last executing test programs: 25m52.303687723s ago: executing program 32 (id=425): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzCb59U9+JhURWxQDHipIt9larHpqe7GHggU9iHhoaDc1dNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7PJmuwmIWSdJPP5wOy+N2+T9747vMx7M/NIAKU1lr2kEScj4noSMdJRNhB54Vjrcyt/3LuRbUmsrr71exJJvq/9+SR/P55njkTEd5cjnqxsrnd+cen2RKNRn8vzZxemZ8/OLy6dmZqeuFW/Vb9TO/fq+Qvjr9XO1/Ys1odfffbLlatvPvvxh++/Mvl940wSF2M4L+uMY6+Mxdjad9Ip+14v7HVlBRroOPYcLJX8+A1GxNMxEpW812dGYuphoY0D+mq1ErEKlFSi/0NJtccB7bl9P+bB+9njS60J0Ob4B1rXRuJIc250bCXpmBm15ruje1B/Vsff9059kW3Rp+sQW7n/ICKe6RZ/0mzbaPMqThZ/+q/404gYz9+z/ed2Wf/YhvxBiv9iR/yXd1l/0fEDUE7Ll1on8s3nv3Rt/BNdxj/DXc5du1H0+a/3+G89/kqP8d+1Hdbx80dXPu1V1jn+y7as/vZY8L/w+EHEqa7xJ2vxJ13iz8Y913dYxxs//HalV1nR8a8+ijjddf6zfkcr2fr+5NnJqUZ9vPXatY5vvn3vy171Fx1/dvyP9Yh/q+Of7ZvdYR1fX3s03ats+/jTX4eSt5upoXzPBxMLC3O1iKHk6ub920xE2p9p/44s/hdf2Lr/d4v/aDZ32GH8s+/cXtl9/P2VxX9zl8f/kx3W8de7d5/rVVZ0/AAAAAAAAHCYpM1nOZK0upZO02q1tYb3qTiWNmbmF16anLl752brmY/RGEzbd7pHWvkky9fy52Hb+XMb8i9HxImI+LxytJmv3php3Cw6eAAAAAAAAAAAAAAAAAAAANgnjm9Y//9npbX+HyiJgaIbABRG/4fy0v+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/4fy0v8BAAAA4FA68fzyT0lE3H/9aHPLDOVlg4W2DOi3tOgGAIWpFN0AoDBu/UN5meMDyTblR3oVLG/3kwAAAAAAAAAAAADAXjl90vp/KCvr/6G8rP+H8rL+H8rLHB+w/h8AAAAAAAAAAAAA9r/h5pak1Xwt8HCkabUa8f+IGI3BZHKqUR+PiCci4sfK4P+yfK3oRgMAAAAAAAAAAAAAAAAAAMAhM7+4dHui0ajPSUhISKwliv7LBAAAAAAAAAAAAAAAAAAA5bO+6LfolgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAcdb//3//EkXHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcTP8EAAD//wugIGI=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0xfffb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 25m21.39317076s ago: executing program 33 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0xfffb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xc73f, 0x81, 0x1}) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 25m18.40120249s ago: executing program 34 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0xfffb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xc73f, 0x81, 0x1}) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 24m51.111482926s ago: executing program 35 (id=495): syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x810422, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d6d697865642c636f6465706167653d3836392c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235352c636865636b3d7374726963742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c004c21fbd23364597e61bd9e6c47bce24b3f93d831eaa8688deebdbf10d10f509bad0fabd2253225b10ce42f4dc8b613d3585bcb3b5892369a7a4e0325cb6510"], 0x25, 0x34c, &(0x7f0000001740)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x18) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x6, r5}, 0x10) socket(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) 24m45.4612095s ago: executing program 36 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzCb59U9+JhURWxQDHipIt9larHpqe7GHggU9iHhoaDc1dNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7PJmuwmIWSdJPP5wOy+N2+T9747vMx7M/NIAKU1lr2kEScj4noSMdJRNhB54Vjrcyt/3LuRbUmsrr71exJJvq/9+SR/P55njkTEd5cjnqxsrnd+cen2RKNRn8vzZxemZ8/OLy6dmZqeuFW/Vb9TO/fq+Qvjr9XO1/Ys1odfffbLlatvPvvxh++/Mvl940wSF2M4L+uMY6+Mxdjad9Ip+14v7HVlBRroOPYcLJX8+A1GxNMxEpW812dGYuphoY0D+mq1ErEKlFSi/0NJtccB7bl9P+bB+9njS60J0Ob4B1rXRuJIc250bCXpmBm15ruje1B/Vsff9059kW3Rp+sQW7n/ICKe6RZ/0mzbaPMqThZ/+q/404gYz9+z/ed2Wf/YhvxBiv9iR/yXd1l/0fEDUE7Ll1on8s3nv3Rt/BNdxj/DXc5du1H0+a/3+G89/kqP8d+1Hdbx80dXPu1V1jn+y7as/vZY8L/w+EHEqa7xJ2vxJ13iz8Y913dYxxs//HalV1nR8a8+ijjddf6zfkcr2fr+5NnJqUZ9vPXatY5vvn3vy171Fx1/dvyP9Yh/q+Of7ZvdYR1fX3s03ats+/jTX4eSt5upoXzPBxMLC3O1iKHk6ub920xE2p9p/44s/hdf2Lr/d4v/aDZ32GH8s+/cXtl9/P2VxX9zl8f/kx3W8de7d5/rVVZ0/AAAAAAAAHCYpM1nOZK0upZO02q1tYb3qTiWNmbmF16anLl752brmY/RGEzbd7pHWvkky9fy52Hb+XMb8i9HxImI+LxytJmv3php3Cw6eAAAAAAAAAAAAAAAAAAAANgnjm9Y//9npbX+HyiJgaIbABRG/4fy0v+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/4fy0v8BAAAA4FA68fzyT0lE3H/9aHPLDOVlg4W2DOi3tOgGAIWpFN0AoDBu/UN5meMDyTblR3oVLG/3kwAAAAAAAAAAAADAXjl90vp/KCvr/6G8rP+H8rL+H8rLHB+w/h8AAAAAAAAAAAAA9r/h5pak1Xwt8HCkabUa8f+IGI3BZHKqUR+PiCci4sfK4P+yfK3oRgMAAAAAAAAAAAAAAAAAAMAhM7+4dHui0ajPSUhISKwliv7LBAAAAAAAAAAAAAAAAAAA5bO+6LfolgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAcdb//3//EkXHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcTP8EAAD//wugIGI=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0xfffb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xc73f, 0x81, 0x1}) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 24m45.280776315s ago: executing program 37 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0xfffb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 21m21.841236197s ago: executing program 38 (id=1126): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) recvfrom$inet(r0, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f00000017c0), 0x0, 0x4040880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2d0, 0x0, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000400), {[{{@arp={@local, @multicast2, 0xffffff00, 0xffffff00, 0x10, 0xb, {@mac=@remote, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xb6d, 0x6, 0x0, 0x0, 0x7, 0x0, 'veth0_to_hsr\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x0, 0x390}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000280)=0x80000000, 0x4) 20m7.801808913s ago: executing program 39 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0xfffb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 18m19.462554557s ago: executing program 40 (id=1645): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) recvfrom$inet(r0, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0), 0x0, 0x4040880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2d0, 0x0, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000400), {[{{@arp={@local, @multicast2, 0xffffff00, 0xffffff00, 0x10, 0xb, {@mac=@remote, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xb6d, 0x6, 0x0, 0x0, 0x7, 0x0, 'veth0_to_hsr\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x0, 0x390}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r6) 15m40.106875508s ago: executing program 41 (id=2151): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) rename(&(0x7f0000000040)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0xee01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r5, 0x0) getuid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) 15m33.179643828s ago: executing program 8 (id=2185): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) recvfrom$inet(r0, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f00000017c0), 0x0, 0x4040880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2d0, 0x0, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000400), {[{{@arp={@local, @multicast2, 0xffffff00, 0xffffff00, 0x10, 0xb, {@mac=@remote, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xb6d, 0x6, 0x0, 0x0, 0x7, 0x0, 'veth0_to_hsr\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x0, 0x390}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r7) 15m32.637236592s ago: executing program 8 (id=2187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='initcall_level\x00', r0, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 15m16.3423824s ago: executing program 42 (id=2187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='initcall_level\x00', r0, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 13m31.204622105s ago: executing program 43 (id=2510): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x40, &(0x7f00000003c0)={[{@errors_remount}]}, 0x1, 0x58a, &(0x7f0000001380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x2062, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x10000, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r0, 0x11, 0xffc, 0x6d8) 13m18.085546886s ago: executing program 44 (id=2801): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x12000021) r3 = dup(r1) read$FUSE(r3, &(0x7f0000001e00)={0x2020}, 0x2020) inotify_rm_watch(r3, r2) 13m16.005119395s ago: executing program 45 (id=2831): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x10, 0x10800, 0x8000) 13m14.167996223s ago: executing program 46 (id=2856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001900)={0x20, r1, 0x2d1904d3112073a9, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000004}, 0x8040) 12m53.710667978s ago: executing program 47 (id=3001): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20, 0xfffffffffffffffe, r1, {0x7f, 0x4, 0x6, 0x785b4d72}}, 0x20) 12m51.746936367s ago: executing program 48 (id=3012): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") r0 = dup(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000"], 0x0, 0x56}, 0x28) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 12m50.695223082s ago: executing program 49 (id=3026): mount$cgroup2(0x0, 0x0, 0x0, 0x990a81474b92c3e, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 12m50.415210284s ago: executing program 8 (id=3002): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) 12m50.279078795s ago: executing program 8 (id=3030): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 12m50.157264265s ago: executing program 8 (id=3031): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 12m49.97093971s ago: executing program 8 (id=3033): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x3, 0x2004c8, 0xdc3, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x400, 0x1], 0xeeef0000, 0x6200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m49.825564303s ago: executing program 50 (id=3033): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x3, 0x2004c8, 0xdc3, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x400, 0x1], 0xeeef0000, 0x6200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m34.178736721s ago: executing program 3 (id=3337): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000001080)={[{@test_dummy_encryption_v1}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nodiscard}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x46c, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) pipe2(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x407, 0xa0018ce0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x5b, r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080004afc54ee07b8af8ff00000000bfa200750a83973d213f94a5000000000007020000f8ffffffb703000008000000b704000000000000e7ab85000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964"], 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x18, r4, 0x1, 0x1, 0xfffffffd, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 11m27.559101386s ago: executing program 3 (id=3347): rt_sigprocmask(0x1, &(0x7f0000003680)={[0x5]}, 0x0, 0x8) syz_usb_connect(0x0, 0x64, &(0x7f0000001e00)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a24010000000201020524040000090500000000000000072501000000000725010000000009050000"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xaf, &(0x7f00000020c0)=""/175}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x81, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) r4 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000380)=r4) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="aa01000000f6ba20f1b18ebc8e698686e897dfc960534b9b14ea76fcd5153c285ebd2e9ac72ce94d60a651108bec69f8dc4ae3b9c5cd0998da804a7a903494a10f5c02b3e1937a7c62874513d46cbfa2fd2f9bddf8a50a6c2a13732c081ef140294779fb773de7317350d6c735e5096c527f3d30af2245290d1d43ebb8f0d766109ec8df2c46e75d85ebbf", 0x8b}], 0x1, &(0x7f0000000380)}, 0x40010) 11m22.802263661s ago: executing program 3 (id=3352): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 11m19.61102398s ago: executing program 3 (id=3359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004002307c87f95ff7331000004000000090000000000000058132b770f9be6d5f981c46bea77d03379528d2d81b273efbd438e0065b48073d0684118d2c9b8dcdb7eda066d43ba274d14fecc752c7550c006b2057648893abf26a41e0d561d00f9e91b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7e, 0x4, 0x9, 0x20000, 0xffffffffffffffff, 0x6cc9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000d40), 0x0}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) 11m18.476091561s ago: executing program 3 (id=3362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x75) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@empty, @private=0xa010102, 0xffffff00, 0x0, 0xd, 0x8, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x6, 0x10, 0x6, 0x80, 0x1, 0x6, 'rose0\x00', 'veth1_to_team\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}}}, {{@arp={@local, @loopback, 0xff, 0xff, 0x5, 0x10, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x5, 0x77b, 0x4, 0x100, 0x9, 0x80, 'nr0\x00', 'syzkaller0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast1, @loopback, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x15) r7 = dup(r6) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 11m17.355303482s ago: executing program 3 (id=3369): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) rename(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, 0xee01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r7, 0x1, 0x0, @void}, 0x10) 11m1.762260543s ago: executing program 51 (id=3369): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) rename(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, 0xee01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r7, 0x1, 0x0, @void}, 0x10) 10m12.522115276s ago: executing program 6 (id=3587): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x198, 0x4, 0x9, 0x2, 0x68}, 0xb, 0x1, 0x5, 0x1, 0x5, 0x16, 0x15, 0x1d, 0x6, 0x4, {0x5, 0xb, 0x41, 0x0, 0x16, 0x3ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[], 0x1c}], 0x1}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r9, &(0x7f0000000c40)={0x2000000b}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f00000000c0)) pidfd_getfd(0xffffffffffffffff, r7, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@abort}, {@noload}, {@dioread_nolock}, {@usrquota}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbbd, &(0x7f0000000600)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 10m9.434494996s ago: executing program 6 (id=3594): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x0, 0x80000) recvfrom$inet(r0, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0), 0x0, 0x4040880) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2d0, 0x0, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000400), {[{{@arp={@local, @multicast2, 0xffffff00, 0xffffff00, 0x10, 0xb, {@mac=@remote, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xb6d, 0x6, 0x0, 0x0, 0x7, 0x0, 'veth0_to_hsr\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x0, 0x390}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) 9m54.766741463s ago: executing program 6 (id=3639): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000001380)=""/74, 0x4a}, {&(0x7f0000001400)=""/143, 0x8f}, {&(0x7f00000014c0)=""/94, 0x5e}], 0x8}, 0x6e04}, {{0x0, 0x0, &(0x7f0000002b40)=[{0x0}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000001840)=""/82, 0x52}, {&(0x7f0000001940)=""/170, 0xaa}, {&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/157, 0x9d}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x7}, 0x1}], 0x3, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r9}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 9m50.872690378s ago: executing program 6 (id=3643): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, 0x0) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)) 9m50.415126465s ago: executing program 6 (id=3647): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) 9m50.286465195s ago: executing program 6 (id=3649): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x0, 0x80000) recvfrom$inet(r0, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0), 0x0, 0x4040880) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2d0, 0x0, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000400), {[{{@arp={@local, @multicast2, 0xffffff00, 0xffffff00, 0x10, 0xb, {@mac=@remote, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xb6d, 0x6, 0x0, 0x0, 0x7, 0x0, 'veth0_to_hsr\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x0, 0x390}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) 9m34.592084825s ago: executing program 52 (id=3649): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x0, 0x80000) recvfrom$inet(r0, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0), 0x0, 0x4040880) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2d0, 0x0, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000400), {[{{@arp={@local, @multicast2, 0xffffff00, 0xffffff00, 0x10, 0xb, {@mac=@remote, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xb6d, 0x6, 0x0, 0x0, 0x7, 0x0, 'veth0_to_hsr\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x0, 0x390}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) 9m9.245514835s ago: executing program 2 (id=3772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x4000cdd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x6f, 0x6, "3459b45d31a141f7cbae34f218e215f1bcb946953ea4e4e41c948a040153beb7f4107c8219a069b9af1ff9a06bdb9272c7b9674ce2497e6f734f8858c00ceb44124a0635aec2d371ca878c7e674313815be35cb683b8520d33ba3eb7ba4ed13a017fecef1681d9f6ebfb8d"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e00, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000000000000007000000862000000002001a"], 0x30}, 0x48d0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 9m8.437795901s ago: executing program 2 (id=3774): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/57, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000680)=0x41) 9m8.329618679s ago: executing program 2 (id=3776): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000400)=0x13) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x3d18, 0x0, 0x0, 0x7, 0x14, "000100000000000064930000000000000100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x6, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x1d00c15, 0x0, 0x6, 0x0, &(0x7f0000000000)) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 9m6.572184041s ago: executing program 2 (id=3778): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000001080)={[{@test_dummy_encryption_v1}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nodiscard}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x46c, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) pipe2(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x407, 0xa0018ce0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x5b, r4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080004afc54ee07b8af8ff00000000bfa200750a83973d213f94a5000000000007020000f8ffffffb703000008000000b704000000000000e7ab85000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964"], 