last executing test programs: 26m54.696870477s ago: executing program 32 (id=375): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x2d1}], 0x1}}], 0x2, 0x0) 10m12.629427845s ago: executing program 33 (id=6691): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x48, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "12ffe4b80cb5422fd083e569ddb5b234c412f7ce3fabaa3d", "7f2340fc9ba76cae7d81c06add94a0191637f4edac2f5bef9fd0b09c1506ccad"}}}}}}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}, 0x1c) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 9m51.236847936s ago: executing program 34 (id=6849): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff0200000000000000000000000000013b"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x2404c140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xfe) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000000c0)={0xa, 0x7, 0x5, 0x10001}) socket(0x1e, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) 7m50.518233942s ago: executing program 35 (id=7853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000fff500b7044a60933cc8000000000000850000005700000095"], 0x0}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000731139000000000004000000000000009500000000000000d1cea08fa96b0c2d4a7d78a9d38a1eead7c223fe82c6ee3036b58585125509c16d4e5adcacff6c9f34be66c0d360c9a722268a1cf6b7530ae39461941906aa0b7b8d678b0f233d8985c45a8271c36062b46dc680b0d55d57d3c931b90425ead0"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1bc, 0x0, 0x46, 0x407006}, 0x104) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x12002, 0x75ba4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2f}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x3ff}]}}}]}, 0x48}}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000339e489d77d95ae124b0f74f7dac711f978620c001fb08161e6bbc1e0abf3f61f96e0983fe95e2950390508c646bf93c7c301a9397b9028fbb7cbaf72adbff36760b1db96f545a2237cd973f32dfc57b3ac480630331102cc619314b28a2ae74deb22e829d5b8a97a5f3a208c4bc6b6b449a8dc817f7224c954bc6637d2d3dda8273f359ee52a7828790c74a5388b0ecbbc90c4d2d33e49f6bc73bd5ad862744e924aa6ab8e9944cc4fef227940c850b438d9465e1a40892e88cf063495025812905cba8063d652c0ffdb2260d83ce681b5c4e47eb1b01fe954310439b4dc6513352b32ee41265f4142af7621f1c0fb846f2e8f1afd47d73992586da21db1b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) unshare(0x20040600) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="7000000003060300000000000000000007000009050001000700000005000100070000000900020073797a32000000000900020073797a32000000000900020073797a32000000000900020073797a32000000000900020073797a320000000005000100070000000500010007000000a29eda20911f6752ed500aecd816114ba28ce728363ac2aaee485aba68b7cb4647361e7ea491060eedebf47533"], 0x70}, 0x1, 0x0, 0x0, 0x20000841}, 0x4000040) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) finit_module(r8, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="000000006d61782d8ea99e9ec06b047a7be048c127ecdc0a19ae5f0be2c25b78b012120bc289af6b3dcbc302f1e7e50540e6b6b50356862a1ac0628733648ec50a9bf78fc11916f5ed26cfb0ad5f834b8448e48e64af4e90f53b3926026c90f87cc45e63a02e245ea71b0504ab2c7266fc88b5cb59b890e02a69a61e32f8cc03d2e5f78fa64d6bcfebc8428d30ef3549cace5e15080c1079a68ce2d0f9e25a51254c1e97eb3ba753bc2db9a639bfdcce28300674b2158ee9c59e2b3020229539d5f719e5465c2904d2c28b47c74f44729eb3da590d2693aa843c7dccabd6ae3ffe50de64f9201373874c9f547c71dd70e14ccc2d676fc62aa3"]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rxrpc_propose_ack\x00', r9, 0x0, 0xe}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) 7m14.342450344s ago: executing program 36 (id=8032): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) 6m34.45244747s ago: executing program 37 (id=8269): mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 4m7.262368638s ago: executing program 38 (id=8934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3) 2m41.631249928s ago: executing program 2 (id=9247): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001d40)={'gre0\x00', &(0x7f0000001c40)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x7, [{@broadcast, 0xc6}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xfffffff9}]}, @ssrr={0x89, 0xf, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xe1, [@local]}, @rr={0x7, 0x7, 0xdc, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x8, 0x90, 0x0, 0x6, [0x1]}, @ssrr={0x89, 0x13, 0x6c, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4, 0xff, 0x1, 0x4}]}}}}}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1e00000002000000ff03", @ANYRES32, @ANYBLOB="ff1700"/13, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="00010000040001000224003edafdce5b64269288", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) 2m39.481074631s ago: executing program 2 (id=9252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c0001000000", @ANYRES32=r7, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 2m38.315278919s ago: executing program 2 (id=9258): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001d40)={'gre0\x00', &(0x7f0000001c40)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x7, [{@broadcast, 0xc6}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xfffffff9}]}, @ssrr={0x89, 0xf, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xe1, [@local]}, @rr={0x7, 0x7, 0xdc, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x8, 0x90, 0x0, 0x6, [0x1]}, @ssrr={0x89, 0x13, 0x6c, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4, 0xff, 0x1, 0x4}]}}}}}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1e00000002000000ff03", @ANYRES32, @ANYBLOB="ff1700"/13, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="00010000040001000224003edafdce5b64269288", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000000000695114b2dee410c6627f17308de78a1522ba41fb3fcdf4c9c1b479f6efb334b4ca9389eda0e252d38d019ae4942afd6bab599239159479bce078ddf12d9d46d05f6537d442c699305551e2697c129a20dd42455b7efbe00787c649f3a0952f243b4ceba0fef0e58571b5aad6066396390c514ba7e311f165bd48563d3e1de6b87a3252642080833a61b50e587abdd02972da7ce601583367d46eef2a078c1d90597d5e9ce8bf77ce547bb1a7a810"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) 2m36.20799324s ago: executing program 2 (id=9262): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="370000000000000004", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x18}}, 0x40) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m32.9857931s ago: executing program 2 (id=9271): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000400, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@journal_checksum}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$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") r1 = inotify_init1(0x80800) unshare(0x2000400) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r2, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r3, &(0x7f0000000d80)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r3, 0x20, &(0x7f0000000180)={&(0x7f0000000dc0)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=""/52, 0x34}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0x2000434) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty=0xfdfdffff}}) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80c0) 2m30.176959563s ago: executing program 2 (id=9275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0x65c, 0x80000) r5 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x7, 0x2, r5}) 2m30.119727554s ago: executing program 39 (id=9275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0x65c, 0x80000) r5 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x7, 0x2, r5}) 1m47.987382099s ago: executing program 5 (id=9470): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x2d) ptrace(0x10, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = memfd_create(&(0x7f0000001380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) epoll_pwait(r8, &(0x7f0000000200)=[{}], 0x1, 0x101, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000400)={0xa}) 1m47.413245387s ago: executing program 5 (id=9475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096, 0x1000000}, 0x20) 1m47.412603707s ago: executing program 5 (id=9477): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000007000000ffff00007400000061cc0200", @ANYRES32, @ANYBLOB="06000000000000000000000000ffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000680)={[{@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@barrier_val}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@abort}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@delalloc}, {@dioread_nolock}]}, 0xff, 0x578, &(0x7f00000019c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x1b0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes256, 0x4, '\x00', @a}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x22000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) 1m46.153953866s ago: executing program 5 (id=9481): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x61, 0x25]}}, &(0x7f0000002200)=""/4110, 0x2a, 0x100e, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00!', 0x2}], 0x1, 0x0, 0x0) 1m45.093629763s ago: executing program 5 (id=9486): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000000000695114b2dee410c6627f17308de78a1522ba41fb3fcdf4c9c1b479f6efb334b4ca9389eda0e252d38d019ae4942afd6bab599239159479bce078ddf12d9d46d05f6537d442c699305551e2697c129a20dd42455b7efbe00787c649f3a0952f243b4ceba0fef0e58571b5aad6066396390c514ba7e311f165bd48563d3e1de6b87a3252642080833a61b50e587abdd02972da7ce601583367d46eef2a078c1d90597d5e9ce8bf77ce547bb1a7a810"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) 1m44.253522515s ago: executing program 5 (id=9489): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 1m40.939055716s ago: executing program 7 (id=9509): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40086610, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1m35.857867684s ago: executing program 7 (id=9521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000a, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x4000080, 0x0, 0x1, 0x9359, 0x0}) r4 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000d22e0000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) uname(&(0x7f0000000180)=""/224) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file2\x00', 0x800084, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRES16], 0x6, 0x2d7, &(0x7f0000000a40)="$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") writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000007f733ac6f06f6ac53ad341a3dc9d", 0x47}], 0x1) 1m34.318848977s ago: executing program 7 (id=9528): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000140)="17000000020001000003be8c5ee176889600330002956019fd6ee17e03000a0002000098fc58d90a00bb6a880000d6c802000037c0274f5233e4aa37f5e02bdba67e06000000e28900000200df0181c8d0bae99dfde06a075504", 0x5a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) lstat(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x300000c, &(0x7f0000000000), 0x1, 0x533, &(0x7f0000000e40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9a) 1m34.237215739s ago: executing program 7 (id=9529): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 1m32.672999722s ago: executing program 7 (id=9536): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000000000695114b2dee410c6627f17308de78a1522ba41fb3fcdf4c9c1b479f6efb334b4ca9389eda0e252d38d019ae4942afd6bab599239159479bce078ddf12d9d46d05f6537d442c699305551e2697c129a20dd42455b7efbe00787c649f3a0952f243b4ceba0fef0e58571b5aad6066396390c514ba7e311f165bd48563d3e1de6b87a3252642080833a61b50e587abdd02972da7ce601583367d46eef2a078c1d90597d5e9ce8bf77ce547bb1a7a810"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) 1m32.397894806s ago: executing program 7 (id=9538): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000340)={0x2, 0x8000}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000000000000000807d9b50bece45b87b86bb5f32d4ca03d1e2c837940674b78d23cafb36ef36747c5d8a8bed24dda5e6fd1e502d858364c67f6b9ba8bf1cdd5cf99ff318b1addbaa536fa686c5cf981d92010dafb59842c1d7dfcecbf28bcae89123066d43a78612fc2f1a873ee301c65dab54a6d8a3da02a68d337368f19a08b9f72b03d0c7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x5, 0x0, 0x20, @private2, @mcast1, 0x7, 0x1, 0x38b, 0x1ff}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') prctl$PR_GET_IO_FLUSHER(0x4) syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') r10 = epoll_create1(0x0) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r11, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}}) r12 = dup3(r11, r10, 0x0) read$FUSE(r12, &(0x7f0000001e40)={0x2020}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) getdents64(r3, 0x0, 0x0) 1m32.345222098s ago: executing program 6 (id=9539): ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) 1m32.344977398s ago: executing program 6 (id=9540): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 1m32.329866447s ago: executing program 6 (id=9541): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ed, &(0x7f00000008c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000040)={0x3ff, 0x10000002000003}) 1m31.454460751s ago: executing program 6 (id=9545): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000487e0c758ae33b64432d80bca743ce5e4b81a5594ca4434b6cff4598cb618fe3d95dc1bd4fc7ec233cac25adf392f2bdced694221047f74a2296c106e6895e3ed2a488"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) r3 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000f80)=ANY=[@ANYBLOB="380000002825fe88010203000000000000000000020000082400011c770415dc5f606800300000001400018008000100ac1e000108000200"], 0x38}, 0x1, 0x0, 0x0, 0x64d2d04f19ffa6c7}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x10448, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x7f}}, {@nodioread_nolock}]}, 0x1, 0x588, &(0x7f0000001100)="$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") socket(0xa, 0x2, 0x0) 1m29.806994246s ago: executing program 6 (id=9550): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000000000695114b2dee410c6627f17308de78a1522ba41fb3fcdf4c9c1b479f6efb334b4ca9389eda0e252d38d019ae4942afd6bab599239159479bce078ddf12d9d46d05f6537d442c699305551e2697c129a20dd42455b7efbe00787c649f3a0952f243b4ceba0fef0e58571b5aad6066396390c514ba7e311f165bd48563d3e1de6b87a3252642080833a61b50e587abdd02972da7ce601583367d46eef2a078c1d90597d5e9ce8bf77ce547bb1a7a810"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) 1m29.662707418s ago: executing program 6 (id=9551): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001d40)={'gre0\x00', &(0x7f0000001c40)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x7, [{@broadcast, 0xc6}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xfffffff9}]}, @ssrr={0x89, 0xf, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xe1, [@local]}, @rr={0x7, 0x7, 0xdc, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x8, 0x90, 0x0, 0x6, [0x1]}, @ssrr={0x89, 0x13, 0x6c, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4, 0xff, 0x1, 0x4}]}}}}}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1e00000002000000ff03", @ANYRES32, @ANYBLOB="ff1700"/13, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00010000040001000224003edafdce5b64269288", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) 1m29.234590445s ago: executing program 40 (id=9489): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 1m17.347558237s ago: executing program 41 (id=9538): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000340)={0x2, 0x8000}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000000000000000807d9b50bece45b87b86bb5f32d4ca03d1e2c837940674b78d23cafb36ef36747c5d8a8bed24dda5e6fd1e502d858364c67f6b9ba8bf1cdd5cf99ff318b1addbaa536fa686c5cf981d92010dafb59842c1d7dfcecbf28bcae89123066d43a78612fc2f1a873ee301c65dab54a6d8a3da02a68d337368f19a08b9f72b03d0c7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x5, 0x0, 0x20, @private2, @mcast1, 0x7, 0x1, 0x38b, 0x1ff}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') prctl$PR_GET_IO_FLUSHER(0x4) syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') r10 = epoll_create1(0x0) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r11, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}}) r12 = dup3(r11, r10, 0x0) read$FUSE(r12, &(0x7f0000001e40)={0x2020}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) getdents64(r3, 0x0, 0x0) 1m14.55856532s ago: executing program 42 (id=9551): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001d40)={'gre0\x00', &(0x7f0000001c40)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x7, [{@broadcast, 0xc6}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xfffffff9}]}, @ssrr={0x89, 0xf, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xe1, [@local]}, @rr={0x7, 0x7, 0xdc, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x8, 0x90, 0x0, 0x6, [0x1]}, @ssrr={0x89, 0x13, 0x6c, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4, 0xff, 0x1, 0x4}]}}}}}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1e00000002000000ff03", @ANYRES32, @ANYBLOB="ff1700"/13, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00010000040001000224003edafdce5b64269288", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) 1m5.920058692s ago: executing program 9 (id=9644): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@usrjquota}, {@nomblk_io_submit}]}, 0x0, 0x4fa, &(0x7f00000005c0)="$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") pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x5) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) openat(r4, &(0x7f0000000000)='./bus\x00', 0x107042, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b60901000000000065000c000000000018010000646c6c2500000000002020207b9af8ff000000002d9a00000000000037090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) rt_sigaction(0x38, &(0x7f0000000300)={&(0x7f00000001c0)="26f3426d3e470f0fa2fe9f22e6aac4826999398f49c002f1f36466f0fe4b7867f3a5c402a5bb1fc4c2513e730144d827662e67f2410f79f5", 0x4, &(0x7f00000002c0)="8f6830cd207ac401fd57d4c442c9a7b94e36d62666410f3810a93600000064410fdf5169c4a2c59627410f38cc64b21bc4027d356ccc00670f2df4c4c2d8f3de", {[0x8]}}, &(0x7f00000004c0)={&(0x7f0000000340)="66d8f56d46ad15a0820000d9fa26410f01eec4c1d1db6b0ac441d85831c4030d79a20c00000000c4027d598ecedccccc", 0x0, &(0x7f00000003c0)="66440f1b67463e400fc7f5c422412bfcc4a3450abe8c0000002a0fd3be030000002e0f75d5c442658e3ef3470f5b213665660f71d7f82e664f0f3a16dcd7"}, 0x8, &(0x7f0000000500)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3000046, &(0x7f0000000400), 0x1, 0x55f, &(0x7f0000001000)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r8, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT=r2], 0x28f}) write$9p(r7, &(0x7f0000000180)="43a4a848cb753bec31fb387351badf1a78898026965af35813e5f44dca90ce3c72fdcc5d5dc50f5531b438451d7f22", 