last executing test programs: 4.31642996s ago: executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e) listen(r2, 0x0) accept(r2, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) 3.466989981s ago: executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x80000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0xd2}, 0x48) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x30000) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r7, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0x79, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r13, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3, 0x0, 0x0, 0xfffffdef}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.02929837s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_da_reserve_space\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) 2.913169968s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x34, r6, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa5, 0xa5, 0x4, [@enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x5}]}, @volatile={0xf}, @fwd={0x9}, @func={0x6, 0x0, 0x0, 0xc, 0x5}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0xb, 0x4}, {0x4, 0x5}, {0xf}, {0x7}, {0xb}]}, @datasec={0x2, 0x2, 0x0, 0xf, 0x1, [{0x3, 0x9, 0x4}, {0x2, 0x2, 0x26d}], 'n'}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000040)=""/37, 0xc4, 0x25, 0x0, 0x80000001}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000012000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r9, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000c80)=[0x0], &(0x7f0000000cc0)=[0x0], 0x0, 0x7c, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000001180)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x13, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x1, 0x0, 0x6, 0x1, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @alu={0x7, 0x1, 0x4, 0x4, 0xa, 0x4, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='GPL\x00', 0x20, 0xde, &(0x7f0000000840)=""/222, 0x41100, 0x40, '\x00', r7, 0x22, r8, 0x8, &(0x7f0000000680)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x9, 0x9, 0x7fffffff}, 0x10, r10, r4, 0x5, 0x0, &(0x7f0000000a80)=[{0x2, 0x4, 0x9, 0x2}, {0x1, 0x5, 0x8, 0x6}, {0x4, 0x5, 0x9, 0x6}, {0x3, 0x5, 0x6, 0x6}, {0x5, 0x5, 0x1, 0x4}], 0x10, 0x80}, 0x90) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000200)={'syz0\x00', {}, 0x44, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5820ac30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf84]}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0xb00) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000bc0)={0x80, 0xffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 2.818690562s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000804000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='autofs\x00', 0x1) fsmount(r5, 0x0, 0x81) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032"], 0x15) dup(r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = dup2(r7, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) io_setup(0x7, &(0x7f00000001c0)) 2.141354857s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfed7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="000000000000bbe9b6080000000000007b8af8ff00000000bfa20001000000000703000000ffffffb703000008000000b7040000000095270000000300000095000000000000005ddf0a843707357ec4aa73546f5defa71e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c696f636861727365743d63703837342c726f6469722c636865636b3d7374726963740010000000000000756e695f786c6174653d302c757466383d302c636f6465706167653d3835302c6e66733d6e6f7374616c655f726f2c73686f72746e616d651e77696e6e742c73686f72546e616d653d6c6f7765722c73686f72746e616d653d77696e39352c636865636b3d7200000000010000006f6e756d7461696c3d302c73686f72465851c4e0d5f973746e616d653d6d697865642c696f636861727365743d69736f383835392d362c616c6c6f775f7574696d653d30303030303030303030303030303030303030303737372c0032430ca03e60532ef86b0a9222c8599ca7a085d00d3529cc645673c171bc14b4466b7e68b8b2867f1aae1b157a1dda8f5571fd7758e957f51b9b2556454c6b28c48627d143e5bb5299c51286f540eca523b3ece936d6f9ce829669fc12560b21d77af9c9e4de610283486b0a4b54c90d602daee6152d39400c9484877458a5f59e6e5d1de8dd7ab4543873f463b5a7a7efe9fe9979a18cdd709959c4ae9d241e05999532b07d7db3f5d81526273165dcb2eb211ab900fc9644b8064b7319e2cf5d85c2ad776a958259864dd81275f5c2307479"], 0x1, 0x363, &(0x7f0000001a40)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ8Hmpy+57znnPtDcntJTp9bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6f/+fOazNzEEVr5zIlACAEzZ2///efdW13k+1+LVa+lQAAHBaPfH0M48urUQ83mjMRKy9udncbMZDw/qly/FSdGI1zsVs3IzILxS6D5Xe44WLK8vnGo3GTvw0F82ImOonNvMrhaWsl1+PhZiNuX5+/2ojpZRd+GRleaHRExG7O73xY62y2ZyOs/3xvz8bq8MLj6KT3lPExZXl841+B821In8nYm9436I7//mYjW+fH3STUvEJxpXlKwvFpIf5m816XBrshQPvgAAAAAAAAAAAAAAAAAAAAAAAwG2ZbwzMDdbPSd3nfKWc+fkJ9b31cfL8/vpAe/n6QKmeIqXfXnug+VYW+9YHGl2fZ9NCggAAAAAAAAAAAAAAAAAAADCwsVWLVqezur6xtd0uF3bWN7amIqIbefnrj744E+NtblGo5kPUIwZDNPrDbrdbKSsapyxiPD3rDl5EPvh0MONym/pgKyZOo35wVafzv3t+fHcYuTsrev5z2CaLyRuYlabx8EjPa//Pp3ScHTUonC9H6uOjX00plSJvlNOvPDveYVQiqsc/cNvtqTi4TeoWvrr24p3F3m99nnL33T/75NV33v+l3ep0R47eEaytb9xM7ValaHy83dLd1UWkEnmhUj4Tqoel7+2PtLLvfn3qrre/OdroqRx5tXs+j7TJ8s35eDS9lhe60xypOjNMn+5vRGd1esLJf6vCbRzTO9777MOUfvj5yEMMTY29bFT+nlcfAAAAAAAAAAAAAAAAAACgrPRd8b7+l32nD8t68LGTnxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HOG//+/VNjbjZHIUQp/7EzIqq+ub0TU/u3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+6vAAAA///tLFqQ") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) 1.888546957s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = open(0x0, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3a0, 0xe8, 0x1d0, 0x1d0, 0x2b8, 0xe8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac=@random="9b27262b8f8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000af539b25fc751c11a074380e1e9059eda200000000000007020000f8ffffffb703000008feffffb604000000000000850000005800000095fb604e8cc39a0c2152b918759fb8ab001ee00fb8061103d2e8283526b1b7eab57f974558fccbf8eb8fb2270e471c9345a5792074d473aeca987810b6acadd0bf1565197d1fce8307b6280b75d929e621016de0e3047cf10153ad57f936da6238cc80a6698ab3b6cde3a4d009a8033e3cc184ea31888310fd35fd4b48b1b8a8c631b717257b9dd2500ff3401fcba081d1acbd44b89e845179955938a3ffd494eade00346090e99d89844bab1f01be59121d7e66099e60eb3f43282483558cee92b7a6a0d27cfd04c679437e1e0711"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b96}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa87ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09002100000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf4ece4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000acc4d4ba52084d9b997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c7f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f921860c6e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61fe2010000294800323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e824f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5cd628ab84875f2deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c49a0189da9173c62f0ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d8935a9c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e46d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c734d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e7345cb69ecec6101ebc5fb4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d39a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353026bdc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340103fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d7346b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb3b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4050000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a2002e5f2f7f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78123a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de76057603105cc25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4537b2ccc5f9602da15f184f239098bf32551c7cf454e2faa2b9e17965b71104f8e311e1e936ce0cf783eb978fcd56f225f782d00e7008c664e34a3cc563e5fc4fa6aeced4bf805f71fc74472c0386aee070339af9fee8b32efad7fd0a0c7b3045d74bcb568a888fc9aa4599b71adad2135acbb600000fd2fd1755764ebfdf13f8633fe6358c8e05a792f0b9f133687041254cdf6cadeadcaa557de5fd2d3da5a75168fc36847cfa9b7c1a51f05bdb9bd36e9b17a75000000000000000000060000000000006a84efa8ea82db2d2d9a8942cf2ea0ebe8dfd25ebd54a7e16ced9c501404a66a223dcb33783d0188dec4adab19a39c403fd3deda9cce1ab24946511b15d2fe65cd19ff2592a341bb1c8f6fe60845245a94c609871fc09c2d461cb511185bba3d77d7f98fc01efebeffa9496ce55ee2ed6340169015a771a6d7b010333f8fbf00c7901d9b8bf3b8e088bb749c095102079239ef760cf2d5ef4098d5220ebf294142e06537f3006ae083813523d204d5ec921a772f2cf3859941d7004e13e2bfd804fb9293d9c059facea7ba13c167dcce500a9bf8e70599237bd11ac98dee701e94450296fc4d5a05f3358f6fed01e50e8c68dec5912472717cdd10aac4d8c05b7aca0dcd636f3b2b6daee23f0533ea"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)='R', 0x1}], 0x1, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18}, 0x0) recvmsg(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1}, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, r6}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0xc018aec0, &(0x7f0000000300)) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r11, 0xa, 0x13) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = eventfd(0x0) eventfd(0x0) ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f0000000000)={r14}) ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f0000000180)) 1.54125753s ago: executing program 3: pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x9) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.468711552s ago: executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000008000081000040"]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r8 = socket$netlink(0x10, 0x3, 0x7) fchdir(r8) pwritev(r5, 0x0, 0x0, 0x0, 0x0) 1.28938678s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(&(0x7f0000000080), 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r5 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f00000001c0)="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", 0x108) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400), 0x8) write$binfmt_aout(r5, 0x0, 0x0) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@clear_death, @request_death], 0x0, 0x0, 0x0}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x5000410) 1.202477083s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 1.195110214s ago: executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7b, 0x72, 0xa, 0xff00}, [@call={0x73, 0xa, 0xff9f}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000b00)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000200)=""/36}, {0x0, 0x1006, &(0x7f0000002600)=""/4102}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000080)) 1.169065348s ago: executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)="df1774", 0x3}, {0x0}, {0x0}, {&(0x7f0000003880)="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", 0x786}, {0x0}, {0x0}], 0x6}}], 0x2, 0x0) 680.112834ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='ext4_request_blocks\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 663.793627ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) close(r0) 654.873488ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) r4 = eventfd(0x0) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r5, 0x0, 0x2, r4}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r5, 0x0, 0x2, r3}) 650.737078ms ago: executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) keyctl$setperm(0x8, 0x0, 0x0) 630.179552ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 607.477875ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_da_reserve_space\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) 604.622966ms ago: executing program 1: r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 587.335648ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 586.500868ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) dup(0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 570.262551ms ago: executing program 2: r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001700)='jbd2_checkpoint_stats\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40086607, 0x20001412) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, 0x0) dup3(r0, r2, 0x80000) removexattr(0x0, 0x0) 551.479974ms ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@RTA_IP_PROTO={0x5}]}, 0x24}}, 0x0) 536.473956ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079335a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) close(r0) 440.083051ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 438.693841ms ago: executing program 2: r0 = epoll_create(0x3) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000080)) 418.527424ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) 181.350691ms ago: executing program 2: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getregs(0x11, r1, 0x0, &(0x7f0000000100)=""/9) 0s ago: executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)="df1774", 0x3}, {0x0}, {0x0}, {&(0x7f0000003880)="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", 0x786}, {0x0}, {0x0}], 0x6}}], 0x2, 0x0) kernel console output (not intermixed with test programs): 849][ T3162] device bridge_slave_0 entered promiscuous mode [ 86.989592][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.996530][ T3162] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.003604][ T3162] device bridge_slave_1 entered promiscuous mode [ 87.035513][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.042386][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.049485][ T3162] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.056258][ T3162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.075640][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.086062][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.094061][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.099526][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.110824][ T322] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 87.119816][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.120016][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.135018][ T322] usb 1-1: config 0 descriptor?? [ 