030 failed with error -22 [ 259.841470][ T922] usb 4-1: USB disconnect, device number 19 [ 260.408193][ T922] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 260.658195][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.665158][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.672538][ T7948] device bridge_slave_0 entered promiscuous mode [ 260.688020][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.695666][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.703108][ T7948] device bridge_slave_1 entered promiscuous mode [ 260.751330][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.758301][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.765459][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.768316][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.772269][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.783698][ T922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.806102][ T922] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 260.815912][ T922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.828924][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.833413][ T922] usb 1-1: config 0 descriptor?? [ 260.840900][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.848211][ T1234] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 260.856075][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.880398][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.890192][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.897908][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.905595][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.913613][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.921700][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.928553][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.935796][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.944053][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.950946][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.958212][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.966061][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.976332][ T7948] device veth0_vlan entered promiscuous mode [ 260.995111][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.004776][ T7948] device veth1_macvtap entered promiscuous mode [ 261.016987][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.029281][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.098153][ T1234] usb 5-1: Using ep0 maxpacket: 32 [ 261.128924][ T8] device bridge_slave_1 left promiscuous mode [ 261.135330][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.143851][ T8] device bridge_slave_0 left promiscuous mode [ 261.150048][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.157967][ T8] device veth1_macvtap left promiscuous mode [ 261.164186][ T8] device veth0_vlan left promiscuous mode [ 261.218323][ T1234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.229198][ T1234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.238997][ T1234] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 261.247946][ T1234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.258608][ T1234] usb 5-1: config 0 descriptor?? [ 261.301657][ T7966] device syzkaller0 entered promiscuous mode [ 261.302161][ T1234] hub 5-1:0.0: USB hub found [ 261.597011][ T922] hid (null): bogus close delimiter [ 261.640617][ T922] usb 1-1: language id specifier not provided by device, defaulting to English [ 261.653553][ T1234] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 261.938236][ T1234] usbhid 5-1:0.0: can't add hid device: -71 [ 261.944059][ T1234] usbhid: probe of 5-1:0.0 failed with error -71 [ 261.978792][ T1234] usb 5-1: USB disconnect, device number 29 [ 262.059289][ T7934] syz.0.2834[7934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.059346][ T7934] syz.0.2834[7934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.079528][ T922] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0031/input/input69 [ 262.103935][ T922] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0031/input/input70 [ 262.117129][ T922] uclogic 0003:256C:006D.0031: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 262.319537][ T1234] usb 1-1: USB disconnect, device number 28 [ 262.342097][ T7998] device syzkaller0 entered promiscuous mode [ 262.504194][ T8004] loop4: detected capacity change from 0 to 128 [ 262.775367][ T8015] syz.4.2863[8015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.775791][ T8015] syz.4.2863[8015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.897527][ T8018] syz.2.2868[8018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.908900][ T8018] syz.2.2868[8018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.928837][ T30] audit: type=1400 audit(1719843225.910:1038): avc: denied { ioctl } for pid=8017 comm="syz.3.2869" path="socket:[53656]" dev="sockfs" ino=53656 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.065035][ T8027] loop3: detected capacity change from 0 to 512 [ 263.149557][ T8027] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 263.157151][ T8027] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 263.168819][ T8027] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.2872: corrupted in-inode xattr [ 263.181170][ T8027] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2872: couldn't read orphan inode 15 (err -117) [ 263.193946][ T8027] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,mblk_io_submit,lazytime,nogrpid,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 263.388180][ T297] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 263.628475][ T297] usb 3-1: Using ep0 maxpacket: 32 [ 263.798495][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.809777][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.828159][ T297] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 263.837110][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.846195][ T297] usb 3-1: config 0 descriptor?? [ 263.893286][ T297] hub 3-1:0.0: USB hub found [ 264.106206][ T8065] loop4: detected capacity change from 0 to 512 [ 264.112639][ T297] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 264.161101][ T8065] EXT4-fs (loop4): 1 orphan inode deleted [ 264.166771][ T8065] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 264.177795][ T8065] ext4 filesystem being mounted at /root/syzkaller.wR9fWK/61/file1 supports timestamps until 2038 (0x7fffffff) [ 264.398216][ T297] usbhid 3-1:0.0: can't add hid device: -71 [ 264.404156][ T297] usbhid: probe of 3-1:0.0 failed with error -71 [ 264.408864][ T8078] loop3: detected capacity change from 0 to 512 [ 264.416735][ T8075] device veth0_vlan left promiscuous mode [ 264.422951][ T8075] device veth0_vlan entered promiscuous mode [ 264.438586][ T297] usb 3-1: USB disconnect, device number 26 [ 264.510574][ T8078] EXT4-fs (loop3): 1 orphan inode deleted [ 264.516301][ T8078] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 264.537568][ T8078] ext4 filesystem being mounted at /root/syzkaller.TVck7A/11/file1 supports timestamps until 2038 (0x7fffffff) [ 264.731829][ T8089] syz.3.2892[8089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.732167][ T8089] syz.3.2892[8089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.458193][ T2507] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 265.495175][ T30] audit: type=1326 audit(1719843228.470:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 265.518887][ T30] audit: type=1326 audit(1719843228.470:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 265.542547][ T30] audit: type=1326 audit(1719843228.470:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 265.566819][ T30] audit: type=1326 audit(1719843228.500:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 265.590648][ T30] audit: type=1326 audit(1719843228.500:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 265.614541][ T30] audit: type=1326 audit(1719843228.500:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 265.638332][ T30] audit: type=1326 audit(1719843228.550:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 265.661738][ T30] audit: type=1326 audit(1719843228.550:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 265.685078][ T30] audit: type=1326 audit(1719843228.550:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fd9bf78db99 code=0x7ffc0000 [ 265.738163][ T2507] usb 2-1: Using ep0 maxpacket: 32 [ 265.901224][ T2507] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.939280][ T8113] device veth0_vlan left promiscuous mode [ 265.945393][ T8113] device veth0_vlan entered promiscuous mode [ 265.988262][ T2507] usb 2-1: config 128 has an invalid interface number: 248 but max is 1 [ 266.000690][ T2507] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 266.011202][ T2507] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 2 [ 266.020402][ T2507] usb 2-1: config 128 has no interface number 0 [ 266.026503][ T2507] usb 2-1: config 128 interface 248 altsetting 36 bulk endpoint 0x8 has invalid maxpacket 64 [ 266.036705][ T2507] usb 2-1: config 128 interface 248 altsetting 36 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 266.047639][ T2507] usb 2-1: config 128 interface 248 altsetting 36 has an invalid endpoint with address 0x0, skipping [ 266.058373][ T2507] usb 2-1: config 128 interface 248 altsetting 36 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.068350][ T2507] usb 2-1: config 128 interface 248 altsetting 36 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 266.081965][ T2507] usb 2-1: config 128 interface 248 has no altsetting 0 [ 266.134849][ T8110] overlayfs: failed to resolve './file0': -2 [ 266.248312][ T2507] usb 2-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=87.ad [ 266.257260][ T2507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.265381][ T2507] usb 2-1: Product: syz [ 266.269861][ T2507] usb 2-1: Manufacturer: syz [ 266.274370][ T2507] usb 2-1: SerialNumber: syz [ 266.298238][ T8104] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 266.599401][ T2507] usb 2-1: USB disconnect, device number 25 [ 267.026186][ T8147] loop2: detected capacity change from 0 to 2048 [ 267.110450][ T8147] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.121394][ T8147] ext4 filesystem being mounted at /root/syzkaller.5v4L0D/91/file0 supports timestamps until 2038 (0x7fffffff) [ 267.179379][ T8147] fs-verity: sha512 using