0x2f) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1m5.573882477s ago: executing program 9 (id=9645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f5ba25efd7ed9069d97264c8398e3aad9f25386b1e5768ab746c8f954eb3f02b12d1d836d91a60ee0e9391768ed3ee7221e328f361767fc08b31f75891f035af38fde6bfb23a3e1c88b6ffcdcafc1a018323757e31b53e05d186cce9d2bc7111e4df82218e108e4726e5d689d2c843b1deee6bfecc37e70194a55913ba8c3fda1678f48d90fb0df3f0f1ebd6535af2cfda7c0cb867dc1e874beeb8e8984679f502fae85fab7be605833757fddf7974c78b6793577dc37295bedcb8533c09aabc527ee8a6acf970d528bfedd869768a2a695daed3ed1562791b03f7896e594ba2a43aff91b1bac3f316ea6cd8a7464d1ee4f937fca6f4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000380)={0x1f, 0x1, 0x4}, 0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r0) 1m5.343284801s ago: executing program 9 (id=9647): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) setuid(0xee01) utimensat(r2, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x2, 0xfffffffd, 0x2}) 1m0.498855875s ago: executing program 9 (id=9662): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 59.950910173s ago: executing program 9 (id=9667): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001d40)={'gre0\x00', &(0x7f0000001c40)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x7, [{@broadcast, 0xc6}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xfffffff9}]}, @ssrr={0x89, 0xf, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xe1, [@local]}, @rr={0x7, 0x7, 0xdc, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x8, 0x90, 0x0, 0x6, [0x1]}, @ssrr={0x89, 0x13, 0x6c, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4, 0xff, 0x1, 0x4}]}}}}}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1e00000002000000ff03", @ANYRES32, @ANYBLOB="ff1700"/13, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00010000040001000224003edafdce5b64269288", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000000000695114b2dee410c6627f17308de78a1522ba41fb3fcdf4c9c1b479f6efb334b4ca9389eda0e252d38d019ae4942afd6bab599239159479bce078ddf12d9d46d05f6537d442c699305551e2697c129a20dd42455b7efbe00787c649f3a0952f243b4ceba0fef0e58571b5aad6066396390c514ba7e311f165bd48563d3e1de6b87a3252642080833a61b50e587abdd02972da7ce601583367d46eef2a078c1d90597d5e9ce8bf77ce547bb1a7a810"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) 59.621456638s ago: executing program 9 (id=9668): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000006c0)=""/201, &(0x7f0000000080)=0xc9) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) write$UHID_CREATE(r4, &(0x7f0000000580)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000009c0)=""/4096, 0x1000, 0x80, 0x7, 0x6, 0x1}}, 0x120) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r8, 0x9c3fa077fa966179, 0x70bd26, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4040805}, 0x4000054) sendmsg$NL80211_CMD_DEL_STATION(r1, 0x0, 0x4040058) recvfrom$inet6(r6, 0x0, 0x0, 0x10100, 0x0, 0x0) r9 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) getsockopt(r10, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0xfe) 45.07741084s ago: executing program 43 (id=9668): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000006c0)=""/201, &(0x7f0000000080)=0xc9) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b68090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) write$UHID_CREATE(r4, &(0x7f0000000580)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000009c0)=""/4096, 0x1000, 0x80, 0x7, 0x6, 0x1}}, 0x120) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r8, 0x9c3fa077fa966179, 0x70bd26, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4040805}, 0x4000054) sendmsg$NL80211_CMD_DEL_STATION(r1, 0x0, 0x4040058) recvfrom$inet6(r6, 0x0, 0x0, 0x10100, 0x0, 0x0) r9 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) getsockopt(r10, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0xfe) 8.284945653s ago: executing program 4 (id=9967): r0 = syz_usb_connect$hid(0x3, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004043552205000000000001090224000100001000090400000103000000092100000001220b000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220b000000083700000000932844256a"], 0x0}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @remote, @empty}, 0xc) 5.663970043s ago: executing program 3 (id=9987): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 5.356987278s ago: executing program 3 (id=9991): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) dup3(r1, r0, 0x300) 5.313075238s ago: executing program 3 (id=9992): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x200, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r10, r11, 0x2, 0x2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5.183596701s ago: executing program 3 (id=9994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r2) r3 = fcntl$dupfd(r0, 0x406, r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) r8 = dup(r5) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 5.159967131s ago: executing program 3 (id=9997): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000000)=ANY=[], 0x835, 0x2) 3.426841028s ago: executing program 4 (id=10004): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000000)=ANY=[], 0x835, 0x2) 2.774390428s ago: executing program 0 (id=10005): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000018f29ad0"], 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000180)='bpf_lsm_d_instantiate\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0xa) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x7, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x62, 0x20009, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0x4, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x8005, 0x7, 0x6, 0x2, 0x4, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x408, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x7ffffffe, 0x8, 0x3f92, 0xfff, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0xfffffffe, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0xfffffffd, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0x35, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.770800428s ago: executing program 3 (id=9997): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000000)=ANY=[], 0x835, 0x2) 2.666397669s ago: executing program 0 (id=10007): ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="8a33683825a234efb0ca6ea4f71dc9eb4c4475810a05fb3c8e") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e00290700000000000000000c00000000000000"], 0x24}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000008a04"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="fef8150760affeab0606916d9d588452cdd2039729ddf159d6d5c9ae776e02674add429daff08cb8986fac53c506dea3cba22a8325b616717f41af44f3c50e6e25a736a211f99ed29323532d5c927709eed87dfc52ab0c24bf50c86899c808b81b32c6ad6ab2787ba53a124727b602e65a12bcbf7cf33d60b5459866e38e445c2fad426cc784c2419f81cdfed6135cd785cecbbe99a18cdb6040eec51e8cfa9d3c", 0xa1}, {&(0x7f00000002c0)="62879d2cf02627695900eb3ddb82fd45e9555e17443b0203b8c1fc0c73a24c9e402dae801846b7e01b307cf1aea54b0c42ac9ea5e9180c16d3ac6bbe", 0x3c}], 0x2, &(0x7f00000004c0)=[@rights={{0x1c, 0x1, 0x1, [r8, r7, r8]}}], 0x20, 0x80}}], 0x1, 0x800) ioctl$sock_SIOCETHTOOL(r7, 0x8905, &(0x7f0000000100)={'vlan0\x00', 0x0}) r9 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 2.646899899s ago: executing program 1 (id=10008): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x2, 0x81, 0x1, 0xc5}, {0x401, 0xe, 0x5, 0x8}, {0xff0e, 0x9, 0x1, 0x4}]}) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f00000001c0)=[{0x2, 0x2, 0xcc, 0x22f5}, {0xffc, 0xff, 0x9, 0x881}, {0x2, 0x5, 0xe7, 0x1}]}, 0x10) wait4(0x0, 0x0, 0x40000000, 0x0) 2.59206502s ago: executing program 4 (id=10010): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x84}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.548423161s ago: executing program 8 (id=10011): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000075938060000000000000018ebc5113d80ca56d127a14f229868e373a566fda9554283c713f93f34a5dd9487133308711dfab83ed915e0ee22148bd25621f8bfcfd4c7b24672b5bd336c1e5f87c3b1d3cfa18a44de04f0f3e8a077d147be54d7a63d5ca36ae6af59a98262e2a43b505c00200000b5ab38bb5836f14bfe9481d9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040), 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2705ca3409e73b94, 0x2f, 0x1, 0x4, 0xc}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcb03dfc5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7548b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1368c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101000, 0x1e8) 2.547451241s ago: executing program 0 (id=10012): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x61, 0x25]}}, &(0x7f0000002200)=""/4110, 0x2a, 0x100e, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00!', 0x2}], 0x1, 0x0, 0x0) 2.505116631s ago: executing program 1 (id=10013): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) creat(0x0, 0x0) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='9p_protocol_dump\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x4000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.504814301s ago: executing program 1 (id=10014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0xfe, 0x0) 2.500553412s ago: executing program 1 (id=10015): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001d40)={'gre0\x00', &(0x7f0000001c40)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x7, 0x1, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100}}}}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1e00000002000000ff03", @ANYRES32, @ANYBLOB="ff1700"/13, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="00010000040001000224003edafdce5b64269288", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000000000695114b2dee410c6627f17308de78a1522ba41fb3fcdf4c9c1b479f6efb334b4ca9389eda0e252d38d019ae4942afd6bab599239159479bce078ddf12d9d46d05f6537d442c699305551e2697c129a20dd42455b7efbe00787c649f3a0952f243b4ceba0fef0e58571b5aad6066396390c514ba7e311f165bd48563d3e1de6b87a3252642080833a61b50e587abdd02972da7ce601583367d46eef2a078c1d90597d5e9ce8bf77ce547bb1a7a810"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) 1.99378055s ago: executing program 4 (id=10016): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000000)=ANY=[], 0x835, 0x2) 1.733722423s ago: executing program 8 (id=10017): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 1.656534205s ago: executing program 0 (id=10018): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000018f29ad0"], 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000180)='bpf_lsm_d_instantiate\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0xa) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.655401365s ago: executing program 8 (id=10019): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.629795015s ago: executing program 8 (id=10020): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000000000695114b2dee410c6627f17308de78a1522ba41fb3fcdf4c9c1b479f6efb334b4ca9389eda0e252d38d019ae4942afd6bab599239159479bce078ddf12d9d46d05f6537d442c699305551e2697c129a20dd42455b7efbe00787c649f3a0952f243b4ceba0fef0e58571b5aad6066396390c514ba7e311f165bd48563d3e1de6b87a3252642080833a61b50e587abdd02972da7ce601583367d46eef2a078c1d90597d5e9ce8bf77ce547bb1a7a810"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) 1.481117637s ago: executing program 0 (id=10021): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000000)=ANY=[], 0x835, 0x2) 1.192598402s ago: executing program 1 (id=10022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x80000000}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfff}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) times(0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000440)={0x300, 0x1, 0x800, 0x2ff1}) r9 = dup(r2) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x28000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 1.188810691s ago: executing program 4 (id=10023): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000d22e0000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) uname(&(0x7f0000000180)=""/224) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file2\x00', 0x800084, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRES16], 0x6, 0x2d7, &(0x7f0000000a40)="$eJzs3b1rJGUcB/DfbGZf1GK3sBLBAS2sjsu1NhvkDsRUHlucFhq8O5DsIlwg4ut6ldjZWPoXCIJ/iI2dpWAr2HnCwci8ZXdzk80q2YiXz6dInszzfGd+85Jkmvzy3ouzw7tZ3H/42a8xGCTRGfcjHiUxik40vowV428CAPg/e5Tn8UdeaZn+5es12cEW6wIAtuec3/+1tPx4p1jx4+XVBgBsx+07b7+5t79/860sG8St2VfHkyQiis/V/N79+CCmcS+uxzAeR5QvCt0o3xaK4a08z+dpVhjFK7P58aRIzt79qd7/3u8RZX43hjEqN528bZT5N/Zv7maVpfy8qOPZ+vjjIn8jhvH8SXglf6MlH5NevPryUv3XYhg/vx8fxjTulkUs8l/sZtnr+bd/fvpOUV6RT+bHk365biHfaQ4+v+R7BAAAAAAAAAAAAAAAAAAAAADA0+da3TunH2X/nmJT3X9n53HxRTeyxmi1P0+VT5odLfoDRSfP83ke3zX9da5nWZYnVRvBRT6NF9K6sSAAAAAAAAAAAAAAAAAAAABccUcff3J4MJ3ee3Ahg6YbQBoRf92O+Lf7GS9teSnWL+7XxzyYTjv1cHVNurwldpo1ScTaMoqTuKDLct7gmSdqrgff/9CaKs7oKI22qcH5B+22H+vswedtUx91q+vYmmqersODpP0a9k+KHxQ3Lk7fuF6019ONU1t6ZxXfPIqbnWmvdWr4j29l77lyMF+zJpJ13xev/VaVvXQW5aB5ynvlVW2Nd+vBUvzUs7HR8xyDKv7kz4pEtw4AAAAAAAAAAAAAAAAAANiqxV//tkw+XBvt5P2tlQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl2rx//83GaSr4Q1SvXhw9F+dGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFfH3wEAAP//f/xSgA==") writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000007f733ac6f06f6ac53ad341a3dc9d", 0x47}], 0x1) 981.123765ms ago: executing program 1 (id=10024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0bddcb836b219e3aa122e2351600c8a717d218"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000040)=ANY=[@ANYRES16=r2], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x6b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500002258"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r8, r10, 0x1, 0x0, @void}, 0x10) write(r7, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) setpgid(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) dup(r6) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 737.997409ms ago: executing program 8 (id=10025): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") listxattr(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000130000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r8, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000) (async) r9 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 634.57175ms ago: executing program 0 (id=10026): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001d40)={'gre0\x00', &(0x7f0000001c40)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x7, [{@broadcast, 0xc6}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xfffffff9}]}, @ssrr={0x89, 0xf, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xe1, [@local]}, @rr={0x7, 0x7, 0xdc, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x8, 0x90, 0x0, 0x6, [0x1]}, @ssrr={0x89, 0x13, 0x6c, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4, 0xff, 0x1, 0x4}]}}}}}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1862000000b112000000000000ffff0000181100f157796c20b7e928965b62833a3b83461c3a97a03b7bca6425149adef0c20d94d00ac14d183485ca89a907f1edffc1a4c35e67cbd7674d5bee46abff21bff8b9e7cb733dfbfb2a5abde6c9746404aebd1478bf5dabe30641c1c4995fad4ffaaed8f32bf150dfeb07ef33d54306beeee77636cdc85addf7645795349d4b61311e41cd39aba756dfe62b062279b281237a3d363cc1f210835379704110babfe2c5e3cd0734a0a4ba743ac98176b4c9d9406cddee33d0463a8b5bc6974c795ce5dbabb67ab5c6fe3975cbc8a48ac564656e244ee9060d204fc9b5c6adbec5cac924cb821f87741b5e9feec78e1ca34cece94e5087e890d729372a702807f6b251729a4c00518c62d43c5e193678162415dd0646778f92c039de9b44c6561dac6ce5dbd82209ba99895a3c55ff52337623222ee046aa2a9fad4a34c0edfbaefec0464d9da8f77656e1cb1ac4070b950fc100"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000000000695114b2dee410c6627f17308de78a1522ba41fb3fcdf4c9c1b479f6efb334b4ca9389eda0e252d38d019ae4942afd6bab599239159479bce078ddf12d9d46d05f6537d442c699305551e2697c129a20dd42455b7efbe00787c649f3a0952f243b4ceba0fef0e58571b5aad6066396390c514ba7e311f165bd48563d3e1de6b87a3252642080833a61b50e587abdd02972da7ce601583367d46eef2a078c1d90597d5e9ce8bf77ce547bb1a7a810"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) 1.246ms ago: executing program 8 (id=10027): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x669, 0x0, 0x0, 0x20000000000000}, 0x0, 0xfffffffd}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in6=@empty, 0x0, 0x4, 0x0, 0x0, 0x20, 0xfffffffd, 0x2}}, 0xe8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000d22e0000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) uname(&(0x7f0000000180)=""/224) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file2\x00', 0x800084, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRES16], 0x6, 0x2d7, &(0x7f0000000a40)="$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") r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x7e, 0x6, 0x10, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x40, 0x8000, 0x5, 0xffffffff}}) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000007f733ac6f06f6ac53ad341a3dc9d", 0x47}], 0x1) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) 0s ago: executing program 4 (id=10028): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001d40)={'gre0\x00', &(0x7f0000001c40)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x7, [{@broadcast, 0xc6}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xfffffff9}]}, @ssrr={0x89, 0xf, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xe1, [@local]}, @rr={0x7, 0x7, 0xdc, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x8, 0x90, 0x0, 0x6, [0x1]}, @ssrr={0x89, 0x13, 0x6c, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4, 0xff, 0x1, 0x4}]}}}}}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000c97aee32dc3fe1000000000000000000000000f40527592ab2f0c1005514ee43447f670ea664033d00b1e741a6789fda61a9d8cde744f56faeba0907154538ab68632334750a8d8aa94f71bef62edb2c827555735c3a1e445a8093254d1982bb3f21e0339aa856e788aab9bcdda40ab1823b53b3e2283b085b49f36470a5de0cd5647598a4a1fa911f7b15ec0dce2fe1ce2b34b0f3804756cca096da0c5743cae46522f4666f588e362ac9246c623887e83963759c24855424ca948b5361651ff1ae7eb93b1ec477bb6e8f1cb3df66b90671157c66393316e7994506b364679f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/370, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018550000060000000000000000000000950000000000000018000000ff7f00000000000000800000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) kernel console output (not intermixed with test programs): rrier=0x00000000000000. Quota mode: none. [ 1585.653291][T31085] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2755: inode #13: comm syz.3.9576: corrupted in-inode xattr [ 1585.666392][T31085] EXT4-fs (loop3): Remounting filesystem read-only [ 1586.042977][T31099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9580'. [ 