87.146502][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.154650][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.161530][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.168963][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.177854][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.184714][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.191924][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.199891][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.217889][ T3162] device veth0_vlan entered promiscuous mode [ 87.231994][ T3162] device veth1_macvtap entered promiscuous mode [ 87.260935][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.272775][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.285221][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.295767][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.295919][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 87.295930][ T24] audit: type=1326 audit(1718490217.710:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed5d5dea9 code=0x7ffc0000 [ 87.304131][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.309405][ T24] audit: type=1326 audit(1718490217.710:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed5d5dea9 code=0x7ffc0000 [ 87.345789][ T24] audit: type=1326 audit(1718490217.760:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ed5d5dea9 code=0x7ffc0000 [ 87.397985][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.405601][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.442262][ T24] audit: type=1326 audit(1718490217.760:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed5d5dea9 code=0x7ffc0000 [ 87.466298][ T24] audit: type=1326 audit(1718490217.760:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed5d5dea9 code=0x7ffc0000 [ 87.491860][ T24] audit: type=1326 audit(1718490217.780:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f7ed5d5dea9 code=0x7ffc0000 [ 87.491938][ T3200] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 87.516296][ T24] audit: type=1326 audit(1718490217.780:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed5d5dea9 code=0x7ffc0000 [ 87.523532][ T3200] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 87.547326][ T24] audit: type=1326 audit(1718490217.780:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed5d5dea9 code=0x7ffc0000 [ 87.737023][ T322] itetech 0003:06CB:73F5.0013: unbalanced collection at end of report description [ 87.818894][ T322] itetech: probe of 0003:06CB:73F5.0013 failed with error -22 [ 87.865397][ T24] audit: type=1400 audit(1718490218.260:7149): avc: denied { setopt } for pid=3203 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.937642][ T322] usb 1-1: USB disconnect, device number 8 [ 88.069515][ T24] audit: type=1326 audit(1718490218.480:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3219 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed5d5dea9 code=0x7ffc0000 [ 88.097155][ T3217] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 88.106081][ T3217] ext4 filesystem being mounted at /root/syzkaller-testdir1383626708/syzkaller.GGPaGD/90/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 88.136557][ T3226] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 88.144797][ T3217] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 88.165589][ T2924] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 88.178387][ T3217] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz-executor.2: mark_inode_dirty error [ 88.191773][ T3217] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 88.200327][ T3217] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz-executor.2: mark_inode_dirty error [ 88.221632][ T3233] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 88.229961][ T3233] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 88.238070][ T3217] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 88.250425][ T2214] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor.2: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 88.251460][ T3235] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 88.276735][ T2214] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor.2: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 88.280514][ T3235] ext4 filesystem being mounted at /root/syzkaller-testdir2936011830/syzkaller.Lnpsp4/11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 88.301744][ T2214] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 88.357764][ T2214] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor.2: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 88.378310][ T2214] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor.2: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 88.398918][ T2214] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor.2: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 88.465545][ T2924] usb 2-1: Using ep0 maxpacket: 16 [ 88.568666][ T3252] futex_wake_op: syz-executor.3 tries to shift op by -1; fix this program [ 88.585574][ T2924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.605543][ T2924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.628412][ T2924] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.642294][ T2924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.661756][ T2924] usb 2-1: config 0 descriptor?? [ 88.915540][ T15] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 88.915549][ T322] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 89.027177][ T3284] FAT-fs (loop3): bogus logical sector size 0 [ 89.033071][ T3284] FAT-fs (loop3): Can't find a valid FAT filesystem [ 89.126775][ T3287] syz-executor.3[3287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.126819][ T3287] syz-executor.3[3287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.151156][ T2924] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0014/input/input7 [ 89.246722][ T2924] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 89.315619][ T15] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 89.335994][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.341394][ T15] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.355526][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.360852][ T15] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.365208][ T322] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 89.405531][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.415991][ T322] usb 1-1: config 0 descriptor?? [ 89.641722][ T1607] usb 2-1: USB disconnect, device number 7 [ 89.745635][ T15] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.745829][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.754698][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.761646][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.776038][ T15] usb 5-1: Product: syz [ 89.776047][ T15] usb 5-1: Manufacturer: syz [ 89.776055][ T15] usb 5-1: SerialNumber: syz [ 89.789456][ T3304] device bridge_slave_0 entered promiscuous mode [ 89.797748][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.804565][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.811802][ T3304] device bridge_slave_1 entered promiscuous mode [ 89.816146][ T15] cdc_ncm 5-1:1.0: bind() failure [ 89.847523][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.854395][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.861448][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.868254][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.886410][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.893750][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.901334][ T322] itetech 0003:06CB:73F5.0015: unbalanced collection at end of report description [ 89.911019][ T322] itetech: probe of 0003:06CB:73F5.0015 failed with error -22 [ 89.919413][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.929733][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.938077][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.946043][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.952911][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.962764][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.971050][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.979121][ T1607] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.985987][ T1607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.999035][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.007059][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.017845][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.025958][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.033786][ T322] usb 5-1: USB disconnect, device number 10 [ 90.041902][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.050045][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.060553][ T3304] device veth0_vlan entered promiscuous mode [ 90.067261][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.075105][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.085429][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.092688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.110781][ T5] usb 1-1: USB disconnect, device number 9 [ 90.120555][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.129030][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.138911][ T3304] device veth1_macvtap entered promiscuous mode [ 90.156167][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.163630][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.171837][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.185109][ T7] device bridge_slave_1 left promiscuous mode [ 90.191487][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.199264][ T7] device bridge_slave_0 left promiscuous mode [ 90.205282][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.213627][ T7] device veth1_macvtap left promiscuous mode [ 90.220608][ T7] device veth0_vlan left promiscuous mode [ 90.267118][ T3316] syz-executor.1[3316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.267165][ T3316] syz-executor.1[3316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.346133][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.367967][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.337959][ T3350] device pim6reg1 entered promiscuous mode [ 91.587627][ T3372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.594668][ T3372] IPv6: NLM_F_CREATE should be set when creating new route [ 91.601736][ T3372] IPv6: NLM_F_CREATE should be set when creating new route [ 91.675527][ T2924] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 91.705562][ T1235] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 91.945531][ T1235] usb 5-1: Using ep0 maxpacket: 32 [ 92.035591][ T2924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.046385][ T2924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.055976][ T2924] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 92.064799][ T2924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.073127][ T1235] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.084917][ T2924] usb 4-1: config 0 descriptor?? [ 92.089786][ T1235] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.215939][ T1235] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 92.224789][ T1235] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 92.233001][ T1235] usb 5-1: Product: syz [ 92.236962][ T1235] usb 5-1: Manufacturer: syz [ 92.275866][ T1235] hub 5-1:4.0: USB hub found [ 92.650988][ T1235] hub 5-1:4.0: 2 ports detected [ 92.656848][ T2924] itetech 0003:06CB:73F5.0016: unbalanced collection at end of report description [ 92.666315][ T2924] itetech: probe of 0003:06CB:73F5.0016 failed with error -22 [ 92.776313][ T3417] EXT4-fs (loop0): error: journal path ./file1 is not a block device [ 92.828332][ T2924] usb 4-1: USB disconnect, device number 17 [ 92.975541][ T1607] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 93.235566][ T1607] usb 3-1: Using ep0 maxpacket: 8 [ 93.385730][ T1607] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.395286][ T1607] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 93.404968][ T1607] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.415338][ T1607] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 93.425447][ T24] kauditd_printk_skb: 22 callbacks suppressed [ 93.425463][ T24] audit: type=1326 audit(1718490223.830:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4281bea9 code=0x7ffc0000 [ 93.468379][ T24] audit: type=1326 audit(1718490223.830:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4281bea9 code=0x7ffc0000 [ 93.492243][ T24] audit: type=1326 audit(1718490223.860:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4281bea9 code=0x7ffc0000 [ 93.516122][ T24] audit: type=1326 audit(1718490223.870:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4281bea9 code=0x7ffc0000 [ 93.539956][ T24] audit: type=1326 audit(1718490223.870:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4281bea9 code=0x7ffc0000 [ 93.563676][ T24] audit: type=1326 audit(1718490223.870:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4281bea9 code=0x7ffc0000 [ 93.587608][ T24] audit: type=1326 audit(1718490223.870:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4281bea9 code=0x7ffc0000 [ 93.611339][ T24] audit: type=1326 audit(1718490223.870:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc42819627 code=0x7ffc0000 [ 93.634944][ T24] audit: type=1326 audit(1718490223.870:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc427df309 code=0x7ffc0000 [ 93.646023][ T1607] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.658748][ T24] audit: type=1326 audit(1718490223.870:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4281bea9 code=0x7ffc0000 [ 93.667773][ T1607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.699710][ T1607] usb 3-1: Product: syz [ 93.703748][ T1607] usb 3-1: Manufacturer: syz [ 93.712182][ T1607] usb 3-1: SerialNumber: syz [ 93.765925][ T1607] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 93.925671][ T1235] hub 5-1:4.0: activate --> -90 [ 94.646911][ T15] usb 5-1: USB disconnect, device number 11 [ 94.665647][ T1235] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 94.678570][ T3458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.702563][ T5] usb 3-1: USB disconnect, device number 16 [ 94.807918][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 95.566026][ T3487] syz-executor.2[3487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.566078][ T3487] syz-executor.2[3487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.606689][ T3494] exfat: Unknown parameter '01777777777777777777777ý®ögjç>™/mïbé'Uw]þ¡àN/©ˆÂ>¾á%Ú£' [ 96.245250][ T3527] syz-executor.3[3527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.245303][ T3527] syz-executor.3[3527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.536566][ T3611] incfs: Error accessing: ./file0. [ 97.553713][ T3611] incfs: mount failed -20 [ 97.707014][ T3638] incfs: Error accessing: ./file0. [ 97.711976][ T3638] incfs: mount failed -20 [ 97.942301][ T3666] FAT-fs (loop1): Directory bread(block 64) failed [ 97.955552][ T3666] FAT-fs (loop1): Directory bread(block 65) failed [ 97.974136][ T3673] overlayfs: failed to get inode (-116) [ 97.979740][ T3673] overlayfs: failed to get inode (-116) [ 97.985804][ T3666] FAT-fs (loop1): Directory bread(block 66) failed [ 97.992214][ T3666] FAT-fs (loop1): Directory bread(block 67) failed [ 97.998708][ T3666] FAT-fs (loop1): Directory bread(block 68) failed [ 98.005086][ T3666] FAT-fs (loop1): Directory bread(block 69) failed [ 98.011813][ T3666] FAT-fs (loop1): Directory bread(block 70) failed [ 98.018546][ T3666] FAT-fs (loop1): Directory bread(block 71) failed [ 98.024938][ T3666] FAT-fs (loop1): Directory bread(block 72) failed [ 98.032873][ T3666] FAT-fs (loop1): Directory bread(block 73) failed [ 98.060258][ T3680] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.136436][ T3690] EXT4-fs (loop4): Unrecognized mount option "euid=00000000000000000000" or missing value [ 98.733455][ T3706] syz-executor.2[3706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.733512][ T3706] syz-executor.2[3706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.773958][ T24] kauditd_printk_skb: 2666 callbacks suppressed [ 98.773969][ T24] audit: type=1326 audit(1718490229.180:9849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ff645ea9 code=0x7fc00000 [ 98.816281][ T24] audit: type=1326 audit(1718490229.230:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f5d0ea9 code=0x7ffc0000 [ 98.842630][ T24] audit: type=1326 audit(1718490229.230:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f5d0ea9 code=0x7ffc0000 [ 98.875296][ T24] audit: type=1326 audit(1718490229.250:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f820f5d0ea9 code=0x7ffc0000 [ 98.901462][ T24] audit: type=1326 audit(1718490229.250:9853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f5d0ea9 code=0x7ffc0000 [ 98.925818][ T24] audit: type=1326 audit(1718490229.250:9854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f5d0ea9 code=0x7ffc0000 [ 98.972363][ T24] audit: type=1326 audit(1718490229.250:9855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f820f5d0ea9 code=0x7ffc0000 [ 99.005574][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 99.013143][ T24] audit: type=1326 audit(1718490229.250:9856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f5d0ea9 code=0x7ffc0000 [ 99.038530][ T24] audit: type=1326 audit(1718490229.250:9857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f5d0ea9 code=0x7ffc0000 [ 99.070327][ T3729] syz-executor.1[3729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.070369][ T3729] syz-executor.1[3729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.087972][ T24] audit: type=1326 audit(1718490229.250:9858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f820f5d0ea9 code=0x7ffc0000 [ 99.255634][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 99.261726][ T3745] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,barrier,resuid=0x0000000000000000,nodiscard,minixdf,errors=remount-ro,usrquota,data_err=abort,resuid=0x0000000000000000, [ 99.290310][ T3745] EXT4-fs error (device loop2): ext4_lookup:1831: inode #2: comm syz-executor.2: deleted inode referenced: 12 [ 99.303598][ T3756] SELinux: security_context_str_to_sid(ÿÿÿÿ) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 99.315451][ T3745] EXT4-fs (loop2): Remounting filesystem read-only [ 99.326181][ T3745] EXT4-fs error (device loop2): ext4_lookup:1831: inode #2: comm syz-executor.2: deleted inode referenced: 12 [ 99.395587][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.405341][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 99.415692][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.425217][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 99.511528][ T3790] SELinux: security_context_str_to_sid(ÿÿÿÿ) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 99.558411][ T3792] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,barrier,resuid=0x0000000000000000,nodiscard,minixdf,errors=remount-ro,usrquota,data_err=abort,resuid=0x0000000000000000, [ 99.579817][ T3792] EXT4-fs error (device loop0): ext4_lookup:1831: inode #2: comm syz-executor.0: deleted inode referenced: 12 [ 99.591573][ T3792] EXT4-fs (loop0): Remounting filesystem read-only [ 99.600993][ T3792] EXT4-fs error (device loop0): ext4_lookup:1831: inode #2: comm syz-executor.0: deleted inode referenced: 12 [ 99.613960][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.624730][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.632656][ T25] usb 4-1: Product: syz [ 99.636864][ T25] usb 4-1: Manufacturer: syz [ 99.641271][ T25] usb 4-1: SerialNumber: syz [ 99.695980][ T25] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 100.091551][ T15] usb 4-1: USB disconnect, device number 18 [ 100.693069][ T3838] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 100.923185][ T3856] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.007140][ T3864] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 101.018270][ T3864] ext4 filesystem being mounted at /root/syzkaller-testdir3280742172/syzkaller.andc6G/183/file1 supports timestamps until 2038 (0x7fffffff) [ 101.265524][ T20] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 101.555541][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 101.685671][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.695368][ T20] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 101.705081][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 101.714574][ T20] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 101.738600][ T3911] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.760861][ T3911] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.942570][ T3923] syz-executor.2[3923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.957082][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.977923][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.985881][ T20] usb 4-1: Product: syz [ 101.990210][ T20] usb 4-1: Manufacturer: syz [ 101.994696][ T20] usb 4-1: SerialNumber: syz [ 102.046269][ T20] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 102.077442][ T3927] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 102.086286][ T3927] ext4 filesystem being mounted at /root/syzkaller-testdir689777517/syzkaller.xMAEaR/72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 102.402970][ T3933] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 102.596729][ T5] usb 4-1: USB disconnect, device number 19 [ 103.054344][ T3958] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 103.065651][ T3958] ext4 filesystem being mounted at /root/syzkaller-testdir3280742172/syzkaller.andc6G/200/file1 supports timestamps until 2038 (0x7fffffff) [ 103.757106][ T4006] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.767961][ T4001] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 103.779055][ T4001] ext4 filesystem being mounted at /root/syzkaller-testdir2940453769/syzkaller.7or85H/179/file1 supports timestamps until 2038 (0x7fffffff) [ 104.416302][ T4044] EXT4-fs (loop1): Unrecognized mount option "euid=00000000000000000000" or missing value [ 106.525645][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 106.525688][ T24] audit: type=1400 audit(1718490236.840:9885): avc: denied { create } for pid=4096 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 106.584559][ T24] audit: type=1400 audit(1718490236.990:9886): avc: denied { map } for pid=4114 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.638567][ T24] audit: type=1400 audit(1718490237.030:9887): avc: denied { read } for pid=4114 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.840168][ T24] audit: type=1326 audit(1718490237.250:9888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2e74ea9 code=0x7fc00000 [ 106.952272][ T4130] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 106.964201][ T4130] ext4 filesystem being mounted at /root/syzkaller-testdir3357945028/syzkaller.2Xsq4c/64/file1 supports timestamps until 2038 (0x7fffffff) [ 107.156056][ T24] audit: type=1400 audit(1718490237.570:9889): avc: denied { execute } for pid=4140 comm="syz-executor.2" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.247020][ T4143] FAT-fs (loop2): Directory bread(block 11554) failed [ 107.253782][ T4143] FAT-fs (loop2): Directory bread(block 11555) failed [ 107.260929][ T4143] FAT-fs (loop2): Directory bread(block 11556) failed [ 107.267786][ T4143] FAT-fs (loop2): Directory bread(block 11557) failed [ 107.274733][ T4143] FAT-fs (loop2): Directory bread(block 11558) failed [ 107.281392][ T4143] FAT-fs (loop2): Directory bread(block 11559) failed [ 107.288017][ T4143] FAT-fs (loop2): Directory bread(block 11560) failed [ 107.294552][ T4143] FAT-fs (loop2): Directory bread(block 11561) failed [ 107.301312][ T4143] FAT-fs (loop2): Directory bread(block 11562) failed [ 107.307982][ T4143] FAT-fs (loop2): Directory bread(block 11563) failed [ 108.199655][ T4186] input: syz0 as /devices/virtual/input/input8 [ 109.423656][ T4200] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.578025][ T4220] syz-executor.1[4220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.578070][ T4220] syz-executor.1[4220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.617643][ T24] audit: type=1326 audit(1718490240.030:9890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34b2e74ea9 code=0x0 [ 109.696933][ T4233] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 110.015532][ T5] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 110.067526][ T24] audit: type=1400 audit(1718490240.480:9891): avc: denied { create } for pid=4260 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 110.124599][ T24] audit: type=1400 audit(1718490240.530:9892): avc: denied { view } for pid=4260 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 110.255642][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 110.287913][ T24] audit: type=1400 audit(1718490240.700:9893): avc: denied { unmount } for pid=3162 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 110.313530][ T4267] input: syz0 as /devices/virtual/input/input9 [ 110.356207][ T24] audit: type=1400 audit(1718490240.770:9894): avc: denied { bind } for pid=4272 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.375932][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.387367][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.397115][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.418238][ T5] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 110.427556][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.436075][ T5] usb 1-1: config 0 descriptor?? [ 110.452074][ T4279] syz-executor.3[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.452129][ T4279] syz-executor.3[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.453603][ T4276] incfs: Options parsing error. -22 [ 110.483669][ T4279] syz-executor.3[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.483726][ T4279] syz-executor.3[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.496424][ T4276] incfs: mount failed -22 [ 110.596215][ T4285] EXT4-fs (loop3): Unrecognized mount option "euid=00000000000000000000" or missing value [ 110.685820][ T4292] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 110.707396][ T4292] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,journal_dev=0x0000000000000005,,errors=continue [ 110.725236][ T4292] ext4 filesystem being mounted at /root/syzkaller-testdir3357945028/syzkaller.2Xsq4c/75/file0 supports timestamps until 2038 (0x7fffffff) [ 111.079947][ T5] koneplus 0003:1E7D:2E22.0017: unknown main item tag 0x0 [ 111.088027][ T5] koneplus 0003:1E7D:2E22.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 111.457977][ T5] usb 1-1: USB disconnect, device number 10 [ 111.662051][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.671258][ T4325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.749582][ T4328] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 111.777224][ T4328] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,journal_dev=0x0000000000000005,,errors=continue [ 111.795000][ T4328] ext4 filesystem being mounted at /root/syzkaller-testdir689777517/syzkaller.xMAEaR/101/file0 supports timestamps until 2038 (0x7fffffff) [ 111.889947][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 111.889958][ T24] audit: type=1400 audit(1718490242.300:9898): avc: denied { read } for pid=4343 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.975027][ T24] audit: type=1326 audit(1718490242.380:9899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f820f5d0ea9 code=0x0 [ 111.977337][ T4352] syz-executor.0[4352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.998711][ T4348] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 112.019646][ T4352] syz-executor.0[4352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.019704][ T24] audit: type=1400 audit(1718490242.420:9900): avc: denied { relabelfrom } for pid=4347 comm="syz-executor.2" name="" dev="pipefs" ino=32963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 112.053884][ T24] audit: type=1400 audit(1718490242.440:9901): avc: denied { relabelto } for pid=4347 comm="syz-executor.2" name="" dev="pipefs" ino=32963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 112.081885][ T4353] syz-executor.0[4353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.081935][ T4353] syz-executor.0[4353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.362229][ T24] audit: type=1400 audit(1718490242.770:9902): avc: denied { unlink } for pid=4366 comm="syz-executor.0" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 112.400223][ T4374] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.456711][ T4378] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.469769][ T4378] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.481000][ T4378] EXT4-fs (loop3): 1 truncate cleaned up [ 112.486819][ T4378] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004, [ 112.539706][ T24] audit: type=1400 audit(1718490242.950:9903): avc: denied { link } for pid=4377 comm="syz-executor.3" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 112.592640][ T24] audit: type=1400 audit(1718490242.990:9904): avc: denied { remove_name } for pid=4377 comm="syz-executor.3" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.637367][ T24] audit: type=1326 audit(1718490243.000:9905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4281bea9 code=0x7ffc0000 [ 112.661230][ T24] audit: type=1326 audit(1718490243.000:9906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fcc4281bea9 code=0x7ffc0000 [ 112.686653][ T24] audit: type=1326 audit(1718490243.000:9907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4281bea9 code=0x7ffc0000 [ 112.727087][ T4370] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 112.744756][ T4370] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf, [ 112.840854][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.849974][ T4411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.305361][ T4365] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 113.320299][ T4365] EXT4-fs (loop2): Remounting filesystem read-only [ 113.718097][ T4440] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 114.216887][ T4460] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 114.227259][ T4460] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf, [ 114.464418][ T4463] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set [ 114.522879][ T4463] EXT4-fs (loop3): Remounting filesystem read-only [ 114.698125][ T4489] input: syz0 as /devices/virtual/input/input10 [ 114.706331][ T4490] bpf_get_probe_write_proto: 2 callbacks suppressed [ 114.706346][ T4490] syz-executor.0[4490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.713145][ T4490] syz-executor.0[4490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.340622][ T4533] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.362258][ T4533] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.371401][ T4533] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.562999][ T4552] input: syz0 as /devices/virtual/input/input11 [ 117.424737][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 117.424748][ T24] audit: type=1400 audit(1718490247.830:9911): avc: denied { create } for pid=4572 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.426041][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.515392][ T24] audit: type=1326 audit(1718490247.920:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc4281bea9 code=0x0 [ 117.636628][ T4579] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 117.777271][ T4590] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:1a9a [ 117.815552][ T5] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 117.897351][ T4594] FAT-fs (loop4): Directory bread(block 11554) failed [ 117.904040][ T4594] FAT-fs (loop4): Directory bread(block 11555) failed [ 117.936037][ T4594] FAT-fs (loop4): Directory bread(block 11556) failed [ 117.950616][ T4594] FAT-fs (loop4): Directory bread(block 11557) failed [ 117.958822][ T4594] FAT-fs (loop4): Directory bread(block 11558) failed [ 118.127690][ T4594] FAT-fs (loop4): Directory bread(block 11559) failed [ 118.134391][ T4594] FAT-fs (loop4): Directory bread(block 11560) failed [ 118.142733][ T4594] FAT-fs (loop4): Directory bread(block 11561) failed [ 118.149797][ T4594] FAT-fs (loop4): Directory bread(block 11562) failed [ 118.156557][ T4594] FAT-fs (loop4): Directory bread(block 11563) failed [ 118.395725][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.432067][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.504665][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.519370][ T5] usb 3-1: config 0 descriptor?? [ 118.654036][ T24] audit: type=1326 audit(1718490249.060:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75ff645ea9 code=0x0 [ 118.767138][ T24] audit: type=1107 audit(1718490249.180:9914): pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='O' [ 118.810325][ T4635] device pim6reg1 entered promiscuous mode [ 118.846585][ T24] audit: type=1326 audit(1718490249.260:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f820f5d0ea9 code=0x0 [ 119.086419][ T4661] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 119.093997][ T4661] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 119.103155][ T4661] F2FS-fs (loop4): invalid crc value [ 119.109638][ T4661] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.132076][ T4661] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 119.138999][ T4661] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.279285][ T4674] overlayfs: failed to resolve './file0': -2 [ 119.391827][ T3162] attempt to access beyond end of device [ 119.391827][ T3162] loop4: rw=2049, want=45120, limit=40427 [ 119.404171][ T4673] EXT4-fs (loop3): Unrecognized mount option "fsuuid=67491ed9-b1ac-0be6-52eb-fd2fdc6" or missing value [ 119.531567][ T24] audit: type=1326 audit(1718490249.940:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ff645ea9 code=0x7ffc0000 [ 119.558283][ T24] audit: type=1326 audit(1718490249.970:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f75ff645ea9 code=0x7ffc0000 [ 119.582998][ T24] audit: type=1326 audit(1718490249.970:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ff645ea9 code=0x7ffc0000 [ 119.682554][ T4692] syz-executor.4[4692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.682608][ T4692] syz-executor.4[4692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.470313][ T4701] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 120.493009][ T4701] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 120.502481][ T4701] F2FS-fs (loop3): invalid crc value [ 120.580841][ T4701] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.616701][ T4701] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 120.623632][ T4701] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.630978][ T305] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.251126][ T4729] xt_CT: No such helper "netbios-ns" [ 121.292009][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 121.297980][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 121.305027][ T5] usb 3-1: USB disconnect, device number 17 [ 121.324455][ T4701] tmpfs: Unknown parameter './file0' [ 121.337909][ T1934] F2FS-fs (loop3): access invalid blkaddr:2048 [ 121.344624][ T1934] CPU: 0 PID: 1934 Comm: syz-executor.3 Not tainted 5.10.214-syzkaller-00187-ge6f44899ce5d #0 [ 121.354677][ T1934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 121.364565][ T1934] Call Trace: [ 121.367710][ T1934] dump_stack_lvl+0x1e2/0x24b [ 121.372211][ T1934] ? f2fs_get_next_page_offset+0x750/0x750 [ 121.377852][ T1934] ? bfq_pos_tree_add_move+0x43b/0x43b [ 121.383144][ T1934] dump_stack+0x15/0x17 [ 121.387137][ T1934] f2fs_is_valid_blkaddr+0xc87/0x1370 [ 121.392344][ T1934] f2fs_map_blocks+0x174c/0x3e50 [ 121.397128][ T1934] ? f2fs_do_map_lock+0x280/0x280 [ 121.402007][ T1934] ? bio_add_page+0x2cd/0x460 [ 121.406488][ T1934] ? xa_load+0x488/0x4a0 [ 121.410573][ T1934] f2fs_mpage_readpages+0xef9/0x24a0 [ 121.415698][ T1934] ? f2fs_verify_bio+0x440/0x440 [ 121.420465][ T1934] ? __this_cpu_preempt_check+0x13/0x20 [ 121.425844][ T1934] ? __mod_memcg_lruvec_state+0x131/0x310 [ 121.431415][ T1934] ? xas_nomem+0x19a/0x1d0 [ 121.435660][ T1934] ? __kasan_check_read+0x11/0x20 [ 121.440509][ T1934] f2fs_readahead+0xfd/0x250 [ 121.444946][ T1934] ? blk_start_plug+0x5a/0x170 [ 121.449541][ T1934] read_pages+0x17e/0xbf0 [ 121.453710][ T1934] ? page_cache_ra_unbounded+0x890/0x890 [ 121.459179][ T1934] ? add_to_page_cache_lru+0x221/0x2c0 [ 121.464470][ T1934] ? add_to_page_cache_locked+0x40/0x40 [ 121.469842][ T1934] ? xa_load+0x488/0x4a0 [ 121.473936][ T1934] page_cache_ra_unbounded+0x6be/0x890 [ 121.479214][ T1934] ? memcpy+0x56/0x70 [ 121.483042][ T1934] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 121.489372][ T1934] ? hashlen_string+0x120/0x120 [ 121.494056][ T1934] ondemand_readahead+0x863/0xc60 [ 121.498919][ T1934] ? do_wp_page+0x981/0xca0 [ 121.503256][ T1934] page_cache_sync_ra+0x26c/0x2c0 [ 121.508117][ T1934] f2fs_readdir+0x4e7/0xb70 [ 121.512460][ T1934] ? f2fs_fill_dentries+0xe10/0xe10 [ 121.517495][ T1934] ? security_file_permission+0x86/0xb0 [ 121.522872][ T1934] iterate_dir+0x265/0x580 [ 121.527124][ T1934] ? f2fs_fill_dentries+0xe10/0xe10 [ 121.532158][ T1934] __se_sys_getdents64+0x1c1/0x460 [ 121.537109][ T1934] ? __x64_sys_getdents64+0x90/0x90 [ 121.542136][ T1934] ? filldir+0x680/0x680 [ 121.546219][ T1934] ? debug_smp_processor_id+0x17/0x20 [ 121.551432][ T1934] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 121.557330][ T1934] ? irqentry_exit_to_user_mode+0x4d/0x80 [ 121.562886][ T1934] __x64_sys_getdents64+0x7b/0x90 [ 121.567742][ T1934] do_syscall_64+0x34/0x70 [ 121.571999][ T1934] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 121.577724][ T1934] RIP: 0033:0x7fcc428473a3 [ 121.581984][ T1934] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8 [ 121.601421][ T1934] RSP: 002b:00007ffcf18fb9c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 121.609663][ T1934] RAX: ffffffffffffffda RBX: 0000555555f41850 RCX: 00007fcc428473a3 [ 121.617478][ T1934] RDX: 0000000000008000 RSI: 0000555555f41850 RDI: 0000000000000005 [ 121.625286][ T1934] RBP: 0000555555f41824 R08: 0000000000000000 R09: 0000000000000000 [ 121.633096][ T1934] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0 [ 121.640932][ T1934] R13: 0000000000000010 R14: 0000555555f41820 R15: 000000000000000d [ 121.663975][ T1934] attempt to access beyond end of device [ 121.663975][ T1934] loop3: rw=524288, want=45072, limit=40427 [ 121.690945][ T1934] attempt to access beyond end of device [ 121.690945][ T1934] loop3: rw=0, want=45072, limit=40427 [ 121.908394][ T3699] attempt to access beyond end of device [ 121.908394][ T3699] loop3: rw=2049, want=40992, limit=40427 [ 121.955732][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 121.967799][ T4735] EXT4-fs (loop2): Unrecognized mount option "fsuuid=67491ed9-b1ac-0be6-52eb-fd2fdc6" or missing value [ 121.983061][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 121.994183][ T305] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.006864][ T305] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.015688][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.023906][ T305] usb 2-1: config 0 descriptor?? [ 122.059139][ T4713] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.126738][ T4753] device pim6reg1 entered promiscuous mode [ 122.327683][ T4773] syz-executor.4[4773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.327735][ T4773] syz-executor.4[4773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.393357][ T4767] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.411715][ T4767] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.418936][ T4767] device bridge_slave_0 entered promiscuous mode [ 122.425994][ T4767] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.432841][ T4767] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.449484][ T4767] device bridge_slave_1 entered promiscuous mode [ 122.600539][ T4781] device pim6reg1 entered promiscuous mode [ 122.637474][ T4767] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.644364][ T4767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.651451][ T4767] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.658229][ T4767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.672150][ T5] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.680928][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.688532][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.694537][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.697465][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.711135][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.718542][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.718683][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.732954][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.740198][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.747429][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.747516][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.754559][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.768664][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.775862][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.783041][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.790263][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.797463][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.804660][ T305] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 122.812211][ T305] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 122.820321][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.820840][ T305] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 122.828443][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.847129][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.855812][ T305] usb 2-1: USB disconnect, device number 8 [ 122.872945][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.881035][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.887902][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.904201][ T4767] device veth0_vlan entered promiscuous mode [ 122.913271][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.921539][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.929399][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.937570][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.944878][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.953312][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.972544][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.980900][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.990048][ T4767] device veth1_macvtap entered promiscuous mode [ 123.004940][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.012737][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.020990][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.029573][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.037760][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.045865][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.059692][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.072757][ T5] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.075107][ T3699] device bridge_slave_1 left promiscuous mode [ 123.081647][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.090478][ T3699] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.096160][ T5] usb 1-1: config 0 descriptor?? [ 123.107463][ T3699] device bridge_slave_0 left promiscuous mode [ 123.113551][ T3699] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.121413][ T3699] device veth1_macvtap left promiscuous mode [ 123.127312][ T3699] device veth0_vlan left promiscuous mode [ 123.736768][ T5] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 123.743997][ T5] plantronics 0003:047F:FFFF.0019: unbalanced collection at end of report description [ 123.761857][ T5] plantronics 0003:047F:FFFF.0019: parse failed [ 123.768151][ T5] plantronics: probe of 0003:047F:FFFF.0019 failed with error -22 [ 123.790482][ T4810] kvm [4809]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x3e000000a0 [ 123.878429][ T353] usb 1-1: USB disconnect, device number 11 [ 125.005648][ T1607] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 125.015851][ T353] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 125.166291][ T4854] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 125.176925][ T4854] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf, [ 125.251969][ T4858] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set [ 125.266786][ T4858] EXT4-fs (loop0): Remounting filesystem read-only [ 125.285671][ T353] usb 2-1: Using ep0 maxpacket: 32 [ 125.384516][ T1607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 125.395701][ T1607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 125.406824][ T1607] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.420040][ T1607] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.429361][ T1607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.437414][ T353] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.033010][ T1607] usb 4-1: config 0 descriptor?? [ 126.037923][ T353] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.048174][ T353] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 126.058615][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.067925][ T4842] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.168667][ T353] hub 2-1:4.0: USB hub found [ 126.268468][ T4887] syz-executor.4[4887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.268524][ T4887] syz-executor.4[4887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.407595][ T4904] request_module fs-autofs succeeded, but still no fs? [ 126.436377][ T353] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 126.591581][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.616811][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.701291][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.805848][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.813137][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.820572][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.827905][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.835201][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.842372][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.849738][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.857289][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.864628][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.871928][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.879172][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.886450][ T1607] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 126.893853][ T1607] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 126.902683][ T1607] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 126.915907][ T1607] usb 4-1: USB disconnect, device number 20 [ 126.966341][ T4909] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 126.984932][ T4909] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf, [ 127.045678][ T353] usb 2-1: USB disconnect, device number 9 [ 127.087776][ T4909] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 127.102815][ T4909] EXT4-fs (loop2): Remounting filesystem read-only [ 127.309205][ T4921] syz-executor.1[4921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.309259][ T4921] syz-executor.1[4921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.573415][ T4929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4929 comm=syz-executor.2 [ 127.603452][ T4934] incfs_lookup_dentry err:-14 [ 127.608018][ T4934] incfs: Can't find or create .incomplete dir in ./file0 [ 127.615050][ T24] audit: type=1400 audit(1718490258.020:9919): avc: denied { remove_name } for pid=4931 comm="syz-executor.4" name=".index" dev="9p" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.615360][ T4934] incfs: mount failed -14 [ 127.642314][ T24] audit: type=1400 audit(1718490258.020:9920): avc: denied { rmdir } for pid=4931 comm="syz-executor.4" name=".index" dev="9p" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.044089][ T4952] syz-executor.4[4952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.044124][ T4952] syz-executor.4[4952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.127452][ T4959] syz-executor.4[4959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.139152][ T353] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 128.158433][ T4959] syz-executor.4[4959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.195772][ T1607] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 128.236008][ T4968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4968 comm=syz-executor.0 [ 128.665593][ T1607] usb 3-1: Using ep0 maxpacket: 32 [ 128.785625][ T1607] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.796507][ T1607] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.806083][ T1607] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.814870][ T1607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.845548][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 128.856093][ T1607] hub 3-1:4.0: USB hub found [ 128.875616][ T353] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 128.884499][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.892434][ T353] usb 2-1: Product: syz [ 128.896561][ T353] usb 2-1: Manufacturer: syz [ 128.900939][ T353] usb 2-1: SerialNumber: syz [ 128.905851][ T353] usb 2-1: config 0 descriptor?? [ 129.108966][ T4993] syz-executor.3[4993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.109009][ T4993] syz-executor.3[4993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.120621][ T1607] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 129.215623][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.226360][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.235864][ T25] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.244668][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.253673][ T25] usb 5-1: config 0 descriptor?? [ 129.385572][ T353] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 129.395420][ T353] asix: probe of 2-1:0.0 failed with error -71 [ 129.401936][ T353] usb 2-1: USB disconnect, device number 10 [ 129.445554][ T323] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 129.455616][ T305] usb 3-1: USB disconnect, device number 18 [ 129.695536][ T323] usb 4-1: Using ep0 maxpacket: 8 [ 129.735781][ T25] hid (null): bogus close delimiter [ 129.815584][ T323] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 129.823780][ T323] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 129.833824][ T323] usb 4-1: config 135 has no interface number 0 [ 129.839918][ T323] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.924820][ T5010] syz-executor.1[5010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.924873][ T5010] syz-executor.1[5010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.035613][ T323] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 130.075267][ T323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.090730][ T323] usb 4-1: Product: syz [ 130.099091][ T323] usb 4-1: Manufacturer: syz [ 130.113757][ T323] usb 4-1: SerialNumber: syz [ 130.166088][ T323] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 130.172721][ T323] uvcvideo: No valid video chain found. [ 130.235655][ T25] uclogic 0003:256C:006D.001B: failed retrieving Huion firmware version: -71 [ 130.245640][ T25] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 130.253131][ T25] uclogic: probe of 0003:256C:006D.001B failed with error -71 [ 130.261455][ T25] usb 5-1: USB disconnect, device number 12 [ 130.533630][ T24] audit: type=1400 audit(1718490260.940:9921): avc: denied { ioctl } for pid=5042 comm="syz-executor.1" path="/dev/rtc0" dev="devtmpfs" ino=166 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 130.559523][ T24] audit: type=1400 audit(1718490260.970:9922): avc: denied { create } for pid=5042 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.579298][ T24] audit: type=1400 audit(1718490260.970:9923): avc: denied { accept } for pid=5042 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.629144][ T5048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5048 comm=syz-executor.1 [ 130.720073][ T24] audit: type=1400 audit(1718490261.130:9924): avc: denied { listen } for pid=4998 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.864309][ T24] audit: type=1326 audit(1718490261.270:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5065 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f820f5d0ea9 code=0x0 [ 130.977418][ T5070] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 130.986382][ T5070] ext4 filesystem being mounted at /root/syzkaller-testdir689777517/syzkaller.xMAEaR/164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 131.190232][ T24] audit: type=1400 audit(1718490261.590:9926): avc: denied { mounton } for pid=5069 comm="syz-executor.1" path="/root/syzkaller-testdir689777517/syzkaller.xMAEaR/164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 131.266437][ T24] audit: type=1400 audit(1718490261.590:9927): avc: denied { map } for pid=5069 comm="syz-executor.1" path="/root/syzkaller-testdir689777517/syzkaller.xMAEaR/164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.479014][ T5087] input: syz0 as /devices/virtual/input/input12 [ 131.538705][ T5087] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.629130][ T5087] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 131.642182][ T5087] EXT4-fs (loop2): 1 truncate cleaned up [ 131.647682][ T5087] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue [ 131.774290][ T3026] EXT4-fs error (device loop1): ext4_lookup:1827: inode #11: comm syz-executor.1: iget: checksum invalid [ 131.785932][ T3026] EXT4-fs error (device loop1): ext4_lookup:1827: inode #11: comm syz-executor.1: iget: checksum invalid [ 132.097024][ T24] audit: type=1326 audit(1718490262.510:9928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5094 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed5d5dea9 code=0x7ffc0000 [ 132.178002][ T323] usb 4-1: USB disconnect, device number 21 [ 132.254147][ T5107] xt_ecn: cannot match TCP bits for non-tcp packets [ 132.480372][ T5111] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.537364][ T7] device bridge_slave_1 left promiscuous mode [ 132.542039][ T5117] incfs: Can't find or create .index dir in ./file0 [ 132.543425][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.557502][ T7] device bridge_slave_0 left promiscuous mode [ 132.563532][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.570474][ T5117] incfs: mount failed -28 [ 132.571998][ T5118] incfs: Can't find or create .index dir in ./file0 [ 132.581326][ T5118] incfs: mount failed -28 [ 132.585644][ T7] device veth1_macvtap left promiscuous mode [ 132.591400][ T5117] incfs: Can't find or create .index dir in ./file0 [ 132.591533][ T7] device veth0_vlan left promiscuous mode [ 132.598102][ T5117] incfs: mount failed -28 [ 132.679154][ T5122] xt_CT: No such helper "netbios-ns" [ 132.882988][ T5125] 9pnet: Insufficient options for proto=fd [ 132.889485][ T5125] 9pnet: Insufficient options for proto=fd [ 132.919707][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.926674][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.933862][ T5109] device bridge_slave_0 entered promiscuous mode [ 132.940955][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.948248][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.956048][ T5109] device bridge_slave_1 entered promiscuous mode [ 133.079279][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.086274][ T5109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.093336][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.100131][ T5109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.106314][ T5132] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 133.114873][ T5132] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 133.123952][ T5132] F2FS-fs (loop4): invalid crc value [ 133.129908][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.130614][ T5132] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.143109][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.150474][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.168894][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.182403][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.189309][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.197639][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.206324][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.213198][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.234819][ T5143] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 133.372231][ T5109] device veth0_vlan entered promiscuous mode [ 133.379251][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.388186][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.389346][ T5132] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 133.396351][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.404149][ T5132] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.411051][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.421558][ T5132] attempt to access beyond end of device [ 133.421558][ T5132] loop4: rw=10241, want=45104, limit=40427 [ 133.444435][ T3162] attempt to access beyond end of device [ 133.444435][ T3162] loop4: rw=2049, want=40968, limit=40427 [ 