implementation "sha512-avx2" [ 267.868225][ T1235] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 267.871179][ T8179] loop3: detected capacity change from 0 to 256 [ 267.962261][ T8179] incfs: Can't find or create .incomplete dir in ./file0 [ 267.969436][ T8179] incfs: mount failed -28 [ 267.975150][ T8179] incfs: Can't find or create .incomplete dir in ./file0 [ 267.982795][ T8179] incfs: mount failed -28 [ 268.070870][ T8184] device pim6reg1 entered promiscuous mode [ 268.138254][ T922] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 268.278295][ T1235] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 268.287886][ T1235] usb 3-1: config 1 has no interface number 0 [ 268.294276][ T1235] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.305425][ T1235] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 268.398288][ T922] usb 5-1: Using ep0 maxpacket: 32 [ 268.407812][ T8195] device syzkaller0 entered promiscuous mode [ 268.478355][ T1235] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.488499][ T1235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.496319][ T1235] usb 3-1: Product: syz [ 268.500792][ T1235] usb 3-1: Manufacturer: syz [ 268.505210][ T1235] usb 3-1: SerialNumber: syz [ 268.568308][ T922] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.668229][ T922] usb 5-1: config 128 has an invalid interface number: 248 but max is 1 [ 268.676667][ T922] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 268.686753][ T922] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 2 [ 268.695907][ T922] usb 5-1: config 128 has no interface number 0 [ 268.702518][ T922] usb 5-1: config 128 interface 248 altsetting 36 bulk endpoint 0x8 has invalid maxpacket 64 [ 268.712796][ T922] usb 5-1: config 128 interface 248 altsetting 36 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 268.723862][ T922] usb 5-1: config 128 interface 248 altsetting 36 has an invalid endpoint with address 0x0, skipping [ 268.734692][ T922] usb 5-1: config 128 interface 248 altsetting 36 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.744783][ T922] usb 5-1: config 128 interface 248 altsetting 36 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 268.759423][ T922] usb 5-1: config 128 interface 248 has no altsetting 0 [ 268.834486][ T8211] loop3: detected capacity change from 0 to 1024 [ 268.890001][ T8211] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2944: bad orphan inode 2097152 [ 268.900757][ T8211] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.921659][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2944'. [ 268.958350][ T922] usb 5-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=87.ad [ 268.967283][ T922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.975939][ T922] usb 5-1: Product: syz [ 268.980606][ T922] usb 5-1: Manufacturer: syz [ 268.985025][ T922] usb 5-1: SerialNumber: syz [ 269.008296][ T8178] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 269.160128][ T8221] device pim6reg1 entered promiscuous mode [ 269.329748][ T8224] syz.1.2948[8224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.330109][ T8224] syz.1.2948[8224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.483269][ T1235] cdc_ncm 3-1:1.1: bind() failure [ 269.500800][ T922] usb 5-1: USB disconnect, device number 30 [ 269.671561][ T1235] usb 3-1: USB disconnect, device number 27 [ 269.696389][ T8230] device syzkaller0 entered promiscuous mode [ 269.852590][ T8232] loop3: detected capacity change from 0 to 40427 [ 269.928743][ T8232] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 269.937796][ T8232] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 269.947016][ T8232] F2FS-fs (loop3): invalid crc value [ 269.953992][ T8232] F2FS-fs (loop3): Found nat_bits in checkpoint [ 269.979163][ T8232] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 269.990545][ T8232] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 270.029482][ T8232] overlayfs: invalid redirect ((null)) [ 270.051820][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 270.061889][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 270.213914][ T8248] loop4: detected capacity change from 0 to 256 [ 270.259639][ T8248] incfs: Can't find or create .incomplete dir in ./file0 [ 270.267896][ T8248] incfs: mount failed -28 [ 270.281645][ T8252] loop3: detected capacity change from 0 to 1024 [ 270.288418][ T8248] incfs: Can't find or create .incomplete dir in ./file0 [ 270.300052][ T8248] incfs: mount failed -28 [ 270.339369][ T8252] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2957: bad orphan inode 2097152 [ 270.350105][ T8252] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.376907][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2957'. [ 270.508525][ T8265] device syzkaller0 entered promiscuous mode [ 270.857987][ T8294] loop3: detected capacity change from 0 to 512 [ 270.918823][ T8294] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 270.927724][ T8294] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 270.937497][ T8294] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2974: bg 0: block 18: invalid block bitmap [ 270.950139][ T8294] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 270.958908][ T8294] EXT4-fs (loop3): 1 truncate cleaned up [ 270.964377][ T8294] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.975188][ T8294] ext2 filesystem being mounted at /root/syzkaller.TVck7A/31/file0 supports timestamps until 2038 (0x7fffffff) [ 270.990904][ T8294] EXT4-fs error (device loop3): ext4_map_blocks:602: inode #2: block 3: comm syz.3.2974: lblock 0 mapped to illegal pblock 3 (length 1) [ 271.038564][ T307] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 271.112989][ T8303] device syzkaller0 entered promiscuous mode [ 271.246745][ T8310] device pim6reg1 entered promiscuous mode [ 271.398278][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.409013][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.418959][ T307] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 271.427880][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.436584][ T307] usb 2-1: config 0 descriptor?? [ 271.769907][ T8332] loop2: detected capacity change from 0 to 512 [ 271.838366][ T2507] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 271.868758][ T8332] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 271.877655][ T8332] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 271.887306][ T8332] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2991: bg 0: block 18: invalid block bitmap [ 271.899872][ T8332] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 271.908725][ T8332] EXT4-fs (loop2): 1 truncate cleaned up [ 271.914262][ T8332] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.924825][ T8332] ext2 filesystem being mounted at /root/syzkaller.5v4L0D/102/file0 supports timestamps until 2038 (0x7fffffff) [ 271.943081][ T8332] EXT4-fs error (device loop2): ext4_map_blocks:602: inode #2: block 3: comm syz.2.2991: lblock 0 mapped to illegal pblock 3 (length 1) [ 272.000128][ T8339] device syzkaller0 entered promiscuous mode [ 272.149423][ T8345] 9pnet: p9_errstr2errno: server reported unknown error el/debug/binder/failed_transaction_log [ 272.159714][ T307] usb 2-1: string descriptor 0 read error: -71 [ 272.180183][ T307] uclogic 0003:256C:006D.0032: failed retrieving string descriptor #200: -71 [ 272.189275][ T307] uclogic 0003:256C:006D.0032: failed retrieving pen parameters: -71 [ 272.197330][ T307] uclogic 0003:256C:006D.0032: failed probing pen v2 parameters: -71 [ 272.205336][ T2507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.216230][ T307] uclogic 0003:256C:006D.0032: failed probing parameters: -71 [ 272.223674][ T2507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.233359][ T307] uclogic: probe of 0003:256C:006D.0032 failed with error -71 [ 272.240804][ T2507] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 272.250675][ T307] usb 2-1: USB disconnect, device number 26 [ 272.257420][ T2507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.266987][ T2507] usb 1-1: config 0 descriptor?? [ 272.344492][ T8349] device pim6reg1 entered promiscuous mode [ 272.559948][ T8357] loop3: detected capacity change from 0 to 16 [ 272.612788][ T8357] erofs: (device loop3): mounted with root inode @ nid 36. [ 273.292303][ T8385] loop2: detected capacity change from 0 to 1024 [ 273.369933][ T8385] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3014: bad orphan inode 2097152 [ 273.380565][ T8385] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.414370][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3014'. [ 273.458208][ T2507] uclogic 0003:256C:006D.0033: interface is invalid, ignoring [ 273.561273][ T8397] loop2: detected capacity change from 0 to 512 [ 273.628246][ T39] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 273.662934][ T2507] usb 1-1: USB disconnect, device number 29 [ 273.680488][ T8397] EXT4-fs (loop2): 1 orphan inode deleted [ 273.686115][ T8397] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 273.707131][ T8397] ext4 filesystem being mounted at /root/syzkaller.5v4L0D/111/file1 supports timestamps until 2038 (0x7fffffff) [ 273.736827][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 273.736841][ T30] audit: type=1400 audit(1719843236.710:1051): avc: denied { create } for pid=8398 comm="syz.3.