1586.133656][T31104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9581'. [ 1586.487233][T31111] loop3: detected capacity change from 0 to 128 [ 1586.542237][T31111] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 1586.542237][T31111] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1586.542237][T31111] [ 1586.636312][T31111] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouser_xattr,,errors=continue. Quota mode: none. [ 1586.649801][T31111] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1587.830089][T31125] loop3: detected capacity change from 0 to 256 [ 1587.863154][T31125] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1588.710645][ T30] audit: type=1400 audit(2000000598.449:11645): avc: denied { connect } for pid=31127 comm="syz.1.9588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1588.731706][ T30] audit: type=1400 audit(2000000598.449:11646): avc: denied { ioctl } for pid=31127 comm="syz.1.9588" path="socket:[121440]" dev="sockfs" ino=121440 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1588.900701][T31143] loop3: detected capacity change from 0 to 512 [ 1589.117401][T31148] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9593'. [ 1589.317680][T31143] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1589.365345][T31143] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1590.073884][T31158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.086710][T31158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.101712][T31158] device bridge_slave_0 entered promiscuous mode [ 1590.125785][T31158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.144165][T31158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.159990][T31158] device bridge_slave_1 entered promiscuous mode [ 1590.463297][T31158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.470401][T31158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.477751][T31158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.484797][T31158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.517263][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1590.526272][T29958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.534175][T29958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.555039][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1590.568794][T29958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.575877][T29958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.585546][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1590.595275][T29958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.602353][T29958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.618571][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1590.628759][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1590.650433][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1590.665201][T31158] device veth0_vlan entered promiscuous mode [ 1590.672029][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1590.680500][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1590.691737][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1590.719166][T31158] device veth1_macvtap entered promiscuous mode [ 1590.731032][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1590.744019][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1590.763344][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1591.861463][T31183] loop8: detected capacity change from 0 to 128 [ 1592.056934][T31183] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1592.068153][T31183] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.591640][T19477] device bridge_slave_1 left promiscuous mode [ 1592.631311][T19477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.647640][T31194] loop3: detected capacity change from 0 to 512 [ 1592.648277][T19477] device bridge_slave_0 left promiscuous mode [ 1592.671389][T19477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.683201][ T30] audit: type=1400 audit(2000000602.459:11647): avc: denied { watch } for pid=31195 comm="syz.8.9604" path="/1/bus" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1592.706192][T19477] device veth1_macvtap left promiscuous mode [ 1592.718738][T19477] device veth0_vlan left promiscuous mode [ 1592.818060][T31198] loop8: detected capacity change from 0 to 1024 [ 1592.847957][T31194] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1592.994853][T31194] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1593.103119][T31198] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1593.238015][T31198] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,barrier=0x0000000000000008,barrier=0x0000000000000000,dioread_lock,data_err=ignore,resgid=0x0000000000000000,abort,grpquota,nodioread_nolock,user_xattr,delalloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1594.081233][T16498] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1594.441360][T16498] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.451540][T16498] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1594.460487][T16498] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1594.470526][T16498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.479147][T16498] usb 2-1: config 0 descriptor?? [ 1594.672546][T31200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.679722][T31200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.687581][T31200] device bridge_slave_0 entered promiscuous mode [ 1594.695567][T31200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.704492][T31200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.712353][T31200] device bridge_slave_1 entered promiscuous mode [ 1594.875324][ T30] audit: type=1400 audit(2000000604.629:11648): avc: denied { mount } for pid=31215 comm="syz.0.9612" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1595.092071][T31200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.099149][T31200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.106604][T31200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.113793][T31200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.139536][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1595.148062][T19671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.155783][T19671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.176252][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1595.184529][T19671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.191574][T19671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.199366][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1595.207977][T19671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.215269][T19671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.222731][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1595.230838][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1595.249056][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1595.262352][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1595.270504][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1595.278237][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1595.289525][T31200] device veth0_vlan entered promiscuous mode [ 1595.300384][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1595.310398][T31200] device veth1_macvtap entered promiscuous mode [ 1595.324060][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1595.335086][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1595.536706][ T30] audit: type=1400 audit(2000000605.309:11649): avc: denied { unmount } for pid=29383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1595.648578][T31249] loop8: detected capacity change from 0 to 512 [ 1595.663065][T19477] device bridge_slave_1 left promiscuous mode [ 1595.683090][T19477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.691905][T19477] device bridge_slave_0 left promiscuous mode [ 1595.698172][T19477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.707244][T19477] device veth1_macvtap left promiscuous mode [ 1595.713416][T19477] device veth0_vlan left promiscuous mode [ 1595.748327][T31249] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1595.770825][T31249] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1596.300588][T31258] loop3: detected capacity change from 0 to 1024 [ 1596.391739][T31258] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1596.417882][T31258] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 1596.451367][T31258] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2755: inode #13: comm syz.3.9621: corrupted in-inode xattr [ 1596.464227][T31258] EXT4-fs (loop3): Remounting filesystem read-only [ 1596.584986][T31271] FAULT_INJECTION: forcing a failure. [ 1596.584986][T31271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.598149][T31271] CPU: 1 PID: 31271 Comm: syz.8.9625 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1596.608260][T31271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1596.618419][T31271] Call Trace: [ 1596.621686][T31271] [ 1596.624603][T31271] __dump_stack+0x21/0x30 [ 1596.629107][T31271] dump_stack_lvl+0xee/0x150 [ 1596.633707][T31271] ? show_regs_print_info+0x20/0x20 [ 1596.638911][T31271] dump_stack+0x15/0x20 [ 1596.643056][T31271] should_fail+0x3c1/0x510 [ 1596.647476][T31271] should_fail_usercopy+0x1a/0x20 [ 1596.652493][T31271] _copy_to_user+0x20/0x90 [ 1596.657432][T31271] simple_read_from_buffer+0xe9/0x160 [ 1596.662797][T31271] proc_fail_nth_read+0x19a/0x210 [ 1596.667846][T31271] ? proc_fault_inject_write+0x2f0/0x2f0 [ 1596.673464][T31271] ? security_file_permission+0x83/0xa0 [ 1596.678994][T31271] ? proc_fault_inject_write+0x2f0/0x2f0 [ 1596.684607][T31271] vfs_read+0x282/0xbe0 [ 1596.688741][T31271] ? kernel_read+0x1f0/0x1f0 [ 1596.693307][T31271] ? __kasan_check_write+0x14/0x20 [ 1596.698408][T31271] ? mutex_lock+0x95/0x1a0 [ 1596.702820][T31271] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1596.709482][T31271] ? __fget_files+0x2c4/0x320 [ 1596.714157][T31271] ? __fdget_pos+0x2d2/0x380 [ 1596.718738][T31271] ? ksys_read+0x71/0x240 [ 1596.723053][T31271] ksys_read+0x140/0x240 [ 1596.727291][T31271] ? vfs_write+0xf70/0xf70 [ 1596.731693][T31271] ? __kasan_check_write+0x14/0x20 [ 1596.736798][T31271] ? switch_fpu_return+0x15d/0x2c0 [ 1596.741895][T31271] __x64_sys_read+0x7b/0x90 [ 1596.746397][T31271] x64_sys_call+0x96d/0x9a0 [ 1596.750886][T31271] do_syscall_64+0x4c/0xa0 [ 1596.755284][T31271] ? clear_bhb_loop+0x50/0xa0 [ 1596.760119][T31271] ? clear_bhb_loop+0x50/0xa0 [ 1596.764787][T31271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1596.770666][T31271] RIP: 0033:0x7f414481233c [ 1596.775071][T31271] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1596.794668][T31271] RSP: 002b:00007f4142e7c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1596.803074][T31271] RAX: ffffffffffffffda RBX: 00007f4144a3afa0 RCX: 00007f414481233c [ 1596.811027][T31271] RDX: 000000000000000f RSI: 00007f4142e7c0a0 RDI: 0000000000000008 [ 1596.819008][T31271] RBP: 00007f4142e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.826966][T31271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.831114][T16499] usb 2-1: USB disconnect, device number 60 [ 1596.834938][T31271] R13: 0000000000000000 R14: 00007f4144a3afa0 R15: 00007ffd5a92cf68 [ 1596.834960][T31271] [ 1596.867583][T31277] loop8: detected capacity change from 0 to 1024 [ 1596.880015][T31277] EXT4-fs (loop8): Ignoring removed orlov option [ 1596.887395][T31277] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 1596.902834][T31277] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1596.925192][T27250] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1597.171264][T27250] usb 1-1: Using ep0 maxpacket: 8 [ 1598.273096][T31296] loop9: detected capacity change from 0 to 256 [ 1598.363384][T31296] FAT-fs (loop9): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1599.632132][T31304] loop8: detected capacity change from 0 to 512 [ 1599.656604][T27250] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1599.669943][T27250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.679272][T27250] usb 1-1: Product: syz [ 1599.683940][T27250] usb 1-1: Manufacturer: syz [ 1599.688556][T27250] usb 1-1: SerialNumber: syz [ 1599.693846][T27250] usb 1-1: config 0 descriptor?? [ 1599.711317][T27250] usb 1-1: can't set config #0, error -71 [ 1599.733948][T27250] usb 1-1: USB disconnect, device number 66 [ 1599.747960][T31304] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1599.763943][T31304] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1600.498589][T31318] loop9: detected capacity change from 0 to 1024 [ 1600.617378][ T30] audit: type=1400 audit(2000000610.389:11650): avc: denied { ioctl } for pid=31307 comm="syz.0.9636" path="socket:[122373]" dev="sockfs" ino=122373 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1600.713604][T31318] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1600.941088][T31318] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodioread_nolock,barrier=0x0000000000000008,barrier=0x0000000000000000,dioread_lock,data_err=ignore,resgid=0x0000000000000000,abort,grpquota,nodioread_nolock,user_xattr,delalloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1601.219702][T16510] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1601.346033][T31342] loop9: detected capacity change from 0 to 512 [ 1601.377090][T31342] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 1601.407839][T31342] EXT4-fs (loop9): mounted filesystem without journal. Opts: commit=0x0000000000000005,inode_readahead_blks=0x0000000000000800,usrjquota=,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 1601.442201][T31342] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1601.509172][T31342] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9644'. [ 1601.581338][T16510] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.591951][T16510] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1601.601935][T16510] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1601.611273][T16510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.621942][T16510] usb 4-1: config 0 descriptor?? [ 1601.716998][T31346] device pim6reg1 entered promiscuous mode [ 1601.909019][ T30] audit: type=1400 audit(2000000611.679:11651): avc: denied { load_policy } for pid=31347 comm="syz.8.9646" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1601.929840][T31349] SELinux: failed to load policy [ 1601.937008][T31349] 8021q: VLANs not supported on wg1 [ 1602.141267][T16510] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1602.631310][T16510] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.633893][T31361] loop8: detected capacity change from 0 to 512 [ 1602.642543][T16510] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.660359][T16510] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1602.674010][T16510] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1602.683464][T16510] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.692403][T16510] usb 10-1: config 0 descriptor?? [ 1602.702964][T31361] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1602.719061][T31361] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.270190][T16510] plantronics 0003:047F:FFFF.0020: unknown main item tag 0xd [ 1603.278864][T16510] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 1603.289519][T16510] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1603.428044][T31378] netlink: 'syz.1.9653': attribute type 4 has an invalid length. [ 1604.012458][T16498] usb 4-1: USB disconnect, device number 36 [ 1604.092017][T31382] loop3: detected capacity change from 0 to 1024 [ 1604.144394][T16510] usb 10-1: USB disconnect, device number 4 [ 1604.192098][T31382] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1604.212475][T31389] loop8: detected capacity change from 0 to 512 [ 1604.248562][T31389] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1604.264947][T31389] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1604.348893][T31382] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,barrier=0x0000000000000008,barrier=0x0000000000000000,dioread_lock,data_err=ignore,resgid=0x0000000000000000,abort,grpquota,nodioread_nolock,user_xattr,delalloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1606.728338][T31415] loop8: detected capacity change from 0 to 1024 [ 1606.762330][T31415] EXT4-fs (loop8): Ignoring removed orlov option [ 1606.768783][T31415] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 1606.782940][T31415] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,init_itable,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1606.810907][ T30] audit: type=1400 audit(2000000616.579:11652): avc: denied { setattr } for pid=31414 comm="syz.8.9661" name="work" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1606.834264][ T30] audit: type=1400 audit(2000000616.579:11653): avc: denied { write } for pid=31414 comm="syz.8.9661" name="work" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1606.861314][ T30] audit: type=1400 audit(2000000616.589:11654): avc: denied { add_name } for pid=31414 comm="syz.8.9661" name="#185" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1606.881891][ T30] audit: type=1400 audit(2000000616.589:11655): avc: denied { remove_name } for pid=31414 comm="syz.8.9661" name="#185" dev="loop8" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1606.904416][ T30] audit: type=1400 audit(2000000616.589:11656): avc: denied { unlink } for pid=31414 comm="syz.8.9661" name="#185" dev="loop8" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1606.926892][ T30] audit: type=1400 audit(2000000616.599:11657): avc: denied { read } for pid=31414 comm="syz.8.9661" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1606.963461][ T30] audit: type=1400 audit(2000000616.739:11658): avc: denied { rmdir } for pid=31158 comm="syz-executor" name=".index" dev="overlay" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1606.963572][T31158] ------------[ cut here ]------------ [ 1606.991391][T31158] WARNING: CPU: 1 PID: 31158 at fs/overlayfs/util.c:473 ovl_dir_modified+0x189/0x1c0 [ 1607.001427][T31158] Modules linked in: [ 1607.005418][T31158] CPU: 0 PID: 31158 Comm: syz-executor Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1607.016414][T31158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1607.027619][T31158] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 1607.033648][T31158] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3e 0e a9 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 97 6a ff <0f> 0b e9 17 ff ff ff e8 ab 97 6a ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 1607.053627][T31158] RSP: 0018:ffffc90000d9fba0 EFLAGS: 00010293 [ 1607.059774][T31158] RAX: ffffffff81fe1029 RBX: 1ffff110261f9e4a