last executing test programs: 2m43.430368935s ago: executing program 1 (id=120): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000002bc0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4868a3", 0x0, 0x33, 0x0, @rand_addr=' \x01\x00', @local}}}}, 0x0) 2m43.335550716s ago: executing program 1 (id=124): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd8c2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2m41.741932142s ago: executing program 1 (id=129): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000080)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x1, 0x1000, 0x1000, &(0x7f000009f000/0x1000)=nil}) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f00000000c0)=""/156, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff023}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m41.555899393s ago: executing program 1 (id=133): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x3, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffff}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc00}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9eb22086}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x60000080}, 0x20004810) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000140), 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x0, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xa, 0xc}, {0x3, 0xa207eaedb66f57a9}, {0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xc0000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000845}, 0x20004040) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x2200004, &(0x7f0000000140)={[{@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@data_err_ignore}, {@inlinecrypt}]}, 0xfc, 0x58d, &(0x7f00000007c0)="$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") r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)=ANY=[], 0x31) 2m41.200661415s ago: executing program 1 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m41.047992156s ago: executing program 1 (id=139): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000025000200000000000500020000000000b5000000000000000500feff000000009500000000000000bca432cd40130ab6358725da20ddae87ae912b03dea853cd999d98ac48a711b650c03aeab5356ef02caed4a9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000948a", @ANYRES32=0x0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect$cdc_ecm(0x2, 0x88, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x0, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "0045cf0207a2"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0xc224, 0x4}, [@mbim_extended={0xfffffffffffffe18, 0x24, 0x1c, 0x0, 0xe, 0xc}, @mdlm={0x15, 0x24, 0x12, 0x61}, @mbim_extended={0x8, 0x24, 0x1c, 0xde8, 0x5, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x5, 0x2, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xff, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xb, 0xe0}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0xff, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0xfa, 0x8a, 0x77, 0x10, 0x7}, 0x38, &(0x7f0000000500)={0x5, 0xf, 0x38, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x51, 0xf000, 0x1, [0xffff00, 0xfe40ff, 0x3f00, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x2, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x0, 0x7}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x302c}}, {0x22, &(0x7f0000000940)=ANY=[@ANYBLOB="22038f1a6e1482a367fc9d1a026cbd8b796ed93225464c2038e2de21aba15de320075fc290d601074f154507cc95e21f59af080ad5"]}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x0, 0x24, 0xf, {0xf, 0x3, "2a922a80dbdb79d96fba7b6a5d"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="200bde0000007e443a3852266ff2e3eb9bae54932f51231a382f10776c5ec8bec800a880f0d98aaae9fd634e047fda66e1e0b97c2867c5be9ef68527f3bb172831bcbb66de097418f5fba0645569b24b17b62b7e45edb6171c8714cbc8a774270c54061313860947b996de4f6df2ca25c056020ce7ee0ca9c7d343c8a7bebe2d2d7c5fb28fb1b5c52c4f22ed8a5a12e36b439aae5f2512fe074e1e105a0551e2ecd2e4e8e8031acd04c9af2c8c45e0ad86d7fdbd34978f1b49b229d1ce0607437a5e994504e97265326c8920e54dcf604307ed9e78c7b8737b"], &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r6, @ANYBLOB], 0x448}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "a4084e50eb13c635", "964de2454c058f14cfd3de57794a0b90ffd200ac5f8cbb97805ee4c532bb2f78", "de9a398b", "1ee9fcb3f47eb3ba"}, 0x38) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m40.969911836s ago: executing program 32 (id=139): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000025000200000000000500020000000000b5000000000000000500feff000000009500000000000000bca432cd40130ab6358725da20ddae87ae912b03dea853cd999d98ac48a711b650c03aeab5356ef02caed4a9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000948a", @ANYRES32=0x0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect$cdc_ecm(0x2, 0x88, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x0, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "0045cf0207a2"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0xc224, 0x4}, [@mbim_extended={0xfffffffffffffe18, 0x24, 0x1c, 0x0, 0xe, 0xc}, @mdlm={0x15, 0x24, 0x12, 0x61}, @mbim_extended={0x8, 0x24, 0x1c, 0xde8, 0x5, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x5, 0x2, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xff, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xb, 0xe0}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0xff, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0xfa, 0x8a, 0x77, 0x10, 0x7}, 0x38, &(0x7f0000000500)={0x5, 0xf, 0x38, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x51, 0xf000, 0x1, [0xffff00, 0xfe40ff, 0x3f00, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x2, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x0, 0x7}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x302c}}, {0x22, &(0x7f0000000940)=ANY=[@ANYBLOB="22038f1a6e1482a367fc9d1a026cbd8b796ed93225464c2038e2de21aba15de320075fc290d601074f154507cc95e21f59af080ad5"]}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x0, 0x24, 0xf, {0xf, 0x3, "2a922a80dbdb79d96fba7b6a5d"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="200bde0000007e443a3852266ff2e3eb9bae54932f51231a382f10776c5ec8bec800a880f0d98aaae9fd634e047fda66e1e0b97c2867c5be9ef68527f3bb172831bcbb66de097418f5fba0645569b24b17b62b7e45edb6171c8714cbc8a774270c54061313860947b996de4f6df2ca25c056020ce7ee0ca9c7d343c8a7bebe2d2d7c5fb28fb1b5c52c4f22ed8a5a12e36b439aae5f2512fe074e1e105a0551e2ecd2e4e8e8031acd04c9af2c8c45e0ad86d7fdbd34978f1b49b229d1ce0607437a5e994504e97265326c8920e54dcf604307ed9e78c7b8737b"], &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r6, @ANYBLOB], 0x448}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "a4084e50eb13c635", "964de2454c058f14cfd3de57794a0b90ffd200ac5f8cbb97805ee4c532bb2f78", "de9a398b", "1ee9fcb3f47eb3ba"}, 0x38) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 52.66386106s ago: executing program 2 (id=1046): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000003c0)=0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaadeaa000000000004000000000000000000000004907800000000e000000100000000001890780400"/58], 0x0) 52.5809449s ago: executing program 2 (id=1048): creat(&(0x7f0000000080)='./file0\x00', 0x2a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='mqueue\x00', 0x61012, 0x0) 52.569229221s ago: executing program 2 (id=1049): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {}, {0x2, 0x13, @l2={'ib', 0x3a, 'erspan0\x00'}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x80, 0x6, 0x1, 0x7}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044081) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="02180a090300000029bd7000fddbdd25010001004e210000"], 0x18}}, 0x20048040) 52.523034581s ago: executing program 2 (id=1050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpaprt54bC33Nv3X13NUxJZ9vJfk0jKaf1t5eXZiLjRWyXmIuJrX474ZnI8bmf/YGul2WzsluV6t7VT7+wf3N5srWw0NhrbS0uLzy+/sPzc8p2s9J7audDP/PhLn//5p7/1u7t/vvXtvFqf+0hUYqAd56nX9EqxL/ryfbT7MIJNwEzZnsqkKwIAwJnkx/gfjIhPFMf/1ZgpjuYGzEyiZgAAAMB5yb4wH/9OIjIAAADg0kojYj6StFaOBZiPNL1SXhv4cFxPm+1O91Pr7b3ttXxexEJU0vXNZuNOOVZ4ISpJXl4sx9j2y88OlJci4tGI+F71WlGurbabaxO+9gEAAADT4sbA+f8/qmmRP92Q/xMAAAAALq6FkQUAAADgsnDKDwAAAJff4Pm/+/0DAADApfKVl17KU9Z//vXaK/t7W+1Xbq81Olu11t5qbbW9u1PbaLc3inv2tU7bXrPd3vlMbO/dq3cbnW69s39wt9Xe2+7e3XzgEdgAAADAGD368Td+nUTE4WevFSnK+wACPOAPk64AcJ4M9YPp5S7eML0qk64AMHHJKfMN3gEAgPe/mx89/vt///n/rg3A5WasDwBMH7//w/SqGAEIU2u2vAbwgV7x6qjlRv7+/8uzRsqyiDerR6e4vggAAOM1X6QkrZXnAfORprVaxCMR6UJUkvXNZuNOeX7wq2rlal5eLNZMTh0zDAAAAAAAAAAAAAAAAAAAAAAAAAD0ZFkSGQAAAHCpRaR/Soq7+UfcrD49P3h94Eryz2r8sSz88OXv31vpdncX8+l/K57ldSUiuj8opz878vFhAAAAwHlLDkfO6p2nl6+LY60VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFPg7fuvrvbTOOP+5YsRsTAs/mzMFa9zUYmI639PYvbIeklEzJxD/MPXI+KxYfGTeCfLXouyFsPiX3vI8ReKXTM8fhoRN84hPkyzN/L+58Vhn780nixeh3/+Zsv0Xo3u/9Iy8mNFPzes/3nk2NZaQ2M8/tZP671c5Xj81yMenx3e//T732RE/KeObe1fWZYdj/+Nrx8cjGp/9qOIm0O/f5IHYtW7rZ16Z//g9mZrZaOx0dheWlp8fvmF5eeW79TXN5uN8u/QGN/92M/eGRU/b//1IfF/+5te/3tS+58etdEB/3nr3v0P9bLH3oA8/q2nhn7/zsWI+Gn53ffJMp/Pv9nPH/byRz3xkzefOKn9ayP2/2nv/60ztv+Zr37n92dcFAAYg87+wdZKs9nYPSEzd4Zl3o+ZX8xdiGr8j5nstd47d1Hq8/9m8qPVd6f0W3UBKnYkk40l1tXieP6sa10ZU9sn2i0BAAAPwbsH/ZOuCQAAAAAAAAAAAAAAAAAAAEyvcdxKbTDm4WSaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwov8GAAD//3QT3Gw=") open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x800) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r2], 0x1, 0x387, &(0x7f0000000e00)="$eJzs3c9rHGUYwPFnNpv9kdLsHkRRkDzoRS9DEj2rQVIQApa0K7aCMG0mumTcDTNLZEVMPHkVb/4DgqUHDwUPBfUfyMVbvXjx1FwKggYRR+bX7s529mdSsmm+H+juu/O+T+d9Z2fC8y7MO0fvf/3JzrZnblstyZUeiiEicixSlZwkjOitIBkO5NVLfz548dqNm0URWd9UvbJ2/bVVVV1c+unTz8txs/tFOax+ePRo9Y/DZw+fP/rv+sd1T+ueNpottfRW8/eWdcuxdavu7ZiqVx3b8mytNzzbjeqbUf2209zdbavV2Lq8sOvanqdWo607dltbTW25bbU+suoNLZqmXl7I6m6sOKTuvCpNEVO7s7lprU25w9tTxuG0/eP7/pBq112z5kTMcni99qrdeeJ9AwAAMyed/+u3ScJelVwnoTTiuUAhLKenAUH+n5Q3NtY3NZgsdPP/uy/90rr03r3FOP+/X8jK/1//LYpP5f/B3qfN/81B+f/3fZ/Lp3cgZ8X+JI1PlP9jNiylr8iH3Rl7LMj/g6uhM6P/8oO7y2GB/B8AAAAAAAAAAAAAAAAAAAAAgPPgOHjx/cqx71f8nn/dWwjizyHjYOiNxjh3cvH32//9F+MVBTrnA55K127clFJ4415+UcT5aq+2V4ve4/qk4bJU5N/wfIhFC05E6wlooCo/O/t7tfk4YC58XSuIiiO2rEhFqqn4sHzlnY31FY1E8eH+9/dqRn4hiN+Wehi/KhV5Jjt+NTO+IK+83BNvSkV+vS1NcWQrPK+78V+sqL797kZffDlsl+XNJ/uVAAAAAABw6kzVUjx9rqbnv9H83TRVs+qDubz0zs8f/32gM79ezpyf5ysv5M927AAAAAAAXBRe4bMdy3Fs12sPLJRlVJvkeRrD/5/sQn7sxgdR4UG4ZX5Y47meEY7bn0L8BI0JOi+TjdRynL+KknkwkyVcU1WlExxVy0nGP0bj0oSjsF0vN/nYbddbCvqjUw2np5D8bBRtmXvs0MnVQeE/GEnUZDtNVs4d1fi5b777e7pxGfGqvb1Vb9wrpUY6INzo23Iw4qR95Psj+zOf/dfix2keMgMAAABgRiRJf9lLtrx1th0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOACOtlKbOMVznqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKz4PwAA//+Rfe7G") mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x11, 0x0) rt_sigtimedwait(&(0x7f0000000340)={[0x7fffffff]}, &(0x7f0000000380), 0x0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800008000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) 51.108501687s ago: executing program 2 (id=1058): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000003c0)=0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaadeaa000000000004000000000000000000000004907800000000e000000100000000001890780400"/58], 0x0) 50.645275699s ago: executing program 2 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) getsockopt$inet_mreq(r1, 0x0, 0x50, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb653, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r8, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="002207000000ab34f5ac1d95"], 0x0}, 0x0) 50.645034999s ago: executing program 33 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) getsockopt$inet_mreq(r1, 0x0, 0x50, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb653, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r8, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="002207000000ab34f5ac1d95"], 0x0}, 0x0) 10.134520494s ago: executing program 6 (id=1326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x907}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2000000000000107, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c3000000f10000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) flistxattr(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xfffffffc}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="182100001c00000000000000008010d19329116326ad86"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000280)='./file0/file0\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8084}, 0x48010) unshare(0x0) 9.261125358s ago: executing program 6 (id=1331): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000640)="$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") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) prlimit64(r0, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={[&(0x7f0000000500)='sched_switch\x00', &(0x7f0000000540)='GPL\x00']}, &(0x7f0000000600)={[&(0x7f00000005c0)='{/#\"L\'B\x00']}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 9.204920288s ago: executing program 6 (id=1333): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$packet(0x11, 0xa, 0x300) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) 8.330888632s ago: executing program 6 (id=1338): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000640)="$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") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) prlimit64(r0, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={[&(0x7f0000000500)='sched_switch\x00', &(0x7f0000000540)='GPL\x00']}, &(0x7f0000000600)={[&(0x7f00000005c0)='{/#\"L\'B\x00']}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x13) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) r6 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r5, &(0x7f00000003c0)="fadd6b2688d5e16790d20320d3257c6a2fcb6f31b9f706263f1140c7049b656a4612b0e150197a8e4b5455b43eab28dbba6cdca412e97e2e3d2929179201d439fc57c7464401705a6f2af1c99ee500f68c66f305ed3d79c44605ca6c6cdc6ffc96aa3098123c359123b5799b22ae511d5293a6263d72981d98f77b9dd8a224679bac75b9acba", &(0x7f0000000100)=@tcp=r6, 0x2}, 0x20) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 7.984674714s ago: executing program 0 (id=1341): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x300) 7.984273864s ago: executing program 0 (id=1342): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000025000200000000000500020000000000b5000000000000000500feff000000009500000000000000bca432cd40130ab6358725da20ddae87ae912b03dea853cd999d98ac48a711b650c03aeab535"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000948a", @ANYRES32=0x0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect$cdc_ecm(0x2, 0x88, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x0, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "0045cf0207a2"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0xc224, 0x4}, [@mbim_extended={0xfffffffffffffe18, 0x24, 0x1c, 0x0, 0xe, 0xc}, @mdlm={0x15, 0x24, 0x12, 0x61}, @mbim_extended={0x8, 0x24, 0x1c, 0xde8, 0x5, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x5, 0x2, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xff, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xb, 0xe0}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0xff, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0xfa, 0x8a, 0x77, 0x10, 0x7}, 0x38, &(0x7f0000000500)={0x5, 0xf, 0x38, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x51, 0xf000, 0x1, [0xffff00, 0xfe40ff, 0x3f00, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x2, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x0, 0x7}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x302c}}, {0x22, &(0x7f0000000940)=ANY=[@ANYBLOB="22038f1a6e1482a367fc9d1a026cbd8b796ed93225464c2038e2de21aba15de320075fc290d601074f154507cc95e21f59af080ad5"]}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x0, 0x24, 0xf, {0xf, 0x3, "2a922a80dbdb79d96fba7b6a5d"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="200bde0000007e443a3852266ff2e3eb9bae54932f51231a382f10776c5ec8bec800a880f0d98aaae9fd634e047fda66e1e0b97c2867c5be9ef68527f3bb172831bcbb66de097418f5fba0645569b24b17b62b7e45edb6171c8714cbc8a774270c54061313860947b996de4f6df2ca25c056020ce7ee0ca9c7d343c8a7bebe2d2d7c5fb28fb1b5c52c4f22ed8a5a12e36b439aae5f2512fe074e1e105a0551e2ecd2e4e8e8031acd04c9af2c8c45e0ad86d7fdbd34978f1b49b229d1ce0607437a5e994504e97265326c8920e54dcf604307ed9e78c7b8737b"], &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r6, @ANYBLOB], 0x448}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "a4084e50eb13c635", "964de2454c058f14cfd3de57794a0b90ffd200ac5f8cbb97805ee4c532bb2f78", "de9a398b", "1ee9fcb3f47eb3ba"}, 0x38) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.350155577s ago: executing program 6 (id=1345): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001380)={0x40, 0xa, 0x4, "71109190"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000011c0)={0x40, 0x11, 0x4, "ac92f738"}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001600)={0x44, &(0x7f00000013c0)={0x40, 0xd, 0x4, "bdc5c376"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x60, 0x0, 0x1d, "eda6c147808eda33f3297d8ef939dac7a8affbdd3fe6bd3bdb133255e1"}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x15}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000140)={0x0, 0x24, 0xc7, {0xc7, 0x1, "991a1966233ec7052f3ad2e3020b6ad69f7194309619536f3c86984e492cb40b5d570d4f3f5c5cf376b0ef74837d64e4d049cbd4f0b9e5c880bdc2e0bc51858545527b6510d7515b0d3c7d11e74bff3d65a3dfbf163e6c84dc07e99a0375bb8b92aafb3711b42dea332dd145306432438bae1fbc5fe053b8cf6c04038f2a6424f362ae33f9b56f6e81d90dc006b13d6f3136fa1ecdaf65b346fc1d7f45abf87521cbfff1aa62cc5b5007f527da4f4caa892b5bc9559ed7387a230a4a4cd62ba1cdab27f1ec"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x1c, &(0x7f00000002c0)={0x60, 0xb, 0x1e, "d9275b6538a06f461a228a4eb409830912e1a9bafd64fd98ae09d0ba4736"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}}}, 0x10) 4.950417147s ago: executing program 3 (id=1355): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000640)="$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") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) prlimit64(r0, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={[&(0x7f0000000500)='sched_switch\x00', &(0x7f0000000540)='GPL\x00']}, &(0x7f0000000600)={[&(0x7f00000005c0)='{/#\"L\'B\x00']}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x13) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) r6 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r5, &(0x7f00000003c0)="fadd6b2688d5e16790d20320d3257c6a2fcb6f31b9f706263f1140c7049b656a4612b0e150197a8e4b5455b43eab28dbba6cdca412e97e2e3d2929179201d439fc57c7464401705a6f2af1c99ee500f68c66f305ed3d79c44605ca6c6cdc6ffc96aa3098123c359123b5799b22ae511d5293a6263d72981d98f77b9dd8a224679bac75b9acba", &(0x7f0000000100)=@tcp=r6, 0x2}, 0x20) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 4.915663148s ago: executing program 0 (id=1357): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = io_uring_setup(0x7958, &(0x7f0000001580)={0x0, 0x5a15, 0x4, 0x1, 0x377}) syz_io_uring_setup(0x70d7, &(0x7f0000001600)={0x0, 0x580b, 0x200, 0x3, 0x6c, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000180)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0xf1, 0xc8, 0x0, {0x5, 0x4, 0x1, 0x2, 0x3a1, 0x66, 0x6, 0x4, 0x1, 0x1, @local, @local}, "19d38f3af203feed"}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0) pread64(0xffffffffffffffff, 0x0, 0xffa7, 