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 273.888814][ T8406] syz.2.3018[8406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.889173][ T8406] syz.2.3018[8406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.950074][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 274.108391][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.119326][ T297] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 274.126865][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.137155][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 274.146461][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.156123][ T39] usb 5-1: config 0 descriptor?? [ 274.199193][ T39] hub 5-1:0.0: USB hub found [ 274.432506][ T39] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 274.508202][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.519354][ T297] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 274.528619][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.537197][ T297] usb 2-1: config 0 descriptor?? [ 274.718248][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 274.724244][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 274.758532][ T39] usb 5-1: USB disconnect, device number 31 [ 275.020510][ T297] hid-generic 0003:1B1C:1B3E.0034: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 275.220446][ T297] usb 2-1: USB disconnect, device number 27 [ 275.991366][ T8458] loop4: detected capacity change from 0 to 131072 [ 276.008746][ T8471] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 276.017146][ T8471] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 276.077309][ T8458] F2FS-fs (loop4): Found nat_bits in checkpoint [ 276.112612][ T8458] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 276.121592][ T8458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 276.304294][ T30] audit: type=1326 audit(1719843239.280:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.4.3043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4533c04b99 code=0x0 [ 276.754447][ T8498] syz.0.3056[8498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.754801][ T8498] syz.0.3056[8498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.319008][ T30] audit: type=1400 audit(1719843240.300:1053): avc: denied { read } for pid=8512 comm="syz.4.3062" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 277.353160][ T30] audit: type=1400 audit(1719843240.300:1054): avc: denied { open } for pid=8512 comm="syz.4.3062" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 277.376443][ T307] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 277.376782][ T30] audit: type=1400 audit(1719843240.300:1055): avc: denied { ioctl } for pid=8512 comm="syz.4.3062" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 277.418960][ T8513] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 277.429458][ T8513] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22 [ 277.440157][ T8513] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 277.451019][ T8513] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22 [ 277.748249][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.759255][ T307] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 278.022448][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.031240][ T307] usb 2-1: config 0 descriptor?? [ 278.590074][ T307] hid-generic 0003:1B1C:1B3E.0035: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 278.792077][ T307] usb 2-1: USB disconnect, device number 28 [ 278.810074][ T8552] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 278.831395][ T8552] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 278.998232][ T1234] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 279.238183][ T1234] usb 5-1: Using ep0 maxpacket: 16 [ 279.358246][ T1234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.369019][ T1234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.378536][ T1234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.391419][ T1234] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 279.400470][ T1234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.413603][ T1234] usb 5-1: config 0 descriptor?? [ 279.889116][ T1234] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 279.896345][ T1234] microsoft 0003:045E:07DA.0036: item 0 4 0 8 parsing failed [ 279.903838][ T1234] microsoft 0003:045E:07DA.0036: parse failed [ 279.909831][ T1234] microsoft: probe of 0003:045E:07DA.0036 failed with error -22 [ 280.090737][ T307] usb 5-1: USB disconnect, device number 32 [ 280.159785][ T8588] loop3: detected capacity change from 0 to 40427 [ 280.218725][ T8588] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 280.226455][ T8588] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 280.237057][ T8588] F2FS-fs (loop3): Found nat_bits in checkpoint [ 280.268874][ T8588] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 280.276068][ T8588] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 280.595828][ T8614] loop2: detected capacity change from 0 to 4096 [ 280.642791][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3103'. [ 280.688347][ T8614] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.701383][ T8614] EXT4-fs error (device loop2): ext4_empty_dir:3108: inode #12: block 80: comm syz.2.3102: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 280.721303][ T8614] EXT4-fs warning (device loop2): ext4_empty_dir:3110: inode #12: comm syz.2.3102: directory missing '..' [ 280.748172][ T1234] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 280.988166][ T1234] usb 4-1: Using ep0 maxpacket: 32 [ 281.268267][ T1234] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 281.277786][ T1234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.286515][ T1234] usb 4-1: Product: syz [ 281.291050][ T1234] usb 4-1: Manufacturer: syz [ 281.295863][ T1234] usb 4-1: SerialNumber: syz [ 281.306544][ T1234] usb 4-1: config 0 descriptor?? [ 281.355864][ T1234] cdc_ether: probe of 4-1:0.0 failed with error -22 [ 281.363207][ T1234] usb 4-1: unsupported MDLM descriptors [ 281.552045][ T1234] usb 4-1: USB disconnect, device number 20 [ 282.110612][ T8666] loop2: detected capacity change from 0 to 512 [ 282.199849][ T8666] EXT4-fs error (device loop2): ext4_quota_enable:6366: inode #4: comm syz.2.3122: iget: immutable or append flags not allowed on symlinks [ 282.214478][ T8666] EXT4-fs error (device loop2): ext4_quota_enable:6369: comm syz.2.3122: Bad quota inode: 4, type: 1 [ 282.226086][ T8666] EXT4-fs warning (device loop2): ext4_enable_quotas:6410: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.246618][ T8666] EXT4-fs (loop2): mount failed [ 282.445858][ T30] audit: type=1326 audit(1719843245.420:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df82c6b99 code=0x7ffc0000 [ 282.498033][ T30] audit: type=1326 audit(1719843245.450:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df82c6b99 code=0x7ffc0000 [ 282.535223][ T8685] loop2: detected capacity change from 0 to 512 [ 282.547982][ T30] audit: type=1326 audit(1719843245.450:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f4df82c6b99 code=0x7ffc0000 [ 282.571736][ T30] audit: type=1326 audit(1719843245.450:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df82c6b99 code=0x7ffc0000 [ 282.600965][ T30] audit: type=1326 audit(1719843245.450:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df82c6b99 code=0x7ffc0000 [ 282.625573][ T30] audit: type=1326 audit(1719843245.450:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f4df82c6b99 code=0x7ffc0000 [ 282.650057][ T30] audit: type=1326 audit(1719843245.450:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df82c6b99 code=0x7ffc0000 [ 282.653301][ T8679] loop3: detected capacity change from 0 to 40427 [ 282.674369][ T30] audit: type=1326 audit(1719843245.450:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4df82c6b99 code=0x7ffc0000 [ 282.702894][ T30] audit: type=1326 audit(1719843245.450:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df82c6b99 code=0x7ffc0000 [ 282.726532][ T30] audit: type=1326 audit(1719843245.450:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df82c6b99 code=0x7ffc0000 [ 282.727152][ T8685] EXT4-fs (loop2): orphan cleanup on readonly fs [ 282.757197][ T8685] EXT4-fs (loop2): 1 truncate cleaned up [ 282.773408][ T8685] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.790465][ T8692] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 282.804687][ T8679] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 282.823276][ T8679] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 282.830868][ T8692] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 282.833847][ T8679] F2FS-fs (loop3): Found nat_bits in checkpoint [ 282.867924][ T8679] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 282.875053][ T8679] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 283.453634][ T8722] loop3: detected capacity change from 0 to 4096 [ 283.549025][ T8722] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.577032][ T8722] EXT4-fs error (device loop3): ext4_empty_dir:3108: inode #12: block 80: comm syz.3.3141: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 283.601579][ T8722] EXT4-fs warning (device loop3): ext4_empty_dir:3110: inode #12: comm syz.3.3141: directory missing '..' [ 283.668184][ T1234] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 283.811792][ T8734] device erspan1 entered promiscuous mode [ 283.908181][ T1234] usb 1-1: Using ep0 maxpacket: 16 [ 283.927391][ T8739] kvm [8736]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2 [ 284.028253][ T1234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 284.039381][ T1234] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 284.052047][ T1234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.060525][ T1234] usb 1-1: config 0 descriptor?? [ 285.048090][ C1] sched: RT throttling activated [ 286.209795][ T8761] loop4: detected capacity change from 0 to 128 [ 286.241959][ T8764] loop3: detected capacity change from 0 to 4096 [ 286.290736][ T8761] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.301662][ T8761] ext4 filesystem being mounted at /root/syzkaller.wR9fWK/106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 286.351799][ T8719] UDC core: couldn't find an available UDC or it's busy: -16 [ 286.360322][ T8764] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.371529][ T8719] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 286.378858][ T8764] EXT4-fs error (device loop3): ext4_empty_dir:3108: inode #12: block 80: comm syz.3.3155: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 286.400883][ T8764] EXT4-fs warning (device loop3): ext4_empty_dir:3110: inode #12: comm syz.3.3155: directory missing '..' [ 286.401534][ T1234] hid-generic 0003:0158:0100.0037: unknown main item tag 0x1 [ 286.425353][ T1234] hid-generic 0003:0158:0100.0037: unexpected long global item [ 286.433009][ T1234] hid-generic: probe of 0003:0158:0100.0037 failed with error -22 [ 286.511535][ T8776] kvm [8774]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2 [ 286.603804][ T39] usb 1-1: USB disconnect, device number 30 [ 286.604422][ T8779] device syzkaller0 entered promiscuous mode [ 287.020025][ T8800] loop2: detected capacity change from 0 to 4096 [ 287.070510][ T8800] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.086820][ T8800] EXT4-fs error (device loop2): ext4_empty_dir:3108: inode #12: block 80: comm syz.2.3169: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 287.106690][ T8800] EXT4-fs warning (device loop2): ext4_empty_dir:3110: inode #12: comm syz.2.3169: directory missing '..' [ 287.256722][ T8808] kvm [8806]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2 [ 287.305041][ T8812] loop4: detected capacity change from 0 to 512 [ 287.646542][ T8828] loop4: detected capacity change from 0 to 128 [ 287.685753][ T8828] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.696238][ T8828] ext4 filesystem being mounted at /root/syzkaller.wR9fWK/110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 287.808214][ T297] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 287.971058][ T8836] kvm [8835]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2 [ 288.020479][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 288.020494][ T30] audit: type=1400 audit(1719843251.000:1097): avc: denied { connect } for pid=8838 comm="syz.3.