RCX: ffff88811042cf00 [ 1607.067876][T31158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1607.076033][T31158] RBP: ffffc90000d9fbd0 R08: dffffc0000000000 R09: ffffed102619198a [ 1607.084084][T31158] R10: ffffed102619198a R11: 1ffff11026191989 R12: ffff888130fcf220 [ 1607.092071][T31158] R13: 0000000000000000 R14: ffff888130c8cba8 R15: ffff888130fcf250 [ 1607.100075][T31158] FS: 00005555919b5500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1607.109049][T31158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1607.115687][T31158] CR2: 00007fd1a556d28c CR3: 000000011af5f000 CR4: 00000000003506b0 [ 1607.123699][T31158] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1607.131742][T31158] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1607.139722][T31158] Call Trace: [ 1607.143065][T31158] [ 1607.146002][T31158] ovl_do_remove+0x711/0xa10 [ 1607.150600][T31158] ? ovl_set_redirect+0x670/0x670 [ 1607.155715][T31158] ? selinux_inode_rmdir+0x22/0x30 [ 1607.160825][T31158] ovl_rmdir+0x1a/0x20 [ 1607.167297][T31423] loop3: detected capacity change from 0 to 256 [ 1607.173626][T31158] vfs_rmdir+0x313/0x460 [ 1607.177930][T31158] incfs_kill_sb+0x105/0x220 [ 1607.182560][T31158] deactivate_locked_super+0xa0/0x100 [ 1607.187935][T31158] deactivate_super+0xaf/0xe0 [ 1607.198799][T31158] cleanup_mnt+0x446/0x500 [ 1607.203365][T31158] __cleanup_mnt+0x19/0x20 [ 1607.207876][T31158] task_work_run+0x127/0x190 [ 1607.227068][T31158] exit_to_user_mode_loop+0xd0/0xe0 [ 1607.233120][T31423] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1607.244535][T31158] exit_to_user_mode_prepare+0x5a/0xa0 [ 1607.246840][T31425] loop9: detected capacity change from 0 to 512 [ 1607.250018][T31158] syscall_exit_to_user_mode+0x1a/0x30 [ 1607.250045][T31158] do_syscall_64+0x58/0xa0 [ 1607.266749][T31158] ? clear_bhb_loop+0x50/0xa0 [ 1607.271567][T31158] ? clear_bhb_loop+0x50/0xa0 [ 1607.276872][T31158] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1607.282855][T31158] RIP: 0033:0x7f4144814c57 [ 1607.287307][T31158] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1607.307100][T31158] RSP: 002b:00007ffd5a92b108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1607.319240][T31158] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4144814c57 [ 1607.327512][T31158] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5a92b1c0 [ 1607.336277][T31158] RBP: 00007ffd5a92b1c0 R08: 0000000000000000 R09: 0000000000000000 [ 1607.345934][T31425] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1607.361993][T31425] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1607.384771][T31158] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5a92c2b0 [ 1607.400936][T31158] R13: 00007f4144895925 R14: 00000000001884a5 R15: 00007ffd5a92d380 [ 1607.413550][T31158] [ 1607.419328][T31158] ---[ end trace 0dd605703a85a195 ]--- [ 1607.429673][T31158] ------------[ cut here ]------------ [ 1607.442301][T31158] WARNING: CPU: 0 PID: 31158 at fs/overlayfs/util.c:473 ovl_dir_modified+0x189/0x1c0 [ 1607.452716][T31158] Modules linked in: [ 1607.457846][T31158] CPU: 0 PID: 31158 Comm: syz-executor Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1607.469987][T31158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1607.495642][T31200] EXT4-fs error (device loop9): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /13/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1607.516634][T31158] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 1607.522537][T31158] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3e 0e a9 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 97 6a ff <0f> 0b e9 17 ff ff ff e8 ab 97 6a ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 1607.579712][ T30] audit: type=1400 audit(2000000617.349:11659): avc: denied { execmem } for pid=31429 comm="syz.1.9669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1607.624457][T31158] RSP: 0018:ffffc90000d9fba0 EFLAGS: 00010293 [ 1607.654244][T31158] RAX: ffffffff81fe1029 RBX: 1ffff110261f9e4a RCX: ffff88811042cf00 [ 1607.663398][T31158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1607.671702][T31158] RBP: ffffc90000d9fbd0 R08: dffffc0000000000 R09: ffffed102619198a [ 1607.679786][T31158] R10: ffffed102619198a R11: 1ffff11026191989 R12: ffff888130fcf220 [ 1607.687824][T31158] R13: 0000000000000000 R14: ffff888130c8cba8 R15: ffff888130fcf250 [ 1607.695866][T31158] FS: 00005555919b5500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1607.704857][T31158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1607.711498][T31158] CR2: 00007f73720c4f98 CR3: 000000011af5f000 CR4: 00000000003506a0 [ 1607.719651][T31158] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1607.728640][T31158] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1607.737326][T31158] Call Trace: [ 1607.740633][T31158] [ 1607.744296][T31158] ovl_do_remove+0x711/0xa10 [ 1607.748940][T31158] ? ovl_set_redirect+0x670/0x670 [ 1607.775199][T31158] ? selinux_inode_rmdir+0x22/0x30 [ 1607.792062][T31158] ovl_rmdir+0x1a/0x20 [ 1607.805185][T31158] vfs_rmdir+0x313/0x460 [ 1607.818312][T31158] incfs_kill_sb+0x198/0x220 [ 1608.007385][T31158] deactivate_locked_super+0xa0/0x100 [ 1608.025743][T31158] deactivate_super+0xaf/0xe0 [ 1608.030463][T31158] cleanup_mnt+0x446/0x500 [ 1608.061237][T31158] __cleanup_mnt+0x19/0x20 [ 1608.071362][T31158] task_work_run+0x127/0x190 [ 1608.086153][T31158] exit_to_user_mode_loop+0xd0/0xe0 [ 1608.106332][T31158] exit_to_user_mode_prepare+0x5a/0xa0 [ 1608.121194][T31158] syscall_exit_to_user_mode+0x1a/0x30 [ 1608.141223][T31158] do_syscall_64+0x58/0xa0 [ 1608.157062][T31158] ? clear_bhb_loop+0x50/0xa0 [ 1608.171191][T31158] ? clear_bhb_loop+0x50/0xa0 [ 1608.175921][T31158] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1608.201194][T31158] RIP: 0033:0x7f4144814c57 [ 1608.219935][T31158] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1608.280309][T31158] RSP: 002b:00007ffd5a92b108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1608.330842][T31158] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4144814c57 [ 1608.349269][T31158] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5a92b1c0 [ 1608.387671][T31158] RBP: 00007ffd5a92b1c0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.417949][T31158] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5a92c2b0 [ 1608.448272][T31158] R13: 00007f4144895925 R14: 00000000001884a5 R15: 00007ffd5a92d380 [ 1608.477672][T31158] [ 1608.480731][T31158] ---[ end trace 0dd605703a85a196 ]--- [ 1608.639692][T31444] device pim6reg1 entered promiscuous mode [ 1608.977171][T31447] loop8: detected capacity change from 0 to 1024 [ 1609.073585][T31447] EXT4-fs (loop8): Ignoring removed orlov option [ 1609.085196][T31447] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 1609.174274][T31447] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1610.649457][T31462] loop3: detected capacity change from 0 to 256 [ 1610.701732][T31462] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1611.302797][T31478] loop3: detected capacity change from 0 to 512 [ 1611.752929][T31484] loop8: detected capacity change from 0 to 1024 [ 1611.795327][T31484] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1611.821688][T31484] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 1612.100540][T31489] xt_bpf: check failed: parse error [ 1612.393043][T31499] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9683'. [ 1612.445444][ T30] audit: type=1400 audit(2000000622.219:11660): avc: denied { read write } for pid=31500 comm="syz.3.9687" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1612.471727][ T30] audit: type=1400 audit(2000000622.249:11661): avc: denied { open } for pid=31500 comm="syz.3.9687" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1612.496404][ T30] audit: type=1400 audit(2000000622.249:11662): avc: denied { ioctl } for pid=31500 comm="syz.3.9687" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1612.631839][ T30] audit: type=1400 audit(2000000622.409:11663): avc: denied { create } for pid=31494 comm="syz.0.9684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1612.660133][T31507] device vlan2 entered promiscuous mode [ 1612.688591][T31507] device syz_tun entered promiscuous mode [ 1612.731204][T16499] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1612.971209][T16499] usb 4-1: Using ep0 maxpacket: 8 [ 1613.091297][T16499] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.111010][T16499] usb 4-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1613.151118][T16499] usb 4-1: config 2 interface 0 has no altsetting 0 [ 1613.352039][T16499] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 1613.361113][T16499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.380127][T16499] usb 4-1: Product: syz [ 1613.386427][T16499] usb 4-1: Manufacturer: syz [ 1613.391099][T16499] usb 4-1: SerialNumber: syz [ 1613.685010][T16499] usb 4-1: USB disconnect, device number 37 [ 1613.871208][T16509] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1614.390811][T31530] loop3: detected capacity change from 0 to 40427 [ 1614.401406][T16509] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1614.420376][T31530] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1614.481243][T31530] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1614.522774][ T30] audit: type=1400 audit(2000000624.299:11664): avc: denied { create } for pid=31529 comm="syz.3.9695" name="#187" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1614.523815][T31530] overlayfs: failed to resolve './file0': -2 [ 1614.558734][ T30] audit: type=1400 audit(2000000624.299:11665): avc: denied { rename } for pid=31529 comm="syz.3.9695" name="#187" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1614.571809][T31530] overlayfs: failed to resolve './file0': -2 [ 1614.581125][T16509] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1614.594690][T16509] usb 9-1: can't read configurations, error -71 [ 1614.601686][ T30] audit: type=1400 audit(2000000624.299:11666): avc: denied { unlink } for pid=31529 comm="syz.3.9695" name="#188" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1614.659771][T31003] attempt to access beyond end of device [ 1614.659771][T31003] loop3: rw=2049, want=45112, limit=40427 [ 1614.817701][T31544] bridge: RTM_NEWNEIGH with invalid ether address [ 1614.914449][T31549] loop8: detected capacity change from 0 to 512 [ 1615.085096][T31549] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1615.111411][T31549] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1615.519737][T31569] loop3: detected capacity change from 0 to 512 [ 1615.553342][T31569] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1615.592073][T31569] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,inode_readahead_blks=0x0000000000000800,usrjquota=,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 1615.631506][T31569] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1615.666120][T31569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9706'. [ 1615.776971][T31574] loop3: detected capacity change from 0 to 1024 [ 1615.832236][T31574] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1615.854556][T31576] loop8: detected capacity change from 0 to 256 [ 1615.869718][T31574] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,barrier=0x0000000000000008,barrier=0x0000000000000000,dioread_lock,data_err=ignore,resgid=0x0000000000000000,abort,grpquota,nodioread_nolock,user_xattr,delalloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1616.304877][ T30] audit: type=1326 audit(2000000626.113:11667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31586 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1616.332115][ T30] audit: type=1326 audit(2000000626.113:11668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31586 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1616.362281][ T30] audit: type=1326 audit(2000000626.134:11669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31586 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1617.091371][T31598] loop8: detected capacity change from 0 to 1024 [ 1617.116533][T31598] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1617.140647][T31598] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 1617.239110][T31609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9717'. [ 1617.981181][T16509] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1618.054937][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1618.054952][ T30] audit: type=1326 audit(2000000627.980:11672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31623 comm="syz.0.9722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1618.084935][ T30] audit: type=1326 audit(2000000627.980:11673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31623 comm="syz.0.9722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1618.125966][ T30] audit: type=1326 audit(2000000627.980:11674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31623 comm="syz.0.9722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1618.156115][ T30] audit: type=1326 audit(2000000628.023:11675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31623 comm="syz.0.9722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1618.643006][T16509] usb 4-1: not running at top speed; connect to a high speed hub [ 1618.736478][T16509] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1618.747978][T16509] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1618.770109][T16509] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1618.789726][T16509] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1618.793401][T31635] loop8: detected capacity change from 0 to 1024 [ 1618.870952][T31635] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1618.894054][T31635] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 1618.999295][T16509] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1619.009173][T16509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.019955][T16509] usb 4-1: Product: syz [ 1619.024174][T16509] usb 4-1: Manufacturer: syz [ 1619.029046][T16509] usb 4-1: SerialNumber: syz [ 1619.071152][T31616] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1619.532822][T31645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9719'. [ 1619.563955][T31647] loop8: detected capacity change from 0 to 8192 [ 1621.638564][T16509] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1621.645446][T16509] cdc_ncm 4-1:1.0: bind() failure [ 1621.646560][T16509] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1621.646581][T16509] cdc_ncm 4-1:1.1: bind() failure [ 1621.647800][T16509] usb 4-1: USB disconnect, device number 38 [ 1622.072455][T16499] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1622.177929][ T30] audit: type=1400 audit(2000000632.411:11676): avc: denied { module_request } for pid=31681 comm="syz-executor" kmod="netdev-nr4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1622.267833][T31681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.275306][T31681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.283073][T31681] device bridge_slave_0 entered promiscuous mode [ 1622.293072][T31681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.300428][T31681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.308380][T16499] usb 9-1: Using ep0 maxpacket: 16 [ 1622.357687][T31681] device bridge_slave_1 entered promiscuous mode [ 1622.522907][T31681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.530012][T31681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.537329][T31681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.544388][T31681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.567639][T16499] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1622.577139][T16499] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.585139][T16499] usb 9-1: Product: syz [ 1622.596655][T16499] usb 9-1: Manufacturer: syz [ 1622.601290][T16499] usb 9-1: SerialNumber: syz [ 1622.611568][T16499] r8152-cfgselector 9-1: config 0 descriptor?? [ 1622.619865][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1622.627785][T29958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.635836][T29958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.652123][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1622.661091][T29958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.668130][T29958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.676393][T31693] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1622.691765][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1622.700175][T29958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.707241][T29958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.717444][T31693] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1622.732487][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1622.741812][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1622.758507][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1622.767079][T31694] loop3: detected capacity change from 0 to 256 [ 1622.775060][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1622.783957][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1622.791755][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1622.800440][T31681] device veth0_vlan entered promiscuous mode [ 1622.816262][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1622.826620][T31681] device veth1_macvtap entered promiscuous mode [ 1622.839873][T31694] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1622.855905][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1622.868582][T29958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1622.882789][T19671] device bridge_slave_1 left promiscuous mode [ 1622.897986][T19671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.908186][T19671] device bridge_slave_0 left promiscuous mode [ 1622.921195][T19671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.929665][T19671] device veth1_macvtap left promiscuous mode [ 1622.936195][T19671] device veth0_vlan left promiscuous mode [ 1623.131466][T31693] overlayfs: statfs failed on './file0' [ 1623.131466][T31688] overlayfs: statfs failed on './file0' [ 1623.619645][T31715] loop3: detected capacity change from 0 to 256 [ 1623.661879][T31715] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1624.242091][T16499] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1624.253910][ T30] audit: type=1326 audit(2000000634.632:11677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.1.9747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1624.290510][T16499] r8152-cfgselector 9-1: bad CDC descriptors [ 1624.326092][ T30] audit: type=1326 