133.477257][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.485289][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.499472][ T5109] device veth1_macvtap entered promiscuous mode [ 133.507536][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.523531][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.532147][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.604109][ T5148] input: syz0 as /devices/virtual/input/input13 [ 134.133821][ T5163] syz-executor.2[5163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.133877][ T5163] syz-executor.2[5163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.617655][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 134.617725][ T24] audit: type=1326 audit(1718490264.840:9942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 134.762214][ T5173] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 134.785832][ T5173] ext4 filesystem being mounted at /root/syzkaller-testdir2936011830/syzkaller.Lnpsp4/141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 134.825555][ T24] audit: type=1326 audit(1718490264.850:9943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 134.849861][ T24] audit: type=1326 audit(1718490264.860:9944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 134.880693][ T24] audit: type=1326 audit(1718490264.860:9945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 134.905062][ T24] audit: type=1326 audit(1718490264.860:9946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 134.930190][ T24] audit: type=1326 audit(1718490264.880:9947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 134.960394][ T5186] erofs: (device loop1): mounted with root inode @ nid 36. [ 134.981544][ T5186] erofs: (device loop1): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 135.424333][ T5201] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 135.437528][ T5203] input: syz0 as /devices/virtual/input/input14 [ 135.502438][ T3162] EXT4-fs error (device loop4): ext4_lookup:1827: inode #11: comm syz-executor.4: iget: checksum invalid [ 135.563781][ T3162] EXT4-fs error (device loop4): ext4_lookup:1827: inode #11: comm syz-executor.4: iget: checksum invalid [ 135.590284][ T5203] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.619508][ T5203] EXT4-fs (loop0): 1 truncate cleaned up [ 135.625034][ T5203] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue [ 136.075365][ T5218] syz-executor.1[5218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.075418][ T5218] syz-executor.1[5218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.105136][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.123697][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.131144][ T5215] device bridge_slave_0 entered promiscuous mode [ 136.146344][ T5226] ------------[ cut here ]------------ [ 136.148272][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.158641][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.165402][ T5226] trace type BPF program uses run-time allocation [ 136.166149][ T5215] device bridge_slave_1 entered promiscuous mode [ 136.184149][ T5226] WARNING: CPU: 1 PID: 5226 at kernel/bpf/verifier.c:10475 check_map_prog_compatibility+0x65b/0x7c0 [ 136.199009][ T5226] Modules linked in: [ 136.203233][ T5226] CPU: 1 PID: 5226 Comm: syz-executor.3 Not tainted 5.10.214-syzkaller-00187-ge6f44899ce5d #0 [ 136.213971][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 136.224289][ T5226] RIP: 0010:check_map_prog_compatibility+0x65b/0x7c0 [ 136.232184][ T5226] Code: c8 e9 84 fe ff ff e8 54 f5 ee ff 31 db e9 85 fe ff ff e8 48 f5 ee ff c6 05 7e e9 64 05 01 48 c7 c7 40 6a 45 85 e8 65 7f c2 ff <0f> 0b e9 42 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 17 fa ff [ 136.251748][ T5226] RSP: 0018:ffffc90000d16f90 EFLAGS: 00010246 [ 136.259513][ T5226] RAX: 06915e7b4d5e3e00 RBX: ffff88811f76e800 RCX: 0000000000040000 [ 136.269310][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.269509][ T5226] RDX: ffffc90001871000 RSI: 0000000000000e7e RDI: 0000000000000e7f [ 136.276273][ T5215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.284202][ T5226] RBP: ffffc90000d16fd0 R08: ffffffff81521f08 R09: 0000000000000003 [ 136.291174][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.299640][ T5226] R10: fffff520001a2d30 R11: dffffc0000000001 R12: 0000000000000011 [ 136.305762][ T5215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.320754][ T5226] R13: 1ffff92000015604 R14: ffff888110864000 R15: ffffc900000ab020 [ 136.327676][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.328803][ T5226] FS: 00007f07c181c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 136.344415][ T5226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.344556][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.351251][ T5226] CR2: 00007f07c17fbd58 CR3: 00000001009c1000 CR4: 00000000003506a0 [ 136.365844][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.365934][ T5226] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.380601][ T5226] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.388409][ T5226] Call Trace: [ 136.391655][ T5226] ? show_regs+0x58/0x60 [ 136.397534][ T5226] ? __warn+0x160/0x2f0 [ 136.401524][ T5226] ? check_map_prog_compatibility+0x65b/0x7c0 [ 136.401711][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.407528][ T5226] ? report_bug+0x3d9/0x5b0 [ 136.415577][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.419683][ T5226] ? check_map_prog_compatibility+0x65b/0x7c0 [ 136.426437][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.432336][ T5226] ? handle_bug+0x41/0x70 [ 136.439853][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.443889][ T5226] ? exc_invalid_op+0x1b/0x50 [ 136.451884][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.456308][ T5226] ? asm_exc_invalid_op+0x12/0x20 [ 136.462704][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.474780][ T5226] ? wake_up_klogd+0xb8/0xf0 [ 136.476308][ T5228] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.479254][ T5226] ? check_map_prog_compatibility+0x65b/0x7c0 [ 136.492122][ T5226] ? __fdget+0x1bc/0x240 [ 136.496251][ T5226] resolve_pseudo_ldimm64+0x586/0x1020 [ 136.501506][ T5226] ? bpf_check+0xf2b0/0xf2b0 [ 136.501904][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.505937][ T5226] ? kvmalloc_node+0x82/0x130 [ 136.505950][ T5226] bpf_check+0xaf21/0xf2b0 [ 136.505961][ T5226] ? stack_depot_save+0xe/0x10 [ 136.505973][ T5226] ? __se_sys_bpf+0x9856/0x11cb0 [ 136.505983][ T5226] ? sched_clock+0x3a/0x40 [ 136.505999][ T5226] ? bpf_get_btf_vmlinux+0x60/0x60 [ 136.506011][ T5226] ? __kernel_text_address+0x9b/0x110 [ 136.506023][ T5226] ? unwind_get_return_address+0x4d/0x90 [ 136.506039][ T5226] ? arch_stack_walk+0xf3/0x140 [ 136.556228][ T5226] ? stack_trace_save+0x113/0x1c0 [ 136.565893][ T5228] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 136.569529][ T5226] ? stack_trace_snprint+0xf0/0xf0 [ 136.578045][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.580194][ T5226] ? stack_trace_snprint+0xf0/0xf0 [ 136.592564][ T5226] ? selinux_bpf_prog_alloc+0x51/0x140 [ 136.603882][ T5226] ? selinux_bpf_prog_alloc+0x51/0x140 [ 136.611211][ T5226] ? ____kasan_kmalloc+0xed/0x110 [ 136.618877][ T5226] ? ____kasan_kmalloc+0xdb/0x110 [ 136.618978][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.624331][ T5226] ? __kasan_kmalloc+0x9/0x10 [ 136.636508][ T5226] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 136.642033][ T5226] ? selinux_bpf_prog_alloc+0x51/0x140 [ 136.647847][ T5226] ? security_bpf_prog_alloc+0x62/0x90 [ 136.653500][ T5226] ? __se_sys_bpf+0x9f8c/0x11cb0 [ 136.658628][ T5226] ? __x64_sys_bpf+0x7b/0x90 [ 136.664875][ T5226] ? do_syscall_64+0x34/0x70 [ 136.670088][ T5226] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 136.676578][ T5226] ? __kasan_kmalloc+0x9/0x10 [ 136.681340][ T5226] __se_sys_bpf+0x107a2/0x11cb0 [ 136.686218][ T5226] ? futex_wait+0x6a0/0x7c0 [ 136.691422][ T5226] ? __x64_sys_bpf+0x90/0x90 [ 136.696135][ T5226] ? do_futex+0x17b0/0x17b0 [ 136.700571][ T5226] ? do_futex+0x139a/0x17b0 [ 136.708270][ T5215] device veth0_vlan entered promiscuous mode [ 136.719489][ T5226] ? kmem_cache_free+0xa9/0x1e0 [ 136.729371][ T5226] ? ____kasan_slab_free+0x12c/0x160 [ 136.734756][ T5226] ? __kasan_slab_free+0x11/0x20 [ 136.739720][ T5226] ? slab_free_freelist_hook+0xc0/0x190 [ 136.746580][ T5226] ? futex_exit_release+0x1e0/0x1e0 [ 136.746596][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.751869][ T5226] ? kmem_cache_free+0xa9/0x1e0 [ 136.764553][ T5226] ? putname+0xe7/0x140 [ 136.768715][ T5226] ? putname+0xe7/0x140 [ 136.773425][ T5226] ? do_sys_openat2+0x5e1/0x6f0 [ 136.777623][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.785255][ T5226] ? __kasan_check_write+0x14/0x20 [ 136.787675][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.790594][ T5226] ? __se_sys_futex+0x355/0x470 [ 136.805984][ T5226] ? __fget_files+0x31e/0x380 [ 136.810483][ T5226] ? fpu__clear_all+0x20/0x20 [ 136.814988][ T5226] ? __kasan_check_read+0x11/0x20 [ 136.819934][ T5226] __x64_sys_bpf+0x7b/0x90 [ 136.824274][ T5226] do_syscall_64+0x34/0x70 [ 136.828724][ T5226] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 136.834534][ T5226] RIP: 0033:0x7f07c24a1ea9 [ 136.838819][ T5226] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 136.860066][ T5215] device veth1_macvtap entered promiscuous mode [ 136.866797][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.875303][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.884000][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.896985][ T5226] RSP: 002b:00007f07c181c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.910279][ T5226] RAX: ffffffffffffffda RBX: 00007f07c25d8f80 RCX: 00007f07c24a1ea9 [ 136.918978][ T5226] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 136.919752][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.926893][ T5226] RBP: 00007f07c2510ff4 R08: 0000000000000000 R09: 0000000000000000 [ 136.943546][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.951092][ T5226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.952951][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.968021][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.978252][ T5226] R13: 000000000000000b R14: 00007f07c25d8f80 R15: 00007ffc170f7358 [ 136.986545][ T5226] ---[ end trace f067b421137035f1 ]--- [ 137.069978][ T24] audit: type=1400 audit(1718490267.480:9948): avc: denied { append } for pid=5249 comm="syz-executor.3" name="loop3" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.443097][ T338] device bridge_slave_1 left promiscuous mode [ 137.449277][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.456583][ T338] device bridge_slave_0 left promiscuous mode [ 137.462586][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.470550][ T338] device veth1_macvtap left promiscuous mode [ 137.476458][ T338] device veth0_vlan left promiscuous mode [ 137.508532][ T5256] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 137.516562][ T5256] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 137.527056][ T5256] F2FS-fs (loop3): invalid crc value [ 137.540534][ T5256] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.569420][ T5264] device syzkaller0 entered promiscuous mode [ 137.579415][ T5256] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 137.587852][ T5256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.610032][ T5256] attempt to access beyond end of device [ 137.610032][ T5256] loop3: rw=10241, want=45104, limit=40427 [ 137.625044][ T4767] attempt to access beyond end of device [ 137.625044][ T4767] loop3: rw=2049, want=40968, limit=40427 [ 137.946670][ T1606] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.170601][ T5297] FAT-fs (loop3): Directory bread(block 64) failed [ 138.185540][ T5297] FAT-fs (loop3): Directory bread(block 65) failed [ 138.191928][ T5297] FAT-fs (loop3): Directory bread(block 66) failed [ 138.198251][ T5297] FAT-fs (loop3): Directory bread(block 67) failed [ 138.235692][ T5297] FAT-fs (loop3): Directory bread(block 68) failed [ 138.242205][ T5297] FAT-fs (loop3): Directory bread(block 69) failed [ 138.255877][ T5297] FAT-fs (loop3): Directory bread(block 70) failed [ 138.270333][ T5297] FAT-fs (loop3): Directory bread(block 71) failed [ 138.277400][ T5297] FAT-fs (loop3): Directory bread(block 72) failed [ 138.284299][ T5297] FAT-fs (loop3): Directory bread(block 73) failed [ 138.355617][ T1606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.366370][ T1606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.375863][ T1606] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.384696][ T1606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.393290][ T1606] usb 2-1: config 0 descriptor?? [ 138.399948][ T5288] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 138.407622][ T5288] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 138.416409][ T5288] F2FS-fs (loop0): invalid crc value [ 138.422894][ T5288] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.445395][ T5288] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 138.452352][ T5288] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 138.479096][ T24] audit: type=1400 audit(1718490268.890:9949): avc: denied { setattr } for pid=5287 comm="syz-executor.0" name="file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.510764][ T2075] attempt to access beyond end of device [ 138.510764][ T2075] loop0: rw=2049, want=45104, limit=40427 [ 138.669987][ T5325] erofs: (device loop2): mounted with root inode @ nid 36. [ 138.670522][ T5332] syz-executor.3[5332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.677129][ T5332] syz-executor.3[5332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.678396][ T5325] erofs: (device loop2): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 138.916732][ T1606] hid (null): bogus close delimiter [ 138.981677][ T5341] incfs_lookup_dentry err:-14 [ 138.986364][ T5341] incfs: Can't find or create .incomplete dir in ./file0 [ 138.993528][ T5341] incfs: mount failed -14 [ 139.045800][ T1235] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 139.084013][ T5344] syz-executor.3[5344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.084068][ T5344] syz-executor.3[5344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.097262][ T24] audit: type=1326 audit(1718490269.510:9950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07c24a1ea9 