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 288.428574][ T297] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 288.439819][ T297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.449179][ T297] usb 3-1: Product: syz [ 288.456154][ T297] usb 3-1: Manufacturer: syz [ 288.461086][ T297] usb 3-1: SerialNumber: syz [ 288.469218][ T297] usb 3-1: config 0 descriptor?? [ 288.765261][ T923] usb 3-1: USB disconnect, device number 28 [ 288.804818][ T8861] SELinux: Context  is not valid (left unmapped). [ 288.812079][ T30] audit: type=1400 audit(1719843251.790:1098): avc: denied { create } for pid=8860 comm="syz.4.3191" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=07 [ 288.834066][ T30] audit: type=1400 audit(1719843251.790:1099): avc: denied { rename } for pid=8860 comm="syz.4.3191" name="file1" dev="overlay" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=07 [ 288.859574][ T30] audit: type=1400 audit(1719843251.840:1100): avc: denied { setattr } for pid=8860 comm="syz.4.3191" name="#2065" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=07 [ 288.889501][ T30] audit: type=1400 audit(1719843251.870:1101): avc: denied { write open } for pid=8860 comm="syz.4.3191" name="#2065" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=07 [ 288.917783][ T30] audit: type=1400 audit(1719843251.890:1102): avc: denied { link } for pid=8860 comm="syz.4.3191" name="#2065" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=07 [ 289.003663][ T30] audit: type=1400 audit(1719843251.980:1103): avc: denied { unlink } for pid=7346 comm="syz-executor" name="file1" dev="sda1" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=07 [ 289.090056][ T8867] kvm [8865]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2 [ 289.244556][ T8878] loop3: detected capacity change from 0 to 128 [ 289.270958][ T30] audit: type=1326 audit(1719843252.250:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8873 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f753cb99 code=0x7ffc0000 [ 289.294959][ T30] audit: type=1326 audit(1719843252.250:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8873 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f753cb99 code=0x7ffc0000 [ 289.318651][ T30] audit: type=1326 audit(1719843252.260:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8873 comm="syz.0.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f07f753cb99 code=0x7ffc0000 [ 289.363947][ T8878] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.374494][ T8878] ext4 filesystem being mounted at /root/syzkaller.TVck7A/77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 290.819335][ T8920] loop3: detected capacity change from 0 to 256 [ 290.888401][ T8920] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 290.901949][ T8920] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.944111][ T8925] loop4: detected capacity change from 0 to 256 [ 290.971189][ T8925] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 290.983291][ T8925] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 291.287130][ T8933] syz.4.3217[8933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.287193][ T8933] syz.4.3217[8933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.313609][ T8949] loop3: detected capacity change from 0 to 40427 [ 292.388715][ T8949] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 292.396548][ T8949] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 292.407223][ T8949] F2FS-fs (loop3): Found nat_bits in checkpoint [ 292.430729][ T8949] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 292.441830][ T8949] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 292.448812][ T8949] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 292.794427][ T7948] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 292.794450][ T7948] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 292.802103][ T7948] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 292.809638][ T7948] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 292.817265][ T7948] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 292.825878][ T7948] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 292.833751][ T7948] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 292.846362][ T8974] syz.0.3230[8974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.861509][ T8974] syz.0.3230[8974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.954363][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.973396][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.980682][ T8976] device bridge_slave_0 entered promiscuous mode [ 292.987613][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.994619][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.002180][ T8976] device bridge_slave_1 entered promiscuous mode [ 293.067334][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.074208][ T8976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.081430][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.088280][ T8976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.114790][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.123273][ T922] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.131126][ T922] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.148593][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.162648][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.169565][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.184683][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.194440][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.201337][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.229396][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.237713][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.267892][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.283765][ T8976] device veth0_vlan entered promiscuous mode [ 293.290419][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.299959][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.307615][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.320693][ T8976] device veth1_macvtap entered promiscuous mode [ 293.329354][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.340339][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.351766][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.352009][ T8995] loop3: detected capacity change from 0 to 256 [ 293.391896][ T10] device bridge_slave_1 left promiscuous mode [ 293.393066][ T8995] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 293.398678][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.417794][ T8995] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 293.426922][ T10] device bridge_slave_0 left promiscuous mode [ 293.438311][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.446539][ T10] device veth1_macvtap left promiscuous mode [ 293.473134][ T8998] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 293.481343][ T8998] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 293.766933][ T9011] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.774934][ T9011] IPv6: Can't replace route, no match found [ 294.075833][ T9010] loop3: detected capacity change from 0 to 40427 [ 294.187872][ T9015] netlink: 'syz.2.3244': attribute type 4 has an invalid length. [ 294.342197][ T9010] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 294.350249][ T9010] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 294.360859][ T9010] F2FS-fs (loop3): Found nat_bits in checkpoint [ 294.382497][ T9010] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 294.393601][ T9010] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 294.400978][ T9010] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.733814][ T9035] device syzkaller0 entered promiscuous mode [ 294.757193][ T7948] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 294.757217][ T7948] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 294.771806][ T7948] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 294.811604][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 294.811620][ T30] audit: type=1400 audit(1719843257.790:1128): avc: denied { mount } for pid=9038 comm="syz.0.3250" name="/" dev="pstore" ino=12990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 294.961331][ T9015] syz.2.3244 (9015) used greatest stack depth: 18640 bytes left [ 295.429878][ T30] audit: type=1326 audit(1719843258.410:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.1.3261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4df82c6b99 code=0x0 [ 295.478021][ T9070] device syzkaller0 entered promiscuous mode [ 295.666199][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3261'. [ 295.681381][ T9072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3261'. [ 295.872390][ T9083] netlink: 'syz.3.3265': attribute type 4 has an invalid length. [ 296.328138][ T1234] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 296.568156][ T1234] usb 1-1: Using ep0 maxpacket: 8 [ 296.622806][ T9102] loop4: detected capacity change from 0 to 40427 [ 296.688324][ T1234] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 296.697424][ T1234] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 296.707821][ T1234] usb 1-1: config 135 has no interface number 0 [ 296.714840][ T1234] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.735366][ T9102] F2FS-fs (loop4): invalid crc value [ 296.741895][ T9102] F2FS-fs (loop4): Found nat_bits in checkpoint [ 296.767813][ T9102] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 296.937416][ T9116] attempt to access beyond end of device [ 296.937416][ T9116] loop4: rw=10241, want=45104, limit=40427 [ 296.955392][ T9116] attempt to access beyond end of device [ 296.955392][ T9116] loop4: rw=2049, want=45112, limit=40427 [ 297.080972][ T1234] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 297.090017][ T1234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.097827][ T1234] usb 1-1: Product: syz [ 297.101981][ T1234] usb 1-1: Manufacturer: syz [ 297.106372][ T1234] usb 1-1: SerialNumber: syz [ 297.124829][ T9118] syz.3.3279[9118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.124887][ T9118] syz.3.3279[9118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.148753][ T1234] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 297.166400][ T1234] usb 1-1: No valid video chain found. [ 297.311497][ T8976] attempt to access beyond end of device [ 297.311497][ T8976] loop4: rw=2049, want=45120, limit=40427 [ 297.351239][ T297] usb 1-1: USB disconnect, device number 31 [ 297.548128][ T307] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 297.731294][ T9128] loop4: detected capacity change from 0 to 128 [ 297.788145][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 297.926824][ T8976] VFS: Lookup of '. ' in vfat loop4 would have caused loop [ 297.934426][ T8976] VFS: Lookup of '. ' in vfat loop4 would have caused loop [ 297.941952][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.952904][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.962778][ T307] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 297.971808][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.982086][ T307] usb 4-1: config 0 descriptor?? [ 298.199408][ T9150] loop2: detected capacity change from 0 to 256 [ 298.206390][ T9145] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.213673][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.221452][ T9145] device bridge_slave_0 entered promiscuous mode [ 298.231610][ T9145] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.238599][ T9145] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.245856][ T9145] device bridge_slave_1 entered promiscuous mode [ 298.284805][ T9150] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 298.297475][ T9150] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.337984][ T30] audit: type=1400 audit(1719843261.310:1130): avc: denied { getopt } for pid=9151 comm="syz.1.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.371770][ T9145] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.378750][ T9145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.381576][ T30] audit: type=1400 audit(1719843261.310:1131): avc: denied { shutdown } for pid=9151 comm="syz.1.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.386001][ T9145] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.413151][ T9145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.436943][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.445158][ T923] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.452928][ T923] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.465585][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.480847][ T307] uclogic 0003:28BD:0094.0038: item fetching failed at offset 5/7 [ 298.489566][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.496506][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.505059][ T307] uclogic 0003:28BD:0094.0038: parse failed [ 298.620514][ T307] uclogic: probe of 0003:28BD:0094.0038 failed with error -22 [ 298.681922][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.692546][ T923] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.699512][ T923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.707555][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.721613][ T307] usb 4-1: USB disconnect, device number 21 [ 298.731820][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.760102][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.772156][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.781095][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.788973][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.800767][ T9145] device veth0_vlan entered promiscuous mode [ 298.813917][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.823745][ T9145] device veth1_macvtap entered promiscuous mode [ 298.836170][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.846415][ T10] device bridge_slave_1 left promiscuous mode [ 298.852869][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.860372][ T10] device bridge_slave_0 left promiscuous mode [ 298.866536][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.874555][ T10] device veth1_macvtap left promiscuous mode [ 298.880905][ T10] device veth0_vlan left promiscuous mode [ 298.912720][ T30] audit: type=1326 audit(1719843261.890:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9162 comm="syz.1.3297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4df82c6b99 code=0x0 [ 299.016255][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.024940][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.180216][ T9167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3297'. [ 299.204267][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3297'. [ 299.281603][ T9169] loop4: detected capacity change from 0 to 40427 [ 299.348872][ T9169] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 299.356927][ T9169] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 299.381552][ T9169] F2FS-fs (loop4): Found nat_bits in checkpoint [ 299.436900][ T9169] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 299.444492][ T9169] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 299.478624][ T9169] attempt to access beyond end of device [ 299.478624][ T9169] loop4: rw=2049, want=45104, limit=40427 [ 299.789480][ T9195] netlink: 'syz.2.3306': attribute type 4 has an invalid length. [ 300.074532][ T9198] loop4: detected capacity change from 0 to 40427 [ 300.128213][ T922] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 300.147406][ T9200] device syzkaller0 entered promiscuous mode [ 300.153283][ T9198] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 300.161286][ T9198] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 300.170645][ T9198] F2FS-fs (loop4): invalid crc value [ 300.178826][ T9198] F2FS-fs (loop4): Found nat_bits in checkpoint [ 300.198271][ T297] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 300.210274][ T9198] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 300.217312][ T9198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 300.448187][ T297] usb 1-1: Using ep0 maxpacket: 16 [ 300.498302][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.509282][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.551419][ T922] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 300.560396][ T922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.587767][ T922] usb 4-1: config 0 descriptor?? [ 300.772672][ T9218] SELinux: security_context_str_to_sid(Õ) failed for (dev ?, type ?) errno=-22 [ 300.833747][ T9218] SELinux: security_context_str_to_sid(Õ) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 300.847801][ T9192] loop3: detected capacity change from 0 to 512 [ 300.848966][ T297] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 300.863506][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.872070][ T297] usb 1-1: Product: syz [ 300.876138][ T297] usb 1-1: Manufacturer: syz [ 300.880865][ T297] usb 1-1: SerialNumber: syz [ 300.886625][ T297] usb 1-1: config 0 descriptor?? [ 300.928726][ T9192] EXT4-fs (loop3): Ignoring removed nobh option [ 300.934856][ T9192] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 300.950203][ T9192] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 300.969551][ T9192] ext4 filesystem being mounted at /root/syzkaller.TVck7A/96/file0 supports timestamps until 2038 (0x7fffffff) [ 301.147195][ T9229] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 301.229162][ T922] samsung 0003:0419:0600.0039: item fetching failed at offset 3/5 [ 301.239303][ T922] samsung 0003:0419:0600.0039: parse failed [ 301.245074][ T922] samsung: probe of 0003:0419:0600.0039 failed with error -22 [ 301.400512][ T297] usb 1-1: MIDIStreaming interface descriptor not found [ 301.441523][ T26] usb 4-1: USB disconnect, device number 22 [ 301.580692][ T922] usb 1-1: USB disconnect, device number 32 [ 301.999191][ T9245] loop4: detected capacity change from 0 to 40427 [ 302.088160][ T9245] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 302.102088][ T9245] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 302.112576][ T9245] F2FS-fs (loop4): Found nat_bits in checkpoint [ 302.133001][ T9245] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 302.144575][ T9245] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 302.151545][ T9245] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 303.228237][ T9267] netlink: 'syz.3.3325': attribute type 4 has an invalid length. [ 303.245407][ T9145] f2fs_fill_dentries: 4 callbacks suppressed [ 303.245426][ T9145] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 303.252483][ T9145] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 303.260469][ T9145] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 303.267886][ T9145] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 303.275406][ T9145] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 303.282897][ T9145] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 303.291048][ T9145] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 303.438848][ T9276] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 305.071848][ T9309] loop4: detected capacity change from 0 to 512 [ 305.108473][ T9311] syz.0.3342[9311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.108553][ T9311] syz.0.3342[9311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.126364][ T9313] loop3: detected capacity change from 0 to 128 [ 305.169955][ T9309] EXT4-fs (loop4): 1 truncate cleaned up [ 305.175608][ T9309] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 305.210205][ T30] audit: type=1107 audit(1719843268.190:1133): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 305.239843][ T9313] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 305.253951][ T9313] FAT-fs (loop3): Filesystem has been set