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x18, r6, 0x1, 0x1, 0xfffffffd, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 9m5.314079043s ago: executing program 2 (id=3785): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 9m5.285249895s ago: executing program 2 (id=3786): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000001380)=""/74, 0x4a}, {&(0x7f0000001400)=""/143, 0x8f}, {&(0x7f00000014c0)=""/94, 0x5e}], 0x8}, 0x6e04}, {{0x0, 0x0, &(0x7f0000002b40)=[{0x0}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000001840)=""/82, 0x52}, {&(0x7f0000001940)=""/170, 0xaa}, {&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/157, 0x9d}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x7}, 0x1}], 0x3, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000440)=[{&(0x7f0000000140)}], 0x1, 0x0) r7 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r9}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 8m49.740640173s ago: executing program 53 (id=3786): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000001380)=""/74, 0x4a}, {&(0x7f0000001400)=""/143, 0x8f}, {&(0x7f00000014c0)=""/94, 0x5e}], 0x8}, 0x6e04}, {{0x0, 0x0, &(0x7f0000002b40)=[{0x0}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000001840)=""/82, 0x52}, {&(0x7f0000001940)=""/170, 0xaa}, {&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/157, 0x9d}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x7}, 0x1}], 0x3, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000440)=[{&(0x7f0000000140)}], 0x1, 0x0) r7 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r9}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 1m22.301862335s ago: executing program 7 (id=4838): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000001080)={[{@test_dummy_encryption_v1}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nodiscard}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x46c, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x5b, r4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000340)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080004afc54ee07b8af8ff00000000bfa200750a83973d213f94a5000000000007020000f8ffffffb703000008000000b704000000000000e7ab85000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m19.840247004s ago: executing program 7 (id=4841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) 1m18.303859088s ago: executing program 7 (id=4844): socket$vsock_stream(0x28, 0x1, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x801) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) fcntl$setpipe(r3, 0x407, 0x2000000) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000440)=0xffff, 0x4) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1m16.91076491s ago: executing program 7 (id=4849): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5a48487795104f157aff06b58b8d3", 0x8f}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c7984d2e7a6fa33748b6729b3ff9b59edf8f98e8ae7521b231410b752a4b3bdc57b6dc866405f0", 0x97}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="6d2657493131db30447fce55af67ac7f10106db6d5cacd06cd9a77b801ded29e208feef1fc2a5bbf1c2783c821e1d0c07bbb11ed8ebb37d0dbcfac913bf604dd833dd7fd2cbd028227ddfaec1d73aed98147250dac77ea7c6603f217dd6648ef9dd91e3fc2f0f7d40cbd9199b32b62d89c1c1cb6ce18e744658c1c50fdba612b6ff093a3c8d0b813aef1aa5ed0c1ed82ae1eaaada03e42b1c201a707e1252787a92233487cb9785113e3", 0xaa}, {&(0x7f00000025c0)="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", 0xf6a}], 0x5}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="722abe089bad444a712571d5db482a97046f64a6e9f378fbfeeec001e410", 0x1e}, {&(0x7f00000008c0)="3c79412e1982c663c230408536db37b8bc69eaf6013960b0fe0d8b18225e34008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e62a7a249feff2092ade32b7f3da4bfd132b4ef59b4d4157c24b464dfbd6383b01950d6502411ec4161d7c33c21eae64d", 0x6e}, {&(0x7f0000001a40)="f6ebd69cb61b04dbd8e4dc5f132da95cea069c4cf1c50489523f8e2bfaf472441fc9ebaebd435dc0be7c9fa1dae115b46dfffa947c43edc40e0b95cc166de9fde1ec361ce6d6a73600b2d484b8457469b28fb04cb38d8a13e483efc4f4102fe6accce43ef76ae1bf1f34d051501c250a10a879323c67e9e14be35a0f", 0x7c}], 0x3}}], 0x2, 0x4000040) 1m16.457923157s ago: executing program 7 (id=4850): socket$vsock_stream(0x28, 0x1, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrusage(0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r6, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="080000000000000000000000007e5100850000008c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x801) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") 1m11.505611996s ago: executing program 7 (id=4859): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) rename(&(0x7f0000000040)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0xee01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r5, 0x0) getuid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, r7, 0x1, 0x0, @void}, 0x10) connect$unix(r7, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") 56.281148433s ago: executing program 54 (id=4859): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) rename(&(0x7f0000000040)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0xee01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r5, 0x0) getuid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, r7, 0x1, 0x0, @void}, 0x10) connect$unix(r7, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") 14.477191963s ago: executing program 1 (id=4951): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000200)='\xf7\xa6\x05\x00;\n\xa4\xa6\x17D\xc6M\xa3\x03\xa9\xb0\xed\xf8\x00\x00\x00\x00\x00\x00\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xc6?\x1b\xb5\x96\xc0i\xdb\xa6\x18\x9f\"\xe3\xce\x18\xb8\xfa&x\xd6\x12\x100\xd6\x18>\xbb\xec1\xe4\x0eY\xd8\xa0D\xb6\xe5m.B\x00aO\xb6\xbdg\xe7\xa7\xe7XM\xcex\x159\xaf\x97\xe3\x87\x00\xda\xefc\xea)\xe9\x19\x86\x87\xe1\xf6ot\ak\x0f\xf7\xb5\b\xd4Jk\x9d\x1c|\xb2@\x17z\xed\xec\x8c\xa8\xbc\xc8\xa4)\x8e\xb80\xec\x1a\xf6\xecu\x93\xd9D\xf4\xbd\xc6q\xd1\xfb\x00\xce6;\x8e\x1b\xce\x05\xf5%\x87m*\xcd\x87r\x10\x81\xb29\x01\x025\x16\x00\x00\x00\x00\x00\x00\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 12.714674755s ago: executing program 5 (id=4952): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r6, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="080000000000000000000000007e5100850000008c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x801) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") 10.891091742s ago: executing program 4 (id=4960): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) pipe2(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x407, 0xa0018ce0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x5b, r4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080004afc54ee07b8af8ff00000000bfa200750a83973d213f94a5000000000007020000f8ffffffb703000008000000b704000000000000e7ab85000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r7, 0x0, 0x4000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x18, r6, 0x1, 0x1, 0xfffffffd, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 10.890591523s ago: executing program 0 (id=4961): clock_nanosleep(0x2, 0xfcfdffff, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x64000600) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x3, 0x0) timer_create(0x2, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 9.894100303s ago: executing program 0 (id=4962): socket$vsock_stream(0x28, 0x1, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrusage(0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r6, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="080000000000000000000000007e5100850000008c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") 9.713821357s ago: executing program 4 (id=4963): sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400"/21], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14, 0x80800) sendto$packet(r3, &(0x7f0000000280)="4f1f2475c2a91d513764fa5072252ea27b933c4d78dfedd5002d312b4b6fd2c56faebc1eb385802c11b6648a564aeb6321649a9f00e2e3", 0x37, 0x8080, &(0x7f0000000300)={0x11, 0x7, 0x0, 0x1, 0x77}, 0x14) pipe2(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 8.337479018s ago: executing program 4 (id=4964): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000200)='\xf7\xa6\x05\x00;\n\xa4\xa6\x17D\xc6M\xa3\x03\xa9\xb0\xed\xf8\x00\x00\x00\x00\x00\x00\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xc6?\x1b\xb5\x96\xc0i\xdb\xa6\x18\x9f\"\xe3\xce\x18\xb8\xfa&x\xd6\x12\x100\xd6\x18>\xbb\xec1\xe4\x0eY\xd8\xa0D\xb6\xe5m.B\x00aO\xb6\xbdg\xe7\xa7\xe7XM\xcex\x159\xaf\x97\xe3\x87\x00\xda\xefc\xea)\xe9\x19\x86\x87\xe1\xf6ot\ak\x0f\xf7\xb5\b\xd4Jk\x9d\x1c|\xb2@\x17z\xed\xec\x8c\xa8\xbc\xc8\xa4)\x8e\xb80\xec\x1a\xf6\xecu\x93\xd9D\xf4\xbd\xc6q\xd1\xfb\x00\xce6;\x8e\x1b\xce\x05\xf5%\x87m*\xcd\x87r\x10\x81\xb29\x01\x025\x16\x00\x00\x00\x00\x00\x00\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 8.103470447s ago: executing program 9 (id=4965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 7.32168627s ago: executing program 0 (id=4966): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.139980025s ago: executing program 4 (id=4967): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x3c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x7, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2, 0x0, 0x0, 0x49c7}]}}]}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 7.139000505s ago: executing program 1 (id=4968): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) rename(&(0x7f0000000040)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0xee01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r5, 0x0) getuid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = fsmount(r7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, r8, 0x1, 0x0, @void}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") 6.914872463s ago: executing program 5 (id=4969): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000001080)={[{@test_dummy_encryption_v1}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nodiscard}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x46c, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, r4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800"], 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x18, r6, 0x1, 0x1, 0xfffffffd, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 5.70575005s ago: executing program 4 (id=4970): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000001380)=""/74, 0x4a}, {&(0x7f0000001400)=""/143, 0x8f}, {&(0x7f00000014c0)=""/94, 0x5e}], 0x7}, 0x6e04}, {{0x0, 0x0, &(0x7f0000002b40)=[{0x0}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000001840)=""/82, 0x52}, {&(0x7f0000001940)=""/170, 0xaa}, {&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/157, 0x9d}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x7}, 0x1}], 0x3, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000440)=[{&(0x7f0000000140)="3bbfc95d55dc7273f71fa1256c7a400004f30d77", 0x14}], 0x1, 0x0) r7 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00"/11], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r9}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$key(0xf, 0x3, 0x2) 5.355807438s ago: executing program 9 (id=4971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) symlinkat(0x0, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.22290031s ago: executing program 1 (id=4972): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000300)={0x20, 0xe, 0x3, "0000fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x24, 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080)=0x3) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) 3.404469376s ago: executing program 9 (id=4973): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x24020400) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) r7 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000040), 0x1c) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="7961000000000000000f7e0000000800fbff2cd63835e46a541928a62c6bd24f6a46542966ec802264958bed0f1b98850ddc5ad23c812278d5a7c9ccb4a39e038a3a090f55a47c0e7289c08339cae0", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="20002bbd7000ffdbdf25130000000c00990004000000230000000800a4000300000014001180040001000400010004000400040003000600b500b60400a821d1e3654caf243911b313fcf1000600"], 0x54}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r9 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_SET_PHYS(r10, 0x4008556c, 0x0) 3.404264166s ago: executing program 0 (id=4974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.191533235s ago: executing program 4 (id=4975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00') 1.179718705s ago: executing program 5 (id=4976): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r4, 0x25, 0x0, @void}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6, 0x0, @void}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) listen(r0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8) close(r7) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r8, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/62, 0x3e}], 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0xffff, 0xfff9}, {0x0, 0xe}}, [{0x8, 0xb, 0xfffffffe}]}, 0x2c}}, 0x4040) 737.159061ms ago: executing program 5 (id=4977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 362.782111ms ago: executing program 1 (id=4978): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x20, 0x0, 0x800040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x4) 346.393222ms ago: executing program 9 (id=4979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001c00018028bd7000fcdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="200080060800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x840) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="808beb668240", 0xffffff33}], 0x1, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x8, 0x20a, &(0x7f0000000640)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x121) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r7}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fbff0000000000"], 0x48) 244.483691ms ago: executing program 0 (id=4980): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) gettid() close_range(r0, 0xffffffffffffffff, 0x0) 175.625666ms ago: executing program 1 (id=4981): sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400"/21], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14, 0x80800) sendto$packet(r3, &(0x7f0000000280)="4f1f2475c2a91d513764fa5072252ea27b933c4d78dfedd5002d312b4b6fd2c56faebc1eb385802c11b6648a564aeb6321649a9f00e2e3", 0x37, 0x8080, &(0x7f0000000300)={0x11, 0x7, 0x0, 0x1, 0x77}, 0x14) pipe2(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) 0s ago: executing program 9 (id=4982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000020000040800000000000000030000000000000000000000020000"], 0x0, 0x56}, 0x28) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): : "xino" feature enabled using 2 upper inode bits. [ 1513.938953][ T369] usb 8-1: Using ep0 maxpacket: 8 [ 1513.982575][T14527] 9pnet: Insufficient options for proto=fd [ 1515.067996][ T369] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1515.928280][ T369] usb 8-1: config 0 has no interface number 0 [ 1516.078477][T14541] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1516.090094][T14541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1516.387063][T14544] fuse: Bad value for 'fd' [ 1516.509304][ T369] usb 8-1: string descriptor 0 read error: -71 [ 1516.515893][ T369] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1516.525188][ T369] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.534889][ T369] usb 8-1: config 0 descriptor?? [ 1516.696238][ T369] usb 8-1: can't set config #0, error -71 [ 1516.852974][T14551] overlayfs: failed to resolve './file1': -2 [ 1516.855764][ T369] usb 8-1: USB disconnect, device number 28 [ 1517.013716][T14546] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1517.215511][T14556] syz.1.4231[14556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1517.217293][T14556] syz.1.4231[14556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1520.655139][T14268] print_req_error: 20 callbacks suppressed [ 1520.655181][T14268] blk_update_request: I/O error, dev loop7, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1520.689589][T14279] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1520.813773][T14279] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1522.267988][T14268] blk_update_request: I/O error, dev loop7, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1522.279787][T14279] buffer_io_error: 16 callbacks suppressed [ 1522.279810][T14279] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 1522.353748][T14568] syz.7.4233[14568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1522.354525][T14568] syz.7.4233[14568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1522.469922][T14268] Buffer I/O error on dev loop7p3, logical block 8, async page read [ 1522.591720][T14567] 9pnet: Insufficient options for proto=fd [ 1522.618784][T14568] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1522.631777][T14568] EXT4-fs error (device loop7): ext4_orphan_get:1421: comm syz.7.4233: bad orphan inode 13 [ 1522.643915][T14568] ext4_test_bit(bit=12, block=18) = 1 [ 1522.649647][T14568] is_bad_inode(inode)=0 [ 1522.654237][T14568] NEXT_ORPHAN(inode)=2130706432 [ 1522.659245][T14568] max_ino=32 [ 1522.662574][T14568] i_nlink=1 [ 1522.666343][T14568] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1524.463300][T14581] 9pnet: Insufficient options for proto=fd [ 1525.292794][T12009] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1525.395912][T14589] device wg2 entered promiscuous mode [ 1526.831653][T14595] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1527.427879][T12009] usb 2-1: device descriptor read/all, error -71 [ 1527.472320][T14279] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1527.505328][T14268] blk_update_request: I/O error, dev loop7, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1527.528645][T14279] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1527.560685][T14268] blk_update_request: I/O error, dev loop7, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1527.568600][T14279] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 1527.580606][T14268] Buffer I/O error on dev loop7p3, logical block 8, async