0x6) syz_emit_ethernet(0x22, &(0x7f0000000a40)={@multicast, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0xd, 0x14, 0x68, 0x0, 0x6a, 0x7, 0x0, @rand_addr=0x64010100, @local}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 4.520025639s ago: executing program 5 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x907}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2000000000000107, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c3000000f10000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) flistxattr(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xfffffffc}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="182100001c00000000000000008010d19329116326ad86"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000280)='./file0/file0\x00', 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8084}, 0x48010) close(0xffffffffffffffff) unshare(0x0) 3.981455672s ago: executing program 0 (id=1360): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r1) faccessat2(r2, &(0x7f0000000880)='\x00', 0x1, 0x1100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 3.865653542s ago: executing program 0 (id=1361): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$packet(0x11, 0x3, 0x300) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) 3.626863443s ago: executing program 5 (id=1362): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.626479983s ago: executing program 3 (id=1363): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f00)='./binderfs/binder1\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) pipe(&(0x7f00000001c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) pwrite64(r0, &(0x7f0000000000)="aac91d22072bddd5238727fa0a455adaf78a2220339260b0a7da8b831d7c099637de0ab22025d3dfe70dbb8ba10543da148d19de5ed4899adb3fde3ca5e643cf3a882b9c6ae36c582d0ed0b31e60e935b7fa9ade0482cd25235cf4d870eb50f19a0824bc3af8e09bcb482f065b8f1dddac19c01f81887caa726e4775", 0x7c, 0xbd7e) 3.548485454s ago: executing program 3 (id=1364): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000c40)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb7cc932c268c3d55a5a72dd80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f57d6c74cf34e752cb5972965460206c48fb1e69cf5b80493e86e42a3a41a04fee4fd2f68f3a955e61d51ce960b41c9bf014e32c9c78"], 0x0, 0x307, &(0x7f0000000080)="$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") rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1e5, &(0x7f0000000700)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x418, 0xd0, 0x178, 0xffffffff, 0x178, 0xd0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@inet=@set2={{0x28}, {{0x3, 0x5, 0x5}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @loopback, @gre_key, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pimreg0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @local, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) fadvise64(r3, 0x0, 0x0, 0x3) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0xacc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r5, &(0x7f00000001c0), 0x0}, 0x20) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/63, 0x3f) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffca3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000002c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x61, 0x60000000, 0x0, 0x7000000}, 0x2c) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="2d706572665f6576656e74202b637075736574202d63707561636374202d637075736574202b726c6974202d726c696d6974202c68756765746c62202b696f2000003d60b23c0bb5813b4de67edc67d49832daa2b2b874c57183f23d3519e19c51a60861681e6e44753a635fe89836efdec21432ac501d43135dcffd3d05b5159c3f3a397c9301a37e8daaaa777acf88329d77cbf00897"], 0x42) 3.355113195s ago: executing program 3 (id=1365): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x0, @dev}, &(0x7f0000000140)=0x80) connect$inet6(r1, &(0x7f0000000380)={0xa, 0xe25, 0x0, @private0, 0x1}, 0x1c) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x1}}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)=@deltfilter={0x30, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0x3, 0x7}, {0x4, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4040, &(0x7f0000001800)={[{@test_dummy_encryption_v1}, {@data_err_abort}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@oldalloc}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5f6, &(0x7f0000001ec0)="$eJzs3ctvVNUfAPDvnT7og9+vhRgVF9LEGEiUlhYwxLiArSENPuLGjZUWRAo0tEaLJpQENybGjTEmrlyI/4US2bLSlQs3rgwJUcPSxDF3Ord02jt9TB+35X4+ybTn3jOXcy7T75xzz5xzJ4DSGkh/VCIORMRUEtGXzC3ktUc9c2D+eQ///uRc+kiiWn3jzySS+r7s+Un9d2/94K6I+PmnJPa3LS93evb6pbHJyYlr9e2hmctTQ9Oz149cvDx2YeLCxJWRl0ZOnjh+4uTw0ZbO60bOvjO33v+w77PRt7/75p9k+PvfRpM4Fa/Wn7j4PDbLQAzU/k+S5Vm9Jze7sIK01f9OFr/ESXuBFWJdstevIyKeir5oi0cvXl98+lqhlQO2VDWJqAIllYh/KKmsH5Bd2y+9Dq4U0isBtsOD0/MDAMvjv31+bDC6amMDPQ+TWDysk0REayNzjfZGxL27o7fO3x29FVs0Dgfkm7sZEU/nxX9Si//+6Ir+WvxXGuI/7Recrf9O97/eYvlLh4rFP2yf+fjvWjH+o0n8v7Mo/t9tsfyBR8n3uhviv7vVUwIAAAAAAIDSunM6Il7M+/y/sjD/J3Lm//RGxKlNKH9gyfbyz/8r9zehGCDHg9MRr+TO/61ks3/72+qp/9XmA3Qk5y9OThyNiP9HxOHo2JNuD69QxpHP93/dLG+gPv8ve6Tl36vPBazX4377nsZjxsdmxjZ63kDEg5sRz+TO/00W2v8kp/1P3w+m1ljG/udvn22Wt3r8A1ul+m3Eodz2/9FdK5KV788xVOsPDGW9guWe/fiLH5qV32r8u8UEbFza/vesHP/9yeL79Uyvv4xjs+3VZnmt9v87kzdrt5zprO/7aGxm5tpwRGdypi3d27B/ZP11hl1pbuXsLB6yeEnj//BzK4//5fX/u3OKSv5qXFOcefLf3t+b1Uf/H4qTxv/4utr/9SdGbvf/2Kz8tbX/x2tt/eH6HuN/MO+rLEw7F3Z1pD9ywjFrvhuyiqgzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOx2lYjYG0llcCFdqQwORvRGxBPRU5m8Oj3zwvmrH1wZT/Nq3/9fyb7pt29+O8m+/79/0fbIku1jEbEvIr5s665tD567Ojle9MkDAAAAAAAAAAAAAAAAAADADtHbZP1/6o+2omsHbLn2oisAFCYn/n8poh7A9tP+Q3mJfygv8Q/lJf6hvFqM/5ubXQ9g+2n/obzEP5SX+AcAAAAAgMfKvoN3fk0iYu7l7toj1VnP6yi0ZsBWqxRdAaAwbvED5dXS1B9vGvBYcI0PJKvkdzU9aLUjVzJ1bgMHAwAAAAAAAAAAAEDpHDpg/T+UlfX/UF6W8kJ5Zev/DxZcD2D7ucYHYpWV/Lnr/1c9CgAAAAAAAAAAAADYTNOz1y+NTU5OXFs90RMRa37yLky8tdF/p2MnnMW6EtVq9Ub6V7BT6rPLE9lU+J1SnyWJbK3f2o4q7j0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo9F8AAAD//1mMI6g=") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x5a59) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) open(&(0x7f0000000340)='./mnt\x00', 0x100, 0x15e) write$binfmt_script(r4, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001d00)="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", 0x1a9}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000300)="c674d8e9287bafe3bf05c804c9364b67d5e45b25a6e38f300c80da9af8db61476163a8b2e99a1ed6f75abbb1", 0x2c}, {&(0x7f0000000a00)="4633f7479450bc83a5eae4bf023780b042aa70b2e69d8563ad2255851677f74374369be7f5ba1c8197fe6760eb1612b539352b39c8f40535b12701746f8611f4fe6c28ad349c553fe14e4ecd66734818d2df05d91814ba84267292c560f2eecccde8910faf4007", 0x67}], 0x2, &(0x7f0000001900)=ANY=[], 0x98}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)="ba768e4e7be8450242119538982f2c615a3376e8650d89f20547e7d393e45cd10ac4c48d21fe568527a2bf8ca6b809cb3aeb36", 0x33}, {&(0x7f0000001a40)="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", 0x106}, {&(0x7f0000000cc0)="c4ca5e10ca3b3c8a780f933eb46d965ed2ec47a5c1f8567bdbe2c3b94030987d79f76b129987d96875114cd8210752fd60d544aeaf7ad28a948e95d8721c5493a256e26f0e66514436c0e0aa3510", 0x4e}, {&(0x7f0000000d40)="f90b2b813fd3e4885edf40ef319857a58129ef73842dffb553920c626fe0e3d21e4b0eb97135fe58cdaa80610113e60d8693510b929b41968ae4", 0x3a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000dc0)="c6d565087ccfef045cf3f5c531e0db4291c811b230a9f1d2c48038b0534ffc2bf391915f5b589e6ea09f86a0ddf68d9eece0df783f6e053217d874544be0c4e662c74cd7d6384fceef9ea3fda943124c4169fd69d71650592e8dc13f8fbc983ee51c7f", 0x63}, {&(0x7f0000001b80)="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", 0x16c}, {&(0x7f0000000f00)="0126d4e33de9db3b5387a04781459c6e8528197c9648d8341722d5fafa74796a1bda5e895c4b617c3cfc42bd80adebcaf525c5727349b09d01ce7fb629c50457d54dd69c7a89d0d1aace8136b1bff55449cee1d2c603b6ef5ac62b1dec199dbe1a8a6151003ed22dac2d884d0188c76dabe536026a06aad3a4612828ffc70acff2a2efaa7eca39bb2c13b5c5a01a2957eb1830da94cc7d15f14dcfd40e9cb248b37b16207aa19148e262a262891bc044d6b9eee8db8dd4e1fe8fd1ac1553c4fb07c66052fa7086e2e07476dac3de383f986ba3af5f848c8be059725fd419", 0xde}, {&(0x7f00000010c0)="189060e76610a3c3248518ca9e856d77f5dcb57dcc86813834a160f10b2dce08737621caa5867fb1a4e8b51896469814c1067e194d4e1b754c93ccc8c01881f6e308596cc7e030da984cc56d7fa2781f6f6cb75607ccc27e50e2504413fff75c90665bfc57e9d9084d54a66bbbeb0b84bafb0c792653fe2c0d95579cb93bc4444d2ad4c88b3596ca9c57f42f9f4946b0ed4fe18ab092222ad82019df60e31f0b1a86d5880ae4a160434d0808780679d524b9c81fd316197f13757d1177f061a7ba08ce7e9275c0283d8f38d27773c8980ca9a3e1a16bc2a52048bfe1bfe45d886047948b658af509b717", 0xea}, {&(0x7f00000011c0)="6ddfe722f7f48ac9bcd7358ad1c1ab1dddae867e8cb7b85373afa29dfacfb216a9bef48071e268a47fee24802d8664fd558b36473a9e7705e163719d51cde3336b5d29a7c7d0875ec130977b9d8ab1cdb5a2a8856c1d74465bba462f60b5bf93cf4e4f9e8a3dd192110d4ae0c9637173818709fccb32ebdbde2a20309274ab8887e4d8a5e8ef8ee76636df4e57849bbe9aec31589e38f65561a686cc55169d3827c0ed5dcac11da1c04cb9a0975269a80965210f76ab2cec2dce1e", 0xbb}, {&(0x7f00000012c0)="a4c0e8014a273c06cc3930888dced23481cf87535b7c5170368e53f95ea9e1b4ce18f02d6e4947a82d8f42be63b19b36382f5732e016fd3ba56082d7cd75bec384e9eaeb5071dbd474c9c6b7592183366864fd7272086b645e5c3a0aa0eb83faec6151c6e2b7a224412b452430152b4be7dff3424a6720a72f722389fac1410e40a1a50e556168ea0d4d0d4b34cca200d13c13b98f35ce09dab966dfff71a3e236d432d0f89401f6e0f97ce5b249ff725d165fc1918480d8568f574fc6b395146617dac7036f1ae256afae38d7b8864470d7f31a981dd7b6ba1ea4f5b73689fdd19be5056605d10b2129d48ec6cdb3", 0xef}], 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="78000000000000002900000036000000040b000000000000c20400000002000100050200400502000701090000000000000000000740000000000e0807000700000000000000ba06000000000000600f0000000000000400000000000000090000000000000000000000000000800200000000000000000014000000000000002900000043000000040000000000000024000000000000002900000032000000ff010000000000000000000000000001", @ANYRESDEC, @ANYBLOB="2b6bd16a"], 0xfffffffffffffca6}}], 0x4, 0x44000044) pipe(&(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0x7) 3.214814285s ago: executing program 4 (id=1366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0x118, 0x118, 0x1b0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x4, 0x3, 0x1, 0x17}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x84, 0x3, 0x24}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='signal_deliver\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.122571366s ago: executing program 6 (id=1367): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000025000200000000000500020000000000b5000000000000000500feff000000009500000000000000bca432cd40130ab6358725da20ddae87ae912b03dea853cd999d98ac48a711b650c03aeab5356ef02c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000948a", @ANYRES32=0x0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect$cdc_ecm(0x2, 0x88, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x0, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "0045cf0207a2"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0xc224, 0x4}, [@mbim_extended={0xfffffffffffffe18, 0x24, 0x1c, 0x0, 0xe, 0xc}, @mdlm={0x15, 0x24, 0x12, 0x61}, @mbim_extended={0x8, 0x24, 0x1c, 0xde8, 0x5, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x5, 0x2, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xff, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xb, 0xe0}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0xff, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0xfa, 0x8a, 0x77, 0x10, 0x7}, 0x38, &(0x7f0000000500)={0x5, 0xf, 0x38, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x51, 0xf000, 0x1, [0xffff00, 0xfe40ff, 0x3f00, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x2, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x0, 0x7}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x302c}}, {0x22, &(0x7f0000000940)=ANY=[@ANYBLOB="22038f1a6e1482a367fc9d1a026cbd8b796ed93225464c2038e2de21aba15de320075fc290d601074f154507cc95e21f59af080ad5"]}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x0, 0x24, 0xf, {0xf, 0x3, "2a922a80dbdb79d96fba7b6a5d"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="200bde0000007e443a3852266ff2e3eb9bae54932f51231a382f10776c5ec8bec800a880f0d98aaae9fd634e047fda66e1e0b97c2867c5be9ef68527f3bb172831bcbb66de097418f5fba0645569b24b17b62b7e45edb6171c8714cbc8a774270c54061313860947b996de4f6df2ca25c056020ce7ee0ca9c7d343c8a7bebe2d2d7c5fb28fb1b5c52c4f22ed8a5a12e36b439aae5f2512fe074e1e105a0551e2ecd2e4e8e8031acd04c9af2c8c45e0ad86d7fdbd34978f1b49b229d1ce0607437a5e994504e97265326c8920e54dcf604307ed9e78c7b8737b"], &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r6, @ANYBLOB], 0x448}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "a4084e50eb13c635", "964de2454c058f14cfd3de57794a0b90ffd200ac5f8cbb97805ee4c532bb2f78", "de9a398b", "1ee9fcb3f47eb3ba"}, 0x38) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.048761666s ago: executing program 3 (id=1368): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) 3.014273406s ago: executing program 0 (id=1369): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000025000200000000000500020000000000b5000000000000000500feff000000009500000000000000bca432cd40130ab6358725da20ddae87ae912b03dea853cd999d98ac48a711b6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000948a", @ANYRES32=0x0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect$cdc_ecm(0x2, 0x88, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x0, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "0045cf0207a2"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0xc224, 0x4}, [@mbim_extended={0xfffffffffffffe18, 0x24, 0x1c, 0x0, 0xe, 0xc}, @mdlm={0x15, 0x24, 0x12, 0x61}, @mbim_extended={0x8, 0x24, 0x1c, 0xde8, 0x5, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x5, 0x2, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xff, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xb, 0xe0}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0xff, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0xfa, 0x8a, 0x77, 0x10, 0x7}, 0x38, &(0x7f0000000500)={0x5, 0xf, 0x38, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x51, 0xf000, 0x1, [0xffff00, 0xfe40ff, 0x3f00, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x2, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x0, 0x7}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x302c}}, {0x22, &(0x7f0000000940)=ANY=[@ANYBLOB="22038f1a6e1482a367fc9d1a026cbd8b796ed93225464c2038e2de21aba15de320075fc290d601074f154507cc95e21f59af080ad5"]}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x0, 0x24, 0xf, {0xf, 0x3, "2a922a80dbdb79d96fba7b6a5d"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="200bde0000007e443a3852266ff2e3eb9bae54932f51231a382f10776c5ec8bec800a880f0d98aaae9fd634e047fda66e1e0b97c2867c5be9ef68527f3bb172831bcbb66de097418f5fba0645569b24b17b62b7e45edb6171c8714cbc8a774270c54061313860947b996de4f6df2ca25c056020ce7ee0ca9c7d343c8a7bebe2d2d7c5fb28fb1b5c52c4f22ed8a5a12e36b439aae5f2512fe074e1e105a0551e2ecd2e4e8e8031acd04c9af2c8c45e0ad86d7fdbd34978f1b49b229d1ce0607437a5e994504e97265326c8920e54dcf604307ed9e78c7b8737b"], &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r6, @ANYBLOB], 0x448}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "a4084e50eb13c635", "964de2454c058f14cfd3de57794a0b90ffd200ac5f8cbb97805ee4c532bb2f78", "de9a398b", "1ee9fcb3f47eb3ba"}, 0x38) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.904406677s ago: executing program 3 (id=1370): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000025000200000000000500020000000000b5000000000000000500feff000000009500000000000000bca432cd40130ab6358725da20ddae87ae912b03dea853cd999d98ac48a711b650c03aeab535"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000948a", @ANYRES32=0x0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect$cdc_ecm(0x2, 0x88, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x0, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "0045cf0207a2"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0xc224, 0x4}, [@mbim_extended={0xfffffffffffffe18, 0x24, 0x1c, 0x0, 0xe, 0xc}, @mdlm={0x15, 0x24, 0x12, 0x61}, @mbim_extended={0x8, 0x24, 0x1c, 0xde8, 0x5, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x5, 0x2, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xff, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xb, 0xe0}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0xff, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0xfa, 0x8a, 0x77, 0x10, 0x7}, 0x38, &(0x7f0000000500)={0x5, 0xf, 0x38, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x51, 0xf000, 0x1, [0xffff00, 0xfe40ff, 0x3f00, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x2, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x0, 0x7}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x302c}}, {0x22, &(0x7f0000000940)=ANY=[@ANYBLOB="22038f1a6e1482a367fc9d1a026cbd8b796ed93225464c2038e2de21aba15de320075fc290d601074f154507cc95e21f59af080ad5"]}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x0, 0x24, 0xf, {0xf, 0x3, "2a922a80dbdb79d96fba7b6a5d"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="200bde0000007e443a3852266ff2e3eb9bae54932f51231a382f10776c5ec8bec800a880f0d98aaae9fd634e047fda66e1e0b97c2867c5be9ef68527f3bb172831bcbb66de097418f5fba0645569b24b17b62b7e45edb6171c8714cbc8a774270c54061313860947b996de4f6df2ca25c056020ce7ee0ca9c7d343c8a7bebe2d2d7c5fb28fb1b5c52c4f22ed8a5a12e36b439aae5f2512fe074e1e105a0551e2ecd2e4e8e8031acd04c9af2c8c45e0ad86d7fdbd34978f1b49b229d1ce0607437a5e994504e97265326c8920e54dcf604307ed9e78c7b8737b"], &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r6, @ANYBLOB], 0x448}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "a4084e50eb13c635", "964de2454c058f14cfd3de57794a0b90ffd200ac5f8cbb97805ee4c532bb2f78", "de9a398b", "1ee9fcb3f47eb3ba"}, 0x38) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.733697568s ago: executing program 5 (id=1371): r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000080ba3bdf9959cb175ef54debfc48d1d02bb7e650a520bf130cee2b69808663d35842263af6abc46462cd16097b028862119ef2949c12ae88b23893e735020e7f901173449f9061c5f8cd412ea28cf62af0d3e17627321dddb7b28c15a3d20376f3170fc4796760b41fead473fe4e4c314c2f73480dc97326a4a5cfc48cb5a431ded00cd1bcf82f47054f2d3adec558188ed3d819f88d00"/188], 0x0, 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.337466999s ago: executing program 4 (id=1372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x907}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2000000000000107, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c3000000f10000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) flistxattr(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xfffffffc}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="182100001c00000000000000008010d19329116326ad86"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000280)='./file0/file0\x00', 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8084}, 0x48010) close(0xffffffffffffffff) unshare(0x0) 1.829210361s ago: executing program 5 (id=1373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x907}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2000000000000107, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c3000000f10000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) flistxattr(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="182100001c00000000000000008010d19329116326ad86"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000280)='./file0/file0\x00', 