read-only [ 305.270655][ T9313] attempt to access beyond end of device [ 305.270655][ T9313] loop3: rw=0, want=2073, limit=128 [ 305.306687][ T9310] loop2: detected capacity change from 0 to 40427 [ 305.308958][ T30] audit: type=1400 audit(1719843268.280:1134): avc: denied { map } for pid=9305 comm="syz.4.3341" path="/root/syzkaller.wxVuqO/6/file0/file0/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.346798][ T30] audit: type=1326 audit(1719843268.320:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.3.3343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2593f1b99 code=0x0 [ 305.371468][ T9309] EXT4-fs error (device loop4): ext4_ind_map_blocks:604: inode #12: comm syz.4.3341: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 305.387170][ T9309] EXT4-fs (loop4): Remounting filesystem read-only [ 305.394815][ T30] audit: type=1107 audit(1719843268.370:1136): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='…' [ 305.416829][ T9310] F2FS-fs (loop2): invalid crc value [ 305.430977][ T9310] F2FS-fs (loop2): Found nat_bits in checkpoint [ 305.437701][ T9145] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 305.467093][ T9310] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 305.475106][ T9145] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 305.492879][ T9145] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 305.519334][ T9310] attempt to access beyond end of device [ 305.519334][ T9310] loop2: rw=2049, want=45104, limit=40427 [ 305.768873][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.775850][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.783561][ T9330] device bridge_slave_0 entered promiscuous mode [ 305.792983][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.800142][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.807645][ T9330] device bridge_slave_1 entered promiscuous mode [ 305.889293][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.896282][ T9330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.903787][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.910639][ T9330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.090812][ T9346] syz.1.3354[9346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.091603][ T9346] syz.1.3354[9346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.139384][ T30] audit: type=1107 audit(1719843269.120:1137): pid=9343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 306.227452][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.235080][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.242397][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.252015][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.264692][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.271600][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.411006][ T10] device bridge_slave_1 left promiscuous mode [ 306.472064][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.497303][ T10] device bridge_slave_0 left promiscuous mode [ 306.503582][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.514232][ T10] device veth1_macvtap left promiscuous mode [ 306.520244][ T10] device veth0_vlan left promiscuous mode [ 306.634910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.675087][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.683718][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.690600][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.704019][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.714343][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.736435][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.744691][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.761171][ T9330] device veth0_vlan entered promiscuous mode [ 306.768725][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.777799][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.786977][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.796265][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.808599][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.820142][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.838845][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.849226][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.857759][ T9330] device veth1_macvtap entered promiscuous mode [ 306.876322][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.884471][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.893118][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.902060][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.911110][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.005643][ T9364] syz.2.3360[9364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.005721][ T9364] syz.2.3360[9364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.018824][ T9364] syz.2.3360[9364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.030336][ T9364] syz.2.3360[9364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.045161][ T9366] loop4: detected capacity change from 0 to 512 [ 307.068549][ T30] audit: type=1400 audit(1719843270.050:1138): avc: denied { read } for pid=9353 comm="syz.3.3355" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.110659][ T9366] EXT4-fs (loop4): 1 truncate cleaned up [ 307.116328][ T9366] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 307.476354][ T9379] syz.4.3365[9379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.476437][ T9379] syz.4.3365[9379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.522438][ T30] audit: type=1107 audit(1719843270.500:1139): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 307.682303][ T9385] loop4: detected capacity change from 0 to 512 [ 307.762235][ T9385] EXT4-fs (loop4): 1 truncate cleaned up [ 307.767933][ T9385] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 307.807245][ T9385] EXT4-fs error (device loop4): ext4_ind_map_blocks:604: inode #12: comm syz.4.3368: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 307.822422][ T9385] EXT4-fs (loop4): Remounting filesystem read-only [ 307.877057][ T9330] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 307.897772][ T9330] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 307.915162][ T9330] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 308.014302][ T9393] loop2: detected capacity change from 0 to 256 [ 308.043167][ T9393] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.055866][ T9393] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.137381][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.144355][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.151799][ T9397] device bridge_slave_0 entered promiscuous mode [ 308.159004][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.165854][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.173350][ T9397] device bridge_slave_1 entered promiscuous mode [ 308.446109][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.452979][ T9397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.460265][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.467132][ T9397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.492590][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.500612][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.507987][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.519589][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.527718][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.534606][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.542952][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.551334][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.558183][ T922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.568158][ T923] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 308.576522][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.588495][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.603677][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.615425][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.623754][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.631866][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.640192][ T9397] device veth0_vlan entered promiscuous mode [ 308.653912][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.663405][ T9397] device veth1_macvtap entered promiscuous mode [ 308.673428][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.686714][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.699360][ T8] device bridge_slave_1 left promiscuous mode [ 308.706362][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.714146][ T8] device bridge_slave_0 left promiscuous mode [ 308.720436][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.728764][ T8] device veth1_macvtap left promiscuous mode [ 308.734709][ T8] device veth0_vlan left promiscuous mode [ 308.779234][ T9408] loop4: detected capacity change from 0 to 8192 [ 308.928213][ T923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.938952][ T923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.948599][ T923] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 308.957612][ T923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.966675][ T923] usb 4-1: config 0 descriptor?? [ 308.979645][ T9413] xt_CT: No such helper "snmp_trap" [ 309.154661][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 309.449087][ T923] sony 0003:054C:0268.003A: unknown main item tag 0x0 [ 309.456661][ T923] sony 0003:054C:0268.003A: unknown main item tag 0x0 [ 309.463923][ T923] sony 0003:054C:0268.003A: unknown main item tag 0x0 [ 309.470917][ T923] sony 0003:054C:0268.003A: unknown main item tag 0x0 [ 309.477704][ T923] sony 0003:054C:0268.003A: unknown main item tag 0x0 [ 309.489710][ T923] sony 0003:054C:0268.003A: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 309.502081][ T923] sony 0003:054C:0268.003A: failed to claim input [ 309.519111][ T26] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 309.576827][ T9439] loop4: detected capacity change from 0 to 8192 [ 309.661182][ T39] usb 4-1: USB disconnect, device number 23 [ 309.752014][ T9443] xt_CT: No such helper "snmp_trap" [ 309.878192][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.889151][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.898974][ T26] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 309.907811][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.916572][ T26] usb 3-1: config 0 