code=0x0 [ 139.146262][ T5339] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 139.153799][ T5339] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.162508][ T5339] F2FS-fs (loop2): invalid crc value [ 139.169084][ T5339] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.192300][ T5339] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 139.199297][ T5339] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 139.224482][ T3304] attempt to access beyond end of device [ 139.224482][ T3304] loop2: rw=2049, want=45104, limit=40427 [ 139.315577][ T1235] usb 5-1: Using ep0 maxpacket: 32 [ 139.343230][ T24] audit: type=1400 audit(1718490269.750:9951): avc: denied { connect } for pid=5353 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.416578][ T1606] uclogic 0003:256C:006D.001C: failed retrieving Huion firmware version: -71 [ 139.425520][ T1606] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 139.432888][ T1606] uclogic: probe of 0003:256C:006D.001C failed with error -71 [ 139.441104][ T1606] usb 2-1: USB disconnect, device number 11 [ 139.445652][ T1235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 139.458151][ T1235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 139.469717][ T1235] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 139.478601][ T1235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.487042][ T1235] usb 5-1: config 0 descriptor?? [ 139.512459][ T5323] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.531831][ T1235] hub 5-1:0.0: USB hub found [ 139.611629][ T5362] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.646435][ T5362] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 139.655863][ T5362] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 139.666768][ T5362] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 139.828635][ T5362] EXT4-fs error (device loop2): ext4_get_journal_inode:5243: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 139.842711][ T5362] EXT4-fs (loop2): no journal found [ 139.847794][ T5362] EXT4-fs (loop2): can't get journal size [ 139.854920][ T5362] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,jqfmt=vfsv1,barrier,noblock_validity,noload,data=writeback,,errors=continue [ 139.875893][ T1235] hub 5-1:0.0: 2 ports detected [ 139.954170][ T5387] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 139.968406][ T5387] overlayfs: upper fs does not support tmpfile. [ 139.984283][ T5390] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.017600][ T5393] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.110822][ T5393] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 140.121129][ T5393] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 140.131948][ T5393] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 140.141658][ T5393] EXT4-fs error (device loop1): ext4_get_journal_inode:5243: comm syz-executor.1: inode #1: comm syz-executor.1: iget: illegal inode # [ 140.155604][ T5393] EXT4-fs (loop1): no journal found [ 140.160654][ T5393] EXT4-fs (loop1): can't get journal size [ 140.169081][ T5393] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,jqfmt=vfsv1,barrier,noblock_validity,noload,data=writeback,,errors=continue [ 140.251229][ T5417] syz-executor.1[5417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.251279][ T5417] syz-executor.1[5417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.385544][ T2924] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 140.505549][ T5] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 140.788152][ T5420] device ip6_vti0 entered promiscuous mode [ 140.793788][ T5420] device vlan2 entered promiscuous mode [ 140.799768][ T5420] device ip6_vti0 left promiscuous mode [ 140.805746][ T2924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.816712][ T2924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.826301][ T2924] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 140.835544][ T2924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.843752][ T2924] usb 3-1: config 0 descriptor?? [ 140.895677][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.907011][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.919707][ T5] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.928627][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.936795][ T5] usb 1-1: config 0 descriptor?? [ 141.087541][ T5426] F2FS-fs (loop3): invalid crc value [ 141.093793][ T5426] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.123834][ T5426] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.429462][ T2924] hid (null): bogus close delimiter [ 141.435403][ T5] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 141.443663][ T24] audit: type=1400 audit(1718490271.850:9952): avc: denied { unlink } for pid=5425 comm="syz-executor.3" name="file0" dev="incremental-fs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.445258][ T5] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 141.482381][ T24] audit: type=1400 audit(1718490271.890:9953): avc: denied { create } for pid=5440 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 141.753977][ T5451] fuse: Bad value for 'fd' [ 141.948476][ T4767] attempt to access beyond end of device [ 141.948476][ T4767] loop3: rw=524288, want=45072, limit=40427 [ 141.959972][ T4767] attempt to access beyond end of device [ 141.959972][ T4767] loop3: rw=0, want=45072, limit=40427 [ 141.973617][ T24] audit: type=1400 audit(1718490272.390:9954): avc: denied { rmdir } for pid=4767 comm="syz-executor.3" name=".index" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 141.995891][ T2924] uclogic 0003:256C:006D.001E: failed retrieving Huion firmware version: -71 [ 142.004639][ T2924] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 142.012022][ T2924] uclogic: probe of 0003:256C:006D.001E failed with error -71 [ 142.020288][ T2924] usb 3-1: USB disconnect, device number 19 [ 142.107778][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.114634][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.121787][ T5454] device bridge_slave_0 entered promiscuous mode [ 142.128525][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.135376][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.142873][ T5454] device bridge_slave_1 entered promiscuous mode [ 142.178815][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.185705][ T5454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.192738][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.199568][ T5454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.207019][ T305] usb 5-1: USB disconnect, device number 13 [ 142.215593][ T1235] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 142.220704][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.222563][ T1235] usb 5-1-port2: attempt power cycle [ 142.234434][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.242125][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.252703][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.260749][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.267583][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.276056][ T2924] usb 1-1: USB disconnect, device number 12 [ 142.282354][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.290363][ T1607] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.297230][ T1607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.307990][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.318780][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.330563][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.341201][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.349275][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.356475][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.366047][ T5454] device veth0_vlan entered promiscuous mode [ 142.375974][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.384878][ T5454] device veth1_macvtap entered promiscuous mode [ 142.395854][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.405729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.516253][ T338] device bridge_slave_1 left promiscuous mode [ 142.522259][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.529630][ T338] device bridge_slave_0 left promiscuous mode [ 142.535816][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.543295][ T338] device veth1_macvtap left promiscuous mode [ 142.549337][ T338] device veth0_vlan left promiscuous mode [ 142.765697][ T1607] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 143.135679][ T1607] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 143.144702][ T1607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.153201][ T1607] usb 4-1: config 0 descriptor?? [ 143.258543][ T5516] incfs_lookup_dentry err:-14 [ 143.263268][ T5516] incfs: Can't find or create .incomplete dir in ./file0 [ 143.271313][ T5516] incfs: mount failed -14 [ 143.345581][ T305] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 143.373028][ T5524] syz-executor.1[5524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.373078][ T5524] syz-executor.1[5524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.610756][ T24] audit: type=1326 audit(1718490273.890:9955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 143.647777][ T24] audit: type=1326 audit(1718490273.890:9956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 143.671783][ T24] audit: type=1326 audit(1718490273.890:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 143.695664][ T24] audit: type=1326 audit(1718490273.890:9958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 143.719762][ T24] audit: type=1326 audit(1718490273.890:9959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 143.743550][ T24] audit: type=1326 audit(1718490273.900:9960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 143.767231][ T24] audit: type=1326 audit(1718490273.940:9961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2e74ea9 code=0x7ffc0000 [ 144.115300][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.127004][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.136633][ T305] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 144.145410][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.154881][ T305] usb 5-1: config 0 descriptor?? [ 144.252760][ T5541] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 144.305742][ T2924] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 144.565530][ T2924] usb 1-1: Using ep0 maxpacket: 32 [ 144.646674][ T305] hid (null): bogus close delimiter [ 144.705908][ T2924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 144.735068][ T2924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 144.784579][ T2924] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 144.793834][ T2924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.804507][ T2924] usb 1-1: config 0 descriptor?? [ 144.826227][ T5533] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 144.857880][ T2924] hub 1-1:0.0: USB hub found [ 145.027244][ T5555] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 145.075803][ T2924] hub 1-1:0.0: 2 ports detected [ 145.150639][ T5557] fscrypt: AES-128-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 145.158715][ T305] uclogic 0003:256C:006D.001F: failed retrieving Huion firmware version: -71 [ 145.178890][ T305] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 145.202430][ T305] uclogic: probe of 0003:256C:006D.001F failed with error -71 [ 145.215781][ T1607] usb 4-1: Cannot set autoneg [ 145.220352][ T1607] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 145.228932][ T1607] usb 4-1: USB disconnect, device number 22 [ 145.798496][ T305] usb 5-1: USB disconnect, device number 18 [ 146.345744][ T5595] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 146.362147][ T5595] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 146.383594][ T5595] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.419064][ T5595] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 146.426027][ T5595] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.446696][ T5595] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 146.459005][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 146.459016][ T24] audit: type=1400 audit(1718490276.870:10014): avc: denied { write } for pid=5594 comm="syz-executor.2" path="socket:[39039]" dev="sockfs" ino=39039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 146.489621][ T24] audit: type=1400 audit(1718490276.880:10015): avc: denied { nlmsg_write } for pid=5594 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 146.568831][ T5595] attempt to access beyond end of device [ 146.568831][ T5595] loop2: rw=2049, want=81920, limit=40427 [ 146.585058][ T5595] attempt to access beyond end of device [ 146.585058][ T5595] loop2: rw=2049, want=53248, limit=40427 [ 146.631313][ T5595] attempt to access beyond end of device [ 146.631313][ T5595] loop2: rw=2049, want=77824, limit=40427 [ 146.651293][ T5595] attempt to access beyond end of device [ 146.651293][ T5595] loop2: rw=2049, want=85856, limit=40427 [ 146.675594][ T2924] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 146.706745][ T3304] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 146.706804][ T3304] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 146.714569][ T3304] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 146.722080][ T3304] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 146.729634][ T3304] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 146.805607][ T24] audit: type=1326 audit(1718490277.190:10016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea624ea9 code=0x7ffc0000 [ 146.898343][ T3304] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 146.898353][ T3304] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 146.906905][ T3304] attempt to access beyond end of device [ 146.906905][ T3304] loop2: rw=2049, want=40968, limit=40427 [ 146.940805][ T24] audit: type=1326 audit(1718490277.190:10017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea624ea9 code=0x7ffc0000 [ 146.947660][ T5637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.997006][ T5637] device syzkaller0 entered promiscuous mode [ 146.999790][ T24] audit: type=1326 audit(1718490277.200:10018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01ea624ea9 code=0x7ffc0000 [ 147.026737][ T24] audit: type=1326 audit(1718490277.200:10019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea624ea9 