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8084}, 0x48010) recvmsg(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) unshare(0x0) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) 1.473254773s ago: executing program 4 (id=1374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mkdir(&(0x7f00000002c0)='./bus\x00', 0x10c) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000f40)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 1.472494483s ago: executing program 4 (id=1375): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83) ftruncate(r2, 0x3000000) sendfile(r1, r2, 0x0, 0x80000001) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xffdd) 1.254211744s ago: executing program 4 (id=1376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") (fail_nth: 10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x20100, 0x0) r7 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r7, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFBR(r7, 0x8941, 0x0) ftruncate(r6, 0x2007ffb) sendfile(r5, r6, 0x0, 0x1000000211005) 844.716826ms ago: executing program 5 (id=1377): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007000000000000", @ANYBLOB="00000000000000000000408b0000"], 0x48) fgetxattr(r4, &(0x7f0000000180)=@random={'system.', ')#(\x00'}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_gfeatures}) listen(0xffffffffffffffff, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r9 = syz_open_pts(r0, 0x0) dup3(r9, r0, 0x0) 221.05µs ago: executing program 5 (id=1378): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x0, @dev}, &(0x7f0000000140)=0x80) connect$inet6(r1, &(0x7f0000000380)={0xa, 0xe25, 0x0, @private0, 0x1}, 0x1c) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x1}}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)=@deltfilter={0x30, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0x3, 0x7}, {0x4, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4040, &(0x7f0000001800)={[{@test_dummy_encryption_v1}, {@data_err_abort}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@oldalloc}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5f6, &(0x7f0000001ec0)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x5a59) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) open(&(0x7f0000000340)='./mnt\x00', 0x100, 0x15e) write$binfmt_script(r4, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001d00)="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", 0x1a9}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000300)="c674d8e9287bafe3bf05c804c9364b67d5e45b25a6e38f300c80da9af8db61476163a8b2e99a1ed6f75abbb1", 0x2c}, {&(0x7f0000000a00)="4633f7479450bc83a5eae4bf023780b042aa70b2e69d8563ad2255851677f74374369be7f5ba1c8197fe6760eb1612b539352b39c8f40535b12701746f8611f4fe6c28ad349c553fe14e4ecd66734818d2df05d91814ba84267292c560f2eecccde8910faf4007", 0x67}], 0x2, &(0x7f0000001900)=ANY=[], 0x98}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)="ba768e4e7be8450242119538982f2c615a3376e8650d89f20547e7d393e45cd10ac4c48d21fe568527a2bf8ca6b809cb3aeb36", 0x33}, {&(0x7f0000001a40)="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", 0x106}, {&(0x7f0000000cc0)="c4ca5e10ca3b3c8a780f933eb46d965ed2ec47a5c1f8567bdbe2c3b94030987d79f76b129987d96875114cd8210752fd60d544aeaf7ad28a948e95d8721c5493a256e26f0e66514436c0e0aa3510", 0x4e}, {&(0x7f0000000d40)="f90b2b813fd3e4885edf40ef319857a58129ef73842dffb553920c626fe0e3d21e4b0eb97135fe58cdaa80610113e60d8693510b929b41968ae4", 0x3a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000dc0)="c6d565087ccfef045cf3f5c531e0db4291c811b230a9f1d2c48038b0534ffc2bf391915f5b589e6ea09f86a0ddf68d9eece0df783f6e053217d874544be0c4e662c74cd7d6384fceef9ea3fda943124c4169fd69d71650592e8dc13f8fbc983ee51c7f", 0x63}, {&(0x7f0000001b80)="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", 0x16c}, {&(0x7f0000000f00)="0126d4e33de9db3b5387a04781459c6e8528197c9648d8341722d5fafa74796a1bda5e895c4b617c3cfc42bd80adebcaf525c5727349b09d01ce7fb629c50457d54dd69c7a89d0d1aace8136b1bff55449cee1d2c603b6ef5ac62b1dec199dbe1a8a6151003ed22dac2d884d0188c76dabe536026a06aad3a4612828ffc70acff2a2efaa7eca39bb2c13b5c5a01a2957eb1830da94cc7d15f14dcfd40e9cb248b37b16207aa19148e262a262891bc044d6b9eee8db8dd4e1fe8fd1ac1553c4fb07c66052fa7086e2e07476dac3de383f986ba3af5f848c8be059725fd419", 0xde}, {&(0x7f00000010c0)="189060e76610a3c3248518ca9e856d77f5dcb57dcc86813834a160f10b2dce08737621caa5867fb1a4e8b51896469814c1067e194d4e1b754c93ccc8c01881f6e308596cc7e030da984cc56d7fa2781f6f6cb75607ccc27e50e2504413fff75c90665bfc57e9d9084d54a66bbbeb0b84bafb0c792653fe2c0d95579cb93bc4444d2ad4c88b3596ca9c57f42f9f4946b0ed4fe18ab092222ad82019df60e31f0b1a86d5880ae4a160434d0808780679d524b9c81fd316197f13757d1177f061a7ba08ce7e9275c0283d8f38d27773c8980ca9a3e1a16bc2a52048bfe1bfe45d886047948b658af509b717", 0xea}, {&(0x7f00000011c0)="6ddfe722f7f48ac9bcd7358ad1c1ab1dddae867e8cb7b85373afa29dfacfb216a9bef48071e268a47fee24802d8664fd558b36473a9e7705e163719d51cde3336b5d29a7c7d0875ec130977b9d8ab1cdb5a2a8856c1d74465bba462f60b5bf93cf4e4f9e8a3dd192110d4ae0c9637173818709fccb32ebdbde2a20309274ab8887e4d8a5e8ef8ee76636df4e57849bbe9aec31589e38f65561a686cc55169d3827c0ed5dcac11da1c04cb9a0975269a80965210f76ab2cec2dce1e", 0xbb}, {&(0x7f00000012c0)="a4c0e8014a273c06cc3930888dced23481cf87535b7c5170368e53f95ea9e1b4ce18f02d6e4947a82d8f42be63b19b36382f5732e016fd3ba56082d7cd75bec384e9eaeb5071dbd474c9c6b7592183366864fd7272086b645e5c3a0aa0eb83faec6151c6e2b7a224412b452430152b4be7dff3424a6720a72f722389fac1410e40a1a50e556168ea0d4d0d4b34cca200d13c13b98f35ce09dab966dfff71a3e236d432d0f89401f6e0f97ce5b249ff725d165fc1918480d8568f574fc6b395146617dac7036f1ae256afae38d7b8864470d7f31a981dd7b6ba1ea4f5b73689fdd19be5056605d10b2129d48ec6cdb3", 0xef}], 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="78000000000000002900000036000000040b000000000000c20400000002000100050200400502000701090000000000000000000740000000000e0807000700000000000000ba06000000000000600f0000000000000400000000000000090000000000000000000000000000800200000000000000000014000000000000002900000043000000040000000000000024000000000000002900000032000000ff010000000000000000000000000001", @ANYRESDEC, @ANYBLOB="2b6bd16a"], 0xfffffffffffffca6}}], 0x4, 0x44000044) pipe(&(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0x7) 0s ago: executing program 4 (id=1379): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$packet(0x11, 0x3, 0x300) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) kernel console output (not intermixed with test programs): moved oldalloc option [ 377.848842][ T3591] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,data_err=abort,inlinecrypt,commit=0x0000000000000005,noinit_itable,oldalloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 378.033610][ T3616] 9pnet: Insufficient options for proto=fd [ 378.097018][ T3619] loop3: detected capacity change from 0 to 16 [ 378.131395][ T3619] erofs: (device loop3): mounted with root inode @ nid 36. [ 378.149805][ T3619] attempt to access beyond end of device [ 378.149805][ T3619] loop3: rw=0, want=14552337264, limit=16 [ 378.161699][ T3619] attempt to access beyond end of device [ 378.161699][ T3619] loop3: rw=0, want=14546590688, limit=16 [ 378.850928][ T874] usb 6-1: USB disconnect, device number 10 [ 379.130959][ T1819] usb 1-1: USB disconnect, device number 15 [ 379.161650][ T3633] loop5: detected capacity change from 0 to 512 [ 379.179661][ T3633] EXT4-fs (loop5): Ignoring removed oldalloc option [ 379.196898][ T3633] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 379.211926][ T3641] overlayfs: statfs failed on './file0' [ 379.255294][ T3645] 9pnet: Insufficient options for proto=fd [ 379.277208][ T3649] loop0: detected capacity change from 0 to 512 [ 379.300589][ T3649] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 379.307706][ T3633] loop5: detected capacity change from 0 to 1024 [ 379.313284][ T3649] EXT4-fs (loop0): 1 orphan inode deleted [ 379.322388][ T3649] EXT4-fs (loop0): 1 truncate cleaned up [ 379.328018][ T3649] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 379.359627][ T3633] EXT4-fs (loop5): Test dummy encryption mode enabled [ 379.366610][ T3633] EXT4-fs (loop5): Ignoring removed oldalloc option [ 379.377560][ T3633] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,data_err=abort,inlinecrypt,commit=0x0000000000000005,noinit_itable,oldalloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 379.445856][ T3654] loop5: detected capacity change from 0 to 16 [ 379.530346][ T3654] erofs: (device loop5): mounted with root inode @ nid 36. [ 379.556379][ T3654] attempt to access beyond end of device [ 379.556379][ T3654] loop5: rw=0, want=14552337264, limit=16 [ 379.562290][ T3659] loop2: detected capacity change from 0 to 128 [ 379.577812][ T3654] attempt to access beyond end of device [ 379.577812][ T3654] loop5: rw=0, want=14546590688, limit=16 [ 379.649513][ T3659] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 379.658399][ T60] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 379.679692][ T3659] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 380.164112][ T3662] FAULT_INJECTION: forcing a failure. [ 380.164112][ T3662] name failslab, interval 1, probability 0, space 0, times 0 [ 380.176656][ T3662] CPU: 0 PID: 3662 Comm: syz.2.925 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 380.186284][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 380.196184][ T3662] Call Trace: [ 380.199297][ T3662] [ 380.202076][ T3662] dump_stack_lvl+0x151/0x1c0 [ 380.206677][ T3662] ? io_uring_drop_tctx_refs+0x190/0x190 [ 380.212408][ T3662] ? trace_raw_output_block_rq_remap+0x240/0x240 [ 380.218567][ T3662] dump_stack+0x15/0x20 [ 380.222652][ T3662] should_fail+0x3c6/0x510 [ 380.226917][ T3662] ? mempool_free+0x310/0x310 [ 380.231437][ T3662] __should_failslab+0xa4/0xe0 [ 380.236061][ T3662] ? mempool_alloc_slab+0x1d/0x30 [ 380.240872][ T3662] should_failslab+0x9/0x20 [ 380.245212][ T3662] slab_pre_alloc_hook+0x37/0xd0 [ 380.249987][ T3662] ? mempool_free+0x310/0x310 [ 380.254505][ T3662] ? mempool_alloc_slab+0x1d/0x30 [ 380.259360][ T3662] kmem_cache_alloc+0x44/0x200 [ 380.263960][ T3662] ? mempool_free+0x310/0x310 [ 380.268479][ T3662] mempool_alloc_slab+0x1d/0x30 [ 380.273158][ T3662] mempool_alloc+0x149/0x550 [ 380.277763][ T3662] ? mempool_resize+0x840/0x840 [ 380.282448][ T3662] ? submit_bio+0x3a0/0x660 [ 380.286785][ T3662] bio_alloc_bioset+0x12a/0x950 [ 380.291476][ T3662] submit_bh_wbc+0x1d1/0x6c0 [ 380.295901][ T3662] write_dirty_buffer+0x146/0x180 [ 380.300768][ T3662] fat_sync_bhs+0x69/0x1d0 [ 380.305115][ T3662] fat_zeroed_cluster+0x3f4/0x870 [ 380.309977][ T3662] fat_alloc_new_dir+0x863/0xe00 [ 380.314746][ T3662] ? __fat_remove_entries+0x4b0/0x4b0 [ 380.319959][ T3662] ? evict+0x7f1/0x930 [ 380.323863][ T3662] vfat_mkdir+0x176/0x420 [ 380.328027][ T3662] ? vfat_unlink+0x3a0/0x3a0 [ 380.332453][ T3662] ? selinux_inode_mkdir+0x22/0x30 [ 380.337409][ T3662] ? security_inode_mkdir+0xbc/0x100 [ 380.342521][ T3662] vfs_mkdir+0x3f6/0x610 [ 380.346603][ T3662] do_mkdirat+0x1eb/0x450 [ 380.350768][ T3662] ? vfs_mkdir+0x610/0x610 [ 380.355029][ T3662] ? getname_flags+0x1fd/0x520 [ 380.359623][ T3662] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 380.365526][ T3662] __x64_sys_mkdir+0x6e/0x80 [ 380.369949][ T3662] x64_sys_call+0x26d/0x9a0 [ 380.374292][ T3662] do_syscall_64+0x3b/0xb0 [ 380.378628][ T3662] ? clear_bhb_loop+0x35/0x90 [ 380.383146][ T3662] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 380.388878][ T3662] RIP: 0033:0x7fe1f409d819 [ 380.393124][ T3662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.412564][ T3662] RSP: 002b:00007fe1f26d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 380.420906][ T3662] RAX: ffffffffffffffda RBX: 00007fe1f4255160 RCX: 00007fe1f409d819 [ 380.428720][ T3662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 380.436517][ T3662] RBP: 00007fe1f26d4090 R08: 0000000000000000 R09: 0000000000000000 [ 380.444415][ T3662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.452316][ T3662] R13: 0000000000000000 R14: 00007fe1f4255160 R15: 00007ffc45a5ac98 [ 380.460308][ T3662] [ 380.517164][ T45] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 380.639855][ T3671] netlink: 24 bytes leftover after parsing attributes in process `syz.5.929'. [ 380.749144][ T60] usb 4-1: not running at top speed; connect to a high speed hub [ 380.767454][ T3678] 9pnet: Insufficient options for proto=fd [ 380.798462][ T3665] loop4: detected capacity change from 0 to 40427 [ 380.811030][ T3680] loop5: detected capacity change from 0 to 512 [ 380.829218][ T60] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 380.838268][ T60] usb 4-1: config 95 has no interface number 0 [ 380.844382][ T3665] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 380.853688][ T3680] EXT4-fs (loop5): Ignoring removed oldalloc option [ 380.859580][ T3665] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 380.861709][ T3680] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 380.877805][ T60] usb 4-1: config 95 interface 1 has no altsetting 0 [ 380.886661][ T3665] F2FS-fs (loop4): Found nat_bits in checkpoint [ 380.907394][ T3685] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 380.915275][ T3684] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 380.932601][ T3665] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 380.945160][ T3665] F2FS-fs (loop4): recover fsync data on readonly fs [ 380.951982][ T3665] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 380.961539][ T3665] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 380.971484][ T3680] loop5: detected capacity change from 0 to 1024 [ 380.997448][ T3680] EXT4-fs (loop5): Test dummy encryption mode enabled [ 381.004504][ T3680] EXT4-fs (loop5): Ignoring removed oldalloc option [ 381.013514][ T3680] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,data_err=abort,inlinecrypt,commit=0x0000000000000005,noinit_itable,oldalloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 381.029131][ T653] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 381.119151][ T60] usb 4-1: string descriptor 0 read error: -22 [ 381.125204][ T60] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 381.134309][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.214147][ T3700] loop5: detected capacity change from 0 to 40427 [ 381.259115][ T1819] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 381.269951][ T3700] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 381.276101][ T3700] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 381.286852][ T3700] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 381.311629][ T3700] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 381.318558][ T3700] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 381.369128][ T757] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 381.399148][ T653] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 381.409835][ T653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.420662][ T653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.430165][ T653] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 381.443126][ T653] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 381.452068][ T653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.460430][ T653] usb 3-1: config 0 descriptor?? [ 381.539178][ T1819] usb 1-1: Using ep0 maxpacket: 32 [ 381.699375][ T1819] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 381.707394][ T1819] usb 1-1: config 0 has no interface number 0 [ 381.769184][ T757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.779260][ T757] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 381.787995][ T757] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 381.797087][ T757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.805642][ T757] usb 5-1: config 0 descriptor?? [ 381.879180][ T1819] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 381.888119][ T1819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.895906][ T1819] usb 1-1: Product: syz [ 381.899890][ T1819] usb 1-1: Manufacturer: syz [ 381.904286][ T1819] usb 1-1: SerialNumber: syz [ 381.909453][ T1819] usb 1-1: config 0 descriptor?? [ 381.940108][ T653] thrustmaster 0003:044F:B653.0012: unbalanced delimiter at end of report description [ 381.950043][ T653] thrustmaster 0003:044F:B653.0012: parse failed [ 381.956212][ T653] thrustmaster: probe of 0003:044F:B653.0012 failed with error -22 [ 381.969453][ T1819] smsc95xx v2.0.0 [ 382.053779][ T3713] 9pnet: Insufficient options for proto=fd [ 382.062600][ T757] usb 5-1: USB disconnect, device number 14 [ 382.107201][ T3717] loop5: detected capacity change from 0 to 512 [ 382.141647][ T3672] loop2: detected capacity change from 0 to 16 [ 382.147962][ T3717] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 382.159992][ T3717] EXT4-fs (loop5): 1 orphan inode deleted [ 382.165585][ T3717] EXT4-fs (loop5): 1 truncate cleaned up [ 382.169377][ T3672] erofs: Unknown parameter '' [ 382.172047][ T3717] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 382.421128][ T60] usb 4-1: USB disconnect, device number 14 [ 382.429137][ T1819] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 382.440836][ T1819] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 382.778860][ T3728] loop4: detected capacity change from 0 to 40427 [ 382.832107][ T3728] F2FS-fs (loop4): Unrecognized mount option "0x0000000000000000" or missing value [ 382.996354][ T3728] syz.4.948[3728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.996478][ T3728] syz.4.948[3728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.322503][ T3739] loop5: detected capacity change from 0 to 512 [ 383.389716][ T3739] EXT4-fs (loop5): Ignoring removed oldalloc option [ 383.398295][ T3739] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 383.494261][ T3739] loop5: detected capacity change from 0 to 1024 [ 383.501793][ T3748] 9pnet: Insufficient options for proto=fd [ 383.529829][ T3739] EXT4-fs (loop5): Test dummy encryption mode enabled [ 383.536541][ T3739] EXT4-fs (loop5): Ignoring removed oldalloc option [ 383.545991][ T3739] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,data_err=abort,inlinecrypt,commit=0x0000000000000005,noinit_itable,oldalloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 383.584293][ T3757] loop4: detected capacity change from 0 to 1024 [ 383.595049][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 383.595066][ T30] audit: type=1326 audit(1732368039.164:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 383.626427][ T653] usb 3-1: USB disconnect, device number 11 [ 383.634816][ T30] audit: type=1326 audit(1732368039.194:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 383.659851][ T3757] EXT4-fs (loop4): Test dummy encryption mode enabled [ 383.666575][ T3757] EXT4-fs (loop4): Ignoring removed orlov option [ 383.666611][ T30] audit: type=1326 audit(1732368039.194:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 383.700397][ T3757] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 384.339091][ T874] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 384.420426][ T3784] 9pnet: Insufficient options for proto=fd [ 384.480248][ T3694] tipc: Started in network mode [ 384.484954][ T3694] tipc: Node identity 2007ff, cluster identity 4711 [ 384.499157][ T3694] tipc: Node number set to 2099199 [ 384.729267][ T1819] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 384.749218][ T874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.760176][ T1819] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 384.776000][ T1819] usb 1-1: USB disconnect, device number 16 [ 384.792112][ T3789] loop4: detected capacity change from 0 to 40427 [ 384.829879][ T3789] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 384.836058][ T3789] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 384.880224][ T3789] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 384.939205][ T874] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.943021][ T3795] loop3: detected capacity change from 0 to 16 [ 384.954299][ T874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.954569][ T3789] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 384.969085][ T874] usb 6-1: Product: syz [ 384.969108][ T874] usb 6-1: Manufacturer: syz [ 384.969121][ T874] usb 6-1: SerialNumber: syz [ 384.973281][ T3789] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 384.990507][ T3795] erofs: (device loop3): mounted with root inode @ nid 36. [ 385.001055][ T3795] attempt to access beyond end of device [ 385.001055][ T3795] loop3: rw=0, want=14552337264, limit=16 [ 385.012643][ T3795] attempt to access beyond end of device [ 385.012643][ T3795] loop3: rw=0, want=14546590688, limit=16 [ 385.065595][ T3782] loop2: detected capacity change from 0 to 131072 [ 385.129335][ T3782] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 385.138170][ T3782] F2FS-fs (loop2): invalid crc value [ 385.150218][ T3782] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 385.174962][ T3782] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 385.537882][ T3806] loop0: detected capacity change from 0 to 512 [ 385.579368][ T30] audit: type=1400 audit(1732368041.144:2373): avc: denied { ioctl } for pid=3780 comm="syz.2.964" path="socket:[33877]" dev="sockfs" ino=33877 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 385.605515][ T3806] EXT4-fs (loop0): Ignoring removed oldalloc option [ 385.612674][ T3806] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 385.677140][ T3806] loop0: detected capacity change from 0 to 1024 [ 385.725330][ T3810] loop4: detected capacity change from 0 to 128 [ 385.732538][ T3806] EXT4-fs (loop0): Test dummy encryption mode enabled [ 385.739482][ T3806] EXT4-fs (loop0): Ignoring removed oldalloc option [ 385.748341][ T3806] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,data_err=abort,inlinecrypt,commit=0x0000000000000005,noinit_itable,oldalloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 385.791044][ T30] audit: type=1326 audit(1732368041.354:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3805 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1b659819 code=0x7ffc0000 [ 385.845903][ T30] audit: type=1326 audit(1732368041.354:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3805 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f8f1b659819 code=0x7ffc0000 [ 385.861206][ T3810] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 385.881894][ T30] audit: type=1326 audit(1732368041.354:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3805 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1b659819 code=0x7ffc0000 [ 385.905301][ T3810] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 386.372409][ T3838] incfs: Backing dir is not set, filesystem can't be mounted. [ 386.379783][ T3838] incfs: mount failed -2 [ 386.497049][ T3840] loop2: detected capacity change from 0 to 1024 [ 386.552566][ T3840] EXT4-fs (loop2): Test dummy encryption mode enabled [ 386.682717][ T45] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 386.695915][ T3840] EXT4-fs (loop2): Ignoring removed orlov option [ 386.744341][ T3840] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 386.774846][ T874] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 386.786218][ T874] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 386.799942][ T874] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 386.815814][ T3845] loop0: detected capacity change from 0 to 256 [ 386.903546][ T3766] UDC core: couldn't find an available UDC or it's busy: -16 [ 386.910806][ T3766] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 387.253165][ T874] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 387.265311][ T874] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 387.281013][ T874] usb 6-1: USB disconnect, device number 11 [ 387.288053][ T874] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 387.306017][ T3846] loop4: detected capacity change from 0 to 40427 [ 387.401156][ T3856] incfs: Backing dir is not set, filesystem can't be mounted. [ 387.408749][ T3856] incfs: mount failed -2 [ 387.419205][ T3846] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 387.452687][ T3846] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 387.593982][ T3858] overlayfs: statfs failed on './file0' [ 387.605940][ T3846] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 387.703857][ T3846] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 387.729089][ T3846] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 387.749802][ T3873] overlayfs: statfs failed on './file0' [ 387.827882][ T3877] incfs: Backing dir is not set, filesystem can't be mounted. [ 387.835420][ T3877] incfs: mount failed -2 [ 388.149769][ T3882] loop3: detected capacity change from 0 to 1024 [ 388.179960][ T3882] EXT4-fs (loop3): Test dummy encryption mode enabled [ 388.186693][ T3882] EXT4-fs (loop3): Ignoring removed orlov option [ 388.204337][ T3882] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 388.765885][ T3886] loop5: detected capacity change from 0 to 512 [ 388.770697][ T30] audit: type=1400 audit(1732368044.334:2377): avc: denied { read write } for pid=3892 comm="syz.0.995" name="event0" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 388.868401][ T3886] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 388.893867][ T3886] EXT4-fs (loop5): 1 truncate cleaned up [ 388.899659][ T30] audit: type=1400 audit(1732368044.364:2378): avc: denied { open } for pid=3892 comm="syz.0.995" path="/dev/input/event0" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 388.903731][ T3886] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=continue,stripe=0x0000000000000000,noblock_validity,resuid=0x0000000000000000,noload,nouid32,user_xattr,,errors=continue. Quota mode: none. [ 389.158624][ T30] audit: type=1400 audit(1732368044.364:2379): avc: denied { ioctl } for pid=3892 comm="syz.0.995" path="/dev/input/event0" dev="devtmpfs" ino=252 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 389.205748][ T30] audit: type=1326 audit(1732368044.774:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f409d819 code=0x7ffc0000 [ 389.295959][ T30] audit: type=1326 audit(1732368044.774:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f409d819 code=0x7ffc0000 [ 389.349110][ T30] audit: type=1326 audit(1732368044.804:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1f409d819 code=0x7ffc0000 [ 389.442010][ T3910] incfs: Backing dir is not set, filesystem can't be mounted. [ 389.449561][ T3910] incfs: mount failed -2 [ 389.469799][ T30] audit: type=1326 audit(1732368044.804:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f409d819 code=0x7ffc0000 [ 389.722117][ T30] audit: type=1326 audit(1732368044.804:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f409d819 code=0x7ffc0000 [ 389.761373][ T30] audit: type=1326 audit(1732368044.804:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fe1f409d819 code=0x7ffc0000 [ 389.822611][ T3920] overlayfs: statfs failed on './file0' [ 389.850230][ T30] audit: type=1326 audit(1732368044.804:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f409d819 code=0x7ffc0000 [ 389.994078][ T3925] incfs: Backing dir is not set, filesystem can't be mounted. [ 390.001588][ T3925] incfs: mount failed -2 [ 390.429147][ T3929] incfs: Backing dir is not set, filesystem can't be mounted. [ 390.436719][ T3929] incfs: mount failed -2 [ 390.890631][ T3945] incfs: Backing dir is not set, filesystem can't be mounted. [ 390.898170][ T3945] incfs: mount failed -2 [ 390.962053][ T3946] loop5: detected capacity change from 0 to 16 [ 391.062044][ T3946] erofs: (device loop5): mounted with root inode @ nid 36. [ 391.269129][ T3950] incfs: Backing dir is not set, filesystem can't be mounted. [ 391.276511][ T3950] incfs: mount failed -2 [ 391.427751][ T3953] attempt to access beyond end of device [ 391.427751][ T3953] loop5: rw=0, want=14552337264, limit=16 [ 391.560840][ T3953] attempt to access beyond end of device [ 391.560840][ T3953] loop5: rw=0, want=14546590688, limit=16 [ 391.602547][ T3958] 9pnet: Insufficient options for proto=fd [ 391.635527][ T3963] loop2: detected capacity change from 0 to 16 [ 391.669657][ T3963] erofs: (device loop2): mounted with root inode @ nid 36. [ 392.475526][ T3966] incfs: Backing dir is not set, filesystem can't be mounted. [ 392.483192][ T3966] incfs: mount failed -2 [ 392.492518][ T3969] incfs: Backing dir is not set, filesystem can't be mounted. [ 392.499937][ T3969] incfs: mount failed -2 [ 392.739307][ T3963] attempt to access beyond end of device [ 392.739307][ T3963] loop2: rw=0, want=14552337264, limit=16 [ 392.761736][ T3975] loop0: detected capacity change from 0 to 16 [ 392.767982][ T3963] attempt to access beyond end of device [ 392.767982][ T3963] loop2: rw=0, want=14546590688, limit=16 [ 392.795059][ T3982] loop3: detected capacity change from 0 to 16 [ 392.801940][ T3975] erofs: (device loop0): mounted with root inode @ nid 36. [ 392.812233][ T3975] attempt to access beyond end of device [ 392.812233][ T3975] loop0: rw=0, want=14552337264, limit=16 [ 392.827133][ T3984] loop4: detected capacity change from 0 to 512 [ 392.833662][ T3975] attempt to access beyond end of device [ 392.833662][ T3975] loop0: rw=0, want=14546590688, limit=16 [ 392.888189][ T3982] erofs: (device loop3): mounted with root inode @ nid 36. [ 392.898928][ T3976] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 392.910088][ T3982] attempt to access beyond end of device [ 392.910088][ T3982] loop3: rw=0, want=14552337264, limit=16 [ 392.921516][ T3976] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 392.994351][ T3982] attempt to access beyond end of device [ 392.994351][ T3982] loop3: rw=0, want=14546590688, limit=16 [ 393.019670][ T3984] EXT4-fs (loop4): Ignoring removed oldalloc option [ 393.033741][ T3984] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 393.066720][ T3991] loop5: detected capacity change from 0 to 256 [ 393.159326][ T3991] exfat: Deprecated parameter 'namecase' [ 393.165061][ T3991] exfat: Unknown parameter 'uma­¨' [ 393.528281][ T3984] loop4: detected capacity change from 0 to 1024 [ 393.589709][ T3984] EXT4-fs (loop4): Test dummy encryption mode enabled [ 393.596720][ T3984] EXT4-fs (loop4): Ignoring removed oldalloc option [ 393.652178][ T3984] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,data_err=abort,inlinecrypt,commit=0x0000000000000005,noinit_itable,oldalloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 393.690820][ T4014] loop5: detected capacity change from 0 to 512 [ 393.701773][ T3994] loop2: detected capacity change from 0 to 40427 [ 393.741754][ T3994] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 393.749809][ T4014] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 393.760800][ T3994] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 393.773770][ T4014] EXT4-fs (loop5): 1 orphan inode deleted [ 393.779909][ T4014] EXT4-fs (loop5): 1 truncate cleaned up [ 393.785634][ T4014] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 393.806168][ T3994] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 393.866898][ T3994] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 393.896860][ T3994] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 393.919139][ T557] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 394.179147][ T557] usb 1-1: Using ep0 maxpacket: 16 [ 394.229149][ T653] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 394.309179][ T557] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 394.386055][ T4049] incfs: Backing dir is not set, filesystem can't be mounted. [ 394.393726][ T4049] incfs: mount failed -2 [ 394.589403][ T653] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.660137][ T557] usb 1-1: config 0 has no interface number 0 [ 394.666220][ T557] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 394.676014][ T557] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 394.756328][ T4051] overlayfs: statfs failed on './file0' [ 394.849207][ T653] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.858386][ T653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.866544][ T653] usb 5-1: Product: syz [ 394.870626][ T557] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 394.870655][ T557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.880364][ T653] usb 5-1: Manufacturer: syz [ 394.892273][ T653] usb 5-1: SerialNumber: syz [ 394.898872][ T557] usb 1-1: Product: syz [ 394.906066][ T4054] loop5: detected capacity change from 0 to 512 [ 394.912211][ T557] usb 1-1: Manufacturer: syz [ 394.916825][ T557] usb 1-1: SerialNumber: syz [ 394.922430][ T557] usb 1-1: config 0 descriptor?? [ 394.949189][ T4011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 394.956179][ T4011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 394.963444][ T4054] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 394.975870][ T4054] EXT4-fs (loop5): 1 orphan inode deleted [ 394.982015][ T4054] EXT4-fs (loop5): 1 truncate cleaned up [ 394.987596][ T4054] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 395.100854][ T4065] loop2: detected capacity change from 0 to 512 [ 395.152549][ T4065] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.1050: corrupted inode contents [ 395.164705][ T4065] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #16: comm syz.2.1050: mark_inode_dirty error [ 395.174852][ T4011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 395.176489][ T4065] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.1050: corrupted inode contents [ 395.183117][ T4011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 395.930846][ T4075] incfs: Backing dir is not set, filesystem can't be mounted. [ 395.938186][ T4075] incfs: mount failed -2 [ 395.966927][ T4072] incfs: Backing dir is not set, filesystem can't be mounted. [ 395.974464][ T4072] incfs: mount failed -2 [ 396.001807][ T4065] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.1050: mark_inode_dirty error [ 396.016863][ T4065] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.1050: corrupted inode contents [ 396.031157][ T4065] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 396.041927][ T4065] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.1050: corrupted inode contents [ 396.229416][ T4065] EXT4-fs error (device loop2): ext4_truncate:4303: inode #16: comm syz.2.1050: mark_inode_dirty error [ 396.246194][ T4065] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 396.257243][ T4079] overlayfs: statfs failed on './file0' [ 396.263595][ T4065] EXT4-fs (loop2): 1 truncate cleaned up [ 396.269836][ T4065] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 396.286777][ T4065] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.302671][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 396.302686][ T30] audit: type=1400 audit(1732368051.874:2444): avc: denied { mounton } for pid=4064 comm="syz.2.1050" path="/226/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 396.336502][ T30] audit: type=1400 audit(1732368051.904:2445): avc: denied { map } for pid=4064 comm="syz.2.1050" path="/226/file1/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.356657][ T4083] loop5: detected capacity change from 0 to 1024 [ 396.371118][ T4065] EXT4-fs error (device loop2): ext4_get_group_desc:277: comm syz.2.1050: block_group >= groups_count - block_group = 1048576, groups_count = 1 [ 396.386031][ T4065] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4469: inode #33554445: comm syz.2.1050: unable to read itable block [ 396.409838][ T4083] EXT4-fs (loop5): Test dummy encryption mode enabled [ 396.416721][ T4083] EXT4-fs (loop5): Ignoring removed orlov option [ 396.425162][ T4083] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 396.480712][ T4089] loop3: detected capacity change from 0 to 512 [ 396.521774][ T4089] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 396.534230][ T4089] EXT4-fs (loop3): 1 orphan inode deleted [ 396.539814][ T4089] EXT4-fs (loop3): 1 truncate cleaned up [ 396.545347][ T4089] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 396.565290][ T528] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 727546926 in block_group 0 [ 396.691484][ T528] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 396.701728][ T528] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz-executor: mark_inode_dirty error [ 396.730108][ T653] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 396.761237][ T10] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm kworker/u4:1: Invalid inode table block 727546926 in block_group 0 [ 396.776637][ T653] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 396.805184][ T10] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm kworker/u4:1: Invalid inode table block 727546926 in block_group 0 [ 396.820128][ T653] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 396.822632][ T557] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 396.841616][ T557] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 396.844049][ T10] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm kworker/u4:1: Invalid inode table block 727546926 in block_group 0 [ 396.865405][ T557] asix: probe of 1-1:0.251 failed with error -71 [ 396.867221][ T528] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm syz-executor: Invalid inode table block 727546926 in block_group 0 [ 396.871912][ T4096] loop3: detected capacity change from 0 to 16 [ 396.886187][ T528] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 396.892363][ T557] usb 1-1: USB disconnect, device number 17 [ 396.929762][ T4096] erofs: (device loop3): mounted with root inode @ nid 36. [ 396.938178][ T4034] UDC core: couldn't find an available UDC or it's busy: -16 [ 396.949368][ T4034] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 396.959397][ T4096] attempt to access beyond end of device [ 396.959397][ T4096] loop3: rw=0, want=14552337264, limit=16 [ 396.969183][ T653] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 396.970726][ T4096] attempt to access beyond end of device [ 396.970726][ T4096] loop3: rw=0, want=14546590688, limit=16 [ 396.988051][ T653] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 397.048528][ T30] audit: type=1400 audit(1732368052.614:2446): avc: denied { mounton } for pid=4098 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 397.073936][ T653] usb 5-1: USB disconnect, device number 15 [ 397.080431][ T653] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 397.121695][ T4098] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.128544][ T4098] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.140150][ T4098] device bridge_slave_0 entered promiscuous mode [ 397.431718][ T4098] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.438855][ T4098] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.446935][ T4098] device bridge_slave_1 entered