audit(2000000634.632:11678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.1.9747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1624.350218][ T30] audit: type=1326 audit(2000000634.632:11679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.1.9747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1624.373979][ T30] audit: type=1326 audit(2000000634.664:11680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31722 comm="syz.8.9748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1624.397807][ T30] audit: type=1326 audit(2000000634.664:11681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31722 comm="syz.8.9748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1624.422181][T16499] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1624.445888][T16499] r8152-cfgselector 9-1: USB disconnect, device number 5 [ 1624.456804][ T30] audit: type=1326 audit(2000000634.664:11682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31722 comm="syz.8.9748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1624.481423][ T30] audit: type=1326 audit(2000000634.664:11683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31722 comm="syz.8.9748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1624.505178][ T30] audit: type=1326 audit(2000000634.664:11684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31722 comm="syz.8.9748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1624.505454][T31730] FAULT_INJECTION: forcing a failure. [ 1624.505454][T31730] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.531545][T31723] FAULT_INJECTION: forcing a failure. [ 1624.531545][T31723] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.565971][T31730] CPU: 0 PID: 31730 Comm: syz.8.9751 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1624.577390][T31730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1624.587451][T31730] Call Trace: [ 1624.590730][T31730] [ 1624.593756][T31730] __dump_stack+0x21/0x30 [ 1624.598174][T31730] dump_stack_lvl+0xee/0x150 [ 1624.602934][T31730] ? show_regs_print_info+0x20/0x20 [ 1624.608136][T31730] dump_stack+0x15/0x20 [ 1624.612304][T31730] should_fail+0x3c1/0x510 [ 1624.616730][T31730] __should_failslab+0xa4/0xe0 [ 1624.621500][T31730] should_failslab+0x9/0x20 [ 1624.621584][ T30] audit: type=1326 audit(2000000634.664:11685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.1.9747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1624.626016][T31730] slab_pre_alloc_hook+0x3b/0xe0 [ 1624.626039][T31730] ? kvm_mmu_topup_memory_cache+0xe4/0x220 [ 1624.660448][T31730] kmem_cache_alloc+0x44/0x260 [ 1624.665234][T31730] kvm_mmu_topup_memory_cache+0xe4/0x220 [ 1624.670876][T31730] kvm_mmu_load+0x88/0x1fd0 [ 1624.675371][T31730] ? __kasan_check_write+0x14/0x20 [ 1624.680481][T31730] ? kvm_apic_accept_events+0x53a/0x550 [ 1624.686010][T31730] ? kvm_apic_has_interrupt+0x78f/0x7a0 [ 1624.691540][T31730] ? kvm_lapic_enable_pv_eoi+0x150/0x150 [ 1624.697154][T31730] vcpu_enter_guest+0x4fcb/0x6780 [ 1624.702162][T31730] ? local_bh_enable+0x30/0x30 [ 1624.706908][T31730] ? avc_has_perm+0x158/0x240 [ 1624.711572][T31730] ? 0xffffffffa0002000 [ 1624.715706][T31730] ? is_bpf_text_address+0x177/0x190 [ 1624.720978][T31730] ? __kernel_text_address+0xa0/0x100 [ 1624.726333][T31730] ? unwind_get_return_address+0x4d/0x90 [ 1624.731948][T31730] ? stack_trace_save+0xe0/0xe0 [ 1624.736784][T31730] ? arch_stack_walk+0xee/0x140 [ 1624.741621][T31730] ? stack_trace_save+0x98/0xe0 [ 1624.746460][T31730] ? __stack_depot_save+0x34/0x480 [ 1624.751555][T31730] ? __kasan_check_read+0x11/0x20 [ 1624.756565][T31730] ? vmx_vcpu_pi_load+0xab/0x390 [ 1624.761489][T31730] ? do_vfs_ioctl+0xc1a/0x1d00 [ 1624.766327][T31730] ? __kasan_check_write+0x14/0x20 [ 1624.771424][T31730] ? kvm_arch_vcpu_load+0x55a/0x740 [ 1624.776651][T31730] ? __local_bh_enable_ip+0x58/0x80 [ 1624.781836][T31730] ? local_bh_enable+0x1f/0x30 [ 1624.786600][T31730] ? kvm_load_guest_fpu+0x12a/0x240 [ 1624.791781][T31730] kvm_arch_vcpu_ioctl_run+0xfab/0x2010 [ 1624.797317][T31730] kvm_vcpu_ioctl+0x882/0xb80 [ 1624.802111][T31730] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 1624.807737][T31730] ? selinux_file_ioctl+0x377/0x480 [ 1624.812931][T31730] ? selinux_file_alloc_security+0x120/0x120 [ 1624.818897][T31730] ? mutex_unlock+0x89/0x220 [ 1624.823473][T31730] ? __mutex_lock_slowpath+0x10/0x10 [ 1624.828740][T31730] ? __fget_files+0x2c4/0x320 [ 1624.833490][T31730] ? security_file_ioctl+0x84/0xa0 [ 1624.838586][T31730] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 1624.844202][T31730] __se_sys_ioctl+0x121/0x1a0 [ 1624.848865][T31730] __x64_sys_ioctl+0x7b/0x90 [ 1624.853437][T31730] x64_sys_call+0x2f/0x9a0 [ 1624.857835][T31730] do_syscall_64+0x4c/0xa0 [ 1624.862232][T31730] ? clear_bhb_loop+0x50/0xa0 [ 1624.866892][T31730] ? clear_bhb_loop+0x50/0xa0 [ 1624.871601][T31730] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1624.877479][T31730] RIP: 0033:0x7f4144813929 [ 1624.881877][T31730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.901468][T31730] RSP: 002b:00007f4142e7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.909866][T31730] RAX: ffffffffffffffda RBX: 00007f4144a3afa0 RCX: 00007f4144813929 [ 1624.917824][T31730] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1624.925780][T31730] RBP: 00007f4142e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.933746][T31730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.941794][T31730] R13: 0000000000000000 R14: 00007f4144a3afa0 R15: 00007ffd5a92cf68 [ 1624.949754][T31730] [ 1624.954209][T31723] CPU: 1 PID: 31723 Comm: syz.1.9747 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1624.964890][ T30] audit: type=1326 audit(2000000634.664:11686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31721 comm="syz.1.9747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1624.965595][T31723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1624.999214][T31723] Call Trace: [ 1625.002482][T31723] [ 1625.005399][T31723] __dump_stack+0x21/0x30 [ 1625.009713][T31723] dump_stack_lvl+0xee/0x150 [ 1625.014286][T31723] ? show_regs_print_info+0x20/0x20 [ 1625.019466][T31723] dump_stack+0x15/0x20 [ 1625.023603][T31723] should_fail+0x3c1/0x510 [ 1625.028003][T31723] __should_failslab+0xa4/0xe0 [ 1625.032763][T31723] should_failslab+0x9/0x20 [ 1625.037338][T31723] slab_pre_alloc_hook+0x3b/0xe0 [ 1625.042260][T31723] ? audit_log_start+0x3a4/0x8b0 [ 1625.047178][T31723] kmem_cache_alloc+0x44/0x260 [ 1625.052012][T31723] audit_log_start+0x3a4/0x8b0 [ 1625.056757][T31723] ? audit_serial+0x30/0x30 [ 1625.061259][T31723] ? migrate_enable+0x192/0x260 [ 1625.066092][T31723] ? migrate_disable+0x180/0x180 [ 1625.071012][T31723] audit_seccomp+0x62/0x160 [ 1625.075500][T31723] ? migrate_disable+0xd6/0x180 [ 1625.080334][T31723] __seccomp_filter+0xb06/0x1900 [ 1625.085253][T31723] ? file_end_write+0x1b0/0x1b0 [ 1625.090085][T31723] ? __secure_computing+0x290/0x290 [ 1625.096254][T31723] ? __kasan_check_write+0x14/0x20 [ 1625.101699][T31723] ? mutex_unlock+0x89/0x220 [ 1625.106279][T31723] ? __mutex_lock_slowpath+0x10/0x10 [ 1625.111548][T31723] ? fput+0x1a/0x20 [ 1625.116519][T31723] ? ksys_write+0x1eb/0x240 [ 1625.121012][T31723] ? __ia32_sys_read+0x90/0x90 [ 1625.125796][T31723] __secure_computing+0xea/0x290 [ 1625.130980][T31723] syscall_trace_enter+0xcf/0x180 [ 1625.135990][T31723] syscall_enter_from_user_mode+0x1f/0x30 [ 1625.141695][T31723] do_syscall_64+0x24/0xa0 [ 1625.146094][T31723] ? clear_bhb_loop+0x50/0xa0 [ 1625.150753][T31723] ? clear_bhb_loop+0x50/0xa0 [ 1625.155501][T31723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1625.161551][T31723] RIP: 0033:0x7f7373a7d929 [ 1625.165952][T31723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1625.185562][T31723] RSP: 002b:00007f73720e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1625.193960][T31723] RAX: ffffffffffffffda RBX: 00007f7373ca4fa0 RCX: 00007f7373a7d929 [ 1625.201914][T31723] RDX: 0000200000001100 RSI: 0000200000000000 RDI: 0000000000000005 [ 1625.209867][T31723] RBP: 00007f73720e6090 R08: 0000000000000001 R09: 0000000000000000 [ 1625.217825][T31723] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 1625.225782][T31723] R13: 0000000000000000 R14: 00007f7373ca4fa0 R15: 00007fff4a2866a8 [ 1625.233741][T31723] [ 1625.358803][T31745] netlink: 'syz.0.9749': attribute type 4 has an invalid length. [ 1626.508237][T31738] loop4: detected capacity change from 0 to 40427 [ 1626.532605][T31738] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1626.555465][T31738] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1628.720302][T31771] loop4: detected capacity change from 0 to 256 [ 1629.223827][T31771] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1629.771658][T16509] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1629.797901][T31780] SELinux: policydb version 1358518777 does not match my version range 15-33 [ 1629.806933][T31780] SELinux: failed to load policy [ 1630.550857][T31804] loop3: detected capacity change from 0 to 1024 [ 1630.564907][T31796] netlink: 'syz.1.9770': attribute type 4 has an invalid length. [ 1630.589282][T31804] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1630.920416][T31804] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,barrier=0x0000000000000008,barrier=0x0000000000000000,dioread_lock,data_err=ignore,resgid=0x0000000000000000,abort,grpquota,nodioread_nolock,user_xattr,delalloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1630.998166][T31817] 9pnet: Insufficient options for proto=fd [ 1631.053323][T31817] syz.8.9777[31817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1631.053402][T31817] syz.8.9777[31817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1631.066918][T31817] syz.8.9777[31817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1631.078740][T31817] syz.8.9777[31817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1631.163046][T31822] loop4: detected capacity change from 0 to 256 [ 1631.214055][T31823] loop8: detected capacity change from 0 to 1024 [ 1631.235324][T31822] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1631.246196][T31823] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1631.292112][T31823] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 1631.359237][T31822] netlink: 'syz.4.9776': attribute type 4 has an invalid length. [ 1632.581240][T31829] loop3: detected capacity change from 0 to 40427 [ 1632.714354][T31829] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1632.977399][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1632.977419][ T30] audit: type=1326 audit(2000000643.955:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31843 comm="syz.8.9784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1633.015266][T31829] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1633.041474][T31829] overlayfs: failed to resolve './file0': -2 [ 1633.059793][T31829] overlayfs: failed to resolve './file0': -2 [ 1633.066758][ T30] audit: type=1326 audit(2000000643.955:11715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31843 comm="syz.8.9784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1633.111490][ T30] audit: type=1326 audit(2000000643.955:11716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31843 comm="syz.8.9784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1633.118186][T31003] attempt to access beyond end of device [ 1633.118186][T31003] loop3: rw=2049, want=45112, limit=40427 [ 1633.135871][T31850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31850 comm=syz.1.9786 [ 1633.184816][ T30] audit: type=1326 audit(2000000643.955:11717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31843 comm="syz.8.9784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1633.217023][T31850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31850 comm=syz.1.9786 [ 1633.249663][ T30] audit: type=1326 audit(2000000643.955:11718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31843 comm="syz.8.9784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1633.299196][ T30] audit: type=1326 audit(2000000643.955:11719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31843 comm="syz.8.9784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1633.350575][ T30] audit: type=1326 audit(2000000643.955:11720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31843 comm="syz.8.9784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1633.494024][ T30] audit: type=1326 audit(2000000643.955:11721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31843 comm="syz.8.9784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1633.537072][T31855] 9pnet: Insufficient options for proto=fd [ 1633.544481][ T30] audit: type=1326 audit(2000000643.955:11722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31843 comm="syz.8.9784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1633.568358][ T30] audit: type=1326 audit(2000000643.955:11723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31843 comm="syz.8.9784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1633.592996][T31858] syz.4.9789[31858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1633.593525][T31858] syz.4.9789[31858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1633.607740][T31855] syz.4.9789[31855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1633.619846][T31855] syz.4.9789[31855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1634.266931][T31864] loop3: detected capacity change from 0 to 1024 [ 1634.321003][T31864] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1634.379623][T31864] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 1634.533151][T31881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9794'. [ 1634.598252][T31882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9794'. [ 1634.832258][T31889] loop4: detected capacity change from 0 to 256 [ 1634.898398][T31889] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1635.002714][T31889] netlink: 'syz.4.9795': attribute type 4 has an invalid length. [ 1635.881749][T31923] FAULT_INJECTION: forcing a failure. [ 1635.881749][T31923] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.902351][T31928] loop8: detected capacity change from 0 to 512 [ 1635.931034][T31923] CPU: 0 PID: 31923 Comm: syz.0.9805 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1635.942442][T31923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1635.952501][T31923] Call Trace: [ 1635.955790][T31923] [ 1635.958732][T31923] __dump_stack+0x21/0x30 [ 1635.963068][T31923] dump_stack_lvl+0xee/0x150 [ 1635.967661][T31923] ? show_regs_print_info+0x20/0x20 [ 1635.972860][T31923] dump_stack+0x15/0x20 [ 1635.977028][T31923] should_fail+0x3c1/0x510 [ 1635.981598][T31923] __should_failslab+0xa4/0xe0 [ 1635.986379][T31923] should_failslab+0x9/0x20 [ 1635.990891][T31923] slab_pre_alloc_hook+0x3b/0xe0 [ 1635.995843][T31923] ? security_file_alloc+0x33/0x120 [ 1636.001206][T31923] kmem_cache_alloc+0x44/0x260 [ 1636.005985][T31923] security_file_alloc+0x33/0x120 [ 1636.011021][T31923] __alloc_file+0xb5/0x2a0 [ 1636.015474][T31923] alloc_empty_file+0x97/0x180 [ 1636.020247][T31923] path_openat+0xf3/0x2f10 [ 1636.024679][T31923] ? __stack_depot_save+0x34/0x480 [ 1636.029801][T31923] ? __kasan_slab_alloc+0xcf/0xf0 [ 1636.034830][T31923] ? __kasan_slab_alloc+0xbd/0xf0 [ 1636.039860][T31923] ? slab_post_alloc_hook+0x4f/0x2b0 [ 1636.045151][T31923] ? kmem_cache_alloc+0xf7/0x260 [ 1636.050102][T31923] ? getname_flags+0xb9/0x500 [ 1636.054782][T31923] ? getname+0x19/0x20 [ 1636.058935][T31923] ? do_sys_openat2+0xd9/0x7b0 [ 1636.063697][T31923] ? __x64_sys_creat+0x8e/0xb0 [ 1636.068465][T31923] ? x64_sys_call+0x94a/0x9a0 [ 1636.073143][T31923] ? do_syscall_64+0x4c/0xa0 [ 1636.077727][T31923] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1636.083789][T31923] ? do_filp_open+0x3e0/0x3e0 [ 1636.088470][T31923] do_filp_open+0x1b3/0x3e0 [ 1636.092961][T31923] ? vfs_tmpfile+0x2d0/0x2d0 [ 1636.097544][T31923] do_sys_openat2+0x14c/0x7b0 [ 1636.102211][T31923] ? do_sys_open+0xe0/0xe0 [ 1636.106623][T31923] ? bpf_trace_run1+0x1b0/0x1b0 [ 1636.111472][T31923] ? ksys_write+0x1eb/0x240 [ 1636.115979][T31923] ? __ia32_sys_read+0x90/0x90 [ 1636.120733][T31923] __x64_sys_creat+0x8e/0xb0 [ 1636.125310][T31923] x64_sys_call+0x94a/0x9a0 [ 1636.129800][T31923] do_syscall_64+0x4c/0xa0 [ 1636.134202][T31923] ? clear_bhb_loop+0x50/0xa0 [ 1636.138864][T31923] ? clear_bhb_loop+0x50/0xa0 [ 1636.143537][T31923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1636.149418][T31923] RIP: 0033:0x7f97605de929 [ 1636.153823][T31923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.173417][T31923] RSP: 002b:00007f975ec26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1636.181823][T31923] RAX: ffffffffffffffda RBX: 00007f9760806080 RCX: 00007f97605de929 [ 1636.189784][T31923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1636.197744][T31923] RBP: 00007f975ec26090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.205821][T31923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.213780][T31923] R13: 0000000000000000 R14: 00007f9760806080 R15: 00007ffeef044468 [ 1636.221750][T31923] [ 1636.336946][T31928] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1636.353675][T31928] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1636.476199][T31945] 9pnet: Insufficient options for proto=fd [ 1636.496895][T31948] loop3: detected capacity change from 0 to 512 [ 1636.609581][T31952] FAULT_INJECTION: forcing a failure. [ 1636.609581][T31952] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.622554][T31952] CPU: 1 PID: 31952 Comm: syz.0.9817 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1636.633932][T31952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1636.644150][T31952] Call Trace: [ 1636.647576][T31952] [ 1636.650500][T31952] __dump_stack+0x21/0x30 [ 1636.654829][T31952] dump_stack_lvl+0xee/0x150 [ 1636.659570][T31952] ? show_regs_print_info+0x20/0x20 [ 1636.664892][T31952] dump_stack+0x15/0x20 [ 1636.669035][T31952] should_fail+0x3c1/0x510 [ 1636.673450][T31952] __should_failslab+0xa4/0xe0 [ 1636.678309][T31952] should_failslab+0x9/0x20 [ 1636.682805][T31952] slab_pre_alloc_hook+0x3b/0xe0 [ 1636.687735][T31952] __kmalloc+0x6d/0x2c0 [ 1636.691893][T31952] ? kvmalloc_node+0x242/0x330 [ 1636.696641][T31952] kvmalloc_node+0x242/0x330 [ 1636.701235][T31952] ? check_stack_object+0x81/0x140 [ 1636.706380][T31952] ? vm_mmap+0xb0/0xb0 [ 1636.710454][T31952] ? __kasan_check_write+0x14/0x20 [ 1636.715576][T31952] ? _copy_from_user+0x95/0xd0 [ 1636.720328][T31952] map_get_next_key+0x279/0x4c0 [ 1636.725531][T31952] __sys_bpf+0x390/0x730 [ 1636.729789][T31952] ? bpf_link_show_fdinfo+0x310/0x310 [ 1636.735147][T31952] ? debug_smp_processor_id+0x17/0x20 [ 1636.740602][T31952] __x64_sys_bpf+0x7c/0x90 [ 1636.745017][T31952] x64_sys_call+0x4b9/0x9a0 [ 1636.749513][T31952] do_syscall_64+0x4c/0xa0 [ 1636.753921][T31952] ? clear_bhb_loop+0x50/0xa0 [ 1636.758589][T31952] ? clear_bhb_loop+0x50/0xa0 [ 1636.763334][T31952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1636.769222][T31952] RIP: 0033:0x7f97605de929 [ 1636.773626][T31952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.793235][T31952] RSP: 002b:00007f975ec47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1636.801634][T31952] RAX: ffffffffffffffda RBX: 00007f9760805fa0 RCX: 00007f97605de929 [ 1636.809599][T31952] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1636.817565][T31952] RBP: 00007f975ec47090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.825696][T31952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.833972][T31952] R13: 0000000000000000 R14: 00007f9760805fa0 R15: 00007ffeef044468 [ 1636.841960][T31952] [ 1636.845557][T31948] EXT4-fs (loop3): Ignoring removed orlov option [ 1636.896660][T31948] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noblock_validity,noquota,auto_da_alloc=0x0000000000000004,orlov,,errors=continue. Quota mode: writeback. [ 1636.918157][T31948] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1637.365934][T31973] loop3: detected capacity change from 0 to 1024 [ 1637.407359][T31973] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1637.424551][T31976] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1637.439367][T31976] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1637.444639][T31973] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,barrier=0x0000000000000008,barrier=0x0000000000000000,dioread_lock,data_err=ignore,resgid=0x0000000000000000,abort,grpquota,nodioread_nolock,user_xattr,delalloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1637.544735][T31980] loop4: detected capacity change from 0 to 256 [ 1637.562208][T31980] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1637.620960][T31980] netlink: 'syz.4.9824': attribute type 4 has an invalid length. [ 1637.699114][T31958] overlayfs: statfs failed on './file0' [ 1637.705541][T31976] overlayfs: statfs failed on './file0' [ 1638.318695][T27250] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1638.650642][T32011] loop3: detected capacity change from 0 to 128 [ 1638.689669][T27250] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.701653][T32011] FAULT_INJECTION: forcing a failure. [ 1638.701653][T32011] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.716368][T27250] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1638.730251][T27250] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1638.737083][T27250] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1638.746392][T32011] CPU: 0 PID: 32011 Comm: syz.3.9832 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1638.757842][T32011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1638.767904][T32011] Call Trace: [ 1638.771188][T32011] [ 1638.774221][T32011] __dump_stack+0x21/0x30 [ 1638.778574][T32011] dump_stack_lvl+0xee/0x150 [ 1638.783270][T32011] ? show_regs_print_info+0x20/0x20 [ 1638.788485][T32011] dump_stack+0x15/0x20 [ 1638.792763][T32011] should_fail+0x3c1/0x510 [ 1638.797307][T32011] __should_failslab+0xa4/0xe0 [ 1638.802073][T32011] should_failslab+0x9/0x20 [ 1638.806578][T32011] slab_pre_alloc_hook+0x3b/0xe0 [ 1638.811538][T32011] ? ep_insert+0x211/0x1570 [ 1638.816139][T32011] kmem_cache_alloc+0x44/0x260 [ 1638.821015][T32011] ep_insert+0x211/0x1570 [ 1638.825349][T32011] ? do_epoll_ctl+0xd40/0xd40 [ 1638.830017][T32011] ? __kasan_check_write+0x14/0x20 [ 1638.835126][T32011] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1638.841724][T32011] ? security_capable+0x87/0xb0 [ 1638.846605][T32011] do_epoll_ctl+0x7e7/0xd40 [ 1638.851096][T32011] __x64_sys_epoll_ctl+0x160/0x1a0 [ 1638.856202][T32011] ? ep_modify+0x840/0x840 [ 1638.860624][T32011] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1638.866818][T32011] x64_sys_call+0x3af/0x9a0 [ 1638.871333][T32011] do_syscall_64+0x4c/0xa0 [ 1638.875735][T32011] ? clear_bhb_loop+0x50/0xa0 [ 1638.880523][T32011] ? clear_bhb_loop+0x50/0xa0 [ 1638.885210][T32011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1638.891107][T32011] RIP: 0033:0x7fa392d19929 [ 1638.895524][T32011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1638.915458][T32011] RSP: 002b:00007fa391382038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1638.923873][T32011] RAX: ffffffffffffffda RBX: 00007fa392f40fa0 RCX: 00007fa392d19929 [ 1638.931870][T32011] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 1638.939842][T32011] RBP: 00007fa391382090 R08: 0000000000000000 R09: 0000000000000000 [ 1638.947814][T32011] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1638.955777][T32011] R13: 0000000000000000 R14: 00007fa392f40fa0 R15: 00007ffe9ba722a8 [ 1638.963738][T32011] [ 1638.975259][ T30] kauditd_printk_skb: 2969 callbacks suppressed [ 1638.975275][ T30] audit: type=1326 audit(2000000650.425:14693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32012 comm="syz.8.9833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4144813929 code=0x7ffc0000 [ 1638.985762][T27250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.048693][T27250] usb 1-1: config 0 descriptor?? [ 1639.085102][T32021] loop4: detected capacity change from 0 to 1024 [ 1639.112572][T32021] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1639.130768][T32021] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 1639.166054][T32021] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2755: inode #13: comm syz.4.9835: corrupted in-inode xattr [ 1639.178743][T32021] EXT4-fs (loop4): Remounting filesystem read-only [ 1639.279786][ T30] audit: type=1326 audit(2000000650.758:14694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31984 comm="syz.0.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1639.303787][ T30] audit: type=1326 audit(2000000650.758:14695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31984 comm="syz.0.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1639.327771][ T30] audit: type=1326 audit(2000000650.758:14696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31984 comm="syz.0.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1639.351691][ T30] audit: type=1326 audit(2000000650.758:14697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31984 comm="syz.0.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1639.376263][ T30] audit: type=1326 audit(2000000650.758:14698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31984 comm="syz.0.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1639.400954][ T30] audit: type=1326 audit(2000000650.758:14699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31984 comm="syz.0.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1639.424916][ T30] audit: type=1326 audit(2000000650.758:14700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31984 comm="syz.0.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1639.449578][ T30] audit: type=1326 audit(2000000650.758:14701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31984 comm="syz.0.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1639.473704][ T30] audit: type=1326 audit(2000000650.758:14702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31984 comm="syz.0.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f97605de929 code=0x7ffc0000 [ 1639.511628][T28295] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1639.511649][T27250] usbhid 1-1:0.0: can't add hid device: -71 [ 1639.511701][T27250] usbhid: probe of 1-1:0.0 failed with error -71 [ 1639.534978][T27250] usb 1-1: USB disconnect, device number 67 [ 1639.860353][T32037] loop4: detected capacity change from 0 to 512 [ 1639.869177][T28295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.880816][T28295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.893591][T28295] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1639.903715][T28295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.908295][T32039] loop8: detected capacity change from 0 to 512 [ 1639.912840][T28295] usb 2-1: config 0 descriptor?? [ 1640.171989][T32037] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #3: comm syz.4.9840: corrupted inode contents [ 1640.184169][T32037] EXT4-fs error (device loop4): ext4_dirty_inode:6070: inode #3: comm syz.4.9840: mark_inode_dirty error [ 1640.195973][T32037] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #3: comm syz.4.9840: corrupted inode contents [ 1640.208085][T32037] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.9840: mark_inode_dirty error [ 1640.226303][T32037] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.9840: Failed to acquire dquot type 0 [ 1640.238855][T32037] EXT4-fs (loop4): 1 orphan inode deleted [ 1640.243312][T32039] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1640.244603][T32037] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1640.260509][T32039] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1640.272107][T32037] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1640.363200][T28295] sony 0003:054C:024B.0021: unexpected long global item [ 1640.370441][T28295] sony 0003:054C:024B.0021: parse failed [ 1640.377861][T28295] sony: probe of 0003:054C:024B.0021 failed with error -22 [ 1640.701386][T28295] usb 2-1: USB disconnect, device number 61 [ 1640.796593][T32058] loop3: detected capacity change from 0 to 512 [ 1640.823730][T32058] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1640.839884][T32058] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1641.036004][T32069] syz.8.9850[32069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1641.036080][T32069] syz.8.9850[32069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1641.074018][T32062] loop4: detected capacity change from 0 to 40427 [ 1641.093024][T32071] FAULT_INJECTION: forcing a failure. [ 1641.093024][T32071] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.113929][T32071] CPU: 0 PID: 32071 Comm: syz.8.9851 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1641.125341][T32071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1641.135503][T32071] Call Trace: [ 1641.138790][T32071] [ 1641.141720][T32071] __dump_stack+0x21/0x30 [ 1641.146058][T32071] dump_stack_lvl+0xee/0x150 [ 1641.150641][T32071] ? show_regs_print_info+0x20/0x20 [ 1641.156196][T32071] dump_stack+0x15/0x20 [ 1641.159847][T32074] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1641.160345][T32071] should_fail+0x3c1/0x510 [ 1641.179673][T32071] __should_failslab+0xa4/0xe0 [ 1641.184971][T32071] should_failslab+0x9/0x20 [ 1641.189649][T32071] slab_pre_alloc_hook+0x3b/0xe0 [ 1641.190721][T32074] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1641.194586][T32071] __kmalloc+0x6d/0x2c0 [ 1641.212674][T32071] ? sk_prot_alloc+0xed/0x320 [ 1641.217349][T32071] ? check_stack_object+0x81/0x140 [ 1641.222462][T32071] sk_prot_alloc+0xed/0x320 [ 1641.227136][T32071] sk_alloc+0x38/0x430 [ 1641.231204][T32071] bpf_prog_test_run_skb+0x24b/0x1150 [ 1641.236584][T32071] ? __kasan_check_write+0x14/0x20 [ 1641.241692][T32071] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 1641.247580][T32071] bpf_prog_test_run+0x3d5/0x620 [ 1641.252522][T32071] ? bpf_prog_query+0x230/0x230 [ 1641.257378][T32071] ? selinux_bpf+0xce/0xf0 [ 1641.261802][T32071] ? security_bpf+0x82/0xa0 [ 1641.266316][T32071] __sys_bpf+0x52c/0x730 [ 1641.270552][T32071] ? bpf_link_show_fdinfo+0x310/0x310 [ 1641.276094][T32071] ? debug_smp_processor_id+0x17/0x20 [ 1641.281462][T32071] __x64_sys_bpf+0x7c/0x90 [ 1641.285876][T32071] x64_sys_call+0x4b9/0x9a0 [ 1641.290373][T32071] do_syscall_64+0x4c/0xa0 [ 1641.294782][T32071] ? clear_bhb_loop+0x50/0xa0 [ 1641.299455][T32071] ? clear_bhb_loop+0x50/0xa0 [ 1641.304216][T32071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1641.310277][T32071] RIP: 0033:0x7f4144813929 [ 1641.314688][T32071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1641.335097][T32071] RSP: 002b:00007f4142e7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1641.343567][T32071] RAX: ffffffffffffffda RBX: 00007f4144a3afa0 RCX: 00007f4144813929 [ 1641.351536][T32071] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1641.359499][T32071] RBP: 00007f4142e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.367458][T32071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.375416][T32071] R13: 0000000000000000 R14: 00007f4144a3afa0 R15: 00007ffd5a92cf68 [ 1641.383379][T32071] [ 1641.442377][T32062] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1641.481799][T32086] loop8: detected capacity change from 0 to 1024 [ 1641.498911][T32062] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1641.533216][T32062] overlayfs: failed to resolve './file0': -2 [ 1641.535577][T32074] overlayfs: statfs failed on './file0' [ 1641.539564][T32056] overlayfs: statfs failed on './file0' [ 1641.545075][T32086] EXT4-fs (loop8): Ignoring removed orlov option [ 1641.557020][T32086] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 1641.568311][T32062] overlayfs: failed to resolve './file0': -2 [ 1641.575395][T32086] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1641.637127][T31681] attempt to access beyond end of device [ 1641.637127][T31681] loop4: rw=2049, want=45112, limit=40427 [ 1643.769418][T32124] loop3: detected capacity change from 0 to 256 [ 1644.706685][T32126] loop8: detected capacity change from 0 to 256 [ 1645.143717][T32124] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1645.156104][T32126] FAT-fs (loop8): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1646.026412][T32136] loop4: detected capacity change from 0 to 512 [ 1646.112373][T32136] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1646.129572][T32136] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1646.245794][T32129] loop3: detected capacity change from 0 to 40427 [ 1646.264422][T32129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1646.296182][T32129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1646.312390][T32129] overlayfs: failed to resolve './file0': -2 [ 1646.320456][T32129] overlayfs: failed to resolve './file0': -2 [ 1646.338705][T31003] attempt to access beyond end of device [ 1646.338705][T31003] loop3: rw=2049, want=45112, limit=40427 [ 1646.475873][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1646.475888][ T30] audit: type=1326 audit(2000000658.482:14733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1646.511415][ T30] audit: type=1326 audit(2000000658.482:14734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1646.545303][ T30] audit: type=1326 audit(2000000658.515:14735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1646.595604][ T30] audit: type=1326 audit(2000000658.515:14736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1646.623256][ T30] audit: type=1326 audit(2000000658.515:14737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32161 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1646.647122][ T30] audit: type=1326 audit(2000000658.600:14738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1646.671053][ T30] audit: type=1326 audit(2000000658.600:14739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1646.695633][ T30] audit: type=1326 audit(2000000658.600:14740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1647.619070][T32181] loop3: detected capacity change from 0 to 1024 [ 1647.650758][T32181] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1647.688933][T32183] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9883'. [ 1647.709534][T32181] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 1647.752121][T32188] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9884'. [ 1647.752558][ T30] audit: type=1400 audit(2000000659.845:14741): avc: denied { write } for pid=32187 comm="syz.1.9884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1647.795285][T32190] loop4: detected capacity change from 0 to 512 [ 1647.842867][ T30] audit: type=1400 audit(2000000659.845:14742): avc: denied { nlmsg_write } for pid=32187 comm="syz.1.9884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1647.853071][T32192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9885'. [ 1647.879822][T32190] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1647.956180][T32190] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1648.038100][T32207] loop8: detected capacity change from 0 to 1024 [ 1648.088047][T32207] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1648.106332][T32207] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,barrier=0x0000000000000008,barrier=0x0000000000000000,dioread_lock,data_err=ignore,resgid=0x0000000000000000,abort,grpquota,nodioread_nolock,user_xattr,delalloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1648.272929][T16498] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1648.539394][T32219] FAULT_INJECTION: forcing a failure. [ 1648.539394][T32219] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.552135][T32219] CPU: 0 PID: 32219 Comm: syz.1.9893 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1648.552157][T16498] usb 1-1: device descriptor read/64, error -71 [ 1648.563681][T32219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1648.563698][T32219] Call Trace: [ 1648.563704][T32219] [ 1648.563711][T32219] __dump_stack+0x21/0x30 [ 1648.563732][T32219] dump_stack_lvl+0xee/0x150 [ 1648.563745][T32219] ? show_regs_print_info+0x20/0x20 [ 1648.563761][T32219] dump_stack+0x15/0x20 [ 1648.604359][T32219] should_fail+0x3c1/0x510 [ 1648.608774][T32219] ? netlink_sendmsg+0x602/0xb70 [ 1648.613892][T32219] __should_failslab+0xa4/0xe0 [ 1648.618648][T32219] should_failslab+0x9/0x20 [ 1648.623134][T32219] slab_pre_alloc_hook+0x3b/0xe0 [ 1648.628051][T32219] ? netlink_sendmsg+0x602/0xb70 [ 1648.632968][T32219] ? netlink_sendmsg+0x602/0xb70 [ 1648.638085][T32219] __kmalloc_track_caller+0x6c/0x2c0 [ 1648.643351][T32219] ? netlink_sendmsg+0x602/0xb70 [ 1648.648270][T32219] ? netlink_sendmsg+0x602/0xb70 [ 1648.653226][T32219] __alloc_skb+0x21a/0x740 [ 1648.657623][T32219] netlink_sendmsg+0x602/0xb70 [ 1648.662370][T32219] ? netlink_getsockopt+0x530/0x530 [ 1648.667564][T32219] ? security_socket_sendmsg+0x82/0xa0 [ 1648.672999][T32219] ? netlink_getsockopt+0x530/0x530 [ 1648.678176][T32219] ____sys_sendmsg+0x5a2/0x8c0 [ 1648.682925][T32219] ? __sys_sendmsg_sock+0x40/0x40 [ 1648.687928][T32219] ? import_iovec+0x7c/0xb0 [ 1648.692409][T32219] ___sys_sendmsg+0x1f0/0x260 [ 1648.697065][T32219] ? __sys_sendmsg+0x250/0x250 [ 1648.701814][T32219] ? __fdget+0x1a1/0x230 [ 1648.706037][T32219] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1648.710948][T32219] ? ___sys_sendmsg+0x260/0x260 [ 1648.715779][T32219] ? ksys_write+0x1eb/0x240 [ 