page read [ 1527.590868][T14268] blk_update_request: I/O error, dev loop7, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1527.602199][T14268] Buffer I/O error on dev loop7p3, logical block 9, async page read [ 1527.610531][T14268] blk_update_request: I/O error, dev loop7, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1527.622473][T14268] Buffer I/O error on dev loop7p3, logical block 10, async page read [ 1527.631341][T14279] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1527.642848][T14597] loop9: p1 < > p3 [ 1527.649209][T14597] loop9: p3 size 134217728 extends beyond EOD, truncated [ 1527.655034][T14268] blk_update_request: I/O error, dev loop7, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1527.659589][T14279] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 1527.667902][T14268] Buffer I/O error on dev loop7p3, logical block 11, async page read [ 1527.687132][T14268] blk_update_request: I/O error, dev loop7, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1527.697029][T14279] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1527.698746][T14268] Buffer I/O error on dev loop7p3, logical block 12, async page read [ 1527.726009][T14268] Buffer I/O error on dev loop7p3, logical block 13, async page read [ 1527.734418][T14268] Buffer I/O error on dev loop7p3, logical block 14, async page read [ 1527.742985][T14279] Buffer I/O error on dev loop7p1, logical block 0, async page read [ 1528.002048][T14268] udevd[14268]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1528.025552][T14279] udevd[14279]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1528.094580][T14614] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1528.128857][T14614] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1528.687906][T14618] EXT4-fs (loop9): mounted filesystem without journal. Opts: abort,noload,dioread_nolock,usrquota,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1528.869113][T14618] EXT4-fs error (device loop9): ext4_remount:5878: Abort forced by user [ 1528.877955][T14618] EXT4-fs (loop9): Remounting filesystem read-only [ 1528.885658][T14618] EXT4-fs (loop9): re-mounted. Opts: (null) [ 1529.331739][T14626] syz.9.4250[14626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1529.331859][T14626] syz.9.4250[14626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1529.366716][T14624] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4247'. [ 1529.453288][T14627] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1529.488865][T14627] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1529.751656][T14627] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1529.759744][T14622] overlayfs: failed to resolve './file1': -2 [ 1529.817918][T14627] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1529.870726][T14627] EXT4-fs (loop9): 1 truncate cleaned up [ 1529.876470][T14627] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1529.963376][T14633] loop7: p1 < > p3 [ 1529.969776][T14633] loop7: p3 size 134217728 extends beyond EOD, truncated [ 1530.021975][ T95] loop7: p1 < > p3 [ 1530.038157][ T95] loop7: p3 size 134217728 extends beyond EOD, truncated [ 1532.084834][T14660] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1532.095457][T14660] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1532.111821][T14660] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1532.140724][T14660] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1532.156259][T14660] EXT4-fs (loop9): 1 truncate cleaned up [ 1532.167294][T14660] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1532.203319][T14660] syz.9.4259[14660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1532.203441][T14660] syz.9.4259[14660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1532.458034][T14672] overlayfs: failed to resolve './file1': -2 [ 1533.211081][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 1533.211118][ T24] audit: type=1326 audit(1754394896.830:11055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1533.251253][ T24] audit: type=1326 audit(1754394896.870:11056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1533.281176][ T24] audit: type=1326 audit(1754394896.870:11057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1533.305466][ T24] audit: type=1326 audit(1754394896.870:11058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1533.316693][T14693] syz.9.4264[14693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1533.413599][T14694] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1533.445894][T14694] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4269'. [ 1533.529806][ T24] audit: type=1326 audit(1754394896.870:11059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1533.596553][T14693] syz.9.4264[14693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1533.664934][ T24] audit: type=1326 audit(1754394896.870:11060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1533.727931][ T24] audit: type=1326 audit(1754394896.930:11061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1534.097561][T14693] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1534.125521][T14693] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1534.153524][T14693] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1534.161323][T14693] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1534.174347][T14693] EXT4-fs (loop9): 1 truncate cleaned up [ 1534.181239][T14693] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1534.217913][ T24] audit: type=1326 audit(1754394896.930:11062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1534.277986][ T24] audit: type=1326 audit(1754394896.960:11063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f296428076b code=0x7ffc0000 [ 1534.320472][T14706] syz.4.4272[14706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1534.320747][T14706] syz.4.4272[14706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1534.395551][T14700] syz.0.4273[14700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1534.401607][ T24] audit: type=1326 audit(1754394896.960:11064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f296428076b code=0x7ffc0000 [ 1534.407854][T14700] syz.0.4273[14700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1534.626010][T14703] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue [ 1534.708899][T14703] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1536.508669][T14718] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1536.548699][T14718] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1536.889623][T14721] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1536.906944][T14721] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1537.194695][T14739] syz.1.4278[14739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1537.194817][T14739] syz.1.4278[14739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1537.249846][T14741] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1537.949431][T14747] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1537.956964][T14747] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1539.373001][T14761] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1539.396426][T14761] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4282'. [ 1539.409282][T12520] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1539.938419][T12520] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1539.997867][T12520] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.040901][T12520] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1540.669613][T12520] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1540.740603][T12520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.848758][T14771] EXT4-fs (loop9): mounted filesystem without journal. Opts: abort,noload,dioread_nolock,usrquota,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1540.948098][T14771] EXT4-fs error (device loop9): ext4_remount:5878: Abort forced by user [ 1540.956721][T14771] EXT4-fs (loop9): Remounting filesystem read-only [ 1540.966365][T14771] EXT4-fs (loop9): re-mounted. Opts: (null) [ 1541.092669][T12520] usb 1-1: Product: syz [ 1541.189338][T12520] usb 1-1: Manufacturer: syz [ 1541.195363][T12520] usb 1-1: SerialNumber: syz [ 1541.321713][T12520] usb 1-1: config 0 descriptor?? [ 1541.369161][T12520] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1541.393395][T12520] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1541.619454][T12520] usb 1-1: USB disconnect, device number 47 [ 1541.904810][T14786] overlayfs: missing 'workdir' [ 1542.021083][T14788] device wg2 entered promiscuous mode [ 1542.244860][T14793] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1542.497824][ T8180] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1542.858182][ T8180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.888106][ T8180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.917865][ T8180] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1542.967836][ T8180] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1543.007464][ T8180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.158880][ T8180] usb 1-1: config 0 descriptor?? [ 1544.712900][T14792] udc-core: couldn't find an available UDC or it's busy [ 1544.720497][T14792] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1545.367948][ T8180] usbhid 1-1:0.0: can't add hid device: -71 [ 1545.535200][T14808] overlayfs: failed to resolve './file0': -2 [ 1545.581981][ T8180] usbhid: probe of 1-1:0.0 failed with error -71 [ 1545.618427][ T8180] usb 1-1: USB disconnect, device number 48 [ 1546.167816][T12009] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1546.338768][T14820] overlayfs: failed to resolve './file1': -2 [ 1546.558003][T12009] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1547.359290][T14830] overlayfs: failed to resolve './file0': -2 [ 1547.768189][T12009] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1547.778685][T12009] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1547.793882][T12009] usb 8-1: Product: syz [ 1547.805330][T12009] usb 8-1: Manufacturer: syz [ 1547.815840][T12009] usb 8-1: SerialNumber: syz [ 1547.851216][T14841] xt_bpf: check failed: parse error [ 1547.921693][T14843] fuse: Unknown parameter '0x0000000000000003' [ 1548.091033][T12009] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1550.918007][T14853] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1551.025635][T14844] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1551.137895][T14844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4308'. [ 1551.585176][T14865] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1555.215081][T14880] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1555.233987][T14880] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1556.348801][ T762] usb 8-1: USB disconnect, device number 29 [ 1556.357245][ T762] usblp0: removed [ 1557.338200][ T814] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1559.835387][T14912] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1560.814681][T14907] syz.1.4327[14907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1560.814832][T14907] syz.1.4327[14907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1561.466608][T14927] overlayfs: failed to resolve './file1': -2 [ 1561.787510][T14928] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1561.825316][T14928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4331'. [ 1563.258440][T14946] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1564.932176][ T8180] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1567.659244][T14968] overlayfs: failed to resolve './file1': -2 [ 1567.725930][ T280] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1567.758055][ T8180] usb 1-1: device descriptor read/all, error -71 [ 1567.772332][ T280] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1568.942970][T14985] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1569.008850][T14976] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1569.019497][T14976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4347'. [ 1569.039013][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 1569.039050][ T24] audit: type=1326 audit(1754394932.660:11091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1569.081667][ T24] audit: type=1326 audit(1754394932.660:11092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1569.106721][ T24] audit: type=1326 audit(1754394932.690:11093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1569.138379][ T24] audit: type=1326 audit(1754394932.690:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1569.199033][ T24] audit: type=1326 audit(1754394932.690:11095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1569.427572][ T24] audit: type=1326 audit(1754394932.690:11096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1569.454727][ T24] audit: type=1326 audit(1754394932.690:11097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1569.480695][ T24] audit: type=1326 audit(1754394932.690:11098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1569.504938][ T24] audit: type=1326 audit(1754394932.690:11099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1569.545808][ T24] audit: type=1326 audit(1754394932.690:11100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1570.384684][T15003] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1570.405994][T15003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4350'. [ 1571.106345][T15006] syz.9.4354[15006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1571.106468][T15006] syz.9.4354[15006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1571.159620][ T762] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1571.184779][ T762] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1571.250736][T15006] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1571.257723][T15006] EXT4-fs error (device loop9): ext4_orphan_get:1421: comm syz.9.4354: bad orphan inode 13 [ 1571.269040][T15006] ext4_test_bit(bit=12, block=18) = 1 [ 1571.274468][T15006] is_bad_inode(inode)=0 [ 1571.278766][T15006] NEXT_ORPHAN(inode)=2130706432 [ 1571.283683][T15006] max_ino=32 [ 1571.286926][T15006] i_nlink=1 [ 1571.290489][T15006] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 1571.708277][ T762] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1571.879548][T15025] device wg2 left promiscuous mode [ 1571.921016][T15025] device wg2 entered promiscuous mode [ 1571.979817][T15026] overlayfs: failed to resolve './file1': -2 [ 1573.145837][ T762] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1574.548193][T15039] fuse: Unknown parameter 'fd0x0000000000000003' [ 1574.578188][ T762] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1574.616363][ T762] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1574.636632][ T762] usb 8-1: Product: syz [ 1576.157088][ T762] usb 8-1: can't set config #1, error -71 [ 1576.181989][ T762] usb 8-1: USB disconnect, device number 30 [ 1576.221283][T15054] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1576.245289][T15054] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4365'. [ 1578.080550][T15065] EXT4-fs (loop7): mounted filesystem without journal. Opts: abort,noload,dioread_nolock,usrquota,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1578.184037][T15065] EXT4-fs error (device loop7): ext4_remount:5878: Abort forced by user [ 1578.192630][T15065] EXT4-fs (loop7): Remounting filesystem read-only [ 1578.202758][T15065] EXT4-fs (loop7): re-mounted. Opts: (null) [ 1581.578167][T15087] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1582.522499][T15094] syz.7.4376[15094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1582.522620][T15094] syz.7.4376[15094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1582.663284][T15094] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1582.682401][T15094] EXT4-fs error (device loop7): ext4_orphan_get:1421: comm syz.7.4376: bad orphan inode 13 [ 1582.693527][T15094] ext4_test_bit(bit=12, block=18) = 1 [ 1582.699032][T15094] is_bad_inode(inode)=0 [ 1582.703260][T15094] NEXT_ORPHAN(inode)=2130706432 [ 1582.708233][T15094] max_ino=32 [ 1582.711496][T15094] i_nlink=1 [ 1582.714808][T15094] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1583.762088][T15111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4378'. [ 1587.846202][T15139] overlayfs: failed to resolve './file0': -2 [ 1588.280470][T15147] syz.4.4394[15147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1588.280595][T15147] syz.4.4394[15147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1589.591362][T15156] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1590.499205][T15165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4397'. [ 1591.141671][ T299] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1591.428969][T15172] fuse: Unknown parameter 'user00000000000000000000' [ 1591.527989][ T299] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1591.560731][ T299] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.602053][ T299] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1591.705535][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 1591.705573][ T24] audit: type=1326 audit(1754394955.260:11102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1592.948234][T15168] overlayfs: failed to resolve './file1': -2 [ 1592.974714][T15180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4403'. [ 1593.339525][ T24] audit: type=1326 audit(1754394955.260:11103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1593.370463][ T24] audit: type=1326 audit(1754394955.260:11104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1593.713935][ T24] audit: type=1326 audit(1754394955.260:11105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1593.751433][ T24] audit: type=1326 audit(1754394955.260:11106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1593.776215][ T24] audit: type=1326 audit(1754394955.260:11107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1593.817907][ T299] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1593.831791][ T299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.843218][ T24] audit: type=1326 audit(1754394955.260:11108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1593.949452][ T24] audit: type=1326 audit(1754394955.260:11109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1593.997583][ T299] usb 8-1: config 0 descriptor?? [ 1594.017931][ T299] usb 8-1: can't set config #0, error -71 [ 1594.027546][ T299] usb 8-1: USB disconnect, device number 31 [ 1594.044853][ T24] audit: type=1326 audit(1754394955.260:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1594.816309][ T24] audit: type=1326 audit(1754394955.260:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1595.234400][T15194] syz.9.4408[15194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1595.234523][T15194] syz.9.4408[15194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1596.857923][T15209] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1596.920476][T15209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4411'. [ 1597.180009][T15194] EXT4-fs: failed to create workqueue [ 1597.193906][T15194] EXT4-fs (loop9): mount failed [ 1599.352907][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 1599.352941][ T24] audit: type=1326 audit(1754394962.970:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15220 comm="syz.4.