promiscuous mode [ 397.529232][ T45] device bridge_slave_1 left promiscuous mode [ 397.556213][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.567844][ T45] device bridge_slave_0 left promiscuous mode [ 397.586557][ T4108] incfs: Backing dir is not set, filesystem can't be mounted. [ 397.594338][ T4108] incfs: mount failed -2 [ 397.609313][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.623913][ T45] device veth1_macvtap left promiscuous mode [ 397.650024][ T45] device veth0_vlan left promiscuous mode [ 397.924880][ T4112] overlayfs: statfs failed on './file0' [ 398.049937][ T4120] xt_hashlimit: size too large, truncated to 1048576 [ 398.372748][ T4127] loop5: detected capacity change from 0 to 512 [ 398.419807][ T4127] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 398.448354][ T4127] EXT4-fs (loop5): 1 orphan inode deleted [ 398.462320][ T4127] EXT4-fs (loop5): 1 truncate cleaned up [ 398.478449][ T4130] xt_l2tp: unknown flags: 17 [ 398.484930][ T4127] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 398.552062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.566146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.590192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.599146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.607826][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.614724][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.655944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 398.675305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 398.690349][ T4137] loop3: detected capacity change from 0 to 1024 [ 398.697038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.736881][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.743897][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.753023][ T4140] loop5: detected capacity change from 0 to 16 [ 398.775054][ T4098] device veth0_vlan entered promiscuous mode [ 398.787067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.796254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.805160][ T4137] EXT4-fs (loop3): Test dummy encryption mode enabled [ 398.813749][ T4137] EXT4-fs (loop3): Ignoring removed orlov option [ 398.821902][ T4140] erofs: (device loop5): mounted with root inode @ nid 36. [ 398.822264][ T4142] loop0: detected capacity change from 0 to 16 [ 398.829668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.845743][ T4140] attempt to access beyond end of device [ 398.845743][ T4140] loop5: rw=0, want=14552337264, limit=16 [ 398.858909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.866672][ T4140] attempt to access beyond end of device [ 398.866672][ T4140] loop5: rw=0, want=14546590688, limit=16 [ 398.878875][ T4137] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 398.899788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 399.019981][ T4142] erofs: (device loop0): mounted with root inode @ nid 36. [ 399.033795][ T4142] attempt to access beyond end of device [ 399.033795][ T4142] loop0: rw=0, want=14552337264, limit=16 [ 399.058023][ T4142] attempt to access beyond end of device [ 399.058023][ T4142] loop0: rw=0, want=14546590688, limit=16 [ 399.076012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 399.091206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 399.119817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.157360][ T4098] device veth1_macvtap entered promiscuous mode [ 399.181052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 399.196222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 399.211006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 399.228730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 399.245335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.280949][ T4150] overlayfs: statfs failed on './file0' [ 399.354203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.376204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.419511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 399.420606][ T30] audit: type=1400 audit(1732368054.994:2447): avc: denied { mounton } for pid=4098 comm="syz-executor" path="/root/syzkaller.oT89IV/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 399.441641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 399.505430][ T4160] loop0: detected capacity change from 0 to 512 [ 399.517846][ T30] audit: type=1400 audit(1732368055.034:2448): avc: denied { mounton } for pid=4098 comm="syz-executor" path="/root/syzkaller.oT89IV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 399.574598][ T30] audit: type=1400 audit(1732368055.034:2449): avc: denied { mounton } for pid=4098 comm="syz-executor" path="/root/syzkaller.oT89IV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 399.617170][ T30] audit: type=1400 audit(1732368055.044:2450): avc: denied { mounton } for pid=4098 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 399.640674][ T30] audit: type=1400 audit(1732368055.044:2451): avc: denied { mounton } for pid=4098 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 399.664843][ T4160] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 399.948046][ T4167] incfs: Backing dir is not set, filesystem can't be mounted. [ 399.955712][ T4167] incfs: mount failed -2 [ 400.168110][ T4160] EXT4-fs (loop0): 1 orphan inode deleted [ 400.207585][ T4160] EXT4-fs (loop0): 1 truncate cleaned up [ 400.247143][ T4160] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 400.276443][ T30] audit: type=1326 audit(1732368055.844:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 400.303821][ T30] audit: type=1326 audit(1732368055.874:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 401.310946][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 401.310963][ T30] audit: type=1326 audit(1732368056.884:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4206 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 401.343337][ T4194] loop5: detected capacity change from 0 to 40427 [ 401.370039][ T4194] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 401.376431][ T4194] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 401.389784][ T4194] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 401.422934][ T4219] binder: 4218:4219 ioctl c0306201 0 returned -14 [ 401.430312][ T4194] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 401.437204][ T4194] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 401.470819][ T4224] loop6: detected capacity change from 0 to 512 [ 401.490296][ T4224] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 401.502655][ T4224] EXT4-fs (loop6): 1 orphan inode deleted [ 401.508263][ T4224] EXT4-fs (loop6): 1 truncate cleaned up [ 401.513817][ T4224] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 401.921310][ T4238] loop6: detected capacity change from 0 to 512 [ 401.960151][ T4238] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 401.960274][ T30] audit: type=1400 audit(1732368057.534:2497): avc: denied { map } for pid=4241 comm="syz.3.1103" path="/dev/ashmem" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.998369][ T4238] EXT4-fs (loop6): 1 orphan inode deleted [ 402.004246][ T4238] EXT4-fs (loop6): 1 truncate cleaned up [ 402.007919][ T4246] loop3: detected capacity change from 0 to 16 [ 402.010730][ T4238] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 402.084715][ T4246] erofs: (device loop3): mounted with root inode @ nid 36. [ 402.094514][ T4246] attempt to access beyond end of device [ 402.094514][ T4246] loop3: rw=0, want=14552337264, limit=16 [ 402.105731][ T4246] attempt to access beyond end of device [ 402.105731][ T4246] loop3: rw=0, want=14546590688, limit=16 [ 402.209131][ T557] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 402.496004][ T30] audit: type=1326 audit(1732368058.064:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 402.519590][ T30] audit: type=1326 audit(1732368058.064:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 402.543872][ T30] audit: type=1326 audit(1732368058.064:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 402.567295][ T30] audit: type=1326 audit(1732368058.064:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 402.591010][ T30] audit: type=1326 audit(1732368058.064:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 402.614578][ T30] audit: type=1326 audit(1732368058.064:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 402.638006][ T30] audit: type=1326 audit(1732368058.064:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 402.661404][ T30] audit: type=1326 audit(1732368058.064:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 402.779162][ T557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.789955][ T557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.799554][ T557] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.812744][ T557] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 402.821892][ T557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.830857][ T557] usb 1-1: config 0 descriptor?? [ 403.035921][ T4259] incfs: Backing dir is not set, filesystem can't be mounted. [ 403.043434][ T4259] incfs: mount failed -2 [ 403.362299][ T4264] loop5: detected capacity change from 0 to 512 [ 403.390764][ T4264] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 403.403453][ T4264] EXT4-fs (loop5): 1 orphan inode deleted [ 403.409280][ T4264] EXT4-fs (loop5): 1 truncate cleaned up [ 403.414798][ T4264] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 403.419214][ T557] usbhid 1-1:0.0: can't add hid device: -71 [ 403.446314][ T557] usbhid: probe of 1-1:0.0 failed with error -71 [ 403.455337][ T557] usb 1-1: USB disconnect, device number 18 [ 403.529516][ T39] Bluetooth: hci0: command 0x1003 tx timeout [ 403.535479][ T3326] Bluetooth: hci0: sending frame failed (-49) [ 403.640615][ T4273] incfs: Backing dir is not set, filesystem can't be mounted. [ 403.648133][ T4273] incfs: mount failed -2 [ 403.895597][ T4275] overlayfs: statfs failed on './file0' [ 403.904699][ T4277] loop5: detected capacity change from 0 to 1024 [ 403.930242][ T4277] EXT4-fs (loop5): Test dummy encryption mode enabled [ 403.936955][ T4277] EXT4-fs (loop5): Ignoring removed orlov option [ 403.946072][ T4277] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 404.690560][ T4292] incfs: Backing dir is not set, filesystem can't be mounted. [ 404.698058][ T4292] incfs: mount failed -2 [ 405.157441][ T4303] loop6: detected capacity change from 0 to 512 [ 405.232056][ T4303] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 405.261398][ T4303] EXT4-fs (loop6): 1 orphan inode deleted [ 405.267027][ T4303] EXT4-fs (loop6): 1 truncate cleaned up [ 405.272556][ T4303] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 405.618938][ T4320] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 405.619235][ T60] Bluetooth: hci0: command 0x1001 tx timeout [ 405.632994][ T3326] Bluetooth: hci0: sending frame failed (-49) [ 405.633009][ T4320] FAULT_INJECTION: forcing a failure. [ 405.633009][ T4320] name failslab, interval 1, probability 0, space 0, times 0 [ 405.648368][ T4322] overlayfs: statfs failed on './file0' [ 405.671634][ T4320] CPU: 0 PID: 4320 Comm: syz.0.1126 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 405.681451][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 405.691564][ T4320] Call Trace: [ 405.694962][ T4320] [ 405.697889][ T4320] dump_stack_lvl+0x151/0x1c0 [ 405.702422][ T4320] ? io_uring_drop_tctx_refs+0x190/0x190 [ 405.707879][ T4320] ? file_end_write+0x1c0/0x1c0 [ 405.712561][ T4320] dump_stack+0x15/0x20 [ 405.716557][ T4320] should_fail+0x3c6/0x510 [ 405.720811][ T4320] __should_failslab+0xa4/0xe0 [ 405.725614][ T4320] ? ioctx_alloc+0x10d/0x710 [ 405.730206][ T4320] should_failslab+0x9/0x20 [ 405.734541][ T4320] slab_pre_alloc_hook+0x37/0xd0 [ 405.739750][ T4320] ? ioctx_alloc+0x10d/0x710 [ 405.744174][ T4320] kmem_cache_alloc+0x44/0x200 [ 405.748775][ T4320] ? ksys_write+0x260/0x2c0 [ 405.753564][ T4320] ioctx_alloc+0x10d/0x710 [ 405.757820][ T4320] ? __ia32_sys_read+0x90/0x90 [ 405.762498][ T4320] __se_sys_io_setup+0x72/0x230 [ 405.767185][ T4320] __x64_sys_io_setup+0x5b/0x70 [ 405.771871][ T4320] x64_sys_call+0x576/0x9a0 [ 405.776212][ T4320] do_syscall_64+0x3b/0xb0 [ 405.780467][ T4320] ? clear_bhb_loop+0x35/0x90 [ 405.784976][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 405.790705][ T4320] RIP: 0033:0x7f8f1b659819 [ 405.794963][ T4320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.814399][ T4320] RSP: 002b:00007f8f19cd2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 405.822640][ T4320] RAX: ffffffffffffffda RBX: 00007f8f1b810fa0 RCX: 00007f8f1b659819 [ 405.830453][ T4320] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 405.838264][ T4320] RBP: 00007f8f19cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 405.846073][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.853894][ T4320] R13: 0000000000000000 R14: 00007f8f1b810fa0 R15: 00007ffc5e128c38 [ 405.861701][ T4320] [ 405.886183][ T4330] loop0: detected capacity change from 0 to 1024 [ 405.942155][ T4330] EXT4-fs (loop0): Test dummy encryption mode enabled [ 405.948866][ T4330] EXT4-fs (loop0): Ignoring removed orlov option [ 405.958322][ T4330] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 406.352758][ T4348] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 406.513713][ T4351] loop3: detected capacity change from 0 to 512 [ 406.553357][ T4351] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 406.582394][ T4351] EXT4-fs (loop3): 1 orphan inode deleted [ 406.588039][ T4351] EXT4-fs (loop3): 1 truncate cleaned up [ 406.593761][ T4351] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 406.667239][ T4358] loop3: detected capacity change from 0 to 16 [ 406.689461][ T4294] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 406.690159][ T4358] erofs: (device loop3): mounted with root inode @ nid 36. [ 406.708842][ T4358] attempt to access beyond end of device [ 406.708842][ T4358] loop3: rw=0, want=14552337264, limit=16 [ 406.720733][ T4358] attempt to access beyond end of device [ 406.720733][ T4358] loop3: rw=0, want=14546590688, limit=16 [ 406.789373][ T4362] overlayfs: statfs failed on './file0' [ 406.850316][ T4369] loop0: detected capacity change from 0 to 512 [ 406.886011][ T4369] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 406.897936][ T4369] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.369379][ T4294] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.589345][ T4294] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.598229][ T4294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.629079][ T4294] usb 6-1: Product: syz [ 407.633135][ T4294] usb 6-1: Manufacturer: syz [ 407.637520][ T4294] usb 6-1: SerialNumber: syz [ 407.663456][ T4385] loop3: detected capacity change from 0 to 512 [ 407.677112][ T4389] loop6: detected capacity change from 0 to 512 [ 407.722821][ T39] Bluetooth: hci0: command 0x1009 tx timeout [ 407.730325][ T4385] EXT4-fs (loop3): Ignoring removed oldalloc option [ 407.736872][ T4385] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 407.736879][ T4389] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 407.758014][ T4389] EXT4-fs (loop6): 1 orphan inode deleted [ 407.763606][ T4389] EXT4-fs (loop6): 1 truncate cleaned up [ 407.769106][ T4389] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 408.038789][ T4385] loop3: detected capacity change from 0 to 1024 [ 408.079738][ T4385] EXT4-fs (loop3): Test dummy encryption mode enabled [ 408.086454][ T4385] EXT4-fs (loop3): Ignoring removed oldalloc option [ 408.092819][ T4394] loop6: detected capacity change from 0 to 1024 [ 408.095969][ T4385] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,data_err=abort,inlinecrypt,commit=0x0000000000000005,noinit_itable,oldalloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 408.131517][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 408.131534][ T30] audit: type=1326 audit(1732368063.704:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 408.162217][ T30] audit: type=1326 audit(1732368063.704:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 408.162783][ T4394] EXT4-fs (loop6): Test dummy encryption mode enabled [ 408.186135][ T30] audit: type=1326 audit(1732368063.714:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 408.192993][ T4394] EXT4-fs (loop6): Ignoring removed orlov option [ 408.222054][ T30] audit: type=1326 audit(1732368063.714:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 408.230483][ T4394] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 408.917746][ T4413] incfs: Backing dir is not set, filesystem can't be mounted. [ 408.925160][ T4413] incfs: mount failed -2 [ 409.099873][ T4294] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 409.106871][ T4294] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 409.116740][ T4294] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 409.228760][ T30] audit: type=1326 audit(1732368064.794:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 409.252300][ T30] audit: type=1326 audit(1732368064.794:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 409.684600][ T4428] UDC core: couldn't find an available UDC or it's busy: -16 [ 409.692205][ T4428] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 409.704417][ T4431] loop0: detected capacity change from 0 to 512 [ 409.759762][ T4431] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 409.772654][ T4431] EXT4-fs (loop0): 1 orphan inode deleted [ 409.778198][ T4431] EXT4-fs (loop0): 1 truncate cleaned up [ 409.783806][ T4431] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 409.949175][ T627] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 409.975201][ T4436] incfs: Backing dir is not set, filesystem can't be mounted. [ 409.982791][ T4436] incfs: mount failed -2 [ 410.259110][ T627] usb 7-1: Using ep0 maxpacket: 8 [ 410.389172][ T627] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 410.400102][ T627] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 410.409985][ T627] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 410.419000][ T627] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.499103][ T557] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 410.529166][ T4294] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 410.535890][ T4294] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 410.547197][ T4294] usb 6-1: USB disconnect, device number 12 [ 410.553294][ T4294] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 410.661953][ T4428] loop6: detected capacity change from 0 to 512 [ 410.699703][ T4428] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 410.724719][ T4428] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 410.760112][ T4428] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #16: comm syz.6.1157: iget: bogus i_mode (5) [ 410.771558][ T4428] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1157: couldn't read orphan inode 16 (err -117) [ 410.784241][ T4428] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 410.839187][ T627] usb 7-1: string descriptor 0 read error: -71 [ 410.845306][ T627] hub 7-1:32.0: USB hub found [ 410.919208][ T627] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 410.969789][ T627] usb 7-1: USB disconnect, device number 2 [ 410.989116][ T4294] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 411.065003][ T557] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.229193][ T557] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.238114][ T557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.245907][ T557] usb 4-1: Product: syz [ 411.249872][ T557] usb 4-1: Manufacturer: syz [ 411.254290][ T557] usb 4-1: SerialNumber: syz [ 411.368910][ T4452] loop6: detected capacity change from 0 to 1024 [ 411.409807][ T4452] EXT4-fs (loop6): Test dummy encryption mode enabled [ 411.416639][ T4452] EXT4-fs (loop6): Ignoring removed orlov option [ 411.425211][ T4452] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 411.453651][ T4294] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.039653][ T4294] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.076474][ T4294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.108886][ T4294] usb 6-1: Product: syz [ 412.130667][ T4294] usb 6-1: Manufacturer: syz [ 412.157228][ T4294] usb 6-1: SerialNumber: syz [ 412.486475][ T4470] fuse: Unknown parameter 'user_i00000000000000000003' [ 412.500900][ T4467] loop6: detected capacity change from 0 to 40427 [ 412.517743][ T30] audit: type=1326 audit(1732368068.084:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 412.549892][ T4467] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 412.556284][ T4467] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 412.577840][ T30] audit: type=1326 audit(1732368068.114:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 412.608456][ T30] audit: type=1326 audit(1732368068.114:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 412.632234][ T30] audit: type=1326 audit(1732368068.114:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 412.659257][ T4467] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 412.675067][ T4481] loop0: detected capacity change from 0 to 512 [ 412.679405][ T557] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 412.687421][ T557] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 412.701879][ T4467] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 412.708753][ T4467] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 412.709093][ T557] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 412.730055][ T4481] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 412.742131][ T4481] EXT4-fs (loop0): 1 orphan inode deleted [ 412.748288][ T4481] EXT4-fs (loop0): 1 truncate cleaned up [ 412.754011][ T4481] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 412.836970][ T4489] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1174'. [ 412.846287][ T4489] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1174'. [ 412.855429][ T4489] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1174'. [ 412.975574][ T4438] UDC core: couldn't find an available UDC or it's busy: -16 [ 412.986030][ T4438] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 413.009121][ T1819] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 413.012846][ T4487] loop0: detected capacity change from 0 to 40427 [ 413.016643][ T557] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 413.029857][ T557] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 413.041746][ T557] usb 4-1: USB disconnect, device number 15 [ 413.047731][ T557] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 413.117064][ T4495] incfs: Backing dir is not set, filesystem can't be mounted. [ 413.124569][ T4495] incfs: mount failed -2 [ 413.150026][ T4487] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 413.175288][ T4487] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 413.226779][ T4487] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 413.340871][ T4487] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 413.352647][ T4487] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 413.479187][ T4294] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 413.485566][ T4294] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 413.493187][ T4294] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 413.680185][ T4441] UDC core: couldn't find an available UDC or it's busy: -16 [ 413.698808][ T4441] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 413.719270][ T1819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.729157][ T4294] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 413.731617][ T4294] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 413.734591][ T1819] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 413.753664][ T1819] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 413.757961][ T4294] usb 6-1: USB disconnect, device number 13 [ 413.762854][ T1819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.773798][ T4294] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 414.110034][ T1819] usb 5-1: config 0 descriptor?? [ 414.125210][ T4508] loop6: detected capacity change from 0 to 1024 [ 414.170079][ T4508] EXT4-fs (loop6): Test dummy encryption mode enabled [ 414.176744][ T4508] EXT4-fs (loop6): Ignoring removed orlov option [ 414.185578][ T4508] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 414.672509][ T1819] usb 5-1: USB disconnect, device number 16 [ 414.894802][ T4526] xt_l2tp: unknown flags: 17 [ 415.171027][ T4535] loop0: detected capacity change from 0 to 512 [ 415.199130][ T4294] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 415.219165][ T4535] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 415.309450][ T4540] incfs: Backing dir is not set, filesystem can't be mounted. [ 415.317003][ T4540] incfs: mount failed -2 [ 415.497015][ T4535] EXT4-fs (loop0): 1 orphan inode deleted [ 415.511224][ T4535] EXT4-fs (loop0): 1 truncate cleaned up [ 415.577955][ T4535] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 415.600619][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 415.600634][ T30] audit: type=1326 audit(1732368071.174:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 415.637838][ T30] audit: type=1326 audit(1732368071.204:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 415.669156][ T4294] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 415.682207][ T4294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.688106][ T30] audit: type=1326 audit(1732368071.204:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 415.693607][ T4294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.763805][ T4294] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 415.788522][ T4551] incfs: Backing dir is not set, filesystem can't be mounted. [ 415.796071][ T4551] incfs: mount failed -2 [ 415.854010][ T4294] usb 6-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 416.047316][ T30] audit: type=1326 audit(1732368071.204:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 416.066001][ T4294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.071763][ T30] audit: type=1326 audit(1732368071.204:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 416.099905][ T4294] usb 6-1: config 0 descriptor?? [ 416.495120][ T4559] incfs: Backing dir is not set, filesystem can't be mounted. [ 416.502763][ T4559] incfs: mount failed -2 [ 416.593907][ T4294] thrustmaster 0003:044F:B653.0013: unbalanced delimiter at end of report description [ 416.623313][ T30] audit: type=1326 audit(1732368071.204:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 416.627788][ T4294] thrustmaster 0003:044F:B653.0013: parse failed [ 416.655677][ T30] audit: type=1326 audit(1732368071.204:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 416.789935][ T4525] loop5: detected capacity change from 0 to 16 [ 416.929457][ T4525] erofs: Unknown parameter '' [ 416.990721][ T4294] thrustmaster: probe of 0003:044F:B653.0013 failed with error -22 [ 417.005956][ T4569] loop0: detected capacity change from 0 to 1024 [ 417.049753][ T4569] EXT4-fs (loop0): Test dummy encryption mode enabled [ 417.058585][ T4569] EXT4-fs (loop0): Ignoring removed orlov option [ 417.078854][ T4569] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 417.659117][ T4580] loop4: detected capacity change from 0 to 256 [ 417.699676][ T4580] exfat: Unknown parameter 'sys_tz' [ 417.750437][ T30] audit: type=1326 audit(1732368073.324:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 417.775759][ T30] audit: type=1326 audit(1732368073.344:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 417.799651][ T30] audit: type=1326 audit(1732368073.344:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 418.673366][ T4597] incfs: Backing dir is not set, filesystem can't be mounted. [ 418.680862][ T4597] incfs: mount failed -2 [ 418.691861][ T4600] incfs: Backing dir is not set, filesystem can't be mounted. [ 418.699402][ T4600] incfs: mount failed -2 [ 419.133961][ T874] usb 6-1: USB disconnect, device number 14 [ 419.161025][ T4606] loop5: detected capacity change from 0 to 16 [ 419.200530][ T4606] erofs: (device loop5): mounted with root inode @ nid 36. [ 419.209228][ T557] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 419.221952][ T4606] attempt to access beyond end of device [ 419.221952][ T4606] loop5: rw=0, want=14552337264, limit=16 [ 419.249296][ T4606] attempt to access beyond end of device [ 419.249296][ T4606] loop5: rw=0, want=14546590688, limit=16 [ 419.287482][ T4615] xt_l2tp: unknown flags: 17 [ 419.719175][ T557] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.739263][ T557] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 419.748141][ T557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.765897][ T557] usb 5-1: config 0 descriptor?? [ 419.778124][ T4631] loop0: detected capacity change from 0 to 1024 [ 419.779087][ T60] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 419.809771][ T4631] EXT4-fs (loop0): Test dummy encryption mode enabled [ 419.816475][ T4631] EXT4-fs (loop0): Ignoring removed orlov option [ 419.825734][ T4631] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 419.946552][ T4635] loop6: detected capacity change from 0 to 128 [ 420.010156][ T4635] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 420.018592][ T4635] FAT-fs (loop6): Filesystem has been set read-only [ 420.075204][ T4635] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 420.159421][ T60] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 420.266783][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.326554][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.346657][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 420.374152][ T60] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 420.383664][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.393793][ T4294] usb 5-1: USB disconnect, device number 17 [ 420.404628][ T60] usb 4-1: config 0 descriptor?? [ 420.533802][ T4648] incfs: Backing dir is not set, filesystem can't be mounted. [ 420.541445][ T4648] incfs: mount failed -2 [ 421.010161][ T60] thrustmaster 0003:044F:B653.0014: unbalanced delimiter at end of report description [ 421.026906][ T60] thrustmaster 0003:044F:B653.0014: parse failed [ 421.033637][ T60] thrustmaster: probe of 0003:044F:B653.0014 failed with error -22 [ 421.248199][ T4657] incfs: Backing dir is not set, filesystem can't be mounted. [ 421.256417][ T4657] incfs: mount failed -2 [ 421.344319][ T4619] loop3: detected capacity change from 0 to 16 [ 421.450926][ T4619] erofs: Unknown parameter '' [ 421.515073][ T4660] loop5: detected capacity change from 0 to 512 [ 421.582518][ T4660] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 421.659289][ T4660] EXT4-fs (loop5): 1 orphan inode deleted [ 421.665002][ T4660] EXT4-fs (loop5): 1 truncate cleaned up [ 421.670498][ T4660] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 421.689456][ T557] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 421.831000][ T4669] overlayfs: failed to resolve './file0': -2 [ 421.969136][ T4675] loop0: detected capacity change from 0 to 16 [ 422.031937][ T4675] erofs: (device loop0): mounted with root inode @ nid 36. [ 422.049253][ T557] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 422.062676][ T4675] attempt to access beyond end of device [ 422.062676][ T4675] loop0: rw=0, want=14552337264, limit=16 [ 422.078928][ T557] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.091943][ T4675] attempt to access beyond end of device [ 422.091943][ T4675] loop0: rw=0, want=14546590688, limit=16 [ 422.112538][ T557] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.132604][ T557] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 422.158900][ T557] usb 7-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 422.178131][ T557] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.208284][ T557] usb 7-1: config 0 descriptor?? [ 422.619588][ T757] usb 4-1: USB disconnect, device number 16 [ 422.620563][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 422.620579][ T30] audit: type=1400 audit(1732368078.194:2660): avc: denied { create } for pid=4679 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 422.652013][ T30] audit: type=1400 audit(1732368078.224:2661): avc: denied { write } for pid=4679 comm="syz.4.1224" path="socket:[38373]" dev="sockfs" ino=38373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 422.709277][ T4685] loop4: detected capacity change from 0 to 512 [ 422.728127][ T4687] loop3: detected capacity change from 0 to 1024 [ 422.769890][ T4685] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 422.770001][ T4687] EXT4-fs (loop3): Test dummy encryption mode enabled [ 422.792334][ T4687] EXT4-fs (loop3): Ignoring removed orlov option [ 422.815614][ T4687] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 422.837399][ T4685] EXT4-fs (loop4): 1 truncate cleaned up [ 422.845161][ T557] thrustmaster 0003:044F:B653.0015: unbalanced delimiter at end of report description [ 422.849750][ T4685] EXT4-fs (loop4): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,abort,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 422.866057][ T557] thrustmaster 0003:044F:B653.0015: parse failed [ 422.882685][ T557] thrustmaster: probe of 0003:044F:B653.0015 failed with error -22 [ 423.134441][ T4647] loop6: detected capacity change from 0 to 16 [ 423.307023][ T4699] incfs: Backing dir is not set, filesystem can't be mounted. [ 423.314379][ T4699] incfs: mount failed -2 [ 423.329431][ T4647] erofs: Unknown parameter '' [ 424.240938][ T4710] incfs: Backing dir is not set, filesystem can't be mounted. [ 424.248385][ T4710] incfs: mount failed -2 [ 424.393542][ T30] audit: type=1326 audit(1732368079.964:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4711 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 424.417279][ T60] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 424.475685][ T627] usb 7-1: USB disconnect, device number 3 [ 424.502643][ T30] audit: type=1326 audit(1732368080.034:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4711 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 424.526245][ T30] audit: type=1326 audit(1732368080.034:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4711 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 424.549476][ T30] audit: type=1326 audit(1732368080.034:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4711 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 424.572771][ T30] audit: type=1326 audit(1732368080.034:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4711 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 424.669275][ T4723] incfs: Backing dir is not set, filesystem can't be mounted. [ 424.676859][ T4723] incfs: mount failed -2 [ 424.729341][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 424.849499][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.899475][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.936293][ T30] audit: type=1326 audit(1732368080.034:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4711 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 424.961224][ T30] audit: type=1326 audit(1732368080.034:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4711 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 424.984387][ T60] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 424.984420][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.002609][ T60] usb 4-1: config 0 descriptor?? [ 425.026254][ T4727] loop4: detected capacity change from 0 to 512 [ 425.058332][ T30] audit: type=1326 audit(1732368080.034:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4711 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 425.089776][ T4727] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 425.111022][ T4727] EXT4-fs (loop4): 1 orphan inode deleted [ 425.118646][ T4727] EXT4-fs (loop4): 1 truncate cleaned up [ 425.135341][ T4727] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 425.555692][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0016/input/input6 [ 425.580594][ T4739] loop5: detected capacity change from 0 to 1024 [ 425.639869][ T4739] EXT4-fs (loop5): Test dummy encryption mode enabled [ 425.650972][ T4739] EXT4-fs (loop5): Ignoring removed orlov option [ 425.670206][ T60] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 425.680030][ T4739] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 426.084424][ T60] usb 4-1: USB disconnect, device number 17 [ 426.539895][ T4773] xt_l2tp: unknown flags: 17 [ 426.689054][ T757] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 426.719053][ T60] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 427.001662][ T4775] loop0: detected capacity change from 0 to 40427 [ 427.039970][ T4775] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 427.046160][ T4775] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 427.079140][ T60] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 427.090143][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.099442][ T757] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 427.101396][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.121354][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 427.121617][ T757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.134434][ T60] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 427.156662][ T4775] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 427.189088][ T757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.198147][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.198646][ T757] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 427.219403][ T60] usb 5-1: config 0 descriptor?? [ 427.249177][ T4775] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 427.256742][ T4775] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 427.268737][ T757] usb 6-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 427.289848][ T757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.305221][ T757] usb 6-1: config 0 descriptor?? [ 428.339552][ T4794] loop5: detected capacity change from 0 to 16 [ 429.058506][ T4791] incfs: Backing dir is not set, filesystem can't be mounted. [ 429.066123][ T4791] incfs: mount failed -2 [ 429.075533][ T4796] incfs: Backing dir is not set, filesystem can't be mounted. [ 429.082995][ T4796] incfs: mount failed -2 [ 429.109897][ T4794] erofs: Unknown parameter '' [ 429.519916][ T4800] loop6: detected capacity change from 0 to 512 [ 429.519943][ T60] thrustmaster 0003:044F:B653.0017: unbalanced delimiter at end of report description [ 429.536323][ T60] thrustmaster 0003:044F:B653.0017: parse failed [ 429.542569][ T60] thrustmaster: probe of 0003:044F:B653.0017 failed with error -22 [ 429.550276][ T4800] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 