descriptor?? [ 310.172634][ T9429] loop2: detected capacity change from 0 to 512 [ 310.281501][ T9429] EXT4-fs (loop2): Ignoring removed nobh option [ 310.292140][ T9429] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 310.340140][ T9429] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 310.359679][ T9429] ext4 filesystem being mounted at /root/syzkaller.5v4L0D/185/file0 supports timestamps until 2038 (0x7fffffff) [ 310.458200][ T39] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 310.472197][ T9473] loop4: detected capacity change from 0 to 512 [ 310.488323][ T9468] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 310.502938][ T9468] EXT4-fs (loop2): Remounting filesystem read-only [ 310.550670][ T9473] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3402: casefold flag without casefold feature [ 310.563343][ T9473] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.3402: missing EA_INODE flag [ 310.575050][ T9473] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.3402: error while reading EA inode 2 err=-117 [ 310.587542][ T9473] EXT4-fs (loop4): 1 orphan inode deleted [ 310.593180][ T9473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 310.594027][ T26] samsung 0003:0419:0600.003B: item fetching failed at offset 3/5 [ 310.617221][ T26] samsung 0003:0419:0600.003B: parse failed [ 310.623183][ T26] samsung: probe of 0003:0419:0600.003B failed with error -22 [ 310.895353][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.974415][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.982553][ T922] usb 3-1: USB disconnect, device number 29 [ 310.987277][ T39] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 311.003479][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.019322][ T39] usb 1-1: config 0 descriptor?? [ 311.283333][ T39] usb 1-1: USB disconnect, device number 33 [ 311.805863][ T30] audit: type=1400 audit(1719843274.780:1140): avc: denied { mount } for pid=9489 comm="syz.4.3407" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 312.396121][ T30] audit: type=1400 audit(1719843275.370:1141): avc: denied { setopt } for pid=9514 comm="syz.2.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.421042][ T30] audit: type=1400 audit(1719843275.400:1142): avc: denied { ioctl } for pid=9514 comm="syz.2.3417" path="socket:[61867]" dev="sockfs" ino=61867 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 313.021465][ T9545] syz.2.3429[9545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.021539][ T9545] syz.2.3429[9545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.041684][ T9538] loop3: detected capacity change from 0 to 40427 [ 313.093777][ T9538] request_module fs- succeeded, but still no fs? [ 313.133197][ T9545] overlayfs: failed to resolve './file0': -2 [ 314.518174][ T26] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 314.534966][ T30] audit: type=1326 audit(1719843277.510:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9585 comm="syz.0.3444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07f753cb99 code=0x0 [ 314.908266][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.919254][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.928873][ T26] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 314.937903][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.949738][ T26] usb 5-1: config 0 descriptor?? [ 314.961390][ T9601] loop3: detected capacity change from 0 to 512 [ 315.106232][ T9601] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3451: casefold flag without casefold feature [ 315.118895][ T9601] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.3451: missing EA_INODE flag [ 315.130628][ T9601] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3451: error while reading EA inode 2 err=-117 [ 315.143032][ T9601] EXT4-fs (loop3): 1 orphan inode deleted [ 315.148606][ T9601] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 315.580103][ T26] sony 0003:054C:0268.003C: unknown main item tag 0x0 [ 315.590754][ T26] sony 0003:054C:0268.003C: unknown main item tag 0x0 [ 315.599983][ T26] sony 0003:054C:0268.003C: unknown main item tag 0x0 [ 315.617681][ T26] sony 0003:054C:0268.003C: unknown main item tag 0x0 [ 315.651040][ T26] sony 0003:054C:0268.003C: unknown main item tag 0x0 [ 315.665269][ T9613] syz.0.3453[9613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.665352][ T9613] syz.0.3453[9613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.703067][ T26] sony 0003:054C:0268.003C: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 315.727142][ T26] sony 0003:054C:0268.003C: failed to claim input [ 315.767731][ T9613] overlayfs: failed to resolve './file0': -2 [ 315.791990][ T922] usb 5-1: USB disconnect, device number 33 [ 316.368500][ T1234] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 316.506998][ T30] audit: type=1400 audit(1719843279.480:1144): avc: denied { mount } for pid=9630 comm="syz.0.3459" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 316.821008][ T9636] devtmpfs: Too few inodes for current use [ 316.875233][ T30] audit: type=1400 audit(1719843279.800:1145): avc: denied { mount } for pid=9635 comm="syz.0.3460" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 316.903687][ T30] audit: type=1400 audit(1719843279.800:1146): avc: denied { remount } for pid=9635 comm="syz.0.3460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 316.947023][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 316.998458][ T1234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.008882][ T1234] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.022089][ T1234] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 317.031369][ T1234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.040315][ T1234] usb 4-1: config 0 descriptor?? [ 317.046862][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.054111][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.062389][ T9639] device bridge_slave_0 entered promiscuous mode [ 317.069650][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.077438][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.086166][ T9639] device bridge_slave_1 entered promiscuous mode [ 317.146214][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.153080][ T9639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.160197][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.166964][ T9639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.192491][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.200358][ T923] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.207647][ T923] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.218978][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.227401][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.234294][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.241853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.250435][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.257294][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.275731][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.283706][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.306823][ T9639] device veth0_vlan entered promiscuous mode [ 317.309159][ T1234] usb 4-1: USB disconnect, device number 24 [ 317.323711][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.340474][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.349838][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.358782][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.370957][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.380924][ T9639] device veth1_macvtap entered promiscuous mode [ 317.391593][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 317.404945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 317.479583][ T8] device bridge_slave_1 left promiscuous mode [ 317.485716][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.494065][ T8] device bridge_slave_0 left promiscuous mode [ 317.500263][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.508439][ T8] device veth1_macvtap left promiscuous mode [ 317.514491][ T8] device veth0_vlan left promiscuous mode [ 319.706101][ T9674] syz.3.3474[9674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.706189][ T9674] syz.3.3474[9674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.719891][ T9675] netlink: 'syz.2.3473': attribute type 30 has an invalid length. [ 319.874038][ T9685] loop3: detected capacity change from 0 to 128 [ 319.939599][ T9690] loop4: detected capacity change from 0 to 512 [ 320.004592][ T9690] EXT4-fs (loop4): Test dummy encryption mode enabled [ 320.016927][ T9690] EXT4-fs error (device loop4): __ext4_iget:4892: inode #11: block 1: comm syz.4.3483: invalid block [ 320.027990][ T9690] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3483: couldn't read orphan inode 11 (err -117) [ 320.040456][ T9690] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 320.608222][ T1234] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 320.828186][ T26] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 320.868183][ T39] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 321.028238][ T1234] usb 2-1: config 0 has no interfaces? [ 321.033787][ T1234] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 321.042822][ T1234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.051899][ T1234] usb 2-1: config 0 descriptor?? [ 321.068192][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 321.108270][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 321.228257][ T39] usb 4-1: config 0 has no interfaces? [ 321.233700][ T39] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 321.242815][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.254915][ T39] usb 4-1: config 0 descriptor?? [ 321.345176][ T9718] loop4: detected capacity change from 0 to 512 [ 321.348266][ T26] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 321.360556][ T923] usb 2-1: USB disconnect, device number 29 [ 321.361082][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.374202][ T26] usb 1-1: Product: syz [ 321.378192][ T26] usb 1-1: Manufacturer: syz [ 321.382593][ T26] usb 1-1: SerialNumber: syz [ 321.387708][ T26] usb 1-1: config 0 descriptor?? [ 321.430272][ T9718] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3489: casefold flag without casefold feature [ 321.443326][ T9718] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.3489: missing EA_INODE