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1600.335025][ T24] audit: type=1326 audit(1754394962.970:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15220 comm="syz.4.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1600.362796][ T24] audit: type=1326 audit(1754394962.980:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15220 comm="syz.4.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1601.614236][ T24] audit: type=1326 audit(1754394962.980:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15220 comm="syz.4.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1601.687528][T15238] overlayfs: failed to resolve './file0': -2 [ 1601.718222][ T24] audit: type=1326 audit(1754394962.980:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15220 comm="syz.4.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1601.762721][ T24] audit: type=1326 audit(1754394962.980:11118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15220 comm="syz.4.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1601.857879][ T24] audit: type=1326 audit(1754394962.980:11119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15220 comm="syz.4.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1601.927890][ T24] audit: type=1326 audit(1754394962.980:11120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15220 comm="syz.4.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1602.017856][ T24] audit: type=1326 audit(1754394962.980:11121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15220 comm="syz.4.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1602.168111][ T24] audit: type=1326 audit(1754394962.980:11122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15220 comm="syz.4.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c712cb69 code=0x7ffc0000 [ 1602.866924][T15253] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1603.366080][T15257] device wg2 left promiscuous mode [ 1603.380305][T15255] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4424'. [ 1603.391715][T15257] device wg2 entered promiscuous mode [ 1605.558310][T15271] overlayfs: failed to resolve './file1': -2 [ 1605.691235][T15273] loop7: p1 < > p3 [ 1605.738322][T15273] loop7: p3 size 134217728 extends beyond EOD, truncated [ 1606.450824][T15279] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1607.223359][T15285] fuse: Unknown parameter 'user_i00000000000000000000' [ 1607.908609][T15289] overlayfs: failed to resolve './file0': -2 [ 1608.463446][T15299] fuse: Unknown parameter '0x0000000000000003' [ 1608.859426][T15307] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1609.637307][T12009] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1609.987987][T15310] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1609.997040][T15310] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1610.040236][T15308] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1610.048014][T15308] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1610.054904][T15308] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1610.062165][T15308] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1610.230571][T15317] syz.0.4441[15317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1610.230696][T15317] syz.0.4441[15317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1610.307963][T12009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.336590][T15308] EXT4-fs (loop7): 1 truncate cleaned up [ 1610.342589][T15308] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1610.438672][T12009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.453434][T12009] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1610.470460][T12009] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1610.497936][T12009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.534899][T12009] usb 2-1: config 0 descriptor?? [ 1611.917913][T15319] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1612.398165][T12009] usbhid 2-1:0.0: can't add hid device: -71 [ 1612.404319][T12009] usbhid: probe of 2-1:0.0 failed with error -71 [ 1612.439553][T12009] usb 2-1: USB disconnect, device number 16 [ 1613.593547][T15332] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1613.613720][T15332] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1613.621902][T15332] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1613.632458][T15332] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1613.659672][T15332] EXT4-fs (loop9): 1 truncate cleaned up [ 1613.675902][T15332] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1614.581202][T15332] syz.9.4445[15332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1614.581323][T15332] syz.9.4445[15332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1615.617832][ T1180] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1615.907798][ T1180] usb 8-1: Using ep0 maxpacket: 32 [ 1615.916563][T15352] overlayfs: failed to resolve './file1': -2 [ 1616.048078][ T1180] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.065395][ T1180] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.308658][ T1180] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1616.322690][ T299] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1616.340709][T15357] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1616.348706][ T1180] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1616.357591][ T1180] usb 8-1: Product: syz [ 1616.403640][ T1180] usb 8-1: Manufacturer: syz [ 1616.448099][ T1180] usb 8-1: can't set config #4, error -71 [ 1616.465959][ T1180] usb 8-1: USB disconnect, device number 32 [ 1616.602329][T15362] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1616.624330][T15362] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1616.688055][ T8322] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1616.868092][ T299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.886094][ T299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.907132][ T299] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1616.937846][ T299] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1616.955010][T15365] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1616.964705][T15365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4454'. [ 1617.045031][ T299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.066731][ T299] usb 10-1: config 0 descriptor?? [ 1617.189902][T15366] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1617.548617][T15366] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4455'. [ 1617.859338][T15370] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1618.388184][ T8322] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.408283][ T8322] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1618.708669][ T299] usbhid 10-1:0.0: can't add hid device: -71 [ 1618.714965][ T299] usbhid: probe of 10-1:0.0 failed with error -71 [ 1618.723088][T15377] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1618.738208][T15377] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1618.745668][ T299] usb 10-1: USB disconnect, device number 13 [ 1618.866619][ T8322] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1618.904793][ T8322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1619.158203][ T814] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1619.774663][ T8322] usb 5-1: can't set config #1, error -71 [ 1619.781998][ T8322] usb 5-1: USB disconnect, device number 26 [ 1621.638536][ T814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.724038][T15399] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1621.732134][T15399] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1621.739317][T15399] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1621.746597][T15399] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1621.818202][ T814] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1621.869000][T15399] EXT4-fs (loop9): 1 truncate cleaned up [ 1621.874833][T15399] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1622.187948][ T814] usb 1-1: string descriptor 0 read error: -71 [ 1622.194295][ T814] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1622.319504][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1622.348086][ T814] usb 1-1: can't set config #1, error -71 [ 1622.359178][ T814] usb 1-1: USB disconnect, device number 51 [ 1622.579066][T15412] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1622.589621][T15412] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4459'. [ 1624.327804][ T1180] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1625.424205][T15418] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1625.945649][ T1180] usb 10-1: device descriptor read/all, error -71 [ 1625.974096][T15426] syz.1.4473[15426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1625.974218][T15426] syz.1.4473[15426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1626.201526][T15430] device wg2 left promiscuous mode [ 1626.220925][T15430] device wg2 entered promiscuous mode [ 1627.358875][T15435] syz.4.4470[15435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1627.359008][T15435] syz.4.4470[15435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1627.633049][ T8322] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1627.974167][T15442] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1627.991337][T15442] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1628.398589][ T8322] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.440129][T15447] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4476'. [ 1628.470595][ T8322] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1628.768983][ T8322] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1629.024856][ T1180] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1629.215402][ T8322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1629.223679][ T8322] usb 1-1: Product: syz [ 1629.227928][ T8322] usb 1-1: Manufacturer: syz [ 1629.232581][ T8322] usb 1-1: SerialNumber: syz [ 1629.403196][ T1180] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1629.555402][ T8322] usb 1-1: can't set config #1, error -71 [ 1629.562879][ T8322] usb 1-1: USB disconnect, device number 52 [ 1629.668058][ T1180] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1629.668190][T15454] 9pnet: Insufficient options for proto=fd [ 1629.708269][ T1180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1629.777533][T15458] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1629.815962][T15458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4478'. [ 1630.388724][ T1180] usb 10-1: Product: syz [ 1630.393088][ T1180] usb 10-1: Manufacturer: syz [ 1630.418947][ T1180] usb 10-1: SerialNumber: syz [ 1630.704447][ T1180] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1630.908187][ T814] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1630.968079][ T8322] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1631.278182][ T814] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1631.338141][ T8322] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.357949][ T8322] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1631.588359][ T8322] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1631.597638][ T814] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1631.606902][ T8322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1631.616606][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1631.625892][ T8322] usb 2-1: SerialNumber: syz [ 1631.633649][ T814] usb 1-1: Product: syz [ 1631.643630][ T814] usb 1-1: Manufacturer: syz [ 1631.650099][ T814] usb 1-1: SerialNumber: syz [ 1632.269624][ T8322] usb 2-1: 0:2 : does not exist [ 1633.159231][T15473] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1633.338569][ T8322] usb 2-1: USB disconnect, device number 17 [ 1633.350854][ T369] usb 10-1: USB disconnect, device number 15 [ 1633.354707][T15475] fuse: Unknown parameter 'fd0x0000000000000004' [ 1633.357427][ T814] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1633.422468][ T369] usblp0: removed [ 1633.802798][T15479] device wg2 left promiscuous mode [ 1633.810782][T15479] device wg2 entered promiscuous mode [ 1633.836841][ T814] usb 1-1: USB disconnect, device number 53 [ 1633.944453][ T814] usblp1: removed [ 1634.107854][ T280] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1634.130273][T15490] device wg2 left promiscuous mode [ 1634.147856][T15490] device wg2 entered promiscuous mode [ 1634.379347][T15424] udevd[15424]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1634.428896][T15492] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1634.440233][T15492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4488'. [ 1634.478057][ T280] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.495247][ T280] usb 8-1: config 0 has no interfaces? [ 1634.531029][T15498] 9pnet: Insufficient options for proto=fd [ 1634.575013][T15502] 9pnet: Insufficient options for proto=fd [ 1634.667955][ T280] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1634.677308][ T280] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1634.685882][ T280] usb 8-1: Product: syz [ 1634.690394][ T280] usb 8-1: Manufacturer: syz [ 1634.695150][ T280] usb 8-1: SerialNumber: syz [ 1634.710397][ T280] usb 8-1: config 0 descriptor?? [ 1635.372443][ T814] usb 8-1: USB disconnect, device number 33 [ 1635.662219][ T8180] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1635.668440][ T369] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1635.789668][T15516] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4497'. [ 1637.188599][ T369] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.237950][ T814] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1637.250343][ T369] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1637.264057][ T369] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1637.277961][ T369] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1637.287161][ T369] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.303030][ T369] usb 10-1: config 0 descriptor?? [ 1637.367827][ T8180] usb 1-1: Using ep0 maxpacket: 8 [ 1637.497894][ T8180] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1637.506042][ T8180] usb 1-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 1637.516486][ T8180] usb 1-1: config 0 has no interface number 0 [ 1637.597857][ T8322] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1637.648179][ T814] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.658476][ T814] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1637.697983][ T8180] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1637.707161][ T8180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.715304][ T8180] usb 1-1: Product: syz [ 1637.719571][ T8180] usb 1-1: Manufacturer: syz [ 1637.724259][ T8180] usb 1-1: SerialNumber: syz [ 1637.736551][ T8180] usb 1-1: config 0 descriptor?? [ 1637.769084][T15512] udc-core: couldn't find an available UDC or it's busy [ 1637.776291][T15512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1637.828274][ T814] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1637.837398][ T814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1637.845854][ T814] usb 5-1: Product: syz [ 1637.850415][ T369] usbhid 10-1:0.0: can't add hid device: -71 [ 1637.856616][ T369] usbhid: probe of 10-1:0.0 failed with error -71 [ 1637.863253][ T814] usb 5-1: Manufacturer: syz [ 1637.868034][ T814] usb 5-1: SerialNumber: syz [ 1637.875472][ T369] usb 10-1: USB disconnect, device number 16 [ 1637.958096][ T8322] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.968546][ T8322] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1637.989466][ T814] usb 1-1: USB disconnect, device number 54 [ 1638.058115][ T8322] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1638.067469][ T8322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1638.075661][ T8322] usb 2-1: SerialNumber: syz [ 1638.291903][T15532] device wg2 left promiscuous mode [ 1638.301747][T15532] device wg2 entered promiscuous mode [ 1638.359556][ T8322] usb 2-1: 0:2 : does not exist [ 1638.776035][ T8322] usb 2-1: USB disconnect, device number 18 [ 1639.154345][T12520] usb 5-1: USB disconnect, device number 27 [ 1639.513983][T15424] udevd[15424]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1643.279408][T15566] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1644.021686][T15568] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1645.308249][ T1180] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1645.328796][T15582] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1645.336280][T15582] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1645.343393][T15582] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1645.350728][T15582] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1646.261894][T15585] syz.1.4513[15585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1646.262897][T15585] syz.1.4513[15585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1648.469502][T15582] EXT4-fs (loop9): 1 truncate cleaned up [ 1648.487814][T15582] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1650.409333][ T1180] usb 8-1: device descriptor read/all, error -71 [ 1653.459231][T15629] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1653.484317][T15629] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1654.068835][T15641] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1654.086390][T15641] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1655.195526][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 1655.195562][ T24] audit: type=1326 audit(1754395018.810:11124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd21a2b69 code=0x7ffc0000 [ 1655.300804][T15649] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1655.322576][T15649] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4531'. [ 