1648.720278][T32219] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1648.726326][T32219] x64_sys_call+0x4b/0x9a0 [ 1648.730721][T32219] do_syscall_64+0x4c/0xa0 [ 1648.735123][T32219] ? clear_bhb_loop+0x50/0xa0 [ 1648.739942][T32219] ? clear_bhb_loop+0x50/0xa0 [ 1648.744718][T32219] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1648.750592][T32219] RIP: 0033:0x7f7373a7d929 [ 1648.754992][T32219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1648.774575][T32219] RSP: 002b:00007f73720e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1648.782970][T32219] RAX: ffffffffffffffda RBX: 00007f7373ca4fa0 RCX: 00007f7373a7d929 [ 1648.790924][T32219] RDX: 0000000000000840 RSI: 0000200000000700 RDI: 0000000000000003 [ 1648.798879][T32219] RBP: 00007f73720e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1648.806920][T32219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.814901][T32219] R13: 0000000000000000 R14: 00007f7373ca4fa0 R15: 00007fff4a2866a8 [ 1648.822945][T32219] [ 1648.910018][T32225] FAULT_INJECTION: forcing a failure. [ 1648.910018][T32225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1648.923480][T32225] CPU: 1 PID: 32225 Comm: syz.1.9897 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1648.934857][T32225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1648.944917][T32225] Call Trace: [ 1648.948213][T32225] [ 1648.951148][T32225] __dump_stack+0x21/0x30 [ 1648.955462][T32225] dump_stack_lvl+0xee/0x150 [ 1648.960029][T32225] ? show_regs_print_info+0x20/0x20 [ 1648.965239][T32225] dump_stack+0x15/0x20 [ 1648.969388][T32225] should_fail+0x3c1/0x510 [ 1648.973875][T32225] should_fail_alloc_page+0x55/0x80 [ 1648.979062][T32225] prepare_alloc_pages+0x156/0x600 [ 1648.984186][T32225] ? __alloc_pages_bulk+0xab0/0xab0 [ 1648.989389][T32225] ? __x64_sys_bpf+0x7c/0x90 [ 1648.993976][T32225] ? x64_sys_call+0x4b9/0x9a0 [ 1648.998648][T32225] ? do_syscall_64+0x4c/0xa0 [ 1649.003235][T32225] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1649.009382][T32225] __alloc_pages+0x10a/0x440 [ 1649.013961][T32225] ? prep_new_page+0x110/0x110 [ 1649.018712][T32225] kmalloc_order+0x4c/0x160 [ 1649.023200][T32225] kmalloc_order_trace+0x18/0xb0 [ 1649.028125][T32225] __kmalloc+0x199/0x2c0 [ 1649.032356][T32225] ? kvmalloc_node+0x242/0x330 [ 1649.037102][T32225] kvmalloc_node+0x242/0x330 [ 1649.041676][T32225] ? vm_mmap+0xb0/0xb0 [ 1649.045727][T32225] ? check_stack_object+0x81/0x140 [ 1649.050821][T32225] ? __kasan_check_write+0x14/0x20 [ 1649.055915][T32225] ? _copy_from_user+0x95/0xd0 [ 1649.060667][T32225] map_update_elem+0x4df/0x740 [ 1649.065417][T32225] __sys_bpf+0x40c/0x730 [ 1649.069645][T32225] ? bpf_link_show_fdinfo+0x310/0x310 [ 1649.075001][T32225] ? debug_smp_processor_id+0x17/0x20 [ 1649.080363][T32225] __x64_sys_bpf+0x7c/0x90 [ 1649.084766][T32225] x64_sys_call+0x4b9/0x9a0 [ 1649.089252][T32225] do_syscall_64+0x4c/0xa0 [ 1649.093748][T32225] ? clear_bhb_loop+0x50/0xa0 [ 1649.098411][T32225] ? clear_bhb_loop+0x50/0xa0 [ 1649.103075][T32225] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1649.108953][T32225] RIP: 0033:0x7f7373a7d929 [ 1649.113353][T32225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1649.132950][T32225] RSP: 002b:00007f73720e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1649.141444][T32225] RAX: ffffffffffffffda RBX: 00007f7373ca4fa0 RCX: 00007f7373a7d929 [ 1649.149401][T32225] RDX: 0000000000000020 RSI: 0000200000001400 RDI: 0000000000000002 [ 1649.157446][T32225] RBP: 00007f73720e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.166006][T32225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.173961][T32225] R13: 0000000000000000 R14: 00007f7373ca4fa0 R15: 00007fff4a2866a8 [ 1649.181922][T32225] [ 1649.186787][T16498] usb 1-1: device descriptor read/64, error -71 [ 1649.194508][T32223] loop8: detected capacity change from 0 to 256 [ 1649.216199][T32231] loop3: detected capacity change from 0 to 512 [ 1649.252566][T32223] FAT-fs (loop8): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1649.291204][T32231] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1649.317874][T32239] 9pnet: Insufficient options for proto=fd [ 1649.467830][T32243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9901'. [ 1649.493938][T16498] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1649.508782][T32231] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,inode_readahead_blks=0x0000000000000800,usrjquota=,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 1649.540810][T32231] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1649.582512][T32231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9898'. [ 1649.960520][T16498] usb 1-1: device descriptor read/64, error -71 [ 1650.056226][T32259] loop4: detected capacity change from 0 to 512 [ 1650.063352][T32254] 9pnet: Insufficient options for proto=fd [ 1650.118720][T32259] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1650.134713][T32259] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.449690][T16498] usb 1-1: device descriptor read/64, error -71 [ 1650.575184][T16498] usb usb1-port1: attempt power cycle [ 1651.949831][T32298] FAULT_INJECTION: forcing a failure. [ 1651.949831][T32298] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.964318][T32298] CPU: 1 PID: 32298 Comm: syz.8.9919 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1651.975797][T32298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1651.985853][T32298] Call Trace: [ 1651.989226][T32298] [ 1651.992149][T32298] __dump_stack+0x21/0x30 [ 1651.996488][T32298] dump_stack_lvl+0xee/0x150 [ 1652.001076][T32298] ? show_regs_print_info+0x20/0x20 [ 1652.006274][T32298] dump_stack+0x15/0x20 [ 1652.010431][T32298] should_fail+0x3c1/0x510 [ 1652.014847][T32298] __should_failslab+0xa4/0xe0 [ 1652.019608][T32298] should_failslab+0x9/0x20 [ 1652.024108][T32298] slab_pre_alloc_hook+0x3b/0xe0 [ 1652.029045][T32298] ? security_file_alloc+0x33/0x120 [ 1652.034251][T32298] kmem_cache_alloc+0x44/0x260 [ 1652.039014][T32298] security_file_alloc+0x33/0x120 [ 1652.044038][T32298] __alloc_file+0xb5/0x2a0 [ 1652.048544][T32298] alloc_empty_file+0x97/0x180 [ 1652.053307][T32298] path_openat+0xf3/0x2f10 [ 1652.057728][T32298] ? __stack_depot_save+0x34/0x480 [ 1652.062880][T32298] ? __kasan_slab_alloc+0xcf/0xf0 [ 1652.067908][T32298] ? __kasan_slab_alloc+0xbd/0xf0 [ 1652.072928][T32298] ? slab_post_alloc_hook+0x4f/0x2b0 [ 1652.078210][T32298] ? kmem_cache_alloc+0xf7/0x260 [ 1652.083149][T32298] ? getname_flags+0xb9/0x500 [ 1652.087912][T32298] ? getname+0x19/0x20 [ 1652.091981][T32298] ? do_sys_openat2+0xd9/0x7b0 [ 1652.096742][T32298] ? __x64_sys_openat+0x136/0x160 [ 1652.101769][T32298] ? x64_sys_call+0x219/0x9a0 [ 1652.106446][T32298] ? do_syscall_64+0x4c/0xa0 [ 1652.111042][T32298] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1652.117127][T32298] ? do_filp_open+0x3e0/0x3e0 [ 1652.121812][T32298] do_filp_open+0x1b3/0x3e0 [ 1652.126411][T32298] ? vfs_tmpfile+0x2d0/0x2d0 [ 1652.131009][T32298] do_sys_openat2+0x14c/0x7b0 [ 1652.135776][T32298] ? __kasan_check_write+0x14/0x20 [ 1652.140902][T32298] ? do_sys_open+0xe0/0xe0 [ 1652.145319][T32298] ? fput+0x1a/0x20 [ 1652.149127][T32298] ? ksys_write+0x1eb/0x240 [ 1652.153628][T32298] ? __ia32_sys_read+0x90/0x90 [ 1652.158389][T32298] __x64_sys_openat+0x136/0x160 [ 1652.163248][T32298] x64_sys_call+0x219/0x9a0 [ 1652.167753][T32298] do_syscall_64+0x4c/0xa0 [ 1652.172254][T32298] ? clear_bhb_loop+0x50/0xa0 [ 1652.176931][T32298] ? clear_bhb_loop+0x50/0xa0 [ 1652.181609][T32298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1652.187500][T32298] RIP: 0033:0x7f4144813929 [ 1652.191911][T32298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1652.211516][T32298] RSP: 002b:00007f4142e7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1652.219932][T32298] RAX: ffffffffffffffda RBX: 00007f4144a3afa0 RCX: 00007f4144813929 [ 1652.227910][T32298] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1652.235970][T32298] RBP: 00007f4142e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1652.244026][T32298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.251992][T32298] R13: 0000000000000000 R14: 00007f4144a3afa0 R15: 00007ffd5a92cf68 [ 1652.260005][T32298] [ 1652.325533][T32297] 9pnet: Insufficient options for proto=fd [ 1652.954658][T32304] device syzkaller0 entered promiscuous mode [ 1653.278213][T28275] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1653.318347][T32337] input: syz1 as /devices/virtual/input/input31 [ 1653.669603][T28275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.680582][T28275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.690378][T28275] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1653.699475][T28275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.708265][T28275] usb 4-1: config 0 descriptor?? [ 1653.762409][T32343] loop8: detected capacity change from 0 to 512 [ 1653.787399][T32343] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1653.804206][T32343] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1653.891032][T32354] 9pnet: Insufficient options for proto=fd [ 1654.528861][T28275] uclogic 0003:5543:0522.0022: No inputs registered, leaving [ 1654.542873][T32352] loop4: detected capacity change from 0 to 40427 [ 1654.544271][T28275] uclogic 0003:5543:0522.0022: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 1654.709408][T32370] loop8: detected capacity change from 0 to 256 [ 1654.719788][T12670] usb 4-1: USB disconnect, device number 40 [ 1654.737190][T32352] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1654.761931][T32370] FAT-fs (loop8): Directory bread(block 64) failed [ 1654.768479][T32370] FAT-fs (loop8): Directory bread(block 65) failed [ 1654.804875][T32370] FAT-fs (loop8): Directory bread(block 66) failed [ 1654.811497][T32370] FAT-fs (loop8): Directory bread(block 67) failed [ 1654.816743][T32352] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1654.818402][T32370] FAT-fs (loop8): Directory bread(block 68) failed [ 1654.833294][T32370] FAT-fs (loop8): Directory bread(block 69) failed [ 1654.840582][T32370] FAT-fs (loop8): Directory bread(block 70) failed [ 1654.847257][T32370] FAT-fs (loop8): Directory bread(block 71) failed [ 1654.854318][T32370] FAT-fs (loop8): Directory bread(block 72) failed [ 1654.860938][T32370] FAT-fs (loop8): Directory bread(block 73) failed [ 1654.896642][T32352] overlayfs: failed to resolve './file0': -2 [ 1654.909421][T31681] attempt to access beyond end of device [ 1654.909421][T31681] loop4: rw=2049, want=45112, limit=40427 [ 1655.309838][T32367] overlayfs: statfs failed on './file0' [ 1655.777015][T32392] loop3: detected capacity change from 0 to 512 [ 1655.805358][T32395] 9pnet: Insufficient options for proto=fd [ 1655.820322][T32392] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1655.910550][T32392] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1657.508739][T32424] device syzkaller0 entered promiscuous mode [ 1657.522671][T32424] FAULT_INJECTION: forcing a failure. [ 1657.522671][T32424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1657.545304][T32424] CPU: 0 PID: 32424 Comm: syz.1.9954 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1657.556705][T32424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1657.566846][T32424] Call Trace: [ 1657.570133][T32424] [ 1657.573068][T32424] __dump_stack+0x21/0x30 [ 1657.577400][T32424] dump_stack_lvl+0xee/0x150 [ 1657.582079][T32424] ? show_regs_print_info+0x20/0x20 [ 1657.587290][T32424] ? unwind_get_return_address+0x4d/0x90 [ 1657.592926][T32424] ? stack_trace_save+0xe0/0xe0 [ 1657.597776][T32424] ? arch_stack_walk+0xee/0x140 [ 1657.602715][T32424] dump_stack+0x15/0x20 [ 1657.606874][T32424] should_fail+0x3c1/0x510 [ 1657.611304][T32424] should_fail_alloc_page+0x55/0x80 [ 1657.616503][T32424] prepare_alloc_pages+0x156/0x600 [ 1657.621616][T32424] ? __alloc_pages_bulk+0xab0/0xab0 [ 1657.627074][T32424] ? __kasan_slab_alloc+0xcf/0xf0 [ 1657.632108][T32424] __alloc_pages+0x10a/0x440 [ 1657.636697][T32424] ? sock_do_ioctl+0x22e/0x300 [ 1657.641458][T32424] ? sock_ioctl+0x4bc/0x6b0 [ 1657.645959][T32424] ? prep_new_page+0x110/0x110 [ 1657.650730][T32424] new_slab+0xa1/0x4d0 [ 1657.654802][T32424] ___slab_alloc+0x381/0x810 [ 1657.659399][T32424] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1657.665053][T32424] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1657.670507][T32424] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1657.675968][T32424] __slab_alloc+0x49/0x90 [ 1657.680302][T32424] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1657.685743][T32424] __kmalloc_track_caller+0x169/0x2c0 [ 1657.691444][T32424] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1657.696878][T32424] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1657.702316][T32424] __alloc_skb+0x21a/0x740 [ 1657.706719][T32424] rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1657.711997][T32424] rtnetlink_event+0xd2/0x1a0 [ 1657.716662][T32424] raw_notifier_call_chain+0x90/0x100 [ 1657.722022][T32424] dev_change_tx_queue_len+0x1af/0x330 [ 1657.727468][T32424] ? dev_set_mtu+0xc0/0xc0 [ 1657.731882][T32424] dev_ifsioc+0x25c/0xe70 [ 1657.736297][T32424] ? dev_ioctl+0xd10/0xd10 [ 1657.740700][T32424] ? __kasan_check_write+0x14/0x20 [ 1657.745797][T32424] ? mutex_lock+0x95/0x1a0 [ 1657.750200][T32424] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1657.756773][T32424] ? dev_get_by_name_rcu+0xc8/0xf0 [ 1657.762313][T32424] dev_ioctl+0x560/0xd10 [ 1657.766554][T32424] sock_do_ioctl+0x22e/0x300 [ 1657.771133][T32424] ? sock_show_fdinfo+0xa0/0xa0 [ 1657.775973][T32424] ? selinux_file_ioctl+0x377/0x480 [ 1657.781156][T32424] sock_ioctl+0x4bc/0x6b0 [ 1657.785470][T32424] ? sock_poll+0x3d0/0x3d0 [ 1657.789871][T32424] ? __fget_files+0x2c4/0x320 [ 1657.794537][T32424] ? security_file_ioctl+0x84/0xa0 [ 1657.799631][T32424] ? sock_poll+0x3d0/0x3d0 [ 1657.804134][T32424] __se_sys_ioctl+0x121/0x1a0 [ 1657.808799][T32424] __x64_sys_ioctl+0x7b/0x90 [ 1657.813375][T32424] x64_sys_call+0x2f/0x9a0 [ 1657.817775][T32424] do_syscall_64+0x4c/0xa0 [ 1657.822176][T32424] ? clear_bhb_loop+0x50/0xa0 [ 1657.826995][T32424] ? clear_bhb_loop+0x50/0xa0 [ 1657.831673][T32424] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1657.837553][T32424] RIP: 0033:0x7f7373a7d929 [ 1657.841952][T32424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1657.861541][T32424] RSP: 002b:00007f73720e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1657.869950][T32424] RAX: ffffffffffffffda RBX: 00007f7373ca4fa0 RCX: 00007f7373a7d929 [ 1657.877906][T32424] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000004 [ 1657.885862][T32424] RBP: 00007f73720e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1657.893818][T32424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1657.901862][T32424] R13: 0000000000000000 R14: 00007f7373ca4fa0 R15: 00007fff4a2866a8 [ 1657.909912][T32424] [ 1657.946640][T32428] x_tables: duplicate underflow at hook 1 [ 1657.962698][T32430] 9pnet: Insufficient options for proto=fd [ 1658.164884][T32448] loop3: detected capacity change from 0 to 1024 [ 1658.202505][T32448] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1658.432526][T16499] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1658.442609][T32448] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,barrier=0x0000000000000008,barrier=0x0000000000000000,dioread_lock,data_err=ignore,resgid=0x0000000000000000,abort,grpquota,nodioread_nolock,user_xattr,delalloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1658.879757][T16499] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.894399][T16499] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1658.904860][T16499] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1659.066167][T16499] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1659.075301][T16499] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.083648][T16499] usb 9-1: Product: syz [ 1659.088155][T16499] usb 9-1: Manufacturer: ì™žé„žá´šâ¥æ…”漳륅乮괩í›ì­±æ¤¢áµ¬ç¼³íŠã‰ç™šè¨î¯²á¼†æ¶°íˆ®àª•敊꼠樂堅䩴餎嶸崾䛈뛹鑸䤋д㚲뢌襺ន褶꧉䈨鑛뇡핂굜娕툛钔ꓡ⤙뱜娮ﳅ뷫à£Ùµã†‰éˆ â˜ì¼á°»â—¬ë“‹â“„è—‡ë·æµ—馄༃鶴侻麯︕닔â¦ãŒì…†é¶•ㅊ⌦﫭밿ྕᜬ઻ཥ塘ꨜҙì¥ç„µã™¤åŽ­é‹¬ï¯­è©¯â†®á›™ì…Ǖ킊 [ 1659.120504][T16499] usb 9-1: SerialNumber: syz [ 1659.178038][T27250] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1659.346765][T32426] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1659.355604][T32426] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1660.375197][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1660.375228][ T30] audit: type=1326 audit(2000000673.374:14765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.3.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1660.810751][T32509] loop8: detected capacity change from 0 to 512 [ 1660.916186][ T30] audit: type=1326 audit(2000000673.374:14766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.3.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1661.030054][ T30] audit: type=1326 audit(2000000673.385:14767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.3.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1661.053927][T16499] cdc_ncm 9-1:1.0: bind() failure [ 1661.059997][ T30] audit: type=1326 audit(2000000673.385:14768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.3.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1661.103767][ T30] audit: type=1326 audit(2000000673.385:14769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.3.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1661.284587][T27250] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1661.289990][T32509] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1661.295161][T16499] cdc_ncm: probe of 9-1:1.1 failed with error -71 [ 1661.317712][T27250] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1661.327253][T27250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.335576][T32509] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1661.355603][T27250] usb 5-1: config 0 descriptor?? [ 1661.360939][T16499] cdc_mbim: probe of 9-1:1.1 failed with error -71 [ 1661.366775][ T30] audit: type=1326 audit(2000000673.385:14770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.3.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1661.382224][T16499] usb 9-1: USB disconnect, device number 6 [ 1661.403222][ T30] audit: type=1326 audit(2000000673.385:14771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.3.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1661.427946][ T30] audit: type=1326 audit(2000000673.385:14772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.3.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1661.457518][ T30] audit: type=1326 audit(2000000673.385:14773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.3.