flag [ 321.454905][ T9718] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.3489: error while reading EA inode 2 err=-117 [ 321.467204][ T9718] EXT4-fs (loop4): 1 orphan inode deleted [ 321.472966][ T9718] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 321.563663][ T39] usb 4-1: USB disconnect, device number 25 [ 322.048279][ T26] usb 1-1: MIDIStreaming interface descriptor not found [ 322.255871][ T26] usb 1-1: USB disconnect, device number 34 [ 322.456938][ T9734] syz.3.3494[9734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.457033][ T9734] syz.3.3494[9734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.590862][ T30] audit: type=1326 audit(1719843285.570:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c301ddb99 code=0x7ffc0000 [ 322.625807][ T30] audit: type=1326 audit(1719843285.570:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c301ddb99 code=0x7ffc0000 [ 322.649600][ T30] audit: type=1326 audit(1719843285.570:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c301ddb99 code=0x7ffc0000 [ 322.674154][ T30] audit: type=1326 audit(1719843285.570:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c301ddb99 code=0x7ffc0000 [ 322.697856][ T30] audit: type=1326 audit(1719843285.570:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c301ddb99 code=0x7ffc0000 [ 322.721598][ T30] audit: type=1326 audit(1719843285.570:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c301ddb99 code=0x7ffc0000 [ 322.745451][ T30] audit: type=1326 audit(1719843285.570:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c301ddb99 code=0x7ffc0000 [ 322.768954][ T30] audit: type=1326 audit(1719843285.570:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c301ddb99 code=0x7ffc0000 [ 322.792559][ T30] audit: type=1326 audit(1719843285.570:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c301ddb99 code=0x7ffc0000 [ 322.816134][ T30] audit: type=1326 audit(1719843285.570:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.1.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c301ddb99 code=0x7ffc0000 [ 322.961078][ T9756] loop3: detected capacity change from 0 to 512 [ 323.007823][ T9759] Invalid ELF section header overflow [ 323.019971][ T9756] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3503: casefold flag without casefold feature [ 323.041112][ T9756] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.3503: missing EA_INODE flag [ 323.053145][ T9756] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3503: error while reading EA inode 2 err=-117 [ 323.066404][ T9756] EXT4-fs (loop3): 1 orphan inode deleted [ 323.075547][ T9756] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 323.728144][ T26] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 323.768316][ T297] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 323.787940][ T9773] syz.4.3508[9773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.788046][ T9773] syz.4.3508[9773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.968233][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 324.098231][ T26] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 324.107188][ T26] usb 2-1: config 0 interface 0 has no altsetting 1 [ 324.128257][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.139176][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.148972][ T297] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 324.158028][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.166890][ T297] usb 3-1: config 0 descriptor?? [ 324.268245][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 324.277195][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.285174][ T26] usb 2-1: Product: syz [ 324.289219][ T26] usb 2-1: Manufacturer: syz [ 324.293573][ T26] usb 2-1: SerialNumber: syz [ 324.299004][ T26] usb 2-1: config 0 descriptor?? [ 324.540923][ T26] usb 2-1: USB disconnect, device number 30 [ 324.712795][ T297] sony 0003:054C:0268.003D: unknown main item tag 0x0 [ 324.732209][ T297] sony 0003:054C:0268.003D: unknown main item tag 0x0 [ 324.740732][ T297] sony 0003:054C:0268.003D: unknown main item tag 0x0 [ 324.747528][ T297] sony 0003:054C:0268.003D: unknown main item tag 0x0 [ 324.778277][ T297] sony 0003:054C:0268.003D: unknown main item tag 0x0 [ 324.787990][ T297] sony 0003:054C:0268.003D: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 324.799699][ T297] sony 0003:054C:0268.003D: failed to claim input [ 324.914471][ T923] usb 3-1: USB disconnect, device number 30 [ 325.230330][ T9809] syz.1.3520[9809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.230404][ T9809] syz.1.3520[9809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.340156][ T9812] loop4: detected capacity change from 0 to 512 [ 325.408432][ T9812] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3522: casefold flag without casefold feature [ 325.421112][ T9812] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.3522: missing EA_INODE flag [ 325.435443][ T9812] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.3522: error while reading EA inode 2 err=-117 [ 325.448178][ T9812] EXT4-fs (loop4): 1 orphan inode deleted [ 325.453827][ T9812] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 325.562502][ T9821] syz.2.3526[9821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.562558][ T9821] syz.2.3526[9821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.098828][ T9831] general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN [ 326.110491][ T9831] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 326.118734][ T9831] CPU: 1 PID: 9831 Comm: syz.2.3530 Tainted: G W 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 326.129939][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 326.139911][ T9831] RIP: 0010:step_into+0x1b6/0xe70 [ 326.145030][ T9831] Code: 20 0f 85 99 0a 00 00 44 8b 3b 43 80 3c 2c 00 74 0a 48 8b 7c 24 18 e8 09 bd f3 ff 48 8b 9c 24 b8 00 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 86 0a 00 00 8b 1b 89 de 81 e6 00 00 07 [ 326.164790][ T9831] RSP: 0018:ffffc90000957840 EFLAGS: 00010206 [ 326.170687][ T9831] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000040000 [ 326.178494][ T9831] RDX: ffffc90000f69000 RSI: 0000000000000282 RDI: 0000000000000283 [ 326.186304][ T9831] RBP: ffffc90000957970 R08: ffffffff81beb400 R09: ffffed1021ee7645 [ 326.194201][ T9831] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200012af1f [ 326.202015][ T9831] R13: dffffc0000000000 R14: ffffc90000957ca0 R15: 0000000000000013 [ 326.209914][ T9831] FS: 00007fd9bea0f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 326.218700][ T9831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.225101][ T9831] CR2: 00007fd9be9ccfa8 CR3: 0000000118d95000 CR4: 00000000003506a0 [ 326.232921][ T9831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 326.240722][ T9831] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 326.248538][ T9831] Call Trace: [ 326.251659][ T9831] [ 326.254439][ T9831] ? __die_body+0x62/0xb0 [ 326.258604][ T9831] ? die_addr+0x9f/0xd0 [ 326.262597][ T9831] ? exc_general_protection+0x311/0x4b0 [ 326.267988][ T9831] ? dentry_free+0xbf/0x160 [ 326.272319][ T9831] ? asm_exc_general_protection+0x27/0x30 [ 326.277880][ T9831] ? step_into+0x160/0xe70 [ 326.282126][ T9831] ? step_into+0x1b6/0xe70 [ 326.286378][ T9831] ? set_root+0x400/0x400 [ 326.290544][ T9831] walk_component+0x359/0x610 [ 326.295060][ T9831] ? nd_alloc_stack+0xf0/0xf0 [ 326.299747][ T9831] ? security_inode_permission+0xb0/0xf0 [ 326.305213][ T9831] ? fuse_do_getattr+0x7e0/0x7e0 [ 326.309986][ T9831] link_path_walk+0x642/0xd90 [ 326.314501][ T9831] ? handle_lookup_down+0x130/0x130 [ 326.319535][ T9831] path_lookupat+0xa0/0x450 [ 326.323895][ T9831] filename_lookup+0x230/0x5c0 [ 326.328492][ T9831] ? hashlen_string+0x120/0x120 [ 326.333272][ T9831] ? getname_flags+0x1fd/0x520 [ 326.337868][ T9831] user_path_at_empty+0x43/0x1a0 [ 326.342652][ T9831] __se_sys_chroot+0xb7/0x2c0 [ 326.347153][ T9831] ? __x64_sys_chroot+0x40/0x40 [ 326.351847][ T9831] ? __kasan_check_read+0x11/0x20 [ 326.356791][ T9831] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 326.362558][ T9831] __x64_sys_chroot+0x38/0x40 [ 326.367064][ T9831] do_syscall_64+0x3d/0xb0 [ 326.371335][ T9831] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 326.377047][ T9831] RIP: 0033:0x7fd9bf78db99 [ 326.381310][ T9831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.400747][ T9831] RSP: 002b:00007fd9bea0f048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 326.408988][ T9831] RAX: ffffffffffffffda RBX: 00007fd9bf91bfa0 RCX: 00007fd9bf78db99 [ 326.416807][ T9831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 326.424626][ T9831] RBP: 00007fd9bf80e77e R08: 0000000000000000 R09: 0000000000000000 [ 326.432421][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.440318][ T9831] R13: 000000000000000b R14: 00007fd9bf91bfa0 R15: 00007ffe5d8e2178 [ 326.448138][ T9831] [ 326.450993][ T9831] Modules linked in: [ 326.458575][ T9831] ---[ end trace 6b69b0187af0e79a ]--- [ 326.464137][ T9831] RIP: 0010:step_into+0x1b6/0xe70 [ 326.469383][ T9831] Code: 20 0f 85 99 0a 00 00 44 8b 3b 43 80 3c 2c 00 74 0a 48 8b 7c 24 18 e8 09 bd f3 ff 48 8b 9c 24 b8 00 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 86 0a 00 00 8b 1b 89 de 81 e6 00 00 07 [ 326.478181][ T923] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 326.489594][ T9831] RSP: 0018:ffffc90000957840 EFLAGS: 00010206 [ 326.502523][ T9831] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000040000 [ 326.510473][ T9831] RDX: ffffc90000f69000 RSI: 0000000000000282 RDI: 0000000000000283 [ 326.518437][ T9831] RBP: ffffc90000957970 R08: ffffffff81beb400 R09: ffffed1021ee7645 [ 326.526340][ T9831] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200012af1f [ 326.534445][ T9831] R13: dffffc0000000000 R14: ffffc90000957ca0 R15: 0000000000000013 [ 326.542323][ T9831] FS: 00007fd9bea0f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 326.551064][ T9831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.557452][ T9831] CR2: 0000001b2cc11ff8 CR3: 0000000118d95000 CR4: 00000000003506b0 [ 326.565396][ T9831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 326.573421][ T9831] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 326.581295][ T9831] Kernel panic - not syncing: Fatal exception [ 326.587279][ T9831] Kernel Offset: disabled [ 326.591459][ T9831] Rebooting in 86400 seconds..