1655.409250][ T24] audit: type=1326 audit(1754395018.830:11125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fbbd21a2b69 code=0x7ffc0000 [ 1655.729796][ T24] audit: type=1326 audit(1754395018.830:11126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd21a2b69 code=0x7ffc0000 [ 1655.838934][ T24] audit: type=1326 audit(1754395018.830:11127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbbd21a2b69 code=0x7ffc0000 [ 1655.915891][ T24] audit: type=1326 audit(1754395018.830:11128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd21a2b69 code=0x7ffc0000 [ 1655.947854][ T24] audit: type=1326 audit(1754395018.830:11129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fbbd21a2b69 code=0x7ffc0000 [ 1655.991033][ T24] audit: type=1326 audit(1754395018.830:11130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd21a2b69 code=0x7ffc0000 [ 1656.015004][ T24] audit: type=1326 audit(1754395018.830:11131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd21a2b69 code=0x7ffc0000 [ 1656.078117][ T1180] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1656.128015][ T1180] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1656.268492][T15662] fido_id[15662]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1658.235066][T15682] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4542'. [ 1658.496197][T15690] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1658.632742][T15690] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4541'. [ 1659.873005][T15693] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1659.880377][T15693] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1659.887298][T15693] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1659.894547][T15693] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1659.949786][T15693] EXT4-fs (loop7): 1 truncate cleaned up [ 1659.955531][T15693] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1660.209171][T15702] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1660.218615][T15702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1660.523661][T15701] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1660.632542][T15699] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1660.725295][T15699] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1662.611688][T15722] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1664.250188][T15728] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1664.281190][T15728] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1664.365399][T15735] overlayfs: missing 'workdir' [ 1664.587845][ T299] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1664.644343][T15737] syz.4.4556[15737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1664.644468][T15737] syz.4.4556[15737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1664.881263][T15738] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4553'. [ 1664.900195][T12009] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1665.679251][ T299] usb 2-1: Using ep0 maxpacket: 16 [ 1665.714597][T15749] syz.7.4560[15749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1665.714718][T15749] syz.7.4560[15749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1665.977887][ T299] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1665.998142][T15753] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1666.005453][T15753] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1666.020029][ T299] usb 2-1: config 0 has no interface number 0 [ 1666.026426][T15753] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1666.034247][ T299] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1666.044556][T15753] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1666.055022][ T299] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1666.066151][ T299] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1666.178693][T15757] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1666.368536][T15753] EXT4-fs (loop7): 1 truncate cleaned up [ 1666.374381][T15753] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1666.915233][T15758] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1666.943313][T15758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1667.537807][ T299] usb 2-1: string descriptor 0 read error: -71 [ 1667.544240][ T299] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1667.553866][T12009] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1667.648676][ T299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.677255][ T299] usb 2-1: config 0 descriptor?? [ 1667.728852][T12009] usb 10-1: string descriptor 0 read error: -71 [ 1667.736167][T12009] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1667.745866][ T299] usb 2-1: can't set config #0, error -71 [ 1667.762052][ T299] usb 2-1: USB disconnect, device number 19 [ 1667.789848][T12009] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1667.828637][T12009] usb 10-1: can't set config #1, error -71 [ 1667.986562][T12009] usb 10-1: USB disconnect, device number 17 [ 1668.143083][ T814] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1668.857265][T15785] device wg2 left promiscuous mode [ 1668.874724][T15785] device wg2 entered promiscuous mode [ 1668.928171][ T814] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1669.025004][ T814] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1669.035408][ T814] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1669.056919][T15792] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4571'. [ 1669.158166][T15787] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1669.180927][T15787] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1669.518725][ T814] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1669.528358][ T814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1669.558786][ T814] usb 5-1: Product: syz [ 1669.563101][ T814] usb 5-1: Manufacturer: syz [ 1669.567881][ T814] usb 5-1: SerialNumber: syz [ 1669.683479][T15802] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4570'. [ 1669.860198][T15800] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1670.143256][ T814] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1670.169317][T15800] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1670.351302][ T8180] usb 5-1: USB disconnect, device number 28 [ 1670.364604][ T8180] usblp0: removed [ 1671.838756][T15817] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1672.468148][ T20] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1675.018351][ T20] usb 10-1: device descriptor read/all, error -71 [ 1675.612633][T15833] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue [ 1675.668467][T15833] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1675.797566][T15833] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4582'. [ 1676.449996][T15844] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1676.675961][T15849] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1676.706384][T15849] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1676.961753][ T20] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1677.536137][T15865] syz.1.4592[15865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1677.536259][T15865] syz.1.4592[15865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1678.740657][T15867] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4585'. [ 1680.716629][T15869] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1680.789339][ T20] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1681.134787][ T20] usb 5-1: can't read configurations, error -71 [ 1681.244266][T15876] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1681.273486][T15876] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1681.328307][T15876] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1681.386634][T15876] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1681.570385][T15876] EXT4-fs (loop9): 1 truncate cleaned up [ 1681.576122][T15876] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1681.613546][T15876] syz.9.4593[15876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1681.613682][T15876] syz.9.4593[15876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1681.710973][T15890] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1681.757263][T15890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4596'. [ 1681.838579][ T20] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1682.343897][T15895] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4599'. [ 1682.456312][T15900] device wg2 left promiscuous mode [ 1682.478059][T15900] device wg2 entered promiscuous mode [ 1682.825105][T12009] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1682.828413][ T20] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1683.849595][ T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1683.882635][T15918] overlayfs: missing 'lowerdir' [ 1683.891340][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1683.928655][ T20] usb 5-1: Product: syz [ 1684.287275][ T20] usb 5-1: Manufacturer: syz [ 1684.292302][ T20] usb 5-1: SerialNumber: syz [ 1684.720606][ T20] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1684.767921][ T20] usb 5-1: USB disconnect, device number 30 [ 1684.806677][ T20] usblp0: removed [ 1684.884410][T15921] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1685.058066][T12009] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1685.325413][T15930] 9pnet: Insufficient options for proto=fd [ 1686.487941][T12009] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1686.497642][T12009] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1686.506844][T12009] usb 10-1: Product: syz [ 1686.527877][T12009] usb 10-1: can't set config #1, error -71 [ 1686.536847][T12009] usb 10-1: USB disconnect, device number 20 [ 1686.657637][T15939] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1686.669049][T15939] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1686.676559][T15939] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1686.753368][T15939] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1686.780659][T15939] EXT4-fs (loop7): 1 truncate cleaned up [ 1686.786417][T15939] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1687.329259][T15939] syz.7.4611[15939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1687.329382][T15939] syz.7.4611[15939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1688.437791][T12009] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1689.597820][ T469] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1695.153074][T12009] usb 10-1: device not accepting address 21, error -71 [ 1695.303597][T15989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4621'. [ 1695.575561][ T469] usb 5-1: device not accepting address 31, error -71 [ 1697.443538][T16006] syz.1.4628[16006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1697.443678][T16006] syz.1.4628[16006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1697.809829][T16015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4627'. [ 1698.008639][ T20] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1698.287367][ T8552] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1698.295073][T12009] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1699.298248][T12009] usb 10-1: Using ep0 maxpacket: 16 [ 1699.485562][ T20] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1699.668222][ T20] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1699.683703][ T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1699.699036][T16023] syz.4.4632[16023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1699.699157][T16023] syz.4.4632[16023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1699.722970][ T20] usb 8-1: Product: syz [ 1699.791268][ T20] usb 8-1: Manufacturer: syz [ 1699.795958][ T20] usb 8-1: SerialNumber: syz [ 1699.947952][ T8552] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1699.961099][T12009] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1699.969635][T12009] usb 10-1: config 0 has no interface number 0 [ 1699.975992][T12009] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1699.986336][T12009] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1699.996565][T12009] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1700.111092][ T20] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1700.157805][ T762] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1700.158059][ T8552] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1700.175289][ T8552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1700.183940][T12009] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1700.193502][ T8552] usb 1-1: Product: syz [ 1700.198098][T12009] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.206613][ T8552] usb 1-1: Manufacturer: syz [ 1700.211657][ T8552] usb 1-1: SerialNumber: syz [ 1700.216701][T12009] usb 10-1: Product: syz [ 1700.221904][T12009] usb 10-1: Manufacturer: syz [ 1700.228253][T12009] usb 10-1: SerialNumber: syz [ 1700.238211][T12009] usb 10-1: config 0 descriptor?? [ 1700.257867][T16002] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1700.264973][T16002] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1700.377952][T12009] CoreChips: probe of 10-1:0.41 failed with error -71 [ 1700.397753][ C1] usblp0: nonzero write bulk status received: -71 [ 1700.402005][T12009] usb 10-1: USB disconnect, device number 22 [ 1700.419384][ T469] usb 8-1: USB disconnect, device number 36 [ 1700.438654][ T469] usblp0: removed [ 1700.490119][ T8552] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1700.558184][ T762] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1700.566257][ T8552] usb 1-1: USB disconnect, device number 55 [ 1700.590758][ T8552] usblp0: removed [ 1700.738149][ T762] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1700.747291][ T762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1700.755795][ T762] usb 2-1: Product: syz [ 1700.760493][ T762] usb 2-1: Manufacturer: syz [ 1700.765157][ T762] usb 2-1: SerialNumber: syz [ 1700.787796][T12009] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1701.027776][T12009] usb 10-1: Using ep0 maxpacket: 32 [ 1701.115896][ T762] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1701.129517][ T762] usb 2-1: USB disconnect, device number 20 [ 1701.137510][ T762] usblp0: removed [ 1701.186419][T12009] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 172, changing to 11 [ 1701.210065][T12009] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17439, setting to 1024 [ 1703.209196][T16040] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1703.428192][T12009] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1703.446402][T12009] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1703.514227][T12009] usb 10-1: Product: syz [ 1703.568942][T12009] usb 10-1: Manufacturer: syz [ 1704.711246][T16056] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1705.160872][ T369] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1705.347889][T12009] usb 10-1: can't set config #4, error -71 [ 1705.367894][T12009] usb 10-1: USB disconnect, device number 23 [ 1705.538391][ T369] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1706.378392][ T20] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1706.468021][ T369] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1706.487633][ T369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1706.496593][ T369] usb 5-1: Product: syz [ 1706.501310][ T369] usb 5-1: Manufacturer: syz [ 1706.505974][ T369] usb 5-1: SerialNumber: syz [ 1706.644668][T16070] syz.9.4646[16070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1706.644792][T16070] syz.9.4646[16070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1706.664644][T16073] device wg2 left promiscuous mode [ 1706.765960][T16075] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1706.782371][T16075] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1706.802822][T16075] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1706.810600][T16075] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1706.824901][T16075] EXT4-fs (loop9): 1 truncate cleaned up [ 1706.839232][ T369] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1706.914207][ T369] usb 5-1: USB disconnect, device number 33 [ 1706.922419][T16075] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1706.923046][ T369] usblp0: removed [ 1707.738769][ T20] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1708.408148][ T20] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1708.417578][ T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1708.447743][ T20] usb 8-1: Product: syz [ 1708.489424][T16087] device wg2 left promiscuous mode [ 1708.510860][T16087] device wg2 entered promiscuous mode [ 1708.782916][ T20] usb 8-1: Manufacturer: syz [ 1708.787768][ T20] usb 8-1: SerialNumber: syz [ 1708.808232][ T20] usb 8-1: can't set config #1, error -71 [ 1708.828611][ T20] usb 8-1: USB disconnect, device number 37 [ 1709.521547][T16101] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1709.681548][ T8180] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1713.338277][ T8322] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1715.148274][ T8322] usb 10-1: device descriptor read/all, error -71 [ 1715.297815][ T469] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1716.238501][ T8322] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1716.342261][T16134] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1716.367877][ T8552] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1716.374924][T16137] overlayfs: missing 'lowerdir' [ 1716.467932][ T469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.488000][ T469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1716.507764][ T469] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1716.527288][ T469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.638644][ T469] usb 2-1: config 0 descriptor?? [ 1716.828855][ T8322] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1717.079521][ T8322] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1717.115069][ T8322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1717.187914][ T8322] usb 10-1: Product: syz [ 1717.357958][ T469] usb 2-1: can't set config #0, error -71 [ 1717.379391][ T469] usb 2-1: USB disconnect, device number 21 [ 1717.417931][ T8552] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1717.437773][ T8552] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.464562][ T8322] usb 10-1: Manufacturer: syz [ 1717.477799][ T8552] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1717.577996][ T8322] usb 10-1: SerialNumber: syz [ 1717.687952][ T8552] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1717.707837][ T8552] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.715941][ T8552] usb 8-1: Product: syz [ 1717.735790][ T8552] usb 8-1: Manufacturer: syz [ 1717.741569][ T8552] usb 8-1: SerialNumber: syz [ 1717.755261][ T8552] usb 8-1: config 0 descriptor?? [ 1717.817127][ T8552] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1717.896270][ T8552] usb-storage 8-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1717.915315][ T299] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1718.048863][ T8552] usb 8-1: USB disconnect, device number 38 [ 1718.100067][ T8322] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1718.252924][ T469] usb 10-1: USB disconnect, device number 26 [ 1718.259353][ C0] usblp0: nonzero write bulk status received: -71 [ 1718.274073][ T469] usblp0: removed [ 1718.297998][ T299] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1718.362213][T16157] device wg2 left promiscuous mode [ 1718.373120][T16157] device wg2 entered promiscuous mode [ 1718.530778][T16160] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1718.813790][ T299] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1718.871053][ T299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1718.880337][ T299] usb 5-1: Product: syz [ 1718.885675][ T299] usb 5-1: Manufacturer: syz [ 1718.901988][ T299] usb 5-1: SerialNumber: syz [ 1719.316009][T16163] syz.7.4670[16163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1719.316130][T16163] syz.7.4670[16163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1719.408192][T16163] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1719.467515][T16163] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1719.481259][T16163] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1719.567942][T16163] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1719.586814][T16163] EXT4-fs (loop7): 1 truncate cleaned up [ 1719.592899][T16163] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1719.705019][T16169] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1719.911408][T16169] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1720.333803][ T299] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1720.352561][ T299] usb 5-1: USB disconnect, device number 35 [ 1720.448605][ T299] usblp0: removed [ 1720.708543][T16181] syz.1.4676[16181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1720.708664][T16181] syz.1.4676[16181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1721.635153][T16186] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1722.390656][T16201] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1723.185287][T16203] EXT4-fs (loop7): mounted filesystem without journal. Opts: abort,noload,dioread_nolock,usrquota,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1723.299601][T16202] EXT4-fs error (device loop7): ext4_remount:5878: Abort forced by user [ 1723.308111][T16202] EXT4-fs (loop7): Remounting filesystem read-only [ 1723.314862][T16202] EXT4-fs (loop7): re-mounted. Opts: (null) [ 1723.629852][T16214] 9pnet: Insufficient options for proto=fd [ 1723.810105][T16217] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue [ 1723.848385][T16217] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1723.899491][T16217] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4684'. [ 1724.657807][ T280] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1724.700177][T16236] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1724.787809][ T299] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1726.887900][ T280] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1726.913006][ T280] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.933829][ T280] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1727.047899][ T299] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1728.262642][T16253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4692'. [ 1728.767937][ T299] usb 10-1: string descriptor 0 read error: -71 [ 1728.775083][ T299] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1728.907143][ T280] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1728.928696][ T299] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1728.938126][ T280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.946178][ T280] usb 2-1: Product: syz [ 1728.966123][ T280] usb 2-1: config 0 descriptor?? [ 1728.977865][ T299] usb 10-1: can't set config #1, error -71 [ 1728.992115][ T280] usb 2-1: can't set config #0, error -71 [ 1729.005236][ T299] usb 10-1: USB disconnect, device number 27 [ 1729.012161][ T280] usb 2-1: USB disconnect, device number 22 [ 1730.338555][T16255] loop7: p1 < > p3 [ 1730.354979][T16255] loop7: p3 size 134217728 extends beyond EOD, truncated [ 1730.566493][T16259] overlayfs: failed to resolve './file1': -2 [ 1730.629997][ T324] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1730.766321][T15923] udevd[15923]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 1730.812048][T15897] udevd[15897]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1730.957879][ T299] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1730.997927][ T324] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1731.057842][ T280] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1731.177848][ T469] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1731.185710][ T324] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1731.195239][ T324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1731.203863][ T324] usb 5-1: Product: syz [ 1731.208257][ T299] usb 1-1: Using ep0 maxpacket: 32 [ 1731.213541][ T324] usb 5-1: Manufacturer: syz [ 1731.218715][ T324] usb 5-1: SerialNumber: syz [ 1731.327908][ T299] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 172, changing to 11 [ 1731.339396][ T299] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17439, setting to 1024 [ 1731.427940][ T280] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1731.439119][ T469] usb 8-1: Using ep0 maxpacket: 16 [ 1731.444643][ T280] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1731.454653][ T280] usb 10-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1731.464956][ T280] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.473454][ T324] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1731.484672][ T299] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1731.496204][ T299] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1731.505107][ T299] usb 1-1: Product: syz [ 1731.509569][ T299] usb 1-1: Manufacturer: syz [ 1731.514956][ T280] usb 10-1: config 0 descriptor?? [ 1731.537946][T16274] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1731.558121][ T469] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 1731.569428][ T299] hub 1-1:4.0: USB hub found [ 1731.574251][ T469] usb 8-1: config 0 has no interface number 0 [ 1731.580486][ T469] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1731.590498][ T469] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1731.600565][ T469] usb 8-1: config 0 interface 41 has no altsetting 0 [ 1731.757980][ T469] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1731.767268][ T469] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.776239][ T469] usb 8-1: Product: syz [ 1731.781089][ T469] usb 8-1: Manufacturer: syz [ 1731.785832][ T469] usb 8-1: SerialNumber: syz [ 1731.804865][ T469] usb 8-1: config 0 descriptor?? [ 1731.810352][ T299] hub 1-1:4.0: 2 ports detected [ 1731.827929][T16282] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1731.831803][ T762] usb 5-1: USB disconnect, device number 36 [ 1731.842064][T16282] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1731.850206][ T762] usblp0: removed [ 1732.070006][T16282] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1732.077102][T16282] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1732.087836][ T280] usbhid 10-1:0.0: can't add hid device: -71 [ 1732.095639][ T280] usbhid: probe of 10-1:0.0 failed with error -71 [ 1732.104580][ T280] usb 10-1: USB disconnect, device number 28 [ 1732.528024][ T469] CoreChips: probe of 8-1:0.41 failed with error -22 [ 1733.818629][T16300] syz.1.4709[16300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1733.818766][T16300] syz.1.4709[16300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1734.049064][ T324] usb 1-1: USB disconnect, device number 56 [ 1734.067048][ T299] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 1734.343363][T16306] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1734.351819][T16306] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1734.359168][T16306] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1734.366670][T16306] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1734.428518][T16306] EXT4-fs (loop9): 1 truncate cleaned up [ 1734.434336][T16306] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1734.732880][ T280] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1734.891438][ T299] usb 8-1: USB disconnect, device number 39 [ 1735.032573][T16321] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1735.047978][T16321] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1735.055106][T16321] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1735.063026][T16321] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1735.094565][T16321] EXT4-fs (loop9): 1 truncate cleaned up [ 1735.100682][ T280] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1735.116445][T16321] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1735.236565][T16321] syz.9.4715[16321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1735.236714][T16321] syz.9.4715[16321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1736.658042][ T762] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1736.732102][T16332] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1736.740206][T16332] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1736.798033][ T280] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1738.583660][T16344] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1739.228213][ T280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1739.236464][ T280] usb 5-1: Product: syz [ 1739.281846][ T280] usb 5-1: Manufacturer: syz [ 1739.358266][ T762] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1739.386821][ T762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.399387][ T762] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1739.401499][ T280] usb 5-1: SerialNumber: syz [ 1739.448414][ T280] usb 5-1: can't set config #1, error -71 [ 1739.462439][ T280] usb 5-1: USB disconnect, device number 37 [ 1739.592883][ T762] usb 1-1: string descriptor 0 read error: -71 [ 1739.601862][ T762] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1739.611329][ T762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.644535][ T762] usb 1-1: config 0 descriptor?? [ 1739.844931][T16363] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1739.861367][ T762] usb 1-1: can't set config #0, error -71 [ 1740.787925][ T762] usb 1-1: USB disconnect, device number 57 [ 1740.805665][T16349] EXT4-fs (loop9): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue [ 1740.838145][T16365] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1740.845532][T16365] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1740.852469][T16365] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1740.859701][T16365] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1740.907885][T16365] EXT4-fs (loop7): 1 truncate cleaned up [ 1740.913697][T16365] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1740.957371][T16349] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1741.110087][T16349] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4720'. [ 1741.598751][T16380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4726'. [ 1742.639121][T16385] device wg2 left promiscuous mode [ 1742.656458][T16385] device wg2 entered promiscuous mode [ 1743.548835][T16393] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 1743.568089][T16393] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1744.625856][T16404] device wg2 left promiscuous mode [ 1744.674196][T16405] device wg2 entered promiscuous mode [ 1744.925452][T16409] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1745.095258][T16409] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1747.006526][T16422] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1747.015846][T16422] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4734'. [ 1748.194965][T16431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4738'. [ 1748.719248][T16430] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1749.161163][ T20] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1749.359048][ T24] audit: type=1326 audit(1754395112.980:11132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.9.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1749.410319][ T24] audit: type=1326 audit(1754395113.000:11133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.9.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1749.449465][ T24] audit: type=1326 audit(1754395113.000:11134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.9.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1749.503350][T16449] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1749.541222][T16449] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1749.548358][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1749.568009][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1749.577916][ T24] audit: type=1326 audit(1754395113.000:11135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.9.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1749.587801][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1749.614673][ T20] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1749.623866][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.633843][ T20] usb 5-1: config 0 descriptor?? [ 1749.639495][ T24] audit: type=1326 audit(1754395113.000:11136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.9.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccfea6b69 code=0x7ffc0000 [ 1750.147596][T16443] udc-core: couldn't find an available UDC or it's busy [ 1750.180019][T16443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1750.959102][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 1750.965250][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 1750.975624][ T20] usb 5-1: USB disconnect, device number 38 [ 1752.822887][T16475] syz.0.4749[16475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1752.824013][T16475] syz.0.4749[16475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1754.328157][ T299] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1754.363697][T16473] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1754.374157][T16473] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1755.180844][T16477] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1755.214388][T16477] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4750'. [ 1758.802816][T16489] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1758.839201][T16489] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4752'. [ 1759.531709][T16495] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1759.548188][T16495] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1759.783570][T16494] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4757'. [ 1759.794432][T16498] device wg2 left promiscuous mode [ 1759.902428][T16500] device wg2 entered promiscuous mode [ 1760.767401][T16510] device wg2 left promiscuous mode [ 1760.779881][T16510] device wg2 entered promiscuous mode [ 1760.995348][T16518] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4756'. [ 1762.302567][T16529] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1762.383409][T16532] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1762.418892][T16532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4762'. [ 1762.462338][T16529] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1763.706438][ T299] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1763.887489][T16536] syz.0.4766[16536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1763.887610][T16536] syz.0.4766[16536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1764.068044][ T299] usb 8-1: Using ep0 maxpacket: 32 [ 1764.092970][T16541] syz.4.4767[16541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1764.093092][T16541] syz.4.4767[16541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1764.163387][T16542] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1764.200778][T16542] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4765'. [ 1764.818083][ T299] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 21535, setting to 1024 [ 1764.835959][ T299] usb 8-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1766.620937][T16553] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1767.437956][ T299] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1767.447096][ T299] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1767.564775][ T299] usb 8-1: Product: syz [ 1767.598006][ T299] usb 8-1: can't set config #4, error -71 [ 1767.619075][ T299] usb 8-1: USB disconnect, device number 40 [ 1767.652465][T16564] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4774'. [ 1767.694446][T16559] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1767.716683][T16559] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1769.413410][T16576] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1770.389412][T16582] device wg2 left promiscuous mode [ 1770.408470][T16582] device wg2 entered promiscuous mode [ 1771.208326][T16583] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1771.227499][T16583] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1771.475457][T16592] 9pnet: Insufficient options for proto=fd [ 1771.687798][ T469] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1771.862445][T16599] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4777'. [ 1772.537788][ T299] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1772.585682][T16605] overlayfs: failed to resolve './file1': -2 [ 1772.727895][ T469] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.848764][ T469] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1772.859174][ T469] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1772.869105][ T469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.879802][ T469] usb 5-1: config 0 descriptor?? [ 1772.888290][ T299] usb 1-1: Using ep0 maxpacket: 32 [ 1773.230182][T16608] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1773.242544][T16608] EXT4-fs error (device loop7): ext4_orphan_get:1421: comm syz.7.4784: bad orphan inode 13 [ 1773.254513][T16608] ext4_test_bit(bit=12, block=18) = 1 [ 1773.260655][T16608] is_bad_inode(inode)=0 [ 1773.265198][T16608] NEXT_ORPHAN(inode)=2130706432 [ 1773.270179][T16608] max_ino=32 [ 1773.273478][T16608] i_nlink=1 [ 1773.277191][T16608] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1774.661410][T12520] usb 5-1: USB disconnect, device number 39 [ 1775.893779][ T299] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1775.901503][ T299] usb 1-1: can't read configurations, error -71 [ 1776.929801][T16626] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1778.248596][T16633] syz.0.4791[16633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1778.248720][T16633] syz.0.4791[16633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1782.191903][T16646] 9pnet: Insufficient options for proto=fd [ 1783.337797][ T24] audit: type=1326 audit(1754395146.950:11137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.0.