429.577618][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 429.577634][ T30] audit: type=1326 audit(1732368085.144:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 429.610085][ T30] audit: type=1326 audit(1732368085.174:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 429.611342][ T4800] EXT4-fs (loop6): 1 orphan inode deleted [ 429.633631][ T30] audit: type=1326 audit(1732368085.174:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 429.662589][ T30] audit: type=1326 audit(1732368085.174:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 429.686274][ T30] audit: type=1326 audit(1732368085.174:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 429.692382][ T4769] loop4: detected capacity change from 0 to 16 [ 429.709750][ T30] audit: type=1326 audit(1732368085.184:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 429.739683][ T30] audit: type=1326 audit(1732368085.184:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 429.762930][ T4800] EXT4-fs (loop6): 1 truncate cleaned up [ 429.763232][ T4809] fuse: Unknown parameter '0x0000000000000003' [ 429.768535][ T4800] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 429.775718][ T30] audit: type=1326 audit(1732368085.184:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ba5d7819 code=0x7ffc0000 [ 429.795039][ T4769] erofs: Unknown parameter '' [ 430.329236][ T4806] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 430.371568][ T4806] EXT4-fs (loop6): Remounting filesystem read-only [ 430.466844][ T4827] loop3: detected capacity change from 0 to 512 [ 430.509720][ T4827] EXT4-fs (loop3): Ignoring removed oldalloc option [ 430.517270][ T4827] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 430.602892][ T4827] loop3: detected capacity change from 0 to 1024 [ 430.629981][ T4827] EXT4-fs (loop3): Test dummy encryption mode enabled [ 430.636745][ T4827] EXT4-fs (loop3): Ignoring removed oldalloc option [ 430.645575][ T4827] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,data_err=abort,inlinecrypt,commit=0x0000000000000005,noinit_itable,oldalloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 430.731324][ T4835] incfs: Backing dir is not set, filesystem can't be mounted. [ 430.738737][ T4835] incfs: mount failed -2 [ 430.919126][ T39] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 431.023401][ T4294] usb 5-1: USB disconnect, device number 18 [ 431.309366][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.342907][ T39] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.366747][ T39] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 431.377650][ T30] audit: type=1326 audit(1732368086.954:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 431.407135][ T30] audit: type=1326 audit(1732368086.954:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 431.416751][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.430861][ T757] usbhid 6-1:0.0: can't add hid device: -71 [ 431.441185][ T39] usb 1-1: config 0 descriptor?? [ 431.446027][ T757] usbhid: probe of 6-1:0.0 failed with error -71 [ 431.470734][ T757] usb 6-1: USB disconnect, device number 15 [ 431.602143][ T4863] incfs: Backing dir is not set, filesystem can't be mounted. [ 431.609685][ T4863] incfs: mount failed -2 [ 431.740175][ T39] usb 1-1: USB disconnect, device number 19 [ 432.317278][ T4876] incfs: Backing dir is not set, filesystem can't be mounted. [ 432.325364][ T4876] incfs: mount failed -2 [ 432.459139][ T564] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 432.849322][ T564] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 432.860617][ T564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.876185][ T564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.887233][ T564] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 432.926030][ T564] usb 6-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 433.058534][ T564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.067646][ T564] usb 6-1: config 0 descriptor?? [ 433.223156][ T4899] incfs: Backing dir is not set, filesystem can't be mounted. [ 433.231032][ T4899] incfs: mount failed -2 [ 433.597750][ T564] thrustmaster 0003:044F:B653.0018: unbalanced delimiter at end of report description [ 433.616597][ T564] thrustmaster 0003:044F:B653.0018: parse failed [ 433.625486][ T564] thrustmaster: probe of 0003:044F:B653.0018 failed with error -22 [ 433.755311][ T4869] loop5: detected capacity change from 0 to 16 [ 433.819300][ T4869] erofs: Unknown parameter '' [ 434.011031][ T4910] loop6: detected capacity change from 0 to 16 [ 434.039787][ T4910] erofs: (device loop6): mounted with root inode @ nid 36. [ 434.055003][ T4910] attempt to access beyond end of device [ 434.055003][ T4910] loop6: rw=0, want=14552337264, limit=16 [ 434.076364][ T4910] attempt to access beyond end of device [ 434.076364][ T4910] loop6: rw=0, want=14546590688, limit=16 [ 434.638917][ T4921] loop3: detected capacity change from 0 to 16 [ 434.682099][ T4921] erofs: (device loop3): mounted with root inode @ nid 36. [ 434.731580][ T4923] incfs: Backing dir is not set, filesystem can't be mounted. [ 434.739359][ T4923] incfs: mount failed -2 [ 434.756871][ T4921] attempt to access beyond end of device [ 434.756871][ T4921] loop3: rw=0, want=14552337264, limit=16 [ 434.768651][ T4921] attempt to access beyond end of device [ 434.768651][ T4921] loop3: rw=0, want=14546590688, limit=16 [ 435.070733][ T757] usb 6-1: USB disconnect, device number 16 [ 435.082054][ T4930] fuse: Unknown parameter '0x0000000000000003' [ 435.092470][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 435.092486][ T30] audit: type=1326 audit(1732368090.664:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc568ac7819 code=0x7ffc0000 [ 435.151066][ T30] audit: type=1326 audit(1732368090.664:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc568ac7819 code=0x7ffc0000 [ 435.175726][ T30] audit: type=1326 audit(1732368090.664:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc568ac7819 code=0x7ffc0000 [ 435.202173][ T30] audit: type=1326 audit(1732368090.664:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc568ac7819 code=0x7ffc0000 [ 435.227027][ T30] audit: type=1326 audit(1732368090.664:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc568ac7819 code=0x7ffc0000 [ 435.251065][ T30] audit: type=1326 audit(1732368090.664:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fc568ac7819 code=0x7ffc0000 [ 435.275133][ T30] audit: type=1326 audit(1732368090.664:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc568ac7819 code=0x7ffc0000 [ 435.300946][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1298'. [ 435.325421][ T4938] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎs„ [ 435.327890][ T30] audit: type=1326 audit(1732368090.664:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc568ac7819 code=0x7ffc0000 [ 435.367447][ T30] audit: type=1326 audit(1732368090.934:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.6.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc568ac7819 code=0x7ffc0000 [ 435.390774][ T6] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 435.411318][ T30] audit: type=1326 audit(1732368090.964:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.6.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc568ac7819 code=0x7ffc0000 [ 435.474436][ T4948] loop5: detected capacity change from 0 to 16 [ 435.498350][ T4955] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 435.510388][ T4948] erofs: (device loop5): mounted with root inode @ nid 36. [ 435.520225][ T4948] attempt to access beyond end of device [ 435.520225][ T4948] loop5: rw=0, want=14552337264, limit=16 [ 435.531714][ T4948] attempt to access beyond end of device [ 435.531714][ T4948] loop5: rw=0, want=14546590688, limit=16 [ 435.532908][ T4958] fuse: Unknown parameter '0x0000000000000003' [ 435.711442][ T4967] loop5: detected capacity change from 0 to 16 [ 435.730315][ T4967] erofs: (device loop5): mounted with root inode @ nid 36. [ 435.740376][ T4967] attempt to access beyond end of device [ 435.740376][ T4967] loop5: rw=0, want=14552337264, limit=16 [ 435.751602][ T4967] attempt to access beyond end of device [ 435.751602][ T4967] loop5: rw=0, want=14546590688, limit=16 [ 435.851520][ T4974] incfs: Backing dir is not set, filesystem can't be mounted. [ 435.859086][ T4974] incfs: mount failed -2 [ 435.878621][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.889750][ T6] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.901199][ T6] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 435.911161][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.929228][ T4847] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 436.020396][ T6] usb 5-1: config 0 descriptor?? [ 436.273020][ T39] usb 5-1: USB disconnect, device number 19 [ 436.289150][ T4847] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.459222][ T4847] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.468189][ T4847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.475976][ T4847] usb 1-1: Product: syz [ 436.480362][ T4847] usb 1-1: Manufacturer: syz [ 436.484802][ T4847] usb 1-1: SerialNumber: syz [ 436.726111][ T4988] incfs: Backing dir is not set, filesystem can't be mounted. [ 436.733723][ T4988] incfs: mount failed -2 [ 436.967966][ T4990] fuse: Unknown parameter 'fd0x0000000000000003' [ 437.038698][ T4994] loop4: detected capacity change from 0 to 16 [ 437.079829][ T4994] erofs: (device loop4): mounted with root inode @ nid 36. [ 437.087965][ T4986] loop5: detected capacity change from 0 to 40427 [ 437.095825][ T4994] attempt to access beyond end of device [ 437.095825][ T4994] loop4: rw=0, want=14552337264, limit=16 [ 437.107033][ T4994] attempt to access beyond end of device [ 437.107033][ T4994] loop4: rw=0, want=14546590688, limit=16 [ 437.125116][ T4986] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 437.132942][ T4986] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 437.143758][ T4986] F2FS-fs (loop5): Found nat_bits in checkpoint [ 437.184145][ T4986] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 437.191156][ T4986] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 437.400113][ T5012] loop4: detected capacity change from 0 to 16 [ 437.420122][ T5012] erofs: (device loop4): mounted with root inode @ nid 36. [ 437.630507][ T5017] incfs: Backing dir is not set, filesystem can't be mounted. [ 437.638099][ T5017] incfs: mount failed -2 [ 437.699724][ T4847] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 437.708503][ T4847] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 437.741669][ T4847] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 437.900241][ T4961] UDC core: couldn't find an available UDC or it's busy: -16 [ 437.909579][ T4961] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 437.939176][ T4847] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 437.946950][ T4847] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 437.959090][ T4847] usb 1-1: USB disconnect, device number 20 [ 437.965158][ T4847] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 438.046394][ T5021] incfs: Backing dir is not set, filesystem can't be mounted. [ 438.054387][ T5021] incfs: mount failed -2 [ 438.346265][ T5028] fuse: Unknown parameter 'fd0x0000000000000003' [ 438.384309][ T5032] loop6: detected capacity change from 0 to 16 [ 438.410801][ T5032] erofs: (device loop6): mounted with root inode @ nid 36. [ 438.885597][ T5046] xt_l2tp: unknown flags: 17 [ 439.049552][ T60] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 439.329772][ T5054] loop6: detected capacity change from 0 to 16 [ 439.369655][ T5054] erofs: (device loop6): mounted with root inode @ nid 36. [ 439.379451][ T5054] handle_bad_sector: 4 callbacks suppressed [ 439.379470][ T5054] attempt to access beyond end of device [ 439.379470][ T5054] loop6: rw=0, want=14552337264, limit=16 [ 439.396733][ T5054] attempt to access beyond end of device [ 439.396733][ T5054] loop6: rw=0, want=14546590688, limit=16 [ 439.470033][ T5051] loop4: detected capacity change from 0 to 40427 [ 439.477714][ T60] usb 6-1: config 0 has no interfaces? [ 439.483312][ T60] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 439.492261][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.499913][ T5051] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 439.500923][ T60] usb 6-1: config 0 descriptor?? [ 439.506588][ T5051] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 439.521983][ T5051] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 439.554766][ T5051] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 439.561763][ T5051] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 439.601413][ T5061] fuse: Unknown parameter 'fd0x0000000000000003' [ 439.678706][ T5067] loop4: detected capacity change from 0 to 16 [ 439.779194][ T5074] loop4: detected capacity change from 0 to 16 [ 439.810020][ T5074] erofs: (device loop4): mounted with root inode @ nid 36. [ 439.819799][ T5074] attempt to access beyond end of device [ 439.819799][ T5074] loop4: rw=0, want=14552337264, limit=16 [ 439.830950][ T5074] attempt to access beyond end of device [ 439.830950][ T5074] loop4: rw=0, want=14546590688, limit=16 [ 439.889062][ T6] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 440.204204][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 440.204223][ T30] audit: type=1400 audit(1732368095.774:2802): avc: denied { create } for pid=5043 comm="syz.5.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 440.235528][ T5077] tipc: Started in network mode [ 440.239135][ T30] audit: type=1400 audit(1732368095.804:2803): avc: denied { ioctl } for pid=5043 comm="syz.5.1335" path="socket:[39105]" dev="sockfs" ino=39105 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.243369][ T5077] tipc: Node identity fff, cluster identity 7 [ 440.264936][ T30] audit: type=1400 audit(1732368095.804:2804): avc: denied { setopt } for pid=5043 comm="syz.5.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 440.292088][ T30] audit: type=1400 audit(1732368095.804:2805): avc: denied { bind } for pid=5043 comm="syz.5.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 440.306550][ T5077] tipc: Node number set to 4095 [ 440.445367][ T5083] loop3: detected capacity change from 0 to 40427 [ 440.489877][ T5083] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 440.496117][ T5083] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 440.507129][ T5083] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 440.532041][ T5083] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 440.539186][ T5083] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 440.559201][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.589143][ T1333] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 440.769136][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.778096][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.786416][ T6] usb 1-1: Product: syz [ 440.790571][ T6] usb 1-1: Manufacturer: syz [ 440.794980][ T6] usb 1-1: SerialNumber: syz [ 440.859076][ T1333] usb 7-1: Using ep0 maxpacket: 32 [ 440.885070][ T5093] loop3: detected capacity change from 0 to 40427 [ 440.939750][ T5093] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 440.945975][ T5093] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 440.956719][ T5093] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 440.979114][ T1333] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 440.987227][ T1333] usb 7-1: config 0 has no interface number 0 [ 440.988868][ T5093] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 440.999993][ T5093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 441.149154][ T1333] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 441.158489][ T1333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.166494][ T1333] usb 7-1: Product: syz [ 441.170590][ T1333] usb 7-1: Manufacturer: syz [ 441.175050][ T1333] usb 7-1: SerialNumber: syz [ 441.180899][ T1333] usb 7-1: config 0 descriptor?? [ 441.219464][ T1333] smsc95xx v2.0.0 [ 441.659180][ T1333] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 441.675535][ T1333] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 441.685231][ T30] audit: type=1326 audit(1732368097.254:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5101 comm="syz.4.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 441.708764][ T30] audit: type=1326 audit(1732368097.254:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5101 comm="syz.4.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 441.801620][ T757] usb 6-1: USB disconnect, device number 17 [ 441.819595][ T5108] loop5: detected capacity change from 0 to 16 [ 441.840634][ T5108] erofs: (device loop5): mounted with root inode @ nid 36. [ 441.850817][ T5108] attempt to access beyond end of device [ 441.850817][ T5108] loop5: rw=0, want=14552337264, limit=16 [ 441.862248][ T5108] attempt to access beyond end of device [ 441.862248][ T5108] loop5: rw=0, want=14546590688, limit=16 [ 441.969146][ T6] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 441.975682][ T6] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 441.976367][ T5106] loop3: detected capacity change from 0 to 40427 [ 441.983388][ T6] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 442.033869][ T5106] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 442.040237][ T5106] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 442.085361][ T5106] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 442.169949][ T5065] UDC core: couldn't find an available UDC or it's busy: -16 [ 442.177164][ T5065] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 442.202997][ T5106] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 442.209144][ T6] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 442.209978][ T5106] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 442.217520][ T6] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 442.250823][ T6] usb 1-1: USB disconnect, device number 21 [ 442.256771][ T6] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 442.443617][ T30] audit: type=1326 audit(1732368098.014:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 442.467120][ T30] audit: type=1326 audit(1732368098.014:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 442.490933][ T30] audit: type=1326 audit(1732368098.014:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 442.514704][ T30] audit: type=1326 audit(1732368098.044:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac78d819 code=0x7ffc0000 [ 442.546698][ T5121] loop4: detected capacity change from 0 to 1024 [ 442.570171][ T5121] EXT4-fs (loop4): Test dummy encryption mode enabled [ 442.576880][ T5121] EXT4-fs (loop4): Ignoring removed orlov option [ 442.585679][ T5121] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 443.148022][ T5133] loop3: detected capacity change from 0 to 16 [ 443.169883][ T5133] erofs: (device loop3): mounted with root inode @ nid 36. [ 443.180369][ T5133] attempt to access beyond end of device [ 443.180369][ T5133] loop3: rw=0, want=14552337264, limit=16 [ 443.191970][ T5133] attempt to access beyond end of device [ 443.191970][ T5133] loop3: rw=0, want=14546590688, limit=16 [ 443.278210][ T5135] incfs: Backing dir is not set, filesystem can't be mounted. [ 443.285820][ T5135] incfs: mount failed -2 [ 443.353596][ T5126] loop0: detected capacity change from 0 to 40427 [ 443.467433][ T5126] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 