code=0x7ffc0000 [ 147.050649][ T24] audit: type=1326 audit(1718490277.200:10020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea624ea9 code=0x7ffc0000 [ 147.074532][ T24] audit: type=1326 audit(1718490277.200:10021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f01ea624ea9 code=0x7ffc0000 [ 147.098274][ T24] audit: type=1326 audit(1718490277.350:10022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea624ea9 code=0x7ffc0000 [ 147.122069][ T24] audit: type=1326 audit(1718490277.350:10023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea624ea9 code=0x7ffc0000 [ 147.258947][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.266063][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.273168][ T5639] device bridge_slave_0 entered promiscuous mode [ 147.281668][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.288684][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.295556][ T5179] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 147.296542][ T5639] device bridge_slave_1 entered promiscuous mode [ 147.309238][ T2924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.320234][ T2924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.329857][ T2924] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 147.338863][ T2924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.347325][ T2924] usb 2-1: config 0 descriptor?? [ 147.350320][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.358995][ T5639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.366034][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.372863][ T5639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.392368][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.400195][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.407262][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.426448][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.434394][ T1607] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.441236][ T1607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.448594][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.456643][ T1607] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.463472][ T1607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.470713][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.478838][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.493150][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.508406][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.518069][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.525401][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.533995][ T5639] device veth0_vlan entered promiscuous mode [ 147.539847][ T5179] usb 5-1: Using ep0 maxpacket: 8 [ 147.550918][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.571993][ T5639] device veth1_macvtap entered promiscuous mode [ 147.583063][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.600595][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.668349][ T5179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.683746][ T5179] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 147.690472][ T1235] usb 1-1: USB disconnect, device number 13 [ 147.695762][ T5179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.708619][ T5179] usb 5-1: config 0 descriptor?? [ 147.746395][ T5179] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 147.755202][ T5179] usb 5-1: Detected SIO [ 147.759425][ T5179] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 147.769009][ T5179] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 147.860550][ T5657] input: syz0 as /devices/virtual/input/input15 [ 147.949716][ T2924] hid (null): bogus close delimiter [ 147.962986][ T5] usb 5-1: USB disconnect, device number 19 [ 147.970144][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 147.980019][ T5] ftdi_sio 5-1:0.0: device disconnected [ 148.066083][ T7] device bridge_slave_1 left promiscuous mode [ 148.072081][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.079447][ T7] device bridge_slave_0 left promiscuous mode [ 148.085400][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.092933][ T7] device veth1_macvtap left promiscuous mode [ 148.098922][ T7] device veth0_vlan left promiscuous mode [ 148.405589][ T2924] uclogic 0003:256C:006D.0020: failed retrieving Huion firmware version: -71 [ 148.414246][ T2924] uclogic 0003:256C:006D.0020: failed probing parameters: -71 [ 148.422021][ T2924] uclogic: probe of 0003:256C:006D.0020 failed with error -71 [ 148.430146][ T2924] usb 2-1: USB disconnect, device number 12 [ 148.530610][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.899282][ T5692] input: syz0 as /devices/virtual/input/input16 [ 149.797069][ T5711] tipc: Started in network mode [ 149.812468][ T5711] tipc: Own node identity ac1414aa, cluster identity 4711 [ 149.890172][ T5711] tipc: New replicast peer: 100.1.1.1 [ 149.926221][ T5711] tipc: Enabled bearer , priority 10 [ 150.775807][ T5732] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 150.783416][ T5732] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 150.796716][ T5732] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.857743][ T5750] syz-executor.4[5750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.857794][ T5750] syz-executor.4[5750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.871517][ T5732] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 150.895202][ T5732] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.909437][ T5750] FAT-fs (loop4): Directory bread(block 64) failed [ 150.916127][ T5750] FAT-fs (loop4): Directory bread(block 65) failed [ 150.922537][ T5750] FAT-fs (loop4): Directory bread(block 66) failed [ 150.928890][ T5750] FAT-fs (loop4): Directory bread(block 67) failed [ 150.935207][ T5750] FAT-fs (loop4): Directory bread(block 68) failed [ 150.941591][ T5750] FAT-fs (loop4): Directory bread(block 69) failed [ 150.948072][ T5750] FAT-fs (loop4): Directory bread(block 70) failed [ 150.954449][ T5750] FAT-fs (loop4): Directory bread(block 71) failed [ 150.960850][ T5750] FAT-fs (loop4): Directory bread(block 72) failed [ 150.967377][ T5750] FAT-fs (loop4): Directory bread(block 73) failed [ 151.045729][ T2924] tipc: 32-bit node address hash set to aa1414ac [ 151.353217][ T5762] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.378288][ T5767] syz-executor.1[5767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.378338][ T5767] syz-executor.1[5767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.390853][ T5767] syz-executor.1[5767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.403915][ T5767] syz-executor.1[5767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.536304][ T24] kauditd_printk_skb: 117 callbacks suppressed [ 151.536315][ T24] audit: type=1326 audit(1718490281.950:10141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f692e7a3627 code=0x7ffc0000 [ 151.579982][ T24] audit: type=1326 audit(1718490281.950:10142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f692e769309 code=0x7ffc0000 [ 151.604307][ T24] audit: type=1326 audit(1718490281.950:10143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f692e7a3627 code=0x7ffc0000 [ 151.628228][ T24] audit: type=1326 audit(1718490281.950:10144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f692e769309 code=0x7ffc0000 [ 151.652380][ T24] audit: type=1326 audit(1718490281.950:10145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f692e7a3627 code=0x7ffc0000 [ 151.676856][ T24] audit: type=1326 audit(1718490281.950:10146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f692e769309 code=0x7ffc0000 [ 151.708891][ T24] audit: type=1326 audit(1718490281.950:10147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f692e7a3627 code=0x7ffc0000 [ 151.771492][ T24] audit: type=1326 audit(1718490281.950:10148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f692e769309 code=0x7ffc0000 [ 151.796196][ T24] audit: type=1326 audit(1718490281.950:10149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f692e7a3627 code=0x7ffc0000 [ 151.821374][ T24] audit: type=1326 audit(1718490281.950:10150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f692e769309 code=0x7ffc0000 [ 152.635219][ T5833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.856842][ T5832] EXT4-fs (loop1): Ignoring removed orlov option [ 152.865151][ T5832] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 152.906414][ T5832] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 152.952510][ T5832] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.1: corrupt xattr in inline inode [ 152.974357][ T5832] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2204: inode #12: comm syz-executor.1: corrupted in-inode xattr [ 152.992703][ T5109] ================================================================== [ 153.000606][ T5109] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc67/0xc80 [ 153.008398][ T5109] Read of size 4 at addr ffff888134373000 by task syz-executor.1/5109 [ 153.016373][ T5109] [ 153.018558][ T5109] CPU: 0 PID: 5109 Comm: syz-executor.1 Tainted: G W 5.10.214-syzkaller-00187-ge6f44899ce5d #0 [ 153.030001][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 153.039893][ T5109] Call Trace: [ 153.043035][ T5109] dump_stack_lvl+0x1e2/0x24b [ 153.047546][ T5109] ? bfq_pos_tree_add_move+0x43b/0x43b [ 153.052834][ T5109] ? panic+0x80b/0x80b [ 153.056739][ T5109] ? ext4_mark_iloc_dirty+0x2c23/0x3e60 [ 153.062121][ T5109] print_address_description+0x81/0x3b0 [ 153.067507][ T5109] kasan_report+0x179/0x1c0 [ 153.071845][ T5109] ? __ext4_journal_ensure_credits+0x470/0x470 [ 153.077837][ T5109] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 153.083300][ T5109] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 153.088768][ T5109] __asan_report_load4_noabort+0x14/0x20 [ 153.094237][ T5109] ext4_xattr_delete_inode+0xc67/0xc80 [ 153.099542][ T5109] ? sb_end_intwrite+0x110/0x110 [ 153.104302][ T5109] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 153.110206][ T5109] ? __kasan_check_read+0x11/0x20 [ 153.115072][ T5109] ext4_evict_inode+0x1095/0x1730 [ 153.119930][ T5109] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 153.125657][ T5109] ? inode_io_list_del_locked+0x1ad/0x210 [ 153.131210][ T5109] ? _raw_spin_unlock+0x4d/0x70 [ 153.135896][ T5109] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 153.141623][ T5109] evict+0x2a3/0x6c0 [ 153.145357][ T5109] iput+0x632/0x7e0 [ 153.149002][ T5109] vfs_rmdir+0x271/0x3f0 [ 153.153080][ T5109] do_rmdir+0x2cf/0x5c0 [ 153.157077][ T5109] ? d_delete_notify+0xd0/0xd0 [ 153.161674][ T5109] ? strncpy_from_user+0x18e/0x2d0 [ 153.166622][ T5109] ? getname_flags+0x1fd/0x520 [ 153.171220][ T5109] ? __bpf_trace_sys_enter+0x62/0x70 [ 153.176344][ T5109] __x64_sys_unlinkat+0xdf/0xf0 [ 153.181026][ T5109] do_syscall_64+0x34/0x70 [ 153.185281][ T5109] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 153.191005][ T5109] RIP: 0033:0x7f2bf4909687 [ 153.195263][ T5109] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 153.214788][ T5109] RSP: 002b:00007ffd671d73c8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 153.223033][ T5109] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f2bf4909687 [ 153.230846][ T5109] RDX: 0000000000000200 RSI: 00007ffd671d8570 RDI: 00000000ffffff9c [ 153.238655][ T5109] RBP: 00007f2bf4966636 R08: 0000000000000000 R09: 0000000000000000 [ 153.246470][ T5109] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffd671d8570 [ 153.254284][ T5109] R13: 00007f2bf4966636 R14: 00000000000253e7 R15: 0000000000000007 [ 153.262096][ T5109] [ 153.264259][ T5109] The buggy address belongs to the page: [ 153.269755][ T5109] page:ffffea0004d0dcc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x134373 [ 153.279798][ T5109] flags: 0x4000000000000000() [ 153.284315][ T5109] raw: 4000000000000000 ffffea0004d895c8 ffffea0004d89508 0000000000000000 [ 153.292732][ T5109] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 153.301146][ T5109] page dumped because: kasan: bad access detected [ 153.307406][ T5109] page_owner tracks the page as freed [ 153.312611][ T5109] page last allocated via order 0, migratetype Movable, gfp_mask 0x8100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|0x8000000), pid 5829, ts 152943382165, free_ts 152989507377 [ 153.329015][ T5109] prep_new_page+0x166/0x180 [ 153.333436][ T5109] get_page_from_freelist+0x2d8c/0x2f30 [ 153.338821][ T5109] __alloc_pages_nodemask+0x435/0xaf0 [ 153.344024][ T5109] wp_page_copy+0x201/0x1940 [ 153.348462][ T5109] do_wp_page+0x71b/0xca0 [ 153.352618][ T5109] handle_pte_fault+0x1685/0x3e30 [ 153.357489][ T5109] __handle_speculative_fault+0x13a6/0x1ec0 [ 153.363205][ T5109] exc_page_fault+0x234/0x5b0 [ 153.367894][ T5109] asm_exc_page_fault+0x1e/0x30 [ 153.372574][ T5109] page last free stack trace: [ 153.377096][ T5109] free_unref_page_prepare+0x2ae/0x2d0 [ 153.382391][ T5109] free_unref_page_list+0x122/0xb20 [ 153.387423][ T5109] release_pages+0xea0/0xef0 [ 153.391848][ T5109] free_pages_and_swap_cache+0x8a/0xa0 [ 153.397143][ T5109] tlb_finish_mmu+0x177/0x320 [ 153.401655][ T5109] exit_mmap+0x312/0x5c0 [ 153.405734][ T5109] __mmput+0x95/0x2d0 [ 153.409551][ T5109] mmput+0x59/0x170 [ 153.413200][ T5109] do_exit+0xbda/0x2a50 [ 153.417199][ T5109] do_group_exit+0x141/0x310 [ 153.421620][ T5109] get_signal+0x10a0/0x1410 [ 153.425960][ T5109] arch_do_signal_or_restart+0xbd/0x17c0 [ 153.431427][ T5109] exit_to_user_mode_loop+0x9b/0xd0 [ 153.436461][ T5109] syscall_exit_to_user_mode+0xc5/0x1d0 [ 153.441927][ T5109] do_syscall_64+0x40/0x70 [ 153.446182][ T5109] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 153.451906][ T5109] [ 153.454073][ T5109] Memory state around the buggy address: [ 153.459549][ T5109] ffff888134372f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.467446][ T5109] ffff888134372f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.475346][ T5109] >ffff888134373000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 153.483234][ T5109] ^ [ 153.487148][ T5109] ffff888134373080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 153.495044][ T5109] ffff888134373100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 2024/06/15 22:24:43 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 153.502938][ T5109] ================================================================== [ 153.510837][ T5109] Disabling lock debugging due to kernel taint