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1783.374118][ T24] audit: type=1326 audit(1754395146.950:11138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.0.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1783.399873][ T24] audit: type=1326 audit(1754395146.950:11139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.0.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1783.425581][ T24] audit: type=1326 audit(1754395146.960:11140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.0.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1783.449710][ T24] audit: type=1326 audit(1754395146.960:11141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.0.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1784.509494][T12520] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1784.580456][ T280] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1784.644354][T16664] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1784.653692][T16664] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1784.715072][T16671] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1784.730928][T16671] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1784.855267][ T280] usb 1-1: Using ep0 maxpacket: 32 [ 1784.983048][T16675] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1785.340418][T12520] usb 5-1: Using ep0 maxpacket: 16 [ 1786.170824][ T280] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 21535, setting to 1024 [ 1786.208321][ T280] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1786.417841][ T280] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1786.438308][ T280] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1786.446730][ T280] usb 1-1: Product: syz [ 1786.485814][T16677] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1786.507380][T12520] usb 5-1: device descriptor read/all, error -71 [ 1788.328543][ T280] usb 1-1: can't set config #4, error -71 [ 1788.336870][ T280] usb 1-1: USB disconnect, device number 60 [ 1788.724472][T16691] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1788.732479][T16691] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1788.739868][T16691] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1788.747123][T16691] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1788.848636][T16691] EXT4-fs (loop9): 1 truncate cleaned up [ 1788.854510][T16691] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1789.340486][ T324] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1789.370890][T16697] fuse: Unknown parameter '00000000000000000000' [ 1789.697943][ T324] usb 2-1: device descriptor read/all, error -71 [ 1791.957799][ T324] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1792.247754][ T324] usb 2-1: Using ep0 maxpacket: 32 [ 1792.407953][ T324] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 172, changing to 11 [ 1792.427717][ T324] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17439, setting to 1024 [ 1792.457767][ T8180] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1792.567883][ T324] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1792.577016][ T324] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1792.606002][ T324] usb 2-1: Product: syz [ 1792.610599][ T324] usb 2-1: Manufacturer: syz [ 1792.647827][T16719] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1792.669095][ T324] hub 2-1:4.0: USB hub found [ 1792.707763][ T8180] usb 8-1: Using ep0 maxpacket: 16 [ 1792.827872][ T8180] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 1792.846517][ T8180] usb 8-1: config 0 has no interface number 0 [ 1792.853660][ T8180] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1792.884208][ T8180] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1792.904778][ T8180] usb 8-1: config 0 interface 41 has no altsetting 0 [ 1792.967896][ T324] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 1793.077999][ T8180] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1793.087297][ T8180] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.116183][ T8180] usb 8-1: Product: syz [ 1793.120712][ T8180] usb 8-1: Manufacturer: syz [ 1793.125361][ T8180] usb 8-1: SerialNumber: syz [ 1793.146132][ T8180] usb 8-1: config 0 descriptor?? [ 1793.188435][T16729] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1793.205885][T16729] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1793.452812][T16729] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1793.461716][T16729] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1794.139719][T16721] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1794.239932][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1794.387919][ T299] usb 2-1: USB disconnect, device number 24 [ 1794.717731][T12520] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1795.088852][T12520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.111464][T12520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.146070][T12520] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1795.190043][T12520] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1795.477988][T12520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.508153][T12520] usb 5-1: config 0 descriptor?? [ 1795.967846][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 1795.989791][T12520] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1795.997456][T12520] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1796.017756][T12520] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1796.025246][T12520] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1796.048359][T12520] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1796.056214][T12520] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1796.064546][T12520] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1796.072394][T12520] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1796.080370][T12520] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1796.088768][T12520] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 1796.101141][T12520] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1796.127827][ T20] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1796.175117][T16757] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1796.796293][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 1797.179189][ T20] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1797.200660][ T20] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1797.228654][ T20] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1797.247881][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1797.268879][ T20] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1797.275534][T16765] udc-core: couldn't find an available UDC or it's busy [ 1797.280021][ T20] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.286187][T16765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1797.301767][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1797.305212][ T20] usb 10-1: config 0 descriptor?? [ 1797.357803][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1797.386641][ T24] audit: type=1326 audit(1754395161.000:11142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1797.410962][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1797.425594][ T24] audit: type=1326 audit(1754395161.040:11143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1797.450449][ T24] audit: type=1326 audit(1754395161.040:11144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1797.474805][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1797.483632][ T24] audit: type=1326 audit(1754395161.040:11145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1797.509692][ T24] audit: type=1326 audit(1754395161.040:11146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1797.534728][ T24] audit: type=1326 audit(1754395161.040:11147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1797.546086][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1797.563022][ T24] audit: type=1326 audit(1754395161.040:11148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1797.593190][ T24] audit: type=1326 audit(1754395161.040:11149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.0.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964280b69 code=0x7ffc0000 [ 1797.617290][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1798.369803][ T20] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1798.379999][ T20] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1798.403252][ T20] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1798.420463][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1798.467787][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1798.507911][ T8180] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9 [ 1798.530458][ T8180] CoreChips: probe of 8-1:0.41 failed with error -71 [ 1798.555677][ T8180] usb 8-1: USB disconnect, device number 41 [ 1798.600825][ T20] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1798.608394][ T20] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1798.616816][ T20] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 1798.660462][ T20] plantronics 0003:047F:FFFF.002E: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1799.829775][ T20] usb 10-1: USB disconnect, device number 30 [ 1800.402032][ T646] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1800.983265][T12009] usb 5-1: reset high-speed USB device number 42 using dummy_hcd [ 1801.039694][T16796] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1801.047080][T16796] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1801.054079][T16796] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1801.061346][T16796] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1801.357734][T12009] usb 5-1: device reset changed ep0 maxpacket size! [ 1801.365197][ T299] usb 5-1: USB disconnect, device number 42 [ 1801.743784][T16796] EXT4-fs (loop9): 1 truncate cleaned up [ 1801.749687][T16796] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1802.218691][ T646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1802.229147][ T646] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1802.239371][ T646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.250636][ T646] usb 2-1: config 0 descriptor?? [ 1802.302475][ T646] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1803.630042][ T280] usb 2-1: USB disconnect, device number 25 [ 1803.682199][T16819] overlayfs: failed to resolve './file1': -2 [ 1803.768945][T16816] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1803.776258][T16821] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1803.786920][T16821] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 1803.941101][T16816] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4835'. [ 1805.253179][T16829] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1806.694771][T16837] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1806.705746][T16837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4842'. [ 1807.908887][T16846] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1807.926567][T16846] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1807.942433][T16846] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1807.951388][T16846] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1807.992272][T16846] EXT4-fs (loop7): 1 truncate cleaned up [ 1807.998090][T16846] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1808.013747][ T8180] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1808.672273][T16856] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1808.680454][T16856] EXT4-fs error (device loop9): ext4_orphan_get:1421: comm syz.9.4847: bad orphan inode 13 [ 1808.691749][T16856] ext4_test_bit(bit=12, block=18) = 1 [ 1808.697305][T16856] is_bad_inode(inode)=0 [ 1808.701615][T16856] NEXT_ORPHAN(inode)=2130706432 [ 1808.706518][T16856] max_ino=32 [ 1808.709930][T16856] i_nlink=1 [ 1808.713245][T16856] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 1808.738070][T16846] syz.7.4844[16846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1808.738336][T16846] syz.7.4844[16846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1808.777731][ T8180] usb 1-1: Using ep0 maxpacket: 32 [ 1809.038042][ T8180] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 172, changing to 11 [ 1809.049612][ T8180] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17439, setting to 1024 [ 1809.177982][ T8180] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1809.187364][ T8180] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1809.196268][ T8180] usb 1-1: Product: syz [ 1809.201321][ T8180] usb 1-1: Manufacturer: syz [ 1809.237984][T16845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1809.262630][ T8180] hub 1-1:4.0: USB hub found [ 1809.557843][ T8180] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 1809.657106][T16867] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1814.084730][ T8180] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1814.110384][T12520] usb 1-1: USB disconnect, device number 62 [ 1814.667606][ T8180] usb 10-1: device descriptor read/64, error -71 [ 1814.877558][T16902] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1815.159656][T16901] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1815.166790][T16901] EXT4-fs error (device loop7): ext4_orphan_get:1421: comm syz.7.4859: bad orphan inode 13 [ 1815.177356][ T8180] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1815.191337][T16901] ext4_test_bit(bit=12, block=18) = 1 [ 1815.196806][T16901] is_bad_inode(inode)=0 [ 1815.201208][T16901] NEXT_ORPHAN(inode)=2130706432 [ 1815.206152][T16901] max_ino=32 [ 1815.209416][T16901] i_nlink=1 [ 1815.212724][T16901] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1815.532538][T16909] syz.1.4862[16909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1815.532672][T16909] syz.1.4862[16909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1815.657991][ T8180] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1815.815029][ T8180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1815.823906][ T8180] usb 10-1: Product: syz [ 1815.828874][ T8180] usb 10-1: Manufacturer: syz [ 1815.833617][ T8180] usb 10-1: SerialNumber: syz [ 1816.839636][ T8180] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1816.880983][ T8180] usb 10-1: USB disconnect, device number 31 [ 1816.980080][ T8180] usblp0: removed [ 1819.346517][T16925] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4866'. [ 1822.585025][T16937] overlayfs: missing 'lowerdir' [ 1825.741953][T16959] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1825.760438][T16959] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1827.420935][T16967] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1827.431548][T16967] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4875'. [ 1828.459590][T16972] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4878'. [ 1828.555089][T16973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4877'. [ 1829.293920][T16975] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1829.359535][T16975] EXT4-fs (loop9): Can't change test_dummy_encryption on remount [ 1829.993844][T16988] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1831.490440][T16987] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4881'. [ 1831.554189][T16992] device wg2 left promiscuous mode [ 1831.572010][T16992] device wg2 entered promiscuous mode [ 1832.604854][T16990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.612421][T16990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.620857][T16990] device bridge_slave_0 entered promiscuous mode [ 1832.628996][T16990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.741276][T16990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.768804][T16990] device bridge_slave_1 entered promiscuous mode [ 1834.048281][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4885'. [ 1834.482354][T15571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1834.702417][ T20] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1834.723266][T15571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1835.238414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1835.247297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1835.307850][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.315059][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1835.365627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1835.386447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1835.402994][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.410169][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.420022][ T20] usb 1-1: device descriptor read/64, error -71 [ 1835.484846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1835.498871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1835.507884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1835.546482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1835.568739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1835.612364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1835.622720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1835.640115][T14475] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1835.669428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1835.679205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1835.688710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1835.696824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1835.711792][T16990] device