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1661.458189][T27250] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1661.481240][ T30] audit: type=1326 audit(2000000673.385:14774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.3.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa392d19929 code=0x7ffc0000 [ 1661.829440][T32536] 9pnet: Insufficient options for proto=fd [ 1661.987186][T32551] 9pnet: Insufficient options for proto=fd [ 1662.077239][T32559] input: syz1 as /devices/virtual/input/input33 [ 1662.150303][T32560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.162041][T32560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.179348][T32560] device bridge_slave_0 entered promiscuous mode [ 1662.186868][T32560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.201585][T32560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.209797][T32560] device bridge_slave_1 entered promiscuous mode [ 1662.277942][T32560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.285084][T32560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1662.292792][T32560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.299824][T32560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1662.513367][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1662.521288][T27803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.528798][T27803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.546034][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1662.554383][T27803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.561450][T27803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1662.569061][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1662.577375][T27803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.584440][T27803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1662.592536][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1662.611759][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1662.637569][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1662.656847][T32560] device veth0_vlan entered promiscuous mode [ 1662.670362][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1662.686772][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1662.695782][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1662.703872][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1662.712844][T32560] device veth1_macvtap entered promiscuous mode [ 1662.740144][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1662.756081][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1662.769251][T29958] device bridge_slave_1 left promiscuous mode [ 1662.775553][T29958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.691737][T29958] device bridge_slave_0 left promiscuous mode [ 1663.698060][T29958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.710027][T29958] device veth1_macvtap left promiscuous mode [ 1663.722068][T28275] usb 5-1: USB disconnect, device number 12 [ 1663.723889][T29958] device veth0_vlan left promiscuous mode [ 1663.851016][T32589] loop4: detected capacity change from 0 to 1024 [ 1664.407470][T32589] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1664.438829][T32589] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 1664.474159][T32594] input: syz1 as /devices/virtual/input/input34 [ 1664.498973][T32600] 9pnet: Insufficient options for proto=fd [ 1664.720309][T32608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.727680][T32608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.799339][T32608] device bridge_slave_0 entered promiscuous mode [ 1664.831201][T32608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.838449][T32608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.012678][T32608] device bridge_slave_1 entered promiscuous mode [ 1665.439236][T32635] loop4: detected capacity change from 0 to 1024 [ 1665.461738][T32635] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1665.517104][T32644] 9pnet: Insufficient options for proto=fd [ 1665.524481][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1665.538204][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1665.547434][T32635] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 1665.590470][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1665.599043][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1665.607683][T27803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.614772][T27803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1665.649338][T32608] device veth0_vlan entered promiscuous mode [ 1665.665063][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1665.672951][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1665.682425][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1665.690811][T27803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.697902][T27803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.705432][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1665.715114][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1665.724744][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1665.973960][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1665.982667][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1665.991538][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1665.999928][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1666.008263][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1666.018584][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1666.026343][T27803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1666.041985][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1666.041999][ T30] audit: type=1326 audit(2000000679.468:14813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.1.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1666.075609][ T30] audit: type=1326 audit(2000000679.468:14814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.1.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1666.114346][T32608] device veth1_macvtap entered promiscuous mode [ 1666.125701][T28070] ------------[ cut here ]------------ [ 1666.138845][T28070] WARNING: CPU: 0 PID: 28070 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 1666.148389][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1666.156822][ T30] audit: type=1326 audit(2000000679.468:14815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.1.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1666.167321][T28070] Modules linked in: [ 1666.184685][T28070] CPU: 1 PID: 28070 Comm: syz-executor Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1666.196375][T28070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1666.197025][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1666.206574][T28070] RIP: 0010:drop_nlink+0xc5/0x110 [ 1666.219607][T28070] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 63 3b f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 db c2 b3 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 1666.220394][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1666.239783][T28070] RSP: 0018:ffffc90000a27ca8 EFLAGS: 00010293 [ 1666.254878][T28070] RAX: ffffffff81b4e505 RBX: ffff888139832300 RCX: ffff88811b6bcf00 [ 1666.264266][T28070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1666.274468][T28070] RBP: ffffc90000a27cd0 R08: 0000000000000004 R09: 0000000000000003 [ 1666.283800][T28070] R10: fffff52000144f84 R11: 1ffff92000144f84 R12: dffffc0000000000 [ 1666.293037][T28070] R13: 1ffff11027306469 R14: ffff888139832348 R15: 0000000000000000 [ 1666.326158][T32659] loop4: detected capacity change from 0 to 256 [ 1666.339456][T28070] FS: 0000555568045500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1666.351118][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1666.360441][T28070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1666.412391][T32659] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1666.588690][ T30] audit: type=1326 audit(2000000679.468:14816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.1.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1666.616893][T28070] CR2: 00007f8c9705e000 CR3: 00000001394e8000 CR4: 00000000003506a0 [ 1666.630287][T19671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1666.746849][T28070] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1667.094930][ T30] audit: type=1326 audit(2000000679.501:14817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.1.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1667.124319][T28070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1667.137129][ T30] audit: type=1326 audit(2000000679.501:14818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.1.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1667.162938][T28070] Call Trace: [ 1667.166537][T28070] [ 1667.169531][T28070] shmem_rmdir+0x5b/0x90 [ 1667.173784][T28070] vfs_rmdir+0x313/0x460 [ 1667.178120][T28070] incfs_kill_sb+0x105/0x220 [ 1667.182843][T28070] deactivate_locked_super+0xa0/0x100 [ 1667.195575][T29958] device bridge_slave_1 left promiscuous mode [ 1667.201962][T28070] deactivate_super+0xaf/0xe0 [ 1667.204000][T29958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.212857][T28070] cleanup_mnt+0x446/0x500 [ 1667.215456][ T30] audit: type=1326 audit(2000000679.543:14819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.1.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1667.218294][T28070] __cleanup_mnt+0x19/0x20 [ 1667.242650][ T30] audit: type=1326 audit(2000000679.543:14820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.1.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1667.271177][T29958] device bridge_slave_0 left promiscuous mode [ 1667.277355][T29958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.286655][ T30] audit: type=1326 audit(2000000679.543:14821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.1.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1667.310850][T28070] task_work_run+0x127/0x190 [ 1667.315656][T28070] exit_to_user_mode_loop+0xd0/0xe0 [ 1667.354823][T29958] device veth1_macvtap left promiscuous mode [ 1667.360866][T29958] device veth0_vlan left promiscuous mode [ 1667.367284][ T30] audit: type=1326 audit(2000000679.543:14822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32654 comm="syz.1.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7373a7d929 code=0x7ffc0000 [ 1667.381791][T28070] exit_to_user_mode_prepare+0x5a/0xa0 [ 1667.396705][T28070] syscall_exit_to_user_mode+0x1a/0x30 [ 1667.403066][T28070] do_syscall_64+0x58/0xa0 [ 1667.407538][T28070] ? clear_bhb_loop+0x50/0xa0 [ 1667.412309][T28070] ? clear_bhb_loop+0x50/0xa0 [ 1667.417042][T28070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1667.423120][T28070] RIP: 0033:0x7f7373a7ec57 [ 1667.427641][T28070] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1667.476984][T32674] loop8: detected capacity change from 0 to 256 [ 1667.506201][T28070] RSP: 002b:00007fff4a285938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1667.531875][T32674] FAT-fs (loop8): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 1667.741379][T28070] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f7373a7ec57 [ 1667.780406][T28070] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4a2859f0 [ 1667.809462][T28070] RBP: 00007fff4a2859f0 R08: 0000000000000000 R09: 0000000000000000 [ 1667.846632][T28070] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff4a286a80 [ 1667.874760][T28070] R13: 00007f7373aff925 R14: 0000000000197a89 R15: 00007fff4a286ac0 [ 1667.882770][T28070] [ 1667.912552][T28070] ---[ end trace 0dd605703a85a197 ]--- [ 1667.928112][T28070] ================================================================== [ 1667.936239][T28070] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 1667.942486][T28070] Write of size 4 at addr 0000000000000170 by task syz-executor/28070 [ 1667.950632][T28070] [ 1667.952952][T28070] CPU: 1 PID: 28070 Comm: syz-executor Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1667.964485][T28070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1667.974626][T28070] Call Trace: [ 1667.977988][T28070] [ 1667.980925][T28070] __dump_stack+0x21/0x30 [ 1667.985274][T28070] dump_stack_lvl+0xee/0x150 [ 1667.989876][T28070] ? show_regs_print_info+0x20/0x20 [ 1667.995084][T28070] ? _raw_spin_lock+0x8e/0xe0 [ 1667.999764][T28070] ? _raw_spin_trylock_bh+0x130/0x130 [ 1668.005139][T28070] ? ihold+0x20/0x60 [ 1668.009031][T28070] kasan_report+0xe7/0x140 [ 1668.013452][T28070] ? ihold+0x20/0x60 [ 1668.017340][T28070] kasan_check_range+0x280/0x290 [ 1668.022286][T28070] __kasan_check_write+0x14/0x20 [ 1668.027226][T28070] ihold+0x20/0x60 [ 1668.031035][T28070] vfs_rmdir+0x1f0/0x460 [ 1668.035281][T28070] incfs_kill_sb+0x105/0x220 [ 1668.039872][T28070] deactivate_locked_super+0xa0/0x100 [ 1668.045248][T28070] deactivate_super+0xaf/0xe0 [ 1668.049934][T28070] cleanup_mnt+0x446/0x500 [ 1668.054351][T28070] __cleanup_mnt+0x19/0x20 [ 1668.058766][T28070] task_work_run+0x127/0x190 [ 1668.063359][T28070] exit_to_user_mode_loop+0xd0/0xe0 [ 1668.068653][T28070] exit_to_user_mode_prepare+0x5a/0xa0 [ 1668.074122][T28070] syscall_exit_to_user_mode+0x1a/0x30 [ 1668.079586][T28070] do_syscall_64+0x58/0xa0 [ 1668.084006][T28070] ? clear_bhb_loop+0x50/0xa0 [ 1668.088686][T28070] ? clear_bhb_loop+0x50/0xa0 [ 1668.093362][T28070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1668.099257][T28070] RIP: 0033:0x7f7373a7ec57 [ 1668.103671][T28070] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1668.123284][T28070] RSP: 002b:00007fff4a285938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1668.131703][T28070] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f7373a7ec57 [ 1668.139685][T28070] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4a2859f0 [ 1668.147661][T28070] RBP: 00007fff4a2859f0 R08: 0000000000000000 R09: 0000000000000000 [ 1668.155651][T28070] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff4a286a80 [ 1668.163631][T28070] R13: 00007f7373aff925 R14: 0000000000197a89 R15: 00007fff4a286ac0 [ 1668.171611][T28070] [ 1668.174630][T28070] ================================================================== [ 1668.182687][T28070] Disabling lock debugging due to kernel taint [ 1668.193349][T28070] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 1668.201361][T28070] #PF: supervisor write access in kernel mode [ 1668.207604][T28070] #PF: error_code(0x0002) - not-present page [ 1668.214030][T28070] PGD 12bf4e067 P4D 12bf4e067 PUD 0 [ 1668.219336][T28070] Oops: 0002 [#1] PREEMPT SMP KASAN [ 1668.224539][T28070] CPU: 1 PID: 28070 Comm: syz-executor Tainted: G B W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1668.236083][T28070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1668.246216][T28070] RIP: 0010:ihold+0x26/0x60 [ 1668.250710][T28070] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 f1 ba b3 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 50 33 f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 71 [ 1668.270299][T28070] RSP: 0018:ffffc90000a27ce8 EFLAGS: 00010246 [ 1668.276347][T28070] RAX: ffff88811b6bcf00 RBX: 0000000000000000 RCX: ffff88811b6bcf00 [ 1668.284307][T28070] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 1668.292265][T28070] RBP: ffffc90000a27cf8 R08: 0000000000000004 R09: 0000000000000003 [ 1668.300219][T28070] R10: fffffbfff0e17a4c R11: 1ffffffff0e17a4c R12: 1ffff11027e16f16 [ 1668.308187][T28070] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1668.316142][T28070] FS: 0000555568045500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1668.325052][T28070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1668.331611][T28070] CR2: 0000000000000170 CR3: 00000001394e8000 CR4: 00000000003506a0 [ 1668.339563][T28070] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1668.347517][T28070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1668.355476][T28070] Call Trace: [ 1668.358751][T28070] [ 1668.361672][T28070] vfs_rmdir+0x1f0/0x460 [ 1668.365905][T28070] incfs_kill_sb+0x105/0x220 [ 1668.370485][T28070] deactivate_locked_super+0xa0/0x100 [ 1668.375848][T28070] deactivate_super+0xaf/0xe0 [ 1668.380511][T28070] cleanup_mnt+0x446/0x500 [ 1668.384913][T28070] __cleanup_mnt+0x19/0x20 [ 1668.389358][T28070] task_work_run+0x127/0x190 [ 1668.393928][T28070] exit_to_user_mode_loop+0xd0/0xe0 [ 1668.399114][T28070] exit_to_user_mode_prepare+0x5a/0xa0 [ 1668.404566][T28070] syscall_exit_to_user_mode+0x1a/0x30 [ 1668.410022][T28070] do_syscall_64+0x58/0xa0 [ 1668.414424][T28070] ? clear_bhb_loop+0x50/0xa0 [ 1668.419350][T28070] ? clear_bhb_loop+0x50/0xa0 [ 1668.424098][T28070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1668.429975][T28070] RIP: 0033:0x7f7373a7ec57 [ 1668.434377][T28070] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1668.453972][T28070] RSP: 002b:00007fff4a285938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1668.462389][T28070] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f7373a7ec57 [ 1668.470360][T28070] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4a2859f0 [ 1668.478321][T28070] RBP: 00007fff4a2859f0 R08: 0000000000000000 R09: 0000000000000000 [ 1668.486349][T28070] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff4a286a80 [ 1668.494313][T28070] R13: 00007f7373aff925 R14: 0000000000197a89 R15: 00007fff4a286ac0 [ 1668.502804][T28070] [ 1668.505810][T28070] Modules linked in: [ 1668.509805][T28070] CR2: 0000000000000170 [ 1668.514059][T28070] ---[ end trace 0dd605703a85a198 ]--- [ 1668.519493][T28070] RIP: 0010:ihold+0x26/0x60 [ 1668.523984][T28070] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 f1 ba b3 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 50 33 f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 71 [ 1668.544009][T28070] RSP: 0018:ffffc90000a27ce8 EFLAGS: 00010246 [ 1668.550076][T28070] RAX: ffff88811b6bcf00 RBX: 0000000000000000 RCX: ffff88811b6bcf00 [ 1668.558068][T28070] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 1668.566018][T28070] RBP: ffffc90000a27cf8 R08: 0000000000000004 R09: 0000000000000003 [ 1668.573971][T28070] R10: fffffbfff0e17a4c R11: 1ffffffff0e17a4c R12: 1ffff11027e16f16 [ 1668.581925][T28070] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1668.589880][T28070] FS: 0000555568045500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1668.598790][T28070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1668.605350][T28070] CR2: 0000000000000170 CR3: 00000001394e8000 CR4: 00000000003506a0 [ 1668.613309][T28070] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1668.621265][T28070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1668.629222][T28070] Kernel panic - not syncing: Fatal exception [ 1668.635513][T28070] Kernel Offset: disabled [ 1668.639860][T28070] Rebooting in 86400 seconds..