443.473759][ T5126] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 443.517022][ T5126] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 443.546431][ T5126] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 443.553444][ T5126] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 443.628116][ T5144] device pim6reg1 entered promiscuous mode [ 443.780332][ T5081] tipc: Started in network mode [ 443.785146][ T5081] tipc: Node identity 2007ff, cluster identity 4711 [ 443.791766][ T5081] tipc: Node number set to 2099199 [ 444.019120][ T1333] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 444.034740][ T1333] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 444.042317][ T1333] usb 7-1: USB disconnect, device number 4 [ 444.059468][ T5156] loop3: detected capacity change from 0 to 128 [ 444.090435][ T5156] FAT-fs (loop3): bogus number of reserved sectors [ 444.097079][ T5156] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 444.110339][ T5156] FAT-fs (loop3): Can't find a valid FAT filesystem [ 444.181067][ T5156] loop3: detected capacity change from 0 to 16 [ 444.229763][ T5156] erofs: (device loop3): mounted with root inode @ nid 36. [ 444.240246][ T5156] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 444.250657][ T5156] attempt to access beyond end of device [ 444.250657][ T5156] loop3: rw=524288, want=34359740336, limit=16 [ 444.263645][ T5156] attempt to access beyond end of device [ 444.263645][ T5156] loop3: rw=0, want=34359739352, limit=16 [ 444.340205][ T5159] loop3: detected capacity change from 0 to 512 [ 444.369901][ T5159] EXT4-fs (loop3): Ignoring removed oldalloc option [ 444.376652][ T5159] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 444.494366][ T5159] loop3: detected capacity change from 0 to 1024 [ 444.539900][ T5159] EXT4-fs (loop3): Test dummy encryption mode enabled [ 444.546765][ T5159] EXT4-fs (loop3): Ignoring removed oldalloc option [ 444.555899][ T5159] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,data_err=abort,inlinecrypt,commit=0x0000000000000005,noinit_itable,oldalloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 444.596064][ T5167] xt_l2tp: unknown flags: 17 [ 444.789056][ T1333] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 444.909080][ T6] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 445.009073][ T4847] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 445.149173][ T1333] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.279191][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.329230][ T1333] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.338379][ T1333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.346609][ T1333] usb 7-1: Product: syz [ 445.350663][ T1333] usb 7-1: Manufacturer: syz [ 445.355270][ T1333] usb 7-1: SerialNumber: syz [ 445.409297][ T4847] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.431192][ T5181] incfs: Backing dir is not set, filesystem can't be mounted. [ 445.438702][ T5181] incfs: mount failed -2 [ 445.609362][ T4847] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.618348][ T4847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.626323][ T4847] usb 4-1: Product: syz [ 445.630304][ T4847] usb 4-1: Manufacturer: syz [ 445.634680][ T4847] usb 4-1: SerialNumber: syz [ 445.689164][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.698127][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.705914][ T6] usb 1-1: Product: syz [ 445.709907][ T6] usb 1-1: Manufacturer: syz [ 445.714296][ T6] usb 1-1: SerialNumber: syz [ 445.901943][ T5185] incfs: Backing dir is not set, filesystem can't be mounted. [ 445.909499][ T5185] incfs: mount failed -2 [ 446.470463][ T5193] FAULT_INJECTION: forcing a failure. [ 446.470463][ T5193] name failslab, interval 1, probability 0, space 0, times 0 [ 446.483148][ T5193] CPU: 1 PID: 5193 Comm: syz.4.1376 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 446.492955][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 446.502864][ T5193] Call Trace: [ 446.505976][ T5193] [ 446.508751][ T5193] dump_stack_lvl+0x151/0x1c0 [ 446.513266][ T5193] ? io_uring_drop_tctx_refs+0x190/0x190 [ 446.518733][ T5193] dump_stack+0x15/0x20 [ 446.522722][ T5193] should_fail+0x3c6/0x510 [ 446.526976][ T5193] __should_failslab+0xa4/0xe0 [ 446.531584][ T5193] ? __anon_vma_prepare+0x56/0x430 [ 446.536522][ T5193] should_failslab+0x9/0x20 [ 446.540966][ T5193] slab_pre_alloc_hook+0x37/0xd0 [ 446.545831][ T5193] ? __anon_vma_prepare+0x56/0x430 [ 446.550778][ T5193] kmem_cache_alloc+0x44/0x200 [ 446.555464][ T5193] __anon_vma_prepare+0x56/0x430 [ 446.560241][ T5193] wp_page_copy+0x14a7/0x1b00 [ 446.564759][ T5193] ? __kasan_check_write+0x14/0x20 [ 446.569700][ T5193] ? insert_page_into_pte_locked+0x4e0/0x4e0 [ 446.575513][ T5193] ? perf_event_mmap+0x3ac/0x1930 [ 446.580373][ T5193] ? x64_sys_call+0x67/0x9a0 [ 446.584803][ T5193] ? do_syscall_64+0x3b/0xb0 [ 446.589376][ T5193] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 446.595381][ T5193] ? __pte_map_lock+0x442/0x620 [ 446.600060][ T5193] ? vm_normal_page+0x1e1/0x1f0 [ 446.604747][ T5193] do_wp_page+0x9ca/0xc90 [ 446.609047][ T5193] handle_pte_fault+0x799/0x25c0 [ 446.613806][ T5193] ? fault_around_bytes_set+0xc0/0xc0 [ 446.619010][ T5193] ? trace_raw_output_vm_unmapped_area+0x220/0x220 [ 446.625347][ T5193] do_handle_mm_fault+0x20bc/0x2400 [ 446.630382][ T5193] ? numa_migrate_prep+0xe0/0xe0 [ 446.635150][ T5193] ? memset+0x35/0x40 [ 446.638971][ T5193] ? get_unmapped_area+0x31d/0x380 [ 446.643919][ T5193] ? userfaultfd_unmap_prep+0x4a0/0x4a0 [ 446.649300][ T5193] ? down_read_trylock+0x3d6/0x7d0 [ 446.654252][ T5193] ? __init_rwsem+0x1d0/0x1d0 [ 446.658784][ T5193] ? debug_smp_processor_id+0x17/0x20 [ 446.663976][ T5193] ? vmacache_find+0x21f/0x4d0 [ 446.668601][ T5193] ? __find_vma+0x30/0x150 [ 446.672823][ T5193] exc_page_fault+0x3b5/0x7f0 [ 446.677354][ T5193] asm_exc_page_fault+0x27/0x30 [ 446.682021][ T5193] RIP: 0033:0x7f54ac650853 [ 446.686275][ T5193] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 446.705719][ T5193] RSP: 002b:00007f54aae054a0 EFLAGS: 00010202 [ 446.711617][ T5193] RAX: 0000000000000400 RBX: 00007f54aae05540 RCX: 00007f54a29e6000 [ 446.719426][ T5193] RDX: 00007f54aae056e0 RSI: 0000000000000029 RDI: 00007f54aae055e0 [ 446.727241][ T5193] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a6 [ 446.735050][ T5193] R10: 00000000000000be R11: 00007f54aae05540 R12: 0000000000000001 [ 446.742864][ T5193] R13: 00007f54ac814fa0 R14: 0000000000000020 R15: 00007f54aae055e0 [ 446.750681][ T5193] [ 446.754378][ T5193] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 446.771625][ T5193] loop4: detected capacity change from 0 to 2048 [ 446.812093][ T5193] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 446.849151][ T6] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 446.855768][ T6] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 446.863225][ T6] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 447.484635][ T5164] UDC core: couldn't find an available UDC or it's busy: -16 [ 447.492024][ T4847] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 447.498427][ T4847] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 447.516649][ T5207] UDC core: couldn't find an available UDC or it's busy: -16 [ 447.525181][ T5164] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 447.534230][ T5207] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 447.542596][ T4847] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 447.605517][ T6] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 447.606152][ T5210] loop5: detected capacity change from 0 to 512 [ 447.610902][ T1333] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 447.625931][ T6] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 447.635900][ T1333] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 447.644690][ T6] usb 1-1: USB disconnect, device number 22 [ 447.650841][ T6] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 447.659055][ T1333] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 447.662742][ T5210] EXT4-fs (loop5): Ignoring removed oldalloc option [ 447.671149][ T5210] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 447.680475][ T1333] cdc_ncm 7-1:1.0: setting tx_max = 88 [ 447.687993][ T1333] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM, 42:42:42:42:42:42 [ 447.692906][ T5173] UDC core: couldn't find an available UDC or it's busy: -16 [ 447.705340][ T5173] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 447.715124][ T1333] usb 7-1: USB disconnect, device number 5 [ 447.721125][ T1333] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM [ 447.729170][ T4847] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 447.731416][ T874] ================================================================== [ 447.742468][ T874] BUG: KASAN: use-after-free in worker_thread+0xaaa/0x12a0 [ 447.749645][ T874] Read of size 8 at addr ffff88810d354c60 by task kworker/0:5/874 [ 447.757279][ T874] [ 447.759450][ T874] CPU: 0 PID: 874 Comm: kworker/0:5 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 447.769255][ T874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 447.779164][ T874] Workqueue: 0x0 (events) [ 447.783403][ T874] Call Trace: [ 447.786531][ T874] [ 447.789315][ T874] dump_stack_lvl+0x151/0x1c0 [ 447.793829][ T874] ? io_uring_drop_tctx_refs+0x190/0x190 [ 447.799396][ T874] ? panic+0x760/0x760 [ 447.803398][ T874] ? __schedule+0xcd4/0x1590 [ 447.807822][ T874] print_address_description+0x87/0x3b0 [ 447.813205][ T874] kasan_report+0x179/0x1c0 [ 447.817541][ T874] ? _raw_spin_lock_irqsave+0x210/0x210 [ 447.822922][ T874] ? worker_thread+0xaaa/0x12a0 [ 447.827608][ T874] ? worker_thread+0xaaa/0x12a0 [ 447.832294][ T874] __asan_report_load8_noabort+0x14/0x20 [ 447.837934][ T874] worker_thread+0xaaa/0x12a0 [ 447.842550][ T874] ? _raw_spin_lock+0x1b0/0x1b0 [ 447.847246][ T874] kthread+0x421/0x510 [ 447.851138][ T874] ? worker_clr_flags+0x180/0x180 [ 447.856303][ T874] ? kthread_blkcg+0xd0/0xd0 [ 447.860797][ T874] ret_from_fork+0x1f/0x30 [ 447.864989][ T874] [ 447.867854][ T874] [ 447.870022][ T874] Allocated by task 6: [ 447.873922][ T874] ____kasan_kmalloc+0xdb/0x110 [ 447.878609][ T874] __kasan_kmalloc+0x9/0x10 [ 447.882959][ T874] __kmalloc+0x13a/0x270 [ 447.887027][ T874] kvmalloc_node+0x1f0/0x4d0 [ 447.891458][ T874] alloc_netdev_mqs+0x8c/0xc90 [ 447.896057][ T874] alloc_etherdev_mqs+0x33/0x40 [ 447.900742][ T874] usbnet_probe+0x1fc/0x2840 [ 447.905175][ T874] usb_probe_interface+0x5b6/0xa90 [ 447.910200][ T874] really_probe+0x28d/0x970 [ 447.914538][ T874] __driver_probe_device+0x1a0/0x310 [ 447.919663][ T874] driver_probe_device+0x54/0x3d0 [ 447.924517][ T874] __device_attach_driver+0x2c5/0x470 [ 447.930165][ T874] bus_for_each_drv+0x183/0x200 [ 447.934843][ T874] __device_attach+0x312/0x510 [ 447.939454][ T874] device_initial_probe+0x1a/0x20 [ 447.944305][ T874] bus_probe_device+0xbe/0x1e0 [ 447.949087][ T874] device_add+0xb60/0xf10 [ 447.953241][ T874] usb_set_configuration+0x190f/0x1e80 [ 447.958536][ T874] usb_generic_driver_probe+0x8b/0x150 [ 447.963855][ T874] usb_probe_device+0x144/0x260 [ 447.968520][ T874] really_probe+0x28d/0x970 [ 447.973060][ T874] __driver_probe_device+0x1a0/0x310 [ 447.978173][ T874] driver_probe_device+0x54/0x3d0 [ 447.983032][ T874] __device_attach_driver+0x2c5/0x470 [ 447.988256][ T874] bus_for_each_drv+0x183/0x200 [ 447.992953][ T874] __device_attach+0x312/0x510 [ 447.997540][ T874] device_initial_probe+0x1a/0x20 [ 448.002395][ T874] bus_probe_device+0xbe/0x1e0 [ 448.006997][ T874] device_add+0xb60/0xf10 [ 448.011156][ T874] usb_new_device+0x1038/0x1c00 [ 448.015850][ T874] hub_event+0x2def/0x4770 [ 448.020093][ T874] process_one_work+0x6bb/0xc10 [ 448.024782][ T874] worker_thread+0xad5/0x12a0 [ 448.029292][ T874] kthread+0x421/0x510 [ 448.033198][ T874] ret_from_fork+0x1f/0x30 [ 448.037452][ T874] [ 448.039633][ T874] Freed by task 6: [ 448.043183][ T874] kasan_set_track+0x4b/0x70 [ 448.047697][ T874] kasan_set_free_info+0x23/0x40 [ 448.052473][ T874] ____kasan_slab_free+0x126/0x160 [ 448.057420][ T874] __kasan_slab_free+0x11/0x20 [ 448.062012][ T874] slab_free_freelist_hook+0xbd/0x190 [ 448.067220][ T874] kfree+0xc8/0x220 [ 448.070865][ T874] kvfree+0x35/0x40 [ 448.074520][ T874] netdev_freemem+0x3f/0x60 [ 448.078852][ T874] netdev_release+0x7f/0xb0 [ 448.083206][ T874] device_release+0x95/0x1c0 [ 448.087629][ T874] kobject_put+0x178/0x260 [ 448.091871][ T874] put_device+0x1f/0x30 [ 448.095866][ T874] free_netdev+0x34f/0x440 [ 448.100118][ T874] usbnet_disconnect+0x25f/0x3b0 [ 448.104911][ T874] usb_unbind_interface+0x1fa/0x8c0 [ 448.109928][ T874] device_release_driver_internal+0x50b/0x7d0 [ 448.115827][ T874] device_release_driver+0x19/0x20 [ 448.120774][ T874] bus_remove_device+0x2f8/0x360 [ 448.125933][ T874] device_del+0x663/0xe90 [ 448.130233][ T874] usb_disable_device+0x380/0x720 [ 448.135137][ T874] usb_disconnect+0x32a/0x890 [ 448.139845][ T874] hub_event+0x1d42/0x4770 [ 448.144186][ T874] process_one_work+0x6bb/0xc10 [ 448.148867][ T874] worker_thread+0xe02/0x12a0 [ 448.153381][ T874] kthread+0x421/0x510 [ 448.157287][ T874] ret_from_fork+0x1f/0x30 [ 448.161537][ T874] [ 448.163705][ T874] Last potentially related work creation: [ 448.169264][ T874] kasan_save_stack+0x3b/0x60 [ 448.173775][ T874] __kasan_record_aux_stack+0xd3/0xf0 [ 448.178983][ T874] kasan_record_aux_stack_noalloc+0xb/0x10 [ 448.184639][ T874] insert_work+0x56/0x320 [ 448.188791][ T874] __queue_work+0x92a/0xcd0 [ 448.193306][ T874] queue_work_on+0x105/0x170 [ 448.197775][ T874] usbnet_link_change+0x182/0x1a0 [ 448.202680][ T874] usbnet_probe+0x1dcb/0x2840 [ 448.207196][ T874] usb_probe_interface+0x5b6/0xa90 [ 448.212224][ T874] really_probe+0x28d/0x970 [ 448.216567][ T874] __driver_probe_device+0x1a0/0x310 [ 448.221694][ T874] driver_probe_device+0x54/0x3d0 [ 448.226762][ T874] __device_attach_driver+0x2c5/0x470 [ 448.231967][ T874] bus_for_each_drv+0x183/0x200 [ 448.236736][ T874] __device_attach+0x312/0x510 [ 448.241335][ T874] device_initial_probe+0x1a/0x20 [ 448.246198][ T874] bus_probe_device+0xbe/0x1e0 [ 448.250884][ T874] device_add+0xb60/0xf10 [ 448.255050][ T874] usb_set_configuration+0x190f/0x1e80 [ 448.260353][ T874] usb_generic_driver_probe+0x8b/0x150 [ 448.265656][ T874] usb_probe_device+0x144/0x260 [ 448.270427][ T874] really_probe+0x28d/0x970 [ 448.274765][ T874] __driver_probe_device+0x1a0/0x310 [ 448.279887][ T874] driver_probe_device+0x54/0x3d0 [ 448.284746][ T874] __device_attach_driver+0x2c5/0x470 [ 448.290051][ T874] bus_for_each_drv+0x183/0x200 [ 448.295194][ T874] __device_attach+0x312/0x510 [ 448.299968][ T874] device_initial_probe+0x1a/0x20 [ 448.304828][ T874] bus_probe_device+0xbe/0x1e0 [ 448.309432][ T874] device_add+0xb60/0xf10 [ 448.313598][ T874] usb_new_device+0x1038/0x1c00 [ 448.318284][ T874] hub_event+0x2def/0x4770 [ 448.322534][ T874] process_one_work+0x6bb/0xc10 [ 448.327245][ T874] worker_thread+0xad5/0x12a0 [ 448.331734][ T874] kthread+0x421/0x510 [ 448.335640][ T874] ret_from_fork+0x1f/0x30 [ 448.339893][ T874] [ 448.342061][ T874] The buggy address belongs to the object at ffff88810d354000 [ 448.342061][ T874] which belongs to the cache kmalloc-4k of size 4096 [ 448.355950][ T874] The buggy address is located 3168 bytes inside of [ 448.355950][ T874] 4096-byte region [ffff88810d354000, ffff88810d355000) [ 448.369443][ T874] The buggy address belongs to the page: [ 448.375006][ T874] page:ffffea000434d400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d350 [ 448.385057][ T874] head:ffffea000434d400 order:3 compound_mapcount:0 compound_pincount:0 [ 448.393331][ T874] flags: 0x4000000000010200(slab|head|zone=1) [ 448.399245][ T874] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 448.407815][ T874] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 448.416302][ T874] page dumped because: kasan: bad access detected [ 448.422575][ T874] page_owner tracks the page as allocated [ 448.428201][ T874] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 524, ts 256569788977, free_ts 254326019581 [ 448.449026][ T874] post_alloc_hook+0x1a3/0x1b0 [ 448.453708][ T874] prep_new_page+0x1b/0x110 [ 448.458046][ T874] get_page_from_freelist+0x3550/0x35d0 [ 448.463430][ T874] __alloc_pages+0x27e/0x8f0 [ 448.467867][ T874] new_slab+0x9a/0x4e0 [ 448.471765][ T874] ___slab_alloc+0x39e/0x830 [ 448.476187][ T874] __slab_alloc+0x4a/0x90 [ 448.480354][ T874] __kmalloc+0x16d/0x270 [ 448.484433][ T874] kvmalloc_node+0x1f0/0x4d0 [ 448.488856][ T874] alloc_netdev_mqs+0x8c/0xc90 [ 448.493460][ T874] rtnl_create_link+0x2e1/0x9d0 [ 448.498146][ T874] veth_newlink+0x2df/0xe20 [ 448.502484][ T874] rtnl_newlink+0x14c7/0x2050 [ 448.506999][ T874] rtnetlink_rcv_msg+0x951/0xc40 [ 448.511769][ T874] netlink_rcv_skb+0x1cf/0x410 [ 448.516397][ T874] rtnetlink_rcv+0x1c/0x20 [ 448.520630][ T874] page last free stack trace: [ 448.525141][ T874] free_unref_page_prepare+0x7c8/0x7d0 [ 448.530437][ T874] free_unref_page+0xe8/0x750 [ 448.534951][ T874] __free_pages+0x61/0xf0 [ 448.539114][ T874] __free_slab+0xec/0x1d0 [ 448.543279][ T874] __unfreeze_partials+0x165/0x1a0 [ 448.548227][ T874] put_cpu_partial+0xc4/0x120 [ 448.552748][ T874] __slab_free+0x1c8/0x290 [ 448.556990][ T874] ___cache_free+0x109/0x120 [ 448.561637][ T874] qlink_free+0x4d/0x90 [ 448.565805][ T874] qlist_free_all+0x44/0xb0 [ 448.570090][ T874] kasan_quarantine_reduce+0x15a/0x180 [ 448.575386][ T874] __kasan_slab_alloc+0x2f/0xe0 [ 448.580075][ T874] slab_post_alloc_hook+0x53/0x2c0 [ 448.585019][ T874] kmem_cache_alloc+0xf5/0x200 [ 448.589620][ T874] getname_flags+0xba/0x520 [ 448.593958][ T874] getname+0x19/0x20 [ 448.598061][ T874] [ 448.600234][ T874] Memory state around the buggy address: [ 448.605692][ T874] ffff88810d354b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.613594][ T874] ffff88810d354b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.621501][ T874] >ffff88810d354c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.629401][ T874] ^ [ 448.636422][ T874] ffff88810d354c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.644318][ T874] ffff88810d354d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.652300][ T874] ================================================================== [ 448.660203][ T874] Disabling lock debugging due to kernel taint [ 448.671127][ T4847] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 448.682721][ T4847] usb 4-1: USB disconnect, device number 18 [ 448.688759][ T4847] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 448.701020][ T5210] loop5: detected capacity change from 0 to 1024 [ 448.729660][ T5210] EXT4-fs (loop5): Test dummy encryption mode enabled [ 448.736419][ T5210] EXT4-fs (loop5): Ignoring removed oldalloc option [ 448.745291][ T5210] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,data_err=abort,inlinecrypt,commit=0x0000000000000005,noinit_itable,oldalloc,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 448.778401][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 448.778417][ T30] audit: type=1326 audit(1732368104.344:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 448.807596][ T30] audit: type=1326 audit(1732368104.354:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000 [ 448.831321][ T30] audit: type=1326 audit(1732368104.354:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da2b4d819 code=0x7ffc0000