veth0_vlan entered promiscuous mode [ 1835.759583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1835.774895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1835.788183][T16990] device veth1_macvtap entered promiscuous mode [ 1835.803693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1835.812947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1835.826850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1835.846818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1835.855935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1835.868193][ T20] usb 1-1: device descriptor read/64, error -71 [ 1835.898294][T14475] usb 10-1: Using ep0 maxpacket: 32 [ 1836.199055][T14475] usb 10-1: config 4 has an invalid descriptor of length 199, skipping remainder of the config [ 1836.224284][T14475] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1836.247910][ T20] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1836.408816][T14475] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1836.432733][T14475] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1836.459930][T14475] usb 10-1: Product: syz [ 1836.478470][T14475] usb 10-1: Manufacturer: syz [ 1836.548722][ T20] usb 1-1: device descriptor read/64, error -71 [ 1836.602599][T17037] device wg2 left promiscuous mode [ 1836.636330][T17037] device wg2 entered promiscuous mode [ 1836.997757][ T324] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1837.079778][T12009] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1837.118294][ T20] usb 1-1: device descriptor read/64, error -71 [ 1837.468756][ T20] usb usb1-port1: attempt power cycle [ 1838.359361][ T280] usb 10-1: USB disconnect, device number 32 [ 1838.531815][ T20] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1839.910956][ T296] device bridge_slave_1 left promiscuous mode [ 1840.062943][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.091734][ T296] device bridge_slave_0 left promiscuous mode [ 1840.098181][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.109106][ T296] device veth1_macvtap left promiscuous mode [ 1840.116067][ T296] device veth0_vlan left promiscuous mode [ 1840.971933][ T20] usb 1-1: device not accepting address 65, error -71 [ 1841.159509][T12009] usb 5-1: device descriptor read/all, error -71 [ 1841.192582][ T324] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1841.923481][ T324] usb 6-1: can't read configurations, error -71 [ 1841.984255][T17079] overlayfs: failed to resolve './file1': -2 [ 1842.453755][T17059] device wg2 left promiscuous mode [ 1842.461476][T17060] device wg2 entered promiscuous mode [ 1843.324954][ T280] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1843.697904][ T280] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1844.328008][ T20] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1846.357798][ T280] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1846.781449][T17113] syz.9.4914[17113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1846.782315][T17113] syz.9.4914[17113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1846.928179][T17109] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1846.928220][ T280] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1846.928262][ T280] usb 10-1: Product: syz [ 1846.939840][T17109] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1846.946989][ T280] usb 10-1: Manufacturer: syz [ 1846.955198][T17109] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1846.978980][T17109] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1847.003305][T17109] EXT4-fs (loop5): 1 truncate cleaned up [ 1847.007908][ T280] usb 10-1: can't set config #1, error -71 [ 1847.009512][T17109] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 1847.088439][ T20] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1847.100372][ T20] usb 1-1: can't read configurations, error -71 [ 1852.756187][ T280] usb 10-1: USB disconnect, device number 33 [ 1854.093801][T17131] overlayfs: failed to resolve './file1': -2 [ 1854.330585][T17135] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1854.338240][T17135] EXT4-fs error (device loop9): ext4_orphan_get:1421: comm syz.9.4919: bad orphan inode 13 [ 1854.349497][T17135] ext4_test_bit(bit=12, block=18) = 1 [ 1854.355046][T17135] is_bad_inode(inode)=0 [ 1854.359619][T17135] NEXT_ORPHAN(inode)=2130706432 [ 1854.364529][T17135] max_ino=32 [ 1854.368205][T17135] i_nlink=1 [ 1854.371604][T17135] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 1858.098714][T12520] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1858.418207][T12520] usb 6-1: Using ep0 maxpacket: 16 [ 1858.761087][ T20] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1858.938536][T17157] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1858.995259][T17157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4928'. [ 1859.497902][T12520] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1859.512329][T12520] usb 6-1: can't read configurations, error -71 [ 1859.929637][T17168] syz.0.4929[17168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1859.930084][T17168] syz.0.4929[17168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1860.009042][ T20] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1860.085703][T17166] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1860.097338][T17166] EXT4-fs error (device loop9): ext4_orphan_get:1421: comm syz.9.4925: bad orphan inode 13 [ 1860.111117][T17166] ext4_test_bit(bit=12, block=18) = 1 [ 1860.116685][T17166] is_bad_inode(inode)=0 [ 1860.121162][T17166] NEXT_ORPHAN(inode)=2130706432 [ 1860.126457][T17166] max_ino=32 [ 1860.129793][T17166] i_nlink=1 [ 1860.133691][T17166] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 1862.155766][ T20] usb 2-1: string descriptor 0 read error: -71 [ 1862.180372][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1862.201894][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1862.464109][T12520] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1862.497771][ T20] usb 2-1: can't set config #1, error -71 [ 1862.541215][ T20] usb 2-1: USB disconnect, device number 26 [ 1864.328888][ T24] audit: type=1400 audit(1754395227.950:11150): avc: denied { read } for pid=17172 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1864.371602][T17186] syz.5.4934[17186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1864.371751][T17186] syz.5.4934[17186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1865.006406][T17191] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1865.055948][T17191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4935'. [ 1866.071896][ T24] audit: type=1400 audit(1754395229.400:11151): avc: denied { execmem } for pid=17192 comm="syz.5.4938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1867.241571][T17204] overlayfs: "xino" feature enabled using 2 upper inode bits. Stopping sshd: stopped /usr/sbin/sshd (pid 188) OK [ 1868.398071][ T24] audit: type=1400 audit(1754395232.010:11152): avc: denied { read write } for pid=17213 comm="syz.5.4943" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1868.423487][ T24] audit: type=1400 audit(1754395232.010:11153): avc: denied { open } for pid=17213 comm="syz.5.4943" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1868.448924][ T24] audit: type=1400 audit(1754395232.010:11154): avc: denied { ioctl } for pid=17213 comm="syz.5.4943" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1868.767946][ T814] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1869.357699][ T814] usb 6-1: Using ep0 maxpacket: 32 [ 1869.478003][ T814] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 172, changing to 11 [ 1869.505679][T17228] print_req_error: 65 callbacks suppressed [ 1869.505720][T17228] blk_update_request: I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1869.510392][ T814] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17439, setting to 1024 [ 1869.522184][T17228] FAT-fs (loop19): unable to read boot sector Stopping crond: stopped /usr/sbin/crond (pid 179) OK [ 1870.209739][ T814] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1870.839089][ T814] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1870.858792][ T814] usb 6-1: Product: syz Stopping dhcpcd... [ 1870.873308][ T814] usb 6-1: Manufacturer: syz [ 1870.908624][T17214] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1870.916771][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1870.939396][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1870.949459][ T814] hub 6-1:4.0: USB hub found stopped /sbin/dhcpcd (pid 133) [ 1870.983855][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1871.009388][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1871.050692][ T24] audit: type=1400 audit(1754395234.670:11155): avc: denied { search } for pid=17249 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1871.074765][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1871.115239][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1871.158142][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready Stopping network: [ 1871.198925][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1871.236240][T17246] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1871.513888][ T24] audit: type=1400 audit(1754395235.130:11156): avc: denied { read write } for pid=17262 comm="ip" path="/dev/console" dev="rootfs" ino=12697 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 1871.556802][ T814] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1873.237707][ T24] audit: type=1400 audit(1754395236.830:11157): avc: denied { execute } for pid=17275 comm="syz.5.4952" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1873.277270][ T24] audit: type=1400 audit(1754395236.830:11158): avc: denied { execute_no_trans } for pid=17275 comm="syz.5.4952" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1873.310381][ T24] audit: type=1400 audit(1754395236.830:11159): avc: denied { module_request } for pid=17275 comm="syz.5.4952" kmod="binfmt-0000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1873.329208][T12520] usb 6-1: USB disconnect, device number 14 [ 1873.378622][ T24] audit: type=1400 audit(1754395236.970:11160): avc: denied { write } for pid=134 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1873.517049][T17276] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1873.533948][T17276] exFAT-fs (loop5): IO charset iso8859- not found [ 1873.676517][ T24] audit: type=1400 audit(1754395236.970:11161): avc: denied { remove_name } for pid=134 comm="dhcpcd" name="sock" dev="tmpfs" ino=413 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1873.802272][ T24] audit: type=1400 audit(1754395236.970:11162): avc: denied { unlink } for pid=134 comm="dhcpcd" name="sock" dev="tmpfs" ino=413 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 1873.858207][ T24] audit: type=1400 audit(1754395237.000:11163): avc: denied { mounton } for pid=17275 comm="syz.5.4952" path="/12/file0" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 OK Stopping iptables: OK [ 1873.997762][ T8180] usb 10-1: new high-speed USB device number 34 using dummy_hcd Stopping system [ 1874.026233][ T24] audit: type=1400 audit(1754395237.060:11164): avc: denied { unlink } for pid=134 comm="dhcpcd" name="pid" dev="tmpfs" ino=412 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 message bus: [ 1874.894388][ T299] usb 6-1: new high-speed USB device number 15 using dummy_hcd done [ 1875.020393][ T8180] usb 10-1: Using ep0 maxpacket: 16 [ 1875.137767][ T8180] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config killall: can't kill pid 17181: No such process [ 1875.346455][T17320] IPv6: NLM_F_REPLACE set, but no existing node found! Stopping klogd: [ 1875.963806][ T299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.974870][ T8180] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a OK [ 1876.090061][ T8180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.098396][ T299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.108334][ T8180] usb 10-1: Product: syz [ 1876.112644][ T8180] usb 10-1: Manufacturer: syz [ 1876.117514][ T8180] usb 10-1: SerialNumber: syz [ 1876.122349][ T299] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1876.136334][ T299] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1876.145572][ T299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping acpid: [ 1876.210756][ T299] usb 6-1: config 0 descriptor?? [ 1876.216317][ T8180] usb 10-1: config 0 descriptor?? [ 1876.269087][ T8180] dm9601: probe of 10-1:0.0 failed with error -22 [ 1876.276486][ T8180] sr9700: probe of 10-1:0.0 failed with error -22 [ 1876.410001][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 1876.410038][ T24] audit: type=1400 audit(1754395240.020:11195): avc: denied { write } for pid=80 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1876.437982][ T24] audit: type=1400 audit(1754395240.020:11196): avc: denied { remove_name } for pid=80 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1876.474847][ T24] audit: type=1400 audit(1754395240.020:11197): avc: denied { unlink } for pid=80 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK [ 1877.554333][ T24] audit: type=1400 audit(1754395240.170:11198): avc: denied { name_bind } for pid=17328 comm="syz.4.4963" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 Stopping syslogd[ 1877.804012][T12520] usb 10-1: USB disconnect, device number 34 : [ 1877.827129][ T24] audit: type=1400 audit(1754395240.180:11199): avc: denied { node_bind } for pid=17328 comm="syz.4.4963" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1878.338368][ T24] audit: type=1400 audit(1754395241.520:11200): avc: denied { create } for pid=17338 comm="syz.4.4964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1878.361851][ T299] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 1878.366834][ T24] audit: type=1400 audit(1754395241.530:11201): avc: denied { ioctl } for pid=17338 comm="syz.4.4964" path="socket:[76708]" dev="sockfs" ino=76708 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1878.396080][ T24] audit: type=1400 audit(1754395241.540:11202): avc: denied { bind } for pid=17338 comm="syz.4.4964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1878.418744][ T24] audit: type=1400 audit(1754395241.550:11203): avc: denied { prog_run } for pid=17338 comm="syz.4.4964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1878.609710][ T299] plantronics 0003:047F:FFFF.002F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1878.647491][ T24] audit: type=1400 audit(1754395242.260:11204): avc: denied { read write } for pid=17344 comm="syz.0.4966" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 stopped /sbin/syslogd (pid 77) OK [ 1878.951105][ T469] usb 6-1: USB disconnect, device number 15 [ 1880.541892][T17361] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1880.549718][T17361] EXT4-fs (loop5): Can't change test_dummy_encryption on remount [ 1880.586095][T17367] overlayfs: failed to resolve './file1': -2 [ 1881.337717][ T299] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1881.602623][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 1881.602696][ T24] audit: type=1400 audit(1754395245.220:11213): avc: denied { setopt } for pid=17364 comm="syz.4.4970" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1882.440864][ T24] audit: type=1400 audit(1754395245.220:11214): avc: denied { connect } for pid=17364 comm="syz.4.4970" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 umount: can't remount debugfs read-only [ 1882.527680][ T24] audit: type=1400 audit(1754395245.220:11215): avc: denied { write } for pid=17364 comm="syz.4.4970" path="socket:[76960]" dev="sockfs" ino=76960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1883.367713][ T24] audit: type=1400 audit(1754395246.970:11216): avc: denied { read } for pid=17375 comm="syz.0.4974" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1883.548869][T17380] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1883.580635][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4969'. [ 1884.746535][T17378] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1884.757668][T17378] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1884.833410][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1884.853692][ T24] audit: type=1400 audit(1754395246.970:11217): avc: denied { open } for pid=17375 comm="syz.0.4974" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1884.922543][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1884.999329][ T24] audit: type=1400 audit(1754395246.970:11218): avc: denied { ioctl } for pid=17375 comm="syz.0.4974" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1885.222807][ T24] audit: type=1400 audit(1754395247.150:11219): avc: denied { create } for pid=17373 comm="syz.9.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1885.505772][ T24] audit: type=1400 audit(1754395247.150:11220): avc: denied { bind } for pid=17373 comm="syz.9.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1885.525840][ T24] audit: type=1400 audit(1754395247.160:11221): avc: denied { node_bind } for pid=17373 comm="syz.9.4973" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1885.546296][ T24] audit: type=1400 audit(1754395248.440:11222): avc: denied { bind } for pid=17385 comm="syz.5.4976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1885.566079][T12009] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1885.616512][T17396] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17396 comm=syz.1.4978 [ 1885.711129][T17395] erofs: (device loop9): mounted with root inode @ nid 36. [ 1885.733597][T17395] attempt to access beyond end of device [ 1885.733597][T17395] loop9: rw=0, want=14546590696, limit=16 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.10.36 closed by remote host. [ 1886.971573][T15571] device bridge_slave_1 left promiscuous mode [ 1886.977885][T15571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.985836][T15571] device bridge_slave_0 left promiscuous mode [ 1886.992468][T15571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.001639][T15571] device veth1_macvtap left promiscuous mode [ 1887.007791][T15571] device veth0_vlan left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 1888.254512][T17404] kvm: exiting hardware virtualization [ 1888.262691][T17404] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1888.270107][T17404] ACPI: Preparing to enter system sleep state S5 [ 1